@jamestesting888/tum-mcp 0.7.0 → 0.8.1

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changes
 
+## 0.8.1 — 2026-10-26
+
+- Give every doctor/update status a dot: yellow for unverified or attention-needed
+  states, green for ready/updated, neutral for information/disabled, and red only
+  for failures. Keep status labels readable with terminal colors disabled.
+
+## 0.8.0 — 2026-10-26
+
+- Read Artemis courses, lectures, exercises, own feedback and accessible Zulip
+  channels after sign-in without separate local scope grants. Preserve server
+  permissions, bounded queries and disabled remote writes.
+- Keep standard `--help` for command discovery and guide agents toward relevant
+  current-semester metadata before retrieving course content.
+
 ## 0.7.0 — 2026-10-26
 
 - Share one course app between Study and Exercises, with a single workspace

package/README.md

@@ -30,11 +30,13 @@ npm install --global @jamestesting888/tum-mcp@latest
 tum-mcp setup --client codex
 tum-mcp connect
 tum-mcp doctor
+tum-mcp --help
 ```
 
 Select services with **Space**, then **Enter**. Choose an installed browser and
 complete sign-in there. Only selected tabs open; Zulip needs no API key.
-Enable the [course and channel scopes](docs/tum-mcp.md#connections-and-scopes) you want to use.
+Read access follows your campus account's permissions; no course/channel scope setup is needed.
+Use `tum-mcp study build --help` for a command's options.
 
 Choose a client with `--client`: `codex`, `claude`, `cursor` or `antigravity`.
 Setup configures MCP and installs all six skills; follow any activation or
@@ -132,7 +134,7 @@ See [publishing details](docs/study.md#publish-a-study-website).
 Sign-in and MFA happen in a temporary browser window. Only service-owned session
 cookies are retained; identity-provider cookies are discarded when it closes.
 Sessions stay on your computer in encrypted files with owner-restricted keys.
-Configured local clients share those connections and selected scopes.
+Configured local clients share those connections and saved preferences.
 
 ## Your study project
 
@@ -173,7 +175,7 @@ tum-mcp update
 same npm location and refreshes configured clients. It never downgrades a newer
 installation. Use `tum-mcp update --local` to refresh the installed version without checking npm.
 From 0.6.0 or earlier, upgrade the npm package once to obtain this command.
-Sessions, scopes and downloads carry forward. User-edited entries and skills are
+Sessions, preferences and downloads carry forward. User-edited entries and skills are
 preserved and reported for review. Reload the client; refresh its cached plugin
 if needed. Study sites are updated separately through the study workflows.
 

package/docs/development.md

@@ -56,7 +56,7 @@ CI runs macOS, Windows and Linux, plus both distribution engines on WSL 3.x.
 Consumer checks install the actual npm artifact, discover tools, build a study
 site and test available Chromium browsers with temporary profiles and synthetic
 pages. WSL verifies Windows browser transport. No live account is used.
-Upgrade checks cover public 0.6.1, client refresh, customized-file conflicts,
+Upgrade checks cover public 0.8.0, client refresh, customized-file conflicts,
 failed preparation, runtime repair and removal that preserves work/credentials.
 The package-lifecycle check uses a local synthetic registry and real isolated
 global npm prefixes to verify downloads, backend validation, replacement,

package/docs/setup.md

@@ -1,6 +1,6 @@
 # Setup and troubleshooting
 
-[README](../README.md) · [Tools and scopes](tum-mcp.md) · [Development](development.md)
+[README](../README.md) · [Tools and access](tum-mcp.md) · [Development](development.md)
 
 Use the latest package for the connection, managed update and removal flows below.
 
@@ -16,6 +16,7 @@ npm install --global @jamestesting888/tum-mcp@latest
 tum-mcp setup --client codex
 tum-mcp connect
 tum-mcp doctor
+tum-mcp --help
 ```
 
 Use `--client claude`, `cursor`, `antigravity`, or `generic` for another client.
@@ -46,10 +47,11 @@ For another Chromium build, set `TUM_MCP_BROWSER` to its executable path before
 running connect. Compatible builds must allow Playwright automation. Safari and
 Firefox are not supported.
 
-New Artemis/Zulip accounts start without content scopes. Your agent can use
-status/discover to show account IDs and available course/channel metadata, then
-help you choose [explicit scopes](tum-mcp.md#connections-and-scopes).
+After sign-in, Artemis and Zulip can read content available to your campus account.
+No local course/channel grants are required. Your agent uses status/discover and
+course metadata to find relevant current-semester material, then makes bounded reads.
 An account ID identifies a saved service connection; it is not your TUM login.
+`tum-mcp --help` lists commands; `tum-mcp study build --help` shows command options.
 
 ## WSL
 
@@ -102,7 +104,7 @@ browser discovery still requires functioning interop.
   The [publishing workflow](study.md#publish-a-study-website) uses private repositories
   with public Pages websites and requires an eligible paid GitHub plan.
 - An expired session uses the same `tum-mcp connect` selector. Reconnecting the
-  same identity preserves course/channel scopes.
+  same identity preserves saved preferences.
 - If no browser appears, check its installation or `TUM_MCP_BROWSER`. A managed
   or incompatible Chromium build may prevent automation; try another browser.
 - Git and Docker are optional. Neither is needed for course reads or the
@@ -111,7 +113,7 @@ browser discovery still requires functioning interop.
 
 Sessions are encrypted with owner-restricted local key files. This avoids native
 credential-store prompts, but anyone obtaining both key and ciphertext can
-decrypt them. [Storage locations and recovery](tum-mcp.md#connections-and-scopes)
+decrypt them. [Storage locations and recovery](tum-mcp.md#connections-and-read-access)
 explain where sessions are saved and how to back them up.
 
 ## Update and remove
@@ -123,7 +125,7 @@ tum-mcp update
 From 0.6.1, `update` retrieves the latest npm release, validates its backend in a
 temporary installation, replaces the invoked package and refreshes previously
 configured clients. It preserves the installation prefix and global/local mode.
-It does not connect services, change scopes or register additional clients.
+It does not connect services, change preferences or register additional clients.
 It never downgrades a newer installation. `update --local` skips npm and repairs
 or refreshes the installed version. Source/pinned builds use this local mode;
 temporary npx and linked source installations are not replaced automatically.

package/docs/tum-mcp.md

@@ -1,16 +1,16 @@
 # TUM MCP guide
 
 Package: `@jamestesting888/tum-mcp`, CLI: `tum-mcp`, backend: Python 3.13.
-Development version **0.6.1 (unreleased)** adds npm package management to the
-read-only course retrieval and six local course workflows.
+The package combines read-only course retrieval, managed client installation and
+six local course workflows.
 
 ## Current capabilities
 
 The sixteen `moodle_*` tools provide materials, announcements, forums and
-explicitly scoped private-record reads. Artemis adds
+own grades, feedback and submission reads. Artemis adds
 available-course metadata, lectures and learning units, student PDF attachments,
 released non-quiz statements and permitted exact-commit feedback. Zulip provides
-scoped channel/topic search and cited discussion reads.
+bounded channel/topic search and cited discussion reads.
 
 Website access is read-only. There are no public exercise workspace, test-run,
 submission, start, deployment, rebuild or push workflows.
@@ -28,7 +28,7 @@ Lecture routes were checked against the
 [Artemis source](https://github.com/ls1intum/Artemis/blob/88824427f7ea38512606824c58b8858e539eb2eb/src/main/java/de/tum/cit/aet/artemis/lecture/web/LectureResource.java)
 and the
 [student file boundary](https://github.com/ls1intum/Artemis/blob/88824427f7ea38512606824c58b8858e539eb2eb/src/main/java/de/tum/cit/aet/artemis/core/web/FileResource.java).
-Synthetic fixtures are the default. Live checks remain private and use explicit scopes.
+Synthetic fixtures are the default. Live checks remain private and relevant to the requested task.
 
 ## Build and test the local package
 
@@ -91,15 +91,17 @@ Python 3.13+, uv, and Git: run `uv sync --locked`, then
 `uv run tum-mcp setup --client generic` from the checkout. An installed Chromium browser is needed for
 browser onboarding. See [setup](setup.md) for browser choices and WSL.
 
-## Connections and scopes
+<a id="connections-and-scopes"></a>
+
+## Connections and read access
 
 ```sh
 tum-mcp connect
 tum-mcp status
 tum-mcp discover artemis ACCOUNT_ID
 tum-mcp discover zulip ACCOUNT_ID
-tum-mcp scope artemis ACCOUNT_ID --course COURSE_ID --sensitive
-tum-mcp scope zulip ACCOUNT_ID --channel CHANNEL_ID
+tum-mcp --help
+tum-mcp study build --help
 ```
 
 `connect` takes no arguments or connection options. Move with up/down, toggle
@@ -119,10 +121,12 @@ when the temporary browser closes. Existing browser profiles are never imported.
 Zulip uses its read-only `/json/` routes with the browser session; no API key is
 required. Reconnect through the same selector when a session expires.
 See [Zulip's dispatcher](https://github.com/zulip/zulip/blob/12.0/zerver/lib/rest.py).
-Existing scopes survive reconnection; new identities start with empty scopes.
-Private Zulip channels require `--private-channel ID` as well as `--channel ID`.
-`--sensitive` enables own Artemis participation/feedback reads. It grants no
-website mutation or local execution permission.
+Read access follows the authenticated account's server permissions. No local course,
+channel, private-channel or personal-feedback grant is required. Older saved grant
+fields remain readable for compatibility and do not restrict read access. Agents
+prefer relevant current-semester courses and channels, inspect metadata first, and
+page through only the content needed for the request. Explicit older-course requests
+remain supported. Server-denied content, staff-only material and remote writes stay unavailable.
 
 Settings live outside the installed package in `TUMMCP/config/preferences.json`.
 Moodle sessions live under `TUMMoodle/local-session/`; Artemis and Zulip credentials
@@ -156,7 +160,7 @@ from activation; the host must confirm a running MCP connection after setup.
 Use `doctor --live` for bounded authenticated identity checks on saved local
 sessions and optional GitHub CLI authentication. Campus checks read Moodle's
 course overview and Artemis/Zulip identity only;
-it does not broaden content scopes. `doctor --json` emits schema-versioned JSON
+it does not change server permissions. `doctor --json` emits schema-versioned JSON
 without terminal styling; combine both flags for live automation. Paths appear
 in JSON for troubleshooting. Default diagnostics do not create state folders.
 

package/npm/backend/manifest.json

@@ -1,5 +1,5 @@
 {
-  "wheel": "tum_mcp-0.7.0-py3-none-any.whl",
-  "wheelSha256": "dabe306ea1695fa03fa119b2673cc93c0ee705b34ebabc6674958fe77f5757a6",
+  "wheel": "tum_mcp-0.8.1-py3-none-any.whl",
+  "wheelSha256": "eb55c85f6b1edfb538ff19ddad3b020625dbaf91df7790f5efd4294f337363d8",
   "requirementsSha256": "25f9efa7a4ffb0b97abcfeb9d4706d04808273ab1b35abcfaa1ef0b66e87591b"
 }

package/npm/tum-mcp.mjs

@@ -9,7 +9,25 @@ let args = process.argv.slice(2);
 const version = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version;
 try {
   if (args.length === 0 || (args.length === 1 && ['--help', '-h'].includes(args[0]))) {
-    console.log(`TUM MCP ${version}\nCommands: setup [--client codex|claude|cursor|antigravity|generic], connect, scope, discover, status, doctor [--json] [--live], serve, skills, study, logout, uninstall, update\nRun connect without arguments to select services and an installed Chromium browser. Run setup explicitly to provision the managed Python backend.`);
+    console.log(`TUM MCP ${version}
+Usage: tum-mcp COMMAND [OPTIONS]
+
+  setup       Configure your coding client and managed runtime
+  connect     Sign in to selected campus services
+  status      Show saved connections
+  discover    List accessible courses or channels
+  doctor      Check installation and authentication
+  update      Update the package and configured clients
+  uninstall   Remove managed setup and the npm package
+  logout      Remove one saved connection
+  serve       Run the MCP server over stdio
+  version     Show the installed version
+  skills      Manage local workflow skills
+  study       Prepare, preview and publish a course app
+
+Use --help for options, for example: tum-mcp study build --help
+Run setup to provision the managed backend, then connect to sign in.
+Reads use your campus account permissions; no local scope selection is needed.`);
   } else if (['--version', 'version'].includes(args[0])) {
     console.log(version);
   } else if (['setup', 'update', 'uninstall'].includes(args[0]) && args.some(arg => ['--help', '-h'].includes(arg))) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jamestesting888/tum-mcp",
-  "version": "0.7.0",
+  "version": "0.8.1",
   "description": "Read-only TUM Moodle, Artemis and Zulip integration with source-backed study workflows",
   "license": "MIT",
   "type": "module",