instabox 0.8.16 → 0.8.18

package/cli/SHA256SUMS

@@ -1,6 +1,6 @@
-46a37e4d48cb93110a228ff6af5b94624956ee6b3a6964117d95d191728ccd6c  instabox-darwin-amd64
-aae028bf9fec4b7bbf10be63911abc578159d793fae0ca64ad054cc436e10c57  instabox-darwin-arm64
-ac976251dfafa1cc8dc81cae81587c98a77b6102f6515757ae245ef3f246a3a4  instabox-linux-amd64
-fd6da1993382aae221097aadebe16711a4a6774c53251153d5cf5a3fe77b4566  instabox-linux-arm64
-51d5d0cc71c4afb3beb2e80bb3e2d069ee9cab1e2ba52969a9bb0201ff6e34e3  instabox-windows-amd64.exe
-731afb5da3c370fdc46248a8b36c40eff96cb2102255db0b14fa4050446a94a0  instabox-windows-arm64.exe
+99f38470f262805adc7c6f94d5e72ef18ae715e4cd775527a9b01ad1fa2be8c8  instabox-darwin-amd64
+2ffdbf8e50bdde3c370937242d955e11a7f63ace9ef47bbd389c026e30ca18af  instabox-darwin-arm64
+34ec16aebb95d2234e86c82b84f8192b3e727d5c03e002cafe18a8eb576ff692  instabox-linux-amd64
+851b0766143deed6e4227530c0674b7d4e3f676793dd71a3395cc7c8599989df  instabox-linux-arm64
+4199c159c141794423d0d3f751cae9c8ee97e24bf17a459d076d17dba5f0b442  instabox-windows-amd64.exe
+43225a4f46d0cfa3e39bb6c37e815dd927b79ac4252d3649e83adeae70ef93e2  instabox-windows-arm64.exe

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instabox",
-  "version": "0.8.16",
+  "version": "0.8.18",
   "description": "A cloud box for your coding agent, the instabox CLI and its agent skills in one command: npx instabox@latest",
   "type": "module",
   "bin": {

package/skills/instabox/SKILL.md

@@ -114,6 +114,7 @@ Secrets replace the Vault, which is legacy and will be retired: save every new A
 instabox secrets ls --org team                 # metadata only
 instabox secrets show work                     # selection and proxy status
 instabox secrets set SERVICE_API_KEY --org team --host api.example.com
+instabox secrets set ANTHROPIC_API_KEY --org team --ai anthropic
 instabox secrets import .env --org team --host api.example.com   # every value gets these hosts
 instabox create --name app --org team --secrets SERVICE_API_KEY
 instabox secrets select work --secrets SERVICE_API_KEY,OTHER_API_KEY
@@ -124,6 +125,7 @@ instabox create --name tenant --no-vault --secrets none
 - Values for `set` come from stdin or a hidden prompt. Never print a credential or put its value into agent output, chat, command arguments, or logs. Before asking for a credential, check metadata with `secrets ls --org <org>` and `secrets show <box>`. A silent check such as `test "${NAME+x}" = x` tests that the placeholder is present without revealing it; it does not prove the upstream accepts the credential.
 - `--host` is optional and repeatable. Give each exact hostname the credential may be sent to; without `--host` (or with `--host '*'`) every public HTTPS destination is allowed. Schemes, ports, paths, IP addresses, and partial wildcards such as `*.example.com` are rejected. Use the service's API host, such as `api.openai.com`, never a guess from the credential's value.
 - Org commands default to the signed-in user's personal org. Use `--org` for a team, and select only Secrets from the box's org. Value, host and deletion changes require the org owner/admin: a sign-in, or headless the workspace's own API key with `workspace:admin` in `INSTABOX_API_KEY` (org commands then default to the key's org; `secrets rm` needs `--yes` without a terminal). A personal org's key and keys with only machine scopes can inspect metadata and manage sandbox selections, but cannot change Secret values (`403 missing_scope`). No key or session can retrieve a value.
+- For model provider keys use `--ai anthropic|openai|gemini|openrouter` (repeatable, combinable with `--host`): it scopes the key to `api.anthropic.com`, `api.openai.com`, `generativelanguage.googleapis.com` or `openrouter.ai`. The box only sees a placeholder, in its environment and in any file a tool writes, so the real key is never on its disk or in snapshots. Gemini keys must go in the `x-goog-api-key` header, not `?key=`. To block a box from all Secrets, `secrets select BOX --secrets none`; unblock with `--secrets all` or names. When the server records usage, `secrets show BOX` lists each Secret's proxied and denied request counts.
 - `secrets select BOX --secrets` replaces the box's selection: `all`, `none`, comma-separated names, or a JSON array (which allows a Secret literally named `all` or `none`). Keep existing names when adding one.
 - Placeholders work only in HTTPS request headers on port 443 to the allowed hosts. Apart from Basic auth in `Authorization`, which the proxy decodes and re-encodes, do not hash, encode, or sign with a placeholder; other traffic carries the placeholder unchanged.
 - Rotating a value keeps its placeholder, so running clients need no change. Newly selected names appear in new shells that load the managed environment; restart existing applications to pick them up.