fix: sync src schema excludeEnv with docs copy

lpcox · Copilot · lpcox · commit 7354af7ded79 · 2026-05-21T13:57:15.000-07:00
PR #3550 updated docs/awf-config.schema.json but missed src/ copy. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
diff --git a/src/awf-config-schema.json b/src/awf-config-schema.json
@@ -351,7 +351,7 @@
           "items": {
             "type": "string"
           },
-          "description": "Environment variable names to exclude when envAll is true."
+          "description": "Environment variable names to exclude when envAll is true. IMPORTANT: Excluding LLM API keys (OPENAI_API_KEY, ANTHROPIC_API_KEY, etc.) without setting apiProxy.enabled=true will cause agent authentication failures. Use apiProxy.enabled=true for credential isolation instead of manual exclusion."
         }
       }
     },

Original file line number	Diff line number	Diff line change
`@@ -351,7 +351,7 @@`
`351`	`351`	`"items": {`
`352`	`352`	`"type": "string"`
`353`	`353`	`},`
`354`		`- "description": "Environment variable names to exclude when envAll is true."`
	`354`	`+ "description": "Environment variable names to exclude when envAll is true. IMPORTANT: Excluding LLM API keys (OPENAI_API_KEY, ANTHROPIC_API_KEY, etc.) without setting apiProxy.enabled=true will cause agent authentication failures. Use apiProxy.enabled=true for credential isolation instead of manual exclusion."`
`355`	`355`	`}`
`356`	`356`	`}`
`357`	`357`	`},`