a2a-exposed 0.7.31 → 0.7.33

package/lib/main.mjs

@@ -142,10 +142,10 @@ Pairing (OAuth 2.0 device flow, RFC 8628: agents connect without pasting tokens
   pair set-password       the same in a terminal, no echo (the human runs it; never via argv/stdin)
   pair set-oidc --issuer URL --client-id ID --subjects SUB[,SUB...] [--methods password,oidc] [--secret-stdin]
                           optional OpenID Connect approval on /device and the MCP consent page. The client
-                          secret is APPROVAL_OIDC_CLIENT_SECRET in the environment, or one line on stdin with
-                          --secret-stdin. It is not a flag and it is not saved in config.env. The next
-                          \`npx -y a2a-exposed@latest deploy\` uploads that environment variable as a Worker
-                          secret. Leave the issuer unset and approval stays the password page
+                          secret deploy uploads is APPROVAL_OIDC_CLIENT_SECRET in the environment you use for
+                          deploy. --secret-stdin checks one line and discards it, so export the variable
+                          before deploy. config.env keeps the issuer and client id.
+                          Leave the issuer unset and approval stays the password page
   pair list [--json]      pending pairing requests (code, claimed name/card, address), the approval mode and
                           when the approval password was set
   pair approve <code>     approve (only with --pairing-approval agent, after your human said yes)
@@ -186,20 +186,20 @@ Control plane account (only when that deployment's login is on)
                                 After sign-in, /app shows the account and its agents. Each agent is listed
                                 by its hostname. A hosted name opens
                                 that agent's page: MCP connectors (revoke needs a recent sign-in), a
-                                message log that does not mark tasks seen, and a SQL download that
-                                replaces a pasted owner token and leaves other credential material out. Peer times are labeled UTC. A pairing
-                                token shows its code. An empty outbound list notes that peers the CLI
-                                added locally are not shown. Sign out is on that
+                                message log of recent history. Opening this log leaves a pending wake in place until you list the inbox. The SQL download
+                                is a redacted copy and replaces a pasted owner token. Peer times are labeled UTC. A pairing
+                                token shows its code. An empty outbound list says peers added with the CLI
+                                on your machine stay in that CLI. Sign out is on that
                                 page. Creating an agent shows the owner token once. The agent page rotates
                                 that token after a confirmation and a recent sign-in. The new token is
                                 shown once on that agent's page. The previous one stops working immediately.
                                 The token is shown only when the stored hash is still that token. A Copy button sits next to it. Without JavaScript the value still copies.
-                                Deleting an agent asks for its name and a recent sign-in. The account page says how many slots remain. A self-hosted inbox has no such delete.
+                                Deleting an agent asks for its name and a recent sign-in. The account page says how many hosted slots remain. A self-hosted inbox has no such delete.
                                 That page is not stored.
-                                FREE_AGENT_LIMIT=2 caps a free account at 2 hosted agents. An agent in your Cloudflare account does not use one of these. An account's own limit overrides it.
-                                Unset, there is no limit. The database rejects another insert.
+                                FREE_AGENT_LIMIT=2 caps a free account at 2 hosted agents. A Cloudflare agent stays outside that count. An account's own limit overrides it.
+                                Unset, there is no limit. The database rejects another hosted insert.
                                 SIGNUP_ALLOWLIST, when set, admits only those verified emails. Unset, sign-in stays open.
-                                Cloudflare does not match that list. Connect it from the account page after signing in another way.
+                                Sign-in uses GitHub, Google, or email. Connect Cloudflare from the account page after you sign in.
                                 A refusal returns to /app?error=invite and the page says Sign-in is invite-only for now.
                                 The control Worker logs social_sign_in_failed before the
                                 provider page, social_sign_in_timeout when that sign-in does not
@@ -269,7 +269,7 @@ export async function main(argv) {
 	if (name === "--version" || name === "-v") return console.log(VERSION);
 	if (rest.includes("--help") || rest.includes("-h")) return console.log(HELP);
 	if (name === "pair" && rest[0] === "set-oidc" && rest.some((a) => /^--(secret|client-secret)(=|$)/.test(a)))
-		throw new CliError("the OpenID Connect client secret is not a flag: export APPROVAL_OIDC_CLIENT_SECRET or pass --secret-stdin (it is not saved in config.env)");
+		throw new CliError("export APPROVAL_OIDC_CLIENT_SECRET or pass --secret-stdin. --secret-stdin checks the line and discards it. Deploy uploads only the environment variable");
 	if (name === "pair" && rest[0] === "set-password") {
 		// only --web [--ttl M] [--json]: the password itself never comes from argv, stdin or the environment
 		const extra = rest.slice(1);

package/lib/pair.mjs

@@ -120,7 +120,7 @@ export async function setOidc(o, extra = []) {
 	}
 	let sawStdin = false;
 	if (o["secret-stdin"]) {
-		if (process.stdin.isTTY) die("--secret-stdin reads the client secret from a pipe. Or export APPROVAL_OIDC_CLIENT_SECRET. It is not saved in config.env");
+		if (process.stdin.isTTY) die("--secret-stdin reads the client secret from a pipe. Or export APPROVAL_OIDC_CLIENT_SECRET. --secret-stdin checks the line and discards it. Deploy uploads only the environment variable");
 		const chunks = [];
 		for await (const c of process.stdin) chunks.push(c);
 		const secret = Buffer.concat(chunks).toString("utf8").replace(/\r?\n$/, "");
@@ -129,7 +129,7 @@ export async function setOidc(o, extra = []) {
 		const fromEnv = process.env.APPROVAL_OIDC_CLIENT_SECRET || "";
 		if (fromEnv && fromEnv !== secret) console.error("The secret on stdin differs from APPROVAL_OIDC_CLIENT_SECRET. Deploy uploads the environment variable. Neither value was printed or saved.");
 	} else if (!(process.env.APPROVAL_OIDC_CLIENT_SECRET || "").trim()) {
-		die("export APPROVAL_OIDC_CLIENT_SECRET or pass --secret-stdin. The client secret is not a flag and is not saved in config.env");
+		die("export APPROVAL_OIDC_CLIENT_SECRET or pass --secret-stdin. --secret-stdin checks the line and discards it. Deploy uploads only the environment variable");
 	}
 	C.saveConfig({
 		APPROVAL_OIDC_ISSUER: String(o.issuer).trim(),
@@ -141,7 +141,7 @@ export async function setOidc(o, extra = []) {
 	console.error("The client secret was not written there and was not printed.");
 	if (sawStdin && !(process.env.APPROVAL_OIDC_CLIENT_SECRET || "").trim())
 		console.error(`Export APPROVAL_OIDC_CLIENT_SECRET in the environment you use for deploy. This command did not store it.`);
-	console.error(`The next \`npx -y a2a-exposed@latest deploy\` uploads APPROVAL_OIDC_CLIENT_SECRET from the environment as a Worker secret.`);
+	console.error(`The next \`npx -y a2a-exposed@latest deploy\` uploads APPROVAL_OIDC_CLIENT_SECRET only when that variable is set in the environment. A line from --secret-stdin is discarded.`);
 	console.error("Password approval stays available unless --methods oidc (and only once the issuer, client id, secret and allowlist are all set).");
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "a2a-exposed",
-	"version": "0.7.31",
+	"version": "0.7.33",
 	"description": "Give any AI agent a public A2A (Agent2Agent) endpoint: Cloudflare Worker inbox + wake webhook or scheduled inbox checks",
 	"type": "module",
 	"bin": {

package/worker/src/index.ts

@@ -2233,7 +2233,7 @@ export async function runOwnerRpc(ctx: TenantContext, ectx: ExecutionContext, in
 			data = matched.route.search === "?format=sql"
 				? {
 					exportedAt: file.exportedAt,
-					sql: "-- Dashboard copy. This is not a backup. Do not load it onto a live inbox.\n"
+					sql: "-- Redacted dashboard copy for reading. The full dump is npx a2a-exposed export with the owner token.\n"
 						+ "-- Stored token hashes are replaced with redacted: values that do not authenticate, or left out. Ciphertext, push tokens, re-pair hashes, OAuth codes, the approval-password hash, password-setup hashes, and OpenID Connect sign-in rows are omitted.\n"
 						+ toSql(file, { skip: REDACTED_SQL_SKIP }),
 				}

package/worker/src/pairing.ts

@@ -254,7 +254,7 @@ export function landingPage(m: LandingModel, nonce: string): string {
 		? `<h2>Connect your agent</h2><p>Agents get a bearer token through the OAuth device flow: your agent asks, and this agent's owner approves the request on the <a href="/device">pairing page</a>. No secrets go through chat. With the a2a-exposed CLI, your agent runs:</p><p><code>${DEFAULT_CLI} connect ${esc(m.base)}</code></p>`
 		: `<h2>Connect your agent</h2><p>Pairing is turned off here: ask this agent's operator for a bearer token.</p>`;
 	return pageShell(m.name, nonce, `${desc}
-<p class="n info">This is an <a href="https://a2a-protocol.org/">A2A (Agent2Agent)</a> endpoint, meant for agents rather than people.${m.proxy ? "" : " Messages land in its owner's inbox, which wakes the agent."}</p>
+<p class="n info">This is an <a href="https://a2a-protocol.org/">A2A (Agent2Agent)</a> endpoint for agents.${m.proxy ? "" : " Messages land in its owner's inbox, which wakes the agent."}</p>
 <table>
 <tr><th>Agent card</th><td><a href="/.well-known/agent-card.json">${esc(card)}</a></td></tr>
 <tr><th>JSON-RPC endpoint</th><td><code>POST ${esc(m.base)}/</code></td></tr>

package/worker/src/version.ts

@@ -1,2 +1,2 @@
 /** Inbox build. Keep this equal to `version` in cli/package.json. */
-export const VERSION = "0.7.31";
+export const VERSION = "0.7.33";

package/worker/test/hosted.test.ts

@@ -627,7 +627,8 @@ test("TenantStore.owner runs an allowlisted owner call and does not return a pee
 	const sql = (sqlDump.body as { sql?: string }).sql ?? "";
 	assert.match(sql, /note \[redacted\] end/);
 	assert.match(sql, /redacted:ada/);
-	assert.match(sql, /Do not load it onto a live inbox/);
+	assert.match(sql, /Redacted dashboard copy for reading/);
+	assert.equal(sql.includes("not a backup"), false);
 	assert.equal(sql.includes(pasted), false);
 	assert.equal(sql.includes("oauth_codes"), false);
 	assert.equal(sql.includes("oidc_txns"), false);