@autohq/cli 0.1.359 → 0.1.360

package/dist/agent-bridge.js

@@ -23492,7 +23492,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.359",
+  version: "0.1.360",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -26023,6 +26023,8 @@ var GITHUB_MCP_TOOL_NAMES = [
   "update_pull_request_branch"
 ];
 var GITHUB_MCP_PROXY_TOOL_NAMES = [
+  "actions_secret_list",
+  "actions_secret_write",
   "enable_pull_request_auto_merge",
   "upsert_issue_comment"
 ];
@@ -26034,6 +26036,13 @@ var GITHUB_MCP_MERGE_TOOLS = [
   "merge_pull_request",
   "enable_pull_request_auto_merge"
 ];
+var GITHUB_MCP_SECRETS_TOOLS = [
+  "actions_secret_list",
+  "actions_secret_write"
+];
+var GITHUB_MCP_SECRETS_WRITE_TOOLS = [
+  "actions_secret_write"
+];
 var GITHUB_MCP_WRITE_TOOLS = [
   "actions_run_trigger",
   "add_comment_to_pending_review",
@@ -26058,7 +26067,9 @@ var githubMcpToolNameSet = new Set(
 );
 var githubMcpWriteToolSet = /* @__PURE__ */ new Set([
   ...GITHUB_MCP_WRITE_TOOLS,
-  ...GITHUB_MCP_PROXY_TOOL_NAMES
+  ...GITHUB_MCP_PROXY_TOOL_NAMES.filter(
+    (name23) => name23 !== "actions_secret_list"
+  )
 ]);
 var githubMcpProxyToolSet = new Set(
   GITHUB_MCP_PROXY_TOOL_NAMES
@@ -26066,6 +26077,12 @@ var githubMcpProxyToolSet = new Set(
 var githubMcpMergeToolSet = new Set(
   GITHUB_MCP_MERGE_TOOLS
 );
+var githubMcpSecretsToolSet = new Set(
+  GITHUB_MCP_SECRETS_TOOLS
+);
+var githubMcpSecretsWriteToolSet = new Set(
+  GITHUB_MCP_SECRETS_WRITE_TOOLS
+);
 
 // ../../packages/schemas/src/mounts.ts
 var AbsoluteMountPathSchema = external_exports.string().trim().min(1).refine((value2) => value2.startsWith("/"), {
@@ -26090,6 +26107,7 @@ var DEFAULT_GITHUB_MOUNT_CAPABILITIES = {
   checks: "read",
   actions: "read",
   workflows: "none",
+  secrets: "none",
   merge: "none"
 };
 var GitMountAuthSchema = external_exports.discriminatedUnion("kind", [
@@ -26112,6 +26130,10 @@ var GitMountAuthSchema = external_exports.discriminatedUnion("kind", [
       checks: GithubMountCapabilityLevelSchema.default("read"),
       actions: GithubMountCapabilityLevelSchema.default("read"),
       workflows: GithubMountCapabilityLevelSchema.default("none"),
+      // Grants the GitHub Actions secrets API (repository and environment
+      // secrets). Secret values are write-only on GitHub's side; read grants
+      // listing secret names, never values.
+      secrets: GithubMountCapabilityLevelSchema.default("none"),
       merge: GithubMountMergeCapabilityLevelSchema.default("none")
     }).superRefine((capabilities, context) => {
       if (capabilities.merge === "write" && (capabilities.contents !== "write" || capabilities.pullRequests !== "write")) {

package/dist/index.js

@@ -17392,7 +17392,7 @@ var init_github_credentials = __esm({
 });
 
 // ../../packages/schemas/src/github-mcp-catalog.ts
-var GITHUB_MCP_TOOL_NAMES, GITHUB_MCP_PROXY_TOOL_NAMES, GITHUB_MCP_SELECTABLE_TOOL_NAMES, GITHUB_MCP_MERGE_TOOLS, GITHUB_MCP_WRITE_TOOLS, githubMcpToolNameSet, githubMcpWriteToolSet, githubMcpProxyToolSet, githubMcpMergeToolSet;
+var GITHUB_MCP_TOOL_NAMES, GITHUB_MCP_PROXY_TOOL_NAMES, GITHUB_MCP_SELECTABLE_TOOL_NAMES, GITHUB_MCP_MERGE_TOOLS, GITHUB_MCP_SECRETS_TOOLS, GITHUB_MCP_SECRETS_WRITE_TOOLS, GITHUB_MCP_WRITE_TOOLS, githubMcpToolNameSet, githubMcpWriteToolSet, githubMcpProxyToolSet, githubMcpMergeToolSet, githubMcpSecretsToolSet, githubMcpSecretsWriteToolSet;
 var init_github_mcp_catalog = __esm({
   "../../packages/schemas/src/github-mcp-catalog.ts"() {
     "use strict";
@@ -17440,6 +17440,8 @@ var init_github_mcp_catalog = __esm({
       "update_pull_request_branch"
     ];
     GITHUB_MCP_PROXY_TOOL_NAMES = [
+      "actions_secret_list",
+      "actions_secret_write",
       "enable_pull_request_auto_merge",
       "upsert_issue_comment"
     ];
@@ -17451,6 +17453,13 @@ var init_github_mcp_catalog = __esm({
       "merge_pull_request",
       "enable_pull_request_auto_merge"
     ];
+    GITHUB_MCP_SECRETS_TOOLS = [
+      "actions_secret_list",
+      "actions_secret_write"
+    ];
+    GITHUB_MCP_SECRETS_WRITE_TOOLS = [
+      "actions_secret_write"
+    ];
     GITHUB_MCP_WRITE_TOOLS = [
       "actions_run_trigger",
       "add_comment_to_pending_review",
@@ -17475,7 +17484,9 @@ var init_github_mcp_catalog = __esm({
     );
     githubMcpWriteToolSet = /* @__PURE__ */ new Set([
       ...GITHUB_MCP_WRITE_TOOLS,
-      ...GITHUB_MCP_PROXY_TOOL_NAMES
+      ...GITHUB_MCP_PROXY_TOOL_NAMES.filter(
+        (name) => name !== "actions_secret_list"
+      )
     ]);
     githubMcpProxyToolSet = new Set(
       GITHUB_MCP_PROXY_TOOL_NAMES
@@ -17483,6 +17494,12 @@ var init_github_mcp_catalog = __esm({
     githubMcpMergeToolSet = new Set(
       GITHUB_MCP_MERGE_TOOLS
     );
+    githubMcpSecretsToolSet = new Set(
+      GITHUB_MCP_SECRETS_TOOLS
+    );
+    githubMcpSecretsWriteToolSet = new Set(
+      GITHUB_MCP_SECRETS_WRITE_TOOLS
+    );
   }
 });
 
@@ -17514,6 +17531,7 @@ var init_mounts = __esm({
       checks: "read",
       actions: "read",
       workflows: "none",
+      secrets: "none",
       merge: "none"
     };
     GitMountAuthSchema = external_exports.discriminatedUnion("kind", [
@@ -17536,6 +17554,10 @@ var init_mounts = __esm({
           checks: GithubMountCapabilityLevelSchema.default("read"),
           actions: GithubMountCapabilityLevelSchema.default("read"),
           workflows: GithubMountCapabilityLevelSchema.default("none"),
+          // Grants the GitHub Actions secrets API (repository and environment
+          // secrets). Secret values are write-only on GitHub's side; read grants
+          // listing secret names, never values.
+          secrets: GithubMountCapabilityLevelSchema.default("none"),
           merge: GithubMountMergeCapabilityLevelSchema.default("none")
         }).superRefine((capabilities, context) => {
           if (capabilities.merge === "write" && (capabilities.contents !== "write" || capabilities.pullRequests !== "write")) {
@@ -31428,7 +31450,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.359",
+      version: "0.1.360",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.359",
+  "version": "0.1.360",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"