crxjs/chrome-extension-tools (@crxjs/vite-plugin)

\n\n### [`v2.7.1`](https://redirect.github.com/crxjs/chrome-extension-tools/blob/HEAD/packages/vite-plugin/CHANGELOG.md#271)\n\n##### Patch Changes\n\n- [`efa9c63`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/efa9c63): Update direct dependency ranges for `convert-source-map`, `debug`,\n and `fs-extra`.\n- [`6efde9d`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/6efde9d): Filter Vite 8/Rolldown-only options before the dev file writer calls\n Rollup, removing `Unknown input options: platform` warnings.\n\n### [`v2.7.0`](https://redirect.github.com/crxjs/chrome-extension-tools/blob/HEAD/packages/vite-plugin/CHANGELOG.md#270)\n\n##### Minor Changes\n\n- [`9f00943`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/9f00943): Add dev HMR support for manifest-declared MAIN world content scripts.\n\n##### Patch Changes\n\n- [`a9cc89a`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/a9cc89a): Remove unused vite-plugin dependencies and update selected dependency\n versions.\n\n### [`v2.6.1`](https://redirect.github.com/crxjs/chrome-extension-tools/blob/HEAD/packages/vite-plugin/CHANGELOG.md#261)\n\n##### Patch Changes\n\n- [`2b88621`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/2b88621): Coalesce file writer readiness waits so large dev-server graph\n updates do not repeatedly recompute the same dependency traversal. This also\n fixes late HMR readiness waits that could miss the shared ready event and\n delay content script updates.\n\n### [`v2.6.0`](https://redirect.github.com/crxjs/chrome-extension-tools/blob/HEAD/packages/vite-plugin/CHANGELOG.md#260)\n\n##### Minor Changes\n\n- [`4f5d2ec`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/4f5d2ec): feat: add IIFE content script bundling\n\n Content scripts named with `.iife.ts` extension are automatically bundled as\n self-contained IIFE files with all dependencies inlined. This is useful for\n MAIN world content scripts used with `chrome.scripting.executeScript` or\n `chrome.scripting.registerContentScripts`.\n\n##### Patch Changes\n\n- [`5316e9c`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/5316e9c): Allow `chrome-extension://` and `moz-extension://` origins in Vite\n dev-server CORS automatically. This keeps extension pages able to fetch\n dev-server files on Vite releases with the stricter localhost-only CORS\n default, including Vite `4.5.6`, `5.4.12`, and `6.0.9+`, without requiring\n projects to configure `server.cors.origin` manually.\n- [`1aee9ad`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/1aee9ad): fix: dynamic content scripts failing in build --watch mode\n- [`2f8bab5`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/2f8bab5): Fix the dev-mode loading page so it waits for the requested extension\n HTML file, preserves the page URL query string, allows extension-origin\n readiness polling, and throttles automatic reloads to avoid rapid flicker.\n- [`1681511`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/1681511): Expand vite-plugin CI to run e2e tests against supported Vite\n versions and fix compatibility issues exposed by the matrix.\n- [`0593d58`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/0593d58): fix: publish ESM declarations for the Vite plugin entrypoint\n\n### [`v2.5.0`](https://redirect.github.com/crxjs/chrome-extension-tools/blob/HEAD/packages/vite-plugin/CHANGELOG.md#250)\n\n##### Minor Changes\n\n- [`4756baf`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/4756baf): feat: add HMR support for CSS declared in manifest content\\_scripts\n\n- [`4756baf`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/4756baf): add: browser\\_specific\\_settings.gecko properties\n\n- [`4756baf`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/4756baf): Fix \"TypeError: plugins is not iterable\" error when using\n rolldown-vite (Vite 7).\n\n In rolldown-vite, the buildStart hook doesn't receive options.plugins. This\n fix uses the configResolved hook to get plugins from the resolved config, with\n buildStart kept as a fallback for older Vite versions.\n\n- [`4756baf`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/4756baf): Fixed\n [#852](https://redirect.github.com/crxjs/chrome-extension-tools/issues/852), the plugin\n now emits a correct URL in `service-worker-loader.js` when the Vite option\n `server.https` is enabled.\n\n- [`4756baf`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/4756baf): fix: resolve TypeScript types correctly for ESM and CJS consumers\n\n- [`4756baf`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/4756baf): feat: add Vite 8 beta support\n\n##### Patch Changes\n\n- [`4756baf`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/4756baf): ci: migrate release workflow to npm trusted publishers\n\n- [`570312a`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/570312a): fix: sanitize colons from output filenames on Windows\n\n- [`4756baf`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/4756baf): fix: copy CSS files declared in manifest content\\_scripts to output\n\n- [`4756baf`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/4756baf): Replace cheerio with node-html-parser to fix npm deprecation warning\n for whatwg-encoding.\n\n Also adds explicit vite peerDependency declaration (^3.0.0 through ^7.0.0) to\n enable proper version resolution when used with different vite versions.\n\n- [`4756baf`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/4756baf): ci: run compat tests against stable Vite 8, make the vite8 available\n as a peer dependency\n\n- [`4756baf`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/4756baf): fix: UnoCSS/TailwindCSS HMR issues with virtual CSS modules\n\n- [`8a99b4f`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/8a99b4f): made data\\_collection\\_permissions optional\n\n- [`4756baf`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/4756baf): fix: respect user's build.manifest setting in Vite 4+\n\n When users set `build.manifest: false` in their Vite config, the Vite manifest\n file (`.vite/manifest.json` in Vite 5+, or `manifest.json` in older versions)\n is now properly removed from the output bundle.\n\n CRXJS internally requires the Vite manifest to derive content script resources\n during build, so it forces `build.manifest: true`. Previously, this meant the\n Vite manifest was always included in the output even if the user explicitly\n disabled it. Now, CRXJS removes the manifest from the bundle after processing\n if the user didn't want it.\n\n Closes [#1077](https://redirect.github.com/crxjs/chrome-extension-tools/issues/1077)\n\n- [`d364bd8`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/d364bd8): chore: upgrade chokidar to 5.0.0\n\n- [`4756baf`](https://redirect.github.com/crxjs/chrome-extension-tools/commit/4756baf): feat(client): Update the style and content of the development mode\n loading page\n\n

\n\n

figma/plugin-typings (@figma/plugin-typings)

\n\n### [`v1.139.0`](https://redirect.github.com/figma/plugin-typings/compare/v1.138.0...v1.139.0)\n\n[Compare Source](https://redirect.github.com/figma/plugin-typings/compare/v1.138.0...v1.139.0)\n\n

\n\n

figma/rest-api-spec (@figma/rest-api-spec)

\n\n### [`v0.43.0`](https://redirect.github.com/figma/rest-api-spec/compare/v0.42.0...2a90e5adc67d8117d7c2da624f03a9bfa3027fb6)\n\n[Compare Source](https://redirect.github.com/figma/rest-api-spec/compare/v0.42.0...2a90e5adc67d8117d7c2da624f03a9bfa3027fb6)\n\n### [`v0.42.0`](https://redirect.github.com/figma/rest-api-spec/compare/v0.41.0...v0.42.0)\n\n[Compare Source](https://redirect.github.com/figma/rest-api-spec/compare/v0.41.0...v0.42.0)\n\n### [`v0.41.0`](https://redirect.github.com/figma/rest-api-spec/compare/v0.40.0...v0.41.0)\n\n[Compare Source](https://redirect.github.com/figma/rest-api-spec/compare/v0.40.0...v0.41.0)\n\n

\n\n

jsverse/transloco (@jsverse/transloco)

\n\n### [`v8.4.0`](https://redirect.github.com/jsverse/transloco/blob/HEAD/CHANGELOG.md#840-2026-06-13)\n\n[Compare Source](https://redirect.github.com/jsverse/transloco/compare/bd284ecd5e14ee6b5cbee0d84e3432a749e49d6a...b2b52b3bbcb4d958522e3ccee3e64e422555f8c5)\n\n##### 🚀 Features\n\n- **transloco:** transpile function arguments in FunctionalTranspiler\n\n##### 🩹 Fixes\n\n- translateSignal utility missing injector for toSignal\n- **transloco-scoped-libs:** multi-scope i18n with join strategy\n\n##### ❤️ Thank You\n\n- Dafnik\n- f-aubert\n- Ilshat Khamitov\n\n

\n\n

microsoft/tsdoc (@microsoft/tsdoc)

\n\n### [`v0.17.1`](https://redirect.github.com/microsoft/tsdoc/blob/HEAD/tsdoc/CHANGELOG.md#0171)\n\nTue, 29 Sep 2026 18:52:33 GMT\n\n##### Patches\n\n- Add missing tsdoc-unsupported-html-name to TSDocConfiguration.allTsdocMessageIds so eslint-plugin-tsdoc does not crash when reportUnsupportedHtmlElements is enabled (GitHub [#453](https://redirect.github.com/microsoft/tsdoc/issues/453))\n- Fix an issue where `TSDocEmitter` dropped a line break that appeared before an inline node such as a code span, `{@link}` tag, or HTML element, joining the adjacent words.\n\n### [`v0.17.0`](https://redirect.github.com/microsoft/tsdoc/blob/HEAD/tsdoc/CHANGELOG.md#0170)\n\nWed, 16 Sep 2026 01:24:29 GMT\n\n##### Minor changes\n\n- Update emitter to not replace line breaks\n\n

\n\n

modelcontextprotocol/typescript-sdk (@modelcontextprotocol/client)

\n\n### [`v2.2.0`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/releases/tag/%40modelcontextprotocol/client%402.2.0)\n\n[Compare Source](https://redirect.github.com/modelcontextprotocol/typescript-sdk/compare/@modelcontextprotocol/client@2.1.0...@modelcontextprotocol/client@2.2.0)\n\n##### Minor Changes\n\n- [#2887](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2887) [`edd12e2`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/edd12e282620ebf770d67316f19cf91d4112a1bd) Thanks [@maxisbey](https://redirect.github.com/maxisbey)! - Constructing `ClientCredentialsProvider`, `PrivateKeyJwtProvider`, `StaticPrivateKeyJwtProvider` or `CrossAppAccessProvider` without `expectedIssuer` is deprecated: the constructor logs one `console.warn` and that call signature is marked `@deprecated`. Behaviour is otherwise unchanged. Pass the `issuer` of the authorization server the credentials were registered with.\n\n `fetchToken()` throws `AuthorizationServerMismatchError`, before sending anything, when the provider's client information is bound to a different authorization server than the one it is called with. The `AuthorizationServerMismatchError` message no longer assumes the authorization-code callback; its fields are unchanged.\n\n `OAuthTokensSchema` and `OAuthClientInformationSchema` accept the optional `issuer` stamp, so a provider that reads storage back through them keeps it. `auth()` overwrites it on every save.\n\n##### Patch Changes\n\n- [#2885](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2885) [`9dd722f`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/9dd722fd0b533b3cb44cd2834409f7ea4dd32b00) Thanks [@claude](https://redirect.github.com/apps/claude)! - Sending a notification on a closed connection no longer produces a briefly unhandled promise rejection (seen as `unhandledrejection` on Cloudflare Workers) in addition to the returned rejection.\n\n- [#2883](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2883) [`c0f7aec`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/c0f7aec2925a46b32dc2f2aad5bf636a36f02c78) Thanks [@claude](https://redirect.github.com/apps/claude)! - Fix a type-check failure for CommonJS TypeScript projects introduced in 2.1.0: `dist/index.d.cts` imported types from `jose`, which is ESM-only, so `tsc` with `module: node16`/`node18` and `skipLibCheck: false` failed with TS1479. The two `jose` types used by the DPoP API (`CryptoKey`, `JWK`) are now inlined into the declaration files. No runtime change.\n\n- [#2768](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2768) [`efebf5b`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/efebf5b2ba2f07c6fa27ada824a0999b801fec0a) Thanks [@web-abin](https://redirect.github.com/web-abin)! - Correct the JSDoc for insecure OAuth token endpoints. The TLS requirement comes from the MCP authorization specification's OAuth 2.1 communication-security rules, not SEP-2207, which covers OIDC-flavored refresh-token guidance. Documentation only; no runtime behavior change.\n\n- [#2729](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2729) [`a4ae2f9`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/a4ae2f98da3814a9290f2791cfcca8148dcec978) Thanks [@claude](https://redirect.github.com/apps/claude)! - Correct the `registerClient` `@deprecated` notice: Dynamic Client Registration was deprecated by spec PR [#2858](https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2858) (Client ID Metadata Documents), not SEP-2577 (which deprecates roots, sampling, and logging). The notice now also names the earliest possible removal date under the feature lifecycle policy (2027-07-28) and clarifies that the `client_id_metadata_document_supported` gating lives in the built-in `auth()` flow — `registerClient` called directly always sends the registration request. Documentation only; no runtime behavior change.\n\n- [#2862](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2862) [`e780e13`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/e780e13869ad419a864b669bd5fa9702cfb36b14) Thanks [@SyedTashfin](https://redirect.github.com/SyedTashfin)! - Preserve `_meta` on `input_required` results. The 2026-07-28 decode seam rebuilt the payload from `inputRequests` and `requestState` only, so result-level metadata a server sent on an `input_required` result (including `io.modelcontextprotocol/serverInfo`) was dropped before an `allowInputRequired: true` caller could see it. `Result._meta` is a result-level field, so `input_required` carries it exactly like any other result.\n\n- [#2886](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2886) [`ef39308`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/ef39308e963496b75e50553f6265d99cacb4fbb9) Thanks [@claude](https://redirect.github.com/apps/claude)! - `listTools()`, `listPrompts()`, `listResources()` and `listResourceTemplates()` called without a cursor now follow `nextCursor` until the server stops sending one, instead of stopping silently with a short list when a cursor repeats; a page that has the same items and the same `nextCursor` as the page before it ends the walk and is not added twice, and `listMaxPages` still caps the walk.\n\n- [#2642](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2642) [`cfa09db`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/cfa09db614308eaf4fd575c89833da8878d4acb7) Thanks [@claude](https://redirect.github.com/apps/claude)! - Fix `Client.listen()` rejections escaping as process-level unhandled rejections. The internal `opening` promise could reject (ack timeout, transport close, server cancel, caller abort) while `listen()` was still serially awaiting `transport.send(...)`, so no rejection handler was attached yet — the rejection surfaced as an `unhandledRejection` that caller-side handling cannot prevent, and a send that never settles (e.g. a stdio write parked on `'drain'`) left `listen()` suspended forever even though the ack timer had already fired. `listen()` now suspends on the `opening` state machine directly and routes send failures into it, so every termination path rejects the returned promise and nothing escapes.\n\n- [#2597](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2597) [`7f7a94c`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/7f7a94c22017e121a960e071bb50ec75e34450bd) Thanks [@arimu1](https://redirect.github.com/arimu1)! - Treat hostnames ending in `.localhost` as loopback for the SEP-2207 token-endpoint https guard (RFC 6761 §6.3), so host-based multi-tenant local OAuth works. The SDK does not resolve the name itself: `*.localhost` reaches the local machine only if the system resolver follows RFC 6761.\n\n- Updated dependencies \\[[`edd12e2`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/edd12e282620ebf770d67316f19cf91d4112a1bd)]:\n - [@modelcontextprotocol/core](https://redirect.github.com/modelcontextprotocol/core)@2.2.0\n\n### [`v2.1.0`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/releases/tag/%40modelcontextprotocol/client%402.1.0)\n\n[Compare Source](https://redirect.github.com/modelcontextprotocol/typescript-sdk/compare/@modelcontextprotocol/client@2.0.0...@modelcontextprotocol/client@2.1.0)\n\n##### Minor Changes\n\n- [#2629](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2629) [`dcc0102`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/dcc01028ff6a499a5728c2b6181c1727d52e2fab) Thanks [@gbshankar](https://redirect.github.com/gbshankar)! - Add DPoP (RFC 9449 / SEP-1932) sender-constrained access token support to the client.\n - Opt in by implementing `OAuthClientProvider.dpop()` returning a `DpopSession` (new, along with `generateDpopKeyPair`, `accessTokenHash`, `isDpopNonceChallenge`). `auth()` / `exchangeAuthorization` / `refreshAuthorization` / `fetchToken` then sign a DPoP proof into token requests (retrying once on an authorization-server `use_dpop_nonce` challenge, with client authentication re-applied per attempt), and `StreamableHTTPClientTransport`, `SSEClientTransport` and `withOAuth` present a `token_type: \"DPoP\"` access token as `Authorization: DPoP ` plus a fresh per-request proof, retry a resource-server `use_dpop_nonce` challenge once, and pick up a `DPoP-Nonce` delivered on any response. Tokens the AS issued as `Bearer` are still presented as Bearer.\n - DPoP is applied at the fetch layer: the transports wrap their resource-server `fetch` (including a caller-supplied `fetch` / `eventSourceInit.fetch`) with the new `withDpopFromProvider(provider)` middleware, so proofs are always bound to the request actually sent. `withDpop(session, getToken)` is exported for callers that manage tokens themselves (e.g. alongside a minimal `AuthProvider`); the `AuthProvider` interface itself is unchanged.\n - `auth()` now recovers from `invalid_dpop_proof` on refresh (e.g. a refresh token bound to a key that is no longer held) by discarding the tokens and re-authorizing, like `invalid_grant`. `OAuthErrorCode` gains `InvalidDpopProof` and `UseDpopNonce`; `extractWWWAuthenticateParams` recognizes the `DPoP` challenge scheme; `OAuthMetadataSchema` gains `dpop_signing_alg_values_supported`.\n\n##### Patch Changes\n\n- [#2726](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2726) [`6fa4227`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/6fa42279fecaba423635072f716bbb2f6f7c77f3) Thanks [@LuckTerence](https://redirect.github.com/LuckTerence)! - `SdkError` and `SdkHttpError` accept standard `ErrorOptions` as an optional fourth constructor argument and forward it to `Error`, so a wrapped error is reachable through the standard `Error.cause` chain. Version-negotiation probe failures (`SdkErrorCode.EraNegotiationFailed`) now use it: the underlying `TypeError: fetch failed` and the DNS or socket error beneath it surface via `error.cause`, so pino, Sentry, and `util.inspect` render `ENOTFOUND` / `ECONNREFUSED` / `ETIMEDOUT` instead of stopping at the `SdkError` ([#2657](https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2657)). The previous `error.data.cause` slot is still populated for compatibility but is deprecated and slated for removal; read `error.cause` instead.\n\n- [#2654](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2654) [`03842cd`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/03842cd9cae9a9b142c77d2fb65e829fc4e03eab) Thanks [@pshah19](https://redirect.github.com/pshah19)! - Treat request id `0` as a real id. Two guards tested a `RequestId` for truthiness, so the legal JSON-RPC ids `0` and `''` were read as absent. Id `0` is not a corner case: the outbound request counter is zero-based, so it is the first id every peer assigns, which on the server→client leg is the first `sampling/createMessage`, `elicitation/create`, or `roots/list` a server sends.\n\n - `notifications/cancelled` carrying id `0` was ignored, and the in-flight handler ran to completion with its `AbortSignal` never fired.\n - A notification sent with `relatedRequestId: 0` wrongly passed the debounce gate (for methods opted into `debouncedNotificationMethods`). Because the pending set is keyed by method alone, a second such notification in the same tick was silently dropped rather than sent.\n\n Absent is now the only value that means \"no id\".\n\n- [#2043](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2043) [`c4248a9`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/c4248a935f245a86b2fb8b88b9c3d594e2bfea75) Thanks [@ChrisJr404](https://redirect.github.com/ChrisJr404)! - On Windows, stdio servers spawned by `StdioClientTransport` now also inherit `COMSPEC`, `PATHEXT`, `PROGRAMDATA`, `PROGRAMFILES(X86)`, `PROGRAMW6432`, and `WINDIR` (added to `DEFAULT_INHERITED_ENV_VARS`). Programs a server launches can depend on them: PowerShell finds no native executables without `PATHEXT`, and Windows OpenSSH exits 255 without `ProgramData`.\n\n- [#2668](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2668) [`3e90449`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/3e90449fd52997da43b79a536d2c19c446603cc7) Thanks [@KKonstantinov](https://redirect.github.com/KKonstantinov)! - Stop sending `notifications/cancelled` for the `initialize` handshake. The spec is explicit that a client MUST NOT attempt to cancel its `initialize` request, but the outbound cancel path fired for any in-flight request: aborting the `AbortSignal` passed to `connect()`, or letting the handshake hit its timeout, put a forbidden cancellation on the wire naming the initialize request id.\n\n The local behaviour is unchanged — the caller's promise still rejects with the same abort/timeout error, and `connect()` still tears the connection down. Only the wire notification is suppressed. Every other method keeps the existing cancellation path.\n\n- [#2475](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2475) [`b654261`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/b65426158ed9f29aea8ef3dc09ca22d7d9d6f970) Thanks [@sanjibani](https://redirect.github.com/sanjibani)! - `StreamableHTTPClientTransport` and `SSEClientTransport` now give their transport-managed headers precedence over same-named entries in `requestInit.headers`: `Authorization` when `authProvider` yields a token, `mcp-protocol-version`, and (Streamable HTTP) `mcp-session-id`. Header names compare case-insensitively and every `HeadersInit` form is covered (plain object, tuple array, `Headers` instance). Previously the caller-supplied value won, so a static `Authorization` placeholder (e.g. an env-var API key) kept overriding the OAuth token even after the provider obtained one and the fallback-to-OAuth flow never completed; a `Headers` instance or lowercase key produced a combined `Bearer , Bearer ` value instead. A configured `Authorization` is still sent while the provider has no token, and other configured headers pass through unchanged. Closes [#2208](https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/2208).\n\n- [#2581](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2581) [`5119ee7`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/5119ee7fd7790e335a3fb60ef36f85334e2a6326) Thanks [@hugosmoreira](https://redirect.github.com/hugosmoreira)! - Preserve the exact OAuth resource indicator from protected resource metadata when building authorization and token requests. Previously a pathless `resource` such as `https://example.com` was normalized to `https://example.com/` via `URL.href`, which breaks authorization servers that require the `resource` parameter to match the published value exactly (Microsoft Entra ID rejects it with `AADSTS9010010`). The exported OAuth helpers (`startAuthorization`, `exchangeAuthorization`, `refreshAuthorization`, `fetchToken`, `executeTokenRequest`) now also accept a `string` for `resource`; `selectResourceURL` still returns a `URL`, and a provider's `validateResourceURL` result is used unchanged. Fixes [#1968](https://redirect.github.com/modelcontextprotocol/typescript-sdk/issues/1968).\n\n- [`3924de9`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/3924de99df834302d89f5997a1b64ca268282284) - Let `saveTokens` failures surface after a successful token refresh. In `auth()`, one `try`\n wrapped both `refreshAuthorization()` and the `provider.saveTokens()` that persists its\n result, and the `catch` deliberately swallows anything that is not an `OAuthError` — plus\n `ServerError` — so that a failed refresh falls through to a fresh authorization request.\n A persistence error thrown by the provider landed in that same branch: it was discarded\n with no log and no rethrow, and `auth()` continued to `startAuthorization()` and returned\n `'REDIRECT'`.\n\n Against an authorization server that rotates refresh tokens (the OAuth 2.1 default, and\n Keycloak's) this loses credentials rather than merely hiding an error. The exchange has\n already succeeded server-side, so the old refresh token is invalidated at the moment the\n new one is issued; dropping the new token set leaves nothing usable on either side. On a\n headless or CLI client, where `redirectToAuthorization` is typically a no-op, the fallthrough\n is silent and the client is left with stale tokens and no indication of why.\n\n The `try`/`catch` now covers only `refreshAuthorization()`. Persisting the result happens\n after it, on an unguarded path, so a provider's I/O error propagates to the caller.\n\n Refresh-request failures keep their existing control flow exactly: a `ServerError` or an\n unknown error still falls through to a new authorization flow, a non-`ServerError`\n `OAuthError` is still rethrown, and `InsecureTokenEndpointError` is still surfaced. The\n SEP-2352 `issuer` stamp written with the refreshed tokens is unchanged.\n\n Those fallbacks no longer happen in silence, though. Both routes to an unexplained\n re-authorization now emit a `console.warn` naming the cause: the in-place fallthrough in\n the refresh block, and `auth()`'s outer recovery for `invalid_grant`, `invalid_client`,\n and `unauthorized_client`, which discards stored credentials and retries. The second one\n matters most in practice — an expired, revoked, or rotation-reuse-detected refresh token\n is reported as `invalid_grant`, which is precisely the state a dropped token set leaves\n behind for the next call.\n\n Consumers whose `OAuthClientProvider.saveTokens` can reject should note that `auth()` may\n now reject where it previously returned `'REDIRECT'` — that rejection is the failure that\n was being discarded.\n\n- [#2613](https://redirect.github.com/modelcontextprotocol/typescript-sdk/pull/2613) [`70de0c8`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/70de0c8b569b0d664a56b90be2f141d1d1645880) Thanks [@jwcarman](https://redirect.github.com/jwcarman)! - Emit and validate the `Mcp-Name` header for tasks requests per SEP-2663's Streamable HTTP binding: the client transport now mirrors `params.taskId` into `Mcp-Name` on `tasks/get` / `tasks/update` / `tasks/cancel` (previously omitted, causing conforming servers to reject every task poll with `-32020 HeaderMismatch`), and the server-side standard-header validation cross-checks it via the same shared `MCP_NAME_HEADER_SOURCE` table.\n\n On the server, `createMcpHandler` now answers a modern (2026-07-28) `tasks/get` / `tasks/update` / `tasks/cancel` POST that omits `Mcp-Name`, or whose header disagrees with `params.taskId`, with `400` / `-32020` (`HeaderMismatch`) at the `standard-header-validation` rung, the same treatment `tools/call` / `prompts/get` / `resources/read` already get. Legacy-era (2025-11-25) tasks traffic is unaffected. Clients built with this SDK release send the header; hand-rolled clients that omitted it must add it.\n\n- Updated dependencies \\[[`dcc0102`](https://redirect.github.com/modelcontextprotocol/typescript-sdk/commit/dcc01028ff6a499a5728c2b6181c1727d52e2fab)]:\n - [@modelcontextprotocol/core](https://redirect.github.com/modelcontextprotocol/core)@2.1.0\n\n

\n\n

OpenAPITools/openapi-generator-cli (@openapitools/openapi-generator-cli)

\n\n### [`v2.41.0`](https://redirect.github.com/OpenAPITools/openapi-generator-cli/releases/tag/v2.41.0)\n\n[Compare Source](https://redirect.github.com/OpenAPITools/openapi-generator-cli/compare/v2.40.1...v2.41.0)\n\n##### Features\n\n- **release:** v7.25.0 release ([#1278](https://redirect.github.com/OpenAPITools/openapi-generator-cli/issues/1278)) ([b6cef74](https://redirect.github.com/OpenAPITools/openapi-generator-cli/commit/b6cef74bd28bd914ed700ad1b61c7839d5ec20b4))\n\n### [`v2.40.1`](https://redirect.github.com/OpenAPITools/openapi-generator-cli/releases/tag/v2.40.1)\n\n[Compare Source](https://redirect.github.com/OpenAPITools/openapi-generator-cli/compare/v2.40.0...v2.40.1)\n\n##### Bug Fixes\n\n- **deps:** update dependency fs-extra to v11.4.0 ([#1264](https://redirect.github.com/OpenAPITools/openapi-generator-cli/issues/1264)) ([254a7d5](https://redirect.github.com/OpenAPITools/openapi-generator-cli/commit/254a7d5ca748970f56f1ca1f11287213a98e3928))\n\n### [`v2.40.0`](https://redirect.github.com/OpenAPITools/openapi-generator-cli/releases/tag/v2.40.0)\n\n[Compare Source](https://redirect.github.com/OpenAPITools/openapi-generator-cli/compare/v2.39.1...v2.40.0)\n\n##### Features\n\n- **release:** v7.24.0 release ([#1259](https://redirect.github.com/OpenAPITools/openapi-generator-cli/issues/1259)) ([a241dc9](https://redirect.github.com/OpenAPITools/openapi-generator-cli/commit/a241dc9027c0f93d0c890e103782b1deda8ff946))\n\n

\n\n

Redocly/redocly-cli (@redocly/openapi-core)

\n\n### [`v2.57.0`](https://redirect.github.com/Redocly/redocly-cli/releases/tag/%40redocly/openapi-core%402.57.0)\n\n[Compare Source](https://redirect.github.com/Redocly/redocly-cli/compare/@redocly/openapi-core@2.56.1...@redocly/openapi-core@2.57.0)\n\n##### Minor Changes\n\n- Added `const` checking to the `no-enum-type-mismatch` rule: a `const` value must conform to the schema's `type`, the same way every `enum` value does.\n\n **Note**: linting output may include new errors for schemas whose `const` value doesn't match their `type`.\n\n##### Patch Changes\n\n- Fixed an issue where `no-enum-type-mismatch` dropped violations and reported a wrong location when `type` was written as an array.\n\n### [`v2.56.1`](https://redirect.github.com/Redocly/redocly-cli/releases/tag/%40redocly/openapi-core%402.56.1)\n\n[Compare Source](https://redirect.github.com/Redocly/redocly-cli/compare/@redocly/openapi-core@2.56.0...@redocly/openapi-core@2.56.1)\n\n##### Patch Changes\n\n- Improved overall startup performance.\n\n### [`v2.56.0`](https://redirect.github.com/Redocly/redocly-cli/releases/tag/%40redocly/openapi-core%402.56.0)\n\n[Compare Source](https://redirect.github.com/Redocly/redocly-cli/compare/@redocly/openapi-core@2.55.0...@redocly/openapi-core@2.56.0)\n\n##### Minor Changes\n\n- Added support for applying Overlay documents to the `bundle` command output.\n Pass overlays with the new `--overlay` option or list them under `overlays` for an API in `redocly.yaml`.\n- Added support for linting Overlay 1.1 and 1.2 documents, including the `copy` action field, the `$self` field, and reusable actions in `components.actions`.\n The `spec-ref-siblings` rule now checks the fields next to a reusable action `$ref` in Overlay documents.\n\n##### Patch Changes\n\n- Updated [@redocly/config](https://redirect.github.com/redocly/config) to v0.59.0.\n\n### [`v2.55.0`](https://redirect.github.com/Redocly/redocly-cli/releases/tag/%40redocly/openapi-core%402.55.0)\n\n[Compare Source](https://redirect.github.com/Redocly/redocly-cli/compare/@redocly/openapi-core@2.54.3...@redocly/openapi-core@2.55.0)\n\n##### Patch Changes\n\n- Updated [@redocly/config](https://redirect.github.com/redocly/config) to v0.58.0.\n- Fixed an issue where the `workflow-dependsOn` rule reported a duplicate when different workflows listed the same workflow in `dependsOn`.\n\n### [`v2.54.3`](https://redirect.github.com/Redocly/redocly-cli/releases/tag/%40redocly/cli%402.54.3)\n\n[Compare Source](https://redirect.github.com/Redocly/redocly-cli/compare/@redocly/openapi-core@2.54.2...@redocly/openapi-core@2.54.3)\n\n##### Patch Changes\n\n- Fixed an issue where generated clients attempted to parse compressed archives (`application/gzip`, `application/x-tar`), PDF files, Office documents, audio, video and font responses as JSON instead of decoding them as binary.\n- Added the value of the `REDOCLY_ENVIRONMENT` environment variable to the `user-agent` header of the `login`, `push`, and `push-status` requests.\n- Updated [@redocly/client-generator](https://redirect.github.com/redocly/client-generator) to v0.4.16.\n- Updated [@redocly/reunite-integration](https://redirect.github.com/redocly/reunite-integration) to v2.54.3.\n\n### [`v2.54.2`](https://redirect.github.com/Redocly/redocly-cli/releases/tag/%40redocly/cli%402.54.2)\n\n[Compare Source](https://redirect.github.com/Redocly/redocly-cli/compare/72572a9971e19b8ec2de9f1dee119b211b7dc84b...@redocly/openapi-core@2.54.2)\n\n##### Patch Changes\n\n- Updated [@redocly/openapi-core](https://redirect.github.com/redocly/openapi-core) to v2.54.2.\n- Updated [@redocly/reunite-integration](https://redirect.github.com/redocly/reunite-integration) to v2.54.2.\n\n### [`v2.54.1`](https://redirect.github.com/Redocly/redocly-cli/compare/320e17f17aa10f1838807e2e74c86d5fe7fdaf75...72572a9971e19b8ec2de9f1dee119b211b7dc84b\n\n> ❗ **Important**\n> \n> ✂ PR body was truncated to here.\n\n\n

\n\n---\n\n### Configuration\n\n📅 **Schedule**: (in timezone Europe/Paris)\n\n- Branch creation\n - At any time (no schedule defined)\n- Automerge\n - At any time (no schedule defined)\n\n🚦 **Automerge**: Enabled.\n\n♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.\n\n👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.\n\n---\n\n - [ ] If you want to rebase/retry this PR, check this box\n\n---\n\nThis PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/AmadeusITGroup/otter).\n\n","f519b364a5b926e69f1752f03c6149022a4901c1","a2cda21431765a24755f1eaf75135773fe245355",{"_444":445,"_446":447,"_448":449,"_450":451,"_452":453,"_454":455,"_456":-5,"_457":-5,"_458":459,"_460":461,"_462":451,"_463":464,"_465":466,"_467":-5,"_468":469,"_470":-5,"_471":-5,"_472":-5,"_473":-5,"_148":474,"_475":476,"_477":478,"_388":479,"_480":481,"_482":-5,"_483":-5,"_484":-5,"_485":-5,"_486":-5,"_487":-5,"_488":-5,"_489":-5,"_490":-5,"_491":492,"_493":494,"_495":496,"_497":498,"_499":-5,"_500":498},"suggestedFixId","6ac3bcef425fdcf4ee521085","fixedTasks",[501],"otherFailedTasks",[],"verificationStatus","COMPLETED","verificationTasksExecuted",[501],"userAction","NONE","userActionOrigin","userCommitMessage","suggestedFix","diff --git a/apps/chrome-devtools/src/app-components/app.ts b/apps/chrome-devtools/src/app-components/app.ts\nindex 2e256df01..f320cfbdd 100644\n--- a/apps/chrome-devtools/src/app-components/app.ts\n+++ b/apps/chrome-devtools/src/app-components/app.ts\n@@ -148,7 +148,7 @@ export class App {\n \n private requestSelectedComponentInfo() {\n /* eslint-disable @typescript-eslint/restrict-template-expressions -- we want to print the content of the functions */\n- chrome.devtools.inspectedWindow.eval(\n+ void chrome.devtools.inspectedWindow.eval(\n `function getTranslations(node){ return (${getTranslationsRec})(node, getTranslations); } `\n + `function getAnalyticEvents(node){ return (${getAnalyticEventsRec})(node, getAnalyticEvents); } `\n + `(${getSelectedComponentInfo})(getTranslations, getAnalyticEvents);`,\n","suggestedFixDescription","fix(chrome-devtools): mark inspectedWindow.eval promise as ignored","suggestedFixStatus","suggestedFixReasoning","The `chrome-devtools:lint:ci` task failed with one error: `@typescript-eslint/no-floating-promises` at `apps/chrome-devtools/src/app-components/app.ts:151`.\n\nThe PR bumps `@types/chrome` from ^0.1.0 to ^0.3.0. The lint error suggests the new typings declare a Promise return for `chrome.devtools.inspectedWindow.eval`. I did not inspect the installed typings, so this is inferred from the lint message and the bump.\n\nThe call already passes `updateSelectedComponentInfoCallback` as the result handler, so nothing consumes the returned promise. Prefixing the call with `void` marks it as intentionally ignored, which the rule explicitly allows. Behavior is unchanged.\n\nI chose `void` over `.catch` or `await`, because awaiting would turn `requestSelectedComponentInfo` async and change its callers. Adding a `.catch` would add error-handling behavior that the original code never had.\n\nNo configuration file (`.nx/SELF_HEALING.md`, `CLAUDE.md`, `AGENTS.md`) has predefined fixes or off-limits areas that apply here.\n\nI ran `yarn nx lint chrome-devtools` to verify. It finished with 0 errors and 4 warnings in other files, which this change does not touch.","suggestedFixExecutionTime",64241,"verificationExecutionTime","reviewComment","We fixed the lint failure by marking the `chrome.devtools.inspectedWindow.eval` call as intentionally ignored with `void`. The `@types/chrome` upgrade means the call is now flagged by `@typescript-eslint/no-floating-promises`, and the existing callback still handles the result. `yarn nx lint chrome-devtools` now passes with 0 errors.","originalSuggestedFix","originalSuggestedFixDescription","originalSuggestedFixReasoning","userActionRecordedAt",["D",1791212783491],"suggestedAt",["D",1791212783490],"verifiedAt",["D",1791212798431],"RBa6","failureClassification","code_change","fileModeMap","suggestedFixFailureReason","suggestedFixFailureReasonDetails","suggestedFixFailureReasonType","assignedAgentName","autoApplySkipped","autoApplySkipReason","flakyRerunSkipped","flakyRerunPending","confidence",8,"confidenceReasoning","The fix is a one-token change on a single line that targets the only failing task and the single reported lint error. The lint target passed on rerun. Using `void` is the standard way to satisfy no-floating-promises when the result is handled by a callback. Other reasonable options exist (.catch, async/await), which keeps this below 9.","fixApplicationAttempts",[],"taskOutputSummary","TASK ID: chrome-devtools:lint:ci\n> git ls-files \":(glob)**/*\" | yarn eslint --quiet --cache --cache-location .cache/eslint\r\n\r\n(node:6338) [DEP0176] DeprecationWarning: fs.F_OK is deprecated, use fs.constants.F_OK instead\n(Use `node --trace-deprecation ...` to show where the warning was created)\n\n/home/runner/work/otter/otter/apps/chrome-devtools/src/app-components/app.ts\n 151:5 error Promises must be awaited, end with a call to .catch, end with a call to .then with a rejection handler or be explicitly marked as ignored with the `void` operator @typescript-eslint/no-floating-promises\n\n✖ 1 problem (1 error, 0 warnings)\n\nWarning: command \"git ls-files \":(glob)**/*\" | yarn eslint --quiet --cache --cache-location .cache/eslint\" exited with non-zero status code","remoteTaskSummary","localTaskSummary","chrome-devtools:lint:ci",{"_503":501,"_504":505,"_506":-5,"_507":-5,"_508":-5,"_509":-5},"taskName","runLinkId","AS12fOMtPh","dteExecutionId","agentName","launchTemplates","taskTarget","AmadeusITGroup",["D",1676054118998],["D",1681913345534],"allowedEmailDomains",[572],"planActivationDate",["D",1686144031537],"isEligibleForProTrial","planLimits",{"_558":559,"_560":561,"_562":422,"_563":347,"_564":347,"_565":566,"_567":568,"_569":568,"_570":571},"isAiEnabled","planTransitions",[],"id","memberships",[538,539,540,541,542,543,544,545],"privateCloudInstallationId","hasBillingInformation","hasLicense","isUnclaimed","isOnTrial","isHighPriority","vcsProfileLink","vcsConfiguration","lastMembersSyncedAt","isAiBringYourOwnKey","enterpriseTrial","disabledReasonMessage",{"_546":557,"_548":549},{"_546":556,"_548":551},{"_546":555,"_548":549},{"_546":554,"_548":551},{"_546":553,"_548":551},{"_546":552,"_548":551},{"_546":550,"_548":551},{"_546":547,"_548":549},"userId","63eb8f0c1147ed000ed89147","role","admin","656f2a38d8c7f6f8d5bfdab5","member","64a51a42097e04000dcff5a3","63f5d0d76abadd000e2a636a","63ee2a741147ed000ed892b0","63ecec5bd91fa9000e2ebaa1","63ecec62d91fa9000e2ebaa3","63e68de49bae37000e41c9c6","baseIncludedCredits",300000,"additionalCredits",{},"discountedCreditsMaximum","contributorLimit","concurrentConnectionLimit","runsLimit",1000000,"adminUserLimit",9999,"workspaceLimit","modifiers",[],"amadeus.com",["D",1791211970132],["D",1791212987935],["D",1791212987935],[],[],[],[],{},{},{},{"_77":584,"_79":-5},{"_90":585,"_92":586,"_94":587,"_96":588},{"_129":609,"_131":610,"_133":611},{"_121":603,"_123":604},{"_104":592,"_106":593,"_80":594,"_82":595},{"_98":589},[590],{"_73":101,"_102":591,"_79":-5},[],[602],[],[599],[596],{"_73":111,"_102":597,"_79":-5},{"_113":114,"_86":598},[],{"_73":111,"_102":600,"_79":-5},{"_113":117,"_118":601},[],{"_73":111,"_102":22,"_79":-5},[607],[605],{"_73":111,"_102":606,"_79":-5},[],{"_73":111,"_102":608,"_79":-5},[],[615],[614],[612],{"_73":101,"_102":613,"_79":-5},[],{"_73":101,"_102":22,"_79":-5},{"_73":101,"_102":139,"_79":-5},["D",1791211970132],["D",1791212988310],["D",1791212987935],[633],{"_188":294,"_295":294,"_296":297,"_298":299,"_300":-5,"_301":-5,"_302":303,"_304":305,"_306":307,"_308":309,"_310":311,"_312":313,"_314":315,"_316":317,"_318":-5,"_319":-5},[],[225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,23,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293],[],{"_41":627,"_43":628,"_45":28},{"_219":220,"_221":222,"_223":626},["D",1791212257437],{"_62":-5,"_63":-5},{"_46":22,"_47":22,"_48":22,"_49":28,"_50":22,"_51":629,"_53":-5,"_54":-5,"_55":630,"_57":631,"_59":632,"_61":-5},[],[],[],[],{"_79":146,"_15":147,"_148":573,"_150":574,"_152":575,"_154":155,"_156":-5,"_157":22,"_158":-5,"_159":-5,"_160":-5,"_161":576,"_163":22,"_164":165,"_166":28,"_167":634,"_169":578,"_80":579,"_172":-5,"_173":580,"_175":635,"_177":582,"_179":-5,"_180":28,"_181":182,"_183":583},[],{},["D",1676055838344],"type","PRIMARY","publicCloudCounterpartId","privateCloudCounterpartId","installationSource","user","remoteSourceIntegrationType","GITHUB_EVENTLESS","featureMarkers",{"_679":22,"_680":28,"_681":22},"manualSetAccessLevel","idAccessLevel","READ_ONLY","patAccessLevel",{"_672":317,"_673":674,"_675":676,"_677":678},"flakyTaskConfiguration",{"_668":669,"_670":671},"aiTaskFixingConfiguration",{"_46":22,"_47":22,"_48":22,"_49":28,"_50":22,"_51":664,"_54":-5,"_55":665,"_57":666,"_59":667},"enableWorkspaceDataCaching","showVcsStatusChecks","defaultBranch","main","visibility","ALLOW_UNAUTHENTICATED","sandboxingConfiguration","launchTemplate",[],[],[],[],"threshold","NORMAL","samplePeriodDays",28,"provider","repositoryFullName","AmadeusITGroup/otter","repositoryId","589619867","repositoryVisibility","PUBLIC","isRemoteCachingActive","isDistributedTaskExecutionActive","isVCSIntegrationActive","currentUser","currentHostname","cloud.nx.app","incident",["P",686],"notifications",["P",688],"isSystemAdmin","isSingleTenant","isPATExpiryAfterLoginEnabled","isOrganizationAccessEnabled","isExecutiveReportDisabled","loginas","repositoryAccessProvidersToOffer",[],"redirectTo","/cipes/6ac3b9c211f39b4e8fe61018/configurations/nx-agents?runGroup=37327801832-1","deferredUserOrganizations",["P",700],"sidebarCollapsed","toast","currentUserId","currentUserEmail","signedInUser","isImpersonating","isBotRequest","ENV",{"_771":22,"_351":28,"_772":22,"_773":22,"_774":22,"_775":776,"_777":778,"_779":28,"_780":781,"_782":783,"_713":784},"posthogBootstrap",{"_741":742,"_743":744},"ultracacheUiEnabled","pylon",{"_733":734,"_735":736,"_71":737,"_738":-7,"_739":740},"requestInfo",{"_717":718,"_84":350,"_88":719,"_720":721,"_722":723},"hints",{"_726":729,"_731":732},"/cipes/6ac3b9c211f39b4e8fe61018/configurations/nx-agents","url","https://cloud.nx.app/cipes/6ac3b9c211f39b4e8fe61018/configurations/nx-agents","userPreferences",{"_724":725},"theme",{"_71":182,"_726":727,"_728":729,"_730":729},"variant","system","resolvedVariant","light","clientColorScheme","timeZone","UTC","appId","a1074fe2-8172-4ebd-9889-879f8308a0a2","email","3dff056d-31b5-4e41-96dc-264ac376fcf1@nxcloud.invalid","Anonymous Nx Cloud Visitor","avatarUrl","emailHash","063df537c708fd7c212b33442939cce2ea5c0367e85be673a3e5351f1f01c25d","distinctID","3dff056d-31b5-4e41-96dc-264ac376fcf1","featureFlags",{"_745":28,"_746":22,"_747":748,"_749":46,"_750":22,"_751":46,"_752":22,"_753":22,"_754":28,"_755":22,"_756":22,"_757":22,"_758":759,"_760":22,"_761":28,"_762":22,"_763":22,"_764":22,"_765":22,"_766":22,"_767":22,"_768":28,"_769":770},"feature_activation_guide","pylon_chat","welcome_view_cnw_experiment","variant-2","one_page_connect_workspace_gitlab","demo-mode","one_page_connect_workspace_github","non_dte_resource_usage","new_access_control","run_details_polling","workspace_badges","automated_add_ons","config_yaml","one_page_connect_workspace_manual","test","resource_addon_default","cipe_execution_timeline","teams_minimum_spend","workspace_sandboxing_toggle","workspace_rewind","resource_usage_toggle","survey-targeting-8e88152ae4-custom","show_setup_self_healing_ci_alert","new_layout","cnw_empty_workspace_position","treatment","isProduction","isAnalyticsEnabled","isPosthogEnabled","isPylonEnabled","privateCloud",{"_803":794,"_349":350},"auth0",{"_797":798,"_799":800,"_801":802},"e2eTestMode","rollbar",{"_789":790,"_791":792,"_46":22,"_793":794,"_795":22,"_796":22},"posthog",{"_785":786,"_787":788},{"_733":734},"apiKey","phc_eTmACxF0EKeNRjAZbfpdszbHYumyKhWqsIpMU4Wi53c","apiHost","https://pha-prx.ops.cloud.nx.app","accessToken","d0e4070ed1d54ed29429808f497ffbab3e77f1c74c2a9427fa5c5e418eea62ca96294bc716a7e8210acf93f0d37b6d29","environment","production","codeVersion","2610.14.0002","captureUncaught","captureUnhandledRejections","domain","auth.nx.app","clientId","Ron6k221B4IaH0QK9hmHuCneTovLLPpX","audience","https://api.nrwl.io/","containerVersionTimestamp"]

Nx Agents

Forwarded environment variables