[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@herdctl/core@5.33.2

Patch Changes

• #467 bf4995a Thanks @edspencer! - Require a per-bridge bearer token on the MCP HTTP bridge, and bind it to loopback on the CLI runtime.

  On the CLI runtime (runtime: cli), injected MCP servers (such as the Discord and Slack file sender) were served over an HTTP bridge that listened on 0.0.0.0 with no authentication, so anything that could reach the port during a run could call the injected tools. Every bridge now generates a random 256-bit token and rejects requests without Authorization: Bearer <token>. herdctl passes the token only to the agent it spawns, through the MCP config's headers, so consumers passing injectedMcpServers need no changes.

  • The CLI runtime binds its bridges to 127.0.0.1. The Docker path still binds 0.0.0.0 (the agent container must reach it) and relies on the token.
  • The CLI runtime now writes the MCP config to an owner-only temp file and passes its path to --mcp-config, instead of passing the JSON on the command line where any local user can read it. This also keeps declared servers' env and headers out of the process arguments. The file is deleted when the run ends. When a custom processSpawner is supplied, the config is still passed inline, since the host path may not exist where claude runs; set mcpConfigTransport to override.

  Fixes MCP HTTP bridge should use per-request bearer token authentication #54.

[cloudflare-workers-and-pages]

Deploying herdctl with    Cloudflare Pages

Latest commit:	8b7f073
Status:	✅  Deploy successful!
Preview URL:	https://28f202cd.herdctl.pages.dev
Branch Preview URL:	https://changeset-release-main.herdctl.pages.dev

View logs

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 6c9e3e81-7e2c-49d1-8b73-a1f41d73828b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}