explorbot 0.5.9 → 0.5.10

package/README.md

@@ -137,7 +137,7 @@ For a CI job, a demo, or a coding agent, pass everything as environment variable
 ```bash
 EXPLORBOT_URL=https://app.example.com \
 EXPLORBOT_AI_PROVIDER=openrouter \
-EXPLORBOT_KNOWLEDGE="Log in as admin@example.com / secret123" \
+EXPLORBOT_AUTH="login: admin@example.com password: secret123" \
   npx explorbot explore /admin/users --max-tests 3
 ```
 

package/bin/explorbot-cli.ts

@@ -12,7 +12,7 @@ import { HelpJsonCommand } from '../src/commands/help-json-command.js';
 import { RecommendedModelsCommand } from '../src/commands/recommended-models-command.js';
 import { App } from '../src/components/App.js';
 import { StatusPane } from '../src/components/StatusPane.js';
-import { decisionModelOption, knowledgeOption, wsOption } from '../src/commands/options/index.js';
+import { authOption, decisionModelOption, knowledgeOption, wsOption } from '../src/commands/options/index.js';
 import { ConfigParser, EXPLORBOT_ENV_VARS, PROVIDERS, outputPath } from '../src/config.js';
 import { ExplorBot, type ExplorBotOptions } from '../src/explorbot.js';
 import { remote } from '../src/remote.js';
@@ -35,6 +35,7 @@ const pkgVersion = JSON.parse(fs.readFileSync(pkgPath, 'utf-8')).version as stri
 program.name(cli).description('AI-powered web exploration tool').version(pkgVersion, '-V, --version');
 wsOption.register(program);
 knowledgeOption.register(program);
+authOption.register(program);
 decisionModelOption.register(program);
 
 process.on('uncaughtException', async (error) => {

package/boat/api-tester/src/commands/init-command.ts

@@ -64,6 +64,8 @@ export async function runInit(options: InitOptions): Promise<void> {
   tag('substep').log(chalk.yellow(`${options.prefix} know /users "CRUD endpoint for user management"`));
   log('3. Plan and run tests for one endpoint');
   tag('substep').log(chalk.yellow(`${options.prefix} explore /users`));
+  log('4. Pass auth for one run, kept in memory and never saved');
+  tag('substep').log(chalk.yellow(`${options.prefix} explore /users --auth 'Bearer: <token>'`));
 
   if (process.cwd() !== originalCwd) process.chdir(originalCwd);
 }

package/boat/doc-collector/bin/doc-collector-cli.ts

@@ -1,8 +1,9 @@
 #!/usr/bin/env bun
-import { knowledgeOption, wsOption } from '../../../src/commands/options/index.ts';
+import { authOption, knowledgeOption, wsOption } from '../../../src/commands/options/index.ts';
 import { createDocsCommands } from '../src/cli.ts';
 
 const program = createDocsCommands('doc-collector');
 wsOption.register(program);
 knowledgeOption.register(program);
+authOption.register(program);
 program.parse();

package/boat/prima/bin/prima-cli.ts

@@ -1,8 +1,9 @@
 #!/usr/bin/env bun
-import { decisionModelOption, knowledgeOption } from '../../../src/commands/options/index.ts';
+import { authOption, decisionModelOption, knowledgeOption } from '../../../src/commands/options/index.ts';
 import { createPrimaCommands } from '../src/cli.ts';
 
 const program = createPrimaCommands('prima');
 knowledgeOption.register(program);
+authOption.register(program);
 decisionModelOption.register(program);
 program.parse();

package/dist/bin/explorbot-cli.js

@@ -12,7 +12,7 @@ import { HelpJsonCommand } from '../src/commands/help-json-command.js';
 import { RecommendedModelsCommand } from '../src/commands/recommended-models-command.js';
 import { App } from '../src/components/App.js';
 import { StatusPane } from '../src/components/StatusPane.js';
-import { decisionModelOption, knowledgeOption, wsOption } from '../src/commands/options/index.js';
+import { authOption, decisionModelOption, knowledgeOption, wsOption } from '../src/commands/options/index.js';
 import { ConfigParser, EXPLORBOT_ENV_VARS, PROVIDERS, outputPath } from '../src/config.js';
 import { ExplorBot } from '../src/explorbot.js';
 import { remote } from '../src/remote.js';
@@ -32,6 +32,7 @@ const pkgVersion = JSON.parse(fs.readFileSync(pkgPath, 'utf-8')).version;
 program.name(cli).description('AI-powered web exploration tool').version(pkgVersion, '-V, --version');
 wsOption.register(program);
 knowledgeOption.register(program);
+authOption.register(program);
 decisionModelOption.register(program);
 process.on('uncaughtException', async (error) => {
     tag('error').log(`Uncaught exception: ${error instanceof Error ? `${error.message}\n${error.stack}` : String(error)}`);

package/dist/boat/api-tester/bin/apibot-cli.js

@@ -1,7 +1,8 @@
 #!/usr/bin/env bun
-import { knowledgeOption, wsOption } from "../../../src/commands/options/index.js";
+import { authOption, knowledgeOption, wsOption } from "../../../src/commands/options/index.js";
 import { createApiCommands } from "../src/cli.js";
 const program = createApiCommands('apibot');
 wsOption.register(program);
 knowledgeOption.register(program);
+authOption.register(program);
 program.parse();

package/dist/boat/api-tester/src/commands/init-command.js

@@ -53,6 +53,8 @@ export async function runInit(options) {
     tag('substep').log(chalk.yellow(`${options.prefix} know /users "CRUD endpoint for user management"`));
     log('3. Plan and run tests for one endpoint');
     tag('substep').log(chalk.yellow(`${options.prefix} explore /users`));
+    log('4. Pass auth for one run, kept in memory and never saved');
+    tag('substep').log(chalk.yellow(`${options.prefix} explore /users --auth 'Bearer: <token>'`));
     if (process.cwd() !== originalCwd)
         process.chdir(originalCwd);
 }

package/dist/boat/doc-collector/bin/doc-collector-cli.js

@@ -1,7 +1,8 @@
 #!/usr/bin/env bun
-import { knowledgeOption, wsOption } from "../../../src/commands/options/index.js";
+import { authOption, knowledgeOption, wsOption } from "../../../src/commands/options/index.js";
 import { createDocsCommands } from "../src/cli.js";
 const program = createDocsCommands('doc-collector');
 wsOption.register(program);
 knowledgeOption.register(program);
+authOption.register(program);
 program.parse();

package/dist/boat/prima/bin/prima-cli.js

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
-import { decisionModelOption, knowledgeOption } from "../../../src/commands/options/index.js";
+import { authOption, decisionModelOption, knowledgeOption } from "../../../src/commands/options/index.js";
 import { createPrimaCommands } from "../src/cli.js";
 const program = createPrimaCommands('prima');
 knowledgeOption.register(program);
+authOption.register(program);
 decisionModelOption.register(program);
 program.parse();

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "explorbot",
-  "version": "0.5.9",
+  "version": "0.5.10",
   "description": "CLI app built with React Ink, CodeceptJS, and Playwright",
   "license": "Elastic-2.0",
   "type": "module",

package/dist/src/commands/init-command.js

@@ -288,6 +288,10 @@ function printInitNextSteps(options) {
     }
     if (options.siteCommands)
         sections.push({ label: 'Explore any site', commands: options.siteCommands });
+    sections.push({
+        label: 'Log in for one run (kept in memory, never saved)',
+        commands: [{ command: `${cli} explore /dashboard --auth 'login: admin@example.com password: secret123'` }],
+    });
     sections.push({
         label: 'Run it from VS Code',
         commands: [{ command: 'https://testomat.ai/explorbot' }],

package/dist/src/commands/options/auth-option.d.ts

@@ -0,0 +1,6 @@
+import { BaseOption } from './base-option.js';
+export declare class AuthOption extends BaseOption {
+    flags: string;
+    description: string;
+    apply(options: Record<string, any>): void;
+}

package/dist/src/commands/options/auth-option.js

@@ -0,0 +1,14 @@
+import { KnowledgeTracker } from '../../knowledge-tracker.js';
+import { registerSecret } from '../../utils/secrets.js';
+import { BaseOption } from './base-option.js';
+export class AuthOption extends BaseOption {
+    flags = '--auth <text>';
+    description = 'Auth details for this run only, not saved to disk, in free form (e.g. "login: admin password: secret" or "Bearer: <token>"). Falls back to EXPLORBOT_AUTH';
+    apply(options) {
+        const auth = options.auth || process.env.EXPLORBOT_AUTH;
+        if (!auth)
+            return;
+        registerSecret(auth);
+        KnowledgeTracker.appendSessionKnowledge(auth);
+    }
+}

package/dist/src/commands/options/index.d.ts

@@ -1,7 +1,9 @@
+import { AuthOption } from './auth-option.js';
 import { DecisionModelOption } from './decision-model-option.js';
 import { KnowledgeOption } from './knowledge-option.js';
 import { WsOption } from './ws-option.js';
 export { BaseOption } from './base-option.js';
+export declare const authOption: AuthOption;
 export declare const decisionModelOption: DecisionModelOption;
 export declare const knowledgeOption: KnowledgeOption;
 export declare const wsOption: WsOption;

package/dist/src/commands/options/index.js

@@ -1,7 +1,9 @@
+import { AuthOption } from './auth-option.js';
 import { DecisionModelOption } from './decision-model-option.js';
 import { KnowledgeOption } from './knowledge-option.js';
 import { WsOption } from './ws-option.js';
 export { BaseOption } from './base-option.js';
+export const authOption = new AuthOption();
 export const decisionModelOption = new DecisionModelOption();
 export const knowledgeOption = new KnowledgeOption();
 export const wsOption = new WsOption();

package/dist/src/config.js

@@ -50,6 +50,7 @@ export const EXPLORBOT_ENV_VARS = [
     { name: 'EXPLORBOT_EPHEMERAL', description: 'Keep no state between runs — output goes to a fresh temp directory instead of the site dir' },
     { name: 'EXPLORBOT_KNOWLEDGE', description: 'Inline knowledge text, applied to every page' },
     { name: 'EXPLORBOT_KNOWLEDGE_FILE', description: 'Path to a knowledge markdown file' },
+    { name: 'EXPLORBOT_AUTH', description: 'Auth details in free form (credentials, a token), kept in memory for the run and never written to disk; same as --auth', secret: true },
     { name: 'EXPLORBOT_SPEC', description: 'Docbot application spec directory or index.md, used as page knowledge' },
     { name: 'EXPLORBOT_API_SPEC', description: 'OpenAPI spec path for the API boat' },
     { name: 'EXPLORBOT_API_HEADERS', description: 'Headers sent with every API request, one "Name: value" per line', secret: true },

package/docs/reference/commands.md

@@ -93,6 +93,17 @@ npx explorbot explore /pay --knowledge 'Test card 4111 1111 1111 1111, any futur
 
 Like `--ws`, it is a program-level option rather than a per-command one: it works on every command — including `api`, `docs` and `prima` — and can go anywhere on the line. It is listed under `npx explorbot --help` rather than in each command's own help.
 
+### `--auth`
+
+Passes login details to the run in free form — credentials, a token, whatever the app asks for. It joins the run's knowledge on every page and API endpoint, stays in memory, and is never written to disk. `EXPLORBOT_AUTH` does the same from the environment; the flag wins when both are set.
+
+```bash
+npx explorbot explore /dashboard --auth 'login: admin@example.com password: secret123'
+npx explorbot api explore /orders --auth 'Bearer: eyJhbGciOi...'
+```
+
+Like `--knowledge`, it works on every command of `explorbot`, `api`, `docs` and `prima`, and can go anywhere on the line.
+
 ### `--session`
 
 Saves browser state (cookies, localStorage, sessionStorage) to a JSON file. The next run restores the session, so you skip login and setup steps.
@@ -129,6 +140,7 @@ EXPLORBOT_AI_PROVIDER=openrouter \
 | `EXPLORBOT_EPHEMERAL` | Keep no state between runs — output goes to a fresh temp directory instead of the site dir |
 | `EXPLORBOT_KNOWLEDGE` | Inline knowledge text, applied to every page |
 | `EXPLORBOT_KNOWLEDGE_FILE` | Path to a knowledge markdown file |
+| `EXPLORBOT_AUTH` | Auth details in free form (credentials, a token), kept in memory for the run and never written to disk; same as --auth |
 | `EXPLORBOT_SPEC` | Docbot application spec directory or index.md, used as page knowledge |
 | `EXPLORBOT_API_SPEC` | OpenAPI spec path for the API boat |
 | `EXPLORBOT_API_HEADERS` | Headers sent with every API request, one "Name: value" per line |

package/docs/workflow/agentic-usage.md

@@ -57,6 +57,7 @@ No `init`, no config file, no project directory, no model IDs to look up. These
 | `EXPLORBOT_EPHEMERAL` | no | Keep no state between runs — output goes to a fresh temp directory instead of the site dir |
 | `EXPLORBOT_KNOWLEDGE` | no | Inline knowledge text, applied to every page |
 | `EXPLORBOT_KNOWLEDGE_FILE` | no | Path to a knowledge markdown file |
+| `EXPLORBOT_AUTH` | no | Auth details in free form (credentials, a token), kept in memory for the run and never written to disk; same as --auth |
 | `EXPLORBOT_SPEC` | no | Docbot application spec directory or index.md, used as page knowledge |
 | `EXPLORBOT_API_SPEC` | no | OpenAPI spec path for the API boat |
 | `EXPLORBOT_API_HEADERS` | no | Headers sent with every API request, one "Name: value" per line |
@@ -133,6 +134,12 @@ EXPLORBOT_AI_PROVIDER=openrouter \
   npx explorbot explore /admin/users
 ```
 
+`EXPLORBOT_AUTH` takes the same free-form credentials but keeps them in memory only — nothing lands in the knowledge directory. `--auth` is its flag twin:
+
+```bash
+EXPLORBOT_AUTH="login: admin@example.com password: secret123" npx explorbot explore /admin/users
+```
+
 `EXPLORBOT_KNOWLEDGE_FILE` points at a markdown file the agent wrote. Its frontmatter is preserved, so it can target specific URLs — see [Knowledge](./knowledge.md) for the format:
 
 ```bash

package/docs/workflow/knowledge.md

@@ -88,6 +88,12 @@ Send X-Api-Key: ${env.API_KEY} on every request'
 
 For runs driven from the environment — config-free, or on the global configuration — `EXPLORBOT_KNOWLEDGE` does the same job for the length of one run. See [Agentic usage](./agentic-usage.md).
 
+For credentials alone, `--auth` (or `EXPLORBOT_AUTH`) takes free-form text, applies it everywhere, and never writes it to disk:
+
+```bash
+npx explorbot explore /dashboard --auth 'login: admin@example.com password: secret123'
+```
+
 ## URL Patterns
 
 | Pattern | Matches |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "explorbot",
-  "version": "0.5.9",
+  "version": "0.5.10",
   "description": "CLI app built with React Ink, CodeceptJS, and Playwright",
   "license": "Elastic-2.0",
   "type": "module",

package/src/commands/init-command.ts

@@ -327,6 +327,11 @@ function printInitNextSteps(options: { url?: string; siteCommands?: NextStepComm
 
   if (options.siteCommands) sections.push({ label: 'Explore any site', commands: options.siteCommands });
 
+  sections.push({
+    label: 'Log in for one run (kept in memory, never saved)',
+    commands: [{ command: `${cli} explore /dashboard --auth 'login: admin@example.com password: secret123'` }],
+  });
+
   sections.push(
     {
       label: 'Run it from VS Code',

package/src/commands/options/auth-option.ts

@@ -0,0 +1,15 @@
+import { KnowledgeTracker } from '../../knowledge-tracker.js';
+import { registerSecret } from '../../utils/secrets.js';
+import { BaseOption } from './base-option.js';
+
+export class AuthOption extends BaseOption {
+  flags = '--auth <text>';
+  description = 'Auth details for this run only, not saved to disk, in free form (e.g. "login: admin password: secret" or "Bearer: <token>"). Falls back to EXPLORBOT_AUTH';
+
+  protected apply(options: Record<string, any>): void {
+    const auth = options.auth || process.env.EXPLORBOT_AUTH;
+    if (!auth) return;
+    registerSecret(auth);
+    KnowledgeTracker.appendSessionKnowledge(auth);
+  }
+}

package/src/commands/options/index.ts

@@ -1,9 +1,11 @@
+import { AuthOption } from './auth-option.js';
 import { DecisionModelOption } from './decision-model-option.js';
 import { KnowledgeOption } from './knowledge-option.js';
 import { WsOption } from './ws-option.js';
 
 export { BaseOption } from './base-option.js';
 
+export const authOption = new AuthOption();
 export const decisionModelOption = new DecisionModelOption();
 export const knowledgeOption = new KnowledgeOption();
 export const wsOption = new WsOption();

package/src/config.ts

@@ -284,6 +284,7 @@ export const EXPLORBOT_ENV_VARS: EnvVar[] = [
   { name: 'EXPLORBOT_EPHEMERAL', description: 'Keep no state between runs — output goes to a fresh temp directory instead of the site dir' },
   { name: 'EXPLORBOT_KNOWLEDGE', description: 'Inline knowledge text, applied to every page' },
   { name: 'EXPLORBOT_KNOWLEDGE_FILE', description: 'Path to a knowledge markdown file' },
+  { name: 'EXPLORBOT_AUTH', description: 'Auth details in free form (credentials, a token), kept in memory for the run and never written to disk; same as --auth', secret: true },
   { name: 'EXPLORBOT_SPEC', description: 'Docbot application spec directory or index.md, used as page knowledge' },
   { name: 'EXPLORBOT_API_SPEC', description: 'OpenAPI spec path for the API boat' },
   { name: 'EXPLORBOT_API_HEADERS', description: 'Headers sent with every API request, one "Name: value" per line', secret: true },