@poncho-ai/cli 0.30.5 → 0.30.6

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @poncho-ai/cli@0.30.5 build /home/runner/work/poncho-ai/poncho-ai/packages/cli
+> @poncho-ai/cli@0.30.6 build /home/runner/work/poncho-ai/poncho-ai/packages/cli
 > tsup src/index.ts src/cli.ts --format esm --dts
 
 CLI Building entry: src/cli.ts, src/index.ts
@@ -9,10 +9,10 @@
 ESM Build start
 ESM dist/cli.js                          94.00 B
 ESM dist/index.js                        857.00 B
-ESM dist/run-interactive-ink-KA5V5BSJ.js 56.86 KB
-ESM dist/chunk-V3H773RB.js               492.00 KB
-ESM ⚡️ Build success in 62ms
+ESM dist/run-interactive-ink-OX4CI23D.js 56.86 KB
+ESM dist/chunk-3QT2S6AJ.js               492.58 KB
+ESM ⚡️ Build success in 65ms
 DTS Build start
-DTS ⚡️ Build success in 4158ms
+DTS ⚡️ Build success in 4618ms
 DTS dist/cli.d.ts   20.00 B
 DTS dist/index.d.ts 4.16 KB

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @poncho-ai/cli
 
+## 0.30.6
+
+### Patch Changes
+
+- [`56001f5`](https://github.com/cesr/poncho-ai/commit/56001f52f599f013a08e57e5de4891c02ca358d5) Thanks [@cesr](https://github.com/cesr)! - Warn at startup when CRON_SECRET is missing on Vercel with auth enabled and cron jobs configured
+
 ## 0.30.5
 
 ### Patch Changes

package/dist/{chunk-V3H773RB.js → chunk-3QT2S6AJ.js}

@@ -9827,6 +9827,13 @@ ${resultBody}`,
       "\n[poncho] Vercel Deployment Protection will block subagents and auto-continuation.\n  Enable 'Protection Bypass for Automation' in your Vercel project settings:\n  -> Project Settings > Deployment Protection > Protection Bypass for Automation\n  The secret is auto-provisioned as VERCEL_AUTOMATION_BYPASS_SECRET.\n"
     );
   }
+  const hasCronJobs = Object.keys(cronJobs).length > 0;
+  const authTokenConfigured = !!process.env[config?.auth?.tokenEnv ?? "PONCHO_AUTH_TOKEN"] && (config?.auth?.required ?? false);
+  if (process.env.VERCEL && hasCronJobs && authTokenConfigured && !process.env.CRON_SECRET) {
+    console.warn(
+      "\n[poncho] Cron jobs are configured but CRON_SECRET is not set.\n  Vercel sends CRON_SECRET as a Bearer token when invoking cron endpoints.\n  Set CRON_SECRET to the same value as PONCHO_AUTH_TOKEN in your Vercel env vars,\n  otherwise cron invocations will be rejected with 401.\n"
+    );
+  }
   const selfFetchWithRetry = async (path, body, retries = 3) => {
     if (!selfBaseUrl) {
       console.error(`[poncho][self-fetch] Missing self base URL for ${path}`);
@@ -12186,7 +12193,7 @@ var runInteractive = async (workingDir, params) => {
   await harness.initialize();
   const identity = await ensureAgentIdentity2(workingDir);
   try {
-    const { runInteractiveInk } = await import("./run-interactive-ink-KA5V5BSJ.js");
+    const { runInteractiveInk } = await import("./run-interactive-ink-OX4CI23D.js");
     await runInteractiveInk({
       harness,
       params,

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   main
-} from "./chunk-V3H773RB.js";
+} from "./chunk-3QT2S6AJ.js";
 
 // src/cli.ts
 void main();

package/dist/index.js

@@ -23,7 +23,7 @@ import {
   runTests,
   startDevServer,
   updateAgentGuidance
-} from "./chunk-V3H773RB.js";
+} from "./chunk-3QT2S6AJ.js";
 export {
   addSkill,
   buildCli,

package/dist/{run-interactive-ink-KA5V5BSJ.js → run-interactive-ink-OX4CI23D.js}

@@ -2,7 +2,7 @@ import {
   consumeFirstRunIntro,
   inferConversationTitle,
   resolveHarnessEnvironment
-} from "./chunk-V3H773RB.js";
+} from "./chunk-3QT2S6AJ.js";
 
 // src/run-interactive-ink.ts
 import * as readline from "readline";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poncho-ai/cli",
-  "version": "0.30.5",
+  "version": "0.30.6",
   "description": "CLI for building and deploying AI agents",
   "repository": {
     "type": "git",
@@ -28,8 +28,8 @@
     "react-devtools-core": "^6.1.5",
     "yaml": "^2.8.1",
     "@poncho-ai/harness": "0.28.3",
-    "@poncho-ai/sdk": "1.6.1",
-    "@poncho-ai/messaging": "0.7.2"
+    "@poncho-ai/messaging": "0.7.2",
+    "@poncho-ai/sdk": "1.6.1"
   },
   "devDependencies": {
     "@types/busboy": "^1.5.4",

package/src/index.ts

@@ -3083,6 +3083,16 @@ export const createRequestHandler = async (options?: {
       "\n  The secret is auto-provisioned as VERCEL_AUTOMATION_BYPASS_SECRET.\n",
     );
   }
+  const hasCronJobs = Object.keys(cronJobs).length > 0;
+  const authTokenConfigured = !!(process.env[config?.auth?.tokenEnv ?? "PONCHO_AUTH_TOKEN"]) && (config?.auth?.required ?? false);
+  if (process.env.VERCEL && hasCronJobs && authTokenConfigured && !process.env.CRON_SECRET) {
+    console.warn(
+      "\n[poncho] Cron jobs are configured but CRON_SECRET is not set." +
+      "\n  Vercel sends CRON_SECRET as a Bearer token when invoking cron endpoints." +
+      "\n  Set CRON_SECRET to the same value as PONCHO_AUTH_TOKEN in your Vercel env vars," +
+      "\n  otherwise cron invocations will be rejected with 401.\n",
+    );
+  }
 
   const selfFetchWithRetry = async (path: string, body?: Record<string, unknown>, retries = 3): Promise<Response | void> => {
     if (!selfBaseUrl) {