@fjall/ai-tools 2.22.1 → 2.23.1

package/dist/schemas/manageSecret.d.ts

@@ -6,9 +6,10 @@ export declare const manageSecretSchema: z.ZodObject<{
         list: "list";
     }>;
     applicationId: z.ZodString;
-    app: z.ZodString;
+    app: z.ZodOptional<z.ZodString>;
     cluster: z.ZodOptional<z.ZodString>;
     service: z.ZodOptional<z.ZodString>;
+    lambda: z.ZodOptional<z.ZodString>;
     name: z.ZodOptional<z.ZodString>;
     value: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;

package/dist/schemas/manageSecret.js

@@ -7,14 +7,35 @@ export const manageSecretSchema = z
     applicationId: z
         .string()
         .describe("The application whose AWS account holds the secrets"),
+    /**
+     * @deprecated The executor derives the app segment server-side from
+     * `applicationId` and ignores this value — a client-supplied `app` could
+     * name a namespace the operation does not touch. Accepted only for
+     * backwards compatibility with older tool callers.
+     */
     app: z
         .string()
         .min(1)
-        .describe("SSM namespace app component (e.g. application name)"),
-    cluster: z.string().optional().describe("SSM namespace cluster component"),
-    service: z.string().optional().describe("SSM namespace service component"),
+        .optional()
+        .describe("Deprecated and ignored — the app segment is derived from applicationId"),
+    cluster: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("SSM namespace cluster component"),
+    service: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("SSM namespace service component"),
+    lambda: z
+        .string()
+        .min(1)
+        .optional()
+        .describe("SSM namespace lambda function component (mutually exclusive with cluster and service)"),
     name: z
         .string()
+        .min(1)
         .optional()
         .describe("Secret name (required for set and delete operations)"),
     value: z
@@ -23,4 +44,16 @@ export const manageSecretSchema = z
         .optional()
         .describe("Secret value (required for set operation)"),
 })
-    .strict();
+    .strict()
+    // Refines mirror the canonical SecretNamespaceSchema (fjall/util/src/
+    // secrets.ts) so the model self-corrects before the executor's canonical
+    // re-validation; charset enforcement deliberately stays with the executor.
+    .refine((data) => !(data.service && !data.cluster), {
+    message: "Cluster is required when service is specified",
+})
+    .refine((data) => !(data.lambda && (data.cluster || data.service)), {
+    message: "Lambda is mutually exclusive with cluster and service",
+})
+    .refine((data) => data.cluster !== "lambda", {
+    message: 'The cluster name "lambda" is reserved for lambda-scoped parameter paths',
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/ai-tools",
-  "version": "2.22.1",
+  "version": "2.23.1",
   "description": "Shared AI tool schemas and registry for Fjall webapp and CLI",
   "type": "module",
   "main": "dist/index.js",
@@ -50,5 +50,5 @@
   "engines": {
     "node": ">=22.0.0"
   },
-  "gitHead": "ec04f1739f19e4b5212899df7f733ee0d1f06ec3"
+  "gitHead": "749133c6c5cfe24a09a401869f2193c7d177a324"
 }