fix(secrets): recover encrypted tokens on all backends

2026-07-22 17:31:39 +00:00
parent c435e9088e
commit 89058fbaec
25 changed files with 517 additions and 57 deletions
@@ -22,6 +22,9 @@ class FirecrackerBottlePlan(BottlePlan):
    # (egress proxy credentials, git-gate/supervise headers); set by launch
    # from the orchestrator registration. Empty pre-registration.
    identity_token: str = ""
+    # Applied to every agent SSH exec and mirrored into /run inside the VM so
+    # the host can recover it after the infra VM restarts.
+    env_var_secret: str = ""

    @property
    def container_name(self) -> str: