@canveo/mcp 0.1.0 → 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,10 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.1.2 - 2026-08-31
4
+
5
+ - Switch GitHub publish to Node 24 / npm 11 with OIDC trusted publishing (`id-token: write`). A 2FA-bypass granular token cannot complete a public publish (registry PUT 404 / ghost versions).
6
+ - Fix `bin` paths so npm no longer rewrites them at publish time.
7
+
3
8
  ## 0.1.0 - 2026-08-31
4
9
 
5
10
  - Publish-ready npm package `@canveo/mcp` (stdio MCP server for any MCP client).
package/README.md CHANGED
@@ -86,11 +86,15 @@ Local development (unpublished):
86
86
  This is **not** a Terraform/ECS deploy.
87
87
 
88
88
  1. Create the public npm org/scope `@canveo` if it does not exist.
89
- 2. Add repo secret `NPM_TOKEN` (Automation token with publish rights on `@canveo`).
89
+ 2. On [npmjs.com](https://www.npmjs.com) (logged in as an `@canveo` owner): package **Settings Trusted Publisher** → GitHub Actions:
90
+ - Organization or user: `getcanveo`
91
+ - Repository: `canveo-mcp`
92
+ - Workflow filename: `publish.yml`
93
+ - Allowed actions: `npm publish`
90
94
  3. Bump `version` in `package.json`.
91
- 4. Create a GitHub Release tagged `v0.1.0` (must match `package.json`). The **Publish npm** workflow runs `npm publish --access public`.
95
+ 4. Create a GitHub Release tagged `vX.Y.Z` (must match `package.json`). The **Publish npm** workflow uses Node 24 / npm 11 and OIDC (`id-token: write`). A granular `NPM_TOKEN` secret is only a fallback; GitHub Actions npm 10 + a 2FA-bypass token 404s on first publish.
92
96
 
93
- Manual fallback:
97
+ Manual first publish (2FA / OTP required):
94
98
 
95
99
  ```bash
96
100
  npm login
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@canveo/mcp",
3
- "version": "0.1.0",
3
+ "version": "0.1.2",
4
4
  "description": "Canveo Model Context Protocol server for contract review, creation, sending, and signing. Works with any MCP client (Cursor, Claude Desktop, VS Code, and others).",
5
5
  "type": "module",
6
6
  "license": "MIT",
@@ -25,8 +25,8 @@
25
25
  "node": ">=20"
26
26
  },
27
27
  "bin": {
28
- "canveo-mcp": "./index.js",
29
- "canveo-cursor-mcp": "./index.js"
28
+ "canveo-mcp": "index.js",
29
+ "canveo-cursor-mcp": "index.js"
30
30
  },
31
31
  "main": "index.js",
32
32
  "files": [