@idapt/cli 1.8.0 → 1.9.0

package/dist/index.cjs

@@ -536,7 +536,10 @@ var listCodeRunsRequestSchema = zod.z.object({
 var executeCodeRequestSchema = zod.z.object({
   file_id: zod.z.string(),
   timeout_seconds: zod.z.number().int().min(1).max(300).default(30),
-  env: zod.z.record(zod.z.string(), zod.z.string()).optional()
+  env: zod.z.record(zod.z.string(), zod.z.string()).optional(),
+  // Names of workspace secrets to inject as env vars (resolved server-side; the
+  // values never appear in the response and are redacted from stdout/stderr).
+  secrets: zod.z.array(zod.z.string()).max(50).optional()
 });
 var emptyCodeRequestSchema = zod.z.object({});
 var RUN_COLUMNS = [
@@ -600,7 +603,7 @@ var codeCommands = [
     async: true,
     tags: ["Code Runs"],
     summary: "Execute a code file (js/ts/py/sh) in a sandbox; returns the run.",
-    description: "Execute a code file (.js, .ts, .py, .sh) in a sandboxed Lambda environment. Returns stdout, stderr, exit code, and timing.",
+    description: "Execute a code file (.js, .ts, .py, .sh) in a sandboxed Lambda environment. Returns stdout, stderr, exit code, and timing. Pass `secrets` (workspace secret names) to inject them as env vars \u2014 resolved server-side, never returned, and redacted from output.",
     errors: [403, 404, 429],
     columns: RUN_COLUMNS
   }),
@@ -687,11 +690,6 @@ var computerEnvVarResponseSchema = zod.z.object({
   file_id: zod.z.string().nullish(),
   created_at: zod.z.string()
 }).meta({ id: "ComputerEnvVar" });
-zod.z.object({
-  port: zod.z.number(),
-  protocol: zod.z.enum(["tcp", "udp"]),
-  source: zod.z.string().nullish()
-}).meta({ id: "ComputerFirewallRule" });
 var computerPortResponseSchema = zod.z.object({
   port: zod.z.number(),
   protocol: zod.z.string(),
@@ -781,16 +779,6 @@ var envSyncResultSchema = zod.z.object({
   ),
   extra_on_disk: zod.z.array(zod.z.string())
 }).meta({ id: "EnvSyncResult" });
-var firewallResultSchema = zod.z.object({
-  rules: zod.z.array(
-    zod.z.object({
-      port: zod.z.number(),
-      protocol: zod.z.string()
-    })
-  ),
-  query_status: zod.z.string(),
-  query_error: zod.z.string().nullish()
-}).meta({ id: "FirewallResult" });
 var computerPortsResultSchema = zod.z.object({
   ports: zod.z.array(computerPortResponseSchema),
   discovery_status: zod.z.string(),
@@ -832,7 +820,11 @@ var updateComputerRequestSchema = zod.z.object({
 var computerExecRequestSchema = zod.z.object({
   command: zod.z.string().min(1).max(8192).describe("Shell command to run."),
   timeout_seconds: zod.z.number().int().min(1).max(900).optional(),
-  user: zod.z.string().regex(usernamePattern).optional().describe("Unix user to run the command as.")
+  user: zod.z.string().regex(usernamePattern).optional().describe("Unix user to run the command as."),
+  secrets: zod.z.array(zod.z.string()).max(50).optional().describe(
+    "Names of workspace secrets to inject. Resolved server-side, mounted by the daemon, never returned, and redacted from output."
+  ),
+  secret_mount_mode: zod.z.enum(["env", "file"]).optional().describe("env (default) exports vars; file writes /run/idapt-secrets/.")
 });
 var computerTmuxRequestSchema = zod.z.object({
   op: zod.z.enum(["list", "run", "capture", "send", "kill"]).describe("Operation discriminator; the response shape depends on `op`."),
@@ -887,14 +879,6 @@ var createUserEnvVarRequestSchema = zod.z.union([
     )
   })
 ]);
-var addFirewallRuleRequestSchema = zod.z.object({
-  port: zod.z.number().int().min(1).max(65535).describe("Port to open."),
-  protocol: zod.z.enum(["tcp", "udp"]).default("tcp")
-});
-var removeFirewallRuleRequestSchema = zod.z.object({
-  port: zod.z.coerce.number().int().describe("Port of the rule to remove."),
-  protocol: zod.z.enum(["tcp", "udp"]).optional()
-});
 var patchComputerPortRequestSchema = zod.z.object({
   port: zod.z.number().int().min(1).max(65535),
   protocol: zod.z.string(),
@@ -1272,47 +1256,7 @@ var computerCommands = [
     description: "Operation discriminator on `op`; the response shape depends on `op`. Streaming upload + download have dedicated routes. Daemon-layer failures map to `internal_error`/`conflict`/`not_found`/`forbidden`.",
     errors: [403, 409, 500, 503]
   }),
-  // ---- firewall + ports ---------------------------------------------------
-  cmd({
-    resource: "computer",
-    verb: "firewall",
-    method: "GET",
-    path: "/computers/:id/firewall",
-    response: firewallResultSchema,
-    permission: P,
-    responseKind: "single",
-    tags: TAGS,
-    summary: "List firewall rules.",
-    description: "Query iptables rules (cloud computers only).",
-    errors: [403]
-  }),
-  cmd({
-    resource: "computer",
-    verb: "firewall-add",
-    method: "POST",
-    path: "/computers/:id/firewall",
-    request: addFirewallRuleRequestSchema,
-    response: firewallResultSchema,
-    permission: W,
-    responseKind: "single",
-    tags: TAGS,
-    summary: "Add a firewall rule.",
-    errors: [403, 409, 500]
-  }),
-  cmd({
-    resource: "computer",
-    verb: "firewall-remove",
-    method: "DELETE",
-    path: "/computers/:id/firewall",
-    argLocation: "query",
-    request: removeFirewallRuleRequestSchema,
-    response: firewallResultSchema,
-    permission: W,
-    responseKind: "single",
-    tags: TAGS,
-    summary: "Remove a firewall rule.",
-    errors: [403, 409, 500]
-  }),
+  // ---- ports --------------------------------------------------------------
   cmd({
     resource: "computer",
     verb: "ports",
@@ -1763,25 +1707,6 @@ var computerCommands = [
     public: false,
     tags: TAGS,
     summary: "Close a computer's public tunnel for a port."
-  }),
-  // `firewall-edit` is the agent's add-OR-remove verb (it carries a
-  // `firewall_action` sub-action) — distinct from the discrete public
-  // `firewall-add` (POST) / `firewall-remove` (DELETE). agent-internal.
-  cmd({
-    resource: "computer",
-    verb: "firewall-edit",
-    method: "POST",
-    path: "/computers/:id/firewall-edit",
-    request: zod.z.object({
-      firewall_action: zod.z.enum(["add", "remove"]),
-      port: zod.z.coerce.number().int().min(1).max(65535),
-      protocol: zod.z.enum(["tcp", "udp"]).optional()
-    }),
-    permission: W,
-    responseKind: "single",
-    public: false,
-    tags: TAGS,
-    summary: "Add or remove a firewall rule (agent add-or-remove verb)."
   })
 ];
 var computerPlaybook = {
@@ -1789,14 +1714,14 @@ var computerPlaybook = {
   instructions: `Computers are remote machines. \`computer list\`/\`get\`; lifecycle via
 \`start\`/\`stop\`/\`hibernate\`/\`archive\`. Run commands with \`computer exec <id> --command \u2026\`
 (long-running \u2014 use --background). Transfer files with \`computer download <id> --path \u2026\`
-and \`computer upload\`. Manage \`firewall\`/\`ports\`/\`users\` and Docker \`apps\`
+and \`computer upload\`. Manage \`ports\`/\`users\` and Docker \`apps\`
 (\`app-run\`, \`app-start\`/\`stop\`, \`app-logs\`, \`app-exec\`).
 
 A computer lives in ONE home workspace (full control). Share its LOCAL INFERENCE
 ONLY into other workspaces with \`computer link <id> --workspace-id <ws>\` (never
 shares shell / files / tunnels); \`computer links <id>\` lists the shares and
-\`computer unlink <id> --workspace-id <ws>\` revokes one. Pair a new machine with
-the \`idapt up\` / \`idapt pair\` daemon flow (defaults to your personal
+\`computer unlink <id> --workspace-id <ws>\` revokes one. Register a new machine with
+the \`idapt up\` daemon flow (defaults to your personal
 workspace).`
 };
 var listQuery = zod.z.object({
@@ -1818,7 +1743,6 @@ var agentResponseSchema = zod.z.object({
   workspace_id: zod.z.string().nullish(),
   type: zod.z.string().nullish(),
   permissions: zod.z.array(zod.z.record(zod.z.string(), zod.z.unknown())).nullish(),
-  confirmation_required: zod.z.array(zod.z.string()).optional(),
   compaction_preset: zod.z.enum(["minimal", "normal", "detailed"]).nullish(),
   compaction_summary_percent: zod.z.number().nullish(),
   compaction_summary_max_tokens: zod.z.number().nullish(),
@@ -1826,6 +1750,8 @@ var agentResponseSchema = zod.z.object({
   compaction_preserved_max_tokens: zod.z.number().nullish(),
   compaction_msg_percent: zod.z.number().nullish(),
   compaction_msg_max_tokens: zod.z.number().nullish(),
+  compaction_trigger_type: zod.z.enum(["percent", "tokens"]).nullish(),
+  compaction_trigger_value: zod.z.number().nullish(),
   source_template_resource_id: zod.z.string().nullish(),
   memory_folder: zod.z.string().nullish(),
   default_model_id: zod.z.string().nullish(),
@@ -2136,7 +2062,9 @@ var agentCompactionFields = {
   compaction_preserved_percent: zod.z.number().min(0).max(100).nullish(),
   compaction_preserved_max_tokens: zod.z.number().min(0).max(5e5).nullish(),
   compaction_msg_percent: zod.z.number().min(0).max(100).nullish(),
-  compaction_msg_max_tokens: zod.z.number().min(0).max(5e5).nullish()
+  compaction_msg_max_tokens: zod.z.number().min(0).max(5e5).nullish(),
+  compaction_trigger_type: zod.z.enum(["percent", "tokens"]).nullish(),
+  compaction_trigger_value: zod.z.number().int().min(0).nullish()
 };
 var createAgentRequestSchema = zod.z.object({
   name: zod.z.string().min(1).max(80),
@@ -2147,7 +2075,6 @@ var createAgentRequestSchema = zod.z.object({
   authorization: zod.z.record(zod.z.string(), zod.z.unknown()).nullish().describe(
     "Agent authorization policy. Null clears explicit policy; omitted uses the default workspace-write policy."
   ),
-  confirmation_required: zod.z.array(zod.z.string()).max(200).optional(),
   ...agentCompactionFields,
   type: zod.z.enum(["user", "generated"]).optional().describe("Agent type."),
   memory_folder: zod.z.string().max(500).nullish(),
@@ -2162,7 +2089,6 @@ var updateAgentRequestSchema = zod.z.object({
   description: zod.z.string().max(2e3).nullish(),
   system_prompt: zod.z.string().max(131072).nullish(),
   authorization: zod.z.record(zod.z.string(), zod.z.unknown()).nullish().describe("Agent authorization policy. Null clears explicit policy."),
-  confirmation_required: zod.z.array(zod.z.string()).max(200).optional(),
   ...agentCompactionFields,
   type: zod.z.enum(["user", "generated"]).optional(),
   memory_folder: zod.z.string().max(500).nullish(),
@@ -5270,6 +5196,10 @@ var secretResponseSchema = zod.z.object({
   type: zod.z.string().nullish(),
   /** Masked last-4 preview — never reconstructs the value. */
   value_preview: zod.z.string().nullish(),
+  /** ISO-8601 expiry instant, or null. Past expiry blocks injection. */
+  expires_at: zod.z.string().nullish(),
+  /** ISO-8601 of the last reveal/inject, or null if never used. */
+  last_used_at: zod.z.string().nullish(),
   created_at: zod.z.string(),
   updated_at: zod.z.string()
 }).meta({ id: "Secret" });
@@ -5292,11 +5222,14 @@ var createSecretRequestSchema = zod.z.object({
     "ssh_private_key",
     "ssh_public_key"
   ]).optional(),
+  /** ISO-8601 expiry instant; null/omitted = never expires. */
+  expires_at: zod.z.string().datetime({ offset: true }).nullish(),
   workspace_id: zod.z.string().max(64).optional()
 });
 var updateSecretRequestSchema = zod.z.object({
   value: zod.z.string().min(1).optional(),
-  description: zod.z.string().max(1e3).nullish()
+  description: zod.z.string().max(1e3).nullish(),
+  expires_at: zod.z.string().datetime({ offset: true }).nullish()
 });
 var secretsCommands = [
   cmd({
@@ -5400,11 +5333,20 @@ var secretsPlaybook = {
     "  contents. Don't ask the user to paste a secret into the chat.",
     "",
     "- `create --name OPENAI_API_KEY --value <v>`: prefer ALL_CAPS names (they map",
-    "  cleanly to env vars). Names are unique per workspace.",
+    "  cleanly to env vars). Optional `--expires-at <ISO-8601>`. Unique per workspace.",
     "- `update` ROTATES: the old value is destroyed immediately and anything using",
     "  it breaks until re-pointed. There is no rename \u2014 create a new one.",
     "- `delete` is immediate and irreversible.",
     "",
+    "Using a secret at run time (pass the NAME, never the value):",
+    "- `code execute --secrets '[\"GITHUB_TOKEN\"]'` \u2192 the script sees it as the env",
+    "  var `GITHUB_TOKEN`; `bash --secrets [...]` and `computer exec --secrets [...]`",
+    "  work the same. The value is injected server-side and redacted from output.",
+    // biome-ignore lint/suspicious/noTemplateCurlyInString: literal ${secret:NAME} reference syntax, not a template placeholder
+    "- Or embed `${secret:NAME}` inside a free-form `env` value (e.g.",
+    // biome-ignore lint/suspicious/noTemplateCurlyInString: literal example of the ${secret:NAME} syntax
+    "  `DATABASE_URL=postgres://app:${secret:DB_PASSWORD}@db`).",
+    "",
     "Anti-patterns: never print, log, or repeat a secret value the user gives you \u2014",
     "create it and move on. Secrets live here, not as Drive files and not in chat."
   ].join("\n")
@@ -5662,9 +5604,12 @@ function argLines(spec) {
   }
   return lines;
 }
-function renderHelp(spec) {
+function renderHelp(spec, options = {}) {
   const lines = [];
-  lines.push(`idapt ${spec.command} \u2014 ${spec.summary}`);
+  const command = options.command ?? spec.command;
+  const summary = options.summary ?? spec.summary;
+  const resource = options.resource ?? spec.resource;
+  lines.push(`idapt ${command} \u2014 ${summary}`);
   lines.push("");
   lines.push(`  ${spec.method} /api/v1${spec.path}`);
   if (spec.async) lines.push("  (long-running \u2014 supports --background)");
@@ -5679,7 +5624,7 @@ function renderHelp(spec) {
     lines.push(spec.help);
   }
   lines.push("");
-  lines.push(`Playbook: idapt instructions ${spec.resource}`);
+  lines.push(`Playbook: idapt instructions ${resource}`);
   return lines.join("\n");
 }
 function renderInstructions(resource) {
@@ -5758,6 +5703,7 @@ function parseIdaptCommand(cmd2) {
       args: parsedFlags.args,
       timeoutSeconds,
       background: parsedFlags.args.background === true,
+      requiresConfirmation: parsedFlags.args.requiresConfirmation === true || parsedFlags.args["requires-confirmation"] === true || parsedFlags.args.requires_confirmation === true,
       help: parsedFlags.args.help === true,
       instructions: parsedFlags.args.instructions === true
     }
@@ -6035,6 +5981,8 @@ var VERB_OVERRIDES = {
   "trigger read": "trigger get",
   "trigger edit": "trigger update",
   "trigger fire": "trigger test-fire",
+  // secrets — `edit` is the natural verb; the contract op is `update` (rotate).
+  "secret edit": "secret update",
   // utility → catalog
   "utility search-llm-models": "models search",
   "utility search-image-models": "image search",
@@ -6065,9 +6013,6 @@ var VERB_OVERRIDES = {
   "computer file-download": "computer download",
   "computer upload-dir": "computer upload",
   "computer download-dir": "computer download",
-  "computer firewall-view": "computer firewall",
-  // NB: `firewall-edit` is identity (its own add-or-remove route) — it must NOT
-  // map to `firewall-add`, or `--firewall-action remove` would silently ADD.
   "computer user-list": "computer users",
   "computer user-create": "computer create-user",
   "computer user-delete": "computer delete-user",