@integrity-labs/agt-cli 0.28.318 → 0.28.319

package/dist/{chunk-2DIWTRTU.js → chunk-373GH3RH.js}

@@ -18,7 +18,7 @@ import {
   resolveConnectivityProbe,
   worseConnectivityOutcome,
   wrapScheduledTaskPrompt
-} from "./chunk-4DHYHNCV.js";
+} from "./chunk-ISHK77EM.js";
 import {
   parsePsRows
 } from "./chunk-XWVM4KPK.js";
@@ -1962,6 +1962,37 @@ function buildRemoteMcpEntry(definitionId, dbSpec) {
 function buildHostBrokeredRemoteMcpEntry(url) {
   return { type: "http", url };
 }
+function extractHeaderVarName(value) {
+  const m = /^\$\{([A-Za-z_][A-Za-z0-9_]*)\}$/.exec(value.trim());
+  return m ? m[1] : null;
+}
+function buildLiveHeaderRemoteMcpProxyEntry(definitionId, dbSpec, paths) {
+  const spec = dbSpec ?? INTEGRATION_REGISTRY.find((d) => d.id === definitionId)?.remoteMcp;
+  if (!spec?.liveHeaderRefresh)
+    return null;
+  assertSafeRemoteMcpUrl(spec.url, definitionId);
+  if (!spec.auth || spec.auth.scheme !== "header" || !spec.auth.header_name) {
+    throw new Error(`remoteMcp.liveHeaderRefresh for '${definitionId}' requires a header-scheme 'auth' with a header_name`);
+  }
+  const extraPairs = [];
+  for (const [header, value] of Object.entries(spec.headers ?? {})) {
+    const varName = extractHeaderVarName(value);
+    if (varName)
+      extraPairs.push(`${header}:${varName}`);
+  }
+  return {
+    command: "node",
+    args: [paths.proxyPath],
+    env: {
+      AGT_REMOTE_MCP_URL: spec.url,
+      AGT_REMOTE_MCP_TOKEN_FILE: paths.tokenFile,
+      AGT_REMOTE_MCP_TOKEN_VAR: credentialEnvVar(definitionId, spec.auth.credential_ref),
+      AGT_REMOTE_MCP_AUTH_HEADER: spec.auth.header_name,
+      AGT_REMOTE_MCP_LABEL: definitionId,
+      ...extraPairs.length > 0 ? { AGT_REMOTE_MCP_EXTRA_HEADERS: extraPairs.join(",") } : {}
+    }
+  };
+}
 function buildOAuthRemoteMcpProxyEntry(definitionId, paths) {
   const def = INTEGRATION_REGISTRY.find((d) => d.id === definitionId);
   if (def?.remoteMcp)
@@ -4184,6 +4215,11 @@ function buildMcpJson(input) {
     tokenFile: join2(getProjectDir(input.agent.code_name), ".env.integrations")
   };
   for (const integration of input.integrations ?? []) {
+    const liveEntry = buildLiveHeaderRemoteMcpProxyEntry(integration.definition_id, integration.remoteMcp, remoteOAuthProxyPaths);
+    if (liveEntry) {
+      mcpServers[integration.definition_id] = liveEntry;
+      continue;
+    }
     const proxyEntry = buildOAuthRemoteMcpProxyEntry(integration.definition_id, remoteOAuthProxyPaths);
     if (proxyEntry) {
       mcpServers[integration.definition_id] = proxyEntry;
@@ -5328,6 +5364,11 @@ ${sections}`
       tokenFile: join2(getProjectDir(codeName), ".env.integrations")
     };
     for (const integration of integrations) {
+      const liveEntry = buildLiveHeaderRemoteMcpProxyEntry(integration.definition_id, integration.remoteMcp, remoteOAuthProxyPaths);
+      if (liveEntry) {
+        this.writeMcpServer(codeName, integration.definition_id, liveEntry);
+        continue;
+      }
       const proxyEntry = buildOAuthRemoteMcpProxyEntry(integration.definition_id, remoteOAuthProxyPaths);
       if (proxyEntry) {
         this.writeMcpServer(codeName, integration.definition_id, proxyEntry);
@@ -5900,7 +5941,7 @@ function requireHost() {
 }
 
 // src/lib/api-client.ts
-var agtCliVersion = true ? "0.28.318" : "dev";
+var agtCliVersion = true ? "0.28.319" : "dev";
 var lastConfigHash = null;
 function setConfigHash(hash) {
   lastConfigHash = hash && hash.length > 0 ? hash : null;
@@ -6472,6 +6513,21 @@ function envOnlyRespawnVars(changedVars, mcp, channelSecretKeys) {
     (v) => !channelSet.has(v) && findMcpServersUsingVars(mcp, [v]).length === 0
   );
 }
+function liveProxyExtraHeaderVars(mcp) {
+  const out = /* @__PURE__ */ new Set();
+  if (!mcp?.mcpServers) return out;
+  for (const entry of Object.values(mcp.mcpServers)) {
+    const spec = entry?.env?.["AGT_REMOTE_MCP_EXTRA_HEADERS"];
+    if (typeof spec !== "string") continue;
+    for (const pair of spec.split(",")) {
+      const colon = pair.indexOf(":");
+      if (colon <= 0) continue;
+      const varName = pair.slice(colon + 1).trim();
+      if (varName) out.add(varName);
+    }
+  }
+  return out;
+}
 function buildArgvMatchersForEntry(key, entry) {
   const escapeRe = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   const patterns = [];
@@ -8256,6 +8312,7 @@ export {
   classifyEnvIntegrationsDiff,
   findMcpServersUsingVars,
   envOnlyRespawnVars,
+  liveProxyExtraHeaderVars,
   reapStaleMcpChildren,
   clearPresenceReaperState,
   clearPresenceReaperStateForKeys,
@@ -8278,4 +8335,4 @@ export {
   managerInstallSystemUnitCommand,
   managerUninstallSystemUnitCommand
 };
-//# sourceMappingURL=chunk-2DIWTRTU.js.map
+//# sourceMappingURL=chunk-373GH3RH.js.map