Function buildAgentAuthEnv

lib/tools/docker.js:310–397

* Build auth env vars for a coding agent based on its type and config. * @param {string} agent - 'claude-code', 'pi-coding-agent', 'gemini-cli', 'codex-cli', 'opencode' * @returns {{ env: string[], backendApi: string }} Environment variable strings and resolved backend

(agent)

 * @returns {{ env: string[], backendApi: string }} Environment variable strings and resolved backend
 */
function buildAgentAuthEnv(agent) {
  const env = [];
  let backendApi = 'anthropic';

  if (agent === 'claude-code') {
    backendApi = getConfig('CODING_AGENT_CLAUDE_CODE_BACKEND') || 'anthropic';

    if (backendApi === 'anthropic') {
      // Native Anthropic auth — OAuth or API Key
      const authMode = getConfig('CODING_AGENT_CLAUDE_CODE_AUTH') || 'oauth';
      if (authMode === 'oauth') {
        const token = getConfig('CLAUDE_CODE_OAUTH_TOKEN');
        if (token) env.push(`CLAUDE_CODE_OAUTH_TOKEN=${token}`);
      } else {
        const key = getConfig('ANTHROPIC_API_KEY');
        if (key) env.push(`ANTHROPIC_API_KEY=${key}`);
      }
      const model = getConfig('CODING_AGENT_CLAUDE_CODE_MODEL');
      if (model) env.push(`LLM_MODEL=${model}`);
    } else {
      const provider = BUILTIN_PROVIDERS[backendApi];
      if (provider?.anthropicEndpoint) {
        // Native Anthropic-compatible endpoint (DeepSeek, MiniMax, Kimi, OpenRouter)
        const apiKey = getConfig(provider.credentials[0].key);
        if (apiKey) env.push(`ANTHROPIC_AUTH_TOKEN=${apiKey}`);
        env.push(`ANTHROPIC_BASE_URL=${provider.anthropicEndpoint}`);
        const model = getConfig('CODING_AGENT_CLAUDE_CODE_MODEL');
        if (model) env.push(`ANTHROPIC_MODEL=${model}`);
      } else if (provider?.litellmProxy) {
        // Builtin OpenAI-only provider → route through LiteLLM sidecar
        const apiKey = getConfig(provider.credentials[0].key);
        if (apiKey) env.push(`ANTHROPIC_AUTH_TOKEN=${apiKey}`);
        env.push(`ANTHROPIC_BASE_URL=http://litellm:4000`);
        const model = getConfig('CODING_AGENT_CLAUDE_CODE_MODEL');
        if (model) env.push(`ANTHROPIC_MODEL=${provider.litellmPrefix}/${model}`);
      } else if (!provider) {
        // Custom provider → also route through LiteLLM
        const custom = getCustomProvider(backendApi);
        if (custom) {
          env.push(`ANTHROPIC_AUTH_TOKEN=${custom.apiKey || 'not-needed'}`);
          env.push(`ANTHROPIC_BASE_URL=http://litellm:4000`);
          const model = getConfig('CODING_AGENT_CLAUDE_CODE_MODEL');
          if (model) env.push(`ANTHROPIC_MODEL=${backendApi}/${model}`);
        }
      }
    }
  } else if (agent === 'pi-coding-agent' || agent === 'opencode' || agent === 'kimi-cli') {
    // Pi, OpenCode, and Kimi share the same multi-provider auth pattern
    const configPrefix = agent === 'opencode' ? 'CODING_AGENT_OPENCODE' : agent === 'kimi-cli' ? 'CODING_AGENT_KIMI_CLI' : 'CODING_AGENT_PI';
    const provider = getConfig(`${configPrefix}_PROVIDER`) || 'anthropic';
    backendApi = provider;
    const model = getConfig(`${configPrefix}_MODEL`);
    if (model) env.push(`LLM_MODEL=${model}`);

    const builtinKeyMap = { anthropic: 'ANTHROPIC_API_KEY', openai: 'OPENAI_API_KEY', google: 'GOOGLE_API_KEY', deepseek: 'DEEPSEEK_API_KEY', minimax: 'MINIMAX_API_KEY', mistral: 'MISTRAL_API_KEY', xai: 'XAI_API_KEY', openrouter: 'OPENROUTER_API_KEY', nvidia: 'NVIDIA_API_KEY' };
    if (builtinKeyMap[provider]) {
      const key = getConfig(builtinKeyMap[provider]);
      if (key) env.push(`${builtinKeyMap[provider]}=${key}`);