@lifeaitools/clauth 1.5.7 → 1.5.8

package/cli/commands/serve.js

@@ -3000,9 +3000,23 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
       return res.end(JSON.stringify({ access_token: accessToken, token_type: "Bearer", expires_in: 86400 }));
     }
 
+    // ── MCP path helpers ──
+    const MCP_PATHS = ["/mcp", "/gws", "/clauth"];
+    const isMcpPath = MCP_PATHS.includes(reqPath);
+    function toolsForPath(p) {
+      if (p === "/gws")    return MCP_TOOLS.filter(t => t.name.startsWith("gws_"));
+      if (p === "/clauth") return MCP_TOOLS.filter(t => t.name.startsWith("clauth_"));
+      return MCP_TOOLS; // /mcp — all tools
+    }
+    function serverNameForPath(p) {
+      if (p === "/gws")    return "gws";
+      if (p === "/clauth") return "clauth";
+      return "clauth";
+    }
+
     // ── MCP OAuth-protected endpoint (for claude.ai web) ──
-    // POST /mcp — requires Bearer token; returns 401 to trigger OAuth flow
-    if (method === "POST" && reqPath === "/mcp") {
+    // POST /mcp|/gws|/clauth — requires Bearer token; returns 401 to trigger OAuth flow
+    if (method === "POST" && isMcpPath) {
       const authHeader = req.headers.authorization;
       if (!authHeader || !authHeader.startsWith("Bearer ")) {
         const base = oauthBase();
@@ -3024,8 +3038,8 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
     }
 
     // ── MCP Streamable HTTP transport (2025-03-26 spec) ──
-    // POST /sse or POST /mcp — JSON-RPC over HTTP
-    if (method === "POST" && (reqPath === "/sse" || reqPath === "/mcp")) {
+    // POST /sse, /mcp, /gws, /clauth — JSON-RPC over HTTP
+    if (method === "POST" && (reqPath === "/sse" || isMcpPath)) {
       let body;
       try { body = await readBody(req); } catch {
         res.writeHead(400, { "Content-Type": "application/json", ...CORS });
@@ -3034,7 +3048,7 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
 
       const id = body.id;
       const rpcMethod = body.method;
-      const logMsg = `[${new Date().toISOString()}] Streamable HTTP: ${rpcMethod} id=${id}\n`;
+      const logMsg = `[${new Date().toISOString()}] Streamable HTTP [${reqPath}]: ${rpcMethod} id=${id}\n`;
       try { fs.appendFileSync(LOG_FILE, logMsg); } catch {}
 
       // Notifications — no response needed
@@ -3046,7 +3060,7 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
       if (rpcMethod === "initialize") {
         const result = {
           protocolVersion: "2025-03-26",
-          serverInfo: { name: "clauth", version: VERSION },
+          serverInfo: { name: serverNameForPath(reqPath), version: VERSION },
           capabilities: { tools: {} }
         };
         res.writeHead(200, { "Content-Type": "application/json", ...CORS });
@@ -3055,7 +3069,7 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
 
       if (rpcMethod === "tools/list") {
         res.writeHead(200, { "Content-Type": "application/json", ...CORS });
-        return res.end(JSON.stringify({ jsonrpc: "2.0", id, result: { tools: MCP_TOOLS } }));
+        return res.end(JSON.stringify({ jsonrpc: "2.0", id, result: { tools: toolsForPath(reqPath) } }));
       }
 
       if (rpcMethod === "tools/call") {
@@ -4321,7 +4335,7 @@ function createServer(initPassword, whitelist, port, tunnelHostnameInit = null,
     // Don't count browser noise, MCP discovery probes, or OAuth probes as auth failures
     const isBenign = reqPath.startsWith("/.well-known/") || [
       "/favicon.ico", "/robots.txt", "/apple-touch-icon.png", "/apple-touch-icon-precomposed.png",
-      "/sse", "/mcp", "/message", "/register", "/authorize", "/token", "/shutdown", "/restart",
+      "/sse", "/mcp", "/gws", "/clauth", "/message", "/register", "/authorize", "/token", "/shutdown", "/restart",
     ].includes(reqPath);
     if (isBenign) {
       res.writeHead(404, { "Content-Type": "application/json", ...CORS });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lifeaitools/clauth",
-  "version": "1.5.7",
+  "version": "1.5.8",
   "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",
   "type": "module",
   "bin": {