feat: secure organization provider credentials

2026-07-10 22:04:43 +08:00
parent e049cb6880
commit 848f913597
51 changed files with 3280 additions and 230 deletions
@@ -56,7 +56,8 @@ export interface RunRequest {
  readonly model: string | undefined;
  readonly project: ProjectContext;
  readonly systemPrompt: string | undefined;
-  readonly providerEnv?: Record<string, string | undefined> | undefined;
+  /** Run-scoped loopback proxy capability; never an Organization provider credential. */
+  readonly providerProxyEnv?: Record<string, string | undefined> | undefined;
  readonly resumeSessionId?: string | undefined;
  /**
   * RoleEntry.tools from admin/runtime settings. Values are Hub role tool ids
@@ -125,7 +126,7 @@ export async function runAgent(req: RunRequest): Promise<RunResult> {
    const security = await createAgentSecurityPolicy({
      workspaceRoot,
      workspaceDir: req.project.workspaceDir,
-      providerEnv: req.providerEnv,
+      providerProxyEnv: req.providerProxyEnv,
    });

    type QueryOptions = NonNullable<Parameters<typeof query>[0]["options"]>;