feat(config): add OmniVault integration and config file loading

- Add OmniVault integration for unified secret management
  - config/omnivault.go: SecretsClient with env, aws-sm, aws-ssm, memory providers
  - Auto-detect AWS environment (ECS, Lambda, EC2)
  - Fallback to environment variables when secrets not found

- Add config file loading from JSON/YAML
  - config/file.go: ConfigFile struct and LoadConfigFile() function
  - Search path: config.json → ~/.agentplexus/projects/{project}/config.json
  - Defaults() and MergeEnv() for layered configuration

- Add Load(ctx, LoadOptions) unified config loading function
  - Reads settings from config.json
  - Loads secrets from OmniVault provider
  - Environment variable overrides

- Update SecureConfig with OmniVault support
  - WithSecretsProvider(), WithAWSSecretsManager(), WithAutoSecretsProvider() options
  - OmniVault as primary secrets source with VaultGuard fallback

- Add documentation
  - docsrc/configuration/secrets.md: OmniVault usage guide
  - docsrc/configuration/credentials.md: ~/.agentplexus directory structure

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: grokify

CHANGELOG.json

@@ -3,6 +3,27 @@
   "project": "agentkit",
   "repository": "https://github.com/agentplexus/agentkit",
   "releases": [
+    {
+      "version": "0.3.0",
+      "date": "2026-01-04",
+      "added": [
+        { "description": "OmniVault integration for unified secret management (`config/omnivault.go`)" },
+        { "description": "Config file loading from JSON/YAML (`config/file.go`)" },
+        { "description": "`Load(ctx, LoadOptions)` function for unified config loading" },
+        { "description": "`SecretsClient` type with support for `env`, `aws-sm`, `aws-ssm`, `memory` providers" },
+        { "description": "Auto-detection of AWS environment (ECS, Lambda, EC2)" },
+        { "description": "`ConfigFile` struct for structured configuration from config.json" },
+        { "description": "`GetSecret(ctx, name)` method on Config for secret retrieval" },
+        { "description": "Protocol configuration for agents (`HTTP`, `MCP`, `A2A`)" },
+        { "description": "Authorization configuration (`AuthorizerConfig` type)" },
+        { "description": "Memory support for stateful agents (`EnableMemory` field)" },
+        { "description": "Gateway configuration for multi-agent routing (`GatewayConfig` type)" }
+      ],
+      "changed": [
+        { "description": "`SecureConfig` now supports OmniVault as primary secrets source" },
+        { "description": "Added `WithSecretsProvider()`, `WithAWSSecretsManager()`, `WithAutoSecretsProvider()` options" }
+      ]
+    },
     {
       "version": "0.2.0",
       "date": "2025-12-31",

CHANGELOG.md

@@ -6,23 +6,26 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html),
 and this changelog is generated by [Structured Changelog](https://github.com/grokify/structured-changelog).
 
-## [Unreleased]
-
 ## [0.3.0] - 2026-01-04
 
 ### Added
 
+- OmniVault integration for unified secret management (`config/omnivault.go`)
+- Config file loading from JSON/YAML (`config/file.go`)
+- `Load(ctx, LoadOptions)` function for unified config loading
+- `SecretsClient` type with support for `env`, `aws-sm`, `aws-ssm`, `memory` providers
+- Auto-detection of AWS environment (ECS, Lambda, EC2)
+- `ConfigFile` struct for structured configuration from config.json
+- `GetSecret(ctx, name)` method on Config for secret retrieval
 - Protocol configuration for agents (`HTTP`, `MCP`, `A2A`)
 - Authorization configuration (`AuthorizerConfig` type)
 - Memory support for stateful agents (`EnableMemory` field)
 - Gateway configuration for multi-agent routing (`GatewayConfig` type)
-- `ValidProtocols()` helper function
-- `ValidAuthorizerTypes()` helper function
 
 ### Changed
 
-- Enhanced validation for protocol and authorizer fields
-- Gateway targets validated against defined agent names
+- `SecureConfig` now supports OmniVault as primary secrets source
+- Added `WithSecretsProvider()`, `WithAWSSecretsManager()`, `WithAutoSecretsProvider()` options
 
 ## [0.2.0] - 2025-12-31
 
@@ -56,7 +59,6 @@ and this changelog is generated by [Structured Changelog](https://github.com/gro
 
 - Remove unused error return from `loadSecureCredentials`
 
-[unreleased]: https://github.com/agentplexus/agentkit/compare/v0.3.0...HEAD
 [0.3.0]: https://github.com/agentplexus/agentkit/compare/v0.2.0...v0.3.0
 [0.2.0]: https://github.com/agentplexus/agentkit/compare/v0.1.0...v0.2.0
 [0.1.0]: https://github.com/agentplexus/agentkit/releases/tag/v0.1.0

ROADMAP.md

@@ -2,6 +2,15 @@
 
 This document outlines the development roadmap for agentkit and its companion modules.
 
+## Completed (v0.3.0)
+
+- [x] OmniVault integration for unified secret management
+- [x] Config file loading from JSON/YAML (`config/file.go`)
+- [x] `Load(ctx, LoadOptions)` unified config loading function
+- [x] Auto-detection of AWS environment (ECS, Lambda, EC2)
+- [x] Protocol configuration for agents (HTTP, MCP, A2A)
+- [x] Authorization and gateway configuration
+
 ## Completed (v0.2.0)
 
 - [x] IaC configuration package (`platforms/agentcore/iac/`)
@@ -55,5 +64,6 @@ Contributions are welcome! If you're interested in working on any roadmap item:
 
 - **v0.1.0** - Initial release with AgentCore runtime support
 - **v0.2.0** - IaC support (CDK, Pulumi, CloudFormation)
-- **v0.3.0** - Terraform modules (planned)
-- **v0.4.0** - ECS/Fargate support (planned)
+- **v0.3.0** - OmniVault integration, config file loading
+- **v0.4.0** - Terraform modules (planned)
+- **v0.5.0** - ECS/Fargate support (planned)