@idapt/cli 1.8.1 → 1.9.0

package/dist/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { createFetchTransport, execute, autoMode, commandsForResource, findCommand, renderHelp, listResources, renderInstructions, quoteToken } from './chunk-ZCMZH43X.js';
+import { createFetchTransport, execute, autoMode, commandsForResource, findCommand, renderHelp, listResources, renderInstructions, quoteToken } from './chunk-TYSHO65D.js';
 import { readFileSync, mkdirSync, writeFileSync, chmodSync, rmSync } from 'fs';
 import { spawn } from 'child_process';
 import { dirname, join } from 'path';
@@ -8,7 +8,7 @@ import { createServer } from 'http';
 import { randomBytes, createHash } from 'crypto';
 
 // src/version.ts
-var VERSION = "1.8.1";
+var VERSION = "1.9.0";
 var USER_AGENT = `idapt-cli/${VERSION}`;
 function canOpenBrowser(env, isTty) {
   if (!isTty) return false;

package/dist/{chunk-ZCMZH43X.js → chunk-TYSHO65D.js}

@@ -534,7 +534,10 @@ var listCodeRunsRequestSchema = z.object({
 var executeCodeRequestSchema = z.object({
   file_id: z.string(),
   timeout_seconds: z.number().int().min(1).max(300).default(30),
-  env: z.record(z.string(), z.string()).optional()
+  env: z.record(z.string(), z.string()).optional(),
+  // Names of workspace secrets to inject as env vars (resolved server-side; the
+  // values never appear in the response and are redacted from stdout/stderr).
+  secrets: z.array(z.string()).max(50).optional()
 });
 var emptyCodeRequestSchema = z.object({});
 var RUN_COLUMNS = [
@@ -598,7 +601,7 @@ var codeCommands = [
     async: true,
     tags: ["Code Runs"],
     summary: "Execute a code file (js/ts/py/sh) in a sandbox; returns the run.",
-    description: "Execute a code file (.js, .ts, .py, .sh) in a sandboxed Lambda environment. Returns stdout, stderr, exit code, and timing.",
+    description: "Execute a code file (.js, .ts, .py, .sh) in a sandboxed Lambda environment. Returns stdout, stderr, exit code, and timing. Pass `secrets` (workspace secret names) to inject them as env vars \u2014 resolved server-side, never returned, and redacted from output.",
     errors: [403, 404, 429],
     columns: RUN_COLUMNS
   }),
@@ -815,7 +818,11 @@ var updateComputerRequestSchema = z.object({
 var computerExecRequestSchema = z.object({
   command: z.string().min(1).max(8192).describe("Shell command to run."),
   timeout_seconds: z.number().int().min(1).max(900).optional(),
-  user: z.string().regex(usernamePattern).optional().describe("Unix user to run the command as.")
+  user: z.string().regex(usernamePattern).optional().describe("Unix user to run the command as."),
+  secrets: z.array(z.string()).max(50).optional().describe(
+    "Names of workspace secrets to inject. Resolved server-side, mounted by the daemon, never returned, and redacted from output."
+  ),
+  secret_mount_mode: z.enum(["env", "file"]).optional().describe("env (default) exports vars; file writes /run/idapt-secrets/.")
 });
 var computerTmuxRequestSchema = z.object({
   op: z.enum(["list", "run", "capture", "send", "kill"]).describe("Operation discriminator; the response shape depends on `op`."),
@@ -1734,7 +1741,6 @@ var agentResponseSchema = z.object({
   workspace_id: z.string().nullish(),
   type: z.string().nullish(),
   permissions: z.array(z.record(z.string(), z.unknown())).nullish(),
-  confirmation_required: z.array(z.string()).optional(),
   compaction_preset: z.enum(["minimal", "normal", "detailed"]).nullish(),
   compaction_summary_percent: z.number().nullish(),
   compaction_summary_max_tokens: z.number().nullish(),
@@ -2067,7 +2073,6 @@ var createAgentRequestSchema = z.object({
   authorization: z.record(z.string(), z.unknown()).nullish().describe(
     "Agent authorization policy. Null clears explicit policy; omitted uses the default workspace-write policy."
   ),
-  confirmation_required: z.array(z.string()).max(200).optional(),
   ...agentCompactionFields,
   type: z.enum(["user", "generated"]).optional().describe("Agent type."),
   memory_folder: z.string().max(500).nullish(),
@@ -2082,7 +2087,6 @@ var updateAgentRequestSchema = z.object({
   description: z.string().max(2e3).nullish(),
   system_prompt: z.string().max(131072).nullish(),
   authorization: z.record(z.string(), z.unknown()).nullish().describe("Agent authorization policy. Null clears explicit policy."),
-  confirmation_required: z.array(z.string()).max(200).optional(),
   ...agentCompactionFields,
   type: z.enum(["user", "generated"]).optional(),
   memory_folder: z.string().max(500).nullish(),
@@ -5190,6 +5194,10 @@ var secretResponseSchema = z.object({
   type: z.string().nullish(),
   /** Masked last-4 preview — never reconstructs the value. */
   value_preview: z.string().nullish(),
+  /** ISO-8601 expiry instant, or null. Past expiry blocks injection. */
+  expires_at: z.string().nullish(),
+  /** ISO-8601 of the last reveal/inject, or null if never used. */
+  last_used_at: z.string().nullish(),
   created_at: z.string(),
   updated_at: z.string()
 }).meta({ id: "Secret" });
@@ -5212,11 +5220,14 @@ var createSecretRequestSchema = z.object({
     "ssh_private_key",
     "ssh_public_key"
   ]).optional(),
+  /** ISO-8601 expiry instant; null/omitted = never expires. */
+  expires_at: z.string().datetime({ offset: true }).nullish(),
   workspace_id: z.string().max(64).optional()
 });
 var updateSecretRequestSchema = z.object({
   value: z.string().min(1).optional(),
-  description: z.string().max(1e3).nullish()
+  description: z.string().max(1e3).nullish(),
+  expires_at: z.string().datetime({ offset: true }).nullish()
 });
 var secretsCommands = [
   cmd({
@@ -5320,11 +5331,20 @@ var secretsPlaybook = {
     "  contents. Don't ask the user to paste a secret into the chat.",
     "",
     "- `create --name OPENAI_API_KEY --value <v>`: prefer ALL_CAPS names (they map",
-    "  cleanly to env vars). Names are unique per workspace.",
+    "  cleanly to env vars). Optional `--expires-at <ISO-8601>`. Unique per workspace.",
     "- `update` ROTATES: the old value is destroyed immediately and anything using",
     "  it breaks until re-pointed. There is no rename \u2014 create a new one.",
     "- `delete` is immediate and irreversible.",
     "",
+    "Using a secret at run time (pass the NAME, never the value):",
+    "- `code execute --secrets '[\"GITHUB_TOKEN\"]'` \u2192 the script sees it as the env",
+    "  var `GITHUB_TOKEN`; `bash --secrets [...]` and `computer exec --secrets [...]`",
+    "  work the same. The value is injected server-side and redacted from output.",
+    // biome-ignore lint/suspicious/noTemplateCurlyInString: literal ${secret:NAME} reference syntax, not a template placeholder
+    "- Or embed `${secret:NAME}` inside a free-form `env` value (e.g.",
+    // biome-ignore lint/suspicious/noTemplateCurlyInString: literal example of the ${secret:NAME} syntax
+    "  `DATABASE_URL=postgres://app:${secret:DB_PASSWORD}@db`).",
+    "",
     "Anti-patterns: never print, log, or repeat a secret value the user gives you \u2014",
     "create it and move on. Secrets live here, not as Drive files and not in chat."
   ].join("\n")
@@ -5681,6 +5701,7 @@ function parseIdaptCommand(cmd2) {
       args: parsedFlags.args,
       timeoutSeconds,
       background: parsedFlags.args.background === true,
+      requiresConfirmation: parsedFlags.args.requiresConfirmation === true || parsedFlags.args["requires-confirmation"] === true || parsedFlags.args.requires_confirmation === true,
       help: parsedFlags.args.help === true,
       instructions: parsedFlags.args.instructions === true
     }
@@ -5963,6 +5984,8 @@ var VERB_OVERRIDES = {
   "trigger read": "trigger get",
   "trigger edit": "trigger update",
   "trigger fire": "trigger test-fire",
+  // secrets — `edit` is the natural verb; the contract op is `update` (rotate).
+  "secret edit": "secret update",
   // utility → catalog
   "utility search-llm-models": "models search",
   "utility search-image-models": "image search",
@@ -6404,5 +6427,5 @@ function createFetchTransport(opts) {
 }
 
 export { VERB_OVERRIDES, autoMode, commandsForResource, createFetchTransport, execute, executeCommand, findCommand, getResourcePlaybook, listCommands, listResources, mapArgsToV1, parseInvocation, quoteToken, reconcileToV1, render, renderHelp, renderInstructions, resolveCommand, toSnakeKey };
-//# sourceMappingURL=chunk-ZCMZH43X.js.map
-//# sourceMappingURL=chunk-ZCMZH43X.js.map
+//# sourceMappingURL=chunk-TYSHO65D.js.map
+//# sourceMappingURL=chunk-TYSHO65D.js.map