@arnilo/prism-coding-agent 0.0.16 → 0.0.17

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## [0.0.17] - 2026-07-29
+
+### Added
+- `ShellToolOptions.envAllowlist` restricts the environment the spawn hook and child process see (secret scrubbing without re-implementing the hook).
+
+### Changed
+- Released with exact 0.0.17 graph.
+
 ## [0.0.16] - 2026-07-26
 
 ### Changed

package/dist/shell.d.ts

@@ -55,6 +55,9 @@ export interface ShellToolOptions {
     shellPath?: string;
     /** Hook to adjust command, cwd, or env before execution. */
     spawnHook?: BashSpawnHook;
+    /** Restrict the process environment cloned for the spawn hook / child process to these
+     *  names (e.g. scrub secrets). Unset keeps the full `process.env` clone. */
+    envAllowlist?: readonly string[];
     /** Max lines kept in the tail snapshot (default 2000). */
     maxLines?: number;
     /** Max bytes kept in the tail snapshot (default 50KB). */

package/dist/shell.js

@@ -29,6 +29,18 @@ import { OutputAccumulator } from "./output-accumulator.js";
 import { formatSize } from "./truncate.js";
 const EXIT_STDIO_GRACE_MS = 100;
 // --- spawn internals (re-ported from pi utils/shell.js + utils/child-process.js) ---
+/** Clone the process environment, optionally restricted to an allowlist of names. */
+function pickSpawnEnv(allowlist) {
+    if (!allowlist)
+        return { ...process.env };
+    const env = {};
+    for (const name of allowlist) {
+        const value = process.env[name];
+        if (value !== undefined)
+            env[name] = value;
+    }
+    return env;
+}
 /** Resolve the shell binary + args. shellPath → SHELL env → /bin/bash → sh. */
 export function getShellConfig(customShellPath) {
     if (customShellPath) {
@@ -284,9 +296,10 @@ export function createShellTool(cwd, options) {
                 return { toolCallId, name: "shell", content: [{ type: "text", text: message }], error: { message } };
             }
             const resolvedCommand = commandPrefix ? `${commandPrefix}\n${command}` : command;
+            const baseEnv = pickSpawnEnv(options?.envAllowlist);
             let spawnContext = spawnHook
-                ? spawnHook({ command: resolvedCommand, cwd, env: { ...process.env } })
-                : { command: resolvedCommand, cwd, env: { ...process.env } };
+                ? spawnHook({ command: resolvedCommand, cwd, env: baseEnv })
+                : { command: resolvedCommand, cwd, env: baseEnv };
             const policyCheck = await enforceExecutionPolicy(options?.executionPolicy, {
                 kind: "shell",
                 operation: "execute",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arnilo/prism-coding-agent",
-  "version": "0.0.16",
+  "version": "0.0.17",
   "description": "Optional coding-agent tools (shell, read, write, edit, repo_list, repo_search, opt-in Git/check/ask-user-decision, and durable plan/checkpoint helpers) package for Prism.",
   "type": "module",
   "main": "./dist/index.js",
@@ -28,8 +28,8 @@
     "diff": "^9.0.0"
   },
   "peerDependencies": {
-    "@arnilo/prism": "0.0.16",
-    "@arnilo/prism-workflows": "0.0.16"
+    "@arnilo/prism": "0.0.17",
+    "@arnilo/prism-workflows": "0.0.17"
   },
   "devDependencies": {
     "@arnilo/prism": "file:../..",