@spinabot/brigade 1.12.0 → 1.14.0

package/README.md

@@ -306,6 +306,14 @@ by a per-agent approval allowlist (`brigade exec`). Secrets in config use `${VAR
 references that resolve at read time and are never persisted resolved. Optional
 **AES-256-GCM at-rest encryption** in Convex mode (`brigade encrypt`).
 
+**Optional gateway tokens.** The gateway is unauthenticated and localhost-only by
+default — ideal for a single machine. Want more? Add one or more access tokens
+(`brigade gateway token new`) and every connection must then present a valid one
+(`Authorization: Bearer`, `x-brigade-token`, or `?token=`). **Multiple tokens** are
+supported, so you can hand a distinct token to each device and revoke one without
+disturbing the rest, and the same tokens secure `brigade expose`. Entirely opt-in:
+with no tokens configured, nothing changes.
+
 ### 🔀 Carrow — cross-model continuity
 Switch models mid-conversation **without losing context**. Carrow carries the full
 transcript onto the new model (it's the same session), **re-anchors your thinking
@@ -365,6 +373,7 @@ principle is the same: *independent verification, never the agent judging itself
 | `brigade gateway install` · `uninstall` | Install/remove as a system service (launchd / systemd / Task Scheduler) |
 | `brigade gateway supervise` | Out-of-process crash watchdog (respawns a wedged gateway) |
 | `brigade expose` · `expose stop` | Publish the gateway to the public internet via a secure, token-gated tunnel (alias: `bloody benchmark`) |
+| `brigade gateway token new` · `list` · `add` · `revoke` | Manage **optional** access tokens (multiple supported). No tokens → the gateway stays unauthenticated + localhost-only |
 
 ### Agents
 
@@ -442,6 +451,10 @@ brigade gateway stop
 brigade gateway restart
 brigade gateway install      # install as a system service (launchd / systemd / Task Scheduler)
 brigade gateway supervise    # out-of-process crash watchdog
+
+brigade gateway token new        # generate + store an access token (printed once)
+brigade gateway token list       # show configured tokens (masked) + whether auth is on
+brigade gateway token revoke 1   # remove a token by its number (or its exact value)
 ```
 
 | Flag | Default | Notes |
@@ -452,6 +465,13 @@ brigade gateway supervise    # out-of-process crash watchdog
 | `--quiet` | off | Suppress the live console stream |
 | `--log-level X` | `info` | `debug` / `info` / `warn` / `error` |
 
+**Optional authentication.** By default the gateway is unauthenticated and refuses to
+bind anywhere but loopback. To require a token, run `brigade gateway token new` (repeat
+for multiple tokens) and restart the gateway. On the same machine, clients read the
+token from config automatically; elsewhere pass `--token <t>` or set
+`BRIGADE_GATEWAY_TOKEN`. `BRIGADE_GATEWAY_TOKENS` (comma-separated) adds tokens via the
+environment. Remove every token to return to open, localhost-only mode.
+
 ### `brigade connect`
 
 Attaches a TUI to a running gateway. Same chat experience as `brigade`, but the

package/convex/logs.d.ts

@@ -1,11 +1,11 @@
 export declare const appendSessionEvent: import("convex/server").RegisteredMutation<"public", {
     toolName?: string | undefined;
+    role?: string | undefined;
     content?: ArrayBuffer | undefined;
     args?: ArrayBuffer | undefined;
     aborted?: boolean | undefined;
     inner?: string | undefined;
     delta?: string | undefined;
-    role?: string | undefined;
     stopReason?: string | undefined;
     errorMessage?: string | undefined;
     toolCallId?: string | undefined;
@@ -33,12 +33,12 @@ export declare const readSessionEventTail: import("convex/server").RegisteredQue
     _id: import("convex/values").GenericId<"sessionEvents">;
     _creationTime: number;
     toolName?: string | undefined;
+    role?: string | undefined;
     content?: ArrayBuffer | undefined;
     args?: ArrayBuffer | undefined;
     aborted?: boolean | undefined;
     inner?: string | undefined;
     delta?: string | undefined;
-    role?: string | undefined;
     stopReason?: string | undefined;
     errorMessage?: string | undefined;
     toolCallId?: string | undefined;
@@ -65,12 +65,12 @@ export declare const findLastError: import("convex/server").RegisteredQuery<"pub
     _id: import("convex/values").GenericId<"sessionEvents">;
     _creationTime: number;
     toolName?: string | undefined;
+    role?: string | undefined;
     content?: ArrayBuffer | undefined;
     args?: ArrayBuffer | undefined;
     aborted?: boolean | undefined;
     inner?: string | undefined;
     delta?: string | undefined;
-    role?: string | undefined;
     stopReason?: string | undefined;
     errorMessage?: string | undefined;
     toolCallId?: string | undefined;

package/convex/memory.d.ts

@@ -7,7 +7,7 @@ export declare const listFacts: import("convex/server").RegisteredQuery<"public"
     _creationTime: number;
     metadata?: any;
     status?: "asserted" | "provisional" | "confirmed" | "disputed" | "retracted" | undefined;
-    sourceType?: "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | "dream" | undefined;
+    sourceType?: "dream" | "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | undefined;
     sourceTurn?: string | undefined;
     supersedes?: string[] | undefined;
     links?: {
@@ -30,11 +30,11 @@ export declare const listFacts: import("convex/server").RegisteredQuery<"public"
     createdBySessionKey?: string | undefined;
     createdByAccountId?: string | undefined;
     createdAt: number;
-    memoryId: string;
     content: ArrayBuffer;
+    memoryId: string;
     segment: "project" | "context" | "identity" | "preference" | "correction" | "relationship" | "knowledge";
-    tier: "short" | "long" | "permanent";
     importance: number;
+    tier: "short" | "long" | "permanent";
     decayRate: number;
     accessCount: number;
     lastAccessedAt: number;
@@ -44,7 +44,7 @@ export declare const listFacts: import("convex/server").RegisteredQuery<"public"
 export declare const writeFact: import("convex/server").RegisteredMutation<"public", {
     metadata?: any;
     status?: "asserted" | "provisional" | "confirmed" | "disputed" | "retracted" | undefined;
-    sourceType?: "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | "dream" | undefined;
+    sourceType?: "dream" | "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | undefined;
     sourceTurn?: string | undefined;
     supersedes?: string[] | undefined;
     links?: {
@@ -66,11 +66,11 @@ export declare const writeFact: import("convex/server").RegisteredMutation<"publ
     createdByConversationId?: string | undefined;
     createdBySessionKey?: string | undefined;
     createdByAccountId?: string | undefined;
-    memoryId: string;
     content: ArrayBuffer;
+    memoryId: string;
     segment: "project" | "context" | "identity" | "preference" | "correction" | "relationship" | "knowledge";
-    tier: "short" | "long" | "permanent";
     importance: number;
+    tier: "short" | "long" | "permanent";
     decayRate: number;
     workspaceId: string;
 }, Promise<{
@@ -78,7 +78,7 @@ export declare const writeFact: import("convex/server").RegisteredMutation<"publ
     _creationTime: number;
     metadata?: any;
     status?: "asserted" | "provisional" | "confirmed" | "disputed" | "retracted" | undefined;
-    sourceType?: "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | "dream" | undefined;
+    sourceType?: "dream" | "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | undefined;
     sourceTurn?: string | undefined;
     supersedes?: string[] | undefined;
     links?: {
@@ -101,11 +101,11 @@ export declare const writeFact: import("convex/server").RegisteredMutation<"publ
     createdBySessionKey?: string | undefined;
     createdByAccountId?: string | undefined;
     createdAt: number;
-    memoryId: string;
     content: ArrayBuffer;
+    memoryId: string;
     segment: "project" | "context" | "identity" | "preference" | "correction" | "relationship" | "knowledge";
-    tier: "short" | "long" | "permanent";
     importance: number;
+    tier: "short" | "long" | "permanent";
     decayRate: number;
     accessCount: number;
     lastAccessedAt: number;
@@ -123,7 +123,7 @@ export declare const listAllFacts: import("convex/server").RegisteredQuery<"publ
     _creationTime: number;
     metadata?: any;
     status?: "asserted" | "provisional" | "confirmed" | "disputed" | "retracted" | undefined;
-    sourceType?: "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | "dream" | undefined;
+    sourceType?: "dream" | "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | undefined;
     sourceTurn?: string | undefined;
     supersedes?: string[] | undefined;
     links?: {
@@ -146,11 +146,11 @@ export declare const listAllFacts: import("convex/server").RegisteredQuery<"publ
     createdBySessionKey?: string | undefined;
     createdByAccountId?: string | undefined;
     createdAt: number;
-    memoryId: string;
     content: ArrayBuffer;
+    memoryId: string;
     segment: "project" | "context" | "identity" | "preference" | "correction" | "relationship" | "knowledge";
-    tier: "short" | "long" | "permanent";
     importance: number;
+    tier: "short" | "long" | "permanent";
     decayRate: number;
     accessCount: number;
     lastAccessedAt: number;
@@ -163,7 +163,7 @@ export declare const listAllFacts: import("convex/server").RegisteredQuery<"publ
 export declare const upsertFactRecord: import("convex/server").RegisteredMutation<"public", {
     metadata?: any;
     status?: "asserted" | "provisional" | "confirmed" | "disputed" | "retracted" | undefined;
-    sourceType?: "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | "dream" | undefined;
+    sourceType?: "dream" | "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | undefined;
     sourceTurn?: string | undefined;
     supersedes?: string[] | undefined;
     links?: {
@@ -186,11 +186,11 @@ export declare const upsertFactRecord: import("convex/server").RegisteredMutatio
     createdBySessionKey?: string | undefined;
     createdByAccountId?: string | undefined;
     createdAt: number;
-    memoryId: string;
     content: ArrayBuffer;
+    memoryId: string;
     segment: "project" | "context" | "identity" | "preference" | "correction" | "relationship" | "knowledge";
-    tier: "short" | "long" | "permanent";
     importance: number;
+    tier: "short" | "long" | "permanent";
     decayRate: number;
     accessCount: number;
     lastAccessedAt: number;
@@ -273,7 +273,7 @@ export declare const searchContent: import("convex/server").RegisteredQuery<"pub
     _creationTime: number;
     metadata?: any;
     status?: "asserted" | "provisional" | "confirmed" | "disputed" | "retracted" | undefined;
-    sourceType?: "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | "dream" | undefined;
+    sourceType?: "dream" | "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | undefined;
     sourceTurn?: string | undefined;
     supersedes?: string[] | undefined;
     links?: {
@@ -296,11 +296,11 @@ export declare const searchContent: import("convex/server").RegisteredQuery<"pub
     createdBySessionKey?: string | undefined;
     createdByAccountId?: string | undefined;
     createdAt: number;
-    memoryId: string;
     content: ArrayBuffer;
+    memoryId: string;
     segment: "project" | "context" | "identity" | "preference" | "correction" | "relationship" | "knowledge";
-    tier: "short" | "long" | "permanent";
     importance: number;
+    tier: "short" | "long" | "permanent";
     decayRate: number;
     accessCount: number;
     lastAccessedAt: number;
@@ -317,7 +317,7 @@ export declare const findSimilar: import("convex/server").RegisteredQuery<"publi
     _creationTime: number;
     metadata?: any;
     status?: "asserted" | "provisional" | "confirmed" | "disputed" | "retracted" | undefined;
-    sourceType?: "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | "dream" | undefined;
+    sourceType?: "dream" | "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | undefined;
     sourceTurn?: string | undefined;
     supersedes?: string[] | undefined;
     links?: {
@@ -340,11 +340,11 @@ export declare const findSimilar: import("convex/server").RegisteredQuery<"publi
     createdBySessionKey?: string | undefined;
     createdByAccountId?: string | undefined;
     createdAt: number;
-    memoryId: string;
     content: ArrayBuffer;
+    memoryId: string;
     segment: "project" | "context" | "identity" | "preference" | "correction" | "relationship" | "knowledge";
-    tier: "short" | "long" | "permanent";
     importance: number;
+    tier: "short" | "long" | "permanent";
     decayRate: number;
     accessCount: number;
     lastAccessedAt: number;

package/convex/schema.d.ts

@@ -135,7 +135,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
     memoryFacts: import("convex/server").TableDefinition<import("convex/values").VObject<{
         metadata?: any;
         status?: "asserted" | "provisional" | "confirmed" | "disputed" | "retracted" | undefined;
-        sourceType?: "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | "dream" | undefined;
+        sourceType?: "dream" | "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | undefined;
         sourceTurn?: string | undefined;
         supersedes?: string[] | undefined;
         links?: {
@@ -158,11 +158,11 @@ declare const _default: import("convex/server").SchemaDefinition<{
         createdBySessionKey?: string | undefined;
         createdByAccountId?: string | undefined;
         createdAt: number;
-        memoryId: string;
         content: ArrayBuffer;
+        memoryId: string;
         segment: "project" | "context" | "identity" | "preference" | "correction" | "relationship" | "knowledge";
-        tier: "short" | "long" | "permanent";
         importance: number;
+        tier: "short" | "long" | "permanent";
         decayRate: number;
         accessCount: number;
         lastAccessedAt: number;
@@ -187,7 +187,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
         createdByConversationId: import("convex/values").VString<string | undefined, "optional">;
         createdBySessionKey: import("convex/values").VString<string | undefined, "optional">;
         createdByAccountId: import("convex/values").VString<string | undefined, "optional">;
-        sourceType: import("convex/values").VUnion<"user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | "dream" | undefined, [import("convex/values").VLiteral<"user_instruction", "required">, import("convex/values").VLiteral<"owner_message", "required">, import("convex/values").VLiteral<"channel_message", "required">, import("convex/values").VLiteral<"tool_output", "required">, import("convex/values").VLiteral<"retrieved_document", "required">, import("convex/values").VLiteral<"compaction", "required">, import("convex/values").VLiteral<"extraction", "required">, import("convex/values").VLiteral<"dream", "required">], "optional", never>;
+        sourceType: import("convex/values").VUnion<"dream" | "user_instruction" | "owner_message" | "channel_message" | "tool_output" | "retrieved_document" | "compaction" | "extraction" | undefined, [import("convex/values").VLiteral<"user_instruction", "required">, import("convex/values").VLiteral<"owner_message", "required">, import("convex/values").VLiteral<"channel_message", "required">, import("convex/values").VLiteral<"tool_output", "required">, import("convex/values").VLiteral<"retrieved_document", "required">, import("convex/values").VLiteral<"compaction", "required">, import("convex/values").VLiteral<"extraction", "required">, import("convex/values").VLiteral<"dream", "required">], "optional", never>;
         links: import("convex/values").VArray<{
             reason?: string | undefined;
             strength?: number | undefined;
@@ -214,7 +214,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
         subjectKey: import("convex/values").VString<string | undefined, "optional">;
         metadata: import("convex/values").VAny<any, "optional", string>;
         embedding: import("convex/values").VArray<number[] | undefined, import("convex/values").VFloat64<number, "required">, "optional">;
-    }, "required", "metadata" | "createdAt" | "status" | "memoryId" | "sourceType" | "content" | "segment" | "tier" | "importance" | "decayRate" | "accessCount" | "lastAccessedAt" | "sourceTurn" | "supersedes" | "lifecycle" | "links" | "validFrom" | "validTo" | "confidence" | "sourcePointers" | "embedding" | "modality" | "mediaPointer" | "subjectKey" | "workspaceId" | "createdByKind" | "createdByChannelId" | "createdByConversationId" | "createdBySessionKey" | "createdByAccountId" | `metadata.${string}`>, {
+    }, "required", "metadata" | "createdAt" | "status" | "content" | "memoryId" | "segment" | "importance" | "sourceType" | "tier" | "decayRate" | "accessCount" | "lastAccessedAt" | "sourceTurn" | "supersedes" | "lifecycle" | "links" | "validFrom" | "validTo" | "confidence" | "sourcePointers" | "embedding" | "modality" | "mediaPointer" | "subjectKey" | "workspaceId" | "createdByKind" | "createdByChannelId" | "createdByConversationId" | "createdBySessionKey" | "createdByAccountId" | `metadata.${string}`>, {
         by_workspace_lifecycle_createdAt: ["workspaceId", "lifecycle", "createdAt", "_creationTime"];
         by_workspace_memoryId: ["workspaceId", "memoryId", "_creationTime"];
         by_workspace_segment_lifecycle: ["workspaceId", "segment", "lifecycle", "_creationTime"];
@@ -371,12 +371,12 @@ declare const _default: import("convex/server").SchemaDefinition<{
     }, {}, {}>;
     sessionEvents: import("convex/server").TableDefinition<import("convex/values").VObject<{
         toolName?: string | undefined;
+        role?: string | undefined;
         content?: ArrayBuffer | undefined;
         args?: ArrayBuffer | undefined;
         aborted?: boolean | undefined;
         inner?: string | undefined;
         delta?: string | undefined;
-        role?: string | undefined;
         stopReason?: string | undefined;
         errorMessage?: string | undefined;
         toolCallId?: string | undefined;
@@ -421,7 +421,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
         messageCount: import("convex/values").VFloat64<number | undefined, "optional">;
         success: import("convex/values").VBoolean<boolean | undefined, "optional">;
         finalError: import("convex/values").VString<string | undefined, "optional">;
-    }, "required", "type" | "agentId" | "sessionKey" | "toolName" | "content" | "ts" | "args" | "aborted" | "inner" | "delta" | "role" | "stopReason" | "errorMessage" | "toolCallId" | "isError" | "result" | "attempt" | "maxAttempts" | "delayMs" | "success" | "finalError" | "willRetry" | "messageCount" | "day" | "ownerId">, {
+    }, "required", "type" | "agentId" | "sessionKey" | "toolName" | "role" | "content" | "ts" | "args" | "aborted" | "inner" | "delta" | "stopReason" | "errorMessage" | "toolCallId" | "isError" | "result" | "attempt" | "maxAttempts" | "delayMs" | "success" | "finalError" | "willRetry" | "messageCount" | "day" | "ownerId">, {
         by_owner_day: ["ownerId", "day", "_creationTime"];
         by_owner_session: ["ownerId", "sessionKey", "ts", "_creationTime"];
         by_owner_error: ["ownerId", "isError", "ts", "_creationTime"];
@@ -859,10 +859,10 @@ declare const _default: import("convex/server").SchemaDefinition<{
         source: "bundled" | "config" | "managed" | "personal" | "project" | "workspace";
         description: string;
         createdAt: number;
+        body: string;
         ownerId: string;
         updatedAt: number;
         frontmatter: string;
-        body: string;
         eligibility: {
             os: string[];
             requiresBins: string[];
@@ -895,7 +895,7 @@ declare const _default: import("convex/server").SchemaDefinition<{
         disableModelInvocation: import("convex/values").VBoolean<boolean, "required">;
         createdAt: import("convex/values").VFloat64<number, "required">;
         updatedAt: import("convex/values").VFloat64<number, "required">;
-    }, "required", "agentId" | "name" | "source" | "description" | "createdAt" | "ownerId" | "updatedAt" | "frontmatter" | "body" | "eligibility" | "disableModelInvocation" | "eligibility.os" | "eligibility.requiresBins" | "eligibility.requiresAnyBins" | "eligibility.requiresEnv" | "eligibility.requiresConfig">, {
+    }, "required", "agentId" | "name" | "source" | "description" | "createdAt" | "body" | "ownerId" | "updatedAt" | "frontmatter" | "eligibility" | "disableModelInvocation" | "eligibility.os" | "eligibility.requiresBins" | "eligibility.requiresAnyBins" | "eligibility.requiresEnv" | "eligibility.requiresConfig">, {
         by_owner_name: ["ownerId", "name", "_creationTime"];
         by_owner_scope_name: ["ownerId", "source", "agentId", "name", "_creationTime"];
         by_owner_source: ["ownerId", "source", "_creationTime"];

package/convex/skills.d.ts

@@ -10,10 +10,10 @@ export declare const list: import("convex/server").RegisteredQuery<"public", {
     source: "bundled" | "config" | "managed" | "personal" | "project" | "workspace";
     description: string;
     createdAt: number;
+    body: string;
     ownerId: string;
     updatedAt: number;
     frontmatter: string;
-    body: string;
     eligibility: {
         os: string[];
         requiresBins: string[];
@@ -34,10 +34,10 @@ export declare const get: import("convex/server").RegisteredQuery<"public", {
     source: "bundled" | "config" | "managed" | "personal" | "project" | "workspace";
     description: string;
     createdAt: number;
+    body: string;
     ownerId: string;
     updatedAt: number;
     frontmatter: string;
-    body: string;
     eligibility: {
         os: string[];
         requiresBins: string[];
@@ -52,9 +52,9 @@ export declare const upsert: import("convex/server").RegisteredMutation<"public"
     name: string;
     source: "bundled" | "config" | "managed" | "personal" | "project" | "workspace";
     description: string;
+    body: string;
     ownerId: string;
     frontmatter: string;
-    body: string;
     eligibility: {
         os: string[];
         requiresBins: string[];

package/dist/buildstamp.json

@@ -1 +1 @@
-{"builtAt":1782479499791,"head":"9c3b72e2a4be9508e3f9c034ffb2124166db982e","version":"1.12.0"}
+{"builtAt":1782494628001,"head":"0bb31be61f20c7c0a1de17024a71ea185306c42a","version":"1.14.0"}

package/dist/cli/commands/config-cmd.d.ts

@@ -1,18 +1,17 @@
 /**
- * `brigade config <list|get|set|unset|file>` — config CRUD over brigade.json.
+ * `brigade config <list|get|set|unset|file|schema|validate>` — config CRUD
+ * over brigade.json.
  *
- *   - 4 subcommands (no `schema` / `validate` — Brigade's TypeBox schema is
- *     private and validation happens automatically on every write through
- *     `writeBrigadeConfig`).
- *   - Dot-notation only (no `path[0]` array indexing) — Brigade's super-
- *     config has no positional arrays the user would target by index.
- *   - JSON5 parsing for `set` values when --strict-json is off (numbers,
- *     booleans, arrays, objects) with raw-string fallback.
- *   - Atomic write + 4-deep .bak rotation already inherited from
- *     `writeBrigadeConfig` — no extra wiring needed.
+ * The path parsing, nested get/set/delete, value parsing, and secret redaction
+ * all live in `core/config-ops.ts` — SHARED with the `config.*` gateway RPCs so
+ * the CLI and a remote client mutate config (and redact secrets) identically.
+ * This file is the thin CLI shell: arg handling + stdout/exit-code formatting.
+ *
+ *   - Dot-notation paths (+ escaped dots + bracket indices/keys).
+ *   - JSON5 parsing for `set` values when --strict-json is off, raw-string fallback.
+ *   - Atomic write + .bak rotation inherited from `saveConfig`.
  *   - Secrets redaction in `list`/`get`: any segment matching
- *     /^(key|apiKey|token|password|secret)$/i (case-insensitive) renders
- *     as `__BRIGADE_REDACTED__`.
+ *     /^(key|apiKey|token|password|secret|...)$/i renders as `__BRIGADE_REDACTED__`.
  *
  * On-disk path: `~/.brigade/brigade.json` (resolved via BRIGADE_DIR).
  */
@@ -41,19 +40,13 @@ export declare function runConfigFile(opts?: {
 /**
  * Print the brigade.json TypeBox schema as JSON — useful for IDE /
  * external-tool autocompletion against the live shape.
- *
- * The output is the in-memory TypeBox schema descriptor (with `type`,
- * `properties`, `required`, etc.) — JSON-Schema-compatible enough to feed
- * into a JSON-Schema-aware editor.
  */
 export declare function runConfigSchema(_opts?: {}): Promise<number>;
 /**
  * Validate the on-disk brigade.json against the TypeBox schema. Reports a
  * pass/fail line plus per-issue path + message when invalid.
  *
- * Exit codes:
- *   0 — config is valid (or doesn't exist yet — empty file is benign)
- *   1 — config is invalid; issues listed
+ * Exit codes: 0 — valid (or absent); 1 — invalid (issues listed).
  */
 export declare function runConfigValidate(opts?: {
     json?: boolean;

package/dist/cli/commands/config-cmd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-cmd.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/config-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAezC,MAAM,WAAW,gBAAgB;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;CACf;AACD,MAAM,WAAW,gBAAgB;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AACD,MAAM,WAAW,iBAAiB;IACjC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAiLD,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBhG;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CA8BlH;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBpG;AAED,wBAAsB,aAAa,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAUjF;AAED,wBAAsB,aAAa,CAAC,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAQlF;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,KAAK,GAAE,EAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAGrE;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAuCtF;AAID,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAsD5D"}
+{"version":3,"file":"config-cmd.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/config-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBzC,MAAM,WAAW,gBAAgB;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;CACf;AACD,MAAM,WAAW,gBAAgB;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AACD,MAAM,WAAW,iBAAiB;IACjC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAID,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBhG;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CA8BlH;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBpG;AAED,wBAAsB,aAAa,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAUjF;AAED,wBAAsB,aAAa,CAAC,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAQlF;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,KAAK,GAAE,EAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAGrE;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAuCtF;AAID,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAsD5D"}