tbenandClaude Opus 5.5
69988e08fc
A new personal env scope (paradigm user: one user's secret for one bot) beats every other scope, reaches only that user's runs of that bot, and is redacted like any secret. Bots take secrets in with request_secret, which puts a [secret-request:ID] card in the chat: the user types the value into a masked input there, never into a message, and the bot is told only the key. Bots show secrets with capture_secret (a task's computer tool that saves a file or a command's output straight to a personal env, then redacts it from the rest of the run) and show_secret (an env by key): both give a [secret:ID] chip whose Reveal and Copy fetch the value on click, for its own user (personal) or a super admin (anything else), logged by key. Values never go into messages, page props, history, Copy chat or logs. Users manage their own secrets on Settings > Secrets; the Environment page lists everyone's, remove only. Deleting a bot or user removes its personal secrets, and SecretsNote tells bots never to ask for or print secrets in chat. Co-Authored-By: Claude Opus 5.5 <[email protected]>
29 lines
912 B
TypeScript
29 lines
912 B
TypeScript
type Params = {
|
|
text: string;
|
|
/**
|
|
* The take-over refs the bot asked for in this run (`askToTakeOverTool`),
|
|
* and the proposals it made for the user to confirm (`proposalRef`).
|
|
*/
|
|
refs: string[];
|
|
/**
|
|
* The secrets it showed (`secretRef`): added the same way, but they
|
|
* don't need the user.
|
|
*/
|
|
shown?: string[];
|
|
};
|
|
|
|
/**
|
|
* A job's message with every take-over the bot asked for in it and every
|
|
* proposal it made: refs the bot didn't write itself are added at the
|
|
* end, so the user always gets the button. A message asking for either
|
|
* needs the user.
|
|
*/
|
|
export default function withTakeOverRefs({ text, refs, shown = [] }: Params) {
|
|
const missing = [...new Set([...refs, ...shown])].filter((ref) => !text.includes(ref));
|
|
|
|
return {
|
|
result: [text.trim(), ...missing].filter(Boolean).join("\n\n"),
|
|
needs_you: refs.length > 0,
|
|
};
|
|
}
|