safepropel 1.4.3 → 1.4.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "safepropel",
-  "version": "1.4.3",
+  "version": "1.4.4",
   "description": "SafePropel Framework - Hybrid Security Model: Encrypted Workflows + Transparent Rules & Templates with Dynamic Loading",
   "main": "engine/workflow-executor.js",
   "scripts": {

package/safepropel.js

@@ -234,8 +234,9 @@ function main() {
     // Get the constructed prompt for Cascade execution
     const constructedPrompt = executor.getLastPrompt();
     
-    // Security validation: Only expose prompt to Cascade IDE
-    const isAuthorizedCascade = cascadeInternal && isRunningFromCascade();
+    // Security validation: --cascade-internal flag is sufficient
+    // Only Cascade IDE should use this internal flag
+    const isAuthorizedCascade = cascadeInternal;
     
     // JSON output mode - output structured data for Cascade to parse
     if (jsonOutput) {
@@ -263,7 +264,7 @@ function main() {
         // Unauthorized access attempt - do not expose workflow
         jsonResult._security = {
           prompt_access: 'denied',
-          reason: 'Requires --cascade-internal flag and must be called from Cascade IDE',
+          reason: 'Requires --cascade-internal flag (internal use only)',
           message: 'Workflow content is confidential and protected'
         };
       }
@@ -300,7 +301,7 @@ function main() {
       console.log('='.repeat(80));
     } else if (constructedPrompt) {
       console.log(`\n🔒 Workflow content is confidential and protected`);
-      console.log(`   Execution requires --cascade-internal flag and authorized IDE`);
+      console.log(`   Use --cascade-internal flag for Cascade IDE execution`);
     }
     
     // Clean up any workflow-output.json files (security measure)