Repository navigation
Restore Admin sign-in credentials after development restart - #123
Merged
Merged
Conversation
19 of 34 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Admin's development process starts without its required workload signing key because the package manifest declares no secret references. After reboot,
/app/redirects to sign-in, which returns 503 even though API and Identity discovery are healthy.Declare the existing
TREESEED_IDENTITY_WORKLOAD_PRIVATE_KEY→identity-admin-workloadreference through the manager's supported secret custody. This is the exact reference returned bytrsd host config show; the existing key, application identity and permissions remain authoritative. No credential value is embedded in YAML or test output.Validation: original missing-reference regression committed first in cc73fa8 fails against the original manifest. Final repair a69d95d, tree 8fe115bda757946f84c058b0b2aa73dc720398c9, preserves ordinary lineage. Complete Admin unit/integration/contract suite passes locally (185 tests, zero failed/skipped/todo, Node 24.6.0). Native Node 24.12.0 final verification pending.
The first declaration used the API browser-session credential id and was correctly rejected by the manager's configured-reference check; that intermediate failure and the correcting commit are retained. The existing user-login scene remains the end-to-end sign-in obligation and has not been claimed as passing. Operational integration uses the existing manager resolution and scoped Admin start/restart with normal TLS validation.
Tracked in treeseed-ai/sdk#424. No acceptance binding credit or coached completion is claimed.