agent-afk 5.181.0 → 5.181.1

package/dist/agent/mcp/client.d.ts

@@ -2,6 +2,7 @@ import { type CallToolResult, type Tool as McpTool } from '@modelcontextprotocol
 import { UnauthorizedError } from '@modelcontextprotocol/sdk/client/auth.js';
 import type { ToolResult } from '../tools/types.js';
 import type { McpServerConfig } from './types.js';
+import type { McpServerLayer } from './env-containment.js';
 export interface McpClientConnectResult {
     tools: McpTool[];
     serverInfo: {
@@ -12,12 +13,14 @@ export interface McpClientConnectResult {
 export declare class McpClient {
     private readonly serverName;
     private readonly config;
+    private readonly layer;
+    private readonly trustedAllowSecretEnv;
     private client;
     private connected;
     private pendingAuthTransport;
     onTransportError?: (err: Error) => void;
     onToolListChanged?: () => void;
-    constructor(serverName: string, config: McpServerConfig);
+    constructor(serverName: string, config: McpServerConfig, layer?: McpServerLayer, trustedAllowSecretEnv?: readonly string[]);
     connect(): Promise<McpClientConnectResult>;
     listTools(): Promise<McpTool[]>;
     refreshTools(): Promise<McpTool[]>;

package/dist/agent/mcp/config-loader.d.ts

@@ -1,4 +1,5 @@
 import type { McpServerConfig } from './types.js';
+import type { McpServerLayer } from './env-containment.js';
 export interface McpConfigFile {
     mcpServers?: Record<string, McpServerConfig>;
 }
@@ -6,6 +7,8 @@ export interface LoadedMcpConfig {
     mcpServers: Record<string, McpServerConfig>;
     sources: string[];
     warnings: string[];
+    serverLayers: Record<string, McpServerLayer>;
+    userAllowSecretEnv: Record<string, string[]>;
 }
 export declare function getMcpConfigPath(): string;
 export declare function getProjectMcpConfigPath(cwd?: string): string | null;

package/dist/agent/mcp/env-containment.d.ts

@@ -0,0 +1,9 @@
+export type McpServerLayer = 'project' | 'user-global' | 'plugin' | 'cli';
+export declare function isSecretPattern(varName: string): boolean;
+export declare function isDangerousInherited(varName: string): boolean;
+export interface SecretCheckResult {
+    allowed: boolean;
+    warning?: string;
+}
+export declare function checkSecretExpansion(varName: string, layer: McpServerLayer, serverName: string, allowSecretEnv?: readonly string[]): SecretCheckResult;
+export declare function scrubDangerousEnv(base: Record<string, string>): string[];

package/dist/agent/mcp/env.d.ts

@@ -1,6 +1,20 @@
+import { type McpServerLayer } from './env-containment.js';
 export interface EnvExpansionResult<T> {
     value: T;
     missing: string[];
+    blocked: string[];
 }
-export declare function expandEnvString(input: string, source?: NodeJS.ProcessEnv): EnvExpansionResult<string>;
-export declare function expandEnvRecord(input: Record<string, string> | undefined, source?: NodeJS.ProcessEnv): EnvExpansionResult<Record<string, string>>;
+export declare function expandEnvString(input: string, source?: NodeJS.ProcessEnv): Omit<EnvExpansionResult<string>, 'blocked'>;
+export declare function expandEnvRecord(input: Record<string, string> | undefined, source?: NodeJS.ProcessEnv): Omit<EnvExpansionResult<Record<string, string>>, 'blocked'>;
+export interface EnvExpansionContext {
+    layer: McpServerLayer;
+    serverName: string;
+    allowSecretEnv?: readonly string[];
+}
+export declare function expandEnvStringForLayer(input: string, ctx: EnvExpansionContext, source?: NodeJS.ProcessEnv, warn?: (msg: string) => void): EnvExpansionResult<string>;
+export declare function expandEnvRecordForLayer(input: Record<string, string> | undefined, ctx: EnvExpansionContext, source?: NodeJS.ProcessEnv, warn?: (msg: string) => void): EnvExpansionResult<Record<string, string>>;
+export declare function expandHeadersForLayer(headers: Record<string, string> | undefined, ctx: EnvExpansionContext, source?: NodeJS.ProcessEnv, warn?: (msg: string) => void): {
+    headers: Record<string, string>;
+    missing: string[];
+    blocked: string[];
+};

package/dist/agent/mcp/manager.d.ts

@@ -1,9 +1,12 @@
 import type { AnthropicToolDef, ToolHandler } from '../tools/types.js';
 import type { McpClientState, McpServerConfig } from './types.js';
 import type { TraceSink } from '../trace/index.js';
+import type { McpServerLayer } from './env-containment.js';
 export interface McpManagerInitOptions {
     warnings?: string[];
     traceWriter?: TraceSink;
+    serverLayers?: Record<string, McpServerLayer>;
+    userAllowSecretEnv?: Record<string, string[]>;
 }
 export declare class McpManager {
     private readonly records;

package/dist/agent/mcp/transport.d.ts

@@ -1,6 +1,7 @@
 import type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
 import type { OAuthClientProvider } from '@modelcontextprotocol/sdk/client/auth.js';
 import type { McpServerConfig } from './types.js';
+import { type McpServerLayer } from './env-containment.js';
 export declare function expandHeaders(headers: Record<string, string> | undefined, source?: NodeJS.ProcessEnv): {
     headers: Record<string, string>;
     missing: string[];
@@ -9,4 +10,4 @@ export interface CreateTransportResult {
     transport: Transport;
     isSSE: boolean;
 }
-export declare function createTransport(serverName: string, config: McpServerConfig, oauthProvider?: OAuthClientProvider): CreateTransportResult;
+export declare function createTransport(serverName: string, config: McpServerConfig, oauthProvider?: OAuthClientProvider, layer?: McpServerLayer, trustedAllowSecretEnv?: readonly string[]): CreateTransportResult;

package/dist/agent/mcp/types.d.ts

@@ -10,6 +10,7 @@ export interface McpServerConfig {
     disabled?: boolean;
     alwaysLoad?: boolean;
     timeout?: number;
+    allowSecretEnv?: string[];
 }
 export type McpClientStatus = 'connecting' | 'connected' | 'error' | 'disabled' | 'oauth_pending';
 export interface McpClientState {