@geminilight/mindos 0.5.27 → 0.5.28

package/app/components/settings/McpServerStatus.tsx

@@ -223,14 +223,20 @@ export default function ServerStatus({ status, agents, t }: McpServerStatusProps
 
             {/* Hint for remote mode */}
             {mode === 'http' && (
-              <p className="text-[11px] text-muted-foreground leading-relaxed">
-                {isRemote
-                  ? (m?.remoteDetectedHint ?? 'Uses your current remote IP. Ensure the MCP port is accessible from the target device.')
-                  : (m?.remoteManualHint ?? 'Tip: access MindOS from a remote device to auto-detect the correct IP, or replace 127.0.0.1 with your server\'s LAN IP.')}
+              <div className="text-[11px] text-muted-foreground leading-relaxed space-y-1">
+                <p>
+                  {isRemote
+                    ? (m?.remoteDetectedHint ?? 'Using your current remote IP.')
+                    : (m?.remoteManualHint ?? 'Replace 127.0.0.1 with your server\'s public or LAN IP.')}
+                </p>
+                <p>
+                  {(m?.remoteSteps ?? 'To connect from another device: ① Open port {port} in firewall/security group ② Use the config below in your Agent ③ For public networks, consider SSH tunnel for encryption.')
+                    .replace('{port}', String(status.port))}
+                </p>
                 {!status.authConfigured && (
-                  <span className="text-amber-500 ml-1">{m?.noAuthWarning ?? '⚠ No auth token set — configure one in Settings → General for secure remote access.'}</span>
+                  <p className="text-amber-500">{m?.noAuthWarning ?? '⚠ No auth token — set one in Settings → General before enabling remote access.'}</p>
                 )}
-              </p>
+              </div>
             )}
 
             {/* Copy config + show JSON toggle */}

package/app/lib/i18n-en.ts

@@ -265,9 +265,10 @@ export const en = {
       transportRemote: 'Remote',
       transportLocalHint: 'Local — same machine as MindOS server',
       transportRemoteHint: 'Remote — connect from another device via HTTP',
-      remoteDetectedHint: 'Uses your current remote IP. Ensure the MCP port is accessible from the target device.',
-      remoteManualHint: 'Tip: access MindOS from a remote device to auto-detect the correct IP, or replace 127.0.0.1 with your server\'s LAN IP.',
-      noAuthWarning: '⚠ No auth token set — configure one in Settings → General for secure remote access.',
+      remoteDetectedHint: 'Using your current remote IP.',
+      remoteManualHint: 'Replace 127.0.0.1 with your server\'s public or LAN IP.',
+      remoteSteps: 'To connect from another device: ① Open port {port} in firewall/security group ② Use the config below in your Agent ③ For public networks, consider SSH tunnel for encryption.',
+      noAuthWarning: '⚠ No auth token — set one in Settings → General before enabling remote access.',
       showJson: 'Show JSON',
       hideJson: 'Hide JSON',
     },

package/app/lib/i18n-zh.ts

@@ -290,9 +290,10 @@ export const zh = {
       transportRemote: '远程',
       transportLocalHint: '本地 — 与 MindOS 服务在同一台机器上',
       transportRemoteHint: '远程 — 从其他设备通过 HTTP 连接',
-      remoteDetectedHint: '使用当前远程 IP。请确保目标设备可以访问 MCP 端口。',
-      remoteManualHint: '提示：从远程设备访问 MindOS 可自动检测正确 IP，或手动将 127.0.0.1 替换为服务器的局域网 IP。',
-      noAuthWarning: '⚠ 未设置认证令牌 — 请在 设置 → 通用 中配置，以确保远程访问安全。',
+      remoteDetectedHint: '使用当前远程 IP。',
+      remoteManualHint: '将 127.0.0.1 替换为服务器的公网或局域网 IP。',
+      remoteSteps: '从其他设备连接：① 在防火墙/安全组中开放端口 {port} ② 将下方配置粘贴到 Agent 中 ③ 公网环境建议使用 SSH 隧道加密传输。',
+      noAuthWarning: '⚠ 未设置认证令牌 — 请先在 设置 → 通用 中配置，再启用远程访问。',
       showJson: '显示 JSON',
       hideJson: '隐藏 JSON',
     },

package/app/next-env.d.ts

@@ -1,6 +1,6 @@
 /// <reference types="next" />
 /// <reference types="next/image-types/global" />
-import "./.next/dev/types/routes.d.ts";
+import "./.next/types/routes.d.ts";
 
 // NOTE: This file should not be edited
 // see https://nextjs.org/docs/app/api-reference/config/typescript for more information.

package/app/next.config.ts

@@ -3,7 +3,7 @@ import path from "path";
 
 const nextConfig: NextConfig = {
   transpilePackages: ['github-slugger'],
-  serverExternalPackages: ['pdfjs-dist', 'pdf-parse', 'chokidar', 'openai', '@mariozechner/pi-ai', '@mariozechner/pi-agent-core'],
+  serverExternalPackages: ['chokidar', 'openai', '@mariozechner/pi-ai', '@mariozechner/pi-agent-core'],
   outputFileTracingRoot: path.join(__dirname),
   turbopack: {
     root: path.join(__dirname),

package/bin/lib/mcp-spawn.js

@@ -1,7 +1,7 @@
 import { execSync, spawn } from 'node:child_process';
-import { existsSync } from 'node:fs';
+import { existsSync, readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
-import { ROOT } from './constants.js';
+import { ROOT, CONFIG_PATH } from './constants.js';
 import { bold, red, yellow } from './colors.js';
 import { npmInstall } from './utils.js';
 
@@ -14,10 +14,21 @@ export function spawnMcp(verbose = false) {
     console.log(yellow('Installing MCP dependencies (first run)...\n'));
     npmInstall(resolve(ROOT, 'mcp'), '--no-workspaces');
   }
+
+  // Read AUTH_TOKEN directly from config to avoid stale system env overriding
+  // the user's configured token. Config is the source of truth for auth.
+  let configAuthToken;
+  try {
+    const cfg = JSON.parse(readFileSync(CONFIG_PATH, 'utf-8'));
+    configAuthToken = cfg.authToken;
+  } catch { /* config may not exist yet */ }
+
   const env = {
     ...process.env,
     MCP_PORT: mcpPort,
+    MCP_HOST: process.env.MCP_HOST || '0.0.0.0',
     MINDOS_URL: process.env.MINDOS_URL || `http://127.0.0.1:${webPort}`,
+    ...(configAuthToken ? { AUTH_TOKEN: configAuthToken } : {}),
     ...(verbose ? { MCP_VERBOSE: '1' } : {}),
   };
   const child = spawn('npx', ['tsx', 'src/index.ts'], {

package/mcp/src/index.ts

@@ -25,7 +25,7 @@ import { z } from "zod";
 const BASE_URL       = process.env.MINDOS_URL      ?? "http://localhost:3456";
 const AUTH_TOKEN     = process.env.AUTH_TOKEN;
 const MCP_TRANSPORT  = process.env.MCP_TRANSPORT   ?? "http";    // "http" | "stdio"
-const MCP_HOST       = process.env.MCP_HOST        ?? "127.0.0.1";
+const MCP_HOST       = process.env.MCP_HOST        ?? "0.0.0.0";
 const MCP_PORT       = parseInt(process.env.MCP_PORT ?? "8781", 10);
 const MCP_ENDPOINT   = process.env.MCP_ENDPOINT    ?? "/mcp";
 const CHARACTER_LIMIT = 25_000;
@@ -510,7 +510,8 @@ async function main() {
 
     const httpServer = createServer(expressApp as Parameters<typeof createServer>[1]);
     httpServer.listen(MCP_PORT, MCP_HOST, () => {
-      console.error(`MindOS MCP server (HTTP) listening on http://${MCP_HOST}:${MCP_PORT}${MCP_ENDPOINT}`);
+      const displayHost = MCP_HOST === '0.0.0.0' ? '127.0.0.1' : MCP_HOST;
+      console.error(`MindOS MCP server (HTTP) listening on http://${displayHost}:${MCP_PORT}${MCP_ENDPOINT}`);
       console.error(`API backend: ${BASE_URL}`);
     });
   } else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geminilight/mindos",
-  "version": "0.5.27",
+  "version": "0.5.28",
   "description": "MindOS — Human-Agent Collaborative Mind System. Local-first knowledge base that syncs your mind to all AI Agents via MCP.",
   "keywords": [
     "mindos",