fix(mcp): add auth interceptor with channel user_id and keep header propagation to mcp tools (#3294)
* 修复channel中的user_id传递到interceptor中的bug, mcp可通过header传递user_id到mcp工具
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(channel,mcp,gateway): normalize channel user_id and add regression tests
Normalize external channel user ids into filesystem-safe runtime context while preserving raw channel_user_id, and document gateway user_id propagation semantics. Add regression coverage for channel user_id context mapping, gateway user_id precedence/internal-role behavior, and MCP interceptor header forwarding via meta.headers.
Co-authored-by: Cursor <cursoragent@cursor.com>
* fix(auth,mcp): harden user id normalization and header handling
Increase sanitized user-id digest suffix to 16 hex chars, replace internal system role magic string with a shared constant, and harden MCP header forwarding with Mapping type checks. Add regression tests for empty channel user_id handling, unsupported header types, and updated digest length behavior.
Co-authored-by: Cursor <cursoragent@cursor.com>
---------
Co-authored-by: zhongli <335302680@qq.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
3ae82dc663