@realtimex/sdk 2.0.34 → 2.0.36

package/skills/realtimex-delegates/SKILL.md

@@ -0,0 +1,65 @@
+---
+name: realtimex-delegates
+description: "Manage RealTimeX Delegate scope bindings, policy drafts and compiler jobs, activation, lifecycle, decisions, and executions. Use for explicit Human-representing Delegate authority administration."
+allowed-tools: "Read Bash"
+metadata:
+  openclaw:
+    requires:
+      bins:
+        - realtimex-pp-cli
+---
+
+# RealTimeX Delegates
+
+Manage RealTimeX Delegate scope bindings, policy drafts and compiler jobs, activation, lifecycle, decisions, and executions. Use for explicit Human-representing Delegate authority administration.
+
+## CLI setup
+
+This skill uses `realtimex-pp-cli` version 2.0.36. Before using its commands:
+
+```bash
+realtimex-pp-cli --version
+```
+
+If it is missing or does not report `realtimex-pp-cli 2.0.36`, install the pinned version:
+
+```bash
+npm install -g @realtimex/pp-cli@2.0.36
+```
+
+For requests about the current workspace or thread, resolve context first:
+
+```bash
+realtimex-pp-cli prepare --agent
+```
+
+## Command reference
+
+**get-delegate-mandate** — Manage get delegate mandate
+
+- `realtimex-pp-cli get-delegate-mandate` — Get delegate mandate
+
+**propose-delegate-mandate** — Manage propose delegate mandate
+
+- `realtimex-pp-cli propose-delegate-mandate <authorityId>` — Propose delegate mandate
+
+**resolve-delegate** — Manage resolve delegate
+
+- `realtimex-pp-cli resolve-delegate` — Resolve delegate
+
+## Domain rules
+
+- Treat `configure-plugin` as topology deployment only; it does not grant, activate, suspend, resume, or revoke Delegate authority.
+- Always supply the explicit native scope identifier: global topology registry id, project topology assignment id, or numeric Workspace Team database id.
+- Inspect the Delegate, draft, compiler job, or execution before dependent mutations, and preserve every server-returned id and revision exactly.
+- Never automatically retry Delegate mutations after a timeout, network error, 429, or 5xx response. Read authoritative state before deciding whether a manual repeat is safe.
+- Use `expected-revision 0` for the first draft save and `expected-policy-version none` only when no policy is active.
+- Supply exact instance confirmation where required. Do not invent confirmation or refresh stale activation revisions automatically.
+- Poll compiler jobs and pending decisions with the generated GET commands; polling must not create work or authority.
+
+## Shared constraints
+
+- Run documented commands with `--agent`.
+- Use exact identifiers returned by `prepare` or the relevant list/get command; do not guess values.
+- Do not bypass the CLI with raw HTTP calls. If a required operation is absent, report that limitation.
+- Ask one concise clarification when required target context is missing or ambiguous.

package/skills/realtimex-heartbeat/SKILL.md

@@ -15,16 +15,16 @@ Configure RealTimeX heartbeat scheduling, agents, active hours, timezone, autopi
 
 ## CLI setup
 
-This skill uses `realtimex-pp-cli` version 2.0.34. Before using its commands:
+This skill uses `realtimex-pp-cli` version 2.0.36. Before using its commands:
 
 ```bash
 realtimex-pp-cli --version
 ```
 
-If it is missing or does not report `realtimex-pp-cli 2.0.34`, install the pinned version:
+If it is missing or does not report `realtimex-pp-cli 2.0.36`, install the pinned version:
 
 ```bash
-npm install -g @realtimex/pp-cli@2.0.34
+npm install -g @realtimex/pp-cli@2.0.36
 ```
 
 For requests about the current workspace or thread, resolve context first:

package/skills/realtimex-local-apps/SKILL.md

@@ -15,16 +15,16 @@ Create, inspect, configure, start, stop, restart, and delete RealTimeX Local App
 
 ## CLI setup
 
-This skill uses `realtimex-pp-cli` version 2.0.34. Before using its commands:
+This skill uses `realtimex-pp-cli` version 2.0.36. Before using its commands:
 
 ```bash
 realtimex-pp-cli --version
 ```
 
-If it is missing or does not report `realtimex-pp-cli 2.0.34`, install the pinned version:
+If it is missing or does not report `realtimex-pp-cli 2.0.36`, install the pinned version:
 
 ```bash
-npm install -g @realtimex/pp-cli@2.0.34
+npm install -g @realtimex/pp-cli@2.0.36
 ```
 
 For requests about the current workspace or thread, resolve context first:

package/skills/realtimex-moderator-sdk/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: realtimex-moderator-sdk
-description: "Route RealTimeX API work to the focused workspace, terminal-agent, browser-session, local-app, heartbeat, automation-flow, artifact, channel, webhook, or plugin-and-skill capability. Use when a request spans capabilities or the correct RealTimeX skill is unclear."
+description: "Route RealTimeX API work to the focused workspace, terminal-agent, browser-session, local-app, heartbeat, automation-flow, artifact, channel, webhook, secret-management, Delegate-authority, or plugin-and-skill capability. Use when a request spans capabilities or the correct RealTimeX skill is unclear."
 allowed-tools: "Read Bash"
 metadata:
   openclaw:
@@ -15,16 +15,16 @@ Use this router to select the smallest RealTimeX skill that owns the requested o
 
 ## CLI setup
 
-This skill uses `realtimex-pp-cli` version 2.0.34. Before using its commands:
+This skill uses `realtimex-pp-cli` version 2.0.36. Before using its commands:
 
 ```bash
 realtimex-pp-cli --version
 ```
 
-If it is missing or does not report `realtimex-pp-cli 2.0.34`, install the pinned version:
+If it is missing or does not report `realtimex-pp-cli 2.0.36`, install the pinned version:
 
 ```bash
-npm install -g @realtimex/pp-cli@2.0.34
+npm install -g @realtimex/pp-cli@2.0.36
 ```
 
 For requests about the current workspace or thread, resolve context first:
@@ -37,6 +37,7 @@ realtimex-pp-cli prepare --agent
 
 | Skill | Use for |
 | --- | --- |
+| `realtimex-secrets` | Manage encrypted named secrets and workspace scope with the moderator CLI. Use saved secrets in terminal commands through rtxexec without handling raw values. |
 | `realtimex-workspaces` | Manage RealTimeX workspaces, threads, messages, workspace personality, LLM configuration, and default agents. Use for workspace and conversation operations. |
 | `realtimex-terminal-agents` | Manage RealTimeX terminal agents, terminal sessions, session messages, and idle prompts. Use for desktop terminal-agent runtime and terminal-session lifecycle work. |
 | `realtimex-browser-sessions` | List, create, start, stop, and delete isolated RealTimeX browser sessions. Use for named browser runtime and profile lifecycle work. |
@@ -47,6 +48,7 @@ realtimex-pp-cli prepare --agent
 | `realtimex-channels` | Create, configure, start, stop, and delete RealTimeX chat channels, approve pairing codes, and deliver channel files. Use for Telegram, Zalo, Discord, and other channel integrations. |
 | `realtimex-webhooks` | Create, inspect, update, test, and delete RealTimeX public webhook endpoints and inspect bounded delivery metadata. Use for inbound public webhook trigger configuration. |
 | `realtimex-plugin-and-skill` | Manage RealTimeX plugins and agent skills, including configuration, enablement, reload, installation, promotion, and workspace skill state. Use for plugin and skill administration. |
+| `realtimex-delegates` | Manage RealTimeX Delegate scope bindings, policy drafts and compiler jobs, activation, lifecycle, decisions, and executions. Use for explicit Human-representing Delegate authority administration. |
 
 ## Cross-domain requests
 

package/skills/realtimex-plugin-and-skill/SKILL.md

@@ -15,16 +15,16 @@ Manage RealTimeX plugins and agent skills, including configuration, enablement,
 
 ## CLI setup
 
-This skill uses `realtimex-pp-cli` version 2.0.34. Before using its commands:
+This skill uses `realtimex-pp-cli` version 2.0.36. Before using its commands:
 
 ```bash
 realtimex-pp-cli --version
 ```
 
-If it is missing or does not report `realtimex-pp-cli 2.0.34`, install the pinned version:
+If it is missing or does not report `realtimex-pp-cli 2.0.36`, install the pinned version:
 
 ```bash
-npm install -g @realtimex/pp-cli@2.0.34
+npm install -g @realtimex/pp-cli@2.0.36
 ```
 
 For requests about the current workspace or thread, resolve context first:
@@ -37,7 +37,7 @@ realtimex-pp-cli prepare --agent
 
 **configure-plugin** — Manage configure plugin
 
-- `realtimex-pp-cli configure-plugin <pluginId>` — Set non-secret configuration values for one installed plugin. Use a plugin id, name, or displayName from list-plugins.
+- `realtimex-pp-cli configure-plugin <pluginId>` — Set non-secret global configuration values for one installed plugin.
 
 **create-workspace-agent-skill** — Manage create workspace agent skill
 
@@ -61,7 +61,7 @@ realtimex-pp-cli prepare --agent
 
 **get-plugin** — Manage get plugin
 
-- `realtimex-pp-cli get-plugin <pluginId>` — Get one installed plugin with its config schema (keys, labels, types, defaults)
+- `realtimex-pp-cli get-plugin <pluginId>` — Get one installed plugin with its global config schema and current non-secret global values.
 
 **install-plugin** — Manage install plugin
 
@@ -69,7 +69,7 @@ realtimex-pp-cli prepare --agent
 
 **list-agent-skills** — Manage list agent skills
 
-- `realtimex-pp-cli list-agent-skills` — List published agent skills. Use list-workspace-agent-skills to see enabled/disabled state for one workspace.
+- `realtimex-pp-cli list-agent-skills` — List available non-candidate agent skills.
 
 **list-plugins** — Manage list plugins
 
@@ -77,7 +77,7 @@ realtimex-pp-cli prepare --agent
 
 **list-workspace-agent-skills** — Manage list workspace agent skills
 
-- `realtimex-pp-cli list-workspace-agent-skills <workspaceSlug>` — List published agent skills with enabled/disabled state for one exact workspace slug.
+- `realtimex-pp-cli list-workspace-agent-skills <workspaceSlug>` — List available non-candidate agent skills with enabled/disabled state for one exact workspace slug.
 
 **promote-workspace-agent-skill** — Manage promote workspace agent skill
 

package/skills/realtimex-secrets/SKILL.md

@@ -0,0 +1,84 @@
+---
+name: realtimex-secrets
+description: "Manage encrypted named secrets and workspace scope with the moderator CLI. Use saved secrets in terminal commands through rtxexec without handling raw values."
+allowed-tools: "Read Bash"
+metadata:
+  openclaw:
+    requires:
+      bins:
+        - realtimex-pp-cli
+---
+
+# RealTimeX Secrets
+
+Manage encrypted named secrets and workspace scope with the moderator CLI. Use saved secrets in terminal commands through rtxexec without handling raw values.
+
+## CLI setup
+
+This skill uses `realtimex-pp-cli` version 2.0.36. Before using its commands:
+
+```bash
+realtimex-pp-cli --version
+```
+
+If it is missing or does not report `realtimex-pp-cli 2.0.36`, install the pinned version:
+
+```bash
+npm install -g @realtimex/pp-cli@2.0.36
+```
+
+For requests about the current workspace or thread, resolve context first:
+
+```bash
+realtimex-pp-cli prepare --agent
+```
+
+## Command reference
+
+**create-secret** — Manage create secret
+
+- `realtimex-pp-cli create-secret` — Create secret
+
+Read a value with `--value-stdin` (raw stdin, not a shell literal). Use `--all-workspaces` to restore unrestricted scope, or `--workspace-slugs` for a comma-separated list. Omit `--value-stdin` on update to keep the saved value.
+
+**delete-secret** — Manage delete secret
+
+- `realtimex-pp-cli delete-secret <id>` — Delete secret
+
+**get-secret** — Manage get secret
+
+- `realtimex-pp-cli get-secret <id>` — Get secret
+
+**list-secret-usage** — Manage list secret usage
+
+- `realtimex-pp-cli list-secret-usage <id>` — List secret usage
+
+**list-secrets** — Manage list secrets
+
+- `realtimex-pp-cli list-secrets` — List secrets
+
+**update-secret** — Manage update secret
+
+- `realtimex-pp-cli update-secret <id>` — Update secret
+
+Read a value with `--value-stdin` (raw stdin, not a shell literal). Use `--all-workspaces` to restore unrestricted scope, or `--workspace-slugs` for a comma-separated list. Omit `--value-stdin` on update to keep the saved value.
+
+## Domain rules
+
+- Use realtimex-pp-cli for secret management only. List/get responses contain metadata and references, never values.
+- Prefer the Secrets settings screen for entering or rotating values. Never put a raw secret in a command argument, shell history, chat, or a temporary file.
+- Secrets default to all workspaces. Set workspaceSlugs to an explicit list to restrict execution; an empty list permits no workspace. Management remains app-wide in this single-user app.
+- Use rtxexec only for execution. Install @realtimex/rtxexec@0.1.0 if unavailable. It uses REALTIMEX_TERMINAL_SESSION_TOKEN and the app-provided local server URL; workspace scope comes from the authenticated session.
+- Prefer environment or stdin injection: rtxexec --env API_TOKEN=secret://my-token -- program; rtxexec --stdin secret://my-password -- program.
+- For tools requiring arguments: rtxexec --secret token=secret://my-token -- curl -H "Authorization: Bearer {{token}}" https://api.example.com. Expanded arguments may be visible to local processes.
+- Do not request raw values, inspect the vault database or encryption keys, call the resolution endpoint directly, or run printenv/echo to inspect injected values. Use references and non-secret success checks.
+- rtxexec launches the command directly without a shell. Do not use secret placeholders inside sh -c, bash -c, cmd /c, PowerShell command strings, or other evaluated code.
+- Output masking is best effort for known values, not protection against arbitrary encoding, child-created files, or an agent deliberately reading secrets. Programs requiring an interactive TTY or Windows batch scripts need another supported invocation.
+- Usage records mean values were resolved for an executable, not that the command completed successfully. Disabled, deleted, or out-of-scope secrets fail before execution.
+
+## Shared constraints
+
+- Run documented commands with `--agent`.
+- Use exact identifiers returned by `prepare` or the relevant list/get command; do not guess values.
+- Do not bypass the CLI with raw HTTP calls. If a required operation is absent, report that limitation.
+- Ask one concise clarification when required target context is missing or ambiguous.

package/skills/realtimex-terminal-agents/SKILL.md

@@ -15,16 +15,16 @@ Manage RealTimeX terminal agents, terminal sessions, session messages, and idle
 
 ## CLI setup
 
-This skill uses `realtimex-pp-cli` version 2.0.34. Before using its commands:
+This skill uses `realtimex-pp-cli` version 2.0.36. Before using its commands:
 
 ```bash
 realtimex-pp-cli --version
 ```
 
-If it is missing or does not report `realtimex-pp-cli 2.0.34`, install the pinned version:
+If it is missing or does not report `realtimex-pp-cli 2.0.36`, install the pinned version:
 
 ```bash
-npm install -g @realtimex/pp-cli@2.0.34
+npm install -g @realtimex/pp-cli@2.0.36
 ```
 
 For requests about the current workspace or thread, resolve context first:

package/skills/realtimex-webhooks/SKILL.md

@@ -15,16 +15,16 @@ Create, inspect, update, test, and delete RealTimeX public webhook endpoints and
 
 ## CLI setup
 
-This skill uses `realtimex-pp-cli` version 2.0.34. Before using its commands:
+This skill uses `realtimex-pp-cli` version 2.0.36. Before using its commands:
 
 ```bash
 realtimex-pp-cli --version
 ```
 
-If it is missing or does not report `realtimex-pp-cli 2.0.34`, install the pinned version:
+If it is missing or does not report `realtimex-pp-cli 2.0.36`, install the pinned version:
 
 ```bash
-npm install -g @realtimex/pp-cli@2.0.34
+npm install -g @realtimex/pp-cli@2.0.36
 ```
 
 For requests about the current workspace or thread, resolve context first:

package/skills/realtimex-workspaces/SKILL.md

@@ -15,16 +15,16 @@ Manage RealTimeX workspaces, threads, messages, workspace personality, LLM confi
 
 ## CLI setup
 
-This skill uses `realtimex-pp-cli` version 2.0.34. Before using its commands:
+This skill uses `realtimex-pp-cli` version 2.0.36. Before using its commands:
 
 ```bash
 realtimex-pp-cli --version
 ```
 
-If it is missing or does not report `realtimex-pp-cli 2.0.34`, install the pinned version:
+If it is missing or does not report `realtimex-pp-cli 2.0.36`, install the pinned version:
 
 ```bash
-npm install -g @realtimex/pp-cli@2.0.34
+npm install -g @realtimex/pp-cli@2.0.36
 ```
 
 For requests about the current workspace or thread, resolve context first: