@stroq/cli 0.14.0 → 0.14.1

package/dist/index.js

@@ -10879,17 +10879,46 @@ function emit(report, out) {
   const found = report.credentials.length > 0 || report.files.length > 0;
   return out.failOnFinding && found ? 1 : 0;
 }
+var USAGE = `stroq sent \u2014 which of your credentials already reached a model provider
+
+  stroq sent --last                 read the newest session in this directory
+  stroq sent --transcript <path>    read a specific transcript file
+  stroq sent [<session-id>]         read a session Stroq itself recorded
+
+Flags:
+  --json               emit the report as JSON
+  --fail-on-finding    exit 1 when a credential is found (for a scheduled job)
+  -h, --help           show this
+
+It reads this machine's credential files to know what to look for, and prints
+names and sources only, never a value. A finding exits 0 by default: a session
+that already happened cannot be un-sent by today's commit.
+`;
 async function runSent(args) {
-  const { values, positionals } = parseArgs9({
-    args: [...args],
-    options: {
-      json: { type: "boolean" },
-      last: { type: "boolean" },
-      transcript: { type: "string" },
-      "fail-on-finding": { type: "boolean" }
-    },
-    allowPositionals: true
-  });
+  let parsed;
+  try {
+    parsed = parseArgs9({
+      args: [...args],
+      options: {
+        json: { type: "boolean" },
+        last: { type: "boolean" },
+        transcript: { type: "string" },
+        "fail-on-finding": { type: "boolean" },
+        help: { type: "boolean", short: "h" }
+      },
+      allowPositionals: true
+    });
+  } catch (err) {
+    process.stderr.write(`${err.message}
+
+${USAGE}`);
+    return 2;
+  }
+  const { values, positionals } = parsed;
+  if (values.help === true) {
+    process.stdout.write(USAGE);
+    return 0;
+  }
   const out = {
     json: values.json === true,
     failOnFinding: values["fail-on-finding"] === true
@@ -11037,7 +11066,7 @@ import { existsSync as existsSync14, readdirSync as readdirSync7 } from "fs";
 import { rm as rm6 } from "fs/promises";
 import { join as join26 } from "path";
 import { parseArgs as parseArgs11 } from "util";
-var USAGE = "usage: stroq untaint --session <id> | --all\n";
+var USAGE2 = "usage: stroq untaint --session <id> | --all\n";
 async function clearAll() {
   const dir = sessionsDir();
   if (!existsSync14(dir)) return;
@@ -11063,7 +11092,7 @@ async function runUntaint(args) {
 `);
     return 0;
   }
-  process.stdout.write(USAGE);
+  process.stdout.write(USAGE2);
   return 1;
 }
 
@@ -11131,7 +11160,7 @@ async function runWhy(args) {
 }
 
 // src/index.ts
-var USAGE2 = `stroq <command>
+var USAGE3 = `stroq <command>
 
 Commands:
   init [--agent <name>] [--user] [--dry-run]
@@ -11242,7 +11271,7 @@ async function main(argv) {
 `);
       return 0;
     default:
-      process.stdout.write(USAGE2);
+      process.stdout.write(USAGE3);
       return command === void 0 || command === "--help" || command === "-h" ? 0 : 1;
   }
 }

package/openclaw-plugin/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "stroq",
   "name": "Stroq",
   "description": "Local action firewall for OpenClaw: scans what the agent reads, taints the session, blocks or asks before dangerous tool calls.",
-  "version": "0.14.0",
+  "version": "0.14.1",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/openclaw-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "stroq-openclaw-plugin",
-  "version": "0.14.0",
+  "version": "0.14.1",
   "private": true,
   "description": "Stroq's OpenClaw plugin entry: forwards before_tool_call and after_tool_call to the Stroq CLI.",
   "type": "module",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stroq/cli",
-  "version": "0.14.0",
+  "version": "0.14.1",
   "description": "Local action firewall for AI agents: scans what the agent reads, taints the session, blocks dangerous follow-up actions",
   "license": "Apache-2.0",
   "type": "module",