@integrity-labs/cloud-broker 0.2.1 → 0.4.1

package/dist/index.js

@@ -20994,7 +20994,7 @@ function makeBrokerError(status, message, detail) {
 }
 var BrokerClient = class {
   host;
-  teamSlug;
+  agentId;
   apiKey;
   fetchImpl;
   token;
@@ -21002,7 +21002,7 @@ var BrokerClient = class {
   exchangeInFlight = null;
   constructor(config2) {
     this.host = config2.host.replace(/\/+$/, "");
-    this.teamSlug = config2.teamSlug;
+    this.agentId = config2.agentId;
     this.apiKey = config2.apiKey;
     this.fetchImpl = config2.fetchImpl ?? fetch;
     this.token = config2.initialToken ?? "";
@@ -21019,8 +21019,7 @@ var BrokerClient = class {
   buildHeaders(token, contentType = "application/json") {
     return {
       "Content-Type": contentType,
-      Authorization: `Bearer ${token}`,
-      "X-Team-Slug": this.teamSlug
+      Authorization: `Bearer ${token}`
     };
   }
   async refreshToken() {
@@ -21089,17 +21088,21 @@ var BrokerClient = class {
   }
   // ────────────────────────── tool-shaped wrappers ──────────────────────────
   describeScope(args) {
+    const query = { account_id: args.account_id };
+    if (this.agentId) query.agent_id = this.agentId;
     return this.request(
       "GET",
       "/aws/scope",
-      { query: { account_id: args.account_id } }
+      { query }
     );
   }
   previewRequest(args) {
+    const body = { ...args };
+    if (this.agentId && body.agent_id === void 0) body.agent_id = this.agentId;
     return this.request(
       "POST",
       "/aws/scope/preview",
-      { body: args }
+      { body }
     );
   }
   requestAccess(args) {
@@ -21159,18 +21162,23 @@ var releaseAccessShape = releaseAccessSchema.shape;
 
 // src/index.ts
 var AGT_HOST = process.env.AGT_HOST;
-var AGT_TEAM_SLUG = process.env.AGT_TEAM_SLUG;
+var AGT_AGENT_ID = process.env.AGT_AGENT_ID;
 var AGT_TOKEN = process.env.AGT_TOKEN ?? "";
 var AGT_API_KEY = process.env.AGT_API_KEY ?? "";
-if (!AGT_HOST || !AGT_TEAM_SLUG || !AGT_TOKEN && !AGT_API_KEY) {
+if (!AGT_HOST || !AGT_AGENT_ID || !AGT_TOKEN && !AGT_API_KEY) {
   console.error(
-    "cloud-broker: missing env vars. Need AGT_HOST, AGT_TEAM_SLUG, and one of AGT_TOKEN or AGT_API_KEY."
+    "cloud-broker: missing env vars. Need AGT_HOST, AGT_AGENT_ID, and one of AGT_TOKEN or AGT_API_KEY."
   );
   process.exit(1);
 }
+if (process.env.AGT_TEAM_SLUG) {
+  console.error(
+    "cloud-broker: AGT_TEAM_SLUG is set but no longer required (the API derives team from agent_id). Safe to remove from .mcp.json env block."
+  );
+}
 var broker = new BrokerClient({
   host: AGT_HOST,
-  teamSlug: AGT_TEAM_SLUG,
+  agentId: AGT_AGENT_ID,
   initialToken: AGT_TOKEN || void 0,
   apiKey: AGT_API_KEY || void 0
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@integrity-labs/cloud-broker",
-  "version": "0.2.1",
+  "version": "0.4.1",
   "description": "Cloud Access Broker — MCP server that mints scoped, TTL-bounded cloud credentials per agent task. v1 ships AWS support (request_access, poll_grant, release_access, describe_scope, preview_request — STS AssumeRole under the hood); GCP, Azure, and Cloudflare land alongside in the same package as the broker grows.",
   "type": "module",
   "bin": {
@@ -25,7 +25,8 @@
     "dev": "tsx watch src/index.ts",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
-    "clean": "rm -rf dist"
+    "clean": "rm -rf dist",
+    "publish:templates": "bash cloudformation/publish.sh"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.27.1",