create-ironclaws 1.0.3 → 1.0.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-ironclaws",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "Create an IronClaws AI agent platform in seconds",
   "type": "module",
   "bin": {

package/template/src/index.ts

@@ -647,6 +647,7 @@ function autoRegisterAgentsFromYaml(): void {
     is_main?: boolean;
     onecli_secrets?: string[];
     onecli_id?: string;
+    container_config?: import('./types.js').ContainerConfig;
   }>;
 
   try {
@@ -676,6 +677,7 @@ function autoRegisterAgentsFromYaml(): void {
       added_at: new Date().toISOString(),
       requiresTrigger: def.requires_trigger !== false,
       isMain: def.is_main === true,
+      ...(def.container_config ? { containerConfig: def.container_config } : {}),
     };
 
     setRegisteredGroup(jid, group);
@@ -714,13 +716,32 @@ function ensureOneCLISecrets(): void {
   const secretsScript = path.join(process.cwd(), 'scripts', 'setup-onecli-secrets.sh');
   if (!fs.existsSync(secretsScript)) return;
 
-  // Hash the credential-bearing env vars that the secrets script uses
+  // Hash two things:
+  // 1. Credential-bearing env vars (re-run when secrets rotate)
+  // 2. onecli_secrets from agents.yaml (re-run when an agent's secret list changes)
   const credentialKeys = [
     'ELASTIC_API_KEY', 'JIRA_EMAIL', 'JIRA_API_TOKEN',
     'SLACK_BOT_TOKEN', 'INTERCOM_ACCESS_TOKEN', 'ARDOQ_API_KEY',
     'ANTHROPIC_AUTH_TOKEN', 'CONFLUENCE_USERNAME', 'CONFLUENCE_PASSWORD',
+    'XLEDGER_API_TOKEN',
   ];
-  const hashInput = credentialKeys.map(k => `${k}=${process.env[k] || ''}`).join('\n');
+  const envHash = credentialKeys.map(k => `${k}=${process.env[k] || ''}`).join('\n');
+
+  // Include agents.yaml onecli_secrets so adding/removing a secret triggers re-run
+  let agentsSecretsSig = '';
+  try {
+    const agentsYaml = path.join(process.cwd(), 'agents.yaml');
+    if (fs.existsSync(agentsYaml)) {
+      const defs = YAML.parse(fs.readFileSync(agentsYaml, 'utf-8')).agents || [];
+      agentsSecretsSig = defs
+        .map((d: { folder: string; onecli_secrets?: string[] }) =>
+          `${d.folder}:${(d.onecli_secrets || []).sort().join(',')}`)
+        .sort()
+        .join('\n');
+    }
+  } catch { /* non-fatal — env hash alone is still useful */ }
+
+  const hashInput = envHash + '\n---agents---\n' + agentsSecretsSig;
   const currentHash = crypto.createHash('sha256').update(hashInput).digest('hex');
 
   const hashFile = path.join(STORE_DIR, 'onecli-secrets.hash');