techprufer-mcp 0.1.5 → 0.1.6

package/dist/api.d.ts

@@ -5,4 +5,5 @@ export declare class ApiError extends Error {
 }
 export declare function apiFetch<T>(path: string, init?: RequestInit & {
     token?: string | null;
+    baseUrl?: string;
 }): Promise<T>;

package/dist/api.js

@@ -11,15 +11,32 @@ export class ApiError extends Error {
 export async function apiFetch(path, init = {}) {
     const creds = loadCredentials();
     const token = init.token === undefined ? creds?.token : init.token;
-    const base = creds?.apiUrl || getApiUrl();
-    const headers = new Headers(init.headers);
+    // Explicit baseUrl wins (login). Otherwise prefer env override, then saved
+    // apiUrl, then default — so a stale localhost cred can't hijack prod login.
+    const base = (init.baseUrl ||
+        process.env.TECHPRUFER_API_URL ||
+        (token ? creds?.apiUrl : undefined) ||
+        getApiUrl()).replace(/\/$/, '');
+    const { token: _token, baseUrl: _baseUrl, ...fetchInit } = init;
+    const headers = new Headers(fetchInit.headers);
     headers.set('Accept', 'application/json');
-    if (init.body && !headers.has('Content-Type')) {
+    if (fetchInit.body && !headers.has('Content-Type')) {
         headers.set('Content-Type', 'application/json');
     }
     if (token)
         headers.set('Authorization', `Bearer ${token}`);
-    const res = await fetch(`${base}${path}`, { ...init, headers });
+    let res;
+    try {
+        res = await fetch(`${base}${path}`, { ...fetchInit, headers });
+    }
+    catch (err) {
+        const cause = err instanceof Error && err.cause instanceof Error
+            ? err.cause.message
+            : err instanceof Error
+                ? err.message
+                : String(err);
+        throw new Error(`fetch failed (${base}${path}): ${cause}`);
+    }
     const text = await res.text();
     let body = null;
     if (text) {

package/dist/login.js

@@ -20,8 +20,11 @@ function alignVerifyUrl(verifyUrl, apiUrl) {
     try {
         const verify = new URL(verifyUrl);
         const api = new URL(apiUrl);
+        // Set hostname + port separately — assigning `.host` without a port keeps
+        // the previous port in Node (e.g. localhost:3000 → techprufer.com:3000).
         verify.protocol = api.protocol;
-        verify.host = api.host;
+        verify.hostname = api.hostname;
+        verify.port = api.port;
         return verify.toString();
     }
     catch {
@@ -34,6 +37,7 @@ export async function runLogin(deviceName) {
     const start = await apiFetch('/api/agent/device/start', {
         method: 'POST',
         token: null,
+        baseUrl: apiUrl,
         body: JSON.stringify({ deviceName: deviceName || undefined }),
     });
     const verifyUrl = alignVerifyUrl(start.verifyUrl, apiUrl);
@@ -50,6 +54,7 @@ export async function runLogin(deviceName) {
         const poll = await apiFetch('/api/agent/device/poll', {
             method: 'POST',
             token: null,
+            baseUrl: apiUrl,
             body: JSON.stringify({ deviceCode: start.deviceCode }),
         });
         if (poll.status === 'pending')
@@ -64,7 +69,7 @@ export async function runLogin(deviceName) {
                 apiUrl,
                 deviceId: poll.deviceId,
             });
-            console.error('Logged in. You can close this window and use /tailor in your AI tool.');
+            console.error('Logged in. You can close this window and use /techprufer/tailor or /techprufer/build-profile.');
             return;
         }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "techprufer-mcp",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "TechPrufer MCP — tailor resumes and build profiles from your AI tool",
   "homepage": "https://techprufer.com",
   "type": "module",