@autohq/cli 0.1.364 → 0.1.365

package/dist/agent-bridge.js

@@ -23492,7 +23492,7 @@ Object.assign(lookup, {
 // package.json
 var package_default = {
   name: "@autohq/cli",
-  version: "0.1.364",
+  version: "0.1.365",
   license: "SEE LICENSE IN README.md",
   publishConfig: {
     access: "public"
@@ -26200,10 +26200,35 @@ var EncryptedSecretValueSchema = external_exports.object({
   dekAuthTag: SecretAesGcmAuthTagSchema
 });
 var SecretDescriptionSchema = external_exports.string().trim().max(1024);
+var SECRET_BINDING_HOST_PATTERN = /^(?=.{1,253}$)([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]([a-z0-9-]{0,61}[a-z0-9])?$/;
+var SECRET_BINDING_HEADER_PATTERN = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+var SECRET_BINDING_FORBIDDEN_HEADERS = /* @__PURE__ */ new Set([
+  "connection",
+  "content-length",
+  "host",
+  "transfer-encoding"
+]);
+var SecretBindingHostSchema = external_exports.string().trim().toLowerCase().regex(
+  SECRET_BINDING_HOST_PATTERN,
+  "Binding hosts must be exact lowercase hostnames (no wildcards, schemes, ports, or paths)"
+);
+var SecretBindingHeaderSchema = external_exports.string().trim().min(1).max(128).regex(SECRET_BINDING_HEADER_PATTERN, "Invalid HTTP header name").refine(
+  (header) => !SECRET_BINDING_FORBIDDEN_HEADERS.has(header.toLowerCase()),
+  "This header cannot carry a secret binding"
+);
+var SecretBindingSchema = external_exports.object({
+  hosts: external_exports.array(SecretBindingHostSchema).min(1).max(16),
+  header: SecretBindingHeaderSchema,
+  format: external_exports.string().min(1).max(256).refine(
+    (format) => format.includes("{value}"),
+    "Binding format must contain the {value} placeholder"
+  ).optional()
+});
 var SecretSetRequestSchema = external_exports.object({
   value: external_exports.string(),
   description: SecretDescriptionSchema.nullable().optional(),
-  protected: external_exports.boolean().optional()
+  protected: external_exports.boolean().optional(),
+  binding: SecretBindingSchema.nullable().optional()
 });
 var SecretRotateRequestSchema = external_exports.object({
   value: external_exports.string()
@@ -26215,6 +26240,9 @@ var SecretMetadataSchema = external_exports.object({
   name: ResourceNameSchema,
   description: external_exports.string().nullable(),
   protected: external_exports.boolean(),
+  // Defaulted rather than required so a newer client parsing an older
+  // server's metadata (deploy skew) treats an absent binding as unbound.
+  binding: SecretBindingSchema.nullable().default(null),
   createdAt: external_exports.string().datetime(),
   updatedAt: external_exports.string().datetime(),
   lastRotatedAt: external_exports.string().datetime().nullable(),

package/dist/index.js

@@ -17599,7 +17599,7 @@ var init_mounts = __esm({
 });
 
 // ../../packages/schemas/src/secrets.ts
-var SECRET_ENCRYPTION_ALGORITHM, SecretEnvNameSchema, SecretCiphertextFieldSchema, SecretAesGcmIvSchema, SecretAesGcmAuthTagSchema, SecretEnvValueSchema, SecretEnvSchema, EncryptedSecretValueSchema, SecretDescriptionSchema, SecretSetRequestSchema, SecretRotateRequestSchema, SecretMetadataSchema, SecretSetResponseSchema, SecretListResponseSchema, SecretDeleteResponseSchema, SecretRevealResponseSchema;
+var SECRET_ENCRYPTION_ALGORITHM, SecretEnvNameSchema, SecretCiphertextFieldSchema, SecretAesGcmIvSchema, SecretAesGcmAuthTagSchema, SecretEnvValueSchema, SecretEnvSchema, EncryptedSecretValueSchema, SecretDescriptionSchema, SECRET_BINDING_HOST_PATTERN, SECRET_BINDING_HEADER_PATTERN, SECRET_BINDING_FORBIDDEN_HEADERS, SecretBindingHostSchema, SecretBindingHeaderSchema, SecretBindingSchema, SecretSetRequestSchema, SecretRotateRequestSchema, SecretMetadataSchema, SecretSetResponseSchema, SecretListResponseSchema, SecretDeleteResponseSchema, SecretRevealResponseSchema;
 var init_secrets = __esm({
   "../../packages/schemas/src/secrets.ts"() {
     "use strict";
@@ -17632,10 +17632,35 @@ var init_secrets = __esm({
       dekAuthTag: SecretAesGcmAuthTagSchema
     });
     SecretDescriptionSchema = external_exports.string().trim().max(1024);
+    SECRET_BINDING_HOST_PATTERN = /^(?=.{1,253}$)([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]([a-z0-9-]{0,61}[a-z0-9])?$/;
+    SECRET_BINDING_HEADER_PATTERN = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+    SECRET_BINDING_FORBIDDEN_HEADERS = /* @__PURE__ */ new Set([
+      "connection",
+      "content-length",
+      "host",
+      "transfer-encoding"
+    ]);
+    SecretBindingHostSchema = external_exports.string().trim().toLowerCase().regex(
+      SECRET_BINDING_HOST_PATTERN,
+      "Binding hosts must be exact lowercase hostnames (no wildcards, schemes, ports, or paths)"
+    );
+    SecretBindingHeaderSchema = external_exports.string().trim().min(1).max(128).regex(SECRET_BINDING_HEADER_PATTERN, "Invalid HTTP header name").refine(
+      (header) => !SECRET_BINDING_FORBIDDEN_HEADERS.has(header.toLowerCase()),
+      "This header cannot carry a secret binding"
+    );
+    SecretBindingSchema = external_exports.object({
+      hosts: external_exports.array(SecretBindingHostSchema).min(1).max(16),
+      header: SecretBindingHeaderSchema,
+      format: external_exports.string().min(1).max(256).refine(
+        (format) => format.includes("{value}"),
+        "Binding format must contain the {value} placeholder"
+      ).optional()
+    });
     SecretSetRequestSchema = external_exports.object({
       value: external_exports.string(),
       description: SecretDescriptionSchema.nullable().optional(),
-      protected: external_exports.boolean().optional()
+      protected: external_exports.boolean().optional(),
+      binding: SecretBindingSchema.nullable().optional()
     });
     SecretRotateRequestSchema = external_exports.object({
       value: external_exports.string()
@@ -17647,6 +17672,9 @@ var init_secrets = __esm({
       name: ResourceNameSchema,
       description: external_exports.string().nullable(),
       protected: external_exports.boolean(),
+      // Defaulted rather than required so a newer client parsing an older
+      // server's metadata (deploy skew) treats an absent binding as unbound.
+      binding: SecretBindingSchema.nullable().default(null),
       createdAt: external_exports.string().datetime(),
       updatedAt: external_exports.string().datetime(),
       lastRotatedAt: external_exports.string().datetime().nullable(),
@@ -31577,7 +31605,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@autohq/cli",
-      version: "0.1.364",
+      version: "0.1.365",
       license: "SEE LICENSE IN README.md",
       publishConfig: {
         access: "public"
@@ -50030,7 +50058,8 @@ async function setSecret(input) {
     {
       value,
       ...input.commandOptions.description === void 0 ? {} : { description: input.commandOptions.description },
-      ...resolveProtectedFlag(input.commandOptions)
+      ...resolveProtectedFlag(input.commandOptions),
+      ...resolveBindingFlags(input.commandOptions)
     },
     {
       projectId: await secretProjectId(input),
@@ -50094,6 +50123,30 @@ function resolveProtectedFlag(options) {
   }
   return {};
 }
+function resolveBindingFlags(options) {
+  const hasBindingFlags = (options.bindHost?.length ?? 0) > 0 || options.bindHeader !== void 0 || options.bindFormat !== void 0;
+  if (options.unbind) {
+    if (hasBindingFlags) {
+      throw new Error("Use either --unbind or the --bind-* flags, not both.");
+    }
+    return { binding: null };
+  }
+  if (!hasBindingFlags) {
+    return {};
+  }
+  if (!options.bindHost?.length || options.bindHeader === void 0) {
+    throw new Error(
+      "Binding a secret requires at least one --bind-host and a --bind-header."
+    );
+  }
+  return {
+    binding: {
+      hosts: options.bindHost,
+      header: options.bindHeader,
+      ...options.bindFormat === void 0 ? {} : { format: options.bindFormat }
+    }
+  };
+}
 async function removeSecret(input) {
   await confirmDestructiveAction(input.context, {
     message: `This will remove secret "${input.name}".`,
@@ -50248,7 +50301,18 @@ function registerSecretCommands(program, context) {
   secrets.command("set").description("Create or update a secret without printing its value.").argument("<name>", "secret name").option("--project <project>", "project id; defaults to organization scope").option("--stdin", "read the secret value from stdin").option("--value <value>", "secret value").option(
     "--from-env <name>",
     "read the secret value from an environment variable"
-  ).option("--description <text>", "human-readable description for the secret").option("--protected", "mark write-only: refuse plaintext reveal (default)").option(
+  ).option("--description <text>", "human-readable description for the secret").option(
+    "--bind-host <host>",
+    "bind the secret to an exact destination host (repeatable); bound secrets are injected at the sandbox edge instead of entering the sandbox",
+    (host, hosts) => [...hosts, host],
+    []
+  ).option(
+    "--bind-header <header>",
+    "HTTP header the bound secret is injected into (e.g. Authorization)"
+  ).option(
+    "--bind-format <format>",
+    'header value template around the secret, e.g. "Bearer {value}"'
+  ).option("--unbind", "clear an existing destination binding").option("--protected", "mark write-only: refuse plaintext reveal (default)").option(
     "--unprotected",
     "allow scope-gated plaintext reveal of this secret"
   ).option("--raw", "allow empty values and preserve stdin exactly").option("--json", "print the updated secret metadata as JSON").option("--api-url <url>", "Auto API base URL").option("--api-base-url <url>", "Auto API base URL").action(async (name, commandOptions) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@autohq/cli",
-  "version": "0.1.364",
+  "version": "0.1.365",
   "license": "SEE LICENSE IN README.md",
   "publishConfig": {
     "access": "public"