Skip to content

ci: map AGENT_CLI Privy testnet secrets (#39) #58

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
joeblau merged 1 commit into from
Oct 18, 2026
Merged

ci: map AGENT_CLI Privy testnet secrets (#39) #58

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .github/workflows/e2e.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,9 +17,9 @@ jobs:
BLOXWAP_E2E: '1'
# This wallet and Privy app belong to disposable company CI, never users.
BLOXWAP_TEST_ACCOUNT_ONLY: '1'
BLOXWAP_TEST_MASTER_KEY: ${{ secrets.BLOXWAP_TEST_MASTER_KEY }}
BLOXWAP_PRIVY_APP_ID: ${{ secrets.BLOXWAP_PRIVY_APP_ID }}
BLOXWAP_PRIVY_APP_SECRET: ${{ secrets.BLOXWAP_PRIVY_APP_SECRET }}
BLOXWAP_TEST_MASTER_KEY: ${{ secrets.AGENT_CLI_TEST_MASTER_KEY }}
BLOXWAP_PRIVY_APP_ID: ${{ secrets.AGENT_CLI_PRIVY_APP_ID }}
BLOXWAP_PRIVY_APP_SECRET: ${{ secrets.AGENT_CLI_PRIVY_APP_SECRET }}
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
Expand Down
6 changes: 4 additions & 2 deletions docs/PROGRESS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -82,5 +82,7 @@ This is release preparation; public npm installation is still pending.
separate disposable CI signer, with fifteen evidence-checked stages, correlated
events and interrupted-rotation cleanup. Runner shutdown is confirmed before
journal export. Build, lint, typecheck, 229 offline CLI tests, docs checks and the
static docs build pass. The `testnet` environment still needs QA configuration;
no credentialed lifecycle or independent coding-agent session is claimed.
static docs build pass. Nightly CI maps `AGENT_CLI_TEST_MASTER_KEY`, `AGENT_CLI_PRIVY_APP_ID` and
`AGENT_CLI_PRIVY_APP_SECRET` from the `testnet` environment onto the harness
`BLOXWAP_*` variables. Live journals and the independent coding-agent session
are still not claimed.
10 changes: 6 additions & 4 deletions docs/testnet.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,11 +70,13 @@ disposable company test wallet and company QA Privy app:

| Secret | Purpose |
| --- | --- |
| `BLOXWAP_TEST_MASTER_KEY` | CI-only signer for the disposable testnet account |
| `BLOXWAP_PRIVY_APP_ID` | Dedicated test Privy app ID |
| `BLOXWAP_PRIVY_APP_SECRET` | Dedicated test Privy app secret |
| `AGENT_CLI_TEST_MASTER_KEY` | CI-only signer for the disposable testnet account |
| `AGENT_CLI_PRIVY_APP_ID` | Dedicated test Privy app ID |
| `AGENT_CLI_PRIVY_APP_SECRET` | Dedicated test Privy app secret |

This mode requires `CI=true` or `CI=1`, both explicit test flags, and no external
The workflow maps those GitHub secrets onto `BLOXWAP_TEST_MASTER_KEY`,
`BLOXWAP_PRIVY_APP_ID` and `BLOXWAP_PRIVY_APP_SECRET` for the harness. This mode
requires `CI=true` or `CI=1`, both explicit test flags, and no external
signer variables. Its key is removed from CLI child process environments. It is
not a production CLI key-import feature. Missing secrets fail the nightly job.

Expand Down
Loading