@shuffleio/shuffle-mcps 0.0.39 → 0.0.40

package/dist/{appsCache-32FX7WJE.mjs → appsCache-EFH5WV4I.mjs}

@@ -2,7 +2,7 @@ import {
   fetchApps,
   fetchAppsViaApiConfig,
   invalidateAppsCache
-} from "./chunk-DCHKGFML.mjs";
+} from "./chunk-5LZ5IZ2O.mjs";
 export {
   fetchApps,
   fetchAppsViaApiConfig,

package/dist/{chunk-DCHKGFML.mjs → chunk-5LZ5IZ2O.mjs}

@@ -50,7 +50,7 @@ var keyFor = (input, init) => {
     return null;
   }
 };
-var withStoredApiKey = (input, init) => {
+var withStoredAuth = (input, init) => {
   if (typeof window === "undefined") return init;
   let urlStr;
   if (typeof input === "string") urlStr = input;
@@ -59,17 +59,35 @@ var withStoredApiKey = (input, init) => {
   else return init;
   try {
     const url = new URL(urlStr, window.location.href);
-    const isKnownShuffleOrigin = allowedOrigins.has(url.origin) || url.origin === window.location.origin || url.hostname === "shuffler.io" || url.hostname.endsWith(".shuffler.io") || url.hostname === "tunnel.schemaless.org";
+    const isKnownShuffleOrigin = allowedOrigins.has(url.origin) || url.origin === window.location.origin || url.hostname === "shuffler.io" || url.hostname.endsWith(".shuffler.io") || url.hostname === "tunnel.schemaless.org" || url.hostname === "shuffle.security" || url.hostname.endsWith(".shuffle.security");
     if (!url.pathname.startsWith("/api/") || !isKnownShuffleOrigin) return init;
-    const apiKey = window.localStorage.getItem("shuffle_api_key");
-    if (!apiKey) return init;
+    if (url.pathname === "/api/v1/login" || url.pathname === "/api/v1/users/register") return init;
+    const sessionToken = window.localStorage.getItem("session_token");
+    const token = sessionToken && sessionToken.trim().length > 0 ? sessionToken.trim() : null;
     const requestHeaders = typeof Request !== "undefined" && input instanceof Request ? input.headers : void 0;
     const headers = new Headers(requestHeaders);
     if (init?.headers) {
       new Headers(init.headers).forEach((value, name) => headers.set(name, value));
     }
-    if (!headers.has("Authorization")) headers.set("Authorization", `Bearer ${apiKey}`);
-    return { ...init, headers };
+    if (token && !headers.has("Authorization")) {
+      headers.set("Authorization", `Bearer ${token}`);
+    }
+    if (!headers.has("Org-Id")) {
+      try {
+        const raw = window.localStorage.getItem("shuffle_user_info");
+        if (raw) {
+          const parsed = JSON.parse(raw);
+          const orgId = parsed?.active_org?.id;
+          if (orgId) headers.set("Org-Id", orgId);
+        }
+      } catch {
+      }
+    }
+    return {
+      ...init,
+      credentials: init?.credentials || "include",
+      headers
+    };
   } catch {
     return init;
   }
@@ -99,7 +117,7 @@ var installFetchBreaker = () => {
   installed = true;
   const original = window.fetch.bind(window);
   window.fetch = (async (input, init) => {
-    const authenticatedInit = withStoredApiKey(input, init);
+    const authenticatedInit = withStoredAuth(input, init);
     const key = keyFor(input, authenticatedInit);
     if (!key) return original(input, authenticatedInit);
     const entry = getEntry(key);
@@ -175,6 +193,84 @@ var installFetchBreaker = () => {
   });
 };
 
+// ../lib/shuffleUrls.ts
+var readEnv = (key) => {
+  try {
+    const meta = new Function("try { return import.meta } catch { return undefined }")();
+    const val = meta?.env?.[key];
+    if (val && typeof val === "string" && val.trim().length > 0) {
+      return val.trim();
+    }
+  } catch {
+  }
+  if (typeof window !== "undefined") {
+    const win = window;
+    const runtimeConfig = win.__SHUFFLE_CONFIG__ || win._env_ || win.__ENV__;
+    if (runtimeConfig && typeof runtimeConfig === "object") {
+      const val = runtimeConfig[key] || runtimeConfig[key.replace(/^VITE_/, "")];
+      if (val && typeof val === "string" && val.trim().length > 0) {
+        return val.trim();
+      }
+    }
+  }
+  try {
+    if (typeof process !== "undefined" && process.env) {
+      const val = process.env[key] || process.env[key.replace(/^VITE_/, "")];
+      if (val && typeof val === "string" && val.trim().length > 0) {
+        return val.trim();
+      }
+    }
+  } catch {
+  }
+  return void 0;
+};
+var isManagedDomain = () => {
+  if (typeof window === "undefined") return false;
+  const hostname = window.location.hostname.toLowerCase();
+  return hostname.includes("lovable") || hostname.includes("shuffler.io") || hostname.includes("shutdown.no") || hostname.includes("shuffle.security");
+};
+var getShuffleCoreBaseUrl = () => {
+  const envUrl = readEnv("VITE_SHUFFLE_CORE_URL") || readEnv("SHUFFLE_CORE_URL") || readEnv("VITE_SHUFFLE_AUTOMATION_URL") || readEnv("VITE_SHUFFLE_URL");
+  if (envUrl) {
+    return envUrl.replace(/\/+$/, "");
+  }
+  if (typeof window !== "undefined") {
+    try {
+      const savedCore = localStorage.getItem("shuffle_core_url");
+      if (savedCore && savedCore.trim().length > 0) {
+        return savedCore.trim().replace(/\/+$/, "");
+      }
+      const customHost = localStorage.getItem("shuffle_custom_host_url");
+      if (customHost && customHost.trim().length > 0) {
+        const cleaned = customHost.trim().replace(/\/+$/, "");
+        if (cleaned.includes(":5001")) {
+          return cleaned.replace(":5001", ":3001");
+        }
+        return cleaned;
+      }
+    } catch {
+    }
+  }
+  if (typeof window !== "undefined") {
+    const hostname = window.location.hostname;
+    const isManaged = isManagedDomain();
+    if (isManaged) {
+      return "https://shuffler.io";
+    }
+    if (window.location.port === "3001") {
+      return window.location.origin;
+    }
+    return `${window.location.protocol}//${hostname}:3001`;
+  }
+  return "https://shuffler.io";
+};
+var getShuffleCoreUrl = (path) => {
+  const base = getShuffleCoreBaseUrl();
+  if (!path) return base;
+  const cleanPath = path.startsWith("/") ? path : `/${path}`;
+  return `${base}${cleanPath}`;
+};
+
 // ../lib/platform.ts
 var getPlatform = () => {
   if (typeof window === "undefined") return "web";
@@ -232,7 +328,8 @@ if (typeof window !== "undefined") {
 // api.ts
 installFetchBreaker();
 var DEV_BACKEND = "https://tunnel.schemaless.org";
-var PROD_BACKEND = "https://shuffler.io";
+var PROD_BACKEND = "https://uk.shuffler.io";
+var SHUFFLE_AUTOMATION_URL = getShuffleCoreUrl("/new-dashboard");
 var CLOUD_DOMAINS = ["shuffle.security", "www.shuffle.security", "security.shuffler.io", "shutdown.no", "www.shutdown.no"];
 var getEnvVar = (key) => {
   try {
@@ -274,7 +371,11 @@ var readCachedRegion = () => {
     const raw = localStorage.getItem(REGION_STORAGE_KEY);
     if (!raw) return { url: null, orgId: null };
     const parsed = JSON.parse(raw);
-    return { url: parsed?.url || null, orgId: parsed?.orgId || null };
+    const url = parsed?.url ? parsed.url.replace(/\/+$/, "") : null;
+    if (url === "https://shuffler.io" || url === PROD_BACKEND) {
+      return { url: null, orgId: parsed?.orgId || null };
+    }
+    return { url, orgId: parsed?.orgId || null };
   } catch {
     return { url: null, orgId: null };
   }
@@ -284,8 +385,20 @@ var _regionUrl = cached.url;
 var readCachedCustomHost = () => {
   if (typeof window === "undefined") return null;
   try {
+    const mode = localStorage.getItem("shuffle_selected_server_mode");
+    if (mode && mode !== "self-hosted") return null;
     const raw = localStorage.getItem("shuffle_custom_host_url");
-    return raw ? raw.trim().replace(/\/+$/, "") : null;
+    const cleaned = raw ? raw.trim().replace(/\/+$/, "") : null;
+    if (!cleaned) return null;
+    if (cleaned === DEV_BACKEND && !isDevEnvironment() && mode !== "self-hosted") {
+      try {
+        localStorage.removeItem("shuffle_custom_host_url");
+        localStorage.removeItem("shuffle_selected_server_mode");
+      } catch {
+      }
+      return null;
+    }
+    return cleaned;
   } catch {
     return null;
   }
@@ -336,7 +449,8 @@ var setRegionUrl = (regionUrl, orgId) => {
   _trackedOrgId = orgId || null;
   if (regionUrl && isShufflerSubdomain(regionUrl)) {
     const normalized = regionUrl.replace(/\/+$/, "");
-    if (normalized !== PROD_BACKEND) {
+    const isDefaultCloud = normalized === PROD_BACKEND || normalized === "https://shuffler.io";
+    if (!isDefaultCloud) {
       _regionUrl = normalized;
       persistRegion(_regionUrl, _trackedOrgId);
       console.log(`[API] Region URL set to: ${_regionUrl}`);
@@ -389,6 +503,38 @@ if (typeof window !== "undefined") {
 }
 var getHostBaseUrl = () => _hostBaseUrl;
 var getTrackedOrgId = () => _trackedOrgId;
+var LEGACY_API_KEY_STORAGE_KEY = "shuffle_api_key";
+var clearAuthTokens = () => {
+  try {
+    localStorage.removeItem("session_token");
+    localStorage.removeItem(LEGACY_API_KEY_STORAGE_KEY);
+  } catch {
+  }
+};
+var getSessionToken = () => {
+  try {
+    if (typeof localStorage === "undefined") return null;
+    if (localStorage.getItem(LEGACY_API_KEY_STORAGE_KEY) !== null) {
+      localStorage.removeItem(LEGACY_API_KEY_STORAGE_KEY);
+    }
+    const stored = localStorage.getItem("session_token");
+    if (stored && stored.trim().length > 0 && stored !== "null" && stored !== "undefined") {
+      return stored.trim();
+    }
+    return null;
+  } catch {
+    return null;
+  }
+};
+var setSessionToken = (token) => {
+  clearAuthTokens();
+  if (token && token.trim().length > 0) {
+    try {
+      localStorage.setItem("session_token", token.trim());
+    } catch {
+    }
+  }
+};
 var API_CONFIG = {
   // Shuffle backend URL — host override beats region URL beats default.
   get baseUrl() {
@@ -401,17 +547,16 @@ var API_CONFIG = {
   },
   // API version
   version: "v1",
-  // Get API key from localStorage (for local development)
+  /**
+   * DEPRECATED alias for the single session token. There is no separate
+   * API-key auth any more: exactly one session token may exist at a time.
+   */
   get apiKey() {
-    return localStorage.getItem("shuffle_api_key");
+    return getSessionToken();
   },
-  // Set API key in localStorage
+  /** DEPRECATED: writes/clears the single session token. */
   setApiKey(key) {
-    if (key) {
-      localStorage.setItem("shuffle_api_key", key);
-    } else {
-      localStorage.removeItem("shuffle_api_key");
-    }
+    setSessionToken(key);
   }
 };
 var getApiUrl = (endpoint) => {
@@ -430,11 +575,21 @@ var shuffleFetch = (url, init) => {
 };
 var getAuthHeader = (overrideOrgId) => {
   const headers = {};
-  const apiKey = API_CONFIG.apiKey;
-  if (apiKey) {
-    headers["Authorization"] = `Bearer ${apiKey}`;
+  const token = getSessionToken();
+  if (token) {
+    headers["Authorization"] = `Bearer ${token}`;
+  }
+  let orgId = overrideOrgId ?? _trackedOrgId;
+  if (!orgId && typeof localStorage !== "undefined") {
+    try {
+      const raw = localStorage.getItem("shuffle_user_info");
+      if (raw) {
+        const parsed = JSON.parse(raw);
+        orgId = parsed?.active_org?.id || parsed?.org_id || null;
+      }
+    } catch {
+    }
   }
-  const orgId = overrideOrgId ?? _trackedOrgId;
   if (orgId) {
     headers["Org-Id"] = orgId;
   }
@@ -442,8 +597,10 @@ var getAuthHeader = (overrideOrgId) => {
 };
 var hasShuffleAuth = () => {
   try {
-    if (API_CONFIG.apiKey) return true;
-    return !!(localStorage.getItem("session_token") || localStorage.getItem("shuffle_user_info"));
+    if (getSessionToken()) return true;
+    const info = localStorage.getItem("shuffle_user_info");
+    if (info && info.trim().length > 0 && info !== "null" && info !== "undefined") return true;
+    return false;
   } catch {
     return false;
   }
@@ -455,7 +612,9 @@ var ERROR_TTL_MS = 3e4;
 var cache = /* @__PURE__ */ new Map();
 var cacheKey = (o) => `${o.baseUrl}|${o.path || "/api/v1/apps"}|${o.apiKey || ""}|${o.orgId || ""}`;
 var doFetch = async (o) => {
-  const headers = {};
+  const headers = {
+    ...getAuthHeader(o.orgId || void 0)
+  };
   if (o.apiKey) headers["Authorization"] = `Bearer ${o.apiKey}`;
   if (o.orgId) headers["Org-Id"] = o.orgId;
   const response = await fetch(`${o.baseUrl}${o.path || "/api/v1/apps"}`, {