@glrs-dev/assume 0.13.0 → 0.15.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +30 -0
- package/package.json +5 -5
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,35 @@
|
|
|
1
1
|
# @glrs-dev/assume
|
|
2
2
|
|
|
3
|
+
## 0.15.0
|
|
4
|
+
|
|
5
|
+
### Minor Changes
|
|
6
|
+
|
|
7
|
+
- [#300](https://github.com/iceglober/glrs/pull/300) [`a091e0c`](https://github.com/iceglober/glrs/commit/a091e0c400bc3ef555e25d3114d8eebabd563dc0) Thanks [@iceglober](https://github.com/iceglober)! - `gsa` MCP server now detects stale sessions and fails fast instead of hanging, and adds a `check_session` tool.
|
|
8
|
+
|
|
9
|
+
Previously, when the AWS SSO session expired mid-run, `run_with_credentials` would hang on the dead credential endpoint until the MCP client gave up with an opaque `-32001 Request timed out` — the agent couldn't tell a stale session from a genuine command failure, and had no way to prompt re-auth.
|
|
10
|
+
|
|
11
|
+
- **Stale-session guard:** before running (and again if the command times out or fails), `run_with_credentials` checks session health via the existing needs-login marker / refresh-token expiry. When the session can't produce credentials it returns a structured `{ session_stale: true, action: "gsa login aws", … }` result and fires a desktop notification, instead of hanging or returning a raw error.
|
|
12
|
+
- **Execution timeout:** new optional `timeout_ms` (default 120000, max 600000). A hung command is killed and returns a clear timeout — which also re-checks session health — rather than blocking until the client times out. Accepts a number or numeric string.
|
|
13
|
+
- **`check_session` tool:** returns `{ valid, needs_login, session_expires_at, refresh_expires_at, action }` so an agent can verify the session at start-of-task or after a failure. Re-auth itself remains a user-run browser flow (`gsa login aws`); the agent can now detect and surface the need immediately.
|
|
14
|
+
|
|
15
|
+
## 0.14.0
|
|
16
|
+
|
|
17
|
+
### Minor Changes
|
|
18
|
+
|
|
19
|
+
- [#297](https://github.com/iceglober/glrs/pull/297) [`19da75b`](https://github.com/iceglober/glrs/commit/19da75b071f3a7aa7af228e3812e63e3e0da4a5f) Thanks [@iceglober](https://github.com/iceglober)! - `gsa` MCP tool `run_with_credentials` now accepts an optional `env` parameter for additional environment variables.
|
|
20
|
+
|
|
21
|
+
Agents can pass repo-specific env vars (cert paths, confirmation flags, service addresses, …) alongside the injected AWS credentials — a pure pass-through, no repo knowledge on gsa's side. The command still runs in the gsa MCP server's working directory (the workspace root it was launched in), so relative paths work like the bash tool.
|
|
22
|
+
|
|
23
|
+
```
|
|
24
|
+
run_with_credentials(
|
|
25
|
+
command: "node_modules/.bin/tsx scripts/tsx/backfill.ts",
|
|
26
|
+
context: "production / developer",
|
|
27
|
+
env: { "CONFIRM_PRODUCTION": "yes", "TEMPORAL_NAMESPACE": "kn-prod" }
|
|
28
|
+
)
|
|
29
|
+
```
|
|
30
|
+
|
|
31
|
+
Values must be strings; invalid names or non-string values return a clear invalid-params error. The gsa-injected `AWS_*` credential and region vars take precedence and cannot be overridden by `env`. Env var names (not values) are recorded in the audit log.
|
|
32
|
+
|
|
3
33
|
## 0.13.0
|
|
4
34
|
|
|
5
35
|
### Minor Changes
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@glrs-dev/assume",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.15.0",
|
|
4
4
|
"publishConfig": {
|
|
5
5
|
"access": "public"
|
|
6
6
|
},
|
|
@@ -51,9 +51,9 @@
|
|
|
51
51
|
"typescript": "^5"
|
|
52
52
|
},
|
|
53
53
|
"optionalDependencies": {
|
|
54
|
-
"@glrs-dev/assume-darwin-arm64": "0.
|
|
55
|
-
"@glrs-dev/assume-darwin-x64": "0.
|
|
56
|
-
"@glrs-dev/assume-linux-x64": "0.
|
|
57
|
-
"@glrs-dev/assume-linux-arm64": "0.
|
|
54
|
+
"@glrs-dev/assume-darwin-arm64": "0.15.0",
|
|
55
|
+
"@glrs-dev/assume-darwin-x64": "0.15.0",
|
|
56
|
+
"@glrs-dev/assume-linux-x64": "0.15.0",
|
|
57
|
+
"@glrs-dev/assume-linux-arm64": "0.15.0"
|
|
58
58
|
}
|
|
59
59
|
}
|