agentsecrets-cli 1.1.0__tar.gz → 1.1.2__tar.gz

{agentsecrets_cli-1.1.0 → agentsecrets_cli-1.1.2}/.gitignore

@@ -69,4 +69,10 @@ docs/API_SPECIFICATION.md
 docs/learning/
 proxy_spec.md
 code_review.md
-content/
+content/
+specs/
+
+# AgentSecrets environment files
+.env.development
+.env.staging
+.env.production

{agentsecrets_cli-1.1.0 → agentsecrets_cli-1.1.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentsecrets-cli
-Version: 1.1.0
+Version: 1.1.2
 Summary: AI-native zero-knowledge secrets manager
 Author-email: The Seventeen <hello@theseventeen.co>
 License-Expression: MIT
@@ -23,6 +23,8 @@ Every other secrets tool was built for humans to provision credentials to agents
 [![Go Version](https://img.shields.io/badge/Go-1.21+-00ADD8?logo=go)](https://go.dev/)
 [![ClawHub](https://img.shields.io/badge/ClawHub-agentsecrets-blue)](https://clawhub.ai/SteppaCodes/agentsecrets)
 
+**[Official Website](https://agentsecrets.theseventeen.co)** | **[Engineering Blog Series](https://engineering.theseventeen.co/series/building-agentsecrets)**
+
 ---
 
 > **Package rename notice**
@@ -45,7 +47,7 @@ Your agent checks its own status. Notices a secret is out of sync. Pulls the lat
 ```bash
 # An AI agent managing its own secrets workflow autonomously
 
-agentsecrets status               # what workspace, project, last sync?
+agentsecrets status               # what workspace, project, environment, last sync?
 agentsecrets secrets diff         # anything out of sync?
 agentsecrets secrets pull         # sync from cloud to keychain
 agentsecrets secrets list         # what keys are available?
@@ -109,7 +111,7 @@ pip install agentsecrets-cli
 ## Quick Start
 
 ```bash
-# Create account + encryption keys
+# Set up your account (first time) or initialise a new project (returning user)
 agentsecrets init
 
 # Create a project
@@ -151,6 +153,7 @@ agentsecrets status
 # Logged in as: steppa@theseventeen.co
 # Workspace:    Acme Engineering
 # Project:      payments-service
+# Environment:  development
 # Last pull:    2 minutes ago
 ```
 
@@ -221,7 +224,7 @@ Allowlist modifications require admin role and password verification. Non-admins
 
 ```bash
 agentsecrets proxy logs --last 5
-# 14:23:01  ✓ OK (REDACTED)  GET  httpbin.org/headers  STRIPE_KEY  bearer  200  credential_echo  245ms
+# 14:23:01  * OK (REDACTED)  GET  httpbin.org/headers  STRIPE_KEY  bearer  200  credential_echo  245ms
 ```
 
 ### Role Management
@@ -403,8 +406,9 @@ response = as_client.call(
 You pass a key name. The SDK resolves from the OS keychain, injects at the transport layer, returns only the API response. Every user of every tool built on the SDK gets zero-knowledge credential management automatically.
 
 **Built on the SDK:**
-- [AgentSecrets MCP Server Template](https://github.com/The-17/agentsecrets-mcp-template) — scaffold for building MCP servers with zero credential storage
-- [AgentSecrets for LangChain](https://github.com/The-17/agentsecrets-langchain) — zero-knowledge API calls in any LangChain agent
+- [Zero-Knowledge MCP Server Template](https://github.com/The-17/zero-knowledge-mcp) — scaffold for building MCP servers with zero credential storage
+- AgentSecrets for LangChain — zero-knowledge API calls in any LangChain agent *(coming soon)*
+- AgentSecrets JS SDK — JavaScript/Node.js SDK *(coming soon)*
 
 ---
 
@@ -412,10 +416,10 @@ You pass a key name. The SDK resolves from the OS keychain, injects at the trans
 
 ### Account
 ```bash
-agentsecrets init                    # Create account or login
+agentsecrets init                    # Set up account or initialise a new project
 agentsecrets login                   # Login to existing account
 agentsecrets logout                  # Clear session
-agentsecrets status                  # Current user, workspace, project, last sync
+agentsecrets status                  # Current user, workspace, project, environment, last sync
 ```
 
 ### Workspaces
@@ -435,6 +439,15 @@ agentsecrets project update my-app        # Update project
 agentsecrets project delete my-app        # Delete project
 ```
 
+### Environments
+```bash
+agentsecrets environment switch <name>        # Switch active environment (development, staging, production)
+agentsecrets environment list                 # List all environments and secret counts
+agentsecrets environment copy <from> <to>     # Copy all secrets from one env to another
+agentsecrets environment merge <from> <to>    # Merge secrets and prompt for new values
+agentsecrets environment clean                # Delete all secrets in current environment
+```
+
 ### Secrets
 ```bash
 agentsecrets secrets set KEY=value        # Store a secret
@@ -443,20 +456,39 @@ agentsecrets secrets list                 # List key names — never values
 agentsecrets secrets push                 # Upload .env to cloud (encrypted)
 agentsecrets secrets pull                 # Download cloud secrets to keychain
 agentsecrets secrets delete KEY           # Remove a secret
-agentsecrets secrets diff                 # Compare local vs cloud
+agentsecrets secrets diff                 # Compare local vs cloud active environment
+agentsecrets secrets diff --from X --to Y # Compare two environments directly
 ```
 
 ### Proxy & Calls
 ```bash
 agentsecrets call --url <URL> --bearer KEY    # One-shot authenticated call
 agentsecrets proxy start [--port 8765]        # Start HTTP proxy
-agentsecrets proxy status                     # Check proxy status
-agentsecrets proxy logs [--last N]            # View audit log
+agentsecrets proxy status                     # Check proxy status & revocation list
+agentsecrets proxy sync                       # Force background revocation sync
+agentsecrets proxy logs [--last N] [--watch]  # View or stream local audit trail
 agentsecrets exec                             # OpenClaw exec provider (reads stdin)
 agentsecrets mcp serve                        # Start MCP server
 agentsecrets mcp install                      # Auto-configure AI tools
 ```
 
+### Logging & Audit
+```bash
+agentsecrets log list [--tail]               # View or stream global backend logs
+agentsecrets log export --format csv         # Export global logs to CSV/JSON
+agentsecrets log summary                     # View global statistics and usage metrics
+agentsecrets log detail <id>                 # Inspect a specific request deeply
+```
+
+### Agent Identity
+```bash
+agentsecrets agent list                      # List AI agents attached to workspace
+agentsecrets agent delete <name>             # Delete agent & safely cascade-revoke tokens
+agentsecrets agent token issue <name>        # Generate a new session key for an AI
+agentsecrets agent token list <name>         # See all active tokens for an agent
+agentsecrets agent token revoke <id> --agent="<name>" # Revoke a specific identity token
+```
+
 ### Environment Injection
 ```bash
 agentsecrets env -- <command> [args...]       # Inject secrets as env vars into child process
@@ -485,6 +517,7 @@ agentsecrets workspace demote user@email.com               # Revoke admin role
 | **Domain allowlist enforcement** | ✅ Deny-by-default | ❌ | ❌ | ❌ | ❌ |
 | **Response body redaction** | ✅ Echo exfiltration defense | ❌ | ❌ | ❌ | ❌ |
 | **Prompt injection protection** | ✅ Structural | ❌ | ❌ | ❌ | ❌ |
+| **Environment support (dev/staging/prod)** | ✅ Built-in | ⚠️ Manual | ⚠️ Manual | ✅ | ⚠️ Manual |
 | **Env var injection (`run --`)** | ✅ `agentsecrets env` | ❌ | ❌ | ✅ `doppler run` | ✅ `op run` |
 | **AI-native workflow** | ✅ Built for it | ❌ | ❌ | ❌ | ❌ |
 | **SDK for building on top** | ✅ | ❌ | ❌ | ❌ | ❌ |
@@ -517,12 +550,12 @@ agentsecrets secrets pull
 ### Autonomous Agent Deployment
 ```bash
 # Agent handles this entire flow without human intervention
-agentsecrets secrets diff          # checks for drift
-agentsecrets secrets pull          # syncs if needed
-agentsecrets workspace switch production
-agentsecrets secrets pull
+agentsecrets secrets diff                    # checks for drift
+agentsecrets secrets pull                    # syncs if needed
+agentsecrets environment switch production   # switch to production environment
+agentsecrets secrets pull                    # pull production secrets
 agentsecrets env -- python deploy.py
-agentsecrets proxy logs            # audits what happened
+agentsecrets proxy logs                      # audits what happened
 ```
 
 ### Incident Response at 2am
@@ -568,11 +601,14 @@ See [ARCHITECTURE.md](docs/ARCHITECTURE.md) and [PROXY.md](docs/PROXY.md) for de
 - [x] Workspace role management (promote/demote)
 - [x] `agentsecrets env` — environment variable injection
 - [x] Python SDK (`pip install agentsecrets`)
-- [ ] AgentSecrets MCP Server Template
+- [x] Zero-Knowledge MCP Server Template
+- [x] Agent identity + token management
+- [x] Governance audit log
+- [x] Environment support (development / staging / production)
 - [ ] AgentSecrets for LangChain
 - [ ] AgentSecrets for CrewAI
+- [ ] JavaScript / Node.js SDK
 - [ ] Secret rotation
-- [ ] Environment support (dev/staging/prod)
 - [ ] Web dashboard
 - [ ] Cloud resolver (serverless + production deployments)
 - [ ] AgentSecrets Connect (multi-tenant credential delegation)
@@ -604,6 +640,8 @@ make test
 
 ## Links
 
+- **Website**: [agentsecrets.theseventeen.co](https://agentsecrets.theseventeen.co)
+- **Deep Dive**: [Building AgentSecrets (Engineering Blog)](https://engineering.theseventeen.co/series/building-agentsecrets)
 - **GitHub**: [github.com/The-17/agentsecrets](https://github.com/The-17/agentsecrets)
 - **SDK**: [github.com/The-17/agentsecrets-sdk](https://github.com/The-17/agentsecrets-sdk)
 - **ClawHub**: [clawhub.ai/SteppaCodes/agentsecrets](https://clawhub.ai/SteppaCodes/agentsecrets)

{agentsecrets_cli-1.1.0 → agentsecrets_cli-1.1.2}/README.md

@@ -8,6 +8,8 @@ Every other secrets tool was built for humans to provision credentials to agents
 [![Go Version](https://img.shields.io/badge/Go-1.21+-00ADD8?logo=go)](https://go.dev/)
 [![ClawHub](https://img.shields.io/badge/ClawHub-agentsecrets-blue)](https://clawhub.ai/SteppaCodes/agentsecrets)
 
+**[Official Website](https://agentsecrets.theseventeen.co)** | **[Engineering Blog Series](https://engineering.theseventeen.co/series/building-agentsecrets)**
+
 ---
 
 > **Package rename notice**
@@ -30,7 +32,7 @@ Your agent checks its own status. Notices a secret is out of sync. Pulls the lat
 ```bash
 # An AI agent managing its own secrets workflow autonomously
 
-agentsecrets status               # what workspace, project, last sync?
+agentsecrets status               # what workspace, project, environment, last sync?
 agentsecrets secrets diff         # anything out of sync?
 agentsecrets secrets pull         # sync from cloud to keychain
 agentsecrets secrets list         # what keys are available?
@@ -94,7 +96,7 @@ pip install agentsecrets-cli
 ## Quick Start
 
 ```bash
-# Create account + encryption keys
+# Set up your account (first time) or initialise a new project (returning user)
 agentsecrets init
 
 # Create a project
@@ -136,6 +138,7 @@ agentsecrets status
 # Logged in as: steppa@theseventeen.co
 # Workspace:    Acme Engineering
 # Project:      payments-service
+# Environment:  development
 # Last pull:    2 minutes ago
 ```
 
@@ -206,7 +209,7 @@ Allowlist modifications require admin role and password verification. Non-admins
 
 ```bash
 agentsecrets proxy logs --last 5
-# 14:23:01  ✓ OK (REDACTED)  GET  httpbin.org/headers  STRIPE_KEY  bearer  200  credential_echo  245ms
+# 14:23:01  * OK (REDACTED)  GET  httpbin.org/headers  STRIPE_KEY  bearer  200  credential_echo  245ms
 ```
 
 ### Role Management
@@ -388,8 +391,9 @@ response = as_client.call(
 You pass a key name. The SDK resolves from the OS keychain, injects at the transport layer, returns only the API response. Every user of every tool built on the SDK gets zero-knowledge credential management automatically.
 
 **Built on the SDK:**
-- [AgentSecrets MCP Server Template](https://github.com/The-17/agentsecrets-mcp-template) — scaffold for building MCP servers with zero credential storage
-- [AgentSecrets for LangChain](https://github.com/The-17/agentsecrets-langchain) — zero-knowledge API calls in any LangChain agent
+- [Zero-Knowledge MCP Server Template](https://github.com/The-17/zero-knowledge-mcp) — scaffold for building MCP servers with zero credential storage
+- AgentSecrets for LangChain — zero-knowledge API calls in any LangChain agent *(coming soon)*
+- AgentSecrets JS SDK — JavaScript/Node.js SDK *(coming soon)*
 
 ---
 
@@ -397,10 +401,10 @@ You pass a key name. The SDK resolves from the OS keychain, injects at the trans
 
 ### Account
 ```bash
-agentsecrets init                    # Create account or login
+agentsecrets init                    # Set up account or initialise a new project
 agentsecrets login                   # Login to existing account
 agentsecrets logout                  # Clear session
-agentsecrets status                  # Current user, workspace, project, last sync
+agentsecrets status                  # Current user, workspace, project, environment, last sync
 ```
 
 ### Workspaces
@@ -420,6 +424,15 @@ agentsecrets project update my-app        # Update project
 agentsecrets project delete my-app        # Delete project
 ```
 
+### Environments
+```bash
+agentsecrets environment switch <name>        # Switch active environment (development, staging, production)
+agentsecrets environment list                 # List all environments and secret counts
+agentsecrets environment copy <from> <to>     # Copy all secrets from one env to another
+agentsecrets environment merge <from> <to>    # Merge secrets and prompt for new values
+agentsecrets environment clean                # Delete all secrets in current environment
+```
+
 ### Secrets
 ```bash
 agentsecrets secrets set KEY=value        # Store a secret
@@ -428,20 +441,39 @@ agentsecrets secrets list                 # List key names — never values
 agentsecrets secrets push                 # Upload .env to cloud (encrypted)
 agentsecrets secrets pull                 # Download cloud secrets to keychain
 agentsecrets secrets delete KEY           # Remove a secret
-agentsecrets secrets diff                 # Compare local vs cloud
+agentsecrets secrets diff                 # Compare local vs cloud active environment
+agentsecrets secrets diff --from X --to Y # Compare two environments directly
 ```
 
 ### Proxy & Calls
 ```bash
 agentsecrets call --url <URL> --bearer KEY    # One-shot authenticated call
 agentsecrets proxy start [--port 8765]        # Start HTTP proxy
-agentsecrets proxy status                     # Check proxy status
-agentsecrets proxy logs [--last N]            # View audit log
+agentsecrets proxy status                     # Check proxy status & revocation list
+agentsecrets proxy sync                       # Force background revocation sync
+agentsecrets proxy logs [--last N] [--watch]  # View or stream local audit trail
 agentsecrets exec                             # OpenClaw exec provider (reads stdin)
 agentsecrets mcp serve                        # Start MCP server
 agentsecrets mcp install                      # Auto-configure AI tools
 ```
 
+### Logging & Audit
+```bash
+agentsecrets log list [--tail]               # View or stream global backend logs
+agentsecrets log export --format csv         # Export global logs to CSV/JSON
+agentsecrets log summary                     # View global statistics and usage metrics
+agentsecrets log detail <id>                 # Inspect a specific request deeply
+```
+
+### Agent Identity
+```bash
+agentsecrets agent list                      # List AI agents attached to workspace
+agentsecrets agent delete <name>             # Delete agent & safely cascade-revoke tokens
+agentsecrets agent token issue <name>        # Generate a new session key for an AI
+agentsecrets agent token list <name>         # See all active tokens for an agent
+agentsecrets agent token revoke <id> --agent="<name>" # Revoke a specific identity token
+```
+
 ### Environment Injection
 ```bash
 agentsecrets env -- <command> [args...]       # Inject secrets as env vars into child process
@@ -470,6 +502,7 @@ agentsecrets workspace demote user@email.com               # Revoke admin role
 | **Domain allowlist enforcement** | ✅ Deny-by-default | ❌ | ❌ | ❌ | ❌ |
 | **Response body redaction** | ✅ Echo exfiltration defense | ❌ | ❌ | ❌ | ❌ |
 | **Prompt injection protection** | ✅ Structural | ❌ | ❌ | ❌ | ❌ |
+| **Environment support (dev/staging/prod)** | ✅ Built-in | ⚠️ Manual | ⚠️ Manual | ✅ | ⚠️ Manual |
 | **Env var injection (`run --`)** | ✅ `agentsecrets env` | ❌ | ❌ | ✅ `doppler run` | ✅ `op run` |
 | **AI-native workflow** | ✅ Built for it | ❌ | ❌ | ❌ | ❌ |
 | **SDK for building on top** | ✅ | ❌ | ❌ | ❌ | ❌ |
@@ -502,12 +535,12 @@ agentsecrets secrets pull
 ### Autonomous Agent Deployment
 ```bash
 # Agent handles this entire flow without human intervention
-agentsecrets secrets diff          # checks for drift
-agentsecrets secrets pull          # syncs if needed
-agentsecrets workspace switch production
-agentsecrets secrets pull
+agentsecrets secrets diff                    # checks for drift
+agentsecrets secrets pull                    # syncs if needed
+agentsecrets environment switch production   # switch to production environment
+agentsecrets secrets pull                    # pull production secrets
 agentsecrets env -- python deploy.py
-agentsecrets proxy logs            # audits what happened
+agentsecrets proxy logs                      # audits what happened
 ```
 
 ### Incident Response at 2am
@@ -553,11 +586,14 @@ See [ARCHITECTURE.md](docs/ARCHITECTURE.md) and [PROXY.md](docs/PROXY.md) for de
 - [x] Workspace role management (promote/demote)
 - [x] `agentsecrets env` — environment variable injection
 - [x] Python SDK (`pip install agentsecrets`)
-- [ ] AgentSecrets MCP Server Template
+- [x] Zero-Knowledge MCP Server Template
+- [x] Agent identity + token management
+- [x] Governance audit log
+- [x] Environment support (development / staging / production)
 - [ ] AgentSecrets for LangChain
 - [ ] AgentSecrets for CrewAI
+- [ ] JavaScript / Node.js SDK
 - [ ] Secret rotation
-- [ ] Environment support (dev/staging/prod)
 - [ ] Web dashboard
 - [ ] Cloud resolver (serverless + production deployments)
 - [ ] AgentSecrets Connect (multi-tenant credential delegation)
@@ -589,6 +625,8 @@ make test
 
 ## Links
 
+- **Website**: [agentsecrets.theseventeen.co](https://agentsecrets.theseventeen.co)
+- **Deep Dive**: [Building AgentSecrets (Engineering Blog)](https://engineering.theseventeen.co/series/building-agentsecrets)
 - **GitHub**: [github.com/The-17/agentsecrets](https://github.com/The-17/agentsecrets)
 - **SDK**: [github.com/The-17/agentsecrets-sdk](https://github.com/The-17/agentsecrets-sdk)
 - **ClawHub**: [clawhub.ai/SteppaCodes/agentsecrets](https://clawhub.ai/SteppaCodes/agentsecrets)

{agentsecrets_cli-1.1.0 → agentsecrets_cli-1.1.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agentsecrets-cli"
-version = "1.1.0"
+version = "1.1.2"
 description = "AI-native zero-knowledge secrets manager"
 readme = "README.md"
 requires-python = ">=3.8"