Reject recognizable credentials in Connector endpoint paths

Prevent HTTP package paths from persisting recognizable plaintext or percent-encoded credentials. Checks: 79 Connector SDK, package and runtime tests.

desktop/src/agents/connectors/agent-connector-package-store.cjs

@@ -52,8 +52,9 @@ function safeTextSchema(max) {
 const httpsEndpointSchema = z.string().min(9).max(2048).superRefine((value, context) => {
   try {
     const parsed = new URL(value)
+    const decodedPath = decodeURIComponent(parsed.pathname)
     if (parsed.protocol !== 'https:' || parsed.username || parsed.password
-        || parsed.search || parsed.hash) {
+        || parsed.search || parsed.hash || redactSecrets(decodedPath) !== decodedPath) {
       context.addIssue({ code: 'custom', message: 'HTTPS endpoint required' })
     }
   } catch {

desktop/test/agents/connectors/agent-connector-sdk.test.cjs

@@ -100,6 +100,21 @@ function httpPackage(sessionOverrides = {}) {
   })
 }
 
+test('HTTP connector packages reject recognizable credentials in endpoint paths', () => {
+  const pkg = httpPackage()
+  const create = endpoint => createAgentConnectorPackage({
+    publisher: pkg.publisher,
+    provider: { ...pkg.provider, config: { ...pkg.provider.config, endpoint } },
+    manifest: pkg.manifest,
+  })
+  const token = `sk-${'a'.repeat(32)}`
+  assert.throws(() => create(`https://connector.example.com/v1/${token}`),
+    { message: 'AGENT_CONNECTOR_PACKAGE_SCHEMA_INVALID' })
+  assert.throws(() => create(`https://connector.example.com/v1/%73%6b%2d${'a'.repeat(32)}`),
+    { message: 'AGENT_CONNECTOR_PACKAGE_SCHEMA_INVALID' })
+  assert.doesNotThrow(() => create('https://connector.example.com/v1/run'))
+})
+
 test('concurrent HTTP Connector accounts use only their own credentials at the transport boundary', async t => {
   const requests = []
   const previous = process.env.OPENAI_API_KEY