fix(security): Keep OAuth token out of terminal environments

[charlesvien]

Problem

Resolves VERIA-351: OAuth access token leak in terminal shell environments.

Changes

Stop writing the OAuth token to the shared process env, and scrub the credential vars from the shell/pty env so repo scripts can't read them.

How did you test this?

Unit tests in @posthog/workspace-server (shell env scrubbing, incl. via additionalEnv, and the auth adapter).

Automatic notifications

• Publish to changelog?
• Alert Sales and Marketing teams?

[trunk-io]

Merging to main in this repository is managed by Trunk.

• To merge this pull request, check the box to the left or comment /trunk merge below.

After your PR is submitted to the merge queue, this comment will be automatically updated with its status. If the PR fails, failure details will also be posted here

[charlesvien]

• fix(security): Open files in external apps via argv not shell #3805
• fix(security): Confirm repo-provided setup script before running #3804
• fix(security): Enforce CSP on sandboxed MCP app HTML #3803
• fix(security): Run setup discovery agent in plan mode #3802
• fix(security): Scope MCP UI resource caches by server name #3801
• fix(security): Validate agent slug before building ingress host #3800
• fix(security): Keep OAuth token out of terminal environments #3799 👈 (View in Graphite)
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[github-actions]

React Doctor found no issues in the changed files. 🎉

_{Reviewed by React Doctor for commit 1f4c436.}

[greptile-apps]

_{Reviews (1): Last reviewed commit: "keep OAuth token out of terminal environ..." | Re-trigger Greptile}

[stamphog]

---

[stamphog]

Note

🤖 stamphog reviewed 1f4c4366a643eb222f90ae1583824748125c17aa — verdict: REFUSED

Gates denied this PR (deny-list match on auth-adapter code, tier classified T2-never) and the change touches OAuth token/credential handling in shell environments — security-sensitive surface with no independent human or agent review approving it.

• 👍 on the PR from greptile-apps[bot].
• Deny-list gate failed: matches auth-sensitive files (auth-adapter.ts)
• Tier gate failed: classified T2-never, which requires human review
• No human or agent review has approved this change (greptile only commented, no approval); a security-sensitive OAuth token change needs a real review before merge

Gate mechanics and policy version

Gate		Result
prerequisites	✓	all clear
deny-list	✗	matches: auth
size	✓	18L, 2F substantive, 60L/4F incl. docs/generated/snapshots — within ceiling
tier	✗	classified as T2-never: T2-never (60L, 4F, single-area, fix)
stamphog 2.0.0b3		.stamphog/policy.yml @ 9e6e0ca · reviewed head 1f4c436