fix(mcp): allow common Windows env vars by default

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
This commit is contained in:
YeonGyu-Kim
2026-04-03 18:04:20 +09:00
parent 316d250465
commit e20b59cb29
2 changed files with 11 additions and 2 deletions
@@ -5,6 +5,8 @@ const BUILTIN_ALLOWED_MCP_ENV_VARS = [
"SHELL",
"TERM",
"TMPDIR",
"TMP",
"TEMP",
"PWD",
"OLDPWD",
"LANG",
@@ -17,6 +19,9 @@ const BUILTIN_ALLOWED_MCP_ENV_VARS = [
"XDG_CACHE_HOME",
"HOSTNAME",
"LOGNAME",
"USERPROFILE",
"APPDATA",
"LOCALAPPDATA",
]
const SENSITIVE_MCP_ENV_VAR_PATTERN = /KEY|TOKEN|SECRET|PASSWORD|AUTH|CREDENTIAL/i