honeybook-mcp 0.3.0 → 0.3.2

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "HoneyBook client-portal tools for Claude Code",
-    "version": "0.3.0"
+    "version": "0.3.2"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "HoneyBook",
       "source": "./",
       "description": "HoneyBook client-portal MCP for Claude — view wedding-vendor contracts and invoices via MCP",
-      "version": "0.3.0",
+      "version": "0.3.2",
       "author": {
         "name": "Chris Chall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "honeybook",
   "displayName": "HoneyBook",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "HoneyBook client-portal MCP for Claude — view wedding-vendor contracts and invoices via MCP",
   "author": {
     "name": "Chris Chall",

package/dist/auth.js

@@ -56,30 +56,13 @@
 //   - Persistence (sessionStore.add) is the existing side effect; tests
 //     verify the captured session round-trips through sessionStore.get.
 import { bootstrap } from '@fetchproxy/bootstrap';
-import { classifyBridgeError } from '@fetchproxy/server';
+import { bridgeErrorInfo } from '@chrischall/mcp-utils/fetchproxy';
+import { readEnvVar } from '@chrischall/mcp-utils';
 import pkg from '../package.json' with { type: 'json' };
 import { sessionStore, normalizeOrigin } from './sessions.js';
-/**
- * Read an env var, trim, and treat blank / `${UNEXPANDED}` placeholders as
- * unset. Defends against MCP hosts that pass `.mcp.json` env blocks through
- * without variable expansion.
- */
-function readEnv(key) {
-    const raw = process.env[key];
-    if (typeof raw !== 'string')
-        return undefined;
-    const trimmed = raw.trim();
-    if (trimmed.length === 0)
-        return undefined;
-    if (trimmed === 'undefined' || trimmed === 'null')
-        return undefined;
-    if (/^\$\{[^}]*\}$/.test(trimmed))
-        return undefined;
-    return trimmed;
-}
 /** True if the user has explicitly disabled the fetchproxy capture path. */
 function fetchproxyDisabled() {
-    const raw = readEnv('HONEYBOOK_DISABLE_FETCHPROXY');
+    const raw = readEnvVar('HONEYBOOK_DISABLE_FETCHPROXY');
     if (raw === undefined)
         return false;
     return ['1', 'true', 'yes', 'on'].includes(raw.toLowerCase());
@@ -118,13 +101,13 @@ export async function captureSessionViaFetchproxy(opts) {
             //     `jStorage` reads target it (via `storageDomain` below).
             //   - `honeybook.com` is required for the `hb-api-fingerprint`
             //     capture, because that header rides outgoing requests to
-            //     `https://api.honeybook.com/api/v2/*` and the extension gates
-            //     every captureHeader urlPattern host against declared domains.
+            //     `api.honeybook.com/api/v2/*` and the extension gates
+            //     every captureHeader `host` against declared domains.
             //
             // 0.4.1+ requires multi-domain MCPs to pick a `storageDomain` so
             // the cookie / localStorage / sessionStorage / indexedDb reads
             // know which tab to target. captureRequestHeader is independently
-            // routed by urlPattern.
+            // routed by its declared { host, path? }.
             domains: ['honeybook.com', 'hbportal.co'],
             storageDomain: 'hbportal.co',
             declare: {
@@ -149,7 +132,7 @@ export async function captureSessionViaFetchproxy(opts) {
                     // signal that the API requires on every subsequent request.
                     // It's NOT stored in jStorage; the only place to get it is off
                     // a real outgoing request.
-                    { urlPattern: 'https://api.honeybook.com/api/v2/*', headerName: 'hb-api-fingerprint' },
+                    { host: 'api.honeybook.com', path: '/api/v2/*', headerName: 'hb-api-fingerprint' },
                 ],
             },
             // 0.4.0: surface the pair code (six digits) on stderr so the user
@@ -169,9 +152,9 @@ export async function captureSessionViaFetchproxy(opts) {
     }
     catch (e) {
         // SW eviction retry exhausted — surface library's typed `.hint` instead of the generic "open magic link" message.
-        if (classifyBridgeError(e) === 'bridge_down') {
-            const downErr = e;
-            throw new Error(`HoneyBook auth: fetchproxy bridge is down (extension service worker unreachable after retry). ${downErr.hint}`);
+        const bridgeError = bridgeErrorInfo(e);
+        if (bridgeError.type === 'bridge_down') {
+            throw new Error(`HoneyBook auth: fetchproxy bridge is down (extension service worker unreachable after retry). ${bridgeError.hint ?? ''}`.trimEnd());
         }
         const msg = e instanceof Error ? e.message : String(e);
         throw new Error(`HoneyBook auth: fetchproxy capture failed: ${msg} — ` +