secrets • AI Agent SDK

First-class secret references for credential fields (Issue #3102).

secrets

First-class secret references for credential fields (Issue #3102).

Provides a lightweight, protocol-first contract so that any credential field (bot token, Slack app token, WhatsApp verify token, API keys) can be sourced from an environment variable, a mounted secret file, or a command / secret manager — instead of being committed as plaintext or exposed as a process-wide environment variable.

Design goals (kept deliberately lightweight — stdlib only, no heavy imports):

• `SecretRef` — a typed, immutable reference describing where a secret lives.
• `SecretInput — str | SecretRef | dict so plaintext and ${ENV}` stay
• fully backward compatible; the reference form is purely additive.
• `SecretResolver` — a pluggable protocol; the built-in resolver handles the
• `env / file / exec` sources with the stdlib alone.
• `register_secret_for_redaction / redact_secrets` — a process-wide
• registry so resolved secret values can be scrubbed from logs and errors.

The wrapper (`praisonai`) and channel adapters may register additional resolvers (e.g. a Vault / AWS / GCP secret-manager resolver) without importing anything heavy into core.

Import

from praisonaiagents import secrets

Classes

Functions

Constants