ScadaBridge

dohertj2/ScadaBridge

Fork 0

Commit Graph

Author	SHA1	Message	Date
Joseph Doherty	e2f433e849	feat(cli): read secret-bearing option values from a file or stdin (#137 ) Every CLI option that can carry a secret gets a `--<name>-file <path\|->` sibling ('-' reads stdin), so the value stays out of the process list and shell history: --password-file (global), --primary-config-file / --backup-config-file (data-connection create\|update), --auth-config-file (external-system create\|update), --connection-string-file (db-connection create\|update), --credentials-file (notification smtp create\|update) and --auth-token-file (notification sms create\|update). Follows the existing --config-file convention; `@path` is avoided because System.CommandLine expands @-tokens as response files. The value is read at parse time; a missing/unreadable/empty source, or '-' on a terminal stdin, is a parse error naming option + path only, never the content. Inline and file forms are mutually exclusive, at most one option may read stdin, and one trailing line break is stripped. Inline forms keep working. docker/seed-sites.sh and docker-env2/seed-sites.sh now write the MxGateway config (windev gateway key) to a mode-600 temp file removed by an EXIT trap and pass --primary-config-file; seed-flow-outbound-demo.sh pipes its rig connection string via --connection-string-file -. CLI README (new "Secrets from a file or stdin" section + per-command tables), Component-CLI.md and both docker READMEs updated. Claude-Session: https://claude.ai/code/session_01GT67ACmpMR7b9LGRPLijMi	2026-11-13 00:46:17 -05:00
Joseph Doherty	3c9f9da818	feat(flow-debugger): outbound calls on the External lane — CLI projection, specs, rig demo + verification step I CLI flow-debug table now projects through FlowGraphBuilder (one row per step, outbound lifecycles folded, new 'lifecycle' column; per-event fallback kept). Specs: Component-CentralUI (four lanes, node anatomy, pending refresh), Component-AuditLog (central method-script Database.* now audited; replay reads the three outbound channels), Component-InboundAPI (DbOutbound row per helper call), Component-ScriptAnalysis (REQ-SA-7 kinds + Async edges), design doc v1.1 status line, CLAUDE.md bullet, deferred-work register row 111 (Retry/ Discard + ?correlationId= deep links deferred). Rig: seed-flow-outbound-demo.sh (RigRest/RigDb/FlowDemo + OutboundDemo script + FlowOutboundDemo method/key) and verify-delmia-notifier.sh step I (live rows inline, replay until terminal). Rig verification result follows in its own commit. Claude-Session: https://claude.ai/code/session_01NcMG6xXdsJbmD2wYAgkK29	2026-09-06 02:10:50 -04:00

Author

SHA1

Message

Date

Joseph Doherty

e2f433e849

feat(cli): read secret-bearing option values from a file or stdin (#137 )

Every CLI option that can carry a secret gets a `--<name>-file <path|->`
sibling ('-' reads stdin), so the value stays out of the process list and
shell history: --password-file (global), --primary-config-file /
--backup-config-file (data-connection create|update), --auth-config-file
(external-system create|update), --connection-string-file (db-connection
create|update), --credentials-file (notification smtp create|update) and
--auth-token-file (notification sms create|update). Follows the existing
--config-file convention; `@path` is avoided because System.CommandLine
expands @-tokens as response files.

The value is read at parse time; a missing/unreadable/empty source, or '-'
on a terminal stdin, is a parse error naming option + path only, never the
content. Inline and file forms are mutually exclusive, at most one option
may read stdin, and one trailing line break is stripped. Inline forms keep
working.

docker/seed-sites.sh and docker-env2/seed-sites.sh now write the MxGateway
config (windev gateway key) to a mode-600 temp file removed by an EXIT trap
and pass --primary-config-file; seed-flow-outbound-demo.sh pipes its rig
connection string via --connection-string-file -. CLI README (new "Secrets
from a file or stdin" section + per-command tables), Component-CLI.md and
both docker READMEs updated.

Claude-Session: https://claude.ai/code/session_01GT67ACmpMR7b9LGRPLijMi

2026-11-13 00:46:17 -05:00

Joseph Doherty

3c9f9da818

feat(flow-debugger): outbound calls on the External lane — CLI projection, specs, rig demo + verification step I

CLI flow-debug table now projects through FlowGraphBuilder (one row per step,
outbound lifecycles folded, new 'lifecycle' column; per-event fallback kept).
Specs: Component-CentralUI (four lanes, node anatomy, pending refresh),
Component-AuditLog (central method-script Database.* now audited; replay reads
the three outbound channels), Component-InboundAPI (DbOutbound row per helper
call), Component-ScriptAnalysis (REQ-SA-7 kinds + Async edges), design doc
v1.1 status line, CLAUDE.md bullet, deferred-work register row 111 (Retry/
Discard + ?correlationId= deep links deferred). Rig: seed-flow-outbound-demo.sh
(RigRest/RigDb/FlowDemo + OutboundDemo script + FlowOutboundDemo method/key)
and verify-delmia-notifier.sh step I (live rows inline, replay until terminal).
Rig verification result follows in its own commit.

Claude-Session: https://claude.ai/code/session_01NcMG6xXdsJbmD2wYAgkK29

2026-09-06 02:10:50 -04:00

2 Commits