wispy-cli 0.3.0 → 0.3.1

package/lib/wispy-repl.mjs

@@ -724,6 +724,20 @@ const TOOL_DEFINITIONS = [
       required: ["url"],
     },
   },
+  {
+    name: "keychain",
+    description: "Manage macOS Keychain secrets. Read (masked), store, or delete credentials. Values are never shown in full — only first 4 + last 4 chars.",
+    parameters: {
+      type: "object",
+      properties: {
+        action: { type: "string", enum: ["get", "set", "delete", "list"], description: "get: read secret (masked), set: store secret, delete: remove, list: search" },
+        service: { type: "string", description: "Service name (e.g., 'google-ai-key', 'my-api-token')" },
+        account: { type: "string", description: "Account name (default: 'wispy')" },
+        value: { type: "string", description: "Secret value (only for 'set' action)" },
+      },
+      required: ["action", "service"],
+    },
+  },
   {
     name: "clipboard",
     description: "Copy text to clipboard (macOS/Linux) or read current clipboard contents.",
@@ -923,6 +937,10 @@ async function executeTool(name, args) {
       }
 
       case "run_command": {
+        // Block direct keychain password reads via run_command — use keychain tool instead
+        if (/security\s+find-generic-password.*-w/i.test(args.command)) {
+          return { success: false, error: "Use the 'keychain' tool instead of run_command for secrets. It masks sensitive values." };
+        }
         console.log(dim(`  $ ${args.command}`));
         const { stdout, stderr } = await execAsync("/bin/bash", ["-c", args.command], {
           timeout: 30_000,
@@ -1068,6 +1086,73 @@ async function executeTool(name, args) {
         }
       }
 
+      case "keychain": {
+        const { promisify: prom } = await import("node:util");
+        const { execFile: ef2 } = await import("node:child_process");
+        const exec2 = prom(ef2);
+        const account = args.account ?? "wispy";
+
+        if (process.platform !== "darwin") {
+          return { success: false, error: "Keychain is only supported on macOS" };
+        }
+
+        if (args.action === "get") {
+          try {
+            const { stdout } = await exec2("security", [
+              "find-generic-password", "-s", args.service, "-a", account, "-w"
+            ], { timeout: 5000 });
+            const val = stdout.trim();
+            // NEVER expose full secret — mask middle
+            const masked = val.length > 8
+              ? `${val.slice(0, 4)}${"*".repeat(Math.min(val.length - 8, 20))}${val.slice(-4)}`
+              : "****";
+            return { success: true, service: args.service, account, value_masked: masked, length: val.length };
+          } catch {
+            return { success: false, error: `No keychain entry found for service="${args.service}" account="${account}"` };
+          }
+        }
+
+        if (args.action === "set") {
+          if (!args.value) return { success: false, error: "value is required for set action" };
+          try {
+            // Delete existing first (ignore error if not found)
+            await exec2("security", [
+              "delete-generic-password", "-s", args.service, "-a", account
+            ]).catch(() => {});
+            await exec2("security", [
+              "add-generic-password", "-s", args.service, "-a", account, "-w", args.value
+            ], { timeout: 5000 });
+            return { success: true, message: `Stored secret for service="${args.service}" account="${account}"` };
+          } catch (err) {
+            return { success: false, error: err.message };
+          }
+        }
+
+        if (args.action === "delete") {
+          try {
+            await exec2("security", [
+              "delete-generic-password", "-s", args.service, "-a", account
+            ], { timeout: 5000 });
+            return { success: true, message: `Deleted keychain entry for service="${args.service}"` };
+          } catch {
+            return { success: false, error: `No entry found for service="${args.service}"` };
+          }
+        }
+
+        if (args.action === "list") {
+          try {
+            const { stdout } = await exec2("/bin/bash", ["-c",
+              `security dump-keychain 2>/dev/null | grep -A 4 "\"svce\"" | grep -E "svce|acct" | head -20`
+            ], { timeout: 5000 });
+            return { success: true, entries: stdout.trim() || "No entries found" };
+          } catch {
+            return { success: true, entries: "No entries found" };
+          }
+        }
+
+        return { success: false, error: "action must be get, set, delete, or list" };
+      }
+
       case "clipboard": {
         const { promisify: prom } = await import("node:util");
         const { execFile: ef2 } = await import("node:child_process");
@@ -1439,12 +1524,14 @@ async function buildSystemPrompt(messages = []) {
     "  - NEVER reply in Korean when the user wrote in English.",
     "",
     "## Tools",
-    "You have these tools: read_file, write_file, file_edit, file_search, run_command, list_directory, git, web_search, web_fetch, clipboard, spawn_agent, spawn_async_agent, pipeline, ralph_loop, update_plan, list_agents, get_agent_result.",
+    "You have 18 tools: read_file, write_file, file_edit, file_search, run_command, list_directory, git, web_search, web_fetch, keychain, clipboard, spawn_agent, spawn_async_agent, pipeline, ralph_loop, update_plan, list_agents, get_agent_result.",
     "- file_edit: for targeted text replacement (prefer over write_file for edits)",
     "- file_search: grep across codebase",
     "- git: any git command",
     "- web_fetch: read URL content",
+    "- keychain: macOS Keychain secrets (ALWAYS use this for secrets, NEVER run_command)",
     "- clipboard: copy/paste system clipboard",
+    "- SECURITY: Never show full API keys or secrets. Always use keychain tool which masks values.",
     "Use them proactively. Briefly mention what you're doing.",
     "",
   ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wispy-cli",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "🌿 Wispy — AI workspace assistant with multi-agent orchestration",
   "license": "Apache-2.0",
   "author": "Minseo & Poropo",