From 79fc18241df663112e4bae025f6fd0ccdc9b5f80 Mon Sep 17 00:00:00 2001 From: arkml Date: Tue, 16 Sep 2025 17:02:25 +0530 Subject: [PATCH] added flag for google api key --- apps/rowboat/app/lib/default_tools.ts | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/apps/rowboat/app/lib/default_tools.ts b/apps/rowboat/app/lib/default_tools.ts index 8e9d76bd..7a55dbbe 100644 --- a/apps/rowboat/app/lib/default_tools.ts +++ b/apps/rowboat/app/lib/default_tools.ts @@ -6,9 +6,11 @@ import { z } from 'zod'; // Note: avoid importing WorkflowTool here to prevent circular deps. // Return a structurally compatible object instead. export function getDefaultTools(): Array { - // Always expose built-in library tools in the editor so users can - // discover them. Runtime invocation will still validate required - // environment variables and return an error if missing. + // Show built-in tools only when a public, non-secret flag is set. + // Avoids exposing real secrets in client bundles. + const hasGoogleKeyFlag = (process.env.NEXT_PUBLIC_HAS_GOOGLE_API_KEY || '').toLowerCase() === 'true'; + + if (!hasGoogleKeyFlag) return []; return [ {