zubo 0.1.11 → 0.1.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zubo",
-  "version": "0.1.11",
+  "version": "0.1.12",
   "description": "Your AI agent that never forgets. Persistent memory, 25+ tools, 7 channels, 11+ LLM providers — runs entirely on your machine.",
   "license": "MIT",
   "author": "thomaskanze",

package/src/tools/builtin/google-oauth.ts

@@ -16,9 +16,9 @@ export function registerGoogleOAuthTool(): void {
       name: "google_oauth",
       description:
         "Manage the Google OAuth 2.0 connection used by Gmail, Calendar, Sheets, Docs, and Drive. " +
-        "IMPORTANT: You need TWO credentials from the user: client_id (looks like 123456-abc.apps.googleusercontent.com) " +
-        "and client_secret (starts with GOCSPX-). Ask for BOTH before calling this tool. " +
-        "Use action 'start' to begin the OAuth flow. " +
+        "Use action 'start' to begin or re-start the OAuth flow. If credentials are already stored in secrets, " +
+        "you can call 'start' with NO parameters — it will automatically use the saved google_client_id and google_client_secret. " +
+        "Only ask the user for client_id and client_secret if this tool returns an error saying they are missing. " +
         "Use 'complete' to finish the flow by providing the authorization code the user copied from the browser. " +
         "Use 'status' to check connection state. Use 'disconnect' to remove all stored Google credentials.",
       input_schema: {
@@ -32,12 +32,12 @@ export function registerGoogleOAuthTool(): void {
           client_id: {
             type: "string",
             description:
-              "Google OAuth client ID (looks like 123456789-xxxx.apps.googleusercontent.com). Required for 'start'.",
+              "Google OAuth client ID. Optional — if omitted, uses the value already saved in secrets.",
           },
           client_secret: {
             type: "string",
             description:
-              "Google OAuth client secret (starts with GOCSPX-). Required for 'start'.",
+              "Google OAuth client secret. Optional — if omitted, uses the value already saved in secrets.",
           },
           code: {
             type: "string",

package/src/tools/builtin/secrets.ts

@@ -1,5 +1,5 @@
 import { registerTool } from "../registry";
-import { setSecret, listSecrets, deleteSecret } from "../../secrets/store";
+import { setSecret, getSecret, listSecrets, deleteSecret } from "../../secrets/store";
 
 export function registerSecretTools() {
   registerTool({
@@ -52,6 +52,37 @@ export function registerSecretTools() {
     },
   });
 
+  registerTool({
+    definition: {
+      name: "secret_get",
+      description:
+        "Retrieve the value of a stored secret. Use this to access API keys, tokens, and credentials needed for tool calls and integrations.",
+      input_schema: {
+        type: "object",
+        properties: {
+          name: {
+            type: "string",
+            description: "The name of the secret to retrieve (e.g., 'github_token', 'google_client_id')",
+          },
+        },
+        required: ["name"],
+      },
+    },
+    execute: async (input) => {
+      const { name } = input as { name: string };
+      if (!name) {
+        return JSON.stringify({ error: "Secret name is required." });
+      }
+
+      const value = getSecret(name);
+      if (value === null) {
+        return JSON.stringify({ error: `No secret found with name "${name}".` });
+      }
+
+      return JSON.stringify({ name, value });
+    },
+  });
+
   registerTool({
     definition: {
       name: "secret_list",

package/src/tools/permissions.ts

@@ -9,8 +9,9 @@ const DEFAULT_PERMISSIONS: Record<string, ToolPermission> = {
   reminder_set: "auto",
   diagnose: "auto",
 
-  // Secrets — set/list are safe, delete requires confirmation
+  // Secrets — set/list/get are safe, delete requires confirmation
   secret_set: "auto",
+  secret_get: "auto",
   secret_list: "auto",
   secret_delete: "confirm",