Skip to content

fix(cli): harden secrets upserts - #1234

Merged
Aaronontheweb merged 1 commit into
netclaw-dev:devfrom
Aaronontheweb:fix/secrets-upsert-repair
May 30, 2026
Merged

fix(cli): harden secrets upserts#1234
Aaronontheweb merged 1 commit into
netclaw-dev:devfrom
Aaronontheweb:fix/secrets-upsert-repair

Conversation

@Aaronontheweb

Copy link
Copy Markdown
Collaborator

Summary

  • Deep-merge wizard-contributed secrets so rerunning netclaw init overwrites explicitly entered secret values while preserving unrelated keys.
  • Normalize netclaw secrets key paths across . and : delimiters, remove literal colon-key collisions, and support secrets add as an alias for set.
  • Skip startup update config loading for netclaw secrets repair commands.
  • Update the operations skill with secret rotation guidance.

Closes #1232
Closes #1233

Validation

  • dotnet test src/Netclaw.Cli.Tests/Netclaw.Cli.Tests.csproj --filter "FullyQualifiedName~SecretsCommandTests|FullyQualifiedName~WizardConfigBuilderTests|FullyQualifiedName~UpdateCommandTests"
  • dotnet test src/Netclaw.Cli.Tests/Netclaw.Cli.Tests.csproj
  • dotnet slopwatch analyze
  • pwsh ./scripts/Add-FileHeaders.ps1 -Verify
  • git diff --check

Validation blockers

  • ./evals/run-evals.sh could not start because eval target environment variables are not set in this non-interactive shell.
  • ./scripts/smoke/run-smoke.sh init-wizard built CLI and daemon binaries, then stopped while trying to install Ollama via sudo; this shell cannot provide a sudo password.

@Aaronontheweb
Aaronontheweb force-pushed the fix/secrets-upsert-repair branch from 709ea66 to ea7d2db Compare May 30, 2026 01:43
@Aaronontheweb Aaronontheweb added the config Configuration issues, netclaw doctor, schema validation. label May 30, 2026

@Aaronontheweb Aaronontheweb left a comment

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Aaronontheweb
Aaronontheweb merged commit d07c636 into netclaw-dev:dev May 30, 2026
14 checks passed
@Aaronontheweb
Aaronontheweb deleted the fix/secrets-upsert-repair branch May 30, 2026 02:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

config Configuration issues, netclaw doctor, schema validation.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

netclaw init should overwrite existing secrets when re-run netclaw secrets should normalize colon paths and remain usable for secret repair

1 participant