@oliverames/mcp-server-for-wave 1.0.0 → 1.0.2

package/README.md

@@ -359,10 +359,14 @@ the live schema.
 
 ## Hosted Connector
 
-`worker/` holds a Cloudflare Worker serving the same tools at a URL, with
-per-user OAuth instead of a shared token. Users authorize against their own
-Wave account, tokens are encrypted before storage, and write access is chosen
-at authorization time so a read-only connection cannot be escalated later.
+A Cloudflare Worker serves the same tools over OAuth instead of a shared token.
+Users authorize against their own Wave account, tokens are encrypted before
+storage, and write access is chosen at authorization time so a read-only
+connection cannot be escalated later.
+
+The deployment at **https://wave.amesvt.com/mcp** is private: an owner
+allowlist restricts it to one Wave account, and any other account is refused
+before a token is stored. Deploy your own copy from `worker/` to use it.
 
 See [worker/README.md](worker/README.md) for setup and the security model.
 
@@ -375,11 +379,12 @@ index.js                     Single-file server: client, 74 tools, 7 resources
 scripts/
   smoke-validate-graphql.mjs Schema-check every query against live Wave
   smoke-list-tools.mjs       Start over stdio and enumerate what is advertised
+  smoke-packed-install.mjs   Pack, install, and launch the way npx does
   sync-plugin-metadata.mjs   Propagate the version to every host manifest
   check-release-consistency  Fail the build when anything disagrees
   build-mcpb.mjs             Desktop bundle
 worker/                      Hosted OAuth connector
-test/unit.test.mjs           54 tests, no network
+test/unit.test.mjs           58 tests, no network
 ```
 
 The tool layer lives in one file on purpose. It is imported unchanged by the
@@ -398,8 +403,9 @@ at all, which catches a field Wave renames before a user does.
 
 ```bash
 npm install
-npm test                  # 54 unit tests, no network
+npm test                  # 58 unit tests, no network
 npm run smoke:list-tools  # start over stdio, enumerate tools
+npm run smoke:packed      # pack, install, and launch via the bin symlink
 npm run smoke:schema      # validate every query against live Wave
 npm run release:check     # version parity across 8 manifests
 npm run build:mcpb        # desktop bundle

package/docs/hosted-oauth-connector.md

@@ -24,6 +24,19 @@ server is simpler and has a smaller surface. The hosted connector earns its
 complexity when more than one person needs access, or when your client cannot
 launch a subprocess.
 
+## Who may connect
+
+A hosted connector is reachable by anyone who learns its URL, so it carries an
+owner allowlist. `ALLOWED_WAVE_USERS` names the Wave accounts, by user id or
+account email, permitted to hold a connection. Anyone else who authorizes at
+Wave is refused at `/callback` before a token is stored, and the check runs
+again on every MCP session, so removing an entry ends a connection that already
+exists rather than only blocking new ones.
+
+The deployment at `wave.amesvt.com` is private and allows a single account. A
+copy you self-host should name your own account, or leave the variable empty to
+accept any Wave account.
+
 ## Access levels
 
 Write access is chosen during authorization, not afterwards. A read-only

package/index.js

@@ -29,7 +29,7 @@ import { z } from "zod";
 // import-time config resolution and the stdio autostart are both skipped.
 const IS_CLOUDFLARE_WORKERS = globalThis.navigator?.userAgent === "Cloudflare-Workers";
 
-const SERVER_VERSION = "1.0.0";
+const SERVER_VERSION = "1.0.2";
 const WAVE_ENDPOINT = "https://gql.waveapps.com/graphql/public";
 const WAVE_API_HOST = "gql.waveapps.com";
 const MAX_TOKEN_FILE_BYTES = 4096;
@@ -312,6 +312,19 @@ function readOnePasswordSecret(reference) {
   return token;
 }
 
+/**
+ * Strip credentials from text headed for stderr.
+ *
+ * The factory's sanitizeErrorMessage closes over the live token and is not
+ * reachable from process-level handlers, so this covers the header forms that
+ * show up in a stack trace.
+ */
+function redactTokens(value) {
+  return String(value ?? "")
+    .replace(/Bearer\s+[A-Za-z0-9._~+/=-]+/gi, "Bearer [REDACTED_TOKEN]")
+    .replace(/Authorization:\s*[^\r\n]+/gi, "Authorization: [REDACTED_TOKEN]");
+}
+
 function detectAgent() {
   const env = globalThis.process?.env ?? {};
   if (env.CLAUDECODE || env.CLAUDE_CODE_ENTRYPOINT) return "claude-code";
@@ -5774,6 +5787,7 @@ export const __testables = {
   extractFromJsonMcpConfig,
   pickRuntimeKeys,
   isDirectRun,
+  redactTokens,
 };
 
 // --- Start ---
@@ -5808,9 +5822,24 @@ function isDirectRun() {
   }
 }
 
+if (!IS_CLOUDFLARE_WORKERS) {
+  // Without these, an unhandled rejection takes the process down with no
+  // usable output, and the MCP client reports only a dead server. Sanitize
+  // first: a stack can carry the access token.
+  globalThis.process.on("uncaughtException", (error) => {
+    console.error(`Uncaught exception: ${redactTokens(error?.stack || error)}`);
+    globalThis.process.exit(1);
+  });
+
+  globalThis.process.on("unhandledRejection", (reason) => {
+    console.error(`Unhandled promise rejection: ${redactTokens(reason?.stack || reason)}`);
+    globalThis.process.exit(1);
+  });
+}
+
 if (isDirectRun()) {
   main().catch((error) => {
-    console.error(`Fatal error starting MCP Server for Wave: ${error?.message ?? error}`);
+    console.error(`Fatal error starting MCP Server for Wave: ${redactTokens(error?.message ?? error)}`);
     globalThis.process.exit(1);
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oliverames/mcp-server-for-wave",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Local MCP server for Wave Accounting: invoices, estimates, customers, products, taxes, and bookkeeping",
   "license": "MIT",
   "repository": {
@@ -49,7 +49,7 @@
     "presmoke:packed": "npm run deps:ensure",
     "smoke:packed": "node scripts/smoke-packed-install.mjs",
     "sync:plugin": "node scripts/sync-plugin-metadata.mjs",
-    "version": "npm run sync:plugin && git add .agents/plugins/marketplace.json .claude-plugin/marketplace.json .claude-plugin/plugin.json codex/.codex-plugin/plugin.json codex/.codex-plugin/mcp.json .hermes-plugin/marketplace.json .hermes-plugin/plugin.json .hermes-plugin/mcp.json .antigravity-plugin/marketplace.json .antigravity-plugin/plugin.json .antigravity-plugin/mcp_config.json .mcp.json",
+    "version": "npm run sync:plugin && git add index.js .agents/plugins/marketplace.json .claude-plugin/marketplace.json .claude-plugin/plugin.json codex/.codex-plugin/plugin.json codex/.codex-plugin/mcp.json .hermes-plugin/marketplace.json .hermes-plugin/plugin.json .hermes-plugin/mcp.json .antigravity-plugin/marketplace.json .antigravity-plugin/plugin.json .antigravity-plugin/mcp_config.json .mcp.json",
     "release:check": "node scripts/check-release-consistency.mjs",
     "release:check:registry": "node scripts/check-release-consistency.mjs --registry",
     "build:mcpb": "node scripts/build-mcpb.mjs"