Move secrets between users and computers without the model seeing them

A new personal env scope (paradigm user: one user's secret for one bot) beats every other scope, reaches only that user's runs of that bot, and is redacted like any secret. Bots take secrets in with request_secret, which puts a [secret-request:ID] card in the chat: the user types the value into a masked input there, never into a message, and the bot is told only the key. Bots show secrets with capture_secret (a task's computer tool that saves a file or a command's output straight to a personal env, then redacts it from the rest of the run) and show_secret (an env by key): both give a [secret:ID] chip whose Reveal and Copy fetch the value on click, for its own user (personal) or a super admin (anything else), logged by key. Values never go into messages, page props, history, Copy chat or logs. Users manage their own secrets on Settings > Secrets; the Environment page lists everyone's, remove only. Deleting a bot or user removes its personal secrets, and SecretsNote tells bots never to ask for or print secrets in chat. Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-25 16:51:32 +01:00
parent 83ff79b9c3
commit 69988e08fc
78 changed files with 2472 additions and 52 deletions
@@ -0,0 +1,72 @@
+import { useState } from "react";
+import Modal from "@moduletrace/twui/elements/Modal";
+import Button from "@moduletrace/twui/layout/Button";
+import H2 from "@moduletrace/twui/layout/H2";
+import Span from "@moduletrace/twui/layout/Span";
+import Stack from "@moduletrace/twui/layout/Stack";
+import { KeyRound } from "lucide-react";
+import useSecretRequest from "../(hooks)/use-secret-request";
+import SecretRequestCard from "./secret-request-card";
+
+type Props = {
+    request_id: number;
+};
+
+const StatusLabels = {
+    pending: "waiting for you",
+    saved: "saved",
+    declined: "declined",
+} as const;
+
+/**
+ * A secret a bot asked for (`secretRequestRef`): a chip naming its key and
+ * where it stands, which opens the card the user types it into. Anyone it
+ * wasn't asked of sees its number only.
+ */
+export default function SecretRequestRefChip({ request_id }: Props) {
+    const { view, loading, setView } = useSecretRequest({ request_id });
+    const [open, setOpen] = useState(false);
+
+    if (!view) {
+        return (
+            <Span className="font-bold">
+                {loading ? `secret request ${request_id}` : `secret request ${request_id} (not available)`}
+            </Span>
+        );
+    }
+
+    const status = StatusLabels[view.status];
+
+    return (
+        <Modal
+            target={
+                <Button
+                    type="button"
+                    variant="outlined"
+                    color="gray"
+                    size="smaller"
+                    title={view.status == "pending" ? `Enter ${view.key}` : `${view.key}: ${status}`}
+                    className="inline-flex h-6 gap-1.5! flex-nowrap align-middle px-2! text-[13px] font-bold text-ink whitespace-nowrap"
+                >
+                    <KeyRound size={14} aria-hidden className="shrink-0" />
+                    {`${view.key} · ${status}`}
+                </Button>
+            }
+            targetWrapperProps={{ className: "inline-flex align-middle" }}
+            open={open}
+            setOpen={setOpen}
+            className="max-w-xl bg-paper p-6"
+        >
+            <Stack className="w-full gap-1! items-stretch">
+                <H2 className="text-lg! leading-6! tracking-normal! font-bold text-ink">{`${view.bot_name} asks for ${view.key}`}</H2>
+                <Span className="text-[13px] leading-[18px] text-ink-secondary">
+                    {`Type it here rather than in the chat: what you write in the chat goes to the bot's model provider, this never does.`}
+                </Span>
+            </Stack>
+
+            <Stack className="mt-2 max-h-[65vh] w-full gap-0! items-stretch overflow-y-auto">
+                <SecretRequestCard view={view} onDecided={setView} onDone={() => setOpen(false)} />
+            </Stack>
+        </Modal>
+    );
+}