@vincemakes/kiso-code 0.40.3 → 0.40.4

package/dist/auth/adapter-options.d.ts

@@ -18,5 +18,11 @@ export interface AdapterOptions {
         readonly accountId: string;
     }>;
     readonly promptCacheKey?: string;
+    readonly headers?: Readonly<Record<string, string>>;
 }
+/** The profile's headers with `{session}` replaced by the session id. A
+ *  header that names `{session}` when there is no session (`kiso sessions`,
+ *  which streams nothing) is left out, never sent with the placeholder in
+ *  it. Undefined when nothing is left. */
+export declare function expandProfileHeaders(headers: Readonly<Record<string, string>> | undefined, sessionId: string | undefined): Readonly<Record<string, string>> | undefined;
 export declare function adapterOptionsFor(profile: ModelProfile, auth: AdapterAuth, sessionId?: string): AdapterOptions;

package/dist/auth/adapter-options.js

@@ -33,6 +33,25 @@
  */
 import { effectiveBaseUrl } from "./credentials.js";
 import { oauthTokenThunk } from "./token.js";
+/** The profile's headers with `{session}` replaced by the session id. A
+ *  header that names `{session}` when there is no session (`kiso sessions`,
+ *  which streams nothing) is left out, never sent with the placeholder in
+ *  it. Undefined when nothing is left. */
+export function expandProfileHeaders(headers, sessionId) {
+    if (headers === undefined)
+        return undefined;
+    const out = {};
+    for (const [name, value] of Object.entries(headers)) {
+        if (value.includes("{session}")) {
+            if (sessionId === undefined)
+                continue;
+            out[name] = value.split("{session}").join(sessionId);
+        }
+        else
+            out[name] = value;
+    }
+    return Object.keys(out).length === 0 ? undefined : out;
+}
 export function adapterOptionsFor(profile, auth, sessionId) {
     // OR-1: exactly one sign-in shape reaches the adapter. An OAuth profile
     // has no key to pass — it passes the thunk the adapter re-resolves per
@@ -43,6 +62,7 @@ export function adapterOptionsFor(profile, auth, sessionId) {
     // own environment variable, and a profile with no baseUrl then sent the
     // stored vendor key wherever that variable pointed.
     const url = effectiveBaseUrl(profile.kind, profile.baseUrl);
+    const headers = expandProfileHeaders(profile.headers, sessionId);
     return {
         ...credential,
         ...(url !== undefined ? { baseUrl: url } : {}),
@@ -53,5 +73,9 @@ export function adapterOptionsFor(profile, auth, sessionId) {
         // cache.
         ...(sessionId !== undefined ? { promptCacheKey: sessionId } : {}),
         ...(profile.promptCaching !== undefined ? { promptCaching: profile.promptCaching } : {}),
+        // The endpoint's own headers (a gateway's session header, say), with
+        // the session id where the profile wrote `{session}` — the same id
+        // as the cache key above, so one conversation is one lane end to end.
+        ...(headers !== undefined ? { headers } : {}),
     };
 }

package/dist/config.d.ts

@@ -75,6 +75,16 @@ export interface ModelProfile {
      * the registry looks for this model's window when `baseUrl` has no row.
      */
     readonly upstream?: string;
+    /**
+     * Headers the endpoint needs on every request — a gateway that routes a
+     * conversation by a session header, say. `{session}` in a value becomes
+     * the kiso session's id, so one conversation keeps one id across /model
+     * and /resume, and two conversations never share one. Names are
+     * lower-cased. A credential header is refused by name: a key never lives
+     * in this file (`apiKeyEnv` and `kiso login` are the doors), and the
+     * framing headers belong to the adapter.
+     */
+    readonly headers?: Readonly<Record<string, string>>;
 }
 export interface AutoCompactConfig {
     readonly thresholdRatio: number;

package/dist/config.js

@@ -34,6 +34,27 @@ import { join } from "node:path";
 import { kisoHome } from "./state.js";
 import { AuthError, getCredential, providerIdOf } from "./auth/credentials.js";
 import { BUILTIN_MANIFESTS } from "@vincemakes/kiso-runtime/internal";
+/** Header names a profile may not set: credentials (a key never lives in the
+ *  config file) and the framing the adapter owns. */
+const REFUSED_HEADERS = new Set(["authorization", "proxy-authorization", "x-api-key", "api-key", "cookie", "host", "content-length", "content-type", "transfer-encoding", "connection"]);
+function parseHeaders(field, raw, fail) {
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw))
+        fail(field, "expected an object of header names to string values");
+    const out = {};
+    for (const [name, value] of Object.entries(raw)) {
+        if (!/^[A-Za-z0-9-]+$/.test(name))
+            fail(`${field}.${name}`, "expected a header name of letters, digits and dashes");
+        const lower = name.toLowerCase();
+        if (REFUSED_HEADERS.has(lower))
+            fail(`${field}.${name}`, "a credential or framing header cannot be set here — the key comes from apiKeyEnv or kiso login");
+        if (lower in out)
+            fail(`${field}.${name}`, "named twice (header names are case-insensitive)");
+        if (typeof value !== "string" || /[\r\n\0]/.test(value))
+            fail(`${field}.${name}`, "expected a one-line string value");
+        out[lower] = value;
+    }
+    return out;
+}
 const KINDS = ["openai-compat", "anthropic", "openai-responses"];
 const MODES_LIST = ["manual", "default", "accept-edits", "plan", "bypass", "dontAsk"];
 export class ConfigError extends Error {
@@ -149,6 +170,7 @@ export function parseConfig(text, source) {
                 fail(`models.${name}.contextWindow`, "expected a positive token count");
             if (p.upstream !== undefined && (typeof p.upstream !== "string" || p.upstream.trim() === ""))
                 fail(`models.${name}.upstream`, "expected the URL or name of what this endpoint forwards to");
+            const headers = p.headers === undefined ? undefined : parseHeaders(`models.${name}.headers`, p.headers, fail);
             models[name] = {
                 kind: p.kind,
                 model: p.model,
@@ -158,6 +180,7 @@ export function parseConfig(text, source) {
                 ...(typeof p.streamIdleMs === "number" ? { streamIdleMs: p.streamIdleMs } : {}),
                 ...(typeof p.contextWindow === "number" ? { contextWindow: p.contextWindow } : {}),
                 ...(typeof p.upstream === "string" ? { upstream: p.upstream.trim() } : {}),
+                ...(headers !== undefined ? { headers } : {}),
             };
         }
         out.models = models;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@vincemakes/kiso-code",
-	"version": "0.40.3",
+	"version": "0.40.4",
 	"description": "kiso-code \u2014 the coding agent on kiso, the durable runtime for AI agents: kiso chat / kiso resume / kiso sessions.",
 	"type": "module",
 	"license": "MIT",
@@ -18,20 +18,20 @@
 		"test": "vitest run"
 	},
 	"dependencies": {
-		"@vincemakes/kiso-ask-ext": "0.40.3",
-		"@vincemakes/kiso-core": "0.40.3",
-		"@vincemakes/kiso-evals": "0.40.3",
-		"@vincemakes/kiso-mcp-ext": "0.40.3",
-		"@vincemakes/kiso-provider-anthropic": "0.40.3",
-		"@vincemakes/kiso-provider-openai": "0.40.3",
-		"@vincemakes/kiso-provider-openai-responses": "0.40.3",
-		"@vincemakes/kiso-runtime": "0.40.3",
-		"@vincemakes/kiso-skills-ext": "0.40.3",
-		"@vincemakes/kiso-subagent-ext": "0.40.3",
-		"@vincemakes/kiso-task-ext": "0.40.3",
-		"@vincemakes/kiso-tools-node": "0.40.3",
-		"@vincemakes/kiso-tui": "0.40.3",
-		"@vincemakes/kiso-tui-cells": "0.40.3"
+		"@vincemakes/kiso-ask-ext": "0.40.4",
+		"@vincemakes/kiso-core": "0.40.4",
+		"@vincemakes/kiso-evals": "0.40.4",
+		"@vincemakes/kiso-mcp-ext": "0.40.4",
+		"@vincemakes/kiso-provider-anthropic": "0.40.4",
+		"@vincemakes/kiso-provider-openai": "0.40.4",
+		"@vincemakes/kiso-provider-openai-responses": "0.40.4",
+		"@vincemakes/kiso-runtime": "0.40.4",
+		"@vincemakes/kiso-skills-ext": "0.40.4",
+		"@vincemakes/kiso-subagent-ext": "0.40.4",
+		"@vincemakes/kiso-task-ext": "0.40.4",
+		"@vincemakes/kiso-tools-node": "0.40.4",
+		"@vincemakes/kiso-tui": "0.40.4",
+		"@vincemakes/kiso-tui-cells": "0.40.4"
 	},
 	"devDependencies": {
 		"@types/node": "^26.1.2",