@carrierllc/mcp 0.13.29 → 0.13.30

package/dist/index.js

@@ -80,7 +80,7 @@ import {
   verifyStorefront,
   withOcsListSummary,
   withTemplateResellerId
-} from "./chunk-LJPYVILK.js";
+} from "./chunk-ZJY7H2QW.js";
 import "./chunk-SHKKVIIA.js";
 
 // src/index.ts

package/native/claude-keychain.js

@@ -0,0 +1,57 @@
+// macOS built-in JXA Objective-C bridge. No compiler, downloads or owner actions.
+// Apple SecItem.h: AuthenticationUIFail means errSecInteractionNotAllowed, NOT skip.
+ObjC.import('Foundation');
+ObjC.import('Security');
+ObjC.bindFunction('SecKeychainSetUserInteractionAllowed', ['int', ['bool']]);
+ObjC.bindFunction('SecItemCopyMatching', ['int', ['id', 'id *']]);
+function run() {
+  var output = $.NSFileHandle.alloc.initWithFileDescriptorCloseOnDealloc(3, false);
+  function send(result) {
+    var data = $(JSON.stringify(result)).dataUsingEncoding($.NSUTF8StringEncoding);
+    output.writeData(data);
+  }
+  try {
+    var input = $.NSFileHandle.fileHandleWithStandardInput.readDataToEndOfFile;
+    if (Number(input.length) > 16384) { send({status:'malformed'}); return; }
+    var request = JSON.parse(ObjC.unwrap($.NSString.alloc.initWithDataEncoding(input, $.NSUTF8StringEncoding)));
+    if (typeof request.service !== 'string' || !/^Claude Code(?:-custom-oauth)?-credentials(?:-[a-f0-9]{8})?$/.test(request.service) ||
+        typeof request.account !== 'string' || !/^[a-zA-Z0-9._-]+$/.test(request.account) ||
+        typeof request.key !== 'string' || !/^[a-zA-Z0-9_-]+\|[a-f0-9]{16}$/.test(request.key)) {
+      send({status:'malformed'}); return;
+    }
+    // Global legacy-Keychain UI inhibition is process-local. This child never restores
+    // it to true; SecItem's modern auth path independently uses AuthenticationUIFail.
+    if ($.SecKeychainSetUserInteractionAllowed(false) !== 0) { send({status:'unavailable'}); return; }
+    var query = $.NSMutableDictionary.alloc.init;
+    query.setObjectForKey(ObjC.castRefToObject($.kSecClassGenericPassword), ObjC.castRefToObject($.kSecClass));
+    query.setObjectForKey($(request.service), ObjC.castRefToObject($.kSecAttrService));
+    query.setObjectForKey($(request.account), ObjC.castRefToObject($.kSecAttrAccount));
+    query.setObjectForKey(ObjC.castRefToObject($.kSecMatchLimitOne), ObjC.castRefToObject($.kSecMatchLimit));
+    query.setObjectForKey($.NSNumber.numberWithBool(true), ObjC.castRefToObject($.kSecReturnData));
+    query.setObjectForKey(ObjC.castRefToObject($.kSecUseAuthenticationUIFail), ObjC.castRefToObject($.kSecUseAuthenticationUI));
+    if (Number(query.count) !== 6) { send({status:'malformed'}); return; }
+    var result = Ref();
+    var code = $.SecItemCopyMatching(query, result);
+    if (code !== 0) {
+      send({status: code === -25300 ? 'absent' : code === -25308 ? 'locked' :
+        code === -25293 || code === -128 ? 'denied' : 'unavailable'}); return;
+    }
+    var data = ObjC.castRefToObject(result[0]);
+    if (!data || Number(data.length) > 1048576) { send({status:'malformed'}); return; }
+    var text = ObjC.unwrap($.NSString.alloc.initWithDataEncoding(data, $.NSUTF8StringEncoding));
+    var root = JSON.parse(text), entry = root && root.mcpOAuth && root.mcpOAuth[request.key];
+    if (!entry || typeof entry !== 'object' || Array.isArray(entry)) { send({status:'absent-entry'}); return; }
+    // Never transport unrelated credentials or the owner's rotating/registration secrets.
+    var selected = {};
+    ['serverName','serverUrl','issuer','resource','accessToken','expiresAt','scope','clientId',
+      'organizationId','organization_id','orgId','accountId'].forEach(function(k) {
+      if (Object.prototype.hasOwnProperty.call(entry,k)) selected[k] = entry[k];
+    });
+    if (entry.discoveryState) {
+      selected.discoveryState = {authorizationServerUrl:entry.discoveryState.authorizationServerUrl,
+        resourceMetadataUrl:entry.discoveryState.resourceMetadataUrl};
+    }
+    send({status:'ok',entry:selected});
+  } catch (_) { send({status:'malformed'}); }
+  // Nothing on stdout/stderr. Only the inherited private pipe receives the result.
+}

package/package.json

@@ -1,15 +1,21 @@
 {
   "name": "@carrierllc/mcp",
-  "version": "0.13.29",
+  "version": "0.13.30",
   "description": "Carrier MCP \u2014 natural-language control of MVNO/eSIM fleets via eSIMVault OCS. Stdio mode for direct integration with Claude Desktop, Cursor, Windsurf, and MCP-compatible clients. Ships the `carrier` CLI (plugin install + white-label eSIM storefront scaffold).",
   "license": "MIT",
   "author": "Carrier (Lifecycle Innovations Limited)",
   "homepage": "https://mcp.carrier.llc",
   "type": "module",
+  "carrierCompatibility": {
+    "claudeOAuthOwnerVersion": "2.1.277",
+    "claudeOAuthOwnerVersions": ["2.1.277", "2.1.296"]
+  },
   "main": "./dist/index.js",
   "files": [
     "dist",
     "plugin",
+    "shell",
+    "native",
     "README.md",
     "templates",
     "!templates/**/node_modules",
@@ -27,7 +33,9 @@
     "lint": "eslint src",
     "prepublishOnly": "pnpm run build",
     "build:test": "tsup --config tsup.test.config.ts",
-    "test": "pnpm run build && pnpm run build:test && node --test test/*.test.js",
+    "test": "pnpm run build && pnpm run build:test && node --test-concurrency=1 --test test/*.test.js && pnpm run test:oauth-repair",
+    "test:oauth-repair": "node --experimental-transform-types --test-concurrency=1 --test test/oauth-repair.test.mjs test/claude-owner.test.mjs test/current-owner.test.mjs",
+    "test:oauth-shell": "node scripts/check-oauth-shell.mjs",
     "check:pack": "node scripts/check-pack-size.mjs",
     "generate:domains": "node scripts/generate-domains.mjs"
   },

package/plugin/.claude-plugin/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Carrier — natural-language MVNO/eSIM fleet control + white-label storefront for Claude Code.",
-    "version": "0.1.4"
+    "version": "0.1.5"
   },
   "plugins": [
     {
       "name": "carrier",
       "source": "./carrier",
       "description": "Provision eSIMs, manage subscribers/packages/billing/usage/SMS/churn/fleet, and roll out a white-labeled storefront — all in natural language via the Carrier MCP.",
-      "version": "0.1.4",
+      "version": "0.1.5",
       "author": {
         "name": "Lifecycle Innovations Limited",
         "url": "https://carrier.llc"

package/plugin/carrier/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "carrier",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Natural-language control of your MVNO/eSIM fleet — the Stripe of telecom. Provision eSIMs, manage subscribers, packages, billing, usage, SMS, churn, and fleet health, and roll out a white-labeled storefront. Wraps the Carrier MCP (130 tools over OAuth 2.1).",
   "author": {
     "name": "Lifecycle Innovations Limited",

package/shell/carrier.bash

@@ -0,0 +1,56 @@
+# Static, explicitly sourced bash integration. No startup edit or secret eval.
+# Needed to see caller ERR traps; opt-in loading enables Bash errtrace.
+set -E
+# Refuse command traps rather than executing them with newly loaded secrets.
+carrier_auth_export() {
+  set +x +v
+  local _carrier_fd _carrier_token _carrier_origin _carrier_expiry _carrier_handoff _carrier_binding _carrier_rc=0
+  if [[ -n $(trap -p) ]]; then
+    printf '%s\n' 'Carrier export refused: remove shell traps first.' >&2
+    # Do not restore tracing into an unsafe trap context.
+    return 1
+  fi
+  # A replaced API key remains explicit; the resolver ignores a stale fingerprint.
+  # Bash 3.2 (macOS /bin/bash) has no {fd} allocation. A fifo keeps the handoff
+  # off the command line and off a world-readable temp file.
+  local _carrier_dir _carrier_pid
+  _carrier_dir=$(mktemp -d "${TMPDIR:-/tmp}/carrier-handoff.XXXXXX") || return 1
+  mkfifo "$_carrier_dir/pipe" || { rm -rf "$_carrier_dir"; return 1; }
+  command carrier credential-handoff >"$_carrier_dir/pipe" 3>&1 1>/dev/null &
+  _carrier_pid=$!
+  # One open reader. Separate redirections close the FIFO after the first
+  # line, so a fast writer drops the rest and the next read blocks forever.
+  # Bash 3.2 has no {fd} allocation; a compound redirect stays open for all five.
+  {
+    IFS= read -r _carrier_token || _carrier_rc=1
+    IFS= read -r _carrier_origin || _carrier_rc=1
+    IFS= read -r _carrier_expiry || _carrier_rc=1
+    IFS= read -r _carrier_handoff || _carrier_rc=1
+    IFS= read -r _carrier_binding || _carrier_rc=1
+  } <"$_carrier_dir/pipe"
+  if [[ $_carrier_rc -ne 0 ]]; then
+    :
+  elif [[ ! $_carrier_expiry =~ ^[0-9]+$ || -z $_carrier_token ]]; then
+    _carrier_rc=1
+  else
+    export CARRIER_API_KEY="$_carrier_token"
+    export CARRIER_OAUTH_ORIGIN="$_carrier_origin" CARRIER_OAUTH_EXPIRES_AT="$_carrier_expiry"
+    if [[ $_carrier_handoff == - ]]; then unset CARRIER_OAUTH_HANDOFF CARRIER_OAUTH_BINDING
+    else export CARRIER_OAUTH_HANDOFF="$_carrier_handoff" CARRIER_OAUTH_BINDING="$_carrier_binding"; fi
+  fi
+  wait "$_carrier_pid" || _carrier_rc=1
+  rm -rf "$_carrier_dir"
+  unset _carrier_token
+  # Xtrace remains disabled after successful export: the next caller command
+  # could expand the environment. Re-enable only knowingly, outside this helper.
+  [[ $_carrier_rc == 0 ]] || printf '%s\n' 'Carrier export failed; no environment was changed.' >&2
+  return "$_carrier_rc"
+}
+# Trace attribute makes caller DEBUG/RETURN traps visible for fail-closed refusal.
+declare -ft carrier_auth_export
+carrier_auth_clear() {
+  set +x +v
+  if [[ -n $(trap -p) ]]; then return 1; fi
+  unset CARRIER_API_KEY CARRIER_OAUTH_ORIGIN CARRIER_OAUTH_EXPIRES_AT CARRIER_OAUTH_HANDOFF CARRIER_OAUTH_BINDING
+}
+declare -ft carrier_auth_clear

package/shell/carrier.zsh

@@ -0,0 +1,35 @@
+# Static, explicitly sourced zsh integration. No startup edit or secret eval.
+carrier_auth_export() {
+  # localoptions restores options on return, so deliberately do not use it:
+  # tracing stays off after export to protect the next caller expansion.
+  unsetopt xtrace verbose
+  if (( $+functions[TRAPDEBUG] || $+functions[TRAPZERR] )) || [[ -n $(trap) ]]; then
+    print -u2 -- 'Carrier export refused: remove command traps first.'
+    return 1
+  fi
+  local _carrier_fd _carrier_token _carrier_origin _carrier_expiry _carrier_handoff _carrier_binding _carrier_rc=0
+  exec {_carrier_fd}< <(command carrier credential-handoff 3>&1 1>/dev/null)
+  if ! IFS= read -r _carrier_token <&$_carrier_fd ||
+     ! IFS= read -r _carrier_origin <&$_carrier_fd ||
+     ! IFS= read -r _carrier_expiry <&$_carrier_fd ||
+     ! IFS= read -r _carrier_handoff <&$_carrier_fd ||
+     ! IFS= read -r _carrier_binding <&$_carrier_fd; then
+    _carrier_rc=1
+  elif [[ $_carrier_expiry != <-> || -z $_carrier_token ]]; then
+    _carrier_rc=1
+  else
+    export CARRIER_API_KEY="$_carrier_token"
+    export CARRIER_OAUTH_ORIGIN="$_carrier_origin" CARRIER_OAUTH_EXPIRES_AT="$_carrier_expiry"
+    if [[ $_carrier_handoff == - ]]; then unset CARRIER_OAUTH_HANDOFF CARRIER_OAUTH_BINDING
+    else export CARRIER_OAUTH_HANDOFF="$_carrier_handoff" CARRIER_OAUTH_BINDING="$_carrier_binding"; fi
+  fi
+  exec {_carrier_fd}<&-
+  unset _carrier_token
+  (( _carrier_rc == 0 )) || print -u2 -- 'Carrier export failed; no environment was changed.'
+  return $_carrier_rc
+}
+carrier_auth_clear() {
+  unsetopt xtrace verbose
+  if (( $+functions[TRAPDEBUG] || $+functions[TRAPZERR] )) || [[ -n $(trap) ]]; then return 1; fi
+  unset CARRIER_API_KEY CARRIER_OAUTH_ORIGIN CARRIER_OAUTH_EXPIRES_AT CARRIER_OAUTH_HANDOFF CARRIER_OAUTH_BINDING
+}

package/templates/storefront/open-next.config.ts

@@ -1,3 +1,10 @@
 import { defineCloudflareConfig } from "@opennextjs/cloudflare";
 
-export default defineCloudflareConfig({});
+const config = {
+  ...defineCloudflareConfig({}),
+  // Run the installed CLI directly: nested npm reads pnpm-only environment
+  // settings and warns. This is the same Next build, not a skipped build.
+  buildCommand: "node node_modules/next/dist/bin/next build",
+};
+
+export default config;

package/templates/storefront/wrangler.jsonc

@@ -2,7 +2,7 @@
   "$schema": "node_modules/wrangler/config-schema.json",
   "main": ".open-next/worker.js",
   "name": "storefront",
-  "compatibility_date": "2025-05-01",
+  "compatibility_date": "2026-09-26",
   "compatibility_flags": ["nodejs_compat"],
   "assets": {
     "directory": ".open-next/assets",