@agentvalet/mcp-server 0.3.9 → 0.3.10

package/dist/bind.js

@@ -79,14 +79,32 @@ export async function attemptInviteBind(opts) {
         privateKeyEncoding: { type: "pkcs8", format: "pem" },
     });
     const url = `${opts.proxyUrl.replace(/\/$/, "")}/v1/invites/bind`;
-    const res = await fetch(url, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({
-            bind_secret: opts.bindSecret,
-            public_key_pem: publicKey,
-        }),
-    });
+    // 15s hard timeout: Claude Desktop kills the transport at ~12-15s of
+    // silence. If the proxy hangs, fail visibly with stderr rather than
+    // letting the host record an unexplained "transport closed".
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), 15_000);
+    let res;
+    try {
+        res = await fetch(url, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({
+                bind_secret: opts.bindSecret,
+                public_key_pem: publicKey,
+            }),
+            signal: ac.signal,
+        });
+    }
+    catch (err) {
+        if (err instanceof Error && err.name === "AbortError") {
+            throw new Error("Bind request timed out after 15s — proxy unreachable or slow.");
+        }
+        throw err;
+    }
+    finally {
+        clearTimeout(timer);
+    }
     if (!res.ok) {
         let detail = `HTTP ${res.status}`;
         try {

package/dist/config.js

@@ -20,11 +20,27 @@ const DEFAULT_PROXY_URL = "https://api.agentvalet.ai";
  * then invite-bind. The bind path runs at most once per machine —
  * the secret is consumed after first use.
  */
+// Treat empty strings AND unresolved MCPB template placeholders (e.g.
+// "${user_config.agent_id}") as "not set". Claude Desktop on some platforms
+// passes the literal placeholder through when a user_config field has no
+// value and no manifest default — that would otherwise false-trigger the
+// env-based Path 1 below and skip the invite-bind handshake.
+function envOrNull(name) {
+    const v = process.env[name];
+    if (v === undefined)
+        return null;
+    const t = v.trim();
+    if (t === "")
+        return null;
+    if (t.startsWith("${") && t.endsWith("}"))
+        return null;
+    return t;
+}
 export async function validateConfig() {
     // Path 1 — env-based (legacy).
-    const envAgentId = process.env.AGENT_ID;
-    const envOwnerId = process.env.OWNER_ID;
-    const envProxyUrl = process.env.PROXY_URL;
+    const envAgentId = envOrNull("AGENT_ID");
+    const envOwnerId = envOrNull("OWNER_ID");
+    const envProxyUrl = envOrNull("PROXY_URL");
     if (envAgentId && envOwnerId && envProxyUrl) {
         return buildConfig({
             agentId: envAgentId,
@@ -43,7 +59,7 @@ export async function validateConfig() {
         });
     }
     // Path 3 — first-run invite bind.
-    const inviteBindSecret = process.env.INVITE_BIND_SECRET;
+    const inviteBindSecret = envOrNull("INVITE_BIND_SECRET");
     if (inviteBindSecret) {
         const proxyUrl = (envProxyUrl ?? DEFAULT_PROXY_URL).replace(/\/$/, "");
         process.stderr.write(`[mcp-server] First-run invite bind against ${proxyUrl}…\n`);

package/dist/pem.js

@@ -12,23 +12,39 @@ import { readBoundPrivateKey } from "./bind.js";
  * having pem.ts honour it means subsequent invocations of the
  * mcp-server don't need any env vars at all.
  */
+// Treat empty + unresolved MCPB placeholders ("${user_config.foo}") as
+// not-set — see config.ts for the same defence on identity envs.
+function readEnv(name) {
+    const v = process.env[name];
+    if (v === undefined)
+        return null;
+    const t = v.trim();
+    if (t === "")
+        return null;
+    if (t.startsWith("${") && t.endsWith("}"))
+        return null;
+    return t;
+}
 export function readPrivateKeyFromEnv() {
     // 1. Base64-encoded PEM
-    if (process.env.AGENT_PRIVATE_KEY_B64) {
-        return Buffer.from(process.env.AGENT_PRIVATE_KEY_B64, "base64").toString("utf-8").trim();
+    const b64 = readEnv("AGENT_PRIVATE_KEY_B64");
+    if (b64) {
+        return Buffer.from(b64, "base64").toString("utf-8").trim();
     }
     // 2. Path to PEM file
-    if (process.env.AGENT_PRIVATE_KEY_PATH) {
+    const path = readEnv("AGENT_PRIVATE_KEY_PATH");
+    if (path) {
         try {
-            return readFileSync(process.env.AGENT_PRIVATE_KEY_PATH, "utf-8").trim();
+            return readFileSync(path, "utf-8").trim();
         }
         catch (err) {
             throw new Error(`Cannot read AGENT_PRIVATE_KEY_PATH: ${err instanceof Error ? err.message : err}`);
         }
     }
     // 3. Raw PEM content (multi-line or \n-escaped)
-    if (process.env.AGENT_PRIVATE_KEY) {
-        const raw = process.env.AGENT_PRIVATE_KEY.trim();
+    const rawEnv = readEnv("AGENT_PRIVATE_KEY");
+    if (rawEnv) {
+        const raw = rawEnv;
         // Unescape \n sequences
         const unescaped = raw.replace(/\\n/g, "\n");
         // Wrap bare base64 blob without headers

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvalet/mcp-server",
-  "version": "0.3.9",
+  "version": "0.3.10",
   "description": "AgentValet MCP server — lets AI agents call approved platforms via the AgentValet proxy",
   "type": "module",
   "main": "dist/index.js",