@n8n-as-code/n8nac 2026.3.1-next.14 → 2026.3.2-next.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@n8n-as-code/n8nac",
-  "version": "2026.3.1-next.14",
+  "version": "2026.3.2-next.3",
   "description": "OpenClaw plugin for n8n-as-code — create and manage n8n workflows from OpenClaw",
   "keywords": [
     "n8n",

package/src/child-env.ts

@@ -0,0 +1,34 @@
+/**
+ * Build a minimal environment for child processes.
+ * Only passes the vars needed for npx/node to operate, deliberately excluding
+ * any sensitive credentials that the parent (agent host) may hold in its env
+ * (e.g. LLM API keys), preventing accidental credential forwarding.
+ */
+export function getChildEnv(): NodeJS.ProcessEnv {
+  const env: NodeJS.ProcessEnv = {};
+
+  // Matches var names that look like credentials anywhere in the name — these are never forwarded
+  // even if they match another allowlist prefix (e.g. NODE_AUTH_TOKEN, npm_config_*:_authToken,
+  // npm_config_authority is intentionally over-blocked since we prefer false-positives to leaks).
+  const secretPattern = /(?:auth|token|password|secret|apikey|api_key|_key)/i;
+
+  for (const key of Object.keys(process.env)) {
+    const upperKey = key.toUpperCase();
+    if (
+      // Basic system vars needed by node/npx (case-insensitive, including Windows-specific ones)
+      /^(PATH|HOME|USERPROFILE|HOMEDRIVE|HOMEPATH|TMPDIR|TMP|TEMP|LANG|LC_ALL|SHELL|TERM|TERM_PROGRAM|NODE_PATH|NODE_OPTIONS|SYSTEMROOT|COMSPEC|PATHEXT)$/.test(
+        upperKey,
+      ) ||
+      // npm execution/config vars required by npx — but NOT auth/token vars
+      // (e.g. excludes npm_config_//registry.npmjs.org/:_authToken)
+      (key.startsWith("npm_") && !secretPattern.test(key)) ||
+      // Specific safe NODE_* vars (deliberately NOT a prefix match to exclude NODE_AUTH_TOKEN)
+      /^NODE_(ENV|NO_WARNINGS|ICU_DATA)$/.test(upperKey) ||
+      // n8n-as-code specific vars
+      key.startsWith("N8N_AS_CODE_")
+    ) {
+      env[key] = process.env[key];
+    }
+  }
+  return env;
+}

package/src/cli.ts

@@ -3,6 +3,7 @@ import { spawn } from "node:child_process";
 import type { ChildProcess, ChildProcessWithoutNullStreams } from "node:child_process";
 import * as p from "@clack/prompts";
 import type { OpenClawPluginApi } from "openclaw/plugin-sdk";
+import { getChildEnv } from "./child-env.js";
 import { isWorkspaceInitialized } from "./workspace.js";
 
 type CliProgram = Parameters<Parameters<OpenClawPluginApi["registerCli"]>[0]>[0]["program"];
@@ -31,6 +32,7 @@ function runN8nac(
   return new Promise((resolve) => {
     const baseOptions = {
       cwd: opts.cwd,
+      env: getChildEnv(),
     };
 
     const child: ChildProcess | ChildProcessWithoutNullStreams =

package/src/tool.ts

@@ -1,5 +1,6 @@
 import { spawn } from "node:child_process";
 import { Type } from "@sinclair/typebox";
+import { getChildEnv } from "./child-env.js";
 import { isWorkspaceInitialized } from "./workspace.js";
 
 // ---------------------------------------------------------------------------
@@ -106,6 +107,7 @@ function runNpx(
     const child = spawn("npx", ["--yes", "n8nac", ...args], {
       cwd,
       stdio: "pipe",
+      env: getChildEnv(),
     });
 
     let stdout = "";