@sandagent/runner-cli 0.9.16 → 0.9.18

package/dist/bundle.mjs

@@ -1209,7 +1209,7 @@ function createOpenCodeRunner(options = {}) {
 import { appendFileSync as appendFileSync2, existsSync as existsSync4, unlinkSync as unlinkSync3 } from "node:fs";
 import { join as join5 } from "node:path";
 import { getModel } from "@mariozechner/pi-ai";
-import { AuthStorage, createAgentSession, ModelRegistry, SessionManager } from "@mariozechner/pi-coding-agent";
+import { AuthStorage, createAgentSession, createBashTool, ModelRegistry, SessionManager } from "@mariozechner/pi-coding-agent";
 
 // ../../packages/runner-pi/dist/sandagent-resource-loader.js
 import { existsSync as existsSync3 } from "node:fs";
@@ -1297,6 +1297,40 @@ var SandagentResourceLoader = class {
 };
 
 // ../../packages/runner-pi/dist/pi-runner.js
+function redactSecrets(text, secrets) {
+  if (Object.keys(secrets).length === 0)
+    return text;
+  let result = text;
+  for (const [k, v] of Object.entries(secrets)) {
+    const keyPattern = new RegExp(`${k}\\s*=\\s*\\S*`, "g");
+    result = result.replace(keyPattern, "");
+    if (v.length > 0)
+      result = result.split(v).join("");
+  }
+  return result;
+}
+function buildEnvInjectedBashTool(cwd, extraEnv) {
+  const bashAgentTool = createBashTool(cwd, {
+    spawnHook: (ctx) => ({
+      ...ctx,
+      env: { ...ctx.env, ...extraEnv }
+    })
+  });
+  return {
+    name: bashAgentTool.name,
+    label: bashAgentTool.label ?? "bash",
+    description: bashAgentTool.description,
+    // biome-ignore lint/suspicious/noExplicitAny: TypeBox schema from pi internals
+    parameters: bashAgentTool.parameters,
+    async execute(toolCallId, params, signal, onUpdate) {
+      const result = await bashAgentTool.execute(toolCallId, params, signal, onUpdate);
+      if (result?.content && Array.isArray(result.content)) {
+        result.content = result.content.map((c) => c.type === "text" && typeof c.text === "string" ? { ...c, text: redactSecrets(c.text, extraEnv) } : c);
+      }
+      return result;
+    }
+  };
+}
 var LOG_PREFIX2 = "[sandagent:pi]";
 function parseModelSpec(model) {
   const trimmed = model.trim();
@@ -1467,12 +1501,14 @@ function createPiRunner(options = {}) {
         if (resourceLoader) {
           await resourceLoader.reload();
         }
+        const customTools = options.env && Object.keys(options.env).length > 0 ? [buildEnvInjectedBashTool(cwd, options.env)] : [];
         const { session } = await createAgentSession({
           cwd,
           model,
           sessionManager,
           modelRegistry,
-          resourceLoader
+          resourceLoader,
+          customTools
         });
         if (options.systemPrompt != null && options.systemPrompt !== "") {
           const existing = session.agent.state.systemPrompt ?? "";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sandagent/runner-cli",
-  "version": "0.9.16",
+  "version": "0.9.18",
   "description": "SandAgent Runner CLI - Like gemini-cli or claude-code, runs in your local terminal with AI SDK UI streaming",
   "type": "module",
   "bin": {
@@ -54,11 +54,11 @@
     "typescript": "^5.3.0",
     "vitest": "^1.6.1",
     "@sandagent/runner-core": "0.1.1-beta.0",
-    "@sandagent/runner-codex": "0.6.2",
     "@sandagent/runner-claude": "0.6.2",
     "@sandagent/runner-gemini": "0.6.2",
     "@sandagent/runner-opencode": "0.6.2",
-    "@sandagent/runner-pi": "0.6.4-beta.0"
+    "@sandagent/runner-pi": "0.6.4-beta.0",
+    "@sandagent/runner-codex": "0.6.2"
   },
   "scripts": {
     "build": "tsc && pnpm bundle",