mirror of
https://github.com/JackChen-me/open-multi-agent.git
synced 2026-10-22 11:02:59 -05:00
Add AgentConfig.credentials, a per-agent secret bag threaded into ToolUseContext.credentials. Tool code reads context.credentials?.KEY instead of closing a shared secret over every tool, so each agent holds only the credentials it was assigned; a compromised subagent can't reach another agent's secrets. Per-agent bags flow through the existing config spread, so no orchestrator changes are needed, and the coordinator (built field-by-field) never receives user tool secrets. Addresses the credential-scoping half of #19. Per-call risk gating stays tracked in #96.