agor-live 0.22.0 → 0.23.2

package/dist/core/tools/mcp/http-headers.cjs

@@ -30,6 +30,14 @@ __export(http_headers_exports, {
   restoreRedactedMCPCustomHeaders: () => restoreRedactedMCPCustomHeaders
 });
 module.exports = __toCommonJS(http_headers_exports);
+
+// src/mcp/template-patterns.ts
+var USER_ENV_PLACEHOLDER_RE = /^\{\{\s*user\.env\.[A-Za-z_][A-Za-z0-9_]*\s*\}\}$/;
+function isUserEnvPlaceholder(value) {
+  return USER_ENV_PLACEHOLDER_RE.test(value.trim());
+}
+
+// src/tools/mcp/http-headers.ts
 var MCP_HEADER_REDACTED_SENTINEL = "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022";
 var RESERVED_MCP_CUSTOM_HEADER_NAMES = /* @__PURE__ */ new Set([
   "authorization",
@@ -69,7 +77,15 @@ function redactMCPCustomHeaders(headers) {
   const normalized = normalizeMCPCustomHeaders(headers);
   if (!normalized) return void 0;
   return Object.fromEntries(
-    Object.keys(normalized).map((key) => [key, MCP_HEADER_REDACTED_SENTINEL])
+    Object.entries(normalized).map(([key, value]) => [
+      key,
+      // Leave a bare `{{ user.env.NAME }}` placeholder intact so executor-side
+      // session-scoping can resolve it against the user's env; redacting it to
+      // the sentinel would send `••••••••` as the literal header value. Raw
+      // secrets — and partial/multiple/helper expressions that can carry secret
+      // material — are still redacted.
+      isUserEnvPlaceholder(value) ? value : MCP_HEADER_REDACTED_SENTINEL
+    ])
   );
 }
 function restoreRedactedMCPCustomHeaders(options) {

package/dist/core/tools/mcp/http-headers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-headers.d.ts","sourceRoot":"","sources":["../../../src/tools/mcp/http-headers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,eAAO,MAAM,4BAA4B,qDAAa,CAAC;AAEvD,eAAO,MAAM,gCAAgC,aAc3C,CAAC;AAIH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,wBAAgB,yBAAyB,CACvC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAapC;AAED,wBAAgB,sBAAsB,CACpC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAMpC;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAYrC;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAOrC"}
+{"version":3,"file":"http-headers.d.ts","sourceRoot":"","sources":["../../../src/tools/mcp/http-headers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,eAAO,MAAM,4BAA4B,qDAAa,CAAC;AAEvD,eAAO,MAAM,gCAAgC,aAc3C,CAAC;AAIH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,wBAAgB,yBAAyB,CACvC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAapC;AAED,wBAAgB,sBAAsB,CACpC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAcpC;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAYrC;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAOrC"}

package/dist/core/tools/mcp/http-headers.js

@@ -1,3 +1,9 @@
+// src/mcp/template-patterns.ts
+var USER_ENV_PLACEHOLDER_RE = /^\{\{\s*user\.env\.[A-Za-z_][A-Za-z0-9_]*\s*\}\}$/;
+function isUserEnvPlaceholder(value) {
+  return USER_ENV_PLACEHOLDER_RE.test(value.trim());
+}
+
 // src/tools/mcp/http-headers.ts
 var MCP_HEADER_REDACTED_SENTINEL = "\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022";
 var RESERVED_MCP_CUSTOM_HEADER_NAMES = /* @__PURE__ */ new Set([
@@ -38,7 +44,15 @@ function redactMCPCustomHeaders(headers) {
   const normalized = normalizeMCPCustomHeaders(headers);
   if (!normalized) return void 0;
   return Object.fromEntries(
-    Object.keys(normalized).map((key) => [key, MCP_HEADER_REDACTED_SENTINEL])
+    Object.entries(normalized).map(([key, value]) => [
+      key,
+      // Leave a bare `{{ user.env.NAME }}` placeholder intact so executor-side
+      // session-scoping can resolve it against the user's env; redacting it to
+      // the sentinel would send `••••••••` as the literal header value. Raw
+      // secrets — and partial/multiple/helper expressions that can carry secret
+      // material — are still redacted.
+      isUserEnvPlaceholder(value) ? value : MCP_HEADER_REDACTED_SENTINEL
+    ])
   );
 }
 function restoreRedactedMCPCustomHeaders(options) {