@dauthau/mcp-dauthau 0.1.2

package/dist/index.js

@@ -0,0 +1,108 @@
+#!/usr/bin/env node
+/**
+ * Entrypoint @dauthau/mcp-dauthau — chạy MCP server stdio local, forward HTTPS lên gateway.
+ *
+ * Xem README.md cho hướng dẫn cài đặt và mẫu config `.mcp.json`.
+ */
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { loadConfig } from "./config.js";
+import { logError, logInfo, logWarn, setLogLevel } from "./log.js";
+import { loadInstructions } from "./prompts.js";
+import { registerProxyHandlers } from "./tools.js";
+// package.json version — injected khi build (sau publish: process.env.npm_package_version).
+const VERSION = process.env.npm_package_version ?? "0.1.0";
+async function main() {
+    // Handle --version / --help trước khi load config (cho nhanh).
+    const arg = process.argv[2];
+    if (arg === "--version" || arg === "-v") {
+        process.stdout.write(`@dauthau/mcp-dauthau ${VERSION}\n`);
+        return;
+    }
+    if (arg === "--help" || arg === "-h") {
+        process.stdout.write(helpText());
+        return;
+    }
+    let cfg;
+    try {
+        cfg = loadConfig();
+        setLogLevel(cfg.logLevel);
+    }
+    catch (err) {
+        process.stderr.write(`[fatal] ${err.message}\n`);
+        process.exit(1);
+    }
+    if (arg === "--diagnose") {
+        const { runDiagnose } = await import("./diagnose.js");
+        const ok = await runDiagnose(cfg);
+        process.exit(ok ? 0 : 1);
+    }
+    logInfo("@dauthau/mcp-dauthau starting", {
+        version: VERSION,
+        gateway: cfg.gatewayUrl,
+        hash_algo: cfg.hashAlgo,
+        node: process.version,
+    });
+    // Load shared prompt từ dist/assets/ (copy từ sibling repo Go lúc build)
+    let instructions;
+    try {
+        instructions = loadInstructions();
+        logInfo("loaded mcp-instructions.md", { length: instructions.length });
+    }
+    catch (err) {
+        logWarn("không load được mcp-instructions.md, chạy không có instructions", {
+            err: err.message,
+        });
+    }
+    const server = new Server({ name: "dauthau-mcp-wrapper", version: VERSION }, {
+        capabilities: {
+            tools: {},
+        },
+        ...(instructions ? { instructions } : {}),
+    });
+    registerProxyHandlers(server, cfg);
+    // Graceful shutdown — Claude Code / Cursor đóng stdio khi user reload.
+    const shutdown = async (signal) => {
+        logInfo("shutdown", { signal });
+        try {
+            await server.close();
+        }
+        catch (err) {
+            logError("shutdown error", { err: err.message });
+        }
+        process.exit(0);
+    };
+    process.on("SIGINT", () => void shutdown("SIGINT"));
+    process.on("SIGTERM", () => void shutdown("SIGTERM"));
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    logInfo("@dauthau/mcp-dauthau connected, waiting for client", {});
+}
+function helpText() {
+    return [
+        "@dauthau/mcp-dauthau — Node.js MCP wrapper cho dịch vụ tra cứu đấu thầu DauThau",
+        "",
+        "Env bắt buộc:",
+        "  DAUTHAU_APIKEY     Apikey từ tài khoản DauThau",
+        "  DAUTHAU_APISECRET  Apisecret (giữ local, sign hashsecret mỗi request)",
+        "  MCP_GATEWAY_URL    URL gateway DauThau cấp",
+        "  MCP_GATEWAY_KEY    Gateway subscription key DauThau cấp",
+        "",
+        "Env tuỳ chọn:",
+        "  DAUTHAU_HASH_ALGO         bcrypt (default) | md5",
+        "  LOG_LEVEL                  debug | info (default) | warn | error",
+        "  MCP_GATEWAY_TIMEOUT_MS    1000-120000 (default 30000)",
+        "  MCP_GATEWAY_RETRY_MAX     0-10 (default 3, retry khi 5xx)",
+        "  MCP_GATEWAY_RETRY_BASE_MS 50-5000 (default 200, exponential backoff)",
+        "",
+        "Cờ:",
+        "  --version  / -v   in version",
+        "  --help     / -h   in help",
+        "  --diagnose        chẩn đoán kết nối gateway (DNS, TLS, tools/list)",
+        "",
+    ].join("\n");
+}
+main().catch((err) => {
+    process.stderr.write(`[fatal] ${err.stack ?? err}\n`);
+    process.exit(1);
+});

package/dist/log.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Log structured JSON ra **stderr**. CẤM log ra stdout — stdout dành cho MCP JSON-RPC stdio framing.
+ *
+ * Quy tắc:
+ *   - KHÔNG log apikey, apisecret, hashsecret, gatewayKey, raw body.
+ *   - Log: tool name, latency, status, error message.
+ *   - Tôn trọng LOG_LEVEL từ env (debug | info | warn | error).
+ */
+declare const levelOrder: {
+    readonly debug: 10;
+    readonly info: 20;
+    readonly warn: 30;
+    readonly error: 40;
+};
+type LevelName = keyof typeof levelOrder;
+export declare function setLogLevel(level: LevelName): void;
+export declare const logDebug: (msg: string, fields?: Record<string, unknown>) => void;
+export declare const logInfo: (msg: string, fields?: Record<string, unknown>) => void;
+export declare const logWarn: (msg: string, fields?: Record<string, unknown>) => void;
+export declare const logError: (msg: string, fields?: Record<string, unknown>) => void;
+export {};

package/dist/log.js

@@ -0,0 +1,29 @@
+/**
+ * Log structured JSON ra **stderr**. CẤM log ra stdout — stdout dành cho MCP JSON-RPC stdio framing.
+ *
+ * Quy tắc:
+ *   - KHÔNG log apikey, apisecret, hashsecret, gatewayKey, raw body.
+ *   - Log: tool name, latency, status, error message.
+ *   - Tôn trọng LOG_LEVEL từ env (debug | info | warn | error).
+ */
+const levelOrder = { debug: 10, info: 20, warn: 30, error: 40 };
+let currentLevel = "info";
+export function setLogLevel(level) {
+    currentLevel = level;
+}
+function log(level, msg, fields = {}) {
+    if (levelOrder[level] < levelOrder[currentLevel]) {
+        return;
+    }
+    const line = JSON.stringify({
+        time: new Date().toISOString(),
+        level,
+        msg,
+        ...fields,
+    });
+    process.stderr.write(line + "\n");
+}
+export const logDebug = (msg, fields) => log("debug", msg, fields);
+export const logInfo = (msg, fields) => log("info", msg, fields);
+export const logWarn = (msg, fields) => log("warn", msg, fields);
+export const logError = (msg, fields) => log("error", msg, fields);

package/dist/prompts.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Load prompt assets (mcp-instructions.md + mcp-prompts-tools.json).
+ *
+ * Sau build: assets nằm ở `dist/assets/` (cùng thư mục với dist/index.js).
+ * Dev mode (tsx src/index.ts): load trực tiếp từ `../assets/`.
+ */
+/** Load system prompt MCP (dùng cho ServerOptions.instructions). */
+export declare function loadInstructions(): string;

package/dist/prompts.js

@@ -0,0 +1,38 @@
+/**
+ * Load prompt assets (mcp-instructions.md + mcp-prompts-tools.json).
+ *
+ * Sau build: assets nằm ở `dist/assets/` (cùng thư mục với dist/index.js).
+ * Dev mode (tsx src/index.ts): load trực tiếp từ `../assets/`.
+ */
+import { readFileSync, existsSync } from "node:fs";
+import { resolve, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+/** Resolve đường dẫn tới assets/, hỗ trợ cả build và dev mode. */
+function resolveAssetsDir() {
+    // Build mode: dist/assets/ nằm cạnh dist/index.js (cùng thư mục __dirname)
+    const buildPath = resolve(__dirname, "assets");
+    if (existsSync(buildPath)) {
+        return buildPath;
+    }
+    // Dev mode (tsx src/index.ts): __dirname = src/, lấy ../assets/ (đã commit sẵn)
+    const localPath = resolve(__dirname, "..", "assets");
+    if (existsSync(localPath)) {
+        return localPath;
+    }
+    // Fallback: ../dist/assets/
+    const devPath = resolve(__dirname, "..", "dist", "assets");
+    if (existsSync(devPath)) {
+        return devPath;
+    }
+    throw new Error(`Không tìm thấy thư mục assets/. Hãy chắc chắn repo của bạn chứa thư mục assets/ hoặc đã chạy "npm run build".`);
+}
+/** Load system prompt MCP (dùng cho ServerOptions.instructions). */
+export function loadInstructions() {
+    const dir = resolveAssetsDir();
+    const file = resolve(dir, "mcp-instructions.md");
+    if (!existsSync(file)) {
+        throw new Error(`Thiếu file mcp-instructions.md tại ${dir}`);
+    }
+    return readFileSync(file, "utf-8");
+}

package/dist/sign.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Sign hashsecret cho request lên DauThau backend.
+ *
+ * Test vector chung ở test/vectors.json — đảm bảo bit-exact với backend gateway.
+ *
+ * Algo `md5`:    md5(apisecret + "_" + timestamp) → hex lowercase 32 ký tự.
+ * Algo `bcrypt`: bcrypt(apisecret + "_" + timestamp, cost=10) → `$2y$...`.
+ *
+ * Backend chỉ chấp nhận skew window hẹp (vài giây) — sign per-request, KHÔNG cache.
+ */
+import type { HashAlgo } from "./config.js";
+/** Trả unix timestamp (seconds). */
+export declare function nowUnix(): number;
+/** Sign md5 hashsecret theo công thức md5(apisecret + "_" + timestamp). */
+export declare function signMd5(apisecret: string, timestamp: number): string;
+/**
+ * Sign bcrypt hashsecret cho tài khoản (mặc định NukeViet dùng PASSWORD_DEFAULT = bcrypt).
+ * bcryptjs là pure JS — không cần node-gyp / native binding.
+ */
+export declare function signBcrypt(apisecret: string, timestamp: number): Promise<string>;
+/** Sign theo algo cấu hình. Mỗi request 1 timestamp + 1 hashsecret mới. */
+export declare function signHashsecret(algo: HashAlgo, apisecret: string, timestamp: number): Promise<string>;

package/dist/sign.js

@@ -0,0 +1,38 @@
+/**
+ * Sign hashsecret cho request lên DauThau backend.
+ *
+ * Test vector chung ở test/vectors.json — đảm bảo bit-exact với backend gateway.
+ *
+ * Algo `md5`:    md5(apisecret + "_" + timestamp) → hex lowercase 32 ký tự.
+ * Algo `bcrypt`: bcrypt(apisecret + "_" + timestamp, cost=10) → `$2y$...`.
+ *
+ * Backend chỉ chấp nhận skew window hẹp (vài giây) — sign per-request, KHÔNG cache.
+ */
+import { createHash } from "node:crypto";
+import bcryptjs from "bcryptjs";
+/** Trả unix timestamp (seconds). */
+export function nowUnix() {
+    return Math.floor(Date.now() / 1000);
+}
+/** Sign md5 hashsecret theo công thức md5(apisecret + "_" + timestamp). */
+export function signMd5(apisecret, timestamp) {
+    return createHash("md5").update(`${apisecret}_${timestamp}`).digest("hex");
+}
+/**
+ * Sign bcrypt hashsecret cho tài khoản (mặc định NukeViet dùng PASSWORD_DEFAULT = bcrypt).
+ * bcryptjs là pure JS — không cần node-gyp / native binding.
+ */
+export async function signBcrypt(apisecret, timestamp) {
+    const hash = await bcryptjs.hash(`${apisecret}_${timestamp}`, 10);
+    // PHP password_hash trả prefix $2y$, bcryptjs trả $2a$ — backend chấp nhận cả hai.
+    return hash;
+}
+/** Sign theo algo cấu hình. Mỗi request 1 timestamp + 1 hashsecret mới. */
+export async function signHashsecret(algo, apisecret, timestamp) {
+    switch (algo) {
+        case "md5":
+            return signMd5(apisecret, timestamp);
+        case "bcrypt":
+            return signBcrypt(apisecret, timestamp);
+    }
+}

package/dist/tools.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Đăng ký tool MCP với SDK TypeScript.
+ *
+ * **Quan trọng:** wrapper KHÔNG hardcode schema 22 tool. Thay vào đó query động
+ * `tools/list` lên gateway khi MCP client gọi → gateway là source of truth.
+ * Khi backend thêm/sửa tool, wrapper KHÔNG cần release version mới.
+ *
+ * Trade-off: cold-start có thêm 1 round-trip lên gateway. Chấp nhận được vì
+ * MCP client cache tools/list sau lần đầu trong session.
+ */
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import type { Config } from "./config.js";
+/**
+ * registerProxyHandlers gắn 2 handler quan trọng:
+ *   - tools/list  → forward GET lên gateway, trả nguyên schema.
+ *   - tools/call  → forward POST lên gateway, trả nguyên response.
+ *
+ * Các method khác (initialize, ping, ...) MCP SDK lo nội bộ.
+ */
+export declare function registerProxyHandlers(server: Server, cfg: Config): void;

package/dist/tools.js

@@ -0,0 +1,62 @@
+/**
+ * Đăng ký tool MCP với SDK TypeScript.
+ *
+ * **Quan trọng:** wrapper KHÔNG hardcode schema 22 tool. Thay vào đó query động
+ * `tools/list` lên gateway khi MCP client gọi → gateway là source of truth.
+ * Khi backend thêm/sửa tool, wrapper KHÔNG cần release version mới.
+ *
+ * Trade-off: cold-start có thêm 1 round-trip lên gateway. Chấp nhận được vì
+ * MCP client cache tools/list sau lần đầu trong session.
+ */
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { forwardJsonRpc } from "./forward.js";
+import { logError, logInfo } from "./log.js";
+/**
+ * registerProxyHandlers gắn 2 handler quan trọng:
+ *   - tools/list  → forward GET lên gateway, trả nguyên schema.
+ *   - tools/call  → forward POST lên gateway, trả nguyên response.
+ *
+ * Các method khác (initialize, ping, ...) MCP SDK lo nội bộ.
+ */
+export function registerProxyHandlers(server, cfg) {
+    server.setRequestHandler(ListToolsRequestSchema, async (req) => {
+        logInfo("forward tools/list");
+        const { status, body } = await forwardJsonRpc({
+            jsonrpc: "2.0",
+            id: 1,
+            method: "tools/list",
+            params: req.params ?? {},
+        }, cfg);
+        if (status !== 200) {
+            logError("tools/list non-200", { status });
+            throw new Error(`tools/list gateway returned ${status}`);
+        }
+        const result = extractResult(body);
+        // as never: MCP SDK handler typing quá strict, workaround safe vì result là dynamic từ gateway
+        return result;
+    });
+    server.setRequestHandler(CallToolRequestSchema, async (req) => {
+        const toolName = req.params.name;
+        logInfo("forward tools/call", { tool: toolName });
+        const { status, body } = await forwardJsonRpc({
+            jsonrpc: "2.0",
+            id: 2,
+            method: "tools/call",
+            params: req.params,
+        }, cfg);
+        if (status !== 200) {
+            logError("tools/call non-200", { tool: toolName, status });
+            // Forward error JSON nguyên về client (DauThau backend trả code 1003/1004/1006/1007 cần hiển thị)
+            const errBody = extractResult(body) ?? { error: { code: status, message: "gateway error" } };
+            return errBody;
+        }
+        return extractResult(body);
+    });
+}
+/** Bóc tách `result` từ JSON-RPC envelope. Nếu là raw object (gateway trả non-JSON-RPC), trả nguyên. */
+function extractResult(body) {
+    if (body && typeof body === "object" && "result" in body) {
+        return body.result;
+    }
+    return body;
+}

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@dauthau/mcp-dauthau",
+  "version": "0.1.2",
+  "description": "Node.js MCP wrapper kết nối AI tool (Claude Code, Cursor, ...) tới dịch vụ tra cứu đấu thầu DauThau. Apisecret giữ local, ký hashsecret mỗi request.",
+  "type": "module",
+  "bin": {
+    "mcpdauthau-wrapper": "./dist/index.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "node scripts/copy-assets.mjs && tsc",
+    "dev": "tsx src/index.ts",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "tsc --noEmit",
+    "prepublishOnly": "npm run lint && npm run test && npm run build"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "dauthau",
+    "claude-code",
+    "anthropic"
+  ],
+  "author": "DauThau team",
+  "license": "GPL-2.0-only",
+  "repository": {
+    "type": "git",
+    "url": "git@github.com:vinades/mcp-dauthau.git"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "1.29.0",
+    "bcryptjs": "3.0.3"
+  },
+  "devDependencies": {
+    "@types/node": "20.11.0",
+    "@vitest/coverage-v8": "4.1.6",
+    "tsx": "4.19.3",
+    "typescript": "5.3.3",
+    "vitest": "4.1.6"
+  }
+}