From 121ed6040e6f9826e48a49074591a9c3a1a133c5 Mon Sep 17 00:00:00 2001 From: Kyle McCullough Date: Tue, 7 Jul 2026 19:03:15 -0300 Subject: [PATCH] Release CLI 0.5.16 with redacted IM auth output --- CHANGELOG.md | 4 ++++ adapters/im/run.js | 18 ++++++++++++++++-- adapters/manifest.json | 34 +++++++++++++++++----------------- adapters/package.json | 2 +- npm-shrinkwrap.json | 4 ++-- package.json | 2 +- 6 files changed, 41 insertions(+), 23 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 58bac7b..e7adce0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,10 @@ This project follows semantic versioning before `1.0.0` with the usual pre-1.0 c ## Unreleased +## 0.5.16 - 2026-07-07 + +- Published the bundled IM adapter fix so `auth login --json` and `auth agent-login --json` return a redacted session summary instead of local access/refresh tokens. + ## 0.5.15 - 2026-07-07 - Published the bundled Business adapter with production-grade AgentsIdentify-backed agent onboarding: invite bootstrap now requires a persistent AgentsIdentify proof, Business owns the workspace-agent identity binding, and session reissue is authorized through that binding instead of a distributed bootstrap token. diff --git a/adapters/im/run.js b/adapters/im/run.js index 88360e4..d180944 100755 --- a/adapters/im/run.js +++ b/adapters/im/run.js @@ -2515,7 +2515,7 @@ async function cmdAuthAgentLogin(args, json, ctx) { defaultWorkspaceId: product.session.workspace?.id ?? product.session.defaultWorkspaceId ?? business.workspace.id }); await saveStoredSession(ctx, session); - if (json) return writeJson(ctx, session); + if (json) return writeJson(ctx, redactedSessionPayload(session, ctx)); ctx.stdout(`${renderSessionSummary(session, ctx)} `); return 0; @@ -2560,6 +2560,20 @@ function renderSessionSummary(session, ctx) { `Expires: ${formatDate(session.expiresAt)}` ].join("\n"); } +function redactedSessionPayload(session, ctx) { + return { + ok: true, + authenticated: true, + appAccessReady: true, + user: session.user, + baseUrl: session.baseUrl, + workspace: session.workspace ?? null, + workspaces: session.workspaces, + defaultWorkspaceId: session.defaultWorkspaceId ?? null, + expiresAt: session.expiresAt, + sessionFile: sessionFilePath(ctx) + }; +} async function readJsonObjectFromArgs(args) { const inline = readFlag(args, "data"); const file = readFlag(args, "data-file"); @@ -2669,7 +2683,7 @@ async function cmdAuthLogin(baseUrl, args, json, ctx) { `) }); await saveStoredSession(ctx, session); - if (json) return writeJson(ctx, session); + if (json) return writeJson(ctx, redactedSessionPayload(session, ctx)); ctx.stdout(`${renderSessionSummary(session, ctx)} `); return 0; diff --git a/adapters/manifest.json b/adapters/manifest.json index 8317a41..38365b8 100644 --- a/adapters/manifest.json +++ b/adapters/manifest.json @@ -1,118 +1,118 @@ { "schemaVersion": 1, - "builtAt": "2026-07-07T21:37:58.153Z", + "builtAt": "2026-07-07T22:01:55.601Z", "adapters": [ { "app": "business", "sourceRepoPath": "mere-business", "sourceArtifactPath": "mere-business/packages/cli/dist/index.js", "adapterPath": "adapters/business/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "finance", "sourceRepoPath": "mere-finance", "sourceArtifactPath": "mere-finance/packages/cli/bin/merefi.ts", "adapterPath": "adapters/finance/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "dynasite", "sourceRepoPath": "mere-dynasite", "sourceArtifactPath": "mere-dynasite/dist/run.js", "adapterPath": "adapters/dynasite/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "projects", "sourceRepoPath": "mere-projects", "sourceArtifactPath": "mere-projects/dist/run.js", "adapterPath": "adapters/projects/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "agent", "sourceRepoPath": "mere-agent", "sourceArtifactPath": "mere-agent/cli-dist/run.js", "adapterPath": "adapters/agent/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "today", "sourceRepoPath": "mere-today", "sourceArtifactPath": "mere-today/dist/run.js", "adapterPath": "adapters/today/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "zone", "sourceRepoPath": "mere-zone", "sourceArtifactPath": "mere-zone/dist/run.js", "adapterPath": "adapters/zone/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "video", "sourceRepoPath": "mere-video", "sourceArtifactPath": "mere-video/dist/run.js", "adapterPath": "adapters/video/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "network", "sourceRepoPath": "mere-network", "sourceArtifactPath": "mere-network/dist/run.js", "adapterPath": "adapters/network/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "email", "sourceRepoPath": "mere-email", "sourceArtifactPath": "mere-email/dist/run.js", "adapterPath": "adapters/email/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "im", "sourceRepoPath": "mere-im", "sourceArtifactPath": "mere-im/dist/run.js", "adapterPath": "adapters/im/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "gives", "sourceRepoPath": "mere-gives", "sourceArtifactPath": "mere-gives/dist/run.js", "adapterPath": "adapters/gives/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "works", "sourceRepoPath": "mere-works", "sourceArtifactPath": "mere-works/dist/run.js", "adapterPath": "adapters/works/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "media", "sourceRepoPath": "mere-media", "sourceArtifactPath": "mere-media/dist/run.js", "adapterPath": "adapters/media/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "deliver", "sourceRepoPath": "mere-deliver", "sourceArtifactPath": "mere-deliver/cli/run.js", "adapterPath": "adapters/deliver/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" }, { "app": "link", "sourceRepoPath": "merekit-link", "sourceArtifactPath": "merekit-link/dist/run.js", "adapterPath": "adapters/link/run.js", - "builtAt": "2026-07-07T21:37:58.153Z" + "builtAt": "2026-07-07T22:01:55.601Z" } ] } diff --git a/adapters/package.json b/adapters/package.json index a02974d..a4701d7 100644 --- a/adapters/package.json +++ b/adapters/package.json @@ -1,6 +1,6 @@ { "name": "@merekit/cli-adapters", "private": true, - "version": "0.5.15", + "version": "0.5.16", "type": "module" } diff --git a/npm-shrinkwrap.json b/npm-shrinkwrap.json index 1cf2fd5..6453f96 100644 --- a/npm-shrinkwrap.json +++ b/npm-shrinkwrap.json @@ -1,12 +1,12 @@ { "name": "@merekit/cli", - "version": "0.5.15", + "version": "0.5.16", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@merekit/cli", - "version": "0.5.15", + "version": "0.5.16", "license": "Apache-2.0", "dependencies": { "@modelcontextprotocol/sdk": "1.29.0", diff --git a/package.json b/package.json index ee23c5c..e7ea51d 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@merekit/cli", - "version": "0.5.15", + "version": "0.5.16", "description": "Public Mere command plane with waitlist and invite onboarding, bundled app adapters, agent context packs, audits, and MCP access.", "private": false, "license": "Apache-2.0",