Skip to content
Dewee.sh Documentation

CLI Credential Adapters

.md

CLI Credential Adapters

Section titled “CLI Credential Adapters”

Dewee provides secure credential proxy adapters for command-line tools invoked by agents (internal/http/cli_credentials.go).

Supported Adapters

Section titled “Supported Adapters”
  • Git Credential Adapter: Injects scoped Personal Access Tokens or SSH keys for GitHub repositories without exposing raw secrets in prompt context.
  • Google Workspace CLI: Executes calendar, mail, and drive operations with scoped OAuth2 refresh tokens.

Git Identity and Config

Section titled “Git Identity and Config”

Each agent’s git identity and credentials are configured in CLI Credentials, not in .git/config or ~/.gitconfig. Set GIT_AUTHOR_NAME, GIT_AUTHOR_EMAIL, GIT_COMMITTER_NAME and GIT_COMMITTER_EMAIL as env on the agent’s git credential. Credentialed git ignores system and user git config, refuses a repository whose config runs programs (hooks, fsmonitor, aliases, includes), and agents cannot write files inside .git.

Credentials During Workspace Setup

Section titled “Credentials During Workspace Setup”

When the Super Agent sets up a CLI tool, you enter the credential in a secure setup card. It is written straight into the encrypted agent credential and the agent gets only a credential_ref. Granting or copying a credential (--credential-ref) always waits for your approval, and the agent cannot use secret file, environment or stdin flags.