Release Notes
Security
- The provider API key could be shown in the terminal: it was an ordinary redaction entry, so when the model echoed its placeholder the display path rehydrated it. Redaction entries now have a class.
rehydrate entries (secrets found in files and tool output) are restored into files and commands and shown masked in the terminal, with [redact] show_secrets_in_output = true to opt into full display. redact-only entries, the provider API key, are never restored anywhere: the terminal shows [redacted: the provider API key] and a tool call carrying the placeholder is refused. airlok redactions lists kinds and classes; --show-redactions now shows the class.
Install airlok 0.3.1
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/airlok-dev/airlok/releases/download/v0.3.1/airlok-installer.sh | sh
Install prebuilt binaries via Homebrew
brew install airlok-dev/tap/airlok
Install prebuilt binaries into your npm project
Download airlok 0.3.1