@esankhan3/code-search-mcp 1.1.5 → 1.1.6

package/dist/__tests__/config-resolver.test.js

@@ -20,7 +20,10 @@ const ENV_KEYS = [
   "CODE_SEARCH_AUTH_MODE",
   "CODE_SEARCH_AUTH_API_KEYS",
   "CODE_SEARCH_DATA_DIR",
-  "CODE_SEARCH_REINDEX_INTERVAL"
+  "CODE_SEARCH_REINDEX_INTERVAL",
+  "CODE_SEARCH_EMBEDDING_HEADERS",
+  "CODE_SEARCH_LLM_HEADERS",
+  "ANVIL_LLM_HEADERS"
 ];
 let tmp = "";
 const STASH = {};
@@ -105,6 +108,35 @@ describe("toKnowledgeConfig (P3 adapter)", () => {
     assert.equal(r.provider, cfg.reranker.provider);
   });
 });
+describe("gateway request headers", () => {
+  const RAW = "CF-Access-Client-Id=id.access,CF-Access-Client-Secret=s3cret";
+  const PARSED = { "CF-Access-Client-Id": "id.access", "CF-Access-Client-Secret": "s3cret" };
+  it("CODE_SEARCH_EMBEDDING_HEADERS reach the embedder config", () => {
+    process.env.CODE_SEARCH_EMBEDDING_HEADERS = RAW;
+    const cfg = resolveCodeSearchConfig({ configPath: join(tmp, "missing.yaml") });
+    assert.deepEqual(cfg.embedding.headers, PARSED);
+    assert.deepEqual(toKnowledgeConfig(cfg).embedding.headers, PARSED);
+  });
+  it("CODE_SEARCH_LLM_HEADERS reach agent-core as ANVIL_LLM_HEADERS", () => {
+    process.env.CODE_SEARCH_LLM_HEADERS = RAW;
+    const cfg = resolveCodeSearchConfig({ configPath: join(tmp, "missing.yaml") });
+    assert.deepEqual(cfg.llm.headers, PARSED);
+    assert.equal(process.env.ANVIL_LLM_HEADERS, RAW);
+  });
+  it("llm.headers from YAML reach agent-core too", () => {
+    const file = join(tmp, "config.yaml");
+    writeFileSync(file, "llm:\n  headers:\n    CF-Access-Client-Id: id.access\n    CF-Access-Client-Secret: s3cret\n");
+    resolveCodeSearchConfig({ configPath: file });
+    assert.equal(process.env.ANVIL_LLM_HEADERS, RAW);
+  });
+  it("--print-config redacts every header value", () => {
+    const out = redactSecrets({ embedding: { headers: PARSED }, llm: { headers: PARSED } });
+    for (const h of [out.embedding.headers, out.llm.headers]) {
+      assert.match(h["CF-Access-Client-Id"], /redacted/);
+      assert.match(h["CF-Access-Client-Secret"], /redacted/);
+    }
+  });
+});
 describe("redactSecrets (P3 --print-config)", () => {
   it("redacts apiKey/jwtSecret/token fields, preserves shape", () => {
     const input = {

package/dist/core/config.js

@@ -241,6 +241,7 @@ function envLayer() {
       dimensions: embedDims ? parseInt(embedDims, 10) : void 0,
       apiKey: env("EMBEDDING_API_KEY"),
       baseUrl: env("EMBEDDING_BASE_URL"),
+      headers: parseHeaders(env("EMBEDDING_HEADERS")),
       ollamaHost: env("OLLAMA_HOST") ?? process.env.OLLAMA_HOST
     },
     reranker: {
@@ -268,6 +269,7 @@ function envLayer() {
       model: env("LLM_MODEL"),
       apiKey: env("LLM_API_KEY") ?? process.env.ANTHROPIC_API_KEY ?? process.env.OPENAI_API_KEY,
       baseUrl: env("LLM_BASE_URL"),
+      headers: parseHeaders(env("LLM_HEADERS")),
       claudeBin: env("CLAUDE_BIN") ?? process.env.CLAUDE_BIN
     },
     github: {
@@ -420,6 +422,9 @@ function bridgeLegacyEnvVars(cfg) {
   process.env.ANVIL_LLM_MODEL ??= process.env.CODE_SEARCH_LLM_MODEL ?? cfg.llm.model;
   if (cfg.llm.apiKey) process.env.ANVIL_LLM_API_KEY ??= cfg.llm.apiKey;
   if (cfg.llm.baseUrl) process.env.ANVIL_LLM_BASE_URL ??= cfg.llm.baseUrl;
+  if (cfg.llm.headers) {
+    process.env.ANVIL_LLM_HEADERS ??= Object.entries(cfg.llm.headers).map(([k, v]) => `${k}=${v}`).join(",");
+  }
   if (cfg.llm.claudeBin) process.env.ANVIL_CLAUDE_BIN ??= cfg.llm.claudeBin;
 }
 function toKnowledgeConfig(c) {
@@ -454,7 +459,7 @@ function redactSecrets(value, parentKey = "") {
   if (isPlainObject(value)) {
     const out = {};
     for (const [k, v] of Object.entries(value)) {
-      const secret = SECRET_KEY.test(k) || parentKey === "otelHeaders";
+      const secret = SECRET_KEY.test(k) || parentKey === "otelHeaders" || parentKey === "headers";
       if (secret && typeof v === "string" && v.length > 0) {
         out[k] = redactString(v);
       } else if (secret && Array.isArray(v)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@esankhan3/code-search-mcp",
-  "version": "1.1.5",
+  "version": "1.1.6",
   "description": "MCP server for multi-repo code search \u2014 GitHub org or local path, zero config",
   "type": "module",
   "license": "MIT",
@@ -23,8 +23,8 @@
     "smoke": "bash scripts/smoke/run-smoke.sh"
   },
   "dependencies": {
-    "@esankhan3/anvil-agent-core": "^0.5.3",
-    "@esankhan3/anvil-knowledge-core": "^0.4.11",
+    "@esankhan3/anvil-agent-core": "^0.5.4",
+    "@esankhan3/anvil-knowledge-core": "^0.4.12",
     "@modelcontextprotocol/node": "^2.0.0",
     "@modelcontextprotocol/server": "^2.0.0"
   },