@rigstate/mcp 0.6.1 → 0.6.2

package/dist/index.js

@@ -1074,20 +1074,21 @@ async function authenticateApiKey(apiKey) {
       error: "Supabase configuration missing. Set RIGSTATE_SUPABASE_URL and RIGSTATE_SUPABASE_ANON_KEY."
     };
   }
-  const hashedKey = createHash("sha256").update(apiKey).digest("hex");
+  const cleanApiKey = apiKey.trim();
+  const hashedKey = createHash("sha256").update(cleanApiKey).digest("hex");
   const clientKey = SUPABASE_SERVICE_KEY || SUPABASE_ANON_KEY;
   const supabase = createSupabaseClient(SUPABASE_URL, clientKey);
-  const { data: keyData, error: keyError } = await supabase.from("api_keys").select("id, user_id, project_id, organization_id, scope").eq("key_hash", hashedKey).single();
+  const { data: keyData, error: keyError } = await supabase.rpc("authenticate_api_key_hash", { hash: hashedKey }).single();
   if (keyError || !keyData) {
     return { success: false, error: "Invalid or revoked API key" };
   }
-  supabase.from("api_keys").update({ last_used_at: (/* @__PURE__ */ new Date()).toISOString() }).eq("id", keyData.id).then();
+  const { id, user_id } = keyData;
   const userSupabase = createSupabaseClient(SUPABASE_URL, clientKey);
   return {
     success: true,
     context: {
-      userId: keyData.user_id,
-      apiKeyId: keyData.id,
+      userId: user_id,
+      apiKeyId: id,
       supabase: userSupabase
     }
   };