Secrets and user input

export DEMO_ACCOUNT_EMAIL="person@example.com"

web agent \
  --url https://example.com/login \
  --allow-domain example.com \
  --secret accountEmail=DEMO_ACCOUNT_EMAIL \
  --approval ask \
  "Open the account page and summarize the billing status. Do not change settings."

const agent = web.agent({
  model,
  browser: { policy: { allowedDomains: ["example.com"] } },
  approval: "ask",
  variables: {
    accountEmail: {
      value: process.env.DEMO_ACCOUNT_EMAIL ?? "",
      sensitive: true,
      allowedDomains: ["example.com"],
      description: "Demo account email for read-only billing review.",
    },
  },
});