Move secrets between users and computers without the model seeing them

A new personal env scope (paradigm user: one user's secret for one bot)
beats every other scope, reaches only that user's runs of that bot, and
is redacted like any secret. Bots take secrets in with request_secret,
which puts a [secret-request:ID] card in the chat: the user types the
value into a masked input there, never into a message, and the bot is
told only the key. Bots show secrets with capture_secret (a task's
computer tool that saves a file or a command's output straight to a
personal env, then redacts it from the rest of the run) and show_secret
(an env by key): both give a [secret:ID] chip whose Reveal and Copy fetch
the value on click, for its own user (personal) or a super admin
(anything else), logged by key. Values never go into messages, page
props, history, Copy chat or logs. Users manage their own secrets on
Settings > Secrets; the Environment page lists everyone's, remove only.
Deleting a bot or user removes its personal secrets, and SecretsNote
tells bots never to ask for or print secrets in chat.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

src/harness/tools/extensions/open-bot-extensions.ts

@@ -12,6 +12,11 @@ import type { ComputerRunDirs } from "@/src/utils/computer-work-dirs";
 
 type Params = {
     bot_id: number | string;
+    /**
+     * The user the run is for: their personal envs for the bot fill
+     * templates and reach scripts.
+     */
+    user_id?: number | string | null;
     workspace_id?: number | string | null;
     /**
      * Where script tools run: the task's computer, or in chat the bot's
@@ -54,6 +59,7 @@ export type OpenBotExtensions = {
  */
 export default async function openBotExtensions({
     bot_id,
+    user_id,
     workspace_id,
     computer_id,
     dirs,
@@ -66,7 +72,7 @@ export default async function openBotExtensions({
         return { tools: [], note: "", skills, close: async () => {} };
     }
 
-    const envs = await grabRunEnvs({ bot_id, workspace_id });
+    const envs = await grabRunEnvs({ bot_id, user_id, workspace_id });
     const secrets = envs.filter((env) => env.secret);
     const redact = (text: string) => redactSecrets({ text, secrets });
     const names = new Set(taken);
@@ -81,7 +87,7 @@ export default async function openBotExtensions({
     };
 
     for (const tool of tools) {
-        add(buildCustomTool({ tool, envs, computer_id, bot_id, workspace_id, dirs }));
+        add(buildCustomTool({ tool, envs, computer_id, bot_id, user_id, workspace_id, dirs }));
     }
 
     for (const server of servers) {