@seekrit/cli 2.2.1 → 2.4.0

package/dist/index.js

@@ -2158,6 +2158,7 @@ const AUDIT_ACTIONS = [
 	"org.member_added",
 	"org.member_role_changed",
 	"app.access_granted",
+	"app.access_revoked",
 	"org.member_removed",
 	"org.member_invited",
 	"org.invite_revoked",
@@ -5783,7 +5784,7 @@ async function createAgentTaskToken() {
 	};
 }
 // package.json
-var version = "2.2.1";
+var version = "2.4.0";
 // ../../packages/api-client/src/index.ts
 /**
 * The proposer's note travels as a header, not a body field: an unprotected
@@ -5919,6 +5920,9 @@ var SeekritClient = class {
 	listMembers(orgId) {
 		return this.request("GET", `/v1/orgs/${orgId}/members`);
 	}
+	getMemberAccess(orgId) {
+		return this.request("GET", `/v1/orgs/${orgId}/members/access`);
+	}
 	updateMemberRole(orgId, userId, role) {
 		return this.request("PATCH", `/v1/orgs/${orgId}/members/${userId}`, { role });
 	}
@@ -5931,6 +5935,13 @@ var SeekritClient = class {
 			grants
 		});
 	}
+	/**
+	* Stop auto-granting this app's future environments to a member. Keys they
+	* already hold stay; revoke those per environment with `revokeEnvKey`.
+	*/
+	revokeAppAccess(orgId, appId, userId) {
+		return this.request("DELETE", `/v1/orgs/${orgId}/apps/${appId}/access/${userId}`);
+	}
 	accessRecipients(orgId, target) {
 		const path = "appId" in target ? `apps/${target.appId}` : `groups/${target.groupId}`;
 		return this.request("GET", `/v1/orgs/${orgId}/${path}/access-recipients`);
@@ -12901,7 +12912,7 @@ function collect$5(value, acc) {
 * release-please-config.json), so the pin follows the crate without anyone
 * remembering to move it.
 */
-const PROXY_VERSION = "0.14.0";
+const PROXY_VERSION = "0.15.0";
 const BIN = "seekrit-proxy";
 /**
 * Host → Rust target triple.
@@ -12937,7 +12948,7 @@ function versionPrefix(version) {
 	return version.startsWith("v") ? version : `v${version}`;
 }
 function resolveVersion(explicit) {
-	return explicit ?? process.env.SEEKRIT_PROXY_VERSION ?? "0.14.0";
+	return explicit ?? process.env.SEEKRIT_PROXY_VERSION ?? "0.15.0";
 }
 function resolveBaseUrl(explicit) {
 	return (explicit ?? process.env.SEEKRIT_PROXY_BASE_URL ?? "https://proxy.seekrit.dev").replace(/\/+$/, "");
@@ -14920,10 +14931,10 @@ Next:
 		});
 		console.log(path);
 		const { target } = detectTarget();
-		process.stderr.write(`seekrit-proxy ${versionPrefix(options.proxyVersion ?? "0.14.0")} (${target})\n`);
+		process.stderr.write(`seekrit-proxy ${versionPrefix(options.proxyVersion ?? "0.15.0")} (${target})\n`);
 	});
 	proxy.command("where").description("show which binary `seekrit proxy run` would use, without fetching it").option("--proxy-version <version>", `version to report (default: ${PROXY_VERSION})`).option("--json", "machine-readable output").action((options) => {
-		const version = options.proxyVersion ?? process.env.SEEKRIT_PROXY_VERSION ?? "0.14.0";
+		const version = options.proxyVersion ?? process.env.SEEKRIT_PROXY_VERSION ?? "0.15.0";
 		const override = process.env.SEEKRIT_PROXY_BIN;
 		const { target, exe } = detectTarget();
 		const path = override ?? proxyBinaryPath(version, target, exe);
@@ -14982,7 +14993,7 @@ Next:
 		process.stdout.write(renderComposeSnippet(plan, {
 			service: options.service,
 			workload: options.workload,
-			image: options.image ?? `seekritdev/proxy:0.14.0`,
+			image: options.image ?? `seekritdev/proxy:0.15.0`,
 			publish: Boolean(options.publish)
 		}));
 	});

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@seekrit/cli",
-  "version": "2.2.1",
-  "description": "End-to-end encrypted secrets manager CLI — inject decrypted secrets into any command.",
+  "version": "2.4.0",
+  "description": "CLI for seekrit (https://seekrit.dev), a zero-knowledge secrets manager and credential broker for AI agents — inject decrypted secrets into any command.",
   "homepage": "https://seekrit.dev/docs/guides/cli",
   "keywords": [
     "seekrit",
@@ -43,9 +43,9 @@
     "zod": "^4.6.7"
   },
   "devDependencies": {
-    "@types/node": "^26.6.5",
-    "tsdown": "^0.23.3",
-    "vitest": "^5.0.5",
+    "@types/node": "^26.6.6",
+    "tsdown": "^0.23.5",
+    "vitest": "^5.1.0",
     "@seekrit/api-client": "0.0.1",
     "@seekrit/core": "0.0.1",
     "@seekrit/crypto": "0.0.1"