fourmis-agents-sdk 0.2.2 → 0.2.4

package/dist/agents/index.js

@@ -97,14 +97,18 @@ __export(exports_openai_oauth, {
 import { randomBytes, createHash } from "crypto";
 import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
 import { join } from "path";
+import { homedir } from "os";
+function getHome() {
+  return process.env.HOME ?? homedir();
+}
 function tokenDir() {
-  return join(process.env.HOME ?? "/root", ".fourmis");
+  return join(getHome(), ".fourmis");
 }
 function tokenPath() {
   return join(tokenDir(), "openai-auth.json");
 }
 function codexFallbackPath() {
-  return join(process.env.HOME ?? "/root", ".codex", "auth.json");
+  return join(getHome(), ".codex", "auth.json");
 }
 function loadTokens() {
   for (const p of [tokenPath(), codexFallbackPath()]) {
@@ -1447,9 +1451,10 @@ class OpenAIAdapter {
   }
 }
 function loadTokensSync() {
+  const home = process.env.HOME ?? __require("os").homedir();
   const paths = [
-    `${process.env.HOME}/.fourmis/openai-auth.json`,
-    `${process.env.HOME}/.codex/auth.json`
+    `${home}/.fourmis/openai-auth.json`,
+    `${home}/.codex/auth.json`
   ];
   for (const p of paths) {
     try {
@@ -2053,8 +2058,6 @@ var ALL_TOOLS = {
 function buildToolRegistry(toolNames, allowedTools, disallowedTools) {
   const registry = new ToolRegistry;
   for (const name of toolNames) {
-    if (allowedTools && !allowedTools.includes(name))
-      continue;
     if (disallowedTools?.includes(name))
       continue;
     const tool = ALL_TOOLS[name];

package/dist/agents/tools.js

@@ -97,14 +97,18 @@ __export(exports_openai_oauth, {
 import { randomBytes, createHash } from "crypto";
 import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
 import { join } from "path";
+import { homedir } from "os";
+function getHome() {
+  return process.env.HOME ?? homedir();
+}
 function tokenDir() {
-  return join(process.env.HOME ?? "/root", ".fourmis");
+  return join(getHome(), ".fourmis");
 }
 function tokenPath() {
   return join(tokenDir(), "openai-auth.json");
 }
 function codexFallbackPath() {
-  return join(process.env.HOME ?? "/root", ".codex", "auth.json");
+  return join(getHome(), ".codex", "auth.json");
 }
 function loadTokens() {
   for (const p of [tokenPath(), codexFallbackPath()]) {
@@ -1447,9 +1451,10 @@ class OpenAIAdapter {
   }
 }
 function loadTokensSync() {
+  const home = process.env.HOME ?? __require("os").homedir();
   const paths = [
-    `${process.env.HOME}/.fourmis/openai-auth.json`,
-    `${process.env.HOME}/.codex/auth.json`
+    `${home}/.fourmis/openai-auth.json`,
+    `${home}/.codex/auth.json`
   ];
   for (const p of paths) {
     try {
@@ -2053,8 +2058,6 @@ var ALL_TOOLS = {
 function buildToolRegistry(toolNames, allowedTools, disallowedTools) {
   const registry = new ToolRegistry;
   for (const name of toolNames) {
-    if (allowedTools && !allowedTools.includes(name))
-      continue;
     if (disallowedTools?.includes(name))
       continue;
     const tool = ALL_TOOLS[name];

package/dist/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,EAAqB,MAAM,YAAY,CAAC;AAoBzE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,KAAK,CAAC,MAAM,EAAE;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB,GAAG,KAAK,CAqJR"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,EAAqB,MAAM,YAAY,CAAC;AAoBzE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,KAAK,CAAC,MAAM,EAAE;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB,GAAG,KAAK,CA8JR"}

package/dist/api.js

@@ -97,14 +97,18 @@ __export(exports_openai_oauth, {
 import { randomBytes, createHash } from "crypto";
 import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
 import { join } from "path";
+import { homedir } from "os";
+function getHome() {
+  return process.env.HOME ?? homedir();
+}
 function tokenDir() {
-  return join(process.env.HOME ?? "/root", ".fourmis");
+  return join(getHome(), ".fourmis");
 }
 function tokenPath() {
   return join(tokenDir(), "openai-auth.json");
 }
 function codexFallbackPath() {
-  return join(process.env.HOME ?? "/root", ".codex", "auth.json");
+  return join(getHome(), ".codex", "auth.json");
 }
 function loadTokens() {
   for (const p of [tokenPath(), codexFallbackPath()]) {
@@ -1447,9 +1451,10 @@ class OpenAIAdapter {
   }
 }
 function loadTokensSync() {
+  const home = process.env.HOME ?? __require("os").homedir();
   const paths = [
-    `${process.env.HOME}/.fourmis/openai-auth.json`,
-    `${process.env.HOME}/.codex/auth.json`
+    `${home}/.fourmis/openai-auth.json`,
+    `${home}/.codex/auth.json`
   ];
   for (const p of paths) {
     try {
@@ -2053,8 +2058,6 @@ var ALL_TOOLS = {
 function buildToolRegistry(toolNames, allowedTools, disallowedTools) {
   const registry = new ToolRegistry;
   for (const name of toolNames) {
-    if (allowedTools && !allowedTools.includes(name))
-      continue;
     if (disallowedTools?.includes(name))
       continue;
     const tool = ALL_TOOLS[name];
@@ -2209,7 +2212,7 @@ class PermissionManager {
 // src/settings.ts
 import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
 import { dirname as dirname2, join as join2 } from "path";
-import { homedir } from "os";
+import { homedir as homedir2 } from "os";
 
 class SettingsManager {
   cwd;
@@ -2295,7 +2298,7 @@ class SettingsManager {
   sourceToPath(source) {
     switch (source) {
       case "user":
-        return join2(homedir(), ".claude", "settings.json");
+        return join2(homedir2(), ".claude", "settings.json");
       case "project":
         return join2(this.cwd, ".claude", "settings.json");
       case "local":
@@ -2305,7 +2308,7 @@ class SettingsManager {
   destinationToPath(destination) {
     switch (destination) {
       case "userSettings":
-        return join2(homedir(), ".claude", "settings.json");
+        return join2(homedir2(), ".claude", "settings.json");
       case "projectSettings":
         return join2(this.cwd, ".claude", "settings.json");
       case "localSettings":
@@ -2537,11 +2540,16 @@ class McpClientManager {
         await client.connect(clientTransport);
       } else if (config.type === "sse") {
         const { SSEClientTransport } = await import("@modelcontextprotocol/sdk/client/sse.js");
-        const transport = new SSEClientTransport(new URL(config.url));
+        const opts = config.headers ? {
+          eventSourceInit: { headers: config.headers },
+          requestInit: { headers: config.headers }
+        } : undefined;
+        const transport = new SSEClientTransport(new URL(config.url), opts);
         await client.connect(transport);
       } else if (config.type === "http") {
         const { StreamableHTTPClientTransport } = await import("@modelcontextprotocol/sdk/client/streamableHttp.js");
-        const transport = new StreamableHTTPClientTransport(new URL(config.url));
+        const requestInit = config.headers ? { headers: config.headers } : undefined;
+        const transport = new StreamableHTTPClientTransport(new URL(config.url), { requestInit });
         await client.connect(transport);
       } else {
         const { StdioClientTransport } = await import("@modelcontextprotocol/sdk/client/stdio.js");
@@ -2926,12 +2934,12 @@ class TaskManager {
 // src/utils/session-store.ts
 import { readFileSync as readFileSync4, appendFileSync, mkdirSync as mkdirSync3, readdirSync, statSync } from "fs";
 import { join as join4 } from "path";
-import { homedir as homedir2 } from "os";
+import { homedir as homedir3 } from "os";
 function sanitizeCwd(cwd) {
   return cwd.replace(/[/.]/g, "-");
 }
 function sessionsDir(cwd) {
-  return join4(homedir2(), ".claude", "projects", sanitizeCwd(cwd));
+  return join4(homedir3(), ".claude", "projects", sanitizeCwd(cwd));
 }
 function ensureDir(dir) {
   mkdirSync3(dir, { recursive: true });
@@ -3039,7 +3047,7 @@ function query(params) {
   });
   const model = options.model ?? DEFAULT_MODEL;
   const toolNames = resolveToolNames(options.tools);
-  const registry = buildToolRegistry(toolNames, options.allowedTools, options.disallowedTools);
+  const registry = buildToolRegistry(toolNames, undefined, options.disallowedTools);
   const systemPrompt = options.systemPrompt ?? buildSystemPrompt({
     tools: registry.list(),
     cwd: options.cwd,
@@ -3067,6 +3075,14 @@ function query(params) {
         mergedPermissions.deny = mergedDeny;
     }
   }
+  if (options.allowedTools && options.allowedTools.length > 0) {
+    if (!mergedPermissions)
+      mergedPermissions = {};
+    mergedPermissions.allow = [
+      ...mergedPermissions.allow ?? [],
+      ...options.allowedTools
+    ];
+  }
   const permissions = new PermissionManager(options.permissionMode ?? "default", options.canUseTool, mergedPermissions, settingsManager);
   const cwd = options.cwd ?? process.cwd();
   let sessionId = options.sessionId ?? uuid();

package/dist/auth/login-openai.js

@@ -28,14 +28,18 @@ __export(exports_openai_oauth, {
 import { randomBytes, createHash } from "crypto";
 import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
 import { join } from "path";
+import { homedir } from "os";
+function getHome() {
+  return process.env.HOME ?? homedir();
+}
 function tokenDir() {
-  return join(process.env.HOME ?? "/root", ".fourmis");
+  return join(getHome(), ".fourmis");
 }
 function tokenPath() {
   return join(tokenDir(), "openai-auth.json");
 }
 function codexFallbackPath() {
-  return join(process.env.HOME ?? "/root", ".codex", "auth.json");
+  return join(getHome(), ".codex", "auth.json");
 }
 function loadTokens() {
   for (const p of [tokenPath(), codexFallbackPath()]) {

package/dist/auth/openai-oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openai-oauth.d.ts","sourceRoot":"","sources":["../../src/auth/openai-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAiBH,MAAM,MAAM,YAAY,GAAG;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAcF,wBAAgB,UAAU,IAAI,YAAY,GAAG,IAAI,CAahD;AAYD,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9D;AAID,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAKnE;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAO5D;AAmDD,wBAAsB,aAAa,IAAI,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAwBhG;AAID,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,KAAK,CACzB,IAAI,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5B,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA+BnE"}
+{"version":3,"file":"openai-oauth.d.ts","sourceRoot":"","sources":["../../src/auth/openai-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkBH,MAAM,MAAM,YAAY,GAAG;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAkBF,wBAAgB,UAAU,IAAI,YAAY,GAAG,IAAI,CAahD;AAYD,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9D;AAID,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAKnE;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAO5D;AAmDD,wBAAsB,aAAa,IAAI,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAwBhG;AAID,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,KAAK,CACzB,IAAI,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5B,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA+BnE"}

package/dist/auth/openai-oauth.js

@@ -27,14 +27,18 @@ __export(exports_openai_oauth, {
 import { randomBytes, createHash } from "crypto";
 import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
 import { join } from "path";
+import { homedir } from "os";
+function getHome() {
+  return process.env.HOME ?? homedir();
+}
 function tokenDir() {
-  return join(process.env.HOME ?? "/root", ".fourmis");
+  return join(getHome(), ".fourmis");
 }
 function tokenPath() {
   return join(tokenDir(), "openai-auth.json");
 }
 function codexFallbackPath() {
-  return join(process.env.HOME ?? "/root", ".codex", "auth.json");
+  return join(getHome(), ".codex", "auth.json");
 }
 function loadTokens() {
   for (const p of [tokenPath(), codexFallbackPath()]) {

package/dist/index.js

@@ -97,14 +97,18 @@ __export(exports_openai_oauth, {
 import { randomBytes, createHash } from "crypto";
 import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
 import { join } from "path";
+import { homedir } from "os";
+function getHome() {
+  return process.env.HOME ?? homedir();
+}
 function tokenDir() {
-  return join(process.env.HOME ?? "/root", ".fourmis");
+  return join(getHome(), ".fourmis");
 }
 function tokenPath() {
   return join(tokenDir(), "openai-auth.json");
 }
 function codexFallbackPath() {
-  return join(process.env.HOME ?? "/root", ".codex", "auth.json");
+  return join(getHome(), ".codex", "auth.json");
 }
 function loadTokens() {
   for (const p of [tokenPath(), codexFallbackPath()]) {
@@ -1447,9 +1451,10 @@ class OpenAIAdapter {
   }
 }
 function loadTokensSync() {
+  const home = process.env.HOME ?? __require("os").homedir();
   const paths = [
-    `${process.env.HOME}/.fourmis/openai-auth.json`,
-    `${process.env.HOME}/.codex/auth.json`
+    `${home}/.fourmis/openai-auth.json`,
+    `${home}/.codex/auth.json`
   ];
   for (const p of paths) {
     try {
@@ -2053,8 +2058,6 @@ var ALL_TOOLS = {
 function buildToolRegistry(toolNames, allowedTools, disallowedTools) {
   const registry = new ToolRegistry;
   for (const name of toolNames) {
-    if (allowedTools && !allowedTools.includes(name))
-      continue;
     if (disallowedTools?.includes(name))
       continue;
     const tool = ALL_TOOLS[name];
@@ -2209,7 +2212,7 @@ class PermissionManager {
 // src/settings.ts
 import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
 import { dirname as dirname2, join as join2 } from "path";
-import { homedir } from "os";
+import { homedir as homedir2 } from "os";
 
 class SettingsManager {
   cwd;
@@ -2295,7 +2298,7 @@ class SettingsManager {
   sourceToPath(source) {
     switch (source) {
       case "user":
-        return join2(homedir(), ".claude", "settings.json");
+        return join2(homedir2(), ".claude", "settings.json");
       case "project":
         return join2(this.cwd, ".claude", "settings.json");
       case "local":
@@ -2305,7 +2308,7 @@ class SettingsManager {
   destinationToPath(destination) {
     switch (destination) {
       case "userSettings":
-        return join2(homedir(), ".claude", "settings.json");
+        return join2(homedir2(), ".claude", "settings.json");
       case "projectSettings":
         return join2(this.cwd, ".claude", "settings.json");
       case "localSettings":
@@ -2537,11 +2540,16 @@ class McpClientManager {
         await client.connect(clientTransport);
       } else if (config.type === "sse") {
         const { SSEClientTransport } = await import("@modelcontextprotocol/sdk/client/sse.js");
-        const transport = new SSEClientTransport(new URL(config.url));
+        const opts = config.headers ? {
+          eventSourceInit: { headers: config.headers },
+          requestInit: { headers: config.headers }
+        } : undefined;
+        const transport = new SSEClientTransport(new URL(config.url), opts);
         await client.connect(transport);
       } else if (config.type === "http") {
         const { StreamableHTTPClientTransport } = await import("@modelcontextprotocol/sdk/client/streamableHttp.js");
-        const transport = new StreamableHTTPClientTransport(new URL(config.url));
+        const requestInit = config.headers ? { headers: config.headers } : undefined;
+        const transport = new StreamableHTTPClientTransport(new URL(config.url), { requestInit });
         await client.connect(transport);
       } else {
         const { StdioClientTransport } = await import("@modelcontextprotocol/sdk/client/stdio.js");
@@ -2926,12 +2934,12 @@ class TaskManager {
 // src/utils/session-store.ts
 import { readFileSync as readFileSync4, appendFileSync, mkdirSync as mkdirSync3, readdirSync, statSync } from "fs";
 import { join as join4 } from "path";
-import { homedir as homedir2 } from "os";
+import { homedir as homedir3 } from "os";
 function sanitizeCwd(cwd) {
   return cwd.replace(/[/.]/g, "-");
 }
 function sessionsDir(cwd) {
-  return join4(homedir2(), ".claude", "projects", sanitizeCwd(cwd));
+  return join4(homedir3(), ".claude", "projects", sanitizeCwd(cwd));
 }
 function ensureDir(dir) {
   mkdirSync3(dir, { recursive: true });
@@ -3039,7 +3047,7 @@ function query(params) {
   });
   const model = options.model ?? DEFAULT_MODEL;
   const toolNames = resolveToolNames(options.tools);
-  const registry = buildToolRegistry(toolNames, options.allowedTools, options.disallowedTools);
+  const registry = buildToolRegistry(toolNames, undefined, options.disallowedTools);
   const systemPrompt = options.systemPrompt ?? buildSystemPrompt({
     tools: registry.list(),
     cwd: options.cwd,
@@ -3067,6 +3075,14 @@ function query(params) {
         mergedPermissions.deny = mergedDeny;
     }
   }
+  if (options.allowedTools && options.allowedTools.length > 0) {
+    if (!mergedPermissions)
+      mergedPermissions = {};
+    mergedPermissions.allow = [
+      ...mergedPermissions.allow ?? [],
+      ...options.allowedTools
+    ];
+  }
   const permissions = new PermissionManager(options.permissionMode ?? "default", options.canUseTool, mergedPermissions, settingsManager);
   const cwd = options.cwd ?? process.cwd();
   let sessionId = options.sessionId ?? uuid();

package/dist/mcp/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/mcp/client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAEf,eAAe,EAChB,MAAM,YAAY,CAAC;AASpB,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,OAAO,CAAsC;gBAEzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;IAI9C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAKnB,UAAU;IAsDxB;;OAEG;IACH,QAAQ,IAAI,kBAAkB,EAAE;IAsB1B,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IA2BnF,aAAa,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,eAAe,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IA4BrF,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAepE,MAAM,IAAI,eAAe,EAAE;IAcrB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAYhC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/mcp/client.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAEf,eAAe,EAChB,MAAM,YAAY,CAAC;AASpB,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,OAAO,CAAsC;gBAEzC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;IAI9C,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAKnB,UAAU;IA+DxB;;OAEG;IACH,QAAQ,IAAI,kBAAkB,EAAE;IAsB1B,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;IA2BnF,aAAa,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,eAAe,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IA4BrF,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAepE,MAAM,IAAI,eAAe,EAAE;IAcrB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAYhC"}

package/dist/mcp/client.js

@@ -35,11 +35,16 @@ class McpClientManager {
         await client.connect(clientTransport);
       } else if (config.type === "sse") {
         const { SSEClientTransport } = await import("@modelcontextprotocol/sdk/client/sse.js");
-        const transport = new SSEClientTransport(new URL(config.url));
+        const opts = config.headers ? {
+          eventSourceInit: { headers: config.headers },
+          requestInit: { headers: config.headers }
+        } : undefined;
+        const transport = new SSEClientTransport(new URL(config.url), opts);
         await client.connect(transport);
       } else if (config.type === "http") {
         const { StreamableHTTPClientTransport } = await import("@modelcontextprotocol/sdk/client/streamableHttp.js");
-        const transport = new StreamableHTTPClientTransport(new URL(config.url));
+        const requestInit = config.headers ? { headers: config.headers } : undefined;
+        const transport = new StreamableHTTPClientTransport(new URL(config.url), { requestInit });
         await client.connect(transport);
       } else {
         const { StdioClientTransport } = await import("@modelcontextprotocol/sdk/client/stdio.js");

package/dist/mcp/index.js

@@ -35,11 +35,16 @@ class McpClientManager {
         await client.connect(clientTransport);
       } else if (config.type === "sse") {
         const { SSEClientTransport } = await import("@modelcontextprotocol/sdk/client/sse.js");
-        const transport = new SSEClientTransport(new URL(config.url));
+        const opts = config.headers ? {
+          eventSourceInit: { headers: config.headers },
+          requestInit: { headers: config.headers }
+        } : undefined;
+        const transport = new SSEClientTransport(new URL(config.url), opts);
         await client.connect(transport);
       } else if (config.type === "http") {
         const { StreamableHTTPClientTransport } = await import("@modelcontextprotocol/sdk/client/streamableHttp.js");
-        const transport = new StreamableHTTPClientTransport(new URL(config.url));
+        const requestInit = config.headers ? { headers: config.headers } : undefined;
+        const transport = new StreamableHTTPClientTransport(new URL(config.url), { requestInit });
         await client.connect(transport);
       } else {
         const { StdioClientTransport } = await import("@modelcontextprotocol/sdk/client/stdio.js");

package/dist/providers/openai.js

@@ -27,14 +27,18 @@ __export(exports_openai_oauth, {
 import { randomBytes, createHash } from "crypto";
 import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
 import { join } from "path";
+import { homedir } from "os";
+function getHome() {
+  return process.env.HOME ?? homedir();
+}
 function tokenDir() {
-  return join(process.env.HOME ?? "/root", ".fourmis");
+  return join(getHome(), ".fourmis");
 }
 function tokenPath() {
   return join(tokenDir(), "openai-auth.json");
 }
 function codexFallbackPath() {
-  return join(process.env.HOME ?? "/root", ".codex", "auth.json");
+  return join(getHome(), ".codex", "auth.json");
 }
 function loadTokens() {
   for (const p of [tokenPath(), codexFallbackPath()]) {
@@ -850,9 +854,10 @@ class OpenAIAdapter {
   }
 }
 function loadTokensSync() {
+  const home = process.env.HOME ?? __require("os").homedir();
   const paths = [
-    `${process.env.HOME}/.fourmis/openai-auth.json`,
-    `${process.env.HOME}/.codex/auth.json`
+    `${home}/.fourmis/openai-auth.json`,
+    `${home}/.codex/auth.json`
   ];
   for (const p of paths) {
     try {

package/dist/providers/registry.js

@@ -27,14 +27,18 @@ __export(exports_openai_oauth, {
 import { randomBytes, createHash } from "crypto";
 import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
 import { join } from "path";
+import { homedir } from "os";
+function getHome() {
+  return process.env.HOME ?? homedir();
+}
 function tokenDir() {
-  return join(process.env.HOME ?? "/root", ".fourmis");
+  return join(getHome(), ".fourmis");
 }
 function tokenPath() {
   return join(tokenDir(), "openai-auth.json");
 }
 function codexFallbackPath() {
-  return join(process.env.HOME ?? "/root", ".codex", "auth.json");
+  return join(getHome(), ".codex", "auth.json");
 }
 function loadTokens() {
   for (const p of [tokenPath(), codexFallbackPath()]) {
@@ -1064,9 +1068,10 @@ class OpenAIAdapter {
   }
 }
 function loadTokensSync() {
+  const home = process.env.HOME ?? __require("os").homedir();
   const paths = [
-    `${process.env.HOME}/.fourmis/openai-auth.json`,
-    `${process.env.HOME}/.codex/auth.json`
+    `${home}/.fourmis/openai-auth.json`,
+    `${home}/.codex/auth.json`
   ];
   for (const p of paths) {
     try {

package/dist/tools/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAkB7C;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EAAE,EACnB,YAAY,CAAC,EAAE,MAAM,EAAE,EACvB,eAAe,CAAC,EAAE,MAAM,EAAE,GACzB,YAAY,CAed"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAkB7C;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EAAE,EACnB,YAAY,CAAC,EAAE,MAAM,EAAE,EACvB,eAAe,CAAC,EAAE,MAAM,EAAE,GACzB,YAAY,CAad"}

package/dist/tools/index.js

@@ -570,8 +570,6 @@ var ALL_TOOLS = {
 function buildToolRegistry(toolNames, allowedTools, disallowedTools) {
   const registry = new ToolRegistry;
   for (const name of toolNames) {
-    if (allowedTools && !allowedTools.includes(name))
-      continue;
     if (disallowedTools?.includes(name))
       continue;
     const tool = ALL_TOOLS[name];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fourmis-agents-sdk",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "Multi-provider AI agent SDK with direct API access and in-process tool execution",
   "type": "module",
   "main": "dist/index.js",