- audit.proto: AuditService with Append RPC, AuditEntry, AuditAction enum - secrets.proto: SecretsService with GetSecret RPC - memory.proto: MemoryService with QueryMemory (streaming), WriteMemory, GetCorrelated - model_gateway.proto: ModelGatewayService with StreamInference, Inference, GenerateEmbedding, IsModelReady - search.proto: SearchService with Search RPC, SearchResult - tool_broker.proto: ToolBrokerService with DiscoverTools, ExecuteTool (streaming), ValidateCall - orchestrator.proto: OrchestratorService with ProcessRequest (streaming) All protos pass buf lint and buf build. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1.2 KiB
1.2 KiB
Implementation Plan — Issue #10: Define secrets.proto
Metadata
| Field | Value |
|---|---|
| Issue | #10 |
| Title | Define secrets.proto |
| Milestone | Phase 1: Proto Definitions |
| Labels | type:feature, priority:critical, lang:protobuf, service:secrets |
| Status | COMPLETED |
| Language | Protobuf |
| Related Plans | issue-008.md |
| Blocked by | #8 (completed) |
Acceptance Criteria
- SecretsService with GetSecret RPC defined
- Request includes SessionContext and secret_name
- Response returns credential value
- Proto compiles without errors
Architecture Analysis
Credential retrieval only via Linux Secret Service API. SecretsService exposes a single GetSecret RPC -- no list or write RPCs are exposed. Only the Tool Broker is authorized to call this service. The response returns the credential value directly; it is never exposed in logs or agent context.
Files to Create/Modify
| File | Action | Purpose |
|---|---|---|
proto/llm_multiverse/v1/secrets.proto |
Modify | Define SecretsService and GetSecret request/response types |
Deviation Log
(No deviations)