v0.5.0

Infisical/agent-vaultv0.5.0Apr 10, 2026by github-actions[bot]

AI Summary

Major CLI restructuring involving singular nouns and auth subcommands, plus new vault binding and credential visibility features.

Key Highlights

  • CLI subcommands renamed to singular nouns (e.g., vault credential)
  • Login and register commands moved under auth subcommand
  • New vault init command to bind directories to a vault
  • Credentials now readable by members and admins

Breaking Changes

  • CLI subcommands renamed to singular nouns
  • Login and register moved under auth

New Features

  • Vault init command
  • --role flag for vault run
  • Credential get and list --reveal
  • CLI install screen
  • Resend verification code endpoint
  • Rename policies/rules to services

Full Release Notes

## Breaking Changes

* **CLI subcommands renamed to singular nouns** — e.g. `vault credentials` → `vault credential`, `vault agents` → `vault agent` (#41)
* **`login` and `register` moved under `auth`** — `agent-vault login` → `agent-vault auth login`, `agent-vault register` → `agent-vault auth register` (#36)

## Features

* `vault init` — bind a directory to a vault via `agent-vault.json` (#37)
* `--role` flag for `vault run` — specify vault role when launching an agent (#40)
* Vault credentials readable by members and admins via `credential get` / `credential list --reveal` (#39)
* CLI install screen in post-registration onboarding flow (#38)
* Resend verification code endpoint and UI (#25)
* Rename policies/rules to services (#26)

## Fixes

* URL-encode user-supplied path segments in CLI API calls

## Dependencies

* Bump vite 6.4.1 → 6.4.2 (security) (#35)
* Bump modernc.org/sqlite 1.48.0 → 1.48.1 (#34)
* Bump @tanstack/react-router 1.168.8 → 1.168.10 (#33)
* Bump github.com/jedib0t/go-pretty/v6 6.7.8 → 6.7.9 (#32)
* Bump actions/setup-go 6.3.0 → 6.4.0 (#31)
* Bump docker/setup-buildx-action 3.10.0 → 4.0.0 (#30)
* Bump docker/login-action 3.4.0 → 4.1.0 (#29)
* Bump docker/setup-qemu-action 3.6.0 → 4.0.0 (#28)

## Verify

```bash
# Verify checksum
sha256sum --check checksums.txt

# Verify signature (requires cosign)
cosign verify-blob \
  --bundle checksums.txt.bundle \
  --certificate-identity-regexp "github.com/Infisical/agent-vault" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt
```