@mondaydotcomorg/atp-server 0.24.3 → 0.24.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. package/dist/explorer/index.d.ts.map +1 -1
  2. package/dist/explorer/index.js +4 -3
  3. package/dist/explorer/index.js.map +1 -1
  4. package/dist/handlers/execute.handler.d.ts.map +1 -1
  5. package/dist/handlers/execute.handler.js +7 -1
  6. package/dist/handlers/execute.handler.js.map +1 -1
  7. package/dist/index.cjs +7 -3
  8. package/dist/index.cjs.map +1 -1
  9. package/dist/index.js +7 -3
  10. package/dist/index.js.map +1 -1
  11. package/package.json +1 -1
  12. package/src/explorer/index.ts +4 -2
  13. package/src/handlers/execute.handler.ts +7 -1
package/dist/index.js CHANGED
@@ -10864,8 +10864,7 @@ var ExplorerService = class {
10864
10864
  }
10865
10865
  context.allowedGroups.add(group.name);
10866
10866
  }
10867
- for (const group of this.apiGroups) {
10868
- if (!context.allowedGroups.has(group.name)) continue;
10867
+ for (const group of allowedGroups) {
10869
10868
  if (group.functions) {
10870
10869
  for (const func of group.functions) {
10871
10870
  context.allowedTools.add(`${group.name}:${func.name}`);
@@ -11702,7 +11701,12 @@ async function handleExecute(ctx, executor, stateManager, config, auditSink, ses
11702
11701
  provenanceHints: requestConfig.provenanceHints,
11703
11702
  requestContext: {
11704
11703
  ...requestConfig.requestContext,
11705
- headers: ctx.headers,
11704
+ // Merge caller-supplied headers with ctx.headers; ctx wins on
11705
+ // conflicts so session auth takes precedence over app-layer keys.
11706
+ headers: {
11707
+ ...requestConfig.requestContext?.headers,
11708
+ ...ctx.headers
11709
+ },
11706
11710
  path: ctx.path,
11707
11711
  method: ctx.method
11708
11712
  },