@canveo/mcp 0.1.1 → 0.1.3

package/CHANGELOG.md

@@ -1,8 +1,12 @@
 # Changelog
 
-## 0.1.1 - 2026-08-31
+## 0.1.3 - 2026-08-31
 
-- First installable release. Publish from GitHub Actions with Node 24 / npm 11 (OIDC trusted publishing, with token fallback).
+- Add `npm run release` (same release-it flow as cvback). GitHub Release triggers OIDC publish; release-it does not `npm publish` locally.
+
+## 0.1.2 - 2026-08-31
+
+- Switch GitHub publish to Node 24 / npm 11 with OIDC trusted publishing (`id-token: write`). A 2FA-bypass granular token cannot complete a public publish (registry PUT 404 / ghost versions).
 - Fix `bin` paths so npm no longer rewrites them at publish time.
 
 ## 0.1.0 - 2026-08-31

package/README.md

@@ -91,8 +91,19 @@ This is **not** a Terraform/ECS deploy.
    - Repository: `canveo-mcp`
    - Workflow filename: `publish.yml`
    - Allowed actions: `npm publish`
-3. Bump `version` in `package.json`.
-4. Create a GitHub Release tagged `vX.Y.Z` (must match `package.json`). The **Publish npm** workflow uses Node 24 / npm 11 and OIDC (`id-token: write`). A granular `NPM_TOKEN` secret is only a fallback; GitHub Actions npm 10 + a 2FA-bypass token 404s on first publish.
+3. From `main`, with a clean tree:
+
+```bash
+npm run release
+```
+
+That is the same pattern as `cvback`: `check-main` then `release-it` (bump, commit, tag `vX.Y.Z`, GitHub Release). **Do not** let release-it publish to npm; `npm.publish` is false so the **Publish npm** workflow can use OIDC (`id-token: write`). Do not add an `NPM_TOKEN` repo secret.
+
+Non-interactive patch bump:
+
+```bash
+npm run release -- --ci --increment=patch
+```
 
 Manual first publish (2FA / OTP required):
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@canveo/mcp",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Canveo Model Context Protocol server for contract review, creation, sending, and signing. Works with any MCP client (Cursor, Claude Desktop, VS Code, and others).",
   "type": "module",
   "license": "MIT",
@@ -41,12 +41,15 @@
   "scripts": {
     "start": "node index.js",
     "test": "vitest --run",
-    "pack:check": "npm pack --dry-run"
+    "pack:check": "npm pack --dry-run",
+    "check-main": "node scripts/checkIfCurrentGitBranchIsMain.js",
+    "release": "npm run check-main && release-it"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.17.5"
   },
   "devDependencies": {
+    "release-it": "^17.11.0",
     "vitest": "^3.0.7"
   }
 }