kylon-cli 0.7.4-next.1025 → 0.7.4-next.1026

package/README.md

@@ -640,25 +640,18 @@ kylon workspace connection list --toolkit custom-api-key --scope-workspace <WORK
 kylon workspace connection run --connection <CONNECTION_ID> -- curl https://api.example.com/resource
 ```
 
-The `kylon workspace secret` noun is retired: every verb only prints its
-Connection replacement, accepts no secret value, and changes nothing.
-
-There is intentionally no top-level `kylon secret` command. The namespace
-selects the resource and identity without inspecting unrelated local credential
-state:
-
-- Use `kylon workspace connection list|create|credential set|access request|run`
-  for API-key Connections with browser authorization; the retired
-  `kylon workspace secret` verbs only print those replacements.
-- Use `kylon gateway secret list|delete --agent <agent-id>` for agent-local
-  records, authenticated by this installation's saved runtime credential
-  through agent-scoped runtime routes. There is no `set`: a credential is
-  stored as a Custom API Service from the agent's setup card or from
-  Connections in Kylon, and the agent reads it from its environment.
-
-This separation prevents browser credentials from reaching the
-daemon-authenticated secret endpoints and avoids state-dependent command
-routing.
+Use `kylon workspace connection list|create|credential set|access request|run`
+for API-key Connections. There is no secret command any more:
+
+- There is intentionally no top-level `kylon secret` command.
+- The `kylon workspace secret` noun is retired: every verb only prints its
+  Connection replacement, accepts no secret value, and changes nothing.
+- `kylon gateway secret` is retired too: an agent keeps no secrets of its
+  own, so `list`, `set` and `delete` make no request and only print the
+  Connection command that replaced them. A credential is stored as a Custom
+  API Service from the agent's setup card or from Connections in Kylon, the
+  agent reads it from its environment, and the person who manages the
+  service removes it.
 
 ```bash
 kylon auth logout --workspace <WORKSPACE_ID>

package/dist/kylon-bundle.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.7.4-next.1025",
-  "fingerprint": "c6a84b277c88492efc8589a49ae22ecfa3bd1df062a038aaca9b7bbd91fdcd2e",
-  "source_commit": "e960c300c156301669a800c2b9418b6b1c7ee3f1"
+  "version": "0.7.4-next.1026",
+  "fingerprint": "539f1c3bb85d455db181513246a3e80703af9160272a059ecaff047550ea4dd9",
+  "source_commit": "7c198e8c2dd05a18323f253bb71a9904026fdee7"
 }