@truealter/sdk 0.5.1 → 0.5.3

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@truealter/sdk",
-  "version": "0.5.1",
-  "description": "ALTER Identity SDK — query the continuous identity field from any JavaScript/TypeScript environment",
+  "version": "0.5.3",
+  "description": "ALTER Identity SDK: query the continuous identity field from any JavaScript/TypeScript environment",
   "license": "Apache-2.0",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -33,7 +33,7 @@
     "test:watch": "vitest",
     "lint": "eslint src/",
     "typecheck": "tsc --noEmit",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run build && bash scripts/prepublish.sh"
   },
   "dependencies": {
     "@noble/curves": "1.9.7",

package/dist/mcp-bridge.js

@@ -1,166 +0,0 @@
-#!/usr/bin/env node
-import * as fs from 'fs';
-import * as path from 'path';
-import * as os from 'os';
-import * as https from 'https';
-import * as http from 'http';
-import * as crypto from 'crypto';
-import * as readline from 'readline';
-
-var DEFAULT_ENDPOINT = "https://mcp.truealter.com/api/v1/mcp";
-var BRIDGE_VERSION = "0.4.0";
-var xdgConfig = process.env.XDG_CONFIG_HOME ?? path.join(os.homedir(), ".config");
-var SESSION_FILE = process.env.ALTER_SESSION_FILE ?? path.join(xdgConfig, "alter", "session.json");
-var CF_ENV_FILE = process.env.ALTER_CF_ACCESS_ENV ?? path.join(xdgConfig, "alter", "cf-access.env");
-var ENDPOINT = process.env.ALTER_PUBLIC_MCP_ENDPOINT ?? DEFAULT_ENDPOINT;
-function readSession() {
-  try {
-    const raw = fs.readFileSync(SESSION_FILE, "utf8");
-    const clean = raw.charCodeAt(0) === 65279 ? raw.slice(1) : raw;
-    return JSON.parse(clean);
-  } catch {
-    return {};
-  }
-}
-function readCfAccess() {
-  try {
-    const raw = fs.readFileSync(CF_ENV_FILE, "utf8");
-    const idMatch = raw.match(/CF_ACCESS_(?:MCP_ORG_ALTER_)?CLIENT_ID=['"](.*?)['"]/);
-    const secretMatch = raw.match(/CF_ACCESS_(?:MCP_ORG_ALTER_)?CLIENT_SECRET=['"](.*?)['"]/);
-    return {
-      id: idMatch?.[1] ?? "",
-      secret: secretMatch?.[1] ?? ""
-    };
-  } catch {
-    return { id: "", secret: "" };
-  }
-}
-function versionHash() {
-  const digest = crypto.createHash("sha256").update(`@truealter/sdk-bridge@${BRIDGE_VERSION}`).digest("hex").slice(0, 32);
-  return `sha256:${digest}`;
-}
-function b64url(buf) {
-  return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}
-function canonicalJson(v) {
-  if (v === null || typeof v !== "object") return JSON.stringify(v);
-  if (Array.isArray(v)) return "[" + v.map(canonicalJson).join(",") + "]";
-  const obj = v;
-  const keys = Object.keys(obj).sort();
-  return "{" + keys.map((k) => JSON.stringify(k) + ":" + canonicalJson(obj[k])).join(",") + "}";
-}
-function loadSigningKey(session) {
-  const kid = session.signing_kid;
-  if (!kid) return null;
-  const candidates = [];
-  if (process.env.ALTER_SIGNING_KEY_FILE) candidates.push(process.env.ALTER_SIGNING_KEY_FILE);
-  candidates.push(path.join(xdgConfig, "alter", "signing-keys", `${kid}.pem`));
-  candidates.push(path.join(xdgConfig, "alter", "signing-key.pem"));
-  for (const p of candidates) {
-    try {
-      const pem = fs.readFileSync(p, "utf8");
-      return { kid, key: crypto.createPrivateKey(pem) };
-    } catch {
-    }
-  }
-  return null;
-}
-function signInvocation(signer, toolName, toolArgs, handle) {
-  const header = b64url(Buffer.from(JSON.stringify({ alg: "ES256", kid: signer.kid })));
-  const claims = {
-    tool: toolName,
-    args_sha256: crypto.createHash("sha256").update(canonicalJson(toolArgs ?? {}), "utf8").digest("hex"),
-    nonce: b64url(crypto.randomBytes(24)),
-    iat: Math.floor(Date.now() / 1e3),
-    iss: handle
-  };
-  const payload = b64url(Buffer.from(JSON.stringify(claims)));
-  const signingInput = `${header}.${payload}`;
-  const sig = crypto.createSign("SHA256").update(signingInput).sign({ key: signer.key, dsaEncoding: "ieee-p1363" });
-  return `${signingInput}.${b64url(sig)}`;
-}
-function proxyRequest(body, msg) {
-  return new Promise((resolve, reject) => {
-    const session = readSession();
-    const cfAccess = readCfAccess();
-    const apiKey = process.env.ALTER_API_KEY ?? session.member_api_key ?? "";
-    const url = new URL(ENDPOINT);
-    const isHttps = url.protocol === "https:";
-    const transport = isHttps ? https : http;
-    const headers = {
-      "Content-Type": "application/json",
-      "Content-Length": String(Buffer.byteLength(body)),
-      "X-Agent-Version-Hash": versionHash()
-    };
-    if (apiKey) headers["X-ALTER-API-Key"] = apiKey;
-    if (cfAccess.id) headers["CF-Access-Client-Id"] = cfAccess.id;
-    if (cfAccess.secret) headers["CF-Access-Client-Secret"] = cfAccess.secret;
-    if (apiKey && msg.method === "tools/call" && msg.params?.name) {
-      const signer = loadSigningKey(session);
-      if (signer) {
-        try {
-          headers["Mcp-Invocation-Signature"] = signInvocation(
-            signer,
-            msg.params.name,
-            msg.params.arguments ?? {},
-            session.handle ?? ""
-          );
-        } catch (e) {
-          process.stderr.write(`bridge sign error: ${e.message}
-`);
-        }
-      } else {
-        process.stderr.write(
-          `bridge: no signing key for kid ${session.signing_kid ?? "(unset)"} \u2014 run 'alter login' to provision one
-`
-        );
-      }
-    }
-    const req = transport.request(
-      {
-        hostname: url.hostname,
-        port: url.port || (isHttps ? 443 : 80),
-        path: url.pathname,
-        method: "POST",
-        headers
-      },
-      (res) => {
-        let data = "";
-        res.on("data", (chunk) => data += chunk.toString());
-        res.on("end", () => resolve(data));
-      }
-    );
-    req.on("error", (err) => reject(err));
-    req.write(body);
-    req.end();
-  });
-}
-async function main() {
-  const rl = readline.createInterface({ input: process.stdin });
-  for await (const line of rl) {
-    const trimmed = line.trim();
-    if (!trimmed) continue;
-    let msg;
-    try {
-      msg = JSON.parse(trimmed);
-    } catch {
-      continue;
-    }
-    try {
-      const response = await proxyRequest(trimmed, msg);
-      process.stdout.write(response + "\n");
-    } catch (err) {
-      const errResponse = JSON.stringify({
-        jsonrpc: "2.0",
-        id: msg.id ?? null,
-        error: { code: -32e3, message: err.message }
-      });
-      process.stdout.write(errResponse + "\n");
-    }
-  }
-}
-main().catch((err) => {
-  process.stderr.write(`bridge fatal: ${err.message}
-`);
-  process.exit(1);
-});