@general-input/cli 0.1.1 → 0.1.2

package/dist/cli.js

@@ -384,7 +384,7 @@ import chalk4 from "chalk";
 // package.json
 var package_default = {
   name: "@general-input/cli",
-  version: "0.1.1",
+  version: "0.1.2",
   type: "module",
   description: "The agent-facing CLI for General Input. Authenticate, manage workflows, run bash with operator credentials injected by the cloud.",
   license: "SEE LICENSE IN LICENSE",
@@ -2579,7 +2579,7 @@ import {
 } from "fs";
 
 // src/skills/geni.md
-var geni_default = '---\nname: geni\ndescription: Use the operator\'s connected services (Slack, Gmail, GitHub, Stripe, anything they\'ve authorized in General Input) to fulfill their request. Load this whenever the user wants you to take an action on their behalf against an external SaaS account, fetch data from one of their tools, or wire something up that crosses service boundaries. Powers two modes today, one-off requests via `geni exec bash`, plus workflows (coming soon).\n---\n\n# geni\n\n`geni` is the CLI that gives you (the agent) credentialed access to\nthe operator\'s connected accounts. The cloud injects their tokens as\nenv vars into a fresh bash subprocess; you write the `curl` and\nnever see the secret.\n\n## Two modes\n\n**1. One-off requests (available now).** The operator asks you to do\na thing once: "post a Slack message to #eng," "show me my last 10\nStripe charges," "create a GitHub issue from this thread." You\ndiscover the right credential and operation, then run a single\n`geni exec bash --cred <id>` to do it. This is the entire surface\narea you should use today.\n\n**2. Workflows (coming soon).** Durable, scheduled, reusable runs\n(cron-like jobs, webhook handlers, multi-step pipelines) will live\nunder `geni workflow`. Not supported yet. If the operator asks for\n"every morning at 9," "whenever a webhook fires," or anything that\nneeds to keep running after this session ends, tell them workflows\naren\'t available yet and offer to do the work as a one-off right\nnow instead.\n\n## One-off request flow\n\nAlways run discovery before constructing a request. The operation\ndocs tell you the exact env var names and HTTP shape, derive nothing.\n\n1. **Find a connected credential.** `geni credential list` returns\n   one row per credential the operator has access to (id, service,\n   title). Filter by service: `geni credential list --service slack`.\n\n2. **If the service isn\'t connected**, search the catalog and prompt\n   the operator: `geni integration list -q "<keyword>"`. Then\n   `geni credential connect <service>` opens the dashboard for them.\n\n3. **Find the operation you need.** `geni integration operations\n<service>` lists every operation the integration exposes. Filter\n   with `-q "<keyword>"`.\n\n4. **Read the operation\'s reference docs.** `geni integration\noperation <id> --format markdown` returns HTTP method, path,\n   params, response shape, AND the exact env var names that bash\n   will set when this credential is declared. **Always read this\n   before constructing a curl.** Guessing at URLs or env var names\n   is the most common failure mode.\n\n5. **Run the call.**\n   ```\n   geni exec bash --cred <cred_id> --reason "<what + why>" \\\n     -- \'<bash command using the env vars>\'\n   ```\n\n## Env var contract\n\nEvery credential\'s env vars are on the response of step 5\n(`credentials_resolved`) and on the operation docs from step 4. Read\nthem, don\'t derive.\n\n- **Per-field, suffixed**: `<SERVICE>_<FIELD>_<id>` (e.g.\n  `$SLACK_ACCESS_TOKEN_ABC`, `$SALESFORCE_INSTANCE_URL_KG`). The\n  `<id>` suffix is the credential id with `cred_` stripped, uppercased.\n  Suffix means two credentials of the same service can coexist in one\n  call without colliding.\n- **Canonical aliases (unsuffixed)**: well-known SDKs read fixed env\n  var names (`$GH_TOKEN`, `$GITHUB_TOKEN`, `$SLACK_BOT_TOKEN`,\n  `$OPENAI_API_KEY`, `$ANTHROPIC_API_KEY`, `$STRIPE_API_KEY`).\n  These are emitted alongside the suffixed names for tools that\n  hardcode them.\n- **Always-injected platform vars**: `$PLATFORM_API_KEY` /\n  `$PLATFORM_BASE_URL` are set on every `geni exec bash` (no\n  `--cred` needed). Use them to call General Input\'s first-party\n  services (image gen, weather, send-email, etc.).\n\n## Reasons matter\n\nThe `--reason` you supply on every `geni exec bash --cred ...`\ncall lands in the credential access log and is shown to the\noperator. Be specific: "Posting daily digest to #engineering on the\noperator\'s request" is good; "Slack call" is not. Re-state the reason\non every call. The audit log is per-call, not per-session.\n\n## Output is scrubbed\n\nstdout/stderr from the bash subprocess pass through a streaming\nscrubber that replaces every literal occurrence of a registered\nsecret with `[REDACTED:credential_<id>]`. You won\'t see the token\nback. Tools like `echo $TOKEN | base64` don\'t help either, the\nscrubber knows the common encodings.\n\n## Patterns\n\n**One credential, simple curl:**\n\n```\ngeni exec bash --cred cred_01HX --reason "Listing Slack channels" \\\n  -- \'curl -s -H "Authorization: Bearer $SLACK_BOT_TOKEN" https://slack.com/api/conversations.list | jq .channels\'\n```\n\n**Multiple credentials, fan-out (suffix keeps them distinct):**\n\n```\ngeni exec bash \\\n  --cred cred_slackA --reason "Posting to #engineering" \\\n  --cred cred_slackB --reason "Posting to #marketing" \\\n  -- \'curl ... $SLACK_ACCESS_TOKEN_SLACKA ...; curl ... $SLACK_ACCESS_TOKEN_SLACKB ...\'\n```\n\n**Platform service (no --cred needed):**\n\n```\ngeni exec bash \\\n  -- \'curl -s -X POST "$PLATFORM_BASE_URL/v1/web-search" \\\n        -H "Authorization: Bearer $PLATFORM_API_KEY" \\\n        -d "{\\"query\\":\\"general input\\"}"\'\n```\n\n## Exit codes\n\n| Code  | Meaning                                                              |\n| ----- | -------------------------------------------------------------------- |\n| 0     | Subprocess succeeded                                                 |\n| 1\u2013125 | Subprocess\'s own exit code (curl failed, jq parse error, etc.)       |\n| 4     | Resource not found (cred id, integration slug, operation id)         |\n| 5     | Forbidden, session valid but no access to this resource              |\n| 9     | Validation failed (bad flag combo, malformed input)                  |\n| 77    | Server refused to resolve a credential. Don\'t retry, surface to user |\n| 78    | Runner session missing or expired. Operator runs `geni login`        |\n| 124   | Timeout                                                              |\n| 125   | Internal CLI error                                                   |\n\n## Use `--json` everywhere for programmatic output\n\nEvery list/get command supports `--json` for machine-readable shape.\nUse it whenever you\'re going to parse the response. The table output\nis meant for humans.\n\n## Don\'t\n\n- Don\'t construct a curl without reading `geni integration operation\n<id>` first. The HTTP shape, required headers, and env var names\n  are all in the operation docs; deriving them from the service slug\n  is how you end up with 401s.\n- Don\'t reach for `run_managed_script` or any JS-script tool. `geni\nexec bash` is the only execution primitive locally. If you need\n  npm packages, your bash command can call `bun --install auto run -e\n\'...\'` (if bun is installed locally) or `python3 -c \'...\'` for\n  Python.\n- Don\'t promise the operator a recurring or scheduled job. Workflows\n  are coming soon but not shipped. Offer the one-off equivalent now.\n';
+var geni_default = "---\nname: geni\ndescription: Use the operator's connected services (Slack, Gmail, GitHub, Stripe, anything they've authorized in General Input) to fulfill their request. Load this whenever the user wants you to take an action on their behalf against an external SaaS account, fetch data from one of their tools, or wire something up that crosses service boundaries.\n---\n\n# geni\n\n`geni` is a CLI that gives you credentialed access to the operator's\nconnected accounts. The cloud injects their tokens into a fresh bash\nsubprocess as env vars; you write the `curl`, you never see the\nsecret. Run `geni --help` for the full command surface.\n\n## How to talk about geni\n\nTreat geni as a teammate \u2014 the integration specialist who picks the\nright operation and runs the credentialed call. You're the one\nsynthesizing and replying.\n\nIn summaries of multi-step work, credit geni naturally: \"Geni pulled\nthe last 30 days of charges from Stripe; I rolled them into the report\nbelow.\" Skip the credit on trivial single calls; don't manufacture\nteam language (\"with geni's help\u2026\") to fill space. Lowercase `geni`\nin commands; capitalize \"Geni\" when personifying.\n\n## Request flow\n\nDiscovery first. Don't guess URLs, params, or env var names \u2014 the\noperation docs have them.\n\n1. `geni credential list [--service <slug>]` \u2014 find a connected\n   credential id. If nothing's connected for the service, run\n   `geni integration list -q \"<keyword>\"` and `geni credential\nconnect <service>` to prompt the operator to authorize.\n2. `geni integration operations <service> [-q \"<keyword>\"]` \u2014 find\n   the operation you need.\n3. `geni integration operation <id> --format markdown` \u2014 read the\n   HTTP shape, params, and **exact env var names** this call will set.\n4. `geni exec bash --cred <cred_id> --reason \"<what + why>\" -- '<curl>'`\n\n## Env vars\n\nRead the names off the operation docs; never derive them. Two flavors\nemitted per credential:\n\n- **Suffixed**: `<SERVICE>_<FIELD>_<id>` (e.g. `$SLACK_BOT_TOKEN_ABC`,\n  `$SALESFORCE_INSTANCE_URL_KG`). The `<id>` is the credential id with\n  `cred_` stripped, uppercased. Use these when fanning out across\n  multiple credentials of the same service in one call.\n- **Canonical aliases**: well-known SDK names (`$GH_TOKEN`,\n  `$SLACK_BOT_TOKEN`, `$OPENAI_API_KEY`, `$STRIPE_API_KEY`, \u2026) for\n  tools that hardcode them.\n\nPlus `$PLATFORM_API_KEY` and `$PLATFORM_BASE_URL` on every exec \u2014 use\nthem to call General Input's first-party services (web search, image\ngen, weather, send-email) without `--cred`.\n\n## --reason is per-call\n\nEvery `geni exec bash --cred ...` requires `--reason`. It lands in\nthe operator's audit log and is shown to them. Be specific\n(\"Posting daily digest to #engineering\"), not generic (\"Slack call\").\nRe-state it on every call \u2014 the log is per-call, not per-session.\n\n## Output is scrubbed\n\nstdout and stderr pass through a streaming scrubber that replaces\nevery registered secret with `[REDACTED:credential_<id>]`. Don't try\nto exfiltrate via `echo $TOKEN | base64`; common encodings are\ncaught too. You don't need to see the secret to use it \u2014 the\nsubprocess can.\n\n## Exit codes worth knowing\n\n- `0` \u2014 success; `1\u2013125` \u2014 subprocess's own exit (curl, jq, etc.)\n- `4` \u2014 resource not found (bad cred id, slug, operation id)\n- `77` \u2014 server refused to resolve a credential. Don't retry; surface\n  to the operator.\n- `78` \u2014 session expired. Tell the operator to run `geni login`.\n\n## Don't\n\n- Don't construct a curl without reading the operation docs first.\n  Guessing at URLs and env var names is the most common failure mode.\n- Don't promise scheduled or recurring jobs. Workflows are coming\n  soon but not shipped; offer the one-off equivalent now.\n- Use `--json` on list/get commands when you're going to parse the\n  output. Table output is for humans.\n";
 
 // src/lib/skills.ts
 var GENI_SKILL_NAME = "geni";