@seekrit/cli 1.2.1 → 1.3.0

package/dist/index.js

@@ -5051,7 +5051,7 @@ async function createAgentTaskToken() {
 }
 //#endregion
 //#region package.json
-var version = "1.2.1";
+var version = "1.3.0";
 //#endregion
 //#region ../../packages/api-client/src/index.ts
 var SeekritApiError = class extends Error {
@@ -12165,7 +12165,7 @@ function collect$2(value, acc) {
 * release-please-config.json), so the pin follows the crate without anyone
 * remembering to move it.
 */
-const PROXY_VERSION = "0.10.0";
+const PROXY_VERSION = "0.11.0";
 const BIN = "seekrit-proxy";
 /**
 * Host → Rust target triple.
@@ -12201,7 +12201,7 @@ function versionPrefix(version) {
 	return version.startsWith("v") ? version : `v${version}`;
 }
 function resolveVersion(explicit) {
-	return explicit ?? process.env.SEEKRIT_PROXY_VERSION ?? "0.10.0";
+	return explicit ?? process.env.SEEKRIT_PROXY_VERSION ?? "0.11.0";
 }
 function resolveBaseUrl(explicit) {
 	return (explicit ?? process.env.SEEKRIT_PROXY_BASE_URL ?? "https://proxy.seekrit.dev").replace(/\/+$/, "");
@@ -12328,6 +12328,42 @@ function signalNumber(signal) {
 * — and none of them changes what the proxy does. The generated config is the
 * same config; the fetched binary is the released binary, checksum-verified.
 */
+/**
+* Where `seekrit proxy approvals` looks by default.
+*
+* The control listener is loopback-bound by design, so the only interesting
+* variable is the port — and one URL is easier to override than a host/port pair.
+*/
+const DEFAULT_CONTROL_URL = "http://127.0.0.1:8090";
+/** Header the control listener authenticates with (mirrors `src/tickets.rs`). */
+const CONTROL_TOKEN_HEADER = "x-seekrit-control-token";
+/**
+* Talk to a running proxy's control listener.
+*
+* The token comes from the environment and never from a flag: it is what decides
+* whether a held request goes through, and a flag would put it in shell history
+* next to the operation it is guarding.
+*/
+async function controlRequest(base, path, decision) {
+	const token = process.env.SEEKRIT_PROXY_CONTROL_TOKEN;
+	if (!token) fail("SEEKRIT_PROXY_CONTROL_TOKEN is not set — it is the same token the proxy was started with, and without it the listener will not answer");
+	let resp;
+	try {
+		resp = await fetch(new URL(path, base), {
+			method: decision ? "POST" : "GET",
+			headers: {
+				[CONTROL_TOKEN_HEADER]: token,
+				...decision ? { "content-type": "application/json" } : {}
+			},
+			...decision ? { body: JSON.stringify({ decision }) } : {}
+		});
+	} catch (e) {
+		fail(`could not reach the proxy's control listener at ${base}: ${e.message}\nIs the proxy running, and does its config have a [control] block?`);
+		throw e;
+	}
+	if (!resp.ok) fail(`${resp.status} from the control listener: ${(await resp.text()).trim()}`);
+	return await resp.json();
+}
 const DEFAULT_CONFIG = "seekrit-proxy.toml";
 /**
 * The exact grammar `seekrit_cache::parse_duration` accepts: a positive integer,
@@ -12553,10 +12589,10 @@ Next:
 		});
 		console.log(path);
 		const { target } = detectTarget();
-		process.stderr.write(`seekrit-proxy ${versionPrefix(options.proxyVersion ?? "0.10.0")} (${target})\n`);
+		process.stderr.write(`seekrit-proxy ${versionPrefix(options.proxyVersion ?? "0.11.0")} (${target})\n`);
 	});
 	proxy.command("where").description("show which binary `seekrit proxy run` would use, without fetching it").option("--proxy-version <version>", `version to report (default: ${PROXY_VERSION})`).option("--json", "machine-readable output").action((options) => {
-		const version = options.proxyVersion ?? process.env.SEEKRIT_PROXY_VERSION ?? "0.10.0";
+		const version = options.proxyVersion ?? process.env.SEEKRIT_PROXY_VERSION ?? "0.11.0";
 		const override = process.env.SEEKRIT_PROXY_BIN;
 		const { target, exe } = detectTarget();
 		const path = override ?? proxyBinaryPath(version, target, exe);
@@ -12572,12 +12608,50 @@ Next:
 			process.stderr.write(`${info.version} · ${info.target} · ${info.source}\n`);
 		});
 	});
+	proxy.command("approvals").description("list requests a running proxy is holding for approval").option("--control <url>", "control listener URL", DEFAULT_CONTROL_URL).option("--json", "machine-readable output").action(async (options) => {
+		const { pending } = await controlRequest(options.control, "/approvals");
+		emit(options, { pending }, () => {
+			printTable(pending, [
+				col("ID", (p) => p.id),
+				col("OPERATION", (p) => p.operation),
+				col("REQUEST", (p) => `${p.method} ${p.host}${p.path}`),
+				col("CARRIES", (p) => p.secrets.join(", ") || "no credential"),
+				col("EXPIRES", (p) => `${p.expires_in_seconds}s`)
+			], "nothing is waiting");
+		});
+	});
+	for (const [verb, decision, summary] of [
+		[
+			"approve",
+			"approve",
+			"let a held request through"
+		],
+		[
+			"deny",
+			"deny",
+			"refuse a held request"
+		],
+		[
+			"always",
+			"always",
+			"let it through and stop asking about that host and method for this run"
+		]
+	]) proxy.command(`${verb} <id>`).description(summary).option("--control <url>", "control listener URL", DEFAULT_CONTROL_URL).option("--json", "machine-readable output").action(async (id, options) => {
+		const result = await controlRequest(options.control, `/approvals/${encodeURIComponent(id)}`, decision);
+		emit(options, {
+			id,
+			decision,
+			...result
+		}, () => {
+			process.stderr.write(`${id}: ${decision}\n`);
+		});
+	});
 	withGenerateOptions(proxy.command("compose").description("print a docker compose sidecar snippet for a generated config")).option("--service <name>", "compose service name for the proxy", COMPOSE_DEFAULTS.service).option("--workload <name>", "compose service name for your workload", COMPOSE_DEFAULTS.workload).option("--image <ref>", "image to pin (default: seekritdev/proxy:<version>)").option("--publish", "also publish the proxy's ports to the host").action(async (options) => {
 		const plan = await buildPlan(options);
 		process.stdout.write(renderComposeSnippet(plan, {
 			service: options.service,
 			workload: options.workload,
-			image: options.image ?? `seekritdev/proxy:0.10.0`,
+			image: options.image ?? `seekritdev/proxy:0.11.0`,
 			publish: Boolean(options.publish)
 		}));
 	});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seekrit/cli",
-  "version": "1.2.1",
+  "version": "1.3.0",
   "description": "End-to-end encrypted secrets manager CLI — inject decrypted secrets into any command.",
   "type": "module",
   "publishConfig": {
@@ -22,16 +22,16 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@modelcontextprotocol/sdk": "^1.30.0",
     "commander": "^15.0.0",
-    "zod": "^4.4.3"
+    "zod": "^4.5.4"
   },
   "devDependencies": {
     "@types/node": "^26.1.0",
     "tsdown": "^0.22.3",
-    "vitest": "^4.1.9",
-    "@seekrit/api-client": "0.0.1",
+    "vitest": "^4.1.11",
     "@seekrit/core": "0.0.1",
+    "@seekrit/api-client": "0.0.1",
     "@seekrit/crypto": "0.0.1"
   },
   "scripts": {