@productbrain/mcp 0.0.1-beta.9539 → 0.0.1-beta.9562

package/dist/http.js

@@ -2,7 +2,7 @@ import {
   SERVER_VERSION,
   createProductBrainServer,
   initFeatureFlags
-} from "./chunk-J5MP5CNG.js";
+} from "./chunk-QJ6KOXG6.js";
 import {
   DEFAULT_CLOUD_URL,
   apiKeysUrl,
@@ -299,6 +299,15 @@ function checkRegistrationRedirects(redirectUris, allowlist) {
 }
 
 // src/lib/oauthAuthCode.ts
+function normalisePastedKey(raw) {
+  if (typeof raw !== "string") return "";
+  const trimmed = raw.trim();
+  const first = trimmed[0];
+  if (trimmed.length >= 2 && (first === '"' || first === "'" || first === "`") && trimmed.endsWith(first)) {
+    return trimmed.slice(1, -1).trim();
+  }
+  return trimmed;
+}
 function pendingCodeRefusal(pending, redirectUri, now) {
   if (!pending) return "unknown_code";
   if (pending.redirectUri !== redirectUri) return "redirect_mismatch";
@@ -939,7 +948,6 @@ ${cmdScript}
     e.preventDefault();
     var v=k.value.trim();
     if(!v){iw.classList.add('has-error');hint.classList.add('is-error');hint.textContent='Paste your key first';hint.removeAttribute('hidden');return}
-    if(v.indexOf('pb_sk_')!==0){iw.classList.add('has-error');hint.classList.add('is-error');hint.textContent='Key must start with pb_sk_';hint.removeAttribute('hidden');return}
     sb.disabled=true;bt.textContent='Verifying';
     show(pVerify);
 
@@ -1018,7 +1026,8 @@ app.post(
   authLimiter,
   express.urlencoded({ extended: false }),
   async (req, res) => {
-    const { api_key, redirect_uri, code_challenge, code_challenge_method, state, client_id } = req.body;
+    const { redirect_uri, code_challenge, code_challenge_method, state, client_id } = req.body;
+    const api_key = normalisePastedKey(req.body.api_key);
     const wantsJson = String(req.headers["accept"] ?? "").includes("application/json");
     const retryParams = new URLSearchParams({
       redirect_uri: redirect_uri ?? "",
@@ -1035,7 +1044,7 @@ app.post(
         res.status(status).type("html").send(authorizeErrorPage(title, trustedDetailHtml, retryUrl));
       }
     }
-    if (!api_key?.startsWith("pb_sk_")) {
+    if (!api_key.startsWith("pb_sk_")) {
       sendError(
         "Invalid key format",
         "API keys start with <code>pb_sk_</code>. Check your key and try again."