@idapt/cli 1.8.0 → 1.9.0

package/dist/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { createFetchTransport, execute, autoMode, commandsForResource, findCommand, renderHelp, listResources, renderInstructions, quoteToken } from './chunk-WNQCFPPN.js';
+import { createFetchTransport, execute, autoMode, commandsForResource, findCommand, renderHelp, listResources, renderInstructions, quoteToken } from './chunk-TYSHO65D.js';
 import { readFileSync, mkdirSync, writeFileSync, chmodSync, rmSync } from 'fs';
 import { spawn } from 'child_process';
 import { dirname, join } from 'path';
@@ -8,7 +8,7 @@ import { createServer } from 'http';
 import { randomBytes, createHash } from 'crypto';
 
 // src/version.ts
-var VERSION = "1.8.0";
+var VERSION = "1.9.0";
 var USER_AGENT = `idapt-cli/${VERSION}`;
 function canOpenBrowser(env, isTty) {
   if (!isTty) return false;

package/dist/{chunk-WNQCFPPN.js → chunk-TYSHO65D.js}

@@ -534,7 +534,10 @@ var listCodeRunsRequestSchema = z.object({
 var executeCodeRequestSchema = z.object({
   file_id: z.string(),
   timeout_seconds: z.number().int().min(1).max(300).default(30),
-  env: z.record(z.string(), z.string()).optional()
+  env: z.record(z.string(), z.string()).optional(),
+  // Names of workspace secrets to inject as env vars (resolved server-side; the
+  // values never appear in the response and are redacted from stdout/stderr).
+  secrets: z.array(z.string()).max(50).optional()
 });
 var emptyCodeRequestSchema = z.object({});
 var RUN_COLUMNS = [
@@ -598,7 +601,7 @@ var codeCommands = [
     async: true,
     tags: ["Code Runs"],
     summary: "Execute a code file (js/ts/py/sh) in a sandbox; returns the run.",
-    description: "Execute a code file (.js, .ts, .py, .sh) in a sandboxed Lambda environment. Returns stdout, stderr, exit code, and timing.",
+    description: "Execute a code file (.js, .ts, .py, .sh) in a sandboxed Lambda environment. Returns stdout, stderr, exit code, and timing. Pass `secrets` (workspace secret names) to inject them as env vars \u2014 resolved server-side, never returned, and redacted from output.",
     errors: [403, 404, 429],
     columns: RUN_COLUMNS
   }),
@@ -685,11 +688,6 @@ var computerEnvVarResponseSchema = z.object({
   file_id: z.string().nullish(),
   created_at: z.string()
 }).meta({ id: "ComputerEnvVar" });
-z.object({
-  port: z.number(),
-  protocol: z.enum(["tcp", "udp"]),
-  source: z.string().nullish()
-}).meta({ id: "ComputerFirewallRule" });
 var computerPortResponseSchema = z.object({
   port: z.number(),
   protocol: z.string(),
@@ -779,16 +777,6 @@ var envSyncResultSchema = z.object({
   ),
   extra_on_disk: z.array(z.string())
 }).meta({ id: "EnvSyncResult" });
-var firewallResultSchema = z.object({
-  rules: z.array(
-    z.object({
-      port: z.number(),
-      protocol: z.string()
-    })
-  ),
-  query_status: z.string(),
-  query_error: z.string().nullish()
-}).meta({ id: "FirewallResult" });
 var computerPortsResultSchema = z.object({
   ports: z.array(computerPortResponseSchema),
   discovery_status: z.string(),
@@ -830,7 +818,11 @@ var updateComputerRequestSchema = z.object({
 var computerExecRequestSchema = z.object({
   command: z.string().min(1).max(8192).describe("Shell command to run."),
   timeout_seconds: z.number().int().min(1).max(900).optional(),
-  user: z.string().regex(usernamePattern).optional().describe("Unix user to run the command as.")
+  user: z.string().regex(usernamePattern).optional().describe("Unix user to run the command as."),
+  secrets: z.array(z.string()).max(50).optional().describe(
+    "Names of workspace secrets to inject. Resolved server-side, mounted by the daemon, never returned, and redacted from output."
+  ),
+  secret_mount_mode: z.enum(["env", "file"]).optional().describe("env (default) exports vars; file writes /run/idapt-secrets/.")
 });
 var computerTmuxRequestSchema = z.object({
   op: z.enum(["list", "run", "capture", "send", "kill"]).describe("Operation discriminator; the response shape depends on `op`."),
@@ -885,14 +877,6 @@ var createUserEnvVarRequestSchema = z.union([
     )
   })
 ]);
-var addFirewallRuleRequestSchema = z.object({
-  port: z.number().int().min(1).max(65535).describe("Port to open."),
-  protocol: z.enum(["tcp", "udp"]).default("tcp")
-});
-var removeFirewallRuleRequestSchema = z.object({
-  port: z.coerce.number().int().describe("Port of the rule to remove."),
-  protocol: z.enum(["tcp", "udp"]).optional()
-});
 var patchComputerPortRequestSchema = z.object({
   port: z.number().int().min(1).max(65535),
   protocol: z.string(),
@@ -1270,47 +1254,7 @@ var computerCommands = [
     description: "Operation discriminator on `op`; the response shape depends on `op`. Streaming upload + download have dedicated routes. Daemon-layer failures map to `internal_error`/`conflict`/`not_found`/`forbidden`.",
     errors: [403, 409, 500, 503]
   }),
-  // ---- firewall + ports ---------------------------------------------------
-  cmd({
-    resource: "computer",
-    verb: "firewall",
-    method: "GET",
-    path: "/computers/:id/firewall",
-    response: firewallResultSchema,
-    permission: P,
-    responseKind: "single",
-    tags: TAGS,
-    summary: "List firewall rules.",
-    description: "Query iptables rules (cloud computers only).",
-    errors: [403]
-  }),
-  cmd({
-    resource: "computer",
-    verb: "firewall-add",
-    method: "POST",
-    path: "/computers/:id/firewall",
-    request: addFirewallRuleRequestSchema,
-    response: firewallResultSchema,
-    permission: W,
-    responseKind: "single",
-    tags: TAGS,
-    summary: "Add a firewall rule.",
-    errors: [403, 409, 500]
-  }),
-  cmd({
-    resource: "computer",
-    verb: "firewall-remove",
-    method: "DELETE",
-    path: "/computers/:id/firewall",
-    argLocation: "query",
-    request: removeFirewallRuleRequestSchema,
-    response: firewallResultSchema,
-    permission: W,
-    responseKind: "single",
-    tags: TAGS,
-    summary: "Remove a firewall rule.",
-    errors: [403, 409, 500]
-  }),
+  // ---- ports --------------------------------------------------------------
   cmd({
     resource: "computer",
     verb: "ports",
@@ -1761,25 +1705,6 @@ var computerCommands = [
     public: false,
     tags: TAGS,
     summary: "Close a computer's public tunnel for a port."
-  }),
-  // `firewall-edit` is the agent's add-OR-remove verb (it carries a
-  // `firewall_action` sub-action) — distinct from the discrete public
-  // `firewall-add` (POST) / `firewall-remove` (DELETE). agent-internal.
-  cmd({
-    resource: "computer",
-    verb: "firewall-edit",
-    method: "POST",
-    path: "/computers/:id/firewall-edit",
-    request: z.object({
-      firewall_action: z.enum(["add", "remove"]),
-      port: z.coerce.number().int().min(1).max(65535),
-      protocol: z.enum(["tcp", "udp"]).optional()
-    }),
-    permission: W,
-    responseKind: "single",
-    public: false,
-    tags: TAGS,
-    summary: "Add or remove a firewall rule (agent add-or-remove verb)."
   })
 ];
 var computerPlaybook = {
@@ -1787,14 +1712,14 @@ var computerPlaybook = {
   instructions: `Computers are remote machines. \`computer list\`/\`get\`; lifecycle via
 \`start\`/\`stop\`/\`hibernate\`/\`archive\`. Run commands with \`computer exec <id> --command \u2026\`
 (long-running \u2014 use --background). Transfer files with \`computer download <id> --path \u2026\`
-and \`computer upload\`. Manage \`firewall\`/\`ports\`/\`users\` and Docker \`apps\`
+and \`computer upload\`. Manage \`ports\`/\`users\` and Docker \`apps\`
 (\`app-run\`, \`app-start\`/\`stop\`, \`app-logs\`, \`app-exec\`).
 
 A computer lives in ONE home workspace (full control). Share its LOCAL INFERENCE
 ONLY into other workspaces with \`computer link <id> --workspace-id <ws>\` (never
 shares shell / files / tunnels); \`computer links <id>\` lists the shares and
-\`computer unlink <id> --workspace-id <ws>\` revokes one. Pair a new machine with
-the \`idapt up\` / \`idapt pair\` daemon flow (defaults to your personal
+\`computer unlink <id> --workspace-id <ws>\` revokes one. Register a new machine with
+the \`idapt up\` daemon flow (defaults to your personal
 workspace).`
 };
 var listQuery = z.object({
@@ -1816,7 +1741,6 @@ var agentResponseSchema = z.object({
   workspace_id: z.string().nullish(),
   type: z.string().nullish(),
   permissions: z.array(z.record(z.string(), z.unknown())).nullish(),
-  confirmation_required: z.array(z.string()).optional(),
   compaction_preset: z.enum(["minimal", "normal", "detailed"]).nullish(),
   compaction_summary_percent: z.number().nullish(),
   compaction_summary_max_tokens: z.number().nullish(),
@@ -1824,6 +1748,8 @@ var agentResponseSchema = z.object({
   compaction_preserved_max_tokens: z.number().nullish(),
   compaction_msg_percent: z.number().nullish(),
   compaction_msg_max_tokens: z.number().nullish(),
+  compaction_trigger_type: z.enum(["percent", "tokens"]).nullish(),
+  compaction_trigger_value: z.number().nullish(),
   source_template_resource_id: z.string().nullish(),
   memory_folder: z.string().nullish(),
   default_model_id: z.string().nullish(),
@@ -2134,7 +2060,9 @@ var agentCompactionFields = {
   compaction_preserved_percent: z.number().min(0).max(100).nullish(),
   compaction_preserved_max_tokens: z.number().min(0).max(5e5).nullish(),
   compaction_msg_percent: z.number().min(0).max(100).nullish(),
-  compaction_msg_max_tokens: z.number().min(0).max(5e5).nullish()
+  compaction_msg_max_tokens: z.number().min(0).max(5e5).nullish(),
+  compaction_trigger_type: z.enum(["percent", "tokens"]).nullish(),
+  compaction_trigger_value: z.number().int().min(0).nullish()
 };
 var createAgentRequestSchema = z.object({
   name: z.string().min(1).max(80),
@@ -2145,7 +2073,6 @@ var createAgentRequestSchema = z.object({
   authorization: z.record(z.string(), z.unknown()).nullish().describe(
     "Agent authorization policy. Null clears explicit policy; omitted uses the default workspace-write policy."
   ),
-  confirmation_required: z.array(z.string()).max(200).optional(),
   ...agentCompactionFields,
   type: z.enum(["user", "generated"]).optional().describe("Agent type."),
   memory_folder: z.string().max(500).nullish(),
@@ -2160,7 +2087,6 @@ var updateAgentRequestSchema = z.object({
   description: z.string().max(2e3).nullish(),
   system_prompt: z.string().max(131072).nullish(),
   authorization: z.record(z.string(), z.unknown()).nullish().describe("Agent authorization policy. Null clears explicit policy."),
-  confirmation_required: z.array(z.string()).max(200).optional(),
   ...agentCompactionFields,
   type: z.enum(["user", "generated"]).optional(),
   memory_folder: z.string().max(500).nullish(),
@@ -5268,6 +5194,10 @@ var secretResponseSchema = z.object({
   type: z.string().nullish(),
   /** Masked last-4 preview — never reconstructs the value. */
   value_preview: z.string().nullish(),
+  /** ISO-8601 expiry instant, or null. Past expiry blocks injection. */
+  expires_at: z.string().nullish(),
+  /** ISO-8601 of the last reveal/inject, or null if never used. */
+  last_used_at: z.string().nullish(),
   created_at: z.string(),
   updated_at: z.string()
 }).meta({ id: "Secret" });
@@ -5290,11 +5220,14 @@ var createSecretRequestSchema = z.object({
     "ssh_private_key",
     "ssh_public_key"
   ]).optional(),
+  /** ISO-8601 expiry instant; null/omitted = never expires. */
+  expires_at: z.string().datetime({ offset: true }).nullish(),
   workspace_id: z.string().max(64).optional()
 });
 var updateSecretRequestSchema = z.object({
   value: z.string().min(1).optional(),
-  description: z.string().max(1e3).nullish()
+  description: z.string().max(1e3).nullish(),
+  expires_at: z.string().datetime({ offset: true }).nullish()
 });
 var secretsCommands = [
   cmd({
@@ -5398,11 +5331,20 @@ var secretsPlaybook = {
     "  contents. Don't ask the user to paste a secret into the chat.",
     "",
     "- `create --name OPENAI_API_KEY --value <v>`: prefer ALL_CAPS names (they map",
-    "  cleanly to env vars). Names are unique per workspace.",
+    "  cleanly to env vars). Optional `--expires-at <ISO-8601>`. Unique per workspace.",
     "- `update` ROTATES: the old value is destroyed immediately and anything using",
     "  it breaks until re-pointed. There is no rename \u2014 create a new one.",
     "- `delete` is immediate and irreversible.",
     "",
+    "Using a secret at run time (pass the NAME, never the value):",
+    "- `code execute --secrets '[\"GITHUB_TOKEN\"]'` \u2192 the script sees it as the env",
+    "  var `GITHUB_TOKEN`; `bash --secrets [...]` and `computer exec --secrets [...]`",
+    "  work the same. The value is injected server-side and redacted from output.",
+    // biome-ignore lint/suspicious/noTemplateCurlyInString: literal ${secret:NAME} reference syntax, not a template placeholder
+    "- Or embed `${secret:NAME}` inside a free-form `env` value (e.g.",
+    // biome-ignore lint/suspicious/noTemplateCurlyInString: literal example of the ${secret:NAME} syntax
+    "  `DATABASE_URL=postgres://app:${secret:DB_PASSWORD}@db`).",
+    "",
     "Anti-patterns: never print, log, or repeat a secret value the user gives you \u2014",
     "create it and move on. Secrets live here, not as Drive files and not in chat."
   ].join("\n")
@@ -5660,9 +5602,12 @@ function argLines(spec) {
   }
   return lines;
 }
-function renderHelp(spec) {
+function renderHelp(spec, options = {}) {
   const lines = [];
-  lines.push(`idapt ${spec.command} \u2014 ${spec.summary}`);
+  const command = options.command ?? spec.command;
+  const summary = options.summary ?? spec.summary;
+  const resource = options.resource ?? spec.resource;
+  lines.push(`idapt ${command} \u2014 ${summary}`);
   lines.push("");
   lines.push(`  ${spec.method} /api/v1${spec.path}`);
   if (spec.async) lines.push("  (long-running \u2014 supports --background)");
@@ -5677,7 +5622,7 @@ function renderHelp(spec) {
     lines.push(spec.help);
   }
   lines.push("");
-  lines.push(`Playbook: idapt instructions ${spec.resource}`);
+  lines.push(`Playbook: idapt instructions ${resource}`);
   return lines.join("\n");
 }
 function renderInstructions(resource) {
@@ -5756,6 +5701,7 @@ function parseIdaptCommand(cmd2) {
       args: parsedFlags.args,
       timeoutSeconds,
       background: parsedFlags.args.background === true,
+      requiresConfirmation: parsedFlags.args.requiresConfirmation === true || parsedFlags.args["requires-confirmation"] === true || parsedFlags.args.requires_confirmation === true,
       help: parsedFlags.args.help === true,
       instructions: parsedFlags.args.instructions === true
     }
@@ -6038,6 +5984,8 @@ var VERB_OVERRIDES = {
   "trigger read": "trigger get",
   "trigger edit": "trigger update",
   "trigger fire": "trigger test-fire",
+  // secrets — `edit` is the natural verb; the contract op is `update` (rotate).
+  "secret edit": "secret update",
   // utility → catalog
   "utility search-llm-models": "models search",
   "utility search-image-models": "image search",
@@ -6068,9 +6016,6 @@ var VERB_OVERRIDES = {
   "computer file-download": "computer download",
   "computer upload-dir": "computer upload",
   "computer download-dir": "computer download",
-  "computer firewall-view": "computer firewall",
-  // NB: `firewall-edit` is identity (its own add-or-remove route) — it must NOT
-  // map to `firewall-add`, or `--firewall-action remove` would silently ADD.
   "computer user-list": "computer users",
   "computer user-create": "computer create-user",
   "computer user-delete": "computer delete-user",
@@ -6482,5 +6427,5 @@ function createFetchTransport(opts) {
 }
 
 export { VERB_OVERRIDES, autoMode, commandsForResource, createFetchTransport, execute, executeCommand, findCommand, getResourcePlaybook, listCommands, listResources, mapArgsToV1, parseInvocation, quoteToken, reconcileToV1, render, renderHelp, renderInstructions, resolveCommand, toSnakeKey };
-//# sourceMappingURL=chunk-WNQCFPPN.js.map
-//# sourceMappingURL=chunk-WNQCFPPN.js.map
+//# sourceMappingURL=chunk-TYSHO65D.js.map
+//# sourceMappingURL=chunk-TYSHO65D.js.map