From 4a32defdcccf2915f20e3bad0b4cba6cb175434e Mon Sep 17 00:00:00 2001
From: Codex <codex@noreply.local>
Date: Thu, 25 Jun 2026 03:18:01 +0000
Subject: [PATCH] fix: render AgentRun tool credential keys

---
 scripts/src/agentrun.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/scripts/src/agentrun.ts b/scripts/src/agentrun.ts
index 748e6873..392c3caf 100644
--- a/scripts/src/agentrun.ts
+++ b/scripts/src/agentrun.ts
@@ -6379,7 +6379,7 @@ function agentRunAipodBindingDisclosure(task: Record<string, unknown>, aipod: st
     tool: credential.tool ?? null,
     secretRef: {
       name: record(credential.secretRef).name ?? null,
-      key: record(credential.secretRef).key ?? null,
+      keys: Array.isArray(record(credential.secretRef).keys) ? record(credential.secretRef).keys : [],
     },
     valuesPrinted: false,
   }));
@@ -7297,7 +7297,7 @@ function agentRunExecutionPolicyWithLaneCredentials(basePolicy: Record<string, u
       tool: credential.tool,
       secretRef: {
         name: credential.secretRef.name,
-        key: credential.secretRef.key,
+        keys: [credential.secretRef.key],
       },
     };
   }) : [];