@lazyingart/agintiflow 0.20.137 → 0.20.139

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyingart/agintiflow",
-  "version": "0.20.137",
+  "version": "0.20.139",
   "type": "module",
   "description": "AgInTiFlow is a project-aware agent workspace for hybrid wet-dry R&D, hardware-aware intelligence, software automation, and industrial workflows.",
   "license": "Apache-2.0",

package/scripts/smoke-coding-tools.js

@@ -1031,6 +1031,29 @@ try {
       if (error.code !== "ENOENT") throw error;
     });
 
+  const safeEnvReferenceResult = await executeWorkspaceTool(
+    "write_file",
+    {
+      path: "scripts/safe-env-reference.py",
+      content: [
+        "import os",
+        "from openai import OpenAI",
+        "def load_api_key():",
+        '    return os.environ.get("DEEPSEEK_API_KEY")',
+        "api_key = load_api_key()",
+        'client = OpenAI(api_key=api_key, base_url="https://api.deepseek.com")',
+        "print(client)",
+        "",
+      ].join("\n"),
+      mode: "create",
+    },
+    {
+      commandCwd: workspace,
+      allowFileTools: true,
+    }
+  );
+  assert(safeEnvReferenceResult.ok, "write_file should allow safe env-var credential references in source code");
+
   const redactedContentResult = await executeWorkspaceTool(
     "write_file",
     {
@@ -1127,6 +1150,7 @@ try {
           "patch_move_no_overwrite",
           "block_env",
           "block_secret_write_content",
+          "allow_safe_env_reference_content",
           "allow_redacted_write_content",
           "block_secret_patch_content",
           "block_outside",

package/src/workspace-tools.js

@@ -198,7 +198,7 @@ function pathPolicy(toolName, relativePath) {
 }
 
 function secretContentPolicy(content) {
-  if (!hasSensitiveText(content)) return { allowed: true };
+  if (!hasSensitiveText(stripSafeCredentialReferences(content))) return { allowed: true };
   return {
     allowed: false,
     reason:
@@ -207,6 +207,41 @@ function secretContentPolicy(content) {
   };
 }
 
+function stripSafeCredentialReferences(content) {
+  let text = String(content ?? "");
+  const keyName = String.raw`(?:api[_-]?key|token|secret|password|passwd|npm_token|_authToken|grsai|venice_api_key)`;
+  const codeKeyName = String.raw`(?:api[_-]?key|apiKey|token|secret|password|passwd|npmToken|authToken|grsai|veniceApiKey|venice_api_key)`;
+  const codeExpression = String.raw`[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*|\([^"'\n]*\))?`;
+  const envName = String.raw`[A-Z][A-Z0-9_]*(?:API[_-]?KEY|TOKEN|SECRET|PASSWORD|PASSWD|GRSAI|VENICE)[A-Z0-9_]*`;
+
+  text = text.replace(
+    new RegExp(String.raw`\b${keyName}\s*=\s*(?:os\.environ\.get|os\.getenv)\(\s*["']${envName}["'](?:\s*,\s*(?:None|""|''))?\s*\)`, "gi"),
+    "safe_credential_ref=[ENV_REF]"
+  );
+  text = text.replace(
+    new RegExp(String.raw`\b${keyName}\s*=\s*(?:os\.environ|env)\[\s*["']${envName}["']\s*\]`, "gi"),
+    "safe_credential_ref=[ENV_REF]"
+  );
+  text = text.replace(
+    new RegExp(String.raw`\b${keyName}\s*=\s*(?:process\.env\.${envName}|Deno\.env\.get\(\s*["']${envName}["']\s*\))`, "gi"),
+    "safe_credential_ref=[ENV_REF]"
+  );
+  text = text.replace(
+    new RegExp(String.raw`([,(]\s*)${keyName}\s*=\s*[A-Za-z_$][\w$]*(?=\s*[,)\n])`, "gi"),
+    "$1safe_credential_ref=[VAR_REF]"
+  );
+  text = text.replace(
+    new RegExp(String.raw`\b${codeKeyName}\s*=\s*${codeExpression}(?=\s*[,;)\n])`, "g"),
+    "safe_credential_ref=[EXPR_REF]"
+  );
+  text = text.replace(
+    new RegExp(String.raw`([,{]\s*)${keyName}\s*:\s*[A-Za-z_$][\w$]*(?=\s*[,}\n])`, "gi"),
+    "$1safe_credential_ref=[VAR_REF]"
+  );
+
+  return text;
+}
+
 function writeContentPolicy(toolName, args, operations = null) {
   if (toolName === "write_file") return secretContentPolicy(args.content || "");
   if (toolName !== "apply_patch") return { allowed: true };