@overaihq/cli 0.12.1 → 0.13.0

package/dist/{chunk-KIHU74V6.js → chunk-56E4CWBE.js}

@@ -370,12 +370,22 @@ var pageErrorPayloadSchema = external_exports.object({
   message: external_exports.string(),
   stack: external_exports.string().optional()
 });
+var screenshotResultPayloadSchema = external_exports.object({
+  requestId: external_exports.string(),
+  error: external_exports.string().optional(),
+  mediaType: external_exports.string().optional(),
+  data: external_exports.string().optional(),
+  width: external_exports.number().optional(),
+  height: external_exports.number().optional()
+});
 
 // ../common/src/webPage.ts
 var webPageLanguage = ["react"];
 var configFlag = external_exports.union([external_exports.boolean(), external_exports.string()]).nullish().transform((value) => value === true || value === "true").catch(false);
 var webPageConfigSchema = external_exports.object({
   language: external_exports.enum(["react"]).catch("react"),
+  /* Missing on legacy versions; invalid modes fail closed instead of granting workspace access. */
+  authorizationMode: external_exports.enum(["workspace", "viewer"]).default("workspace"),
   customTitle: external_exports.string().nullish(),
   code: external_exports.string().default(reactDefaultTemplate),
   dataSourceUrl: external_exports.string().nullish(),

package/dist/index.js

@@ -5,7 +5,7 @@ import {
 import {
   itemFilterExpressionRootSchema,
   webPageConfigSchema
-} from "./chunk-KIHU74V6.js";
+} from "./chunk-56E4CWBE.js";
 import {
   external_exports
 } from "./chunk-XCJJTK3H.js";
@@ -27083,7 +27083,7 @@ var validateAutomationElements = async (elements) => {
   return findings(automationNodesSchema.safeParse(elements));
 };
 var validateWebPageConfig = async (config) => {
-  const { webPageConfigWriteSchema } = await import("./webPage-675DU764.js");
+  const { webPageConfigWriteSchema } = await import("./webPage-4HUHD7FS.js");
   return findings(webPageConfigWriteSchema.safeParse(config));
 };
 
@@ -35077,14 +35077,50 @@ var runGraphql = async (args) => {
 };
 
 // src/commands/integration.ts
+var USAGE2 = "Usage: overai integration configure <id> --config <json|@file|@-> | integration config <id> | integration secret set <id> <KEY> --value <@file|@->";
+var setSecret = async (integrationId, key, rawValue) => {
+  if (rawValue == null) {
+    throw new Error("Integration secret set requires --value.");
+  }
+  if (!rawValue.startsWith("@")) {
+    throw new Error(
+      "--value must be @- (stdin) or @<file>, so the secret stays out of your shell history."
+    );
+  }
+  const value = await readValue(rawValue, "--value");
+  if (value == null || value === "") {
+    throw new Error("--value resolved to an empty string.");
+  }
+  await gqlRequest(
+    `mutation SetIntegrationSecret($input: UpdateIntegrationConfigInput!) {
+      updateIntegrationConfig(input: $input) { success }
+    }`,
+    { input: { integrationId, partialConfig: { [key]: value } } }
+  );
+};
 var runIntegration = async (args) => {
-  const [operation, id] = args;
+  const [operation] = args;
+  if (operation === "secret") {
+    const [, action, id2, key] = args;
+    if (action !== "set" || id2 == null || key == null || key.startsWith("-")) {
+      throw new Error(USAGE2);
+    }
+    await setSecret(id2, key, flagValue(args, "--value"));
+    const result2 = await userTrpcMutation(
+      "getMaskedIntegrationConfig",
+      { id: id2 }
+    );
+    printResult(result2, resolveFormat(flagValue(args, "-o", "--output")));
+    return;
+  }
+  const [, id] = args;
   if (id == null || operation !== "configure" && operation !== "config") {
-    throw new Error("Usage: overai integration configure <id> --config <json|@file|@-> | integration config <id>");
+    throw new Error(USAGE2);
   }
   if (operation === "configure") {
     const raw2 = await readValue(flagValue(args, "--config"), "--config");
-    if (raw2 == null) throw new Error("Integration configure requires --config.");
+    if (raw2 == null)
+      throw new Error("Integration configure requires --config.");
     const value = (() => {
       try {
         return JSON.parse(raw2);
@@ -35094,7 +35130,9 @@ var runIntegration = async (args) => {
     })();
     await userTrpcMutation("putIntegrationConfig", { id, value });
   }
-  const result = await userTrpcMutation("getMaskedIntegrationConfig", { id });
+  const result = await userTrpcMutation("getMaskedIntegrationConfig", {
+    id
+  });
   printResult(result, resolveFormat(flagValue(args, "-o", "--output")));
 };
 
@@ -35589,11 +35627,13 @@ The env SDK is mostly shared across pages, functions, and automation code
 nodes:
 env.TBSxxx.sql\`...\` (postgres.js tagged template \u2014 interpolations are
 auto-parameterized, never string-concatenate user input; each table space also
-gets a generated global TBSxxx.Tables interface, so annotate the row element
-type \u2014 env.TBSxxx.sql<TBSxxx.Tables["users"]>\`...\` \u2014 for typed rows and
+gets a generated Env.TBSxxx.Tables interface, so annotate the row element
+type \u2014 env.TBSxxx.sql<Env.TBSxxx.Tables["users"]>\`...\` \u2014 for typed rows and
 column autocomplete; joins/aggregates/projections take a hand-written type or
 Pick<...>), env.FNxxx.call()
-(pass \`path\` to hit a sub-path of a function that routes internally),
+(pass \`path\` to hit a sub-path of a function that routes internally; a
+function with declared schemas also gets Env.FNxxx.Input / Env.FNxxx.Output
+types for annotating payloads and results),
 env.ATxxx.start(inputs?) (fire-and-forget), env.DFxxx.read.json()/.saveVersion(),
 env.FBxxx.list()/read(entryId)/upload()/createFolder(),
 env.STORAGE.fetch/upload/presign (upload shortens stored names over 128
@@ -35651,12 +35691,24 @@ A page version's config JSON carries the code; the CLI splits it into
 language, customTitle, hideTopBar, ...). Push reassembles them.
 
 - Web pages are React (TSX). Printable pages are React or Liquid.
+- Web page config authorizationMode defaults to "workspace" for shared access.
+  Opt into "viewer" for personal pages spanning the signed-in viewer's workspaces.
+  Page code uses their permissions; results/access errors can differ by user.
+  Public links require sign-in. Save and deploy publishes the mode with the code.
+  Called functions retain their own execution permissions.
 - Web page code is concatenated with an SDK that already provides React and
   its hooks, then appends the <App /> render call. Declare a plain
   \`function App() { ... }\` \u2014 no \`export default\`, no
   \`import ... from "react"\` (redeclaring hooks is a SyntaxError \u2192 blank
   page). Imports must be https URLs (\`https://esm.sh/...\`) \u2014 the sandbox
   cannot resolve bare or relative specifiers.
+- In a React page, HTML from somewhere else (an exported dashboard, a mockup,
+  a page from another tool) gets rebuilt as native React, preserving the
+  original styling closely. Don't load a foreign HTML file into a \`srcDoc\`
+  iframe or inject it into the DOM: embedded HTML is opaque to the outline and
+  patchable only by blind string replacement that silently no-ops when the
+  source drifts. A Liquid printable page is the exception \u2014 Liquid is HTML
+  templating, so imported markup becomes the template body directly.
 - Pages run sandboxed in an iframe with the env SDK plus hooks: useCurrentUser,
   useSearchParam, useTheme, useLLMText/Object/Chat, useAgentChat, useDataFile
   (legacy \u2014 prefer env.DFxxx), navigateToPage, openPrintablePage.
@@ -36368,7 +36420,7 @@ var listWorkspaceUsers = async (args) => {
     resolveFormat(flagValue(args, "-o", "--output"))
   );
 };
-var USAGE2 = `Usage:
+var USAGE3 = `Usage:
   overai workspace list [--archived] [--limit <n>]
   overai workspace show [workspaceId]
   overai workspace users [workspaceId]
@@ -36386,7 +36438,7 @@ var runWorkspace = async (args) => {
     await listWorkspaceUsers(args.slice(1));
     return;
   }
-  process.stderr.write(USAGE2);
+  process.stderr.write(USAGE3);
   process.exitCode = 1;
 };
 
@@ -36468,6 +36520,9 @@ Other resources:
   overai knowledge-base search <id> <query> [--limit N]
   overai integration configure <id> --config <json|@file|@->
   overai integration config <id>       Read its masked configuration
+  overai integration secret set <id> <KEY> --value <@file|@->
+                                       Set one credential, leaving the rest of
+                                       the config alone
   overai printable-page render <id> [--search-params <json|@file>]
 
 Self-hosted runners (enabling remote access stays on-device \u2014 not a CLI action):

package/dist/{webPage-675DU764.js → webPage-4HUHD7FS.js}

@@ -3,7 +3,7 @@ import {
   webPageConfigSchema,
   webPageConfigWriteSchema,
   webPageLanguage
-} from "./chunk-KIHU74V6.js";
+} from "./chunk-56E4CWBE.js";
 import "./chunk-XCJJTK3H.js";
 import "./chunk-U67V476Y.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@overaihq/cli",
-  "version": "0.12.1",
+  "version": "0.13.0",
   "description": "Create, edit, deploy, and run OverAI workspace resources from the command line",
   "type": "module",
   "homepage": "https://overai.com",