@hcu-lab.me/mcp-device 1.0.3 → 1.0.4

package/README.md

@@ -21,6 +21,12 @@ mcp-device install
 mcp-device status
 ```
 
+`mcp-device login` stays terminal-only: it prints the pairing URL, user code, and QR code, and never opens a browser automatically.
+
+## Limited hosted access
+
+The public source package remains MIT licensed, but access to the hosted `device.hcu-lab.me` gateway is intentionally limited. New hosted accounts are admitted through a small, controlled supply of invite codes rather than open registration. Invite availability may be capped, paused, expired, or revoked as the service capacity and security policy change. Installing the package does not by itself grant a hosted-service account or guarantee that an invite code will be available.
+
 The hosted Pair/Help pages render their gateway URL and navigation from the deployment that served the page, so staging or custom deployments do not need a production-host rewrite. For the canonical package, `https://device.hcu-lab.me` is the default gateway; `MCP_GATEWAY_URL` is only needed when intentionally using another gateway.
 
 ## Commands
@@ -63,6 +69,14 @@ npm run build
 node dist/mcp-device.js --help
 ```
 
+Normal development pushes do not publish npm. After reviewed development work is committed on a clean `main`, a release is intentionally created with:
+
+```powershell
+npm run release
+```
+
+That command runs the test suite, bumps the patch version, synchronizes project version files, creates the release commit and `vX.Y.Z` tag, then atomically pushes `main` and the tag. The tag-triggered GitHub Actions workflow performs the npm publish through trusted OIDC publishing. Use `npm run release:minor` or `npm run release:major` only when that version change is intentional.
+
 For a custom development gateway, set `MCP_GATEWAY_URL`. Supply `MCP_GATEWAY_APP_CA_PATH` from an independent trusted source when using protocol v2. Non-loopback plaintext gateway URLs are rejected.
 
 ## Upstream execution engine

package/dist/device/gateway-pairing.d.ts

@@ -16,6 +16,7 @@ export interface GatewayPairingOptions {
     deviceName?: string;
     fetchFn?: typeof fetch;
     proxyAgent?: Agent;
+    /** @deprecated Pairing is intentionally terminal-only; this hook is ignored. */
     openBrowser?: (url: string) => Promise<unknown>;
     renderQr?: (value: string) => void;
     sleep?: (ms: number) => Promise<void>;

package/dist/device/gateway-pairing.js

@@ -1,7 +1,6 @@
 import { createHash, randomBytes } from 'crypto';
 import { createRequire } from 'module';
 import os from 'os';
-import open from 'open';
 import fetch from 'cross-fetch';
 import { gatewayHttpBase } from './gateway-url-policy.js';
 const CLIENT_ID = 'mcp-device';
@@ -34,7 +33,6 @@ async function jsonResponse(response) {
 export async function pairGatewayDevice(options) {
     const baseUrl = gatewayHttpBase(options.gatewayUrl);
     const fetchFn = options.fetchFn || fetch;
-    const openBrowser = options.openBrowser || (url => open(url));
     const renderQr = options.renderQr || defaultQrRenderer;
     const sleep = options.sleep || (ms => new Promise(resolve => setTimeout(resolve, ms)));
     const log = options.log || (value => console.log(value));
@@ -62,10 +60,6 @@ export async function pairGatewayDevice(options) {
     log(`Pair this device: ${verificationUrl}`);
     log(`Code: ${start.user_code}`);
     renderQr(verificationUrl);
-    try {
-        await openBrowser(verificationUrl);
-    }
-    catch { /* URL + QR remain usable */ }
     const intervalMs = Math.max(1000, Math.min(30000, Number(start.interval || 2) * 1000));
     const deadline = Date.now() + Math.max(1, Number(start.expires_in || 600)) * 1000;
     while (Date.now() < deadline) {

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "1.0.3";
+export declare const VERSION = "1.0.4";

package/dist/version.js

@@ -1 +1 @@
-export const VERSION = '1.0.3';
+export const VERSION = '1.0.4';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hcu-lab.me/mcp-device",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "MCP Device securely connects a user-owned computer to an authenticated Model Context Protocol gateway.",
   "license": "MIT",
   "author": "Hirohimeow",
@@ -26,6 +26,10 @@
     "device:start": "tsx src/device/device.ts",
     "device:start:dev": "nodemon --watch src/device --exec tsx src/device/device.ts",
     "sync-version": "node scripts/sync-version.js",
+    "version": "node scripts/sync-version.js && git add server.json src/version.ts package-lock.json",
+    "release": "node scripts/release.js patch",
+    "release:minor": "node scripts/release.js minor",
+    "release:major": "node scripts/release.js major",
     "bump": "node scripts/sync-version.js --bump",
     "bump:minor": "node scripts/sync-version.js --bump --minor",
     "bump:major": "node scripts/sync-version.js --bump --major",