@agent-deck/backend 1.6.2 → 1.7.0

package/dist/vault/service-header-vault.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceHeaderVault = void 0;
+exports.serviceHeaderAccount = serviceHeaderAccount;
+function serviceHeaderAccount(serviceId) {
+    return `custom-headers:${serviceId}`;
+}
+function parseHeaders(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+            return null;
+        }
+        const next = {};
+        for (const [key, value] of Object.entries(parsed)) {
+            if (typeof value === 'string') {
+                next[key] = value;
+            }
+        }
+        return Object.keys(next).length > 0 ? next : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Secret custom headers (Authorization / API keys) for MCP service cards.
+ * Kept in the local SecretStore (Keychain), never in SQLite or the git-synced
+ * file store — mirrors {@link OAuthTokenVault}. This is what lets a user's Bearer
+ * token survive a store reindex/restart without ever being committed to git.
+ */
+class ServiceHeaderVault {
+    secretStore;
+    constructor(secretStore) {
+        this.secretStore = secretStore;
+    }
+    async get(serviceId) {
+        const stored = await this.secretStore.get(serviceHeaderAccount(serviceId));
+        return stored ? parseHeaders(stored) : null;
+    }
+    async set(serviceId, headers) {
+        const entries = Object.entries(headers).filter(([, value]) => typeof value === 'string' && value.length > 0);
+        if (entries.length === 0) {
+            await this.delete(serviceId);
+            return;
+        }
+        await this.secretStore.set(serviceHeaderAccount(serviceId), JSON.stringify(Object.fromEntries(entries)));
+    }
+    async delete(serviceId) {
+        await this.secretStore.delete(serviceHeaderAccount(serviceId));
+    }
+}
+exports.ServiceHeaderVault = ServiceHeaderVault;
+//# sourceMappingURL=service-header-vault.js.map

package/dist/vault/service-header-vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-header-vault.js","sourceRoot":"","sources":["../../src/vault/service-header-vault.ts"],"names":[],"mappings":";;;AAEA,oDAEC;AAFD,SAAgB,oBAAoB,CAAC,SAAiB;IACpD,OAAO,kBAAkB,SAAS,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACpB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAa,kBAAkB;IACT;IAApB,YAAoB,WAAwB;QAAxB,gBAAW,GAAX,WAAW,CAAa;IAAG,CAAC;IAEhD,KAAK,CAAC,GAAG,CAAC,SAAiB;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3E,OAAO,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,OAA+B;QAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAC5C,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAC7D,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CACxB,oBAAoB,CAAC,SAAS,CAAC,EAC/B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAC5C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;IACjE,CAAC;CACF;AAzBD,gDAyBC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-deck/backend",
-  "version": "1.6.2",
+  "version": "1.7.0",
   "description": "Agent Deck backend API, MCP server, and vault",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -46,17 +46,17 @@
     "prepublishOnly": "node ../../scripts/pre-publish-check.mjs && npm run build"
   },
   "dependencies": {
-    "@agent-deck/shared": "^1.6.2",
+    "@agent-deck/shared": "^1.7.0",
     "@fastify/cors": "^10.0.0",
     "@fastify/static": "^8.0.0",
     "@fastify/websocket": "^11.2.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "better-sqlite3": "^12.11.1",
-    "dotenv": "^17.2.1",
+    "dotenv": "^17.4.2",
     "express": "^4.19.2",
-    "fastify": "^5.0.0",
+    "fastify": "^5.11.0",
     "gray-matter": "^4.0.3",
-    "openid-client": "^6.6.4",
+    "openid-client": "^6.8.5",
     "use-mcp": "^0.0.21",
     "yaml": "^2.9.0",
     "zod": "^3.22.4"