windmill/backend/windmill-ai/src/credentials.rs

use std::collections::HashMap;

use crate::ai_providers::{AIPlatform, AIProvider};

/// Resolved provider credentials shared by API proxy and worker execution.
///
/// Raw API resources and worker agent payloads convert into this shape at their
/// execution boundaries. Request-specific state such as the selected model stays
/// outside this type.
#[derive(Clone, Debug)]
pub struct ProviderCredentials {
    pub provider: AIProvider,
    pub base_url: String,
    pub api_key: Option<String>,
    pub access_token: Option<String>,
    pub organization_id: Option<String>,
    pub user: Option<String>,
    pub region: Option<String>,
    pub aws_access_key_id: Option<String>,
    pub aws_secret_access_key: Option<String>,
    pub aws_session_token: Option<String>,
    /// AWS IAM role to assume through Windmill's OIDC provider. Only consulted
    /// when no bearer key and no explicit IAM keys are set — see
    /// [`crate::ai_bedrock::bedrock_oidc_role_to_assume`]. The API proxy
    /// exchanges it for temporary keys before it builds the request; the worker
    /// exchanges it at the Bedrock call, because only the API can sign an OIDC
    /// token.
    ///
    /// The two paths therefore present different tokens to AWS: the proxy a
    /// workspace claim with `sub = "<email>::<workspace>"`, the worker the job
    /// claim `/oidc/token` issues, `sub = "<email>::<path>::<flow_path>::<workspace>"`.
    /// A role trust policy that conditions on `sub` has to admit both, or only
    /// one of the copilot and the AI agent step will be able to assume the role.
    pub oidc_role_arn: Option<String>,
    /// Anthropic Workload Identity Federation settings, from an `anthropic_federated`
    /// resource. The API proxy exchanges an OIDC token minted for the requesting
    /// user for a short-lived access token, which then goes out as `access_token`.
    pub anthropic_federation: Option<AnthropicFederation>,
    pub platform: AIPlatform,
    pub custom_headers: HashMap<String, String>,
}

/// The identifiers a Claude Console federation rule needs in a token exchange.
/// None of them is a secret: what authorises the exchange is the OIDC token.
#[derive(Clone, Debug, PartialEq, Eq, Hash)]
pub struct AnthropicFederation {
    pub federation_rule_id: String,
    pub organization_id: String,
    pub service_account_id: String,
    /// Required by Anthropic only when the rule is enabled in several workspaces.
    pub workspace_id: Option<String>,
}