Mint the session token with -entity-alias from OPENBAO_SESSION_ENTITY so
{{identity.entity.id}} resolves and the session can read humans/self (read-only)
in addition to shared/*. Document the claude-session policy with humans/self.
Bump 0.1.1.
Co-Authored-By: Claude <noreply@anthropic.com>
8 lines
236 B
JSON
8 lines
236 B
JSON
{
|
|
"name": "openbao-session",
|
|
"version": "0.1.1",
|
|
"description": "Provisions a short-lived OpenBao session token for interactive agent sessions.",
|
|
"author": { "name": "Senkensha" },
|
|
"hooks": "./hooks/claude-codex-hooks.json"
|
|
}
|