v0.7.0

Infisical/agent-vaultv0.7.0Apr 16, 2026by github-actions[bot]

AI Summary

This is the initial release focusing on core proxy functionality, introducing the transparent MITM proxy on port 14322, credential injection, and comprehensive TypeScript SDK support for vault and service management.

Key Highlights

Added transparent MITM proxy enabled by default on port 14322
Added credential injection + auth to MITM proxy
Added comprehensive TypeScript SDK for vault, credentials, proxy, and services
Added software-backed CA package for transparent proxy
Added agent-vault ca fetch command for CA retrieval

New Features

Log level flag (--log-level) with structured per-request proxy logs
Credential injection to MITM proxy
TypeScript SDK for credential management
TypeScript SDK for proxy request methods
Service management via CLI, HTTP API, and TypeScript SDK
Software-backed CA package
Transparent MITM proxy loop for HTTPS_PROXY ingress
Vault create and delete in TypeScript SDK
Default MITM proxy on port 14322
CA fetch command (agent-vault ca fetch)

Full Release Notes

## Changelog
* 79b3aa4c108fefaccb773601eb7183dd4cf0b2dc feat: add --log-level flag + structured per-request proxy logs (#74)
* d8967a7c3a53c0c12fa3fc935e36fd482d378535 feat: add credential injection + auth to MITM proxy via shared brokercore (#71)
* eded5f1fdc4b04e379d43879996ce9bbb75b69e0 feat: add credential management to TypeScript SDK (#65)
* f35f0ed19ecfcf05e182a568d3c13cf0b3d7b8a8 feat: add proxy request methods to TypeScript SDK (#67)
* 875ff496544576bc1c86c227cce4a22386ca5926 feat: add service management via CLI, HTTP API, and TypeScript SDK (#66)
* 1b5ecbe15cb48fd700d6ae18f110435493674ee8 feat: add software-backed CA package for transparent proxy groundwork (#69)
* b73949d5b41831b508dfe3950cd193bd75314e4a feat: add transparent MITM proxy loop for HTTPS_PROXY ingress (#70)
* 43a4838fe268297062c61eb26bdfc3dce9074e85 feat: add vault create and delete to TypeScript SDK (#64)
* cfa2a69181d3b8822cc1af1e99b7ed48bd6040fd feat: enable transparent MITM proxy by default on port 14322 (#73)
* 2f9b7aa0ee4c2956c6ccee1caf41499acb7d8181 feat: expose transparent-proxy root CA via public endpoint + `agent-vault ca fetch` (#72)

## Verify

```bash
# Verify checksum
sha256sum --check checksums.txt

# Verify signature (requires cosign)
cosign verify-blob \
  --bundle checksums.txt.bundle \
  --certificate-identity-regexp "github.com/Infisical/agent-vault" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt
```