fix(api-proxy): remove anthropic credentials from api-proxy service

[Claude]

Claude Code was attempting to connect to api-proxy endpoints despite the workflow not enabling api-proxy. Root cause: docker-manager.ts unconditionally set ANTHROPIC_BASE_URL and deployed api-proxy when any API key was present, including Anthropic keys.

Changes

• Removed ANTHROPIC_BASE_URL auto-configuration - No longer redirects Anthropic traffic to api-proxy (lines 998-1001)
• Fixed api-proxy service creation logic - Service now only deploys when OpenAI key is present, not Anthropic (lines 860, 920)
• Removed Anthropic key from api-proxy environment - Keys no longer passed to api-proxy container (lines 933-935)

Design

// Before: api-proxy deployed with either key
if (config.enableApiProxy && networkConfig.proxyIp && 
    (config.openaiApiKey || config.anthropicApiKey)) { ... }

// After: api-proxy only for OpenAI
if (config.enableApiProxy && networkConfig.proxyIp && 
    config.openaiApiKey) { ... }

OpenAI continues using api-proxy for credential management. Anthropic credentials now pass directly to agent container via --env-all, consistent with GitHub Copilot CLI's authentication model.

[github-actions]

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

💫 TO BE CONTINUED... Smoke Claude failed! Our hero faces unexpected challenges...

[github-actions]

Smoke Test Results

Last 2 merged PRs:

• fix(ci): add missing ANTHROPIC_API_KEY to detection job #827: fix(ci): add missing ANTHROPIC_API_KEY to detection job
• fix(workflow): correct api-proxy IP address in smoke-codex.lock.yml #826: fix(workflow): correct api-proxy IP address in smoke-codex.lock.yml

Test Results:

• ✅ GitHub MCP: Retrieved PR data
• ✅ Playwright: Page title verified (contains "GitHub")
• ✅ File Writing: Test file created successfully
• ✅ Bash Tool: File verified and read back

Overall Status: PASS

AI generated by Smoke Copilot

[github-actions]

Deno Build Test Results

Project	Tests	Status
oak	1/1	✅ PASS
std	1/1	✅ PASS

Overall: ✅ PASS

All Deno tests completed successfully.

AI generated by Build Test Deno

[github-actions]

Go Build Test Results

Project	Download	Tests	Status
color	✅	1/1	PASS
env	✅	1/1	PASS
uuid	✅	1/1	PASS

Overall: PASS ✅

All Go projects successfully downloaded dependencies and passed tests.

AI generated by Build Test Go

[github-actions]

C++ Build Test Results

Project	CMake	Build	Status
fmt	✅	✅	PASS
json	✅	✅	PASS

Overall: PASS ✅

All C++ projects built successfully.

AI generated by Build Test C++

[github-actions]

Build Test: Node.js - ✅ PASS

All Node.js projects tested successfully!

Project	Install	Tests	Status
clsx	✅	PASS	✅ PASS
execa	✅	PASS	✅ PASS
p-limit	✅	PASS	✅ PASS

Overall: ✅ PASS

All projects installed dependencies and passed their test suites without errors.

AI generated by Build Test Node.js

[github-actions]

Rust Build Test Results

Project	Build	Tests	Status
fd	✅	1/1	PASS
zoxide	✅	1/1	PASS

Overall: PASS ✅

All Rust projects built and tested successfully.

AI generated by Build Test Rust

[github-actions]

Java Build Test Results

Project	Compile	Tests	Status
gson	✅	1/1	PASS
caffeine	✅	1/1	PASS

Overall: PASS ✅

Both Java projects compiled and tested successfully through the AWF firewall with Maven proxy configuration.

AI generated by Build Test Java

[github-actions]

.NET Build Test Results ✅

All .NET projects successfully restored, built, and ran.

Project	Restore	Build	Run	Status
hello-world	✅	✅	✅	PASS
json-parse	✅	✅	✅	PASS

Overall: PASS

Test Details

hello-world:

• Restore: ✅ Completed in 82ms
• Build: ✅ Build succeeded (0 warnings, 0 errors)
• Run: ✅ Output: Hello, World!

json-parse:

• Restore: ✅ Completed in 736ms
• Build: ✅ Build succeeded (0 warnings, 0 errors)
• Run: ✅ Successfully parsed and displayed JSON data

AI generated by Build Test .NET

[github-actions]

Chroot Test Results

The chroot mode was tested to verify it transparently uses host system binaries:

Runtime	Host Version	Chroot Version	Match?
Python	3.12.12	3.12.3	❌ NO
Node.js	v24.13.0	v20.20.0	❌ NO
Go	go1.22.12	go1.22.12	✅ YES

Overall Status: ❌ Tests failed - Python and Node.js are using container versions instead of host binaries.

AI generated by Smoke Chroot