@dejima/sdk 0.8.27 → 0.8.29

package/dist/client.d.ts

@@ -114,6 +114,21 @@ export declare class Client {
         island?: string;
         args?: Record<string, string>;
     }): Promise<any>;
+    /** List an island's secrets — names, timestamps and fingerprints only. */
+    listSecrets(name: string): Promise<any>;
+    /**
+     * Set or rotate a secret. Returns metadata, never the value.
+     *
+     * Rotating keeps the original creation date. Reserved names are rejected
+     * (400): several environment variables are interpreted by the loader, the
+     * shell, or a language runtime before any program logic runs, and
+     * HTTP(S)_PROXY would disable the island's egress gate.
+     *
+     * A change reaches NEW shells immediately; a process already running keeps
+     * the environment it started with, so restart the agent to apply it.
+     */
+    putSecret(name: string, key: string, value: string): Promise<any>;
+    deleteSecret(name: string, key: string): Promise<void>;
     listMcpGrants(name: string): Promise<any>;
     grantMcp(name: string, server: string): Promise<any>;
     revokeMcp(name: string, server: string): Promise<void>;

package/dist/client.js

@@ -235,6 +235,37 @@ export class Client {
     executeCapability(target, opts = {}) {
         return this.json("POST", "/v1/capabilities/execute", { json: clean({ target, island: opts.island, args: opts.args }) });
     }
+    // ===== Secrets --------------------------------------------------------
+    //
+    // Per-island storage for the tokens an agent's tools read from the
+    // environment. Values go in and are NEVER returned — no method here can
+    // retrieve one, because no endpoint serves one.
+    //
+    // Not a boundary against agents: everything in an island runs as one user, so
+    // any agent there can read these from its own environment. What it buys is
+    // that they're out of the repo, centrally rotatable, island-scoped, and
+    // deleted with the island. See docs/secrets-manager-spec.md.
+    /** List an island's secrets — names, timestamps and fingerprints only. */
+    listSecrets(name) {
+        return this.json("GET", `${this.island(name)}/secrets`);
+    }
+    /**
+     * Set or rotate a secret. Returns metadata, never the value.
+     *
+     * Rotating keeps the original creation date. Reserved names are rejected
+     * (400): several environment variables are interpreted by the loader, the
+     * shell, or a language runtime before any program logic runs, and
+     * HTTP(S)_PROXY would disable the island's egress gate.
+     *
+     * A change reaches NEW shells immediately; a process already running keeps
+     * the environment it started with, so restart the agent to apply it.
+     */
+    putSecret(name, key, value) {
+        return this.json("PUT", `${this.island(name)}/secrets/${this.seg(key)}`, { json: { value } });
+    }
+    async deleteSecret(name, key) {
+        await this.request("DELETE", `${this.island(name)}/secrets/${this.seg(key)}`);
+    }
     // ===== MCP broker -----------------------------------------------------
     listMcpGrants(name) {
         return this.json("GET", `${this.island(name)}/mcp/grants`);

package/dist/index.d.ts

@@ -16,4 +16,4 @@ export type { ClientOptions } from "./client.js";
 export { Session } from "./session.js";
 export type { SessionEnvelope, WebSocketLike } from "./session.js";
 export { DejimaError } from "./errors.js";
-export declare const VERSION = "0.8.27";
+export declare const VERSION = "0.8.29";

package/dist/index.js

@@ -14,4 +14,4 @@
 export { Client } from "./client.js";
 export { Session } from "./session.js";
 export { DejimaError } from "./errors.js";
-export const VERSION = "0.8.27";
+export const VERSION = "0.8.29";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dejima/sdk",
-  "version": "0.8.27",
+  "version": "0.8.29",
   "description": "TypeScript/JavaScript client for the Dejima API — run a fleet of AI coding agents on hardware you own.",
   "license": "Apache-2.0",
   "type": "module",