@aisar-labs/zeptoclaw-sea-shared

Shared auth and utility package for all ZeptoClaw SEA MCP servers.

This is not an MCP server -- it is a shared library used by all @aisar-labs/*-mcp packages.

Install

npm install @aisar-labs/zeptoclaw-sea-shared

Exports

Auth Helpers

• basicAuthHeader(username, password) -- Build Basic auth header
• apiKeyHeader(key, headerName?) -- Build API key header
• OAuth2Client -- OAuth 2.0 client with token refresh

Webhook Verification

• hmacSha256(secret, payload) -- Compute HMAC-SHA256
• verifyWebhookSignature(secret, payload, signature) -- Verify webhook HMAC signature
• verifyHmacWebhook(secret, payload, signature, algorithm?) -- Verify HMAC webhook (configurable algorithm)
• verifyHashWebhook(payload, expectedHash, algorithm?) -- Verify hash-based webhook
• verifyStripeWebhook(secret, payload, signatureHeader) -- Verify Stripe webhook signature
• verifyBillplzCallback(secret, params) -- Verify Billplz callback
• verifyMoMoIpn(secret, params) -- Verify MoMo IPN signature
• verifyQrPaymentCallback(secret, params) -- Verify QR payment callback
• parseWebhookPayload(body, contentType?) -- Parse webhook body (JSON or form)

HTTP Utilities

• fetchWithRetry(url, options, retryConfig?) -- Fetch with exponential backoff
• RateLimiter -- Token bucket rate limiter
• calculateBackoff(attempt, baseMs?, maxMs?) -- Calculate exponential backoff delay

MCP Helpers

• toolResult(content) -- Format successful tool result
• toolError(message) -- Format tool error result
• apiError(status, message) -- Create API error with status code

Usage

Auth Headers

import { basicAuthHeader, apiKeyHeader } from "@aisar-labs/zeptoclaw-sea-shared";

const headers = {
  Authorization: basicAuthHeader("user", "pass"),
};

const apiHeaders = {
  ...apiKeyHeader("sk-abc123", "X-API-Key"),
};

Webhook Verification

import { verifyWebhookSignature } from "@aisar-labs/zeptoclaw-sea-shared";

const isValid = verifyWebhookSignature(
  process.env.WEBHOOK_SECRET,
  rawBody,
  signatureHeader
);

Fetch with Retry

import { fetchWithRetry } from "@aisar-labs/zeptoclaw-sea-shared";

const response = await fetchWithRetry("https://api.example.com/data", {
  headers: { Authorization: "Bearer token" },
}, { maxRetries: 3, baseDelayMs: 1000 });

Tool Results

import { toolResult, toolError } from "@aisar-labs/zeptoclaw-sea-shared";

// In a tool handler
if (success) {
  return toolResult({ orderId: "123", status: "created" });
} else {
  return toolError("Order creation failed: insufficient stock");
}

License

MIT