@idapt/cli 1.8.1 → 1.9.0

package/dist/bin.cjs

@@ -79,6 +79,7 @@ function parseIdaptCommand(cmd2) {
       args: parsedFlags.args,
       timeoutSeconds,
       background: parsedFlags.args.background === true,
+      requiresConfirmation: parsedFlags.args.requiresConfirmation === true || parsedFlags.args["requires-confirmation"] === true || parsedFlags.args.requires_confirmation === true,
       help: parsedFlags.args.help === true,
       instructions: parsedFlags.args.instructions === true
     }
@@ -325,7 +326,7 @@ function createFetchTransport(opts) {
 }
 
 // src/version.ts
-var VERSION = "1.8.1";
+var VERSION = "1.9.0";
 var USER_AGENT = `idapt-cli/${VERSION}`;
 function canOpenBrowser(env, isTty) {
   if (!isTty) return false;
@@ -1364,7 +1365,10 @@ var listCodeRunsRequestSchema = zod.z.object({
 var executeCodeRequestSchema = zod.z.object({
   file_id: zod.z.string(),
   timeout_seconds: zod.z.number().int().min(1).max(300).default(30),
-  env: zod.z.record(zod.z.string(), zod.z.string()).optional()
+  env: zod.z.record(zod.z.string(), zod.z.string()).optional(),
+  // Names of workspace secrets to inject as env vars (resolved server-side; the
+  // values never appear in the response and are redacted from stdout/stderr).
+  secrets: zod.z.array(zod.z.string()).max(50).optional()
 });
 var emptyCodeRequestSchema = zod.z.object({});
 var RUN_COLUMNS = [
@@ -1428,7 +1432,7 @@ var codeCommands = [
     async: true,
     tags: ["Code Runs"],
     summary: "Execute a code file (js/ts/py/sh) in a sandbox; returns the run.",
-    description: "Execute a code file (.js, .ts, .py, .sh) in a sandboxed Lambda environment. Returns stdout, stderr, exit code, and timing.",
+    description: "Execute a code file (.js, .ts, .py, .sh) in a sandboxed Lambda environment. Returns stdout, stderr, exit code, and timing. Pass `secrets` (workspace secret names) to inject them as env vars \u2014 resolved server-side, never returned, and redacted from output.",
     errors: [403, 404, 429],
     columns: RUN_COLUMNS
   }),
@@ -1645,7 +1649,11 @@ var updateComputerRequestSchema = zod.z.object({
 var computerExecRequestSchema = zod.z.object({
   command: zod.z.string().min(1).max(8192).describe("Shell command to run."),
   timeout_seconds: zod.z.number().int().min(1).max(900).optional(),
-  user: zod.z.string().regex(usernamePattern).optional().describe("Unix user to run the command as.")
+  user: zod.z.string().regex(usernamePattern).optional().describe("Unix user to run the command as."),
+  secrets: zod.z.array(zod.z.string()).max(50).optional().describe(
+    "Names of workspace secrets to inject. Resolved server-side, mounted by the daemon, never returned, and redacted from output."
+  ),
+  secret_mount_mode: zod.z.enum(["env", "file"]).optional().describe("env (default) exports vars; file writes /run/idapt-secrets/.")
 });
 var computerTmuxRequestSchema = zod.z.object({
   op: zod.z.enum(["list", "run", "capture", "send", "kill"]).describe("Operation discriminator; the response shape depends on `op`."),
@@ -2564,7 +2572,6 @@ var agentResponseSchema = zod.z.object({
   workspace_id: zod.z.string().nullish(),
   type: zod.z.string().nullish(),
   permissions: zod.z.array(zod.z.record(zod.z.string(), zod.z.unknown())).nullish(),
-  confirmation_required: zod.z.array(zod.z.string()).optional(),
   compaction_preset: zod.z.enum(["minimal", "normal", "detailed"]).nullish(),
   compaction_summary_percent: zod.z.number().nullish(),
   compaction_summary_max_tokens: zod.z.number().nullish(),
@@ -2897,7 +2904,6 @@ var createAgentRequestSchema = zod.z.object({
   authorization: zod.z.record(zod.z.string(), zod.z.unknown()).nullish().describe(
     "Agent authorization policy. Null clears explicit policy; omitted uses the default workspace-write policy."
   ),
-  confirmation_required: zod.z.array(zod.z.string()).max(200).optional(),
   ...agentCompactionFields,
   type: zod.z.enum(["user", "generated"]).optional().describe("Agent type."),
   memory_folder: zod.z.string().max(500).nullish(),
@@ -2912,7 +2918,6 @@ var updateAgentRequestSchema = zod.z.object({
   description: zod.z.string().max(2e3).nullish(),
   system_prompt: zod.z.string().max(131072).nullish(),
   authorization: zod.z.record(zod.z.string(), zod.z.unknown()).nullish().describe("Agent authorization policy. Null clears explicit policy."),
-  confirmation_required: zod.z.array(zod.z.string()).max(200).optional(),
   ...agentCompactionFields,
   type: zod.z.enum(["user", "generated"]).optional(),
   memory_folder: zod.z.string().max(500).nullish(),
@@ -6020,6 +6025,10 @@ var secretResponseSchema = zod.z.object({
   type: zod.z.string().nullish(),
   /** Masked last-4 preview — never reconstructs the value. */
   value_preview: zod.z.string().nullish(),
+  /** ISO-8601 expiry instant, or null. Past expiry blocks injection. */
+  expires_at: zod.z.string().nullish(),
+  /** ISO-8601 of the last reveal/inject, or null if never used. */
+  last_used_at: zod.z.string().nullish(),
   created_at: zod.z.string(),
   updated_at: zod.z.string()
 }).meta({ id: "Secret" });
@@ -6042,11 +6051,14 @@ var createSecretRequestSchema = zod.z.object({
     "ssh_private_key",
     "ssh_public_key"
   ]).optional(),
+  /** ISO-8601 expiry instant; null/omitted = never expires. */
+  expires_at: zod.z.string().datetime({ offset: true }).nullish(),
   workspace_id: zod.z.string().max(64).optional()
 });
 var updateSecretRequestSchema = zod.z.object({
   value: zod.z.string().min(1).optional(),
-  description: zod.z.string().max(1e3).nullish()
+  description: zod.z.string().max(1e3).nullish(),
+  expires_at: zod.z.string().datetime({ offset: true }).nullish()
 });
 var secretsCommands = [
   cmd({
@@ -6150,11 +6162,20 @@ var secretsPlaybook = {
     "  contents. Don't ask the user to paste a secret into the chat.",
     "",
     "- `create --name OPENAI_API_KEY --value <v>`: prefer ALL_CAPS names (they map",
-    "  cleanly to env vars). Names are unique per workspace.",
+    "  cleanly to env vars). Optional `--expires-at <ISO-8601>`. Unique per workspace.",
     "- `update` ROTATES: the old value is destroyed immediately and anything using",
     "  it breaks until re-pointed. There is no rename \u2014 create a new one.",
     "- `delete` is immediate and irreversible.",
     "",
+    "Using a secret at run time (pass the NAME, never the value):",
+    "- `code execute --secrets '[\"GITHUB_TOKEN\"]'` \u2192 the script sees it as the env",
+    "  var `GITHUB_TOKEN`; `bash --secrets [...]` and `computer exec --secrets [...]`",
+    "  work the same. The value is injected server-side and redacted from output.",
+    // biome-ignore lint/suspicious/noTemplateCurlyInString: literal ${secret:NAME} reference syntax, not a template placeholder
+    "- Or embed `${secret:NAME}` inside a free-form `env` value (e.g.",
+    // biome-ignore lint/suspicious/noTemplateCurlyInString: literal example of the ${secret:NAME} syntax
+    "  `DATABASE_URL=postgres://app:${secret:DB_PASSWORD}@db`).",
+    "",
     "Anti-patterns: never print, log, or repeat a secret value the user gives you \u2014",
     "create it and move on. Secrets live here, not as Drive files and not in chat."
   ].join("\n")
@@ -6595,6 +6616,8 @@ var VERB_OVERRIDES = {
   "trigger read": "trigger get",
   "trigger edit": "trigger update",
   "trigger fire": "trigger test-fire",
+  // secrets — `edit` is the natural verb; the contract op is `update` (rotate).
+  "secret edit": "secret update",
   // utility → catalog
   "utility search-llm-models": "models search",
   "utility search-image-models": "image search",