praxis-agent 0.59.0 → 0.59.1

package/README.md

@@ -232,8 +232,12 @@ troubleshooting. Run `praxis --help` for the authoritative command surface.
   imports, memory, skills, commands, agents, hooks, settings, MCP servers,
   plugins, and append-only `praxis.transcript` JSONL sessions under `~/.praxis`,
   with bounded MCP connection, discovery, and tool operations plus safe
-  disconnect recovery that never replays an already-dispatched call. Default
-  tool selection defers `mcp__*` schemas behind a turn-scoped `ToolSearch`;
+  disconnect recovery that never replays an already-dispatched call. Stdio MCP
+  environment grants expand defined `${NAME}` references at launch without
+  exposing unrelated ambient credentials or shell-startup variables; reconnect
+  retains the derived grants, while reload derives them again from the current
+  environment. Default tool selection defers `mcp__*` schemas behind a
+  turn-scoped `ToolSearch`;
   each query activates at most eight deterministic matches for the next model
   request, and published MCP tool descriptions are capped at 2,048 Unicode
   code points. Text-only MCP results above 100,000 UTF-8 bytes are redacted

package/dist/mcp/claude-mcp-tools.js

@@ -257,12 +257,12 @@ export function validateClaudeMcpConfiguration(resources) {
     });
     return { servers, warnings };
 }
-async function transport(serverName, config, cwd, configRoot) {
+async function transport(serverName, config, cwd, configRoot, environment = process.env) {
     if (config.type === 'stdio') {
         return new StdioClientTransport({
             command: config.command,
             args: config.args,
-            env: sanitizeChildEnvironment(config.env),
+            env: sanitizeChildEnvironment(config.env, environment),
             cwd: config.cwd ?? cwd,
             stderr: 'pipe',
         });
@@ -280,6 +280,21 @@ async function transport(serverName, config, cwd, configRoot) {
             ...(authProvider ? { authProvider } : {}),
         });
 }
+function deriveMcpServerConfig(config, environment) {
+    if (config.type !== 'stdio')
+        return config;
+    const env = Object.fromEntries(Object.entries(config.env).map(([name, value]) => [
+        name,
+        value.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/gu, (match, variable) => {
+            const replacement = environment[variable];
+            return Object.prototype.hasOwnProperty.call(environment, variable) &&
+                typeof replacement === 'string'
+                ? replacement
+                : match;
+        }),
+    ]));
+    return { ...config, env };
+}
 function toolContent(result, sensitiveValues) {
     if (!Array.isArray(result.content)) {
         throw new Error('MCP tool result content must be an array');
@@ -883,7 +898,6 @@ export class ClaudeMcpToolRegistry {
                 warn(`MCP server ${server.name} unavailable: ${error instanceof Error ? error.message : String(error)}`);
                 continue;
             }
-            this.serverSensitiveValues.set(server.name, configSensitiveValues(config, server.sensitiveValues ?? [], this.options.environment ?? process.env));
             await this.connectServer(server.name, config, server.sensitiveValues);
         }
         this.publishPrompts();
@@ -1091,7 +1105,10 @@ export class ClaudeMcpToolRegistry {
     async connectServer(serverName, config, additionalSensitiveValues = [], expectedGeneration = this.generation) {
         this.assertOpenGeneration(expectedGeneration);
         this.statuses.set(serverName, { name: serverName, status: 'failed' });
-        const sensitiveValues = configSensitiveValues(config, additionalSensitiveValues, this.options.environment ?? process.env);
+        const environment = this.options.environment ?? process.env;
+        const launchConfig = deriveMcpServerConfig(config, environment);
+        const sensitiveValues = configSensitiveValues(launchConfig, additionalSensitiveValues, environment);
+        this.serverSensitiveValues.set(serverName, sensitiveValues);
         const session = new McpServerSession({
             serverName,
             connectionTimeoutMs: this.timeouts.connectionTimeoutMs,
@@ -1099,7 +1116,7 @@ export class ClaudeMcpToolRegistry {
             ...(this.options.signal ? { lifetimeSignal: this.options.signal } : {}),
             createTransport: async () => {
                 const configRoot = this.options.configRoot ?? join(homedir(), '.praxis');
-                return (await transport(serverName, config, this.options.cwd, configRoot));
+                return (await transport(serverName, launchConfig, this.options.cwd, configRoot, environment));
             },
             configureClient: (client) => {
                 client.setRequestHandler(ElicitRequestSchema, async (request) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "praxis-agent",
-  "version": "0.59.0",
+  "version": "0.59.1",
   "description": "Local-first, single-user general agent for the command line.",
   "license": "MIT",
   "author": "wuqisen",