tbenandClaude Opus 5.5
69988e08fc
A new personal env scope (paradigm user: one user's secret for one bot) beats every other scope, reaches only that user's runs of that bot, and is redacted like any secret. Bots take secrets in with request_secret, which puts a [secret-request:ID] card in the chat: the user types the value into a masked input there, never into a message, and the bot is told only the key. Bots show secrets with capture_secret (a task's computer tool that saves a file or a command's output straight to a personal env, then redacts it from the rest of the run) and show_secret (an env by key): both give a [secret:ID] chip whose Reveal and Copy fetch the value on click, for its own user (personal) or a super admin (anything else), logged by key. Values never go into messages, page props, history, Copy chat or logs. Users manage their own secrets on Settings > Secrets; the Environment page lists everyone's, remove only. Deleting a bot or user removes its personal secrets, and SecretsNote tells bots never to ask for or print secrets in chat. Co-Authored-By: Claude Opus 5.5 <[email protected]>
25 lines
986 B
TypeScript
25 lines
986 B
TypeScript
import { z } from "zod";
|
|
|
|
export const SecretRequestIdSchema = z.object({
|
|
request_id: z.coerce.number().int().positive("Pick a request"),
|
|
});
|
|
|
|
export const AnswerSecretRequestSchema = z.object({
|
|
request_id: z.coerce.number().int().positive("Pick a request"),
|
|
value: z.string().min(1, "Enter a value").max(20000, "Keep values under 20,000 characters"),
|
|
});
|
|
|
|
export const SecretIdSchema = z.object({
|
|
env_id: z.coerce.number().int().positive("Pick a secret"),
|
|
});
|
|
|
|
export const SaveUserSecretSchema = z.object({
|
|
env_id: z.coerce.number().int().positive("Pick a secret"),
|
|
value: z.string().min(1, "Enter a value").max(20000, "Keep values under 20,000 characters"),
|
|
});
|
|
|
|
export type SecretRequestIdRequest = z.infer<typeof SecretRequestIdSchema>;
|
|
export type AnswerSecretRequestRequest = z.infer<typeof AnswerSecretRequestSchema>;
|
|
export type SecretIdRequest = z.infer<typeof SecretIdSchema>;
|
|
export type SaveUserSecretRequest = z.infer<typeof SaveUserSecretSchema>;
|