Pilot

Instructions

Implementation Reference

• src/tools/settings.ts:117-135 (handler)

  The 'pilot_set_header' tool is registered and implemented within 'registerSettingsTools'. It sets a custom header on the browser context via 'bm.setExtraHeader' and includes basic redaction for sensitive headers in the response.

  server.tool(
    'pilot_set_header',
    'Set a custom request header. Sensitive values are auto-redacted in the response.',
    {
      name: z.string().describe('Header name'),
      value: z.string().describe('Header value'),
    },
    async ({ name, value }) => {
      await bm.ensureBrowser();
      try {
        await bm.setExtraHeader(name, value);
        const sensitiveHeaders = ['authorization', 'cookie', 'set-cookie', 'x-api-key', 'x-auth-token'];
        const redactedValue = sensitiveHeaders.includes(name.toLowerCase()) ? '****' : value;
        return { content: [{ type: 'text' as const, text: `Header set: ${name}: ${redactedValue}` }] };
      } catch (err) {
        return { content: [{ type: 'text' as const, text: wrapError(err) }], isError: true };
      }
    }
  );