Hanzo Dev b8235f55de fix: KMS on its own host (kms.<brand>), stable doctor probes ...

Live infra drift (gateway redeploy): api.hanzo.ai/v1/kms is NOT proxied (404),
and the bare /health path moved (/health 404, /v1/health 200). Two fixes:

- KMS runs on its dedicated host kms.<brand> (kms.hanzo.ai, per IAM's per-brand
  KMSHost). Added brand.kms + endpoints.kms (HANZO_KMS_URL override); KMS client
  targets it instead of api.hanzo.ai/v1/kms. Verified live: kms.hanzo.ai/v1/kms/
  orgs/hanzo/secrets → 401 (gated, live).
- doctor now probes the STABLE endpoints the tool actually depends on — IAM
  /.well-known/openid-configuration + api /v1/models — not a bare /health that
  varies by gateway config. Both 200.
- kms-secrets action base-url default → kms.hanzo.ai.

Release 1.0.6 (helper + @hanzo/kms + lux/zoo/zen forks).

2026-06-30 22:37:29 -07:00

..

actions/kms-secrets

fix: KMS on its own host (kms.<brand>), stable doctor probes

2026-06-30 22:37:29 -07:00

workflows

kms: use the canonical live KMS API, drop invented endpoints

2026-06-30 17:31:16 -07:00