@zibby/mcp-cli 0.3.4 → 0.3.5

package/index.js

@@ -482,8 +482,10 @@ server.tool(
     name: z.string().min(1).optional().describe('Display name for the instance (shown as the dashboard header). ALWAYS pick a meaningful name based on WHAT is being installed and its purpose, NOT the install command. Good examples: `n8n-workflows`, `team-wiki`, `vaultwarden-secrets`, `rails-blog`. Bad examples: `test`, `goal-test`, `instance-1`, `install-n8n`. Max 80 chars, alphanumeric + dashes. Defaults to appType on catalog deploys; for goal deploys you MUST provide one or the server falls back to the first line of the goal text which is usually ugly.'),
     provider: z.enum(['claude', 'codex']).optional().describe('Agent provider. Default "claude" (Anthropic). "codex" runs the OpenAI Codex agent and requires an OpenAI API key in workspace-credentials.'),
     architecture: z.enum(['x86_64', 'arm64']).optional().describe('CPU architecture for the Fargate task. "arm64" runs on AWS Graviton — ~20% cheaper compute (same price to user). "x86_64" is the historical default + widest catalog compatibility. Omit to accept the catalog tile\'s preferred arch (first entry in its `architectures` array — usually arm64 for tiles that support it).'),
+    model: z.string().min(1).optional().describe('Claude model identifier (e.g. claude-sonnet-4-6). Overrides the agent-ops bootstrap default. Use a stronger model (Opus) for complex installs; cheaper (Haiku) for trivial.'),
+    anthropicToken: z.string().regex(/^sk-ant-(oat01|api03)-/, 'must be sk-ant-oat01-* or sk-ant-api03-*').optional().describe('Per-deploy Claude credential override. Defaults to the workspace-stored token. SENSITIVE — never log or persist.'),
   },
-  async ({ appType, goal, projectId, name, provider, architecture }) => {
+  async ({ appType, goal, projectId, name, provider, architecture, model, anthropicToken }) => {
     // Enforce mutual exclusivity client-side so the agent gets a clear
     // error before we burn an HTTP round-trip. Backend enforces the
     // same invariant (apps.js::deployApp) but this gives a faster
@@ -507,7 +509,14 @@ server.tool(
     if (name) args.push('--name', name);
     if (provider) args.push('--provider', provider);
     if (architecture) args.push('--arch', architecture);
-    return cliResult(await runCli(args, { extraEnv: { ZIBBY_API_KEY: apiKey } }));
+    if (model) args.push('--model', model);
+    // anthropicToken is SENSITIVE. Forwarded to the @zibby/cli subprocess
+    // via ZIBBY_ANTHROPIC_TOKEN env (NOT argv) so the token never lands
+    // in /proc/<pid>/cmdline or argv-scraping ps tools. The CLI sees the
+    // env, applies the same regex check, and passes it as a body field.
+    const extraEnv = { ZIBBY_API_KEY: apiKey };
+    if (anthropicToken) extraEnv.ZIBBY_ANTHROPIC_TOKEN = anthropicToken;
+    return cliResult(await runCli(args, { extraEnv }));
   }
 );
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zibby/mcp-cli",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "description": "Zibby local-essential MCP Server — local workflow scaffold/validate/run + deploy/download (bundles local files). Pure-API tools live in the Zibby Remote MCP (api-prod.zibby.app/mcp).",
   "type": "module",
   "main": "index.js",