v2.2.1

shipit-agent 2.2.1

A security and reliability patch. Upgrading is recommended for anyone running agents with shell or code tools.

Security

• Shell and code tools no longer see host secrets. bash (including background jobs) and run_code used to inherit the full process environment, so any secret loaded into it (API keys, database passwords, SECRET_KEY) was one printenv away from the model. They now run with a minimal environment: path, home, locale, terminal and temp folders only.

Changed

• Behaviour change: commands no longer see host variables outside that list. To pass some through, use the new options on BashTool and CodeExecutionTool: env_allowlist=["NAME"], extra_env={...}, or inherit_env=True to restore the old behaviour.

Fixed

• File writes typed as text now happen. A model that wrote its file call as text ({"path": ..., "content": ...}) matched several file tools and was dropped, so the agent said it had written a file it never wrote. The tool that declares every key now wins.

Full details in CHANGELOG.md.

What's Changed

• fix(healing): pick the tool that declares every key on a tie by @iamrraj in #37
• fix(security): scrub host env from bash and run_code subprocesses by @iamrraj in #38
• chore(release): 2.2.1 by @iamrraj in #41

Full Changelog: v2.2.0...v2.2.1