@tangle-network/agent-profile-materialize 0.26.5 → 0.26.7

package/dist/plan-application.js

@@ -106,8 +106,10 @@ async function resolvePrivateWorkspacePlan(plan, secretProvider, fileSlotReferen
                 try {
                     value = await secretProvider.get(ref.key);
                 }
-                catch {
-                    throw new Error(`AgentProfile secret provider failed for ${secretRefLabel(ref)}`);
+                catch (cause) {
+                    // The executor's refusal (a key it will not serve) rides along as
+                    // the cause; a provider error carries no resolved value.
+                    throw new Error(`AgentProfile secret provider failed for ${secretRefLabel(ref)}`, { cause });
                 }
                 return requireResolvedSecretValue(ref, value);
             })();

package/dist/secret-concurrent-revision.js

@@ -50,6 +50,8 @@ export async function prepareSecretConcurrentProfileRevision(input) {
                 : file),
         };
     }
+    const secretReferences = {};
+    plan = referencePublicMcpHeaders(plan, secretReferences);
     if (plan.files.some((file) => file.relPath.startsWith(".config/opencode/"))) {
         throw new Error("Secret OpenCode reserves its native config directory");
     }
@@ -66,7 +68,6 @@ export async function prepareSecretConcurrentProfileRevision(input) {
     assertLaunchRoot(input.launchRoot);
     // File slots reference their secrets, so an unchanged profile with a rotated
     // per-turn secret reuses this revision.
-    const secretReferences = {};
     const prepared = await prepareManagedWorkspacePlan(plan, input.managedRoot, input.sharedWorkspaceDir, input.secretProvider, { ...input.options, secretFileSlotReferences: secretReferences });
     try {
         // XDG_CONFIG_HOME is bound to this executor-owned tree at native launch.
@@ -137,6 +138,59 @@ export async function prepareSecretConcurrentProfileRevision(input) {
         throw error;
     }
 }
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+/** How `servableMcpServer` recognizes a header value the executor holds. */
+const HELD_VALUE_PREFIX = "TANGLE_PROFILE_SECRET_";
+/**
+ * A remote MCP server's public header values never reach the sealed launch:
+ * the executor's loopback proxy replaces the server's url and headers there.
+ * They did reach the revision's bytes, so a value that changes every turn (a
+ * run id, a message id) gave each turn its own digest, revision directory,
+ * receipt and native health check. Each such value becomes a reference the
+ * executor resolves, as a secret slot already does, and the revision names
+ * only the header. The value stays as public as the profile declared it; it is
+ * held beside the secret references and nothing the native process can read
+ * carries it.
+ *
+ * A value that already looks like a reference, or is empty, stays in place.
+ */
+function referencePublicMcpHeaders(plan, references) {
+    const configFile = plan.files.find((file) => file.relPath === "opencode.json" &&
+        file.source === "generated" &&
+        (file.root ?? "workspace") === "workspace");
+    if (!configFile)
+        return plan;
+    const config = JSON.parse(configFile.content);
+    if (!isRecord(config) || !isRecord(config.mcp))
+        return plan;
+    let changed = false;
+    for (const [server, entry] of Object.entries(config.mcp)) {
+        if (!isRecord(entry) || entry.type !== "remote")
+            continue;
+        if (!isRecord(entry.headers))
+            continue;
+        for (const [header, value] of Object.entries(entry.headers)) {
+            if (typeof value !== "string" || value === "")
+                continue;
+            if (/\{(?:env|file):/.test(value))
+                continue;
+            const name = `${HELD_VALUE_PREFIX}${createHash("sha256")
+                .update(`public-mcp-header\0${server}\0${header}`, "utf8")
+                .digest("hex")
+                .slice(0, 24)
+                .toUpperCase()}`;
+            references[name] = value;
+            entry.headers[header] = `{env:${name}}`;
+            changed = true;
+        }
+    }
+    if (!changed)
+        return plan;
+    return {
+        ...plan,
+        files: plan.files.map((file) => file === configFile ? { ...file, content: JSON.stringify(config) } : file),
+    };
+}
 function secretRevisionPaths(root) {
     const all = [root];
     const exposed = [root];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-profile-materialize",
-  "version": "0.26.5",
+  "version": "0.26.7",
   "description": "Materialize an AgentProfile into the native per-harness workspace files (the one shared materializer for cli-bridge, agent-container, and VB).",
   "type": "module",
   "repository": {
@@ -35,8 +35,8 @@
     "@tangle-network/agent-interface": "^3.0.0 || ^4.0.0 || ^5.0.0"
   },
   "tangleRelease": {
-    "sourceSha": "264ba6910963c1036183ef29fe6ed3dadb465256",
-    "mergedAt": "2026-10-19T06:31:19-06:00"
+    "sourceSha": "3a57bb381718597c9aac7fe2f0d2c60b35223474",
+    "mergedAt": "2026-10-19T11:40:06-06:00"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",