@asteroidai/cli 1.9.71 → 1.9.80

package/dist/asteroid.js

@@ -1927,7 +1927,7 @@ var COMMANDS = [
     command: "profile create",
     tool: "profiles_create",
     title: "Create profile",
-    description: "Create a login profile: one identity a workflow can sign in as, with its attached secrets, Email Inbox, sticky IP and stored browser state. Attach secrets with `secretIds` (create them with `secrets_create`).",
+    description: "Create a login profile: one identity a workflow can sign in as, with its attached secrets, Email Inbox, sticky IP and stored browser state. Attach secrets with `secretIds`. Secret values never pass through an agent: the person who holds them fills a secret request or the platform's secret form.",
     method: "POST",
     path: "/agents/v2/profiles",
     args: [],
@@ -3136,69 +3136,6 @@ var COMMANDS = [
       credentialOrganization: false
     }
   },
-  {
-    command: "secret create",
-    tool: "secrets_create",
-    title: "Create secret",
-    description: "Create an organization secret. The item key is derived from name unless itemKey is given. Values are stored; responses are masked. Pass either `templateId` or `kind`+`fields`, plus `values`. Attach the returned id to a profile with `profile_update.secretIdsToAdd`. Reference fields as ##ITEM_KEY.FIELD##. Many secrets may share a key; a profile cannot attach two secrets with the same key.",
-    method: "POST",
-    path: "/agents/v2/secrets",
-    args: [],
-    query: [],
-    binary: false,
-    readOnly: false,
-    destructive: false,
-    body: {
-      required: true,
-      contentType: "application/json",
-      fields: [
-        {
-          name: "name",
-          flag: "name",
-          type: "string",
-          required: true
-        },
-        {
-          name: "itemKey",
-          flag: "item-key",
-          type: "string",
-          required: false,
-          description: "Optional UPPER_SNAKE key. Derived from name when omitted."
-        },
-        {
-          name: "templateId",
-          flag: "template-id",
-          type: "string",
-          required: false,
-          description: "Org template to snapshot. Mutually exclusive with kind and fields."
-        },
-        {
-          name: "kind",
-          flag: "kind",
-          type: "string",
-          required: false,
-          description: "Required when templateId is omitted.",
-          enum: ["login", "api_key", "card", "custom"]
-        },
-        {
-          name: "fields",
-          flag: "fields",
-          type: "json",
-          required: false,
-          description: "Inline field blueprint. Required when templateId is omitted."
-        },
-        {
-          name: "values",
-          flag: "values",
-          type: "json",
-          required: true,
-          description: "Field values as `key`/`value` pairs."
-        }
-      ],
-      files: [],
-      credentialOrganization: true
-    }
-  },
   {
     command: "secret delete",
     tool: "secret_delete",
@@ -3219,91 +3156,6 @@ var COMMANDS = [
     readOnly: false,
     destructive: true
   },
-  {
-    command: "secret field add",
-    tool: "secret_field_add",
-    title: "Add secret field",
-    description: "Add a non-required field to a secret. Pass `field` (label, type, required) and `value`. Secret values are never returned.",
-    method: "POST",
-    path: "/agents/v2/secrets/{secretId}/fields",
-    args: [
-      {
-        name: "secretId",
-        flag: "secret-id",
-        type: "string",
-        required: true
-      }
-    ],
-    query: [],
-    binary: false,
-    readOnly: false,
-    destructive: false,
-    body: {
-      required: true,
-      contentType: "application/json",
-      fields: [
-        {
-          name: "field",
-          flag: "field",
-          type: "json",
-          required: true,
-          description: "Write shape for a field. The server derives key from label.",
-          fields: [
-            {
-              name: "type",
-              flag: "type",
-              type: "string",
-              required: false,
-              description: "Type of a vault field. Sensitivity is derived from the type: username, email, url, phone, text, card_expiry, and cardholder_name are readable; password, hidden, totp_seed, api_key, card_number, and card_cvv are write-only. There is no separate hidden flag.",
-              enum: [
-                "username",
-                "email",
-                "url",
-                "phone",
-                "text",
-                "password",
-                "hidden",
-                "totp_seed",
-                "api_key",
-                "card_number",
-                "card_expiry",
-                "card_cvv",
-                "cardholder_name"
-              ]
-            },
-            {
-              name: "label",
-              flag: "label",
-              type: "string",
-              required: false,
-              description: "Human label shown in forms. The field key is UPPER_SNAKE of this label."
-            },
-            {
-              name: "required",
-              flag: "required",
-              type: "boolean",
-              required: false
-            },
-            {
-              name: "hint",
-              flag: "hint",
-              type: "string",
-              required: false,
-              description: "Optional guidance shown next to the field, copied from catalog credentials when generating masters."
-            }
-          ]
-        },
-        {
-          name: "value",
-          flag: "value",
-          type: "string",
-          required: true
-        }
-      ],
-      files: [],
-      credentialOrganization: false
-    }
-  },
   {
     command: "secret field remove",
     tool: "secret_field_remove",
@@ -3398,41 +3250,6 @@ var COMMANDS = [
     readOnly: true,
     destructive: false
   },
-  {
-    command: "secret rotate",
-    tool: "secret_rotate",
-    title: "Rotate secret values",
-    description: "Replace field values on a secret in one write. Supply `values` as key/value pairs. Secret values are never returned.",
-    method: "POST",
-    path: "/agents/v2/secrets/{secretId}/rotate",
-    args: [
-      {
-        name: "secretId",
-        flag: "secret-id",
-        type: "string",
-        required: true
-      }
-    ],
-    query: [],
-    binary: false,
-    readOnly: false,
-    destructive: false,
-    body: {
-      required: true,
-      contentType: "application/json",
-      fields: [
-        {
-          name: "values",
-          flag: "values",
-          type: "json",
-          required: true,
-          description: "New field values as `key`/`value` pairs."
-        }
-      ],
-      files: [],
-      credentialOrganization: false
-    }
-  },
   {
     command: "secret update",
     tool: "secret_update",
@@ -6798,7 +6615,7 @@ var ApiError = class extends Error {
   status;
   body;
 };
-var VERSION = "1.9.71";
+var VERSION = "1.9.80";
 function problem(status, body, fallback) {
   if (body && typeof body === "object") {
     const record2 = body;

package/dist/core.js

@@ -1948,7 +1948,7 @@ var COMMANDS = [
     command: "profile create",
     tool: "profiles_create",
     title: "Create profile",
-    description: "Create a login profile: one identity a workflow can sign in as, with its attached secrets, Email Inbox, sticky IP and stored browser state. Attach secrets with `secretIds` (create them with `secrets_create`).",
+    description: "Create a login profile: one identity a workflow can sign in as, with its attached secrets, Email Inbox, sticky IP and stored browser state. Attach secrets with `secretIds`. Secret values never pass through an agent: the person who holds them fills a secret request or the platform's secret form.",
     method: "POST",
     path: "/agents/v2/profiles",
     args: [],
@@ -3157,69 +3157,6 @@ var COMMANDS = [
       credentialOrganization: false
     }
   },
-  {
-    command: "secret create",
-    tool: "secrets_create",
-    title: "Create secret",
-    description: "Create an organization secret. The item key is derived from name unless itemKey is given. Values are stored; responses are masked. Pass either `templateId` or `kind`+`fields`, plus `values`. Attach the returned id to a profile with `profile_update.secretIdsToAdd`. Reference fields as ##ITEM_KEY.FIELD##. Many secrets may share a key; a profile cannot attach two secrets with the same key.",
-    method: "POST",
-    path: "/agents/v2/secrets",
-    args: [],
-    query: [],
-    binary: false,
-    readOnly: false,
-    destructive: false,
-    body: {
-      required: true,
-      contentType: "application/json",
-      fields: [
-        {
-          name: "name",
-          flag: "name",
-          type: "string",
-          required: true
-        },
-        {
-          name: "itemKey",
-          flag: "item-key",
-          type: "string",
-          required: false,
-          description: "Optional UPPER_SNAKE key. Derived from name when omitted."
-        },
-        {
-          name: "templateId",
-          flag: "template-id",
-          type: "string",
-          required: false,
-          description: "Org template to snapshot. Mutually exclusive with kind and fields."
-        },
-        {
-          name: "kind",
-          flag: "kind",
-          type: "string",
-          required: false,
-          description: "Required when templateId is omitted.",
-          enum: ["login", "api_key", "card", "custom"]
-        },
-        {
-          name: "fields",
-          flag: "fields",
-          type: "json",
-          required: false,
-          description: "Inline field blueprint. Required when templateId is omitted."
-        },
-        {
-          name: "values",
-          flag: "values",
-          type: "json",
-          required: true,
-          description: "Field values as `key`/`value` pairs."
-        }
-      ],
-      files: [],
-      credentialOrganization: true
-    }
-  },
   {
     command: "secret delete",
     tool: "secret_delete",
@@ -3240,91 +3177,6 @@ var COMMANDS = [
     readOnly: false,
     destructive: true
   },
-  {
-    command: "secret field add",
-    tool: "secret_field_add",
-    title: "Add secret field",
-    description: "Add a non-required field to a secret. Pass `field` (label, type, required) and `value`. Secret values are never returned.",
-    method: "POST",
-    path: "/agents/v2/secrets/{secretId}/fields",
-    args: [
-      {
-        name: "secretId",
-        flag: "secret-id",
-        type: "string",
-        required: true
-      }
-    ],
-    query: [],
-    binary: false,
-    readOnly: false,
-    destructive: false,
-    body: {
-      required: true,
-      contentType: "application/json",
-      fields: [
-        {
-          name: "field",
-          flag: "field",
-          type: "json",
-          required: true,
-          description: "Write shape for a field. The server derives key from label.",
-          fields: [
-            {
-              name: "type",
-              flag: "type",
-              type: "string",
-              required: false,
-              description: "Type of a vault field. Sensitivity is derived from the type: username, email, url, phone, text, card_expiry, and cardholder_name are readable; password, hidden, totp_seed, api_key, card_number, and card_cvv are write-only. There is no separate hidden flag.",
-              enum: [
-                "username",
-                "email",
-                "url",
-                "phone",
-                "text",
-                "password",
-                "hidden",
-                "totp_seed",
-                "api_key",
-                "card_number",
-                "card_expiry",
-                "card_cvv",
-                "cardholder_name"
-              ]
-            },
-            {
-              name: "label",
-              flag: "label",
-              type: "string",
-              required: false,
-              description: "Human label shown in forms. The field key is UPPER_SNAKE of this label."
-            },
-            {
-              name: "required",
-              flag: "required",
-              type: "boolean",
-              required: false
-            },
-            {
-              name: "hint",
-              flag: "hint",
-              type: "string",
-              required: false,
-              description: "Optional guidance shown next to the field, copied from catalog credentials when generating masters."
-            }
-          ]
-        },
-        {
-          name: "value",
-          flag: "value",
-          type: "string",
-          required: true
-        }
-      ],
-      files: [],
-      credentialOrganization: false
-    }
-  },
   {
     command: "secret field remove",
     tool: "secret_field_remove",
@@ -3419,41 +3271,6 @@ var COMMANDS = [
     readOnly: true,
     destructive: false
   },
-  {
-    command: "secret rotate",
-    tool: "secret_rotate",
-    title: "Rotate secret values",
-    description: "Replace field values on a secret in one write. Supply `values` as key/value pairs. Secret values are never returned.",
-    method: "POST",
-    path: "/agents/v2/secrets/{secretId}/rotate",
-    args: [
-      {
-        name: "secretId",
-        flag: "secret-id",
-        type: "string",
-        required: true
-      }
-    ],
-    query: [],
-    binary: false,
-    readOnly: false,
-    destructive: false,
-    body: {
-      required: true,
-      contentType: "application/json",
-      fields: [
-        {
-          name: "values",
-          flag: "values",
-          type: "json",
-          required: true,
-          description: "New field values as `key`/`value` pairs."
-        }
-      ],
-      files: [],
-      credentialOrganization: false
-    }
-  },
   {
     command: "secret update",
     tool: "secret_update",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@asteroidai/cli",
-  "version": "1.9.71",
+  "version": "1.9.80",
   "description": "The asteroid command-line interface for the Asteroid platform.",
   "type": "module",
   "license": "MIT",