@defdone/annon-mcp 0.1.0-alpha.1 → 0.1.0-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +7 -0
- package/README.md +4 -1
- package/package.json +2 -2
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,12 @@
|
|
|
1
1
|
# @defdone/annon-mcp
|
|
2
2
|
|
|
3
|
+
## 0.1.0-alpha.2
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- Bare `annon init` creates the CLI backup secret at `~/.config/annon/backup-secret`: 32 random bytes as hex, mode 0600 from the first write, published with a hard link so it never appears half-written and never replaces an existing file. Running it again only validates the file. It refuses to create a new secret while saved records or backups exist, never prints the secret, and sends its one-time notice to stderr. `--backup-secret-file`, `ANNON_BACKUP_SECRET_FILE` and `ANNON_BACKUP_SECRET` keep their precedence; the default file is read only when none is set, and a selected source that fails never falls back. Other commands, agent mode and MCP read the default but never create it. Reading the default checks that `~/.config/annon` is a private directory you own, refuses symlinks, FIFOs and other non-regular files without blocking, and never repairs anything. Bare `init` reports an unreadable config as a setup error (exit 2). A pending `status` now uses the default file too. `annon --version` (or `-v`) prints the installed version. The quickstart replaces the manual secret recipe with `annon init` and explains backup and restore.
|
|
8
|
+
- Uses `@defdone/annon` 0.1.0-alpha.2.
|
|
9
|
+
|
|
3
10
|
## 0.1.0-alpha.1
|
|
4
11
|
|
|
5
12
|
### Patch Changes
|
package/README.md
CHANGED
|
@@ -22,7 +22,10 @@ no arguments.
|
|
|
22
22
|
The server uses the CLI configuration and secret sources
|
|
23
23
|
([CLI.md](https://github.com/defdone/annon/blob/master/packages/annon/CLI.md)). Set `ANNON_CONFIG`
|
|
24
24
|
to the owner's configuration file and pass credential and backup-secret references in the server
|
|
25
|
-
environment.
|
|
25
|
+
environment. The server never creates a backup secret: run `annon init` as the owner first, or set
|
|
26
|
+
an absolute `ANNON_BACKUP_SECRET_FILE` (best for a service account with another home). That variable
|
|
27
|
+
must name an existing file, such as `~/.config/annon/backup-secret`, or be left out to use it; a
|
|
28
|
+
missing file fails without falling back. With this custom-config setup, put deployment, trust, moderators and origins in the
|
|
26
29
|
file: their environment overrides are ignored. `ANNON_MAX_PRICE` and `ANNON_ALLOWED_RESOURCES` can
|
|
27
30
|
still tighten policy. `ANNON_AGENT=true` instead pins the home configuration and enables
|
|
28
31
|
launcher-owned deployment overrides. A client configuration:
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@defdone/annon-mcp",
|
|
3
|
-
"version": "0.1.0-alpha.
|
|
3
|
+
"version": "0.1.0-alpha.2",
|
|
4
4
|
"description": "Local stdio MCP tools for selling, buying, opening and verifying Annon files.",
|
|
5
5
|
"license": "Apache-2.0",
|
|
6
6
|
"homepage": "https://annon.dev",
|
|
@@ -45,7 +45,7 @@
|
|
|
45
45
|
"CHANGELOG.md"
|
|
46
46
|
],
|
|
47
47
|
"dependencies": {
|
|
48
|
-
"@defdone/annon": "0.1.0-alpha.
|
|
48
|
+
"@defdone/annon": "0.1.0-alpha.2",
|
|
49
49
|
"@modelcontextprotocol/sdk": "1.32.2",
|
|
50
50
|
"zod": "4.6.7"
|
|
51
51
|
},
|