YeonGyu-Kim 73d407fe73 fix(mcp): bypass env var allowlist for trusted skill MCP configs (#3168) ...

Added 'trusted' option to expandEnvVars. Skill MCPs are user-controlled
and now bypass the security allowlist. 3 files changed.

TDD verified. tsc clean.

Closes #3168

2026-04-07 15:11:47 +09:00

..

cleanup.ts

fix: add disposed guard to MCP manager and guard unregister on pending connections

2026-03-12 01:37:03 +09:00

connection-env-vars.test.ts

fix(mcp): bypass env var allowlist for trusted skill MCP configs (#3168)

2026-04-07 15:11:47 +09:00

connection-race.test.ts

fix(ci): simplify test runner to plain bun test by fixing mock.module() leakage

2026-04-04 00:34:03 +09:00

connection-type.ts

refactor(skill-mcp-manager): split manager.ts into connection and client modules

2026-02-08 16:21:28 +09:00

connection.ts

fix(mcp): bypass env var allowlist for trusted skill MCP configs (#3168)

2026-04-07 15:11:47 +09:00

disconnect-cleanup.test.ts

fix(skill-mcp-manager): guard stale client cleanup

2026-03-12 11:04:28 +09:00

env-cleaner.test.ts

fix(security): block cloud credential env vars in MCP env cleaner

2026-04-04 14:16:39 +09:00

env-cleaner.ts

fix(security): block cloud credential env vars in MCP env cleaner

2026-04-04 14:16:39 +09:00

http-client.ts

test: remove provider and cache mock leak paths

2026-04-04 20:06:56 +09:00

index.ts

feat(skill-mcp): add MCP client manager with lazy loading and session cleanup

2026-01-01 23:02:43 +09:00

manager.test.ts

fix(oauth+errors): OAuth silent refresh, quota STOP patterns, compaction loop cap

2026-04-06 17:40:12 +09:00

manager.ts

test: remove provider and cache mock leak paths

2026-04-04 20:06:56 +09:00

oauth-handler.ts

fix(oauth+errors): OAuth silent refresh, quota STOP patterns, compaction loop cap

2026-04-06 17:40:12 +09:00

stdio-client.ts

fix: address review-work round 2 findings

2026-03-12 01:37:03 +09:00

types.ts

fix(oauth+errors): OAuth silent refresh, quota STOP patterns, compaction loop cap

2026-04-06 17:40:12 +09:00