chore: release @neus/sdk 1.1.7 with gate path and revoke-self fixes

cl34l · cursoragent · cl34l · commit d6e3f34ba36e · 2026-06-16T13:10:57.000-05:00
Align SDK, MCP server, and plugin surfaces to 1.1.7; add contract tests for profile gate URLs; document public MCP vs browser session auth.

Co-authored-by: Cursor &lt;cursoragent@cursor.com&gt;
diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-marketplace.json",
   "name": "neus",
-  "version": "1.1.6",
+  "version": "1.1.7",
   "description": "Trust infrastructure for agents that act. Verify identity, scoped authority, trust receipts, and Vault-backed secrets in Cursor, Claude Code, Codex, and VS Code.",
   "owner": {
     "name": "NEUS",
@@ -16,7 +16,7 @@
       "homepage": "https://docs.neus.network/install",
       "repository": "https://github.com/neus/network",
       "license": "Apache-2.0",
-      "version": "1.1.6",
+      "version": "1.1.7",
       "author": {
         "name": "NEUS",
         "url": "https://neus.network"
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,33 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [1.1.7] - 2026-06-16
+
+### Fixed
+
+- **`NeusClient.getGate` / `fulfillGate`** — use `GET` / `POST` on `/api/v1/profile/gates/{gateId}` (and `/fulfill`) on `api.neus.network`. Earlier `1.1.6` builds called `/api/v1/gates/*`, which does not exist on the hosted API.
+- **`NeusClient.revokeOwnProof`** — use the parsed `_makeRequest` response directly (fixes a double JSON parse runtime failure).
+
+### Changed
+
+- **Version alignment** — `@neus/sdk`, `@neus/mcp-server`, plugin, and `server.json` aligned to `1.1.7`.
+- **SDK tests** — contract tests lock gate snapshot/fulfill URL paths and revoke-self response handling.
+
+### Upgrade
+
+```bash
+npx -y -p @neus/sdk@1.1.7 neus setup
+npx -y -p @neus/sdk@1.1.7 neus auth
+npx -y -p @neus/sdk@1.1.7 neus doctor --live
+```
+
+### Links
+
+- [Install NEUS](https://docs.neus.network/install)
+- [Hosted gate checkout](https://docs.neus.network/platform/hosted-gate-checkout)
+- [npm: @neus/sdk](https://www.npmjs.com/package/@neus/sdk)
+- [npm: @neus/mcp-server](https://www.npmjs.com/package/@neus/mcp-server)
+
 ## [1.1.6] - 2026-06-12
 
 ### Fixed
diff --git a/docs/sdks/authentication.mdx b/docs/sdks/authentication.mdx
@@ -63,6 +63,12 @@ const client = new NeusClient({ apiKey: process.env.NEUS_ACCESS_KEY });
 
 Create keys under [Access keys](https://neus.network/profile?tab=account). Server / MCP only.
 
+## IDE and MCP sign-in
+
+For Cursor, VS Code, or Claude Code, run `npx -y -p @neus/sdk neus setup` then `neus auth`. That stores a separate MCP access credential for `https://mcp.neus.network/mcp` — not the browser session cookie from `neus.network/verify`. Use a profile access key (`npk_*`) for servers and CI when browser sign-in is unavailable.
+
+See [MCP setup](../mcp/setup) and [MCP OAuth](../mcp/oauth).
+
 ## App link: `verifyFromApp` (advanced server)
 
 After a one-time user approval ([agent delegation app link](../agents/agent-delegation)), your backend can create proofs without a per-request signature. Set the app link on the client and call `verifyFromApp`:
diff --git a/examples/nodejs-basic/package.json b/examples/nodejs-basic/package.json
@@ -8,7 +8,7 @@
     "start": "node index.js"
   },
   "dependencies": {
-    "@neus/sdk": "^1.1.6",
+    "@neus/sdk": "^1.1.7",
     "ethers": "^6.0.0"
   },
   "keywords": ["neus", "verification", "example"],
diff --git a/examples/trust-receipts-showcase/package.json b/examples/trust-receipts-showcase/package.json
@@ -12,7 +12,7 @@
     "preview": "vite preview"
   },
   "dependencies": {
-    "@neus/sdk": "^1.1.6",
+    "@neus/sdk": "^1.1.7",
     "lucide-react": "^0.460.0",
     "motion": "^11.15.0",
     "react": "^18.3.1",
diff --git a/mcp/npm-dist/package.json b/mcp/npm-dist/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@neus/mcp-server",
-  "version": "1.1.6",
+  "version": "1.1.7",
   "description": "Hosted NEUS MCP registry manifest for agent identity, scoped authority, trust receipts, and Vault.",
   "type": "module",
   "main": "./index.mjs",
diff --git a/mcp/npm-dist/server.json b/mcp/npm-dist/server.json
@@ -3,7 +3,7 @@
   "name": "io.github.neus/neus-mcp",
   "title": "NEUS MCP",
   "description": "NEUS MCP: identity, authority, trust receipts, and Vault secrets before sensitive AI actions.",
-  "version": "1.1.6",
+  "version": "1.1.7",
   "repository": {
     "url": "https://github.com/neus/network",
     "source": "github"
diff --git a/plugins/neus-trust/.claude-plugin/plugin.json b/plugins/neus-trust/.claude-plugin/plugin.json
@@ -2,7 +2,7 @@
   "name": "neus-trust",
   "displayName": "NEUS",
   "description": "Trust infrastructure for agents that act. Verify identity, scoped authority, trust receipts, and Vault-backed secrets before assistants act. One setup for Cursor, Claude Code, Codex, and VS Code.",
-  "version": "1.1.6",
+  "version": "1.1.7",
   "author": {
     "name": "NEUS",
     "url": "https://neus.network"
diff --git a/sdk/package-lock.json b/sdk/package-lock.json
diff --git a/sdk/package.json b/sdk/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@neus/sdk",
-  "version": "1.1.6",
+  "version": "1.1.7",
   "description": "NEUS makes trust portable across the internet — so people, apps, and AI agents can prove what is real before access, payout, or execution.",
   "bin": {
     "neus": "cli/neus.mjs"
diff --git a/sdk/test/client.test.js b/sdk/test/client.test.js
@@ -526,4 +526,82 @@ describe('NeusClient', () => {
       ).rejects.toThrow(ValidationError);
     });
   });
+
+  describe('getGate()', () => {
+    it('calls profile gate snapshot on api.neus.network', async () => {
+      fetch.mockResolvedValueOnce({
+        ok: true,
+        json: () =>
+          Promise.resolve({
+            success: true,
+            data: { gate: { gateId: 'gate_demo', requirements: [] } }
+          })
+      });
+
+      const gate = await client.getGate('gate_demo');
+      expect(gate.gateId).toBe('gate_demo');
+      const calledUrl = fetch.mock.calls[0][0];
+      expect(calledUrl).toBe(
+        'https://api.neus.network/api/v1/profile/gates/gate_demo'
+      );
+      expect(calledUrl).not.toContain('/api/v1/gates/');
+    });
+  });
+
+  describe('fulfillGate()', () => {
+    const qHash = `0x${'ab'.repeat(32)}`;
+
+    it('posts to profile gate fulfill on api.neus.network', async () => {
+      fetch.mockResolvedValueOnce({
+        ok: true,
+        json: () =>
+          Promise.resolve({
+            success: true,
+            data: { gateId: 'gate_demo', qHash, fulfillment: { type: 'url' } }
+          })
+      });
+
+      const out = await client.fulfillGate({
+        gateId: 'gate_demo',
+        qHash,
+        walletAddress: EVM_A
+      });
+
+      expect(out.success).toBe(true);
+      const [calledUrl, init] = fetch.mock.calls[0];
+      expect(calledUrl).toBe(
+        'https://api.neus.network/api/v1/profile/gates/gate_demo/fulfill'
+      );
+      expect(calledUrl).not.toContain('/api/v1/gates/');
+      expect(init.method).toBe('POST');
+      expect(JSON.parse(init.body)).toMatchObject({
+        qHash,
+        walletAddress: EVM_A
+      });
+    });
+  });
+
+  describe('revokeOwnProof()', () => {
+    const qHash = `0x${'cd'.repeat(32)}`;
+
+    it('uses the parsed _makeRequest response (no second JSON parse)', async () => {
+      const wallet = {
+        address: EVM_A,
+        request: async ({ method }) => {
+          if (method === 'personal_sign') return `0x${'ab'.repeat(65)}`;
+          return null;
+        }
+      };
+      const makeRequest = vi
+        .spyOn(client, '_makeRequest')
+        .mockResolvedValue({ success: true });
+
+      await expect(client.revokeOwnProof(qHash, wallet)).resolves.toBe(true);
+      expect(makeRequest).toHaveBeenCalledWith(
+        'POST',
+        `/api/v1/proofs/revoke-self/${qHash}`,
+        expect.objectContaining({ walletAddress: EVM_A })
+      );
+    });
+  });
 });

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@neus/mcp-server",`
`3`		`- "version": "1.1.6",`
	`3`	`+ "version": "1.1.7",`
`4`	`4`	`"description": "Hosted NEUS MCP registry manifest for agent identity, scoped authority, trust receipts, and Vault.",`
`5`	`5`	`"type": "module",`
`6`	`6`	`"main": "./index.mjs",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@neus/sdk",`
`3`		`- "version": "1.1.6",`
	`3`	`+ "version": "1.1.7",`
`4`	`4`	`"description": "NEUS makes trust portable across the internet — so people, apps, and AI agents can prove what is real before access, payout, or execution.",`
`5`	`5`	`"bin": {`
`6`	`6`	`"neus": "cli/neus.mjs"`