feat(authbridge): credential placeholder swap (hide real tokens from the agent)#464

Merged

huang195 merged 22 commits into

rossoctl:mainfrom

huang195:feat/credential-placeholder-swap

Jun 3, 2026

Commits on Jun 2, 2026

docs(authbridge): add credential placeholder-swap design spec
huang195
committed
docs(authbridge): add credential placeholder-swap implementation plan
huang195
committed
feat(authbridge): add generic process-scoped TTL shared store
huang195
committed
feat(authbridge): add placeholder handle convention package
huang195
committed
feat(authbridge): expose SharedStore on the pipeline Context
huang195
committed
feat(authbridge): add placeholder mint mode to jwt-validation
huang195
committed
feat(authbridge): add placeholder resolve step to token-exchange
huang195
committed
feat(authbridge): propagate inbound Authorization mutation in reverseproxy
huang195
committed
feat(authbridge): expose shared store on forwardproxy outbound context
huang195
committed
feat(authbridge): propagate inbound Authorization mutation in extproc
huang195
committed
feat(authbridge): wire shared placeholder store into proxy, lite, and envoy
huang195
committed
docs(authbridge): document credential placeholder swap mode
huang195
committed
test(authbridge): add off-route no-leak and extproc body-path regression tests
huang195
committed
docs(authbridge): reconcile placeholder-swap spec with implementation
huang195
committed

Commits on Jun 3, 2026