@helm-protocol/ttt-mcp 0.4.3 → 0.4.4

package/dist/index.js

@@ -105,7 +105,7 @@ function toolSuccess(result) {
   return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
 }
 function buildMcpServer() {
-  const s = new import_mcp.McpServer({ name: "ttt-mcp", version: "0.4.3" });
+  const s = new import_mcp.McpServer({ name: "ttt-mcp", version: "0.4.4" });
   const registerTool = s.tool.bind(s);
   registerTool(
     "pot_generate",
@@ -304,12 +304,13 @@ async function main() {
     const requestHandler = async (req, res) => {
       if (req.method === "GET" && (req.url === "/health" || req.url === "/ping")) {
         res.writeHead(200, { "Content-Type": "application/json" });
-        res.end(JSON.stringify({ status: "ok", server: "ttt-mcp", version: "0.4.3" }));
+        res.end(JSON.stringify({ status: "ok", server: "ttt-mcp", version: "0.4.4" }));
         return;
       }
       if (req.method === "POST") {
         const apiKey = (0, import_auth.resolveApiKey)(req.headers["x-api-key"]);
-        const clientIp = req.headers["x-forwarded-for"]?.split(",")[0].trim() || req.socket.remoteAddress || "unknown";
+        const trustProxy = process.env.TTTPS_TRUST_PROXY === "1";
+        const clientIp = (trustProxy ? req.headers["x-forwarded-for"]?.split(",")[0].trim() : "") || req.socket.remoteAddress || "unknown";
         const rl = (0, import_auth.checkRateLimit)(apiKey, clientIp);
         if (!rl.allowed) {
           res.writeHead(429, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helm-protocol/ttt-mcp",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "description": "Proof-of-Time attestation — Ed25519-signed timestamps with multi-source corroboration and explicit error bounds. IETF draft-helmprotocol-tttps",
   "main": "dist/index.js",
   "bin": {