Move secrets between users and computers without the model seeing them

A new personal env scope (paradigm user: one user's secret for one bot) beats every other scope, reaches only that user's runs of that bot, and is redacted like any secret. Bots take secrets in with request_secret, which puts a [secret-request:ID] card in the chat: the user types the value into a masked input there, never into a message, and the bot is told only the key. Bots show secrets with capture_secret (a task's computer tool that saves a file or a command's output straight to a personal env, then redacts it from the rest of the run) and show_secret (an env by key): both give a [secret:ID] chip whose Reveal and Copy fetch the value on click, for its own user (personal) or a super admin (anything else), logged by key. Values never go into messages, page props, history, Copy chat or logs. Users manage their own secrets on Settings > Secrets; the Environment page lists everyone's, remove only. Deleting a bot or user removes its personal secrets, and SecretsNote tells bots never to ask for or print secrets in chat. Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-25 16:51:32 +01:00
parent 83ff79b9c3
commit 69988e08fc
78 changed files with 2472 additions and 52 deletions
@@ -0,0 +1,28 @@
+import Button from "@moduletrace/twui/layout/Button";
+import type { LucideIcon } from "lucide-react";
+
+type Props = {
+    title: string;
+    icon: LucideIcon;
+    onClick: () => void;
+};
+
+/**
+ * One of a secret chip's icon buttons (Reveal, Copy).
+ */
+export default function SecretChipButton({ title, icon: Icon, onClick }: Props) {
+    return (
+        <Button
+            type="button"
+            variant="ghost"
+            color="gray"
+            size="smaller"
+            title={title}
+            aria-label={title}
+            className="h-5 w-5 shrink-0 p-0!"
+            onClick={onClick}
+        >
+            <Icon size={13} aria-hidden />
+        </Button>
+    );
+}