@1medium/cli 1.9.2 → 1.10.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1medium/cli",
-  "version": "1.9.2",
+  "version": "1.10.0",
   "description": "CLI and MCP server for 1Medium AI task management",
   "main": "src/index.js",
   "bin": {

package/src/api.js

@@ -293,6 +293,31 @@ async function resumeScriptEvent(id) {
   return request("POST", `/script-events/${id}/resume`);
 }
 
+// ============================================================================
+// Script Secret API
+// ============================================================================
+
+/**
+ * List script secrets (keys only, no values)
+ */
+async function listSecrets() {
+  return request("GET", "/script-secrets");
+}
+
+/**
+ * Create or upsert a script secret
+ */
+async function createSecret(key, value) {
+  return request("POST", "/script-secrets", { key, value });
+}
+
+/**
+ * Delete a script secret by ID
+ */
+async function deleteSecret(id) {
+  return request("DELETE", `/script-secrets/${id}`);
+}
+
 module.exports = {
   whoami,
   createTask,
@@ -322,4 +347,7 @@ module.exports = {
   deleteScriptEvent,
   pauseScriptEvent,
   resumeScriptEvent,
+  listSecrets,
+  createSecret,
+  deleteSecret,
 };

package/src/index.js

@@ -975,6 +975,122 @@ scriptCmd
     }
   });
 
+// ============================================================================
+// Secret Commands
+// ============================================================================
+
+const secretCmd = program.command("secret").description("Manage script secrets");
+
+secretCmd
+  .command("set <key> <value>")
+  .description("Create or update a script secret")
+  .option("-j, --json", "Output as JSON")
+  .action(async (key, value, options) => {
+    try {
+      const data = await api.createSecret(key.toUpperCase(), value);
+      const secret = data.secret || data;
+
+      if (options.json) {
+        console.log(JSON.stringify(data, null, 2));
+      } else {
+        console.log(chalk.green("Secret saved:"));
+        console.log(`  Key: ${secret.key}`);
+        console.log(`  ID:  ${secret.id}`);
+      }
+    } catch (error) {
+      console.error(chalk.red(`Error: ${error.message}`));
+      process.exit(1);
+    }
+  });
+
+secretCmd
+  .command("list")
+  .description("List script secret keys (values are never shown)")
+  .option("-j, --json", "Output as JSON")
+  .action(async (options) => {
+    try {
+      const data = await api.listSecrets();
+      const secrets = data.secrets || data;
+
+      if (options.json) {
+        console.log(JSON.stringify(data, null, 2));
+      } else {
+        console.log(chalk.bold("\nScript Secrets:\n"));
+        if (!secrets.length) {
+          console.log("  No secrets stored.");
+        } else {
+          for (const secret of secrets) {
+            console.log(`  ${chalk.cyan(secret.key)}`);
+            console.log(chalk.gray(`    ID: ${secret.id}  Added: ${new Date(secret.createdAt).toLocaleDateString()}`));
+          }
+        }
+        console.log("");
+      }
+    } catch (error) {
+      console.error(chalk.red(`Error: ${error.message}`));
+      process.exit(1);
+    }
+  });
+
+secretCmd
+  .command("delete <key>")
+  .description("Delete a script secret by key name")
+  .option("-j, --json", "Output as JSON")
+  .action(async (key, options) => {
+    try {
+      // Look up secret by key name to get its ID
+      const data = await api.listSecrets();
+      const secrets = data.secrets || data;
+      const match = secrets.find((s) => s.key === key.toUpperCase());
+
+      if (!match) {
+        console.error(chalk.red(`Error: Secret "${key.toUpperCase()}" not found`));
+        process.exit(1);
+      }
+
+      const deleteData = await api.deleteSecret(match.id);
+
+      if (options.json) {
+        console.log(JSON.stringify(deleteData, null, 2));
+      } else {
+        console.log(chalk.green(`Secret deleted: ${key.toUpperCase()}`));
+      }
+    } catch (error) {
+      console.error(chalk.red(`Error: ${error.message}`));
+      process.exit(1);
+    }
+  });
+
+// Alias: `1m secrets` -> `1m secret list`
+program
+  .command("secrets")
+  .description("List script secrets (alias for 'secret list')")
+  .option("-j, --json", "Output as JSON")
+  .action(async (options) => {
+    try {
+      const data = await api.listSecrets();
+      const secrets = data.secrets || data;
+
+      if (options.json) {
+        console.log(JSON.stringify(data, null, 2));
+      } else {
+        console.log(chalk.bold("\nScript Secrets:\n"));
+        if (!secrets.length) {
+          console.log("  No secrets stored.");
+        } else {
+          for (const secret of secrets) {
+            console.log(`  ${chalk.cyan(secret.key)}`);
+            console.log(chalk.gray(`    ID: ${secret.id}  Added: ${new Date(secret.createdAt).toLocaleDateString()}`));
+          }
+        }
+        console.log("");
+      }
+    } catch (error) {
+      console.error(chalk.red(`Error: ${error.message}`));
+      process.exit(1);
+    }
+  });
+
 // ============================================================================
 // Config Commands
 // ============================================================================