npm - trapic-mcp - Versions diffs - 0.1.1 → 0.1.3 - Mend

trapic-mcp 0.1.1 → 0.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/bin/trapic-mcp.mjs CHANGED Viewed

@@ -964,6 +964,26 @@ switch (command) {
   case "token":
     await cmdToken(args[1]);
     break;
+  case "upgrade":
+  case "update": {
+    const { execSync } = await import("child_process");
+    console.log("Checking for updates...");
+    try {
+      const latest = execSync("npm view trapic-mcp version", { encoding: "utf-8" }).trim();
+      const pkg = JSON.parse(await readFile(resolve(__dirname, "../package.json"), "utf-8"));
+      if (latest === pkg.version) {
+        console.log(`Already on latest version (${pkg.version})`);
+      } else {
+        console.log(`Upgrading ${pkg.version} → ${latest}...`);
+        execSync("npm install -g trapic-mcp@latest", { stdio: "inherit" });
+        console.log(`\nUpgraded to ${latest}`);
+      }
+    } catch (e) {
+      console.error("Upgrade failed:", e.message);
+      console.log("Try manually: npm install -g trapic-mcp@latest");
+    }
+    break;
+  }
   default:
     console.log(`trapic-mcp — CLI & MCP proxy for Trapic
@@ -980,6 +1000,7 @@ Usage:
   trapic-mcp token list          List API tokens
   trapic-mcp token create [name] Create new API token
   trapic-mcp token revoke <id>   Revoke an API token
+  trapic-mcp upgrade             Upgrade to latest version
   trapic-mcp serve:dev           Start local dev MCP server
 Environment:

package/dist/worker.js CHANGED Viewed

@@ -296,21 +296,50 @@ export default {
                 },
             });
         }
-        // OAuth social callback — Supabase redirects here after GitHub/Google login
+        // OAuth social callback — client-side page that reads hash fragment token
         if (url.pathname === "/oauth/callback-social") {
-            const accessToken = url.hash ? new URLSearchParams(url.hash.slice(1)).get("access_token") : url.searchParams.get("access_token");
+            // Serve a small HTML page that extracts access_token from hash and POSTs to server
+            const html = `<!DOCTYPE html><html><head><title>Authenticating...</title></head>
+<body style="background:#0a0a0a;color:#e5e5e5;font-family:sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;">
+<div style="text-align:center"><p>Authenticating...</p></div>
+<script>
+(function(){
+  var hash = window.location.hash.substring(1);
+  var params = new URLSearchParams(hash);
+  var accessToken = params.get('access_token');
+  var search = new URLSearchParams(window.location.search);
+  if (accessToken) {
+    // Forward to server endpoint with token in query
+    var url = '/oauth/complete-social?access_token=' + encodeURIComponent(accessToken)
+      + '&client_id=' + encodeURIComponent(search.get('client_id') || '')
+      + '&redirect_uri=' + encodeURIComponent(search.get('redirect_uri') || '')
+      + '&state=' + encodeURIComponent(search.get('state') || '')
+      + '&code_challenge=' + encodeURIComponent(search.get('code_challenge') || '')
+      + '&code_challenge_method=' + encodeURIComponent(search.get('code_challenge_method') || '');
+    window.location.replace(url);
+  } else {
+    document.body.innerHTML = '<div style="text-align:center;padding:2rem;"><p>Authentication failed. Please try again.</p><a href="/" style="color:#60a5fa;">Go back</a></div>';
+  }
+})();
+</script></body></html>`;
+            return new Response(html, { headers: { "Content-Type": "text/html; charset=utf-8" } });
+        }
+        // OAuth social complete — server receives access_token, issues auth code
+        if (url.pathname === "/oauth/complete-social") {
+            const accessToken = url.searchParams.get("access_token") || "";
             const clientId = url.searchParams.get("client_id") || "";
             const redirectUri = url.searchParams.get("redirect_uri") || "";
             const state = url.searchParams.get("state") || "";
             const codeChallenge = url.searchParams.get("code_challenge") || "";
-            if (!redirectUri || !codeChallenge) {
-                return new Response("Missing OAuth parameters", { status: 400 });
+            if (!redirectUri || !codeChallenge || !accessToken) {
+                return new Response("Missing parameters", { status: 400 });
+            }
+            if (!isValidRedirectUri(redirectUri)) {
+                return new Response("Invalid redirect_uri", { status: 400 });
             }
-            // Get user from Supabase access token
             const supabase = getSupabase();
-            const { data: { user: authUser }, error: authErr } = await supabase.auth.getUser(accessToken || "");
+            const { data: { user: authUser }, error: authErr } = await supabase.auth.getUser(accessToken);
             if (authErr || !authUser) {
-                // Redirect back to authorize with error
                 const backUrl = new URL(`${origin}/oauth/authorize`);
                 backUrl.searchParams.set("client_id", clientId);
                 backUrl.searchParams.set("redirect_uri", redirectUri);
@@ -320,7 +349,6 @@ export default {
                 backUrl.searchParams.set("error", "Social login failed. Please try again.");
                 return new Response(null, { status: 302, headers: { "Location": backUrl.toString() } });
             }
-            // Generate signed auth code
             const code = await createAuthCode(env, authUser.id, codeChallenge, redirectUri);
             const redirectUrl = new URL(redirectUri);
             redirectUrl.searchParams.set("code", code);

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "trapic-mcp",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "AI knowledge management MCP server — automatically capture, search, and connect decisions, facts, and conventions across AI coding sessions",
   "type": "module",
   "main": "dist/index.js",