@phnx-labs/agents-cli 1.22.84 → 1.22.86

package/dist/commands/secrets-vault.js

@@ -1,130 +0,0 @@
-/**
- * `agents secrets vault` — unlock/lock the age-encrypted synced-secrets file
- * at ~/.agents/vault.age (distinct from `agents secrets unlock|lock`, which
- * holds keychain bundles in the secrets-agent).
- *
- * Formerly top-level `agents login` / `agents logout`.
- */
-import chalk from 'chalk';
-import * as fs from 'fs';
-import { readStdinSync } from '../lib/format.js';
-import { clearVaultKey, createVault, getVaultSession, joinVault, unlock, vaultExists, vaultPath, } from '../lib/secrets/vault.js';
-import { setHelpSections } from '../lib/help.js';
-import { isInteractiveTerminal, isPromptCancelled } from './utils.js';
-async function promptPassword(message) {
-    if (!isInteractiveTerminal()) {
-        throw new Error('A password is required. Run from a TTY or pass --password-stdin.');
-    }
-    const { password } = await import('@inquirer/prompts');
-    return password({ message, mask: true });
-}
-async function readPassword(opts, message) {
-    if (opts.passwordStdin) {
-        const value = readStdinSync();
-        if (!value)
-            throw new Error('No password received on stdin.');
-        return value.replace(/\r?\n$/, '');
-    }
-    return promptPassword(message);
-}
-async function chooseFreshMode(opts) {
-    if (opts.create && opts.join)
-        throw new Error('--create and --join are mutually exclusive.');
-    if (opts.create)
-        return 'create';
-    if (opts.join)
-        return 'join';
-    if (!isInteractiveTerminal()) {
-        throw new Error('No synced secrets file exists. Pass --create or --join <vault.age> in a non-interactive shell.');
-    }
-    const { select } = await import('@inquirer/prompts');
-    return select({
-        message: 'No synced secrets vault found. What do you want to do?',
-        choices: [
-            { name: 'Create a new vault', value: 'create' },
-            { name: 'Join with an existing vault.age file', value: 'join' },
-        ],
-    });
-}
-function formatRemaining(expiresAt) {
-    const ms = expiresAt - Date.now();
-    if (ms <= 0)
-        return 'expired';
-    const mins = Math.round(ms / 60000);
-    if (mins < 60)
-        return `${mins} minute${mins === 1 ? '' : 's'}`;
-    const hours = Math.round(mins / 60);
-    if (hours < 24)
-        return `${hours} hour${hours === 1 ? '' : 's'}`;
-    const days = Math.round(hours / 24);
-    return `${days} day${days === 1 ? '' : 's'}`;
-}
-/** Register `agents secrets vault unlock|lock` under the secrets parent. */
-export function registerSecretsVaultCommands(secretsCmd) {
-    const vault = secretsCmd
-        .command('vault')
-        .description('Unlock or lock the age-encrypted synced-secrets file (~/.agents/vault.age)');
-    setHelpSections(vault, {
-        examples: `agents secrets vault unlock
-agents secrets vault unlock --create
-agents secrets vault unlock --join ~/Downloads/vault.age
-agents secrets vault lock`,
-        notes: `This is the synced vault passphrase cache — not \`agents secrets unlock\`, which holds keychain bundles in the secrets-agent after Touch ID.
-Harness OAuth sign-out is \`agents accounts logout\` (OAuth native logins only).`,
-    });
-    vault
-        .command('unlock')
-        .description('Unlock synced secrets for this shell session')
-        .option('--create', 'Create a new encrypted synced-secrets file at ~/.agents/vault.age')
-        .option('--join <path>', 'Copy and unlock an existing vault.age file')
-        .option('--force', 'Replace an existing synced-secrets file when used with --create or --join')
-        .option('--password-stdin', 'Read the master password from stdin')
-        .action(async (opts) => {
-        try {
-            if (opts.force && !opts.create && !opts.join) {
-                throw new Error('--force can only be used with --create or --join.');
-            }
-            if (vaultExists() && !opts.create && !opts.join) {
-                const password = await readPassword(opts, 'Master password');
-                unlock(password);
-                const session = getVaultSession();
-                const ttl = session.loggedIn ? formatRemaining(session.expiresAt) : '8 hours';
-                console.log(chalk.green(`Unlocked. Synced secrets available for ${ttl}.`));
-                return;
-            }
-            const mode = await chooseFreshMode(opts);
-            if (mode === 'join') {
-                let source = opts.join;
-                if (!source) {
-                    if (!isInteractiveTerminal())
-                        throw new Error('--join needs a vault.age path.');
-                    const { input } = await import('@inquirer/prompts');
-                    source = await input({
-                        message: 'Path to existing vault.age',
-                        validate: (value) => fs.existsSync(value) || 'File not found.',
-                    });
-                }
-                const password = await readPassword(opts, 'Master password');
-                joinVault(password, source, { overwrite: opts.force });
-                console.log(chalk.green(`Unlocked. Copied synced secrets file to ${vaultPath()}.`));
-                return;
-            }
-            const password = await readPassword(opts, 'Choose a master password');
-            createVault(password, { overwrite: opts.force });
-            console.log(chalk.green(`Unlocked. Created synced secrets file at ${vaultPath()}.`));
-        }
-        catch (err) {
-            if (isPromptCancelled(err))
-                return;
-            console.error(chalk.red(err.message));
-            process.exit(1);
-        }
-    });
-    vault
-        .command('lock')
-        .description('Forget the cached synced-secrets key')
-        .action(() => {
-        clearVaultKey();
-        console.log(chalk.green('Locked. Synced secrets require unlock again.'));
-    });
-}

package/dist/commands/secrets.d.ts

@@ -1,212 +0,0 @@
-/**
- * Secrets bundle management commands.
- *
- * Registers the `agents secrets` command tree for creating, viewing,
- * and managing named bundles of environment variables backed by macOS
- * Keychain. Bundles are injected at run time via `agents run --secrets`.
- */
-import { type Command } from 'commander';
-import { SSH_TARGET_RE, assertValidSshTarget } from '../lib/ssh-exec.js';
-import { quoteWin32ExecArg } from '../lib/platform/index.js';
-import { bundleEnvToDotenv } from '../lib/secrets/push.js';
-export { bundleEnvToDotenv };
-import { type SecretsBackend, type SecretsBundle, type SecretsPolicy } from '../lib/secrets/bundles.js';
-import { type SecretsListFilterOpts } from '../lib/secrets/list-filter.js';
-import { type SecretLease } from '../lib/secrets/lease.js';
-import { type BundleUsageSummary } from '../lib/secrets/usage-db.js';
-/** Read all available data from stdin synchronously, trimmed. */
-/**
- * Read the raw `.env` text for `import --from <path|->`. A `-` reads the .env
- * from stdin (the SSH push path: `export --device` pipes the resolved dotenv over
- * ssh stdin, which has no `/dev/stdin` on a Windows remote); any other value is
- * a filesystem path.
- */
-export declare function readImportDotenv(from: string): string;
-/** Where `secrets import` pulls keys from, parsed off the unified `--from`. */
-export type ImportSource = {
-    kind: 'dotenv';
-    path: string;
-} | {
-    kind: '1password';
-    vault?: string;
-} | {
-    kind: 'icloud';
-};
-/**
- * Parse the unified `--from <source>` value: a .env path (`-` reads stdin),
- * `1password:<vault>` (bare `1password` prompts for the vault), or `icloud`
- * (legacy iCloud Keychain bundles). The deprecated `--from-1password --vault`
- * pair maps onto the 1password source. A file literally named `icloud` or
- * `1password` can still be imported via an explicit path (`./icloud`).
- */
-export declare function parseImportSource(opts: {
-    from?: string;
-    from1password?: boolean;
-    vault?: string;
-}): ImportSource;
-/**
- * Build the remote `agents secrets unlock` argv for `unlock --device`. `--all`
- * forwards verbatim; otherwise the explicit bundle names. A `--ttl` is passed
- * through as-is so the REMOTE parses its own duration (its platform rules, its
- * defaults). Shared with the command action so the wiring is unit-testable
- * without a live SSH session.
- */
-export declare function resolveUnlockTtlMs(ttl: string | undefined, until: string | undefined, now?: number): number;
-/**
- * Decide what an `unlock` holds: the whole bundle env, or — with --keys — only
- * the resolved subset behind a lease that scopes the broker entry (agent.ts
- * re-selects on load) and its own expiry. Fails closed: createSecretLease throws
- * on an unknown or empty key subset. The unlock action's single scoping seam,
- * exported so the whole-bundle vs scoped-subset decision is unit-testable without
- * a live broker.
- */
-export declare function scopeHeldEnv(input: {
-    bundle: string;
-    env: Record<string, string>;
-    keys: string | null;
-    ttlMs: number;
-    harness: string;
-    sleepPersist: boolean;
-}): {
-    heldEnv: Record<string, string>;
-    lease?: SecretLease;
-};
-export declare function buildRemoteUnlockArgs(names: string[], opts: {
-    all?: boolean;
-    ttl?: string;
-    until?: string;
-    durable?: boolean;
-}): string[];
-/**
- * Build the remote `agents secrets list` argv for `list --device`. Every filter
- * must be forwarded: `browseRemote` sends this argv verbatim, so a flag left out
- * here is not an error — the remote just lists everything, and
- * `secrets list --device zion --expired` reports every bundle on zion as expired.
- * Silent and wrong beats loud and wrong only for the person who wrote the bug.
- *
- * Values pass through unparsed so the REMOTE validates them under its own rules,
- * matching how `--ttl` is forwarded by buildRemoteUnlockArgs.
- */
-export declare function buildRemoteListArgs(opts: SecretsListFilterOpts & {
-    json?: boolean;
-    sort?: string;
-    limit?: string;
-}, query?: string): string[];
-export { SSH_TARGET_RE, assertValidSshTarget };
-/**
- * Build the child environment for `agents secrets exec`. Strips
- * loader/interpreter hijack vars (matching agent spawns in exec.ts) and never
- * forwards AGENTS_SECRETS_PASSPHRASE — the master decryption key must not reach
- * the executed command.
- */
-export declare function buildSecretsExecEnv(parentEnv: NodeJS.ProcessEnv, secretEnv: Record<string, string>): NodeJS.ProcessEnv;
-/**
- * Encrypt a resolved env map to an offline bundle file using AES-256-GCM
- * (the same EncFile envelope as the per-item file store). Inner plaintext is
- * JSON so multi-line values round-trip losslessly. Written with mode 0600;
- * the passphrase must be supplied explicitly — never auto-provisioned.
- */
-export declare function exportBundleToFile(env: Record<string, string>, filePath: string, passphrase: string): void;
-/**
- * Decrypt and parse an offline bundle file produced by exportBundleToFile.
- * Throws on a missing file, an invalid JSON envelope, or a wrong passphrase.
- */
-export declare function importBundleFromFile(filePath: string, passphrase: string): Record<string, string>;
-/** Compact span for a fixed duration: "45m" / "19h" / "2d". Shared by
- * `compactRemaining` (a countdown) and the POLICY column's hold-window
- * annotation (a fixed length) so the two can never round onto different unit
- * thresholds and disagree about the same number of milliseconds. */
-export declare function compactDurationMs(ms: number): string;
-/** The POLICY column for `secrets list`. `hold` is a duration, not a mode — it
- * means "prompt once, then stay silent for this long" — so the column states
- * the window (`hold 7d`) rather than the bare tier name, and appends `· held Nd`
- * while the secrets-agent is actually caching the bundle. `always` and `never`
- * carry no window and gain nothing here. `holdMs` is the configured global hold
- * (`secretsHoldMs()`), passed in rather than read so this stays pure; `held`
- * maps bundle name → expiry epoch-ms (from agentStatus()). */
-export declare function renderPolicyCol(b: SecretsBundle, holdMs: number, held?: Map<string, number>): string;
-/** The hold-window line at the top of `secrets status`. Names the `hold` policy
- * the window belongs to — the rename in #1604 left this surface still saying
- * "daily", the one name the CLI no longer accepts in its own help. Pure so the
- * vocabulary is pinned by a test rather than re-drifting on the next rename. */
-export declare function renderHoldSummary(holdStr: string, configured: boolean): string;
-/** The empty-broker line under the hold summary. Named here, beside
- * `renderHoldSummary`, for the same reason: it is the second line the rename
- * left saying `daily`, and a test pins both. */
-export declare const NO_BUNDLES_HELD_LINE = "No bundles held. The next read of each hold-policy bundle will prompt once, then hold.";
-/** Human-readable hold window for `secrets status`. Sub-hour values render in
- * minutes (so a near-floor `holdMs` never shows a confusing "0 hours"), whole
- * hours up to 2 days, whole days beyond. Pure — unit-tested. */
-export declare function formatHoldWindow(ms: number): string;
-/** A broker hold expiry, or null once it has lapsed. One definition of "held",
- * shared by the POLICY column, the `--held` filter, and the JSON payload, so the
- * three can never disagree about the same bundle. */
-export declare function liveHold(expiresAt: number | undefined, now?: number): number | null;
-/**
- * Compact one-line usage summary for `secrets view` — each recorded event with
- * its count and how long ago it last happened ("accessed 42× (last 2h ago) ·
- * exported 3× (last 1d ago)"). Empty string when nothing has been recorded yet.
- * Pure — unit-tested.
- */
-export declare function formatUsageLine(summary: BundleUsageSummary | undefined): string;
-/**
- * The held-state line for `secrets view`: whether the secrets-agent currently
- * holds this bundle (so reads are prompt-free) and for how long, or that Touch
- * ID is required on the next read. Only meaningful for keychain bundles on macOS
- * — file/vault backends have no broker to hold, and a `never`-policy bundle is
- * always readable — so both return an empty line and the caller skips it.
- * `heldExpiresAt` is the max expiry across every held scope.
- */
-export declare function renderViewStatusLine(b: SecretsBundle, heldExpiresAt: number | null): string;
-/**
- * The EXPIRING cell. Counts keys needing attention — already expired plus due
- * within 30 days — and colours by the worst of the two: red once anything has
- * lapsed, yellow while everything is merely upcoming.
- *
- * Expired keys used to be invisible here. `countExpiringSoon` requires
- * `d >= 0`, so a bundle whose token died last month rendered `-`, identical to
- * one with no expiry at all; the only places it surfaced were `secrets view`
- * and a hard abort at inject time, i.e. after it had already broken something.
- */
-export declare function renderExpiringCol(b: SecretsBundle, now?: number): string;
-/**
- * Resolve an existing import target bundle (inheriting its backend) or create a
- * new one with the requested backend. Refuses to silently downgrade a
- * keychain-backed bundle to `file` — shared by every `import` source so the
- * guard can't drift between them.
- *
- * `force` additionally recreates a bundle whose METADATA RECORD is present but
- * undecryptable — a file store whose key was lost or rotated out from under it.
- * That is precisely the state provisioning exists to repair (import is how a box
- * gets its bundles back), and without this the import dies on `readBundle` and
- * the only route left is deleting the record by hand on an already-degraded
- * store. It is gated on `--force` on purpose: recreating unconditionally would
- * destroy a perfectly healthy bundle for someone who merely forgot to set
- * `AGENTS_SECRETS_PASSPHRASE`, which is the hazard `readBundleIfDecryptable`
- * exists to describe. `--force` already means "overwrite what is there".
- */
-export declare function resolveImportBundle(name: string, backendOpt: string | undefined, synced?: boolean, force?: boolean): SecretsBundle;
-/** Register the `agents secrets` command tree. */
-export declare function registerSecretsCommands(program: Command): void;
-/** Validate a prompt-policy value, throwing a clear message on a bad one (the
- * caller's try/catch renders it and exits). Accepts the legacy `biometry` /
- * `session` / `none` tokens as aliases for `always` / `daily` / `never` so older
- * flags and scripts keep working. `never`/`none` is the no-biometry-ACL tier —
- * accepted here, then gated behind a loud confirmation in the command layer. */
-export declare function parsePolicyOpt(raw: string | undefined): SecretsPolicy;
-/**
- * Gate a create/switch to the `never` prompt-policy behind an explicit,
- * deliberate acknowledgement — it is the least-safe tier (no user-presence
- * check on any read). Returns:
- *   - `'ok'`    — not `never`, or already acknowledged via `--i-understand`.
- *   - `'prompt'` — interactive shell: caller must run a loud confirm prompt.
- * Throws in a non-interactive shell when the flag is absent, so a headless
- * `create --policy never` can't silently downgrade a bundle's protection.
- */
-export declare function assertNeverPolicyAcknowledged(policy: SecretsPolicy | undefined, opts: {
-    iUnderstand?: boolean;
-    interactive: boolean;
-}): 'ok' | 'prompt';
-/** Validate a --backend value, exiting with a clear message on a bad one. */
-export declare function secretsDefaultBackend(): SecretsBackend;
-export { quoteWin32ExecArg };