Clarify credential inspection and protect request privacy

This commit is contained in:
2026-11-05 14:28:45 +00:00
parent ada5377f32
commit 59e8010623
7 changed files with 69 additions and 16 deletions

View File

@@ -312,8 +312,8 @@ func (e *Engine) InspectPrompt(
// override. BackendID is empty for an endpoint-only profile.
//
// APIKeyEnv in the returned target is an environment-variable name, never its
// value. APIKeyRequired instead reports a direct credential requirement and is
// mutually exclusive with a nonblank APIKeyEnv. InspectProfile neither derives
// value. APIKeyRequired reports that a credential is required; an explicit
// profile environment source can also be present. InspectProfile neither derives
// an ID from a prompt default_profile nor checks credential availability, so an
// absent or blank named environment variable is not an error.
//