@pragmys/compass 0.0.3 → 0.0.4

package/INSTALL.md

@@ -1,6 +1,6 @@
 # Install
 
-Full documentation and downloads: [pragmys.com/compass](https://pragmys.com/compass).
+Full documentation: [pragmys.com/compass](https://pragmys.com/compass).
 
 Compass is one MCP server. There is no separate skill, plugin or rules file to install: the instructions travel inside the server.
 
@@ -16,7 +16,7 @@ claude mcp add pragmys-compass -- npx -y @pragmys/compass@VERSION
 
 ## Claude Desktop
 
-Install the `.mcpb` bundle from [pragmys.com/compass](https://pragmys.com/compass) (one click), or add to `claude_desktop_config.json`:
+Add to `claude_desktop_config.json`, then restart the app:
 
 ```json
 { "mcpServers": { "pragmys-compass": { "command": "npx", "args": ["-y", "@pragmys/compass@VERSION"] } } }

package/README.md

@@ -2,9 +2,9 @@
 
 Compass finds jobs through your own AI agent and ranks them against the skills you have verified on Pragmys. You say what role you want. Your agent searches and fetches; Compass cleans what it finds, scores it on your device, can run a deeper check on the jobs you pick, and writes a Pragmys-branded HTML report with company names, match %, what you have and what is missing.
 
-Compass is a Pragmys product: free to use with a Pragmys account, closed source, delivered as one signed MCP server. See [LICENSE](LICENSE) and [TERMS.md](TERMS.md).
+Compass is a Pragmys product: free to use with a Pragmys account, closed source, delivered as one MCP server. See [LICENSE](LICENSE) and [TERMS.md](TERMS.md).
 
-**Documentation, install steps and downloads: [pragmys.com/compass](https://pragmys.com/compass).**
+**Documentation and install steps: [pragmys.com/compass](https://pragmys.com/compass).**
 
 ## What it does
 

package/SECURITY.md

@@ -15,8 +15,8 @@ Email **hello@pragmys.com** with details. Please do not post a security problem
 
 ## Network destinations
 
-`api.pragmys.com` (sign-in, your skill confidences, the public skill list, the operator settings record, the usage record) and `pragmys.com` (the signed release manifest, only when you check for an update). Compass itself contacts no job source; your agent does.
+`api.pragmys.com` (sign-in, your skill confidences, the public skill list, the operator settings record, the usage record) and `pragmys.com` (the release manifest, only when you check for an update and one is published). Compass itself contacts no job source; your agent does.
 
 ## Releases
 
-Binaries are built in CI with provenance attestation and published to npm with provenance; versions are pinned in install snippets. Updates are announced and never applied silently. Where a signed update manifest is published, `compass_update` applies an update only after you confirm and after the download matches the signed checksum; otherwise update through npm.
+Binaries are built in CI and published to npm from GitHub Actions with trusted publishing (no long-lived npm token is stored); versions are pinned in install snippets. Updates are announced and never applied silently. Where a signed update manifest is published, `compass_update` applies an update only after you confirm and after the download matches the signed checksum; otherwise update through npm.

package/bin/compass.js

@@ -4,7 +4,7 @@
 // This file only finds that binary and runs it with the same stdio.
 'use strict';
 const { spawn } = require('node:child_process');
-const { existsSync } = require('node:fs');
+const { chmodSync, existsSync, accessSync, constants } = require('node:fs');
 const { join, dirname } = require('node:path');
 
 const platform = `${process.platform}-${process.arch}`;
@@ -24,6 +24,10 @@ if (!binary || !existsSync(binary)) {
   );
   process.exit(1);
 }
+if (process.platform !== 'win32') {
+  // Some installs drop the execute bit from the packaged binary. Repair it.
+  try { accessSync(binary, constants.X_OK); } catch { try { chmodSync(binary, 0o755); } catch { /* spawn reports it */ } }
+}
 const child = spawn(binary, process.argv.slice(2), { stdio: 'inherit' });
 for (const sig of ['SIGINT', 'SIGTERM', 'SIGHUP']) process.on(sig, () => child.kill(sig));
 child.on('exit', (code, signal) => process.exit(signal ? 1 : (code ?? 0)));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pragmys/compass",
-  "version": "0.0.3",
+  "version": "0.0.4",
   "description": "Compass by Pragmys: rank jobs your agent finds against your verified evidence. A local MCP server.",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://pragmys.com/compass",
@@ -17,11 +17,11 @@
     "THIRD_PARTY_NOTICES"
   ],
   "optionalDependencies": {
-    "@pragmys/compass-darwin-arm64": "0.0.3",
-    "@pragmys/compass-darwin-x64": "0.0.3",
-    "@pragmys/compass-linux-x64": "0.0.3",
-    "@pragmys/compass-linux-arm64": "0.0.3",
-    "@pragmys/compass-win32-x64": "0.0.3"
+    "@pragmys/compass-darwin-arm64": "0.0.4",
+    "@pragmys/compass-darwin-x64": "0.0.4",
+    "@pragmys/compass-linux-x64": "0.0.4",
+    "@pragmys/compass-linux-arm64": "0.0.4",
+    "@pragmys/compass-win32-x64": "0.0.4"
   },
   "engines": {
     "node": ">=18"