@integrity-labs/cloud-broker 0.6.5 → 0.7.1

package/dist/index.js

@@ -20994,6 +20994,7 @@ function makeBrokerError(status, message, detail) {
 }
 var BrokerClient = class {
   host;
+  apiPathPrefix;
   agentId;
   runId;
   apiKey;
@@ -21003,6 +21004,8 @@ var BrokerClient = class {
   exchangeInFlight = null;
   constructor(config2) {
     this.host = config2.host.replace(/\/+$/, "");
+    const rawPrefix = config2.apiPathPrefix && config2.apiPathPrefix.trim() || "/aws";
+    this.apiPathPrefix = (rawPrefix.startsWith("/") ? rawPrefix : `/${rawPrefix}`).replace(/\/+$/, "");
     this.agentId = config2.agentId;
     this.runId = config2.runId;
     this.apiKey = config2.apiKey;
@@ -21095,7 +21098,7 @@ var BrokerClient = class {
     }
     return this.request(
       "GET",
-      "/aws/scope",
+      `${this.apiPathPrefix}/scope`,
       { query: { account_id: args.account_id, agent_id: this.agentId } }
     );
   }
@@ -21107,7 +21110,7 @@ var BrokerClient = class {
     if (body.agent_id === void 0) body.agent_id = this.agentId;
     return this.request(
       "POST",
-      "/aws/scope/preview",
+      `${this.apiPathPrefix}/scope/preview`,
       { body }
     );
   }
@@ -21121,10 +21124,12 @@ var BrokerClient = class {
       throw makeBrokerError(400, "BrokerClient.requestAccess requires run_id (pass it in args, or set runId on BrokerClientConfig)");
     }
     const body = { ...args, agent_id: agentId, run_id: runId };
-    return this.request("POST", "/aws/grants", { body });
+    return this.request("POST", `${this.apiPathPrefix}/grants`, { body });
   }
   pollGrant(args) {
-    return this.request("GET", `/aws/grants/${encodeURIComponent(args.grant_id)}`);
+    return this.request("GET", `${this.apiPathPrefix}/grants/${encodeURIComponent(args.grant_id)}`, {
+      query: this.agentId ? { agent_id: this.agentId } : void 0
+    });
   }
   /**
    * ENG-4824: pre-flight check that the agent's Slack bot can actually
@@ -21139,14 +21144,15 @@ var BrokerClient = class {
     }
     return this.request(
       "GET",
-      "/aws/approval-channel-status",
+      `${this.apiPathPrefix}/approval-channel-status`,
       { query: { account_id: args.account_id, agent_id: this.agentId } }
     );
   }
   releaseAccess(args) {
     return this.request(
       "POST",
-      `/aws/grants/${encodeURIComponent(args.grant_id)}/release`
+      `${this.apiPathPrefix}/grants/${encodeURIComponent(args.grant_id)}/release`,
+      { query: this.agentId ? { agent_id: this.agentId } : void 0 }
     );
   }
   /**
@@ -21161,7 +21167,7 @@ var BrokerClient = class {
     }
     return this.request(
       "GET",
-      "/aws/inventory",
+      `${this.apiPathPrefix}/inventory`,
       { query: { agent_id: this.agentId } }
     );
   }
@@ -21172,7 +21178,8 @@ var BrokerClient = class {
   getCredentials(args) {
     return this.request(
       "POST",
-      `/aws/grants/${encodeURIComponent(args.grant_id)}/credentials`
+      `${this.apiPathPrefix}/grants/${encodeURIComponent(args.grant_id)}/credentials`,
+      { query: this.agentId ? { agent_id: this.agentId } : void 0 }
     );
   }
 };
@@ -21271,8 +21278,8 @@ var listAccountsShape = listAccountsSchema.shape;
 // package.json
 var package_default = {
   name: "@integrity-labs/cloud-broker",
-  version: "0.6.5",
-  description: "Cloud Access Broker \u2014 MCP server that mints scoped, TTL-bounded cloud credentials per agent task. v1 ships AWS support (aws_request_access, aws_poll_grant, aws_release_access, aws_describe_scope, aws_preview_request, aws_get_credentials \u2014 STS AssumeRole under the hood); GCP, Azure, and Cloudflare land alongside in the same package as the broker grows.",
+  version: "0.7.1",
+  description: "Cloud Access Broker \u2014 MCP server that mints scoped, TTL-bounded cloud credentials per agent task. Ships AWS support (aws_request_access, aws_poll_grant, aws_release_access, aws_describe_scope, aws_preview_request, aws_get_credentials \u2014 STS AssumeRole under the hood); GCP, Azure, and Cloudflare land alongside in the same package as the broker grows.",
   type: "module",
   bin: {
     "cloud-broker": "./dist/index.js"
@@ -21297,7 +21304,8 @@ var package_default = {
     typecheck: "tsc --noEmit",
     test: "vitest run",
     clean: "rm -rf dist",
-    "publish:templates": "bash cloudformation/publish.sh"
+    "publish:templates": "bash cloudformation/publish.sh",
+    "check-published": "bash cloudformation/check-published.sh"
   },
   dependencies: {
     "@modelcontextprotocol/sdk": "1.27.1",
@@ -21308,7 +21316,8 @@ var package_default = {
     tsup: "8.5.1",
     tsx: "4.21.0",
     typescript: "5.9.3",
-    vitest: "3.2.4"
+    vitest: "3.2.4",
+    yaml: "2.8.4"
   }
 };
 
@@ -21337,7 +21346,8 @@ var broker = new BrokerClient({
   // on requestAccess if a non-empty value is provided.
   runId: AGT_RUN_ID || void 0,
   initialToken: AGT_TOKEN || void 0,
-  apiKey: AGT_API_KEY || void 0
+  apiKey: AGT_API_KEY || void 0,
+  apiPathPrefix: "/aws"
 });
 function formatBrokerError(err) {
   if (err && typeof err === "object" && "status" in err && "message" in err) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@integrity-labs/cloud-broker",
-  "version": "0.6.5",
-  "description": "Cloud Access Broker — MCP server that mints scoped, TTL-bounded cloud credentials per agent task. v1 ships AWS support (aws_request_access, aws_poll_grant, aws_release_access, aws_describe_scope, aws_preview_request, aws_get_credentials — STS AssumeRole under the hood); GCP, Azure, and Cloudflare land alongside in the same package as the broker grows.",
+  "version": "0.7.1",
+  "description": "Cloud Access Broker — MCP server that mints scoped, TTL-bounded cloud credentials per agent task. Ships AWS support (aws_request_access, aws_poll_grant, aws_release_access, aws_describe_scope, aws_preview_request, aws_get_credentials — STS AssumeRole under the hood); GCP, Azure, and Cloudflare land alongside in the same package as the broker grows.",
   "type": "module",
   "bin": {
     "cloud-broker": "./dist/index.js"
@@ -26,7 +26,8 @@
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "clean": "rm -rf dist",
-    "publish:templates": "bash cloudformation/publish.sh"
+    "publish:templates": "bash cloudformation/publish.sh",
+    "check-published": "bash cloudformation/check-published.sh"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.27.1",
@@ -37,6 +38,7 @@
     "tsup": "8.5.1",
     "tsx": "4.21.0",
     "typescript": "5.9.3",
-    "vitest": "3.2.4"
+    "vitest": "3.2.4",
+    "yaml": "2.8.4"
   }
 }