@datadive-tools/mcp 0.18.0 → 0.19.0

package/dist/lib.d.ts

@@ -56,6 +56,13 @@ interface Config {
      * MCP server, which takes it from its own load balancer; the stdio path leaves it unset.
      */
     forwardedFor?: string;
+    /**
+     * Extra headers the hosted (remote) MCP server sends on every DataDive API call, e.g. the
+     * proxy secret that proves to the API the call came through that server. They can never
+     * replace the credential, `accept`, `content-type` or `user-agent` headers this package sets.
+     * The stdio path leaves it unset.
+     */
+    extraHeaders?: Readonly<Record<string, string>>;
 }
 declare function loadConfig(env?: NodeJS.ProcessEnv): Config;
 

package/dist/lib.js

@@ -139,7 +139,7 @@ function extractMessage(body) {
 }
 
 // package.json
-var version = "0.18.0";
+var version = "0.19.0";
 
 // src/http/client.ts
 var PKG_VERSION = version;
@@ -179,7 +179,7 @@ async function httpGet(ctx, path, query) {
       method: "GET",
       headers: {
         ...authHeaders(ctx.config),
-        ...forwardedForHeader(ctx.config),
+        ...hostHeaders(ctx.config),
         accept: "application/json",
         "user-agent": userAgent(ctx.toolName)
       }
@@ -197,7 +197,7 @@ async function httpPost(ctx, path, body) {
       method: "POST",
       headers: {
         ...authHeaders(ctx.config),
-        ...forwardedForHeader(ctx.config),
+        ...hostHeaders(ctx.config),
         accept: "application/json",
         "content-type": "application/json",
         "user-agent": userAgent(ctx.toolName)
@@ -217,7 +217,7 @@ async function httpPatch(ctx, path, body) {
       method: "PATCH",
       headers: {
         ...authHeaders(ctx.config),
-        ...forwardedForHeader(ctx.config),
+        ...hostHeaders(ctx.config),
         accept: "application/json",
         "content-type": "application/json",
         "user-agent": userAgent(ctx.toolName)
@@ -237,7 +237,7 @@ async function httpDelete(ctx, path) {
       method: "DELETE",
       headers: {
         ...authHeaders(ctx.config),
-        ...forwardedForHeader(ctx.config),
+        ...hostHeaders(ctx.config),
         accept: "application/json",
         "user-agent": userAgent(ctx.toolName)
       }
@@ -283,8 +283,13 @@ function authHeaders(config) {
   const c = config.credentials;
   return c.kind === "bearer" ? { authorization: `Bearer ${c.token}` } : { "x-api-key": c.apiKey };
 }
-function forwardedForHeader(config) {
-  return config.forwardedFor ? { "x-forwarded-for": config.forwardedFor } : {};
+var RESERVED_HEADERS = /* @__PURE__ */ new Set(["authorization", "x-api-key", "accept", "content-type", "user-agent"]);
+function hostHeaders(config) {
+  const extra = Object.entries(config.extraHeaders ?? {}).filter(([name]) => !RESERVED_HEADERS.has(name.toLowerCase()));
+  return {
+    ...Object.fromEntries(extra),
+    ...config.forwardedFor ? { "x-forwarded-for": config.forwardedFor } : {}
+  };
 }
 function unwrap(body) {
   if (!isObject(body)) return body;