@agentsky/sky 2.9.1 → 2.9.2

package/dist/{chunk-YN7PUNIB.js → chunk-MLIZJSMO.js}

@@ -20959,13 +20959,19 @@ function splitMcpServers(servers) {
   const kept = {};
   const dropped = [];
   for (const [name, def] of Object.entries(servers)) {
-    const hasEnvValues = Object.values(def.env ?? {}).some((v) => String(v).trim() !== "");
+    const envEntries = Object.entries(def.env ?? {}).filter(([, v]) => String(v).trim() !== "");
+    const hasEnvValues = envEntries.length > 0;
     const hasAuthHeaders = Object.keys(def.headers ?? {}).some(
       (h) => h.toLowerCase() !== "content-type"
     );
     const hasTokenShape = containsCredentialShapedString(JSON.stringify(def));
-    if (hasEnvValues || hasAuthHeaders || hasTokenShape) dropped.push(name);
-    else kept[name] = def;
+    if (hasEnvValues || hasAuthHeaders || hasTokenShape) {
+      dropped.push({
+        name,
+        envKeys: envEntries.map(([k]) => k),
+        ...typeof def.url === "string" && def.url ? { url: def.url } : {}
+      });
+    } else kept[name] = def;
   }
   return { kept, dropped };
 }
@@ -21904,7 +21910,6 @@ var GATEWAY_CAPABILITY_IDS = [
   "googlemap.geocode",
   "googlemap.places",
   "agentmail.list-inboxes",
-  "social-boost.catalog",
   "tinyfish.search",
   "tinyfish.profile-list",
   "meta.transcribe",
@@ -21915,9 +21920,19 @@ var GATEWAY_CAPABILITY_IDS = [
   "fish-audio.tts",
   "google.image",
   "openai.image-2.5",
-  "wan.image"
+  "wan.image",
+  "logo.lookup",
+  "openmeteo.weather",
+  "frankfurter.fx",
+  "dictionary.define",
+  "openlibrary.search",
+  "googledns.resolve",
+  "qrserver.create"
+];
+var RETIRED_CAPABILITY_IDS = [
+  "social-boost.catalog"
 ];
-var CAPABILITY_IDS = [...LEGACY_CAPABILITY_IDS, ...GATEWAY_CAPABILITY_IDS];
+var CAPABILITY_IDS = [...LEGACY_CAPABILITY_IDS, ...GATEWAY_CAPABILITY_IDS, ...RETIRED_CAPABILITY_IDS];
 var PLATFORM_CAPABILITY_IDS = ["platform.orchestration"];
 var allowedLlms = {
   jev: ["typesafe/jev-1.13"],

package/dist/index.js

@@ -16,7 +16,7 @@ import {
   skillRefSchema,
   splitMcpServers,
   supersededBy
-} from "./chunk-YN7PUNIB.js";
+} from "./chunk-MLIZJSMO.js";
 
 // src/index.ts
 import { existsSync as existsSync7, readFileSync as readFileSync10, writeFileSync as writeFileSync6 } from "fs";
@@ -64,7 +64,7 @@ function currentUniverse() {
 }
 
 // src/version.ts
-var CLI_VERSION = "2.9.1";
+var CLI_VERSION = "2.9.2";
 var USER_AGENT = `sky-cli/${CLI_VERSION} (${process.platform}; node/${process.versions.node})`;
 
 // src/api.ts
@@ -185,7 +185,7 @@ async function resolveSessionRef(ref) {
   return agent2.defaultSessionId;
 }
 async function* streamEvents(sessionId, signal) {
-  const { parseSseStream } = await import("./src-QFDLKCFY.js");
+  const { parseSseStream } = await import("./src-QYXD7WXR.js");
   const res = await fetch(
     `${apiBase()}/sessions/${encodeURIComponent(sessionId)}/stream`,
     {
@@ -559,7 +559,19 @@ function readClaudeCode() {
     }
   }
   const { prompt, truncated } = assemblePrompt(parts);
-  const { kept, dropped } = splitMcpServers(claudeMcpServers());
+  const allServers = claudeMcpServers();
+  const { kept, dropped } = splitMcpServers(allServers);
+  const secretCandidates = [];
+  for (const d of dropped) {
+    const def = allServers[d.name];
+    if (!def?.env) continue;
+    for (const key of d.envKeys) {
+      const value = def.env[key];
+      if (value !== void 0 && value.trim()) {
+        secretCandidates.push({ serverName: d.name, envKey: key, value, url: d.url });
+      }
+    }
+  }
   return {
     harness: "claude_code",
     configRoot,
@@ -568,7 +580,8 @@ function readClaudeCode() {
     truncated,
     model: claudeModel(configRoot),
     keptServers: kept,
-    droppedServers: dropped
+    droppedServers: dropped,
+    secretCandidates
   };
 }
 function detectHarness(explicit) {
@@ -602,6 +615,79 @@ function writeLink(configRoot, link) {
   writeFileSync3(linkPath(configRoot), `${JSON.stringify(link, null, 2)}
 `);
 }
+var DEFAULT_VAULT_NAME = "default";
+async function fetchDefaultVaultId() {
+  const { vaults } = await api(
+    "GET",
+    "/vaults"
+  );
+  return vaults.find((v) => v.display_name === DEFAULT_VAULT_NAME)?.id ?? null;
+}
+async function ensureDefaultVaultId() {
+  const existing = await fetchDefaultVaultId();
+  if (existing) return existing;
+  try {
+    const { vault } = await api("POST", "/vaults", {
+      display_name: DEFAULT_VAULT_NAME
+    });
+    return vault.id;
+  } catch (error) {
+    if (error instanceof ApiError && error.status === 409) {
+      const raced = await fetchDefaultVaultId();
+      if (raced) return raced;
+    }
+    throw error;
+  }
+}
+async function confirmAndVaultSecrets(candidates, yes) {
+  if (!candidates.length) return;
+  if (yes) {
+    console.log(
+      `  ${candidates.length} secret${candidates.length === 1 ? "" : "s"} from dropped MCP servers not saved (--yes skips vault confirmation).`
+    );
+    return;
+  }
+  console.log("\nSecret-bearing MCP servers were left out of the clone payload.");
+  console.log("You can save their keys to your workspace vault now (values are sent encrypted, never displayed).\n");
+  let vaultId;
+  let saved = 0;
+  let skipped = 0;
+  for (const c of candidates) {
+    const chosen = await confirm(`  Add ${c.envKey} (from ${c.serverName}) to your default vault?`);
+    if (!chosen) {
+      console.log(`  \u2014 skipped ${c.envKey}`);
+      skipped += 1;
+      continue;
+    }
+    try {
+      vaultId ??= await ensureDefaultVaultId();
+      await api("POST", `/vaults/${encodeURIComponent(vaultId)}/secrets`, {
+        display_name: `${c.envKey} (${c.serverName})`,
+        auth: {
+          type: "environment_variable",
+          secret_name: c.envKey,
+          value: c.value,
+          allowed_hosts: c.url ? [c.url] : []
+        }
+      });
+      console.log(`  \u2713 saved ${c.envKey}`);
+      saved += 1;
+    } catch (error) {
+      if (error instanceof ApiError && error.status === 409) {
+        console.log(`  \u2014 ${c.envKey} already in vault`);
+      } else {
+        const msg = error instanceof Error ? error.message : String(error);
+        console.log(`  \u2717 ${c.envKey} failed: ${msg}`);
+      }
+    }
+  }
+  if (saved || skipped) {
+    console.log(
+      `
+Vault: ${saved} saved, ${skipped} skipped. Attach the "default" vault to a session to use these keys.`
+    );
+  }
+}
 function confirm(question) {
   return new Promise((done) => {
     const rl = createInterface({ input: process.stdin, output: process.stdout });
@@ -633,7 +719,7 @@ async function createClone(local, opts) {
   if (local.truncated) console.log("  note: instructions exceeded 100k chars and were truncated");
   if (local.droppedServers.length) {
     console.log(
-      `Left out (need a key): ${local.droppedServers.map((n) => `${n} MCP`).join(", ")}. Run \`sky setup secrets\` to choose which keys to save to your vault.`
+      `Left out of clone (secret-bearing): ${local.droppedServers.map((d) => `${d.name} MCP`).join(", ")}`
     );
   }
   if (opts.dryRun) {
@@ -689,6 +775,7 @@ async function createClone(local, opts) {
   console.log(
     `Linked this machine (${linkPath(local.configRoot)}). Push prompt changes anytime by running \`sky clone\` again.`
   );
+  await confirmAndVaultSecrets(local.secretCandidates, opts.yes ?? false);
   if (opts.open) openBrowser(url);
 }
 async function syncClone(local, link, opts) {
@@ -747,11 +834,12 @@ async function syncClone(local, link, opts) {
   }
   if (local.droppedServers.length) {
     console.log(
-      `  left out (need a key): ${local.droppedServers.map((n) => `${n} MCP`).join(", ")}. Run \`sky setup secrets\` to choose which keys to save to your vault.`
+      `  left out of clone (secret-bearing): ${local.droppedServers.map((d) => `${d.name} MCP`).join(", ")}`
     );
   }
   writeLink(local.configRoot, { ...link, lastSyncedAt: (/* @__PURE__ */ new Date()).toISOString() });
   console.log(`Synced ${link.agentId}.`);
+  await confirmAndVaultSecrets(local.secretCandidates, opts.yes ?? false);
   if (opts.open) openBrowser(`${apiBase()}/agents/${link.agentId}`);
 }
 async function clone(opts) {

package/dist/products.d.ts

@@ -89,7 +89,6 @@ declare const agentAddonsSchema: z.ZodObject<{
         "googlemap.geocode": "googlemap.geocode";
         "googlemap.places": "googlemap.places";
         "agentmail.list-inboxes": "agentmail.list-inboxes";
-        "social-boost.catalog": "social-boost.catalog";
         "tinyfish.search": "tinyfish.search";
         "tinyfish.profile-list": "tinyfish.profile-list";
         "meta.transcribe": "meta.transcribe";
@@ -101,6 +100,14 @@ declare const agentAddonsSchema: z.ZodObject<{
         "google.image": "google.image";
         "openai.image-2.5": "openai.image-2.5";
         "wan.image": "wan.image";
+        "logo.lookup": "logo.lookup";
+        "openmeteo.weather": "openmeteo.weather";
+        "frankfurter.fx": "frankfurter.fx";
+        "dictionary.define": "dictionary.define";
+        "openlibrary.search": "openlibrary.search";
+        "googledns.resolve": "googledns.resolve";
+        "qrserver.create": "qrserver.create";
+        "social-boost.catalog": "social-boost.catalog";
     }>, unknown>>>>;
     model: z.ZodOptional<z.ZodString>;
     reasoning_effort: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
@@ -221,7 +228,6 @@ declare const createProductAgentSchema: z.ZodObject<{
             "googlemap.geocode": "googlemap.geocode";
             "googlemap.places": "googlemap.places";
             "agentmail.list-inboxes": "agentmail.list-inboxes";
-            "social-boost.catalog": "social-boost.catalog";
             "tinyfish.search": "tinyfish.search";
             "tinyfish.profile-list": "tinyfish.profile-list";
             "meta.transcribe": "meta.transcribe";
@@ -233,6 +239,14 @@ declare const createProductAgentSchema: z.ZodObject<{
             "google.image": "google.image";
             "openai.image-2.5": "openai.image-2.5";
             "wan.image": "wan.image";
+            "logo.lookup": "logo.lookup";
+            "openmeteo.weather": "openmeteo.weather";
+            "frankfurter.fx": "frankfurter.fx";
+            "dictionary.define": "dictionary.define";
+            "openlibrary.search": "openlibrary.search";
+            "googledns.resolve": "googledns.resolve";
+            "qrserver.create": "qrserver.create";
+            "social-boost.catalog": "social-boost.catalog";
         }>, unknown>>>>;
         model: z.ZodOptional<z.ZodString>;
         reasoning_effort: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
@@ -353,7 +367,6 @@ declare const prepareProductSessionSchema: z.ZodObject<{
             "googlemap.geocode": "googlemap.geocode";
             "googlemap.places": "googlemap.places";
             "agentmail.list-inboxes": "agentmail.list-inboxes";
-            "social-boost.catalog": "social-boost.catalog";
             "tinyfish.search": "tinyfish.search";
             "tinyfish.profile-list": "tinyfish.profile-list";
             "meta.transcribe": "meta.transcribe";
@@ -365,6 +378,14 @@ declare const prepareProductSessionSchema: z.ZodObject<{
             "google.image": "google.image";
             "openai.image-2.5": "openai.image-2.5";
             "wan.image": "wan.image";
+            "logo.lookup": "logo.lookup";
+            "openmeteo.weather": "openmeteo.weather";
+            "frankfurter.fx": "frankfurter.fx";
+            "dictionary.define": "dictionary.define";
+            "openlibrary.search": "openlibrary.search";
+            "googledns.resolve": "googledns.resolve";
+            "qrserver.create": "qrserver.create";
+            "social-boost.catalog": "social-boost.catalog";
         }>, unknown>>>>;
         model: z.ZodOptional<z.ZodString>;
         reasoning_effort: z.ZodOptional<z.ZodNullable<z.ZodEnum<{

package/dist/products.js

@@ -8,7 +8,7 @@ import {
   skillsArraySchema,
   systemMessageEventSchema,
   userMessageEventSchema
-} from "./chunk-YN7PUNIB.js";
+} from "./chunk-MLIZJSMO.js";
 
 // ../../packages/spec/src/compatibility.ts
 var capabilityInputsSchema = capabilitiesSchema;

package/dist/{src-QFDLKCFY.js → src-QYXD7WXR.js}

@@ -1,7 +1,7 @@
 import {
   external_exports,
   messagePartSchema
-} from "./chunk-YN7PUNIB.js";
+} from "./chunk-MLIZJSMO.js";
 
 // ../../packages/chat/src/stream.ts
 async function* parseSseStream(body) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentsky/sky",
-  "version": "2.9.1",
+  "version": "2.9.2",
   "description": "sky — the AgentSky developer CLI: launch and talk to long-lived agents from your terminal.",
   "license": "MIT",
   "type": "module",