Tenant-owned env — the only kind allowed to become ctx.env (what agent tool code reads). A HostCredentialEnv does not satisfy this type; plain records and other agent envs do.
ctx.env
Tenant-owned env — the only kind allowed to become
ctx.env(what agent tool code reads). A HostCredentialEnv does not satisfy this type; plain records and other agent envs do.