@oxygen-agent/cli 1.244.2 → 1.246.0

package/README.md

@@ -34,4 +34,4 @@ oxygen update
 
 For product documentation, visit https://oxygen-agent.com/docs. For support, visit https://oxygen-agent.com.
 
-Version: 1.244.2
+Version: 1.246.0

package/dist/index.js

@@ -323,6 +323,60 @@ function readCustomIntegrationManifest(options) {
     }
     return parseJsonObject(manifestJson ?? readFileSync(resolve(manifestPath ?? ""), "utf8"));
 }
+const CUSTOM_INTEGRATION_SECRET_KEYS = ["API_KEY", "TOKEN", "PASSWORD", "SECRET"];
+function readCustomIntegrationSecret(options) {
+    const apiKey = readOption(options.apiKey);
+    const secretsFile = readOption(options.secretsFile);
+    if (apiKey && secretsFile) {
+        throw new OxygenError("invalid_request", "Pass either --api-key or --secrets-file, not both.", {
+            exitCode: 1,
+        });
+    }
+    if (apiKey)
+        return apiKey;
+    if (!secretsFile) {
+        throw new OxygenError("invalid_request", "Pass --api-key or --secrets-file.", {
+            exitCode: 1,
+        });
+    }
+    const entries = parseEnvFile(readFileSync(resolve(secretsFile), "utf8"));
+    const keys = Object.keys(entries);
+    if (keys.length === 0) {
+        throw new OxygenError("invalid_request", "Secrets file has no KEY=VALUE entries.", {
+            details: { file: secretsFile },
+            exitCode: 1,
+        });
+    }
+    if (keys.length === 1)
+        return entries[keys[0]];
+    const preferred = CUSTOM_INTEGRATION_SECRET_KEYS.find((key) => entries[key] !== undefined);
+    if (preferred)
+        return entries[preferred];
+    throw new OxygenError("invalid_request", "Secrets file is ambiguous: use a single entry or name one API_KEY, TOKEN, PASSWORD, or SECRET.", {
+        details: { file: secretsFile, keys },
+        exitCode: 1,
+    });
+}
+function parseEnvFile(content) {
+    const entries = {};
+    for (const rawLine of content.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (!line || line.startsWith("#"))
+            continue;
+        const separator = line.indexOf("=");
+        if (separator <= 0)
+            continue;
+        const key = line.slice(0, separator).trim().replace(/^export\s+/, "");
+        let value = line.slice(separator + 1).trim();
+        if ((value.startsWith("\"") && value.endsWith("\"") && value.length >= 2)
+            || (value.startsWith("'") && value.endsWith("'") && value.length >= 2)) {
+            value = value.slice(1, -1);
+        }
+        if (key && value)
+            entries[key] = value;
+    }
+    return entries;
+}
 function readFileIfPresent(value) {
     const candidate = resolve(value);
     try {
@@ -4205,7 +4259,7 @@ export function createProgram() {
         .command("custom-integrations")
         .description("Custom HTTP integration commands.")
         .addCommand(new Command("apply")
-        .description("Create or update a custom HTTP integration manifest. Store credentials from the web Connections page.")
+        .description("Create or update a custom HTTP integration manifest. Attach credentials with `custom-integrations connect`.")
         .option("--manifest <path>", "Path to a custom HTTP manifest JSON file.")
         .option("--manifest-json <json>", "Custom HTTP manifest as a JSON object.")
         .option("--json", "Print a JSON envelope.")
@@ -4217,6 +4271,21 @@ export function createProgram() {
                 body: { manifest },
             });
         });
+    }))
+        .addCommand(new Command("connect")
+        .description("Attach the credential (bearer token, API key, or basic password) for an applied custom HTTP integration.")
+        .argument("<slug>", "Custom integration slug from the applied manifest.")
+        .option("--api-key <value>", "Credential value. Prefer --secrets-file to keep it out of shell history.")
+        .option("--secrets-file <path>", "Path to a .env-style file holding the credential (a single entry, or one named API_KEY/TOKEN/PASSWORD/SECRET).")
+        .option("--json", "Print a JSON envelope.")
+        .action(async (slug, options) => {
+        await handleAsyncAction("custom-integrations connect", options, () => {
+            const apiKey = readCustomIntegrationSecret(options);
+            return requestOxygen("/api/cli/custom-integrations/connect", {
+                method: "POST",
+                body: { slug, api_key: apiKey },
+            });
+        });
     }))
         .addCommand(new Command("list")
         .description("List custom HTTP integrations for the active organization.")

package/node_modules/@oxygen/shared/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const OXYGEN_VERSION = "1.244.2";
+export declare const OXYGEN_VERSION = "1.246.0";
 export declare const OXYGEN_MINIMUM_CLI_VERSION = "1.181.0";

package/node_modules/@oxygen/shared/dist/version.js

@@ -1,4 +1,4 @@
-export const OXYGEN_VERSION = "1.244.2";
+export const OXYGEN_VERSION = "1.246.0";
 // Bump this only when deployed CLI/API contracts require a newer CLI.
 // 1.181.0: paid table action runs and background columns run require
 // approved=true in addition to max_credits; older CLIs cannot send the flag.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxygen-agent/cli",
-  "version": "1.244.2",
+  "version": "1.246.0",
   "private": false,
   "license": "UNLICENSED",
   "type": "module",