@vincemakes/kiso-mcp-ext 0.33.0 → 0.36.0

package/dist/kiso-mcp.mjs

@@ -18267,6 +18267,31 @@ var StreamableHTTPClientTransport = class {
   }
 };
 
+// ../../packages/tools-node/dist/secret-env.js
+var SHELL_STRIP_EXACT = /* @__PURE__ */ new Set([
+  "ANTHROPIC_API_KEY",
+  "OPENAI_API_KEY",
+  "ANTHROPIC_BASE_URL",
+  "OPENAI_BASE_URL",
+  "ANTHROPIC_MODEL",
+  "OPENAI_MODEL"
+]);
+function strippedShellEnv(env, secretNames = []) {
+  const declared = new Set(secretNames);
+  const out = {};
+  for (const [key, value] of Object.entries(env)) {
+    if (SHELL_STRIP_EXACT.has(key))
+      continue;
+    if (declared.has(key))
+      continue;
+    if (key.endsWith("_API_KEY") || key.endsWith("_AUTH_TOKEN"))
+      continue;
+    if (value !== void 0)
+      out[key] = value;
+  }
+  return out;
+}
+
 // src/index.ts
 var CALL_TIMEOUT_MS = 6e4;
 var CONNECT_TIMEOUT_MS = 15e3;
@@ -18297,7 +18322,7 @@ var ConnectError = class extends Error {
 function kisoHome() {
   return process.env.KISO_HOME ?? join(homedir(), ".kiso");
 }
-function createMcpExtension() {
+function createMcpExtension(opts = {}) {
   const config2 = readConfig(process.env.KISO_MCP_CONFIG ?? join(kisoHome(), "mcp.json"));
   const status = [];
   const tools = [];
@@ -18310,7 +18335,7 @@ function createMcpExtension() {
   }
   const connects = [];
   for (const [name, server] of entries) {
-    const connectPromise = connectServer(name, server, clients);
+    const connectPromise = connectServer(name, server, clients, opts.secretEnvNames);
     for (const cached2 of cache[name] ?? []) {
       tools.push(mapCachedTool(name, cached2, () => connectPromise.then(({ client }) => client)));
     }
@@ -18436,7 +18461,7 @@ function readConfig(path) {
   }
   return cfg;
 }
-async function connectServer(name, cfg, clients) {
+async function connectServer(name, cfg, clients, secretEnvNames = []) {
   const client = new Client({ name: "kiso-mcp", version: "0.1.7" });
   clients.push(client);
   let ring;
@@ -18446,7 +18471,7 @@ async function connectServer(name, cfg, clients) {
     });
     await connectWithTimeout(client, transport);
   } else {
-    const env = { ...strippedEnv(), ...cfg.env ?? {} };
+    const env = { ...strippedShellEnv(process.env, secretEnvNames), ...cfg.env ?? {} };
     const r = new StderrRing();
     ring = r;
     const transport = new StdioClientTransport({
@@ -18502,23 +18527,6 @@ function renderResult(content) {
     return `[MCP ${b.type ?? "unknown"} content: ${b.mimeType ?? b.kind ?? "?"}]`;
   }).join("");
 }
-var STRIP_EXACT = [
-  "ANTHROPIC_API_KEY",
-  "OPENAI_API_KEY",
-  "ANTHROPIC_BASE_URL",
-  "OPENAI_BASE_URL",
-  "ANTHROPIC_MODEL",
-  "OPENAI_MODEL"
-];
-function strippedEnv() {
-  const out = {};
-  for (const [key, value] of Object.entries(process.env)) {
-    if (STRIP_EXACT.includes(key)) continue;
-    if (key.endsWith("_API_KEY") || key.endsWith("_AUTH_TOKEN")) continue;
-    if (value !== void 0) out[key] = value;
-  }
-  return out;
-}
 export {
   StderrRing,
   createMcpExtension as default

package/index.d.ts

@@ -7,5 +7,13 @@
  */
 import type { KisoExtension } from "@vincemakes/kiso-core";
 
-declare const createMcpExtension: () => KisoExtension | Promise<KisoExtension>;
+/** Astra F7: the env-var NAMES the host's configured model profiles
+ *  authenticate with. Only the host's config knows them, so the host
+ *  declares them; every stdio child is spawned without them. Omitted (a
+ *  standalone extension load) = the exact-list and suffix rules alone. */
+export interface McpExtensionOptions {
+	readonly secretEnvNames?: readonly string[];
+}
+
+declare const createMcpExtension: (opts?: McpExtensionOptions) => KisoExtension | Promise<KisoExtension>;
 export default createMcpExtension;

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@vincemakes/kiso-mcp-ext",
-	"version": "0.33.0",
-	"description": "kiso official MCP bridge extension — MCP servers become mcp__ tools, kernel untouched",
+	"version": "0.36.0",
+	"description": "kiso official MCP bridge extension \u2014 MCP servers become mcp__ tools, kernel untouched",
 	"type": "module",
 	"license": "MIT",
 	"main": "./dist/kiso-mcp.mjs",
@@ -24,7 +24,8 @@
 	},
 	"devDependencies": {
 		"@modelcontextprotocol/sdk": "^1.0.0",
-		"@vincemakes/kiso-core": "0.33.0",
+		"@vincemakes/kiso-core": "0.36.0",
+		"@vincemakes/kiso-tools-node": "0.36.0",
 		"@types/node": "^26.1.2",
 		"esbuild": "^0.24.0",
 		"typescript": "^5.7.2",