From f9a3654167f473d5894ac1a3b7f5a79d40fdc196 Mon Sep 17 00:00:00 2001
From: claude-code-best <claude-code-best@proton.me>
Date: Thu, 11 Jun 2026 15:13:02 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E8=A1=A5=E5=85=85=20SAFE=5FENV=5FVARS?=
 =?UTF-8?q?=20=E4=B8=AD=E7=BC=BA=E5=A4=B1=E7=9A=84=20OpenAI/Gemini/Grok=20?=
 =?UTF-8?q?provider=20=E7=8E=AF=E5=A2=83=E5=8F=98=E9=87=8F?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

项目级 settings.local.json 的 env 字段在 trust dialog 之前只有
SAFE_ENV_VARS 白名单中的变量会被应用到 process.env。
OPENAI_API_KEY、OPENAI_BASE_URL 等关键变量不在白名单中，
导致容器中通过 settings.local.json 配置 OpenAI 协议时认证失败。
---
 src/utils/managedEnvConstants.ts | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/src/utils/managedEnvConstants.ts b/src/utils/managedEnvConstants.ts
index 2dcb71969..3ca14ece0 100644
--- a/src/utils/managedEnvConstants.ts
+++ b/src/utils/managedEnvConstants.ts
@@ -163,6 +163,9 @@ export const SAFE_ENV_VARS = new Set([
   'ANTHROPIC_DEFAULT_SONNET_MODEL_NAME',
   'ANTHROPIC_DEFAULT_SONNET_MODEL_SUPPORTED_CAPABILITIES',
   // OpenAI provider specific
+  'OPENAI_API_KEY',
+  'OPENAI_AUTH_MODE',
+  'OPENAI_BASE_URL',
   'OPENAI_DEFAULT_HAIKU_MODEL',
   'OPENAI_DEFAULT_HAIKU_MODEL_DESCRIPTION',
   'OPENAI_DEFAULT_HAIKU_MODEL_NAME',
@@ -175,6 +178,21 @@ export const SAFE_ENV_VARS = new Set([
   'OPENAI_DEFAULT_SONNET_MODEL_DESCRIPTION',
   'OPENAI_DEFAULT_SONNET_MODEL_NAME',
   'OPENAI_DEFAULT_SONNET_MODEL_SUPPORTED_CAPABILITIES',
+  'OPENAI_ENABLE_THINKING',
+  'OPENAI_MAX_TOKENS',
+  'OPENAI_MODEL',
+  'OPENAI_ORG_ID',
+  'OPENAI_PROJECT_ID',
+  'OPENAI_SMALL_FAST_MODEL',
+  // Grok provider specific
+  'GROK_API_KEY',
+  'GROK_BASE_URL',
+  'GROK_DEFAULT_HAIKU_MODEL',
+  'GROK_DEFAULT_OPUS_MODEL',
+  'GROK_DEFAULT_SONNET_MODEL',
+  'GROK_MODEL',
+  'GROK_MODEL_MAP',
+  'XAI_API_KEY',
   'ANTHROPIC_FOUNDRY_API_KEY',
   'ANTHROPIC_MODEL',
   'ANTHROPIC_SMALL_FAST_MODEL_AWS_REGION',
@@ -201,7 +219,11 @@ export const SAFE_ENV_VARS = new Set([
   'CLAUDE_CODE_USE_BEDROCK',
   'CLAUDE_CODE_USE_FOUNDRY',
   'CLAUDE_CODE_USE_GEMINI',
+  'CLAUDE_CODE_USE_GROK',
+  'CLAUDE_CODE_USE_OPENAI',
   'CLAUDE_CODE_USE_VERTEX',
+  'GEMINI_API_KEY',
+  'GEMINI_BASE_URL',
   'GEMINI_MODEL',
   'GEMINI_SMALL_FAST_MODEL',
   'GEMINI_DEFAULT_HAIKU_MODEL',