Grecos Workspace

Navigation remains inside site context. Existing modules are embedded as workspace sections, not unrelated global jumps.

Secrets & Credentials Vault

Placeholder vault contract for deployment adapters. No real credentials are stored. No plaintext is displayed after creation.

Supported secret types

10 types

Storage policy

No plaintext returned after creation

Runtime policy

Adapters resolve only during deployment execution

Label	Type	Provider	Status	Vault reference	Actions
Grecos DirectAdmin API placeholder	directadmin_api	directadmin	active	`vault://nubflow/org_nubdesigns/ws_grecos/site_grecos/directadmin/sec_grecos_directadmin_placeholder_001`	Add placeholder Rotate placeholder Revoke placeholder
Grecos SFTP publishing placeholder	sftp	sftp	active	`vault://nubflow/org_nubdesigns/ws_grecos/site_grecos/sftp/sec_grecos_sftp_placeholder_001`	Add placeholder Rotate placeholder Revoke placeholder
Future Cloudflare DNS placeholder	cloudflare_api	cloudflare	revoked	`vault://nubflow/org_nubdesigns/ws_grecos/site_grecos/cloudflare/sec_grecos_cloudflare_placeholder_001`	Add placeholder Rotate placeholder Revoke placeholder

Target	Adapter	Credential ref	Policy
env_grecos_prod	directadmin	`vault://nubflow/org_nubdesigns/ws_grecos/site_grecos/directadmin/sec_grecos_directadmin_placeholder_001`	resolve only inside deployment worker; never returned to UI
env_grecos_prod	sftp	`vault://nubflow/org_nubdesigns/ws_grecos/site_grecos/sftp/sec_grecos_sftp_placeholder_001`	resolve only inside deployment worker; never returned to UI

GET /v1/secrets

metadata list; encrypted_payload is masked; plaintext never returned

POST /v1/secrets

secret metadata and vault reference only after creation

PATCH /v1/secrets/{id}/rotate

new secret_version and same credentials_reference unless target ref is changed

PATCH /v1/secrets/{id}/revoke

status=revoked; runtime resolution denied

GET /v1/secrets/{id}/usage

deployment targets/adapters referencing credentials_reference

Audit events: secret_created · secret_rotated · secret_revoked · secret_used_by_deployment · secret_access_denied

global_component_release — Global Header edited once and published to referenced Home, Contact, and Dinner Menu pages 2026-06-11T19:03:03Z

rendered_release — Runtime Renderer generated deployable Grecos release package 2026-06-10T18:10:00Z

rollback — Release rolled back 2026-06-10T15:09:00Z

release — Release created 2026-06-10T15:07:00Z

draft_save — Draft saved 2026-06-10T15:05:00Z

form_edit — Reservation form modified 2026-06-10T15:04:00Z

media_change — Menu image replaced 2026-06-10T15:02:00Z

content_edit — Menu price changed 2026-06-10T15:00:00Z

analytics_review — Analytics dashboard reviewed for operational activity 2026-06-10T14:00:00Z

content_edit — Spanakopita price updated in structured content 2026-06-10T13:00:00Z

media_change — Hero image focal point adjusted 2026-06-10T13:05:00Z

form_submission — Reservation Request received from Jason 2026-06-10T13:10:00Z

release — Published form and menu changes 2026-06-10T13:15:00Z

rollback — Rollback restored release rel_grecos_001 2026-06-10T13:20:00Z

page_edit — Home hero heading draft saved 2026-06-10T13:25:00Z

design_system_update — Design System & Theme Manager V1 added centralized design tokens and global style references 2026-06-11T19:19:01Z