@owloops/browserbird 1.8.1 → 1.8.3

package/dist/index.mjs

@@ -193,8 +193,8 @@ function unknownSubcommand(subcommand, command, validCommands) {
 /** @fileoverview ASCII banner displayed on daemon startup and in help text. */
 const pkg = createRequire(import.meta.url)("../package.json");
 const buildInfo = [];
-buildInfo.push(`commit: ${"b1eae905defc5deba32405ad32f6c702a1a2c1a1".substring(0, 7)}`);
-buildInfo.push(`built: 2026-03-22T16:55:56+04:00`);
+buildInfo.push(`commit: ${"2f0bea968791cd11c9e83c7461f7e8d466376792".substring(0, 7)}`);
+buildInfo.push(`built: 2026-03-22T17:18:51+04:00`);
 const buildString = buildInfo.length > 0 ? ` (${buildInfo.join(", ")})` : "";
 const VERSION = `browserbird ${pkg.version}${buildString}`;
 const BIRD = [
@@ -1010,6 +1010,7 @@ function deleteCronJob(jobUid) {
 	try {
 		d.prepare("DELETE FROM cron_runs WHERE job_uid = ?").run(jobUid);
 		d.prepare("UPDATE jobs SET cron_job_uid = NULL WHERE cron_job_uid = ?").run(jobUid);
+		d.prepare("DELETE FROM key_bindings WHERE target_type = 'bird' AND target_id = ?").run(jobUid);
 		const result = d.prepare("DELETE FROM cron_jobs WHERE uid = ?").run(jobUid);
 		d.exec("COMMIT");
 		return Number(result.changes) > 0;
@@ -1413,6 +1414,25 @@ function ensureVaultKey(envPath) {
 
 //#endregion
 //#region src/db/keys.ts
+const KEY_NAME_RE = /^[A-Z][A-Z0-9_]*$/;
+const RESERVED_KEY_NAMES = new Set([
+	"ANTHROPIC_API_KEY",
+	"CLAUDE_CODE_OAUTH_TOKEN",
+	"CLAUDE_CONFIG_DIR",
+	"CLAUDECODE",
+	"CLAUDE_CODE_ENTRYPOINT",
+	"SLACK_BOT_TOKEN",
+	"SLACK_APP_TOKEN",
+	"BROWSERBIRD_VAULT_KEY",
+	"BROWSERBIRD_CONFIG",
+	"BROWSERBIRD_DB"
+]);
+function validateKeyName(raw) {
+	const name = raw.trim().toUpperCase();
+	if (!KEY_NAME_RE.test(name)) return { error: "Name must match [A-Z][A-Z0-9_]* (e.g. GITHUB_TOKEN)" };
+	if (RESERVED_KEY_NAMES.has(name)) return { error: `"${name}" is reserved (managed via config)` };
+	return { name };
+}
 function decryptValue(raw) {
 	return isEncrypted(raw) ? decrypt(raw, getVaultKey()) : raw;
 }
@@ -2119,61 +2139,6 @@ function maskSecret(value) {
 		hint: prefix ? `${prefix}...${tail}` : `...${tail}`
 	};
 }
-const KEY_NAME_RE = /^[A-Z][A-Z0-9_]*$/;
-const BLOCKED_KEY_PREFIXES = [
-	"LD_",
-	"DYLD_",
-	"NODE_",
-	"NPM_",
-	"GIT_",
-	"PYTHON",
-	"RUBY",
-	"PERL",
-	"JAVA_",
-	"CLAUDE_",
-	"BROWSERBIRD_"
-];
-const BLOCKED_KEY_NAMES = new Set([
-	"ANTHROPIC_API_KEY",
-	"CLAUDECODE",
-	"SLACK_BOT_TOKEN",
-	"SLACK_APP_TOKEN",
-	"PATH",
-	"HOME",
-	"SHELL",
-	"USER",
-	"LOGNAME",
-	"TERM",
-	"IFS",
-	"CDPATH",
-	"CPATH",
-	"CPPATH",
-	"LIBRARY_PATH",
-	"TMPDIR",
-	"TZDIR",
-	"GCONV_PATH",
-	"HOSTALIASES",
-	"MALLOC_TRACE",
-	"RESOLV_HOST_CONF",
-	"HTTP_PROXY",
-	"HTTPS_PROXY",
-	"ALL_PROXY",
-	"NO_PROXY",
-	"CURL_CA_BUNDLE",
-	"SSL_CERT_FILE",
-	"SSL_CERT_DIR",
-	"REQUESTS_CA_BUNDLE"
-]);
-function isDangerousKeyName(name) {
-	if (BLOCKED_KEY_NAMES.has(name)) return true;
-	return BLOCKED_KEY_PREFIXES.some((p) => name.startsWith(p));
-}
-function validateKeyName(raw) {
-	const name = raw.trim().toUpperCase();
-	if (!KEY_NAME_RE.test(name)) return { error: "Name must match [A-Z][A-Z0-9_]* (e.g. GITHUB_TOKEN)" };
-	if (isDangerousKeyName(name)) return { error: `"${name}" is a reserved or dangerous name` };
-	return { name };
-}
 const HH_MM_RE = /^\d{2}:\d{2}$/;
 const ALLOWED_TOP_LEVEL_KEYS = new Set([
 	"timezone",
@@ -6202,6 +6167,12 @@ async function handleKeys(argv) {
 					process.exitCode = 1;
 					return;
 				}
+				const validated = validateKeyName(name);
+				if ("error" in validated) {
+					logger.error(validated.error);
+					process.exitCode = 1;
+					return;
+				}
 				let secret = values.value;
 				if (!secret) {
 					secret = await promptSecret(`value for ${name.toUpperCase()}: `);
@@ -6212,7 +6183,7 @@ async function handleKeys(argv) {
 					}
 				}
 				try {
-					const key = createKey(name.toUpperCase(), secret, values.description?.trim());
+					const key = createKey(validated.name, secret, values.description?.trim());
 					logger.success(`key ${key.name} created`);
 					process.stderr.write(c("dim", `  hint: run 'browserbird keys bind ${key.name} channel *' to bind it`) + "\n");
 				} catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owloops/browserbird",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "description": "AI agent orchestrator with a real browser, a cron scheduler, and a web dashboard",
   "type": "module",
   "bin": {