@mrrlin-dev/mcp 0.4.52 → 0.4.53

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/bin.cjs +5 -4
  2. package/package.json +3 -3
package/dist/bin.cjs CHANGED
@@ -42437,7 +42437,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
42437
42437
  }
42438
42438
 
42439
42439
  // src/_generated/version.ts
42440
- var PKG_VERSION = "0.4.52";
42440
+ var PKG_VERSION = "0.4.53";
42441
42441
 
42442
42442
  // src/api-base-url-migrate.ts
42443
42443
  var import_node_fs4 = __toESM(require("node:fs"), 1);
@@ -55931,12 +55931,13 @@ function isOriginAllowed(origin, allowed) {
55931
55931
  var CORS_ALLOW_METHODS = "GET, POST, OPTIONS";
55932
55932
  var CORS_ALLOW_HEADERS = "content-type, authorization, sec-websocket-protocol";
55933
55933
  function corsAllowOrigin(requestOrigin, allowed) {
55934
- if (requestOrigin) return requestOrigin;
55934
+ if (requestOrigin) return isOriginAllowed(requestOrigin, allowed) ? requestOrigin : null;
55935
55935
  if (allowed?.length === 1) return allowed[0] ?? "*";
55936
55936
  return "*";
55937
55937
  }
55938
55938
  function applyPnaHeaders(res, requestOrigin, allowed) {
55939
- res.setHeader("Access-Control-Allow-Origin", corsAllowOrigin(requestOrigin, allowed));
55939
+ const allowOrigin = corsAllowOrigin(requestOrigin, allowed);
55940
+ if (allowOrigin !== null) res.setHeader("Access-Control-Allow-Origin", allowOrigin);
55940
55941
  res.setHeader("Access-Control-Allow-Private-Network", "true");
55941
55942
  res.setHeader("Vary", "Origin");
55942
55943
  }
@@ -55974,7 +55975,7 @@ function createBridgeRequestListener(opts) {
55974
55975
  if (url2.pathname === "/pair/token") {
55975
55976
  const origin = (url2.searchParams.get("origin") ?? "").trim();
55976
55977
  applyPnaHeaders(res, requestOrigin, allowedOrigins);
55977
- if (!isOriginAllowed(origin, allowedOrigins)) {
55978
+ if (!isOriginAllowed(origin, allowedOrigins) || requestOrigin !== void 0 && !isOriginAllowed(requestOrigin, allowedOrigins)) {
55978
55979
  res.writeHead(403, { "content-type": "application/json" });
55979
55980
  res.end(JSON.stringify({ ok: false, error: "Origin not allowed." }));
55980
55981
  return;
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@mrrlin-dev/mcp",
3
- "version": "0.4.52",
3
+ "version": "0.4.53",
4
4
  "type": "module",
5
5
  "bin": {
6
6
  "mrrlin-mcp": "dist/bin.cjs"
@@ -21,9 +21,9 @@
21
21
  "@types/ws": "^8.18.1",
22
22
  "esbuild": "^0.24.0",
23
23
  "tsx": "^4.22.3",
24
- "@mrrlin/director-e2e": "0.0.0",
25
- "@mrrlin/agent-client": "0.0.0",
26
24
  "@mrrlin/client": "0.0.0",
25
+ "@mrrlin/agent-client": "0.0.0",
26
+ "@mrrlin/director-e2e": "0.0.0",
27
27
  "@mrrlin/schemas": "0.0.0",
28
28
  "@mrrlin/tsconfig": "0.0.0",
29
29
  "@mrrlin/wiki": "0.0.0"