{"record":{"id":"191ac780cf7733ba","repo":"warpdotdev/warp","slug":"invalid-value-secret","errorCode":null,"errorMessage":"invalid value 'secret'","messagePattern":"invalid value 'secret'","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"app/src/ai/agent_sdk/mod.rs","lineNumber":190,"sourceCode":"        CliCommand::Integration(integration_cmd) => {\n            if !FeatureFlag::IntegrationCommand.is_enabled() {\n                return Err(anyhow::anyhow!(\"invalid value 'integration'\"));\n            }\n            integration::run(ctx, global_options, integration_cmd)\n        }\n        #[cfg(target_family = \"wasm\")]\n        CliCommand::Integration(_) => {\n            return Err(anyhow::anyhow!(\"invalid value 'integration'\"));\n        }\n        CliCommand::Schedule(schedule_cmd) => {\n            if !FeatureFlag::ScheduledAmbientAgents.is_enabled() {\n                return Err(anyhow::anyhow!(\"invalid value 'schedule'\"));\n            }\n            schedule::run(ctx, global_options, schedule_cmd)\n        }\n        CliCommand::Secret(secret_cmd) => {\n            if !FeatureFlag::WarpManagedSecrets.is_enabled() {\n                return Err(anyhow::anyhow!(\"invalid value 'secret'\"));\n            }\n            secret::run(ctx, global_options, secret_cmd)\n        }\n        CliCommand::Federate(federate_cmd) => {\n            if !FeatureFlag::OzIdentityFederation.is_enabled() {\n                return Err(anyhow::anyhow!(\"invalid value 'federate'\"));\n            }\n            federate::run(ctx, global_options, federate_cmd)\n        }\n        CliCommand::HarnessSupport(args) => {\n            if !FeatureFlag::AgentHarness.is_enabled() {\n                return Err(anyhow::anyhow!(\"invalid value 'harness-support'\"));\n            }\n            harness_support::run(ctx, global_options, args)\n        }\n        CliCommand::Artifact(artifact_cmd) => {\n            if !FeatureFlag::ArtifactCommand.is_enabled() {\n                return Err(anyhow::anyhow!(\"invalid value 'artifact'\"));","sourceCodeStart":172,"sourceCodeEnd":208,"githubUrl":"https://github.com/warpdotdev/warp/blob/e72fd7aacbbb2236d9b3be2aad7e7178fe94b4bc/app/src/ai/agent_sdk/mod.rs#L172-L208","documentation":"Thrown by the dispatcher arm for CliCommand::Secret (mod.rs:190) when `secret` parsed but FeatureFlag::WarpManagedSecrets is disabled. The deliberately clap-shaped 'invalid value' error hides the managed-secrets subsystem (create/list of server-resolved credentials) when the feature flag is off. Flag defaults to false and is channel/account-dependent.","triggerScenarios":"Invoking `<cli> secret ...` (e.g. `oz secret create claude api-key NAME`) where FeatureFlag::WarpManagedSecrets.is_enabled() == false. Subcommand and subargs parse fine; the error comes from the flag gate inside the handler.","commonSituations":"Following harness setup docs that say `oz secret create ...` on a build where managed secrets are gated; scripts provisioning credentials before a run-cloud launch; release-channel builds where the feature is not yet enabled.","solutions":["Run from a build/account with WarpManagedSecrets enabled, or update to a version where it shipped to your channel","If you hit this while setting up --claude-auth-secret/--codex-auth-secret, create the secret from an environment where the flag is on; the name is server-side and reusable","As a Warp developer, override the flag or add FeatureFlag::WarpManagedSecrets to DOGFOOD_FLAGS and rebuild"],"exampleFix":"# before\n$ oz secret create claude api-key my-key\nError: invalid value 'secret'\n\n# after: only call when available\nif FeatureFlag::WarpManagedSecrets.is_enabled() {\n    secret::run(ctx, global_options, cmd)?;\n}","handlingStrategy":"validation","validationCode":"if matches!(cmd, CliCommand::Secret(_))\n    && !FeatureFlag::WarpManagedSecrets.is_enabled()\n{\n    anyhow::bail!(\"managed secrets unavailable; provision credentials another way\");\n}","typeGuard":"pub fn managed_secrets_available() -> bool {\n    FeatureFlag::WarpManagedSecrets.is_enabled()\n}","tryCatchPattern":"match agent_sdk::run(ctx, opts, cmd) {\n    Err(e) if e.to_string() == \"invalid value 'secret'\" => {\n        // create the secret from an environment where the flag is on\n    }\n    result => result?,\n}","preventionTips":["Provision managed secrets before first use and from an enrolled environment","Scripts that pass --claude/--codex-auth-secret should pre-check WarpManagedSecrets","Treat 'invalid value' for a documented subcommand as a gating signal, not a typo"],"tags":["cli","feature-flags","secrets","rust","warp"],"backgroundTag":null,"analyzedSha":"e72fd7aacbbb2236d9b3be2aad7e7178fe94b4bc","analyzedAt":"2026-08-16T08:27:25.381Z","schemaVersion":2},"datasetVersion":"2026-08-16T13:17:31.715Z"}