fix: hide only each implementation's own provider variables from commands

Co-Authored-By: Claude <svc-devxp-claude@slack-corp.com>

Author: zimeg

claude-agent-sdk/agent/workspace.py

@@ -9,7 +9,7 @@
 # Environment variables kept from the app's environment are everything except
 # the app's own tokens and anything that looks like a credential, so they aren't
 # passed to a command from the repository.
-SECRET_PREFIXES = ("ANTHROPIC_", "OPENAI_", "SLACK_")
+SECRET_PREFIXES = ("ANTHROPIC_", "SLACK_")
 SECRET_MARKERS = ("API_KEY", "CREDENTIAL", "PASSWORD", "PRIVATE_KEY", "SECRET", "TOKEN")
 
 # git never waits on a prompt or an editor, since nobody can answer one.

openai-agents-sdk/agent/workspace.py

@@ -9,7 +9,7 @@
 # Environment variables kept from the app's environment are everything except
 # the app's own tokens and anything that looks like a credential, so they aren't
 # passed to a command from the repository.
-SECRET_PREFIXES = ("ANTHROPIC_", "OPENAI_", "SLACK_")
+SECRET_PREFIXES = ("OPENAI_", "SLACK_")
 SECRET_MARKERS = ("API_KEY", "CREDENTIAL", "PASSWORD", "PRIVATE_KEY", "SECRET", "TOKEN")
 
 # git never waits on a prompt or an editor, since nobody can answer one.