icode-mcp-adapter 1.0.6 → 1.0.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icode-mcp-adapter",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "description": "Dynamic MCP server adapter — auto-generates CRUD tools from schema configs. Plugs into icode-server via Fastify or runs standalone.",
   "type": "module",
   "main": "src/engine/McpEngine.js",

package/src/engine/ToolBuilder.js

@@ -192,11 +192,12 @@ function regAdd(server, db, table, display, owner) {
       const insertVals = [];
       const placeholders = [];
 
-      // Auto-set columns (_created)
+      // Auto-set _created — epoch ms for a bigint column, a Date for a datetime column
+      // (mysql2 serializes a Date to the column's expected 'YYYY-MM-DD HH:MM:SS').
       for (const c of table.columns) {
         if (c.autoSet === 'created_at') {
           insertCols.push(q(c.name));
-          insertVals.push(Date.now());
+          insertVals.push(c.type === 'timestamp' ? Date.now() : new Date());
           placeholders.push('?');
         }
       }

package/src/transport/fastifyAdapter.js

@@ -49,11 +49,13 @@ function readBearer(req) {
   return /^bearer$/i.test(scheme) && token ? token.trim() : null;
 }
 
-/** MCP-spec 401 — points the client at the protected-resource metadata (Login with icode). */
+/** MCP-spec 401 — points the client at the PER-RESOURCE metadata (RFC 9728), keeping the
+ *  MCP path in the URL so the auth server knows which app/env is being authorized. */
 function unauthorized(req, reply) {
   const proto = req.headers['x-forwarded-proto'] || req.protocol || 'https';
   const host = req.headers['x-forwarded-host'] || req.headers.host;
-  reply.header('WWW-Authenticate', `Bearer resource_metadata="${proto}://${host}/.well-known/oauth-protected-resource"`);
+  const path = (req.url || '').split('?')[0]; // e.g. /v1/mcp/paaal4--dev
+  reply.header('WWW-Authenticate', `Bearer resource_metadata="${proto}://${host}/.well-known/oauth-protected-resource${path}"`);
   return reply.code(401).send({
     jsonrpc: '2.0',
     error: { code: -32001, message: 'Authentication required' },