fix: prove Linux Agent sandbox boundary

hub/src/feishu/trigger.ts

@@ -35,6 +35,7 @@ import { acquireLock, currentLockRunId, releaseLock } from "../lock.js";
 import { createPermissionAuthorizer, type AuthorizationDecision, type PermissionAuthorizer } from "../permission.js";
 import { writeAudit } from "../audit.js";
 import { formatRunCostLine } from "../agent/cost.js";
+import { createAgentSdkStderrSink } from "../agent/diagnostics.js";
 import { StreamingAgentCard } from "./card/streaming-card.js";
 import { createFileDeliveryMcpServer } from "./fileDeliveryTool.js";
 import { readFeishuContext } from "./read.js";
@@ -331,6 +332,12 @@ export function makeTriggerHandler(deps: TriggerDeps): TriggerHandler {
     // stop the SDK query. Cleared in the finally below.
     const abortController = new AbortController();
     activeRuns.set(run.id, abortController);
+    const sdkStderr = createAgentSdkStderrSink({
+      logger: deps.logger,
+      runId: run.id,
+      projectId,
+      sensitiveValues: Object.values(provider.sdkEnv),
+    });
     runAgent({
       prompt: promptForAgent,
       model,
@@ -345,6 +352,7 @@ export function makeTriggerHandler(deps: TriggerDeps): TriggerHandler {
       sessionId: session.id,
       prisma: deps.prisma,
       abortController,
+      onSdkStderr: sdkStderr.write,
       onStream: (event) => {
         switch (event.type) {
           case "text-delta":
@@ -433,6 +441,7 @@ export function makeTriggerHandler(deps: TriggerDeps): TriggerHandler {
         await writeAudit(deps.prisma, { runId: run.id, projectId, action: "run.failed", metadata: { error: String(e) } });
       })
       .finally(async () => {
+        sdkStderr.flush();
         try {
           await releaseLock(deps.prisma, run.id);
         } catch (e) {