@mnemom/mnemom 0.17.7-next.2 → 0.17.7

package/dist/mcp/handoff-server.mjs

@@ -25,11 +25,8 @@
 // request time instead. A terminal launch names `ANTHROPIC_CUSTOM_HEADERS` (parsed for its
 // `x-api-key:` line); Remote Control names a dedicated `MNEMOM_HANDOFF_KEY` its launcher sets
 // directly, since RC's child env strips every ANTHROPIC_* var (see `HandoffAnthropicKeySource`
-// in cli/src/lib/agent.ts for the full rationale). The Mnemom key (`x-mnemom-api-key`, required by
-// the gateway on every `mnemom agent` request) rides the same way, named by
-// `MNEMOM_HANDOFF_MNEMOM_KEY_ENV_NAME`: the `x-mnemom-api-key:` line of `ANTHROPIC_CUSTOM_HEADERS`
-// on a terminal launch, `MNEMOM_HANDOFF_MNEMOM_KEY` under Remote Control. This process never logs
-// any of these vars' names or values.
+// in cli/src/lib/agent.ts for the full rationale). This process never logs either var's name or
+// value.
 
 import { createInterface } from "node:readline";
 import { pathToFileURL } from "node:url";
@@ -70,33 +67,29 @@ const REQUIRED_ENV = [
 ];
 
 /**
- * Recover a key from an env var NAME this process itself inherited from its parent (never a
- * value written into the `--mcp-config` file). `ANTHROPIC_CUSTOM_HEADERS` is a multi-line header
- * BLOCK (`buildCustomHeaders`, cli/src/lib/agent.ts) carrying `x-api-key: <key>` and
- * `x-mnemom-api-key: <key>` lines — extract just the line `header` asks for. Any other name is
- * treated as carrying the key value directly.
+ * Recover the Anthropic key from an env var NAME this process itself inherited from its parent
+ * (never a value written into the `--mcp-config` file). `ANTHROPIC_CUSTOM_HEADERS` is a
+ * multi-line header BLOCK (`buildCustomHeaders`, cli/src/lib/agent.ts) whose first line is
+ * `x-api-key: <key>` — extract just that. Any other name is treated as carrying the key value
+ * directly.
  * @param {string} name
  * @param {NodeJS.ProcessEnv} env
- * @param {RegExp} header the header line to read out of a header block
  * @returns {string} the key, or "" if the named var is absent/unusable.
  */
-function resolveKeyFromEnvName(name, env, header) {
+function resolveKeyFromEnvName(name, env) {
   const value = env[name] ?? "";
   if (name === "ANTHROPIC_CUSTOM_HEADERS") {
-    const m = value.match(header);
+    const m = value.match(/^x-api-key:\s*(.+)$/im);
     return m ? m[1].trim() : "";
   }
   return value.trim();
 }
 
-const ANTHROPIC_KEY_LINE = /^x-api-key:\s*(.+)$/im;
-const MNEMOM_KEY_LINE = /^x-mnemom-api-key:\s*(.+)$/im;
-
 /**
  * Read the tool's config from env. Throws (message never contains the key value) when a
  * required var is missing, or when the named key-source var resolves to no usable key.
  * @param {NodeJS.ProcessEnv} env
- * @returns {{gatewayHost: string, anthropicKey: string, mnemomKey?: string, agent: string, conversationId: string, sessionConfigB64?: string}}
+ * @returns {{gatewayHost: string, anthropicKey: string, agent: string, conversationId: string, sessionConfigB64?: string}}
  */
 export function configFromEnv(env) {
   const missing = REQUIRED_ENV.filter((k) => !(env[k] ?? "").trim());
@@ -104,30 +97,16 @@ export function configFromEnv(env) {
     throw new Error(`mnemom-handoff: missing required env var(s): ${missing.join(", ")}`);
   }
   const keyEnvName = env.MNEMOM_HANDOFF_ANTHROPIC_KEY_ENV_NAME.trim();
-  const anthropicKey = resolveKeyFromEnvName(keyEnvName, env, ANTHROPIC_KEY_LINE);
+  const anthropicKey = resolveKeyFromEnvName(keyEnvName, env);
   if (!anthropicKey) {
     throw new Error(
       `mnemom-handoff: MNEMOM_HANDOFF_ANTHROPIC_KEY_ENV_NAME names '${keyEnvName}', but this ` +
         "process's own inherited environment has no usable value for it.",
     );
   }
-  // The Mnemom key the gateway requires on every `mnemom agent` request. A launcher that names
-  // no source sends none; a named source that resolves to nothing is a config error.
-  const mnemomKeyEnvName = (env.MNEMOM_HANDOFF_MNEMOM_KEY_ENV_NAME ?? "").trim();
-  let mnemomKey;
-  if (mnemomKeyEnvName) {
-    mnemomKey = resolveKeyFromEnvName(mnemomKeyEnvName, env, MNEMOM_KEY_LINE);
-    if (!mnemomKey) {
-      throw new Error(
-        `mnemom-handoff: MNEMOM_HANDOFF_MNEMOM_KEY_ENV_NAME names '${mnemomKeyEnvName}', but this ` +
-          "process's own inherited environment has no usable Mnemom key in it.",
-      );
-    }
-  }
   return {
     gatewayHost: env.MNEMOM_HANDOFF_GATEWAY_HOST.trim(),
     anthropicKey,
-    mnemomKey,
     agent: env.MNEMOM_HANDOFF_AGENT.trim(),
     conversationId: env.MNEMOM_HANDOFF_CONVERSATION_ID.trim(),
     sessionConfigB64: env.MNEMOM_HANDOFF_SESSION_CONFIG?.trim() || undefined,
@@ -136,7 +115,7 @@ export function configFromEnv(env) {
 
 /**
  * Build the fetch call. Exported so a test can assert the wire shape without mocking fetch.
- * @param {{gatewayHost: string, anthropicKey: string, mnemomKey?: string, agent: string, conversationId: string, sessionConfigB64?: string}} cfg
+ * @param {{gatewayHost: string, anthropicKey: string, agent: string, conversationId: string, sessionConfigB64?: string}} cfg
  * @param {string} note
  */
 export function buildHandoffRequest(cfg, note) {
@@ -145,7 +124,6 @@ export function buildHandoffRequest(cfg, note) {
     "x-api-key": cfg.anthropicKey,
     "x-mnemom-agent": cfg.agent,
   };
-  if (cfg.mnemomKey) headers["x-mnemom-api-key"] = cfg.mnemomKey;
   if (cfg.sessionConfigB64) headers["x-mnemom-session-config"] = cfg.sessionConfigB64;
   return {
     url: `${cfg.gatewayHost.replace(/\/+$/, "")}${HANDOFF_PATH}`,
@@ -172,7 +150,7 @@ function extractGatewayError(body) {
  * Call the route and render the result. NEVER throws: a network failure, a non-2xx status, or
  * an unparseable body all come back as `{ok:false, message}` for the caller to surface as an
  * MCP tool error — the tool must never crash the server or the session over a bad response.
- * @param {{gatewayHost: string, anthropicKey: string, mnemomKey?: string, agent: string, conversationId: string, sessionConfigB64?: string}} cfg
+ * @param {{gatewayHost: string, anthropicKey: string, agent: string, conversationId: string, sessionConfigB64?: string}} cfg
  * @param {string} note
  * @param {typeof fetch} fetchImpl
  */

package/dist/rc-proxy.mjs

@@ -19,7 +19,7 @@
 //     byte-for-byte (telemetry, Datadog, MCP servers…).
 //   * Inside api.anthropic.com, only `POST /v1/messages[?…]` is rewritten to the Mnemom
 //     gateway door: the real Anthropic key rides as `x-api-key` (API-key billing), plus
-//     `x-mnemom-agent`, `x-mnemom-conversation-id`, `x-mnemom-api-key` (stdin line 2), and optionally
+//     `x-mnemom-agent`, `x-mnemom-conversation-id`, and optionally `x-mnemom-api-key`,
 //     `x-mnemom-provider`, `x-mnemom-egress-key`, `x-mnemom-contract` / `x-mnemom-goal-mode` — the exact header set
 //     the non-RC launch sends via ANTHROPIC_CUSTOM_HEADERS. The OAuth `authorization` bearer
 //     is STRIPPED on that leg (it never leaves the machine) and `oauth-*` tokens are removed
@@ -51,11 +51,8 @@
 //         (diagnostic only: it forwards continue-deltas the API rejects).
 //
 // SECRETS
-// Arrive on stdin as three newline-terminated lines: Anthropic key, Mnemom key, OpenAI egress
-// key (may be empty). `mnemom agent` sends the Mnemom key on every launch, in both auth modes —
-// the gateway refuses its traffic without one — and the proxy adds it as `x-mnemom-api-key` on
-// every gateway request whenever line 2 is set (required in subscription mode, where it also
-// anchors the identity). Never argv, never env, never disk, never logged.
+// Arrive on stdin as three newline-terminated lines: Anthropic key, Mnemom key (may be
+// empty), OpenAI egress key (may be empty). Never argv, never env, never disk, never logged.
 // The log (MNEMOM_AGENT_RC_PROXY_LOG, else stderr) carries method/path/status/latency and the
 // gateway's `x-mnemom-agent` / `x-mnemom-goal-verdict` response headers only. Gateway error
 // bodies (status ≥ 400) are logged truncated so a 4xx is diagnosable (compressed ones as

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mnemom/mnemom",
-  "version": "0.17.7-next.2",
+  "version": "0.17.7",
   "description": "Transparent AI agent tracing",
   "type": "module",
   "bin": {