Move secrets between users and computers without the model seeing them

A new personal env scope (paradigm user: one user's secret for one bot) beats every other scope, reaches only that user's runs of that bot, and is redacted like any secret. Bots take secrets in with request_secret, which puts a [secret-request:ID] card in the chat: the user types the value into a masked input there, never into a message, and the bot is told only the key. Bots show secrets with capture_secret (a task's computer tool that saves a file or a command's output straight to a personal env, then redacts it from the rest of the run) and show_secret (an env by key): both give a [secret:ID] chip whose Reveal and Copy fetch the value on click, for its own user (personal) or a super admin (anything else), logged by key. Values never go into messages, page props, history, Copy chat or logs. Users manage their own secrets on Settings > Secrets; the Environment page lists everyone's, remove only. Deleting a bot or user removes its personal secrets, and SecretsNote tells bots never to ask for or print secrets in chat. Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-25 16:51:32 +01:00
parent 83ff79b9c3
commit 69988e08fc
78 changed files with 2472 additions and 52 deletions
@@ -0,0 +1,44 @@
+import type { HarnessTool } from "../../../types";
+import requestSecretTool from "./request-secret-tool";
+import showSecretTool from "./show-secret-tool";
+
+type Params = {
+    user_id: number | string;
+    bot_id: number | string;
+    session_id?: number | string;
+    workspace_id?: number | string | null;
+    computer_id?: number | string | null;
+    in_task?: boolean;
+    /**
+     * Called with a secret request's ref: the message needs the user.
+     */
+    onRequest?: (params: { ref: string }) => void;
+    /**
+     * Called with a shown secret's ref.
+     */
+    onShow?: (params: { ref: string }) => void;
+};
+
+/**
+ * The tools that move secrets without the model seeing them: asking the
+ * user for one (`request_secret`, needs a conversation to show its card
+ * in) and showing one (`show_secret`). Capturing one on a computer is a
+ * computer tool (`capture_secret`).
+ */
+export default function grabBotSecretTools({
+    user_id,
+    bot_id,
+    session_id,
+    workspace_id,
+    computer_id,
+    in_task,
+    onRequest,
+    onShow,
+}: Params): HarnessTool[] {
+    return [
+        ...(session_id && onRequest
+            ? [requestSecretTool({ user_id, bot_id, session_id, workspace_id, in_task, onRequest })]
+            : []),
+        ...(onShow ? [showSecretTool({ user_id, bot_id, workspace_id, computer_id, onShow })] : []),
+    ];
+}