Function buildPiModelsJSON

pkg/workflow/pi_engine.go:130–148

buildPiModelsJSON returns a minimal Pi models.json payload that registers a single custom provider named "aw-gateway" pointing at the AWF LLM gateway sidecar. Pi's resolveConfigValue() resolves the "apiKey" value by looking up process.env[apiKey], so passing the secret env-var name (e.g. "COPILOT_G

(gatewayPort int, secretEnvVarName, modelID string)

//
// All dynamic values are marshaled via encoding/json to prevent JSON injection.
func buildPiModelsJSON(gatewayPort int, secretEnvVarName, modelID string) string {
	payload := map[string]any{
		"providers": map[string]any{
			"aw-gateway": map[string]any{
				"baseUrl": fmt.Sprintf("http://api-proxy:%d", gatewayPort),
				"api":     "openai-completions",
				"apiKey":  secretEnvVarName,
				"models":  []map[string]any{{"id": modelID}},
			},
		},
	}
	b, err := json.Marshal(payload)
	if err != nil {
		// json.Marshal only fails for non-serialisable types; our map is always
		// serialisable, so this branch is unreachable in practice.
		panic(fmt.Sprintf("BUG: buildPiModelsJSON failed to marshal JSON: %v", err))
	}
	return string(b)
}

func resolvePiGatewaySecretEnvVar(profile universalLLMBackendProfile, backend UniversalLLMBackend) string {
	if len(profile.coreSecretNames) > 0 {