feat(secrets): let workspace secrets opt out of redaction

Author: icecrasher321

apps/docs/openapi-v2-resources.json

@@ -5607,6 +5607,10 @@
             ],
             "description": "What the secret is for, as set on the workspace secret. Always null for a personal secret, which has no shared audience."
           },
+          "unredacted": {
+            "type": "boolean",
+            "description": "Whether the workspace secret opts out of redaction, so its value appears in plaintext in run logs and model-visible content. Always false for a personal secret."
+          },
           "role": {
             "type": "string",
             "enum": ["admin", "member"],
@@ -5625,7 +5629,15 @@
             "description": "ISO 8601 timestamp when the secret was last updated."
           }
         },
-        "required": ["name", "scope", "description", "role", "createdAt", "updatedAt"],
+        "required": [
+          "name",
+          "scope",
+          "description",
+          "unredacted",
+          "role",
+          "createdAt",
+          "updatedAt"
+        ],
         "additionalProperties": false,
         "title": "Secret metadata",
         "description": "Public secret metadata without the stored secret value."
@@ -5663,6 +5675,7 @@
                 "name": "STRIPE_API_KEY",
                 "scope": "workspace",
                 "description": "Production billing key — rotate quarterly.",
+                "unredacted": false,
                 "role": "admin",
                 "createdAt": "2026-06-01T09:14:00.000Z",
                 "updatedAt": "2026-06-20T14:02:11.000Z"
@@ -5690,6 +5703,7 @@
               "name": "STRIPE_API_KEY",
               "scope": "workspace",
               "description": "Production billing key — rotate quarterly.",
+              "unredacted": false,
               "role": "admin",
               "createdAt": "2026-06-01T09:14:00.000Z",
               "updatedAt": "2026-06-20T14:02:11.000Z"
@@ -5729,6 +5743,10 @@
                 "type": "null"
               }
             ]
+          },
+          "unredacted": {
+            "description": "Opt the workspace secret out of redaction: its value then appears in plaintext in run logs, model-visible content, and files, including publicly shared log links. Workspace scope only — sending it for a personal secret is rejected. Omit it to leave the current setting untouched.",
+            "type": "boolean"
           }
         },
         "required": ["workspaceId", "scope", "value"],

apps/sim/app/api/function/execute/route.test.ts

@@ -865,6 +865,114 @@ describe('Function Execute API Route', () => {
       )
     })
 
+    it('classifies exports exact-empty when the only compiled secret is exempt, still reporting its name', async () => {
+      envFlagsMock.isRemoteSandboxEnabled = true
+      mockExecuteInSandbox.mockResolvedValueOnce({
+        result: 'done',
+        stdout: '',
+        sandboxId: 'sandbox-123',
+        exportedFiles: {
+          '/home/user/secret.txt': 'Bearer secret-value',
+          '/home/user/small.jpg': '/9j/4AAQ',
+        },
+      })
+
+      const response = await POST(
+        createMockRequest(
+          'POST',
+          {
+            code: 'print("{{API_KEY}}")',
+            language: 'python',
+            workspaceId: 'workspace-1',
+            envVars: { API_KEY: 'secret-value' },
+            unredactedSecretNames: ['API_KEY'],
+            outputs: {
+              files: [
+                {
+                  path: 'files/secret.txt',
+                  sandboxPath: '/home/user/secret.txt',
+                  mimeType: 'text/plain',
+                },
+                {
+                  path: 'files/small.jpg',
+                  sandboxPath: '/home/user/small.jpg',
+                  mimeType: 'image/jpeg',
+                },
+              ],
+            },
+          },
+          {
+            'x-sim-request-private-tool-metadata': 'resolved-secret-names-durable-files-v2',
+          }
+        )
+      )
+      const data = await response.json()
+
+      expect(response.status).toBe(200)
+      // The text export carries the exempt plaintext yet records no entry for it.
+      expect(mockWriteWorkspaceFileByPath).toHaveBeenCalledWith(
+        expect.objectContaining({
+          target: expect.objectContaining({ path: 'files/secret.txt' }),
+          secretProvenance: { status: 'exact', entries: [] },
+        })
+      )
+      // With only exempt material in scope the binary export must not lock as unknown.
+      expect(mockWriteWorkspaceFileByPath).toHaveBeenCalledWith(
+        expect.objectContaining({
+          target: expect.objectContaining({ path: 'files/small.jpg' }),
+          secretProvenance: { status: 'exact', entries: [] },
+        })
+      )
+      // The exemption changes file classification only — the usage trail still sees the name.
+      expect(data.__resolvedSecretNames).toEqual(['API_KEY'])
+    })
+
+    it('keeps recording the non-exempt owner when an exempt name shares its plaintext', async () => {
+      envFlagsMock.isRemoteSandboxEnabled = true
+      mockExecuteInSandbox.mockResolvedValueOnce({
+        result: 'done',
+        stdout: '',
+        sandboxId: 'sandbox-123',
+        exportedFiles: { '/home/user/secret.txt': 'Bearer shared-value' },
+      })
+
+      const response = await POST(
+        createMockRequest('POST', {
+          code: 'print("{{EXEMPT_KEY}}", "{{OTHER_KEY}}")',
+          language: 'python',
+          workspaceId: 'workspace-1',
+          envVars: { EXEMPT_KEY: 'shared-value', OTHER_KEY: 'shared-value' },
+          unredactedSecretNames: ['EXEMPT_KEY'],
+          outputs: {
+            files: [
+              {
+                path: 'files/secret.txt',
+                sandboxPath: '/home/user/secret.txt',
+                mimeType: 'text/plain',
+              },
+            ],
+          },
+        })
+      )
+
+      expect(response.status).toBe(200)
+      expect(mockWriteWorkspaceFileByPath).toHaveBeenCalledWith(
+        expect.objectContaining({
+          secretProvenance: {
+            status: 'exact',
+            entries: [
+              {
+                name: 'OTHER_KEY',
+                encryptedValue: 'encrypted:shared-value',
+                sourceUserId: 'user-123',
+                sourceWorkspaceId: 'workspace-1',
+              },
+            ],
+          },
+        })
+      )
+    })
+
     it('classifies text exports against private mounted-file provenance', async () => {
       envFlagsMock.isRemoteSandboxEnabled = true
       mockExecuteInSandbox.mockResolvedValueOnce({

apps/sim/app/api/function/execute/route.ts

@@ -991,6 +991,13 @@ interface FunctionRouteExecutionContext {
   outputSecretMatcher?: ResolvedSecretMatcher
   outputSecretNamesByScanLiteral: Map<string, string[]>
   outputSecretPlaintextsByName: Map<string, string>
+  /**
+   * In-scope names the caller's registry certified as redaction-exempt. They stay in
+   * `outputSecretPlaintextsByName` — the response's resolved-name reporting and the usage
+   * trail must not lose them — but contribute no scan literals, so exported files carrying
+   * only their values classify exact-empty instead of locking.
+   */
+  unredactedSecretNames: Set<string>
   mountedFileSecretProvenanceScanner?: MountedFileSecretProvenanceScanner
 }
 
@@ -1191,13 +1198,23 @@ function activateReferencedSecretProvenance(context: FunctionRouteExecutionConte
   }
 }
 
+/** Compiled secret names that still demand redaction — the exempt ones don't count. */
+function countProtectedOutputSecretNames(context: FunctionRouteExecutionContext): number {
+  let count = 0
+  for (const name of context.outputSecretPlaintextsByName.keys()) {
+    if (!context.unredactedSecretNames.has(name)) count += 1
+  }
+  return count
+}
+
 /**
  * True when this execution compiled a secret placeholder or received a mounted file with verified
  * secret provenance. Ordinary mounts without a provenance envelope are user data, not evidence that
- * a Sim secret was resolved in this call.
+ * a Sim secret was resolved in this call. Exempt names don't count: a binary export whose only
+ * in-scope secrets are redaction-exempt is deliberately classified exact-empty rather than locked.
  */
 function hasSecretMaterialInScope(context: FunctionRouteExecutionContext): boolean {
-  if (context.outputSecretPlaintextsByName.size > 0) return true
+  if (countProtectedOutputSecretNames(context) > 0) return true
   return context.mountedFileSecretProvenanceScanner?.hasSecrets ?? false
 }
 
@@ -1225,7 +1242,7 @@ async function getOutputFileSecretProvenance(
     status: 'exact' as const,
     entries: [],
   }
-  if (context.outputSecretPlaintextsByName.size === 0) {
+  if (countProtectedOutputSecretNames(context) === 0) {
     return mountedFileProvenance
   }
   if (!context.outputSecretMatcher) return { status: 'unknown' }
@@ -1914,6 +1931,7 @@ export const POST = withRouteHandler(async (req: NextRequest) => {
       envVars: rawEnvVars = {},
       secretScope,
       mountedSecrets,
+      unredactedSecretNames = [],
       sandboxId: selectedSandboxId,
       blockData = {},
       blockNameMapping = {},
@@ -2035,6 +2053,9 @@ export const POST = withRouteHandler(async (req: NextRequest) => {
       privateResolvedSecretNamesMetadataType,
       outputSecretNamesByScanLiteral: new Map(),
       outputSecretPlaintextsByName: new Map(),
+      unredactedSecretNames: new Set(
+        unredactedSecretNames.filter((name) => Object.hasOwn(envVars, name))
+      ),
       mountedFileSecretProvenanceScanner,
     }
 
@@ -2069,6 +2090,12 @@ export const POST = withRouteHandler(async (req: NextRequest) => {
       const plaintext = envVars[name]
       if (!plaintext) continue
       routeContext.outputSecretPlaintextsByName.set(name, plaintext)
+      /**
+       * Skipped per NAME, never per literal: a plaintext shared by an exempt and a non-exempt
+       * name keeps its literal through the non-exempt owner, so the export still records that
+       * owner's provenance and the file still locks.
+       */
+      if (routeContext.unredactedSecretNames.has(name)) continue
       const scanLiterals = new Set([plaintext, JSON.stringify(plaintext).slice(1, -1)])
       for (const scanLiteral of scanLiterals) {
         const names = routeContext.outputSecretNamesByScanLiteral.get(scanLiteral) ?? []

apps/sim/app/api/v2/secrets/utils.ts

@@ -14,6 +14,7 @@ export function toV2Secret(row: VisibleWorkspaceCredential, userId: string): V2S
     name: row.envKey,
     scope: row.type === 'env_workspace' ? 'workspace' : 'personal',
     description: row.type === 'env_workspace' ? row.description : null,
+    unredacted: row.type === 'env_workspace' ? row.unredacted : false,
     role: row.role,
     createdAt: row.createdAt.toISOString(),
     updatedAt: row.updatedAt.toISOString(),

apps/sim/app/workspace/[workspaceId]/components/credential-detail/hooks/use-credential-detail-form.ts

@@ -56,15 +56,17 @@ export function useCredentialDetailForm({
 
   const [displayNameDraft, setDisplayNameDraft] = useState('')
   const [descriptionDraft, setDescriptionDraft] = useState('')
+  const [unredactedDraft, setUnredactedDraft] = useState(false)
   const [seededCredentialId, setSeededCredentialId] = useState<string | null>(null)
 
   // Seed drafts when the credential first resolves (or the route id changes); a
   // background refetch of the same credential must not clobber an in-progress
   // edit — Discard is the one way to reset.
-  /** Applies a credential to both drafts — the one definition of "reset to server state". */
+  /** Applies a credential to every draft — the one definition of "reset to server state". */
   const seedDrafts = useCallback((source: WorkspaceCredential) => {
     setDisplayNameDraft(source.displayName)
     setDescriptionDraft(source.description ?? '')
+    setUnredactedDraft(source.unredacted)
   }, [])
 
   if (credential && credential.id !== seededCredentialId) {
@@ -76,7 +78,8 @@ export function useCredentialDetailForm({
   const isDescriptionDirty = credential
     ? descriptionDraft !== (credential.description || '')
     : false
-  const isMetadataDirty = isDisplayNameDirty || isDescriptionDirty
+  const isUnredactedDirty = credential ? unredactedDraft !== credential.unredacted : false
+  const isMetadataDirty = isDisplayNameDirty || isDescriptionDirty || isUnredactedDirty
   const isSectionDirty = section?.isDirty ?? false
   const isDirty = isMetadataDirty || isSectionDirty
   const isSaving = updateCredential.isPending || (section?.isSaving ?? false)
@@ -93,6 +96,7 @@ export function useCredentialDetailForm({
         credentialId: credential.id,
         ...(isDisplayNameDirty ? { displayName: displayNameDraft.trim() } : {}),
         ...(isDescriptionDirty ? { description: descriptionDraft.trim() || null } : {}),
+        ...(isUnredactedDirty ? { unredacted: unredactedDraft } : {}),
       })
       if (isDisplayNameDirty) setDisplayNameDraft((value) => value.trim())
       if (isDescriptionDirty) setDescriptionDraft((value) => value.trim())
@@ -111,8 +115,10 @@ export function useCredentialDetailForm({
     section,
     isDisplayNameDirty,
     isDescriptionDirty,
+    isUnredactedDirty,
     displayNameDraft,
     descriptionDraft,
+    unredactedDraft,
     updateCredential.mutateAsync,
   ])
 
@@ -126,6 +132,8 @@ export function useCredentialDetailForm({
     setDisplayNameDraft,
     descriptionDraft,
     setDescriptionDraft,
+    unredactedDraft,
+    setUnredactedDraft,
     isDirty,
     save,
     discard,

apps/sim/app/workspace/[workspaceId]/settings/secrets/[credentialId]/secret-detail.tsx

@@ -1,7 +1,15 @@
 'use client'
 
 import { useState } from 'react'
-import { Chip, ChipCopyInput, ChipLink, ChipModalTabs, ChipTextarea } from '@sim/emcn'
+import {
+  Chip,
+  ChipCopyInput,
+  ChipLink,
+  ChipModalTabs,
+  ChipTextarea,
+  Label,
+  Switch,
+} from '@sim/emcn'
 import { ArrowLeft, Clock, Key, Send } from '@sim/emcn/icons'
 import { useQueryState } from 'nuqs'
 import { SaveDiscardChips } from '@/components/settings/save-discard-actions'
@@ -246,6 +254,27 @@ export function SecretDetail({ workspaceId, credentialId }: SecretDetailProps) {
           />
         </DetailSection>
 
+        {!isPersonal && (
+          <DetailSection title='Visibility'>
+            <div className='flex items-center justify-between'>
+              <div className='flex flex-col gap-1'>
+                <Label htmlFor='secret-unredacted'>Show value in logs and Chat</Label>
+                <p className='text-[var(--text-muted)] text-caption'>
+                  {
+                    'The value is visible to anyone who can see this workspace’s runs, including shared log links.'
+                  }
+                </p>
+              </div>
+              <Switch
+                id='secret-unredacted'
+                checked={form.unredactedDraft}
+                onCheckedChange={form.setUnredactedDraft}
+                disabled={!isWorkspaceSecretAdmin}
+              />
+            </div>
+          </DetailSection>
+        )}
+
         {!isPersonal && (
           <DetailSection title='Description'>
             <ChipTextarea

apps/sim/background/webhook-execution.ts

@@ -825,6 +825,7 @@ async function executeWebhookJobInternal(
               workspaceDecrypted: secretEnvironment.workspaceDecrypted,
               decryptionFailures: secretEnvironment.decryptionFailures,
               personalOwners: secretEnvironment.personalOwners,
+              workspaceUnredactedKeys: secretEnvironment.workspaceUnredactedKeys,
               scope: secretScope,
             })
           } catch (error) {

apps/sim/executor/handlers/function/function-handler.ts

@@ -77,13 +77,16 @@ export class FunctionBlockHandler implements BlockHandler {
             mountedSecrets: inputs.mountedSecrets,
           })
 
+    const unredactedSecretNames = ctx.resolvedSecretTraceRegistry?.getUnredactedSecretNames() ?? []
+
     const toolParams = {
       code: codeContent,
       ...(sourceCode ? { sourceCode } : {}),
       language: inputs.language || DEFAULT_CODE_LANGUAGE,
       timeout,
       ...(inputs.sandboxId ? { sandboxId: inputs.sandboxId } : {}),
       ...(secretMountPolicy ?? {}),
+      ...(unredactedSecretNames.length > 0 ? { unredactedSecretNames } : {}),
       envVars: normalizeStringRecord(ctx.environmentVariables),
       workflowVariables: normalizeWorkflowVariables(ctx.workflowVariables),
       blockData: {},

apps/sim/executor/handlers/workflow/workflow-handler.ts

@@ -505,6 +505,7 @@ export class WorkflowBlockHandler implements BlockHandler {
           workspaceDecrypted: ownerEnv.workspaceDecrypted,
           decryptionFailures: ownerEnv.decryptionFailures,
           personalOwners: ownerEnv.personalOwners,
+          workspaceUnredactedKeys: ownerEnv.workspaceUnredactedKeys,
           scope: { userId: loadUserId, workspaceId: sourceWorkspaceId },
         })
         if (ctx.resolvedSecretTraceRegistry) {