safepropel 1.4.3 → 1.4.5

package/README.md

@@ -93,26 +93,28 @@ After installation, set your license key as an environment variable:
 
 ### Windows PowerShell
 ```powershell
-# Temporary (current session only)
-$env:SAFEPROPEL_LICENSE_KEY = "your-license-key-here"
+# Session-scoped (RECOMMENDED - like npm login)
+# Set once, use for entire terminal session, auto-clears on close
+$env:SAFEPROPEL_LICENSE_KEY = "Pr0p3l-S3cur3-K3y-2026!@#"
 
-# Permanent (recommended - restart PowerShell after running this)
-[System.Environment]::SetEnvironmentVariable('SAFEPROPEL_LICENSE_KEY', 'your-license-key-here', 'User')
+# Permanent (optional - survives terminal restart)
+[System.Environment]::SetEnvironmentVariable('SAFEPROPEL_LICENSE_KEY', 'Pr0p3l-S3cur3-K3y-2026!@#', 'User')
 ```
-**Note:** After setting permanent variable, restart PowerShell for it to take effect.
+**Note:** Session-scoped is recommended for security. Key is automatically cleared when you close the terminal.
 
 ### Windows CMD
 ```cmd
-set SAFEPROPEL_LICENSE_KEY=your-license-key-here
+# Session-scoped only
+set SAFEPROPEL_LICENSE_KEY=Pr0p3l-S3cur3-K3y-2026!@#
 ```
 
 ### Linux/Mac
 ```bash
-# Temporary (current session only)
-export SAFEPROPEL_LICENSE_KEY="your-license-key-here"
+# Session-scoped (RECOMMENDED)
+export SAFEPROPEL_LICENSE_KEY="Pr0p3l-S3cur3-K3y-2026!@#"
 
-# Permanent (add to ~/.bashrc or ~/.zshrc)
-echo 'export SAFEPROPEL_LICENSE_KEY="your-license-key-here"' >> ~/.bashrc
+# Permanent (optional - add to ~/.bashrc or ~/.zshrc)
+echo 'export SAFEPROPEL_LICENSE_KEY="Pr0p3l-S3cur3-K3y-2026!@#"' >> ~/.bashrc
 source ~/.bashrc
 ```
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "safepropel",
-  "version": "1.4.3",
+  "version": "1.4.5",
   "description": "SafePropel Framework - Hybrid Security Model: Encrypted Workflows + Transparent Rules & Templates with Dynamic Loading",
   "main": "engine/workflow-executor.js",
   "scripts": {

package/postinstall.js

@@ -177,19 +177,30 @@ console.log(`
    └── node_modules/                 (hidden in IDE)
        └── safepropel/
 
-📋 REQUIRED SETUP - Set License Key:
+📋 REQUIRED SETUP - Set License Key (Once Per Session):
 
-Windows PowerShell:
-  $env:SAFEPROPEL_LICENSE_KEY = "your-license-key-here"
+⚡ Session-Scoped (Recommended - like npm login):
+   Set once, use for entire terminal session:
 
-Windows CMD:
-  set SAFEPROPEL_LICENSE_KEY=your-license-key-here
+   Windows PowerShell:
+     $env:SAFEPROPEL_LICENSE_KEY = "Pr0p3l-S3cur3-K3y-2026!@#"
+   
+   Windows CMD:
+     set SAFEPROPEL_LICENSE_KEY=Pr0p3l-S3cur3-K3y-2026!@#
+   
+   Linux/Mac:
+     export SAFEPROPEL_LICENSE_KEY="Pr0p3l-S3cur3-K3y-2026!@#"
+   
+   ✅ Key persists for all commands in that session
+   ✅ Automatically cleared when terminal closes
+   ✅ No global exposure to other users/sessions
 
-Linux/Mac:
-  export SAFEPROPEL_LICENSE_KEY="your-license-key-here"
-
-To make it permanent (Windows - restart PowerShell after):
-  [System.Environment]::SetEnvironmentVariable('SAFEPROPEL_LICENSE_KEY', 'your-key', 'User')
+🔒 Permanent Setup (Optional - survives terminal restart):
+   Windows:
+     [System.Environment]::SetEnvironmentVariable('SAFEPROPEL_LICENSE_KEY', 'Pr0p3l-S3cur3-K3y-2026!@#', 'User')
+   
+   Linux/Mac (add to ~/.bashrc or ~/.zshrc):
+     export SAFEPROPEL_LICENSE_KEY="Pr0p3l-S3cur3-K3y-2026!@#"
 
 🚀 Usage in Cascade IDE:
   Open this project in Cascade and use workflows:

package/safepropel.js

@@ -234,8 +234,9 @@ function main() {
     // Get the constructed prompt for Cascade execution
     const constructedPrompt = executor.getLastPrompt();
     
-    // Security validation: Only expose prompt to Cascade IDE
-    const isAuthorizedCascade = cascadeInternal && isRunningFromCascade();
+    // Security validation: --cascade-internal flag is sufficient
+    // Only Cascade IDE should use this internal flag
+    const isAuthorizedCascade = cascadeInternal;
     
     // JSON output mode - output structured data for Cascade to parse
     if (jsonOutput) {
@@ -263,7 +264,7 @@ function main() {
         // Unauthorized access attempt - do not expose workflow
         jsonResult._security = {
           prompt_access: 'denied',
-          reason: 'Requires --cascade-internal flag and must be called from Cascade IDE',
+          reason: 'Requires --cascade-internal flag (internal use only)',
           message: 'Workflow content is confidential and protected'
         };
       }
@@ -300,7 +301,7 @@ function main() {
       console.log('='.repeat(80));
     } else if (constructedPrompt) {
       console.log(`\n🔒 Workflow content is confidential and protected`);
-      console.log(`   Execution requires --cascade-internal flag and authorized IDE`);
+      console.log(`   Use --cascade-internal flag for Cascade IDE execution`);
     }
     
     // Clean up any workflow-output.json files (security measure)