@remcp/remcp 0.1.0 → 0.1.2

package/public/style.css

@@ -87,6 +87,19 @@ main { display: block; }
 .principles h2 { margin: 28px 0 9px; font-size: 21px; line-height: 1.2; letter-spacing: -.025em; }
 .principles p { max-width: 330px; margin: 0; color: var(--muted); font-size: 15px; }
 
+
+.quickstart { max-width: var(--container); margin: 0 auto; padding: clamp(72px, 9vw, 104px) 20px; border-top: 1px solid var(--line); }
+.quickstart .section-heading { margin-left: 0; margin-right: 0; }
+.quickstart-grid { display: grid; grid-template-columns: 1.35fr .8fr .8fr; gap: 0; margin: 34px 0 26px; border-top: 1px solid var(--line); border-bottom: 1px solid var(--line); }
+.command-card { min-width: 0; padding: 28px 28px 30px 0; }
+.command-card + .command-card { padding-left: 28px; border-left: 1px solid var(--line); }
+.command-card > span { color: var(--muted); font-size: 12px; font-variant-numeric: tabular-nums; }
+.command-card h3 { margin: 18px 0 8px; font-size: 20px; letter-spacing: -.025em; }
+.command-card p { margin: 12px 0 0; color: var(--muted); font-size: 14px; }
+.command-card .command-row { margin-top: 14px; }
+.site-header nav { min-width: 0; overflow-x: auto; scrollbar-width: none; }
+.site-header nav::-webkit-scrollbar { display: none; }
+
 .workspace { padding: clamp(72px, 9vw, 112px) 20px; border-top: 1px solid var(--line); border-bottom: 1px solid var(--line); background: var(--surface); }
 .workspace > * { max-width: var(--container); margin-left: auto; margin-right: auto; }
 .section-heading { max-width: 720px; margin-bottom: 45px; }
@@ -107,7 +120,8 @@ input:focus-visible { border-color: var(--accent); }
 .button-row { display: flex; gap: 9px; margin-top: 5px; }
 .divider { display: flex; align-items: center; gap: 11px; margin: 7px 0; color: var(--muted); font-size: 12px; }
 .divider::before, .divider::after { content: ""; flex: 1; height: 1px; background: var(--line); }
-.error { min-height: 20px; margin: 2px 0 0; color: var(--danger); font-size: 13px; }
+.error { margin: 2px 0 0; color: var(--danger); font-size: 13px; }
+p:empty, .error:empty, #status:empty { display: none; }
 .identity { display: flex; align-items: center; gap: 11px; }
 .identity small { display: block; color: var(--muted); }
 .status-dot { width: 9px; height: 9px; flex: 0 0 9px; border-radius: 50%; background: var(--ok); box-shadow: 0 0 0 4px var(--ok-soft); }
@@ -141,24 +155,27 @@ input:focus-visible { border-color: var(--accent); }
 .site-footer { max-width: var(--container); min-height: 86px; margin: 0 auto; padding: 22px 20px; display: grid; grid-template-columns: 1fr auto 1fr; align-items: center; gap: 26px; border-top: 1px solid var(--line); font-size: 13px; }
 .site-footer p { margin: 0; color: var(--muted); text-align: right; }
 
-.doc-shell { width: min(100%, var(--container)); margin: 0 auto; padding: 64px 20px 112px; display: grid; grid-template-columns: 190px minmax(0, 760px); gap: clamp(48px, 8vw, 96px); }
+.doc-shell { width: min(100%, var(--container)); margin: 0 auto; padding: 48px 20px 76px; display: grid; grid-template-columns: 176px minmax(0, 760px); gap: clamp(36px, 6vw, 72px); }
 .doc-nav { position: sticky; top: 28px; align-self: start; display: flex; flex-direction: column; gap: 4px; }
 .doc-nav a { padding: 8px 10px; border-radius: 7px; color: var(--muted); font-size: 14px; font-weight: 550; }
 .doc-nav a:hover { background: var(--surface-subtle); color: var(--ink); }
 .doc-nav a[aria-current="page"] { background: var(--surface-subtle); color: var(--ink); font-weight: 680; }
 .prose { min-width: 0; }
-.prose h1 { margin: 0 0 22px; max-width: 740px; font-size: clamp(42px, 5.5vw, 62px); line-height: 1.02; letter-spacing: -.05em; }
-.prose h2 { scroll-margin-top: 28px; margin: 52px 0 12px; font-size: 25px; line-height: 1.2; letter-spacing: -.035em; }
-.prose h3 { scroll-margin-top: 28px; margin: 31px 0 8px; font-size: 18px; }
-.prose p, .prose li { color: #505057; font-size: 16px; text-wrap: pretty; }
-.prose p { margin: 0 0 16px; }
+.prose h1 { margin: 0 0 18px; max-width: 700px; font-size: clamp(38px, 5vw, 54px); line-height: 1.04; letter-spacing: -.045em; }
+.prose h2 { scroll-margin-top: 24px; margin: 36px 0 9px; font-size: 23px; line-height: 1.22; letter-spacing: -.03em; }
+.prose h3 { scroll-margin-top: 24px; margin: 24px 0 7px; font-size: 17px; }
+.prose p, .prose li { color: #505057; font-size: 15.5px; text-wrap: pretty; }
+.prose p { margin: 0 0 12px; }
 .prose a { color: #3538ae; text-decoration: underline; text-decoration-color: #a5a7e9; text-underline-offset: 3px; }
 .prose a:hover { text-decoration-color: #3538ae; }
-.prose pre { overflow: auto; margin: 18px 0 24px; padding: 16px; border-radius: 10px; background: #1e1e21; color: #f4f4f2; }
+.prose pre { min-width: 0; overflow: auto; margin: 0; padding: 13px 14px; background: transparent; color: #f4f4f2; }
+.prose .code-row { display: grid; grid-template-columns: minmax(0, 1fr) auto; align-items: center; gap: 8px; margin: 12px 0 16px; overflow: hidden; border-radius: 10px; background: #1e1e21; }
+.prose .code-row .code-copy { min-height: 34px; margin-right: 8px; padding: 7px 10px; border-color: #4b4b50; background: #2b2b2f; color: #f4f4f2; font-size: 12px; white-space: nowrap; }
+.prose .code-row .code-copy:hover { border-color: #66666d; background: #38383d; }
 .prose code { font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; font-size: .9em; }
 .prose :not(pre) > code { padding: 2px 5px; border-radius: 5px; background: var(--surface-subtle); color: #34343a; }
 .prose hr { margin: 46px 0; border: 0; border-top: 1px solid var(--line); }
-.prose .notice { margin: 28px 0; padding: 16px 18px; border: 1px solid #d8d8f7; border-radius: 9px; background: var(--accent-soft); }
+.prose .notice { margin: 20px 0; padding: 13px 15px; border: 1px solid #d8d8f7; border-radius: 9px; background: var(--accent-soft); }
 .prose .notice p { margin: 5px 0 0; }
 
 .oauth-shell { min-height: calc(100svh - 68px); display: grid; place-items: center; padding: 56px 20px 80px; }
@@ -184,10 +201,13 @@ input:focus-visible, button:focus-visible, a:focus-visible { outline: 3px solid
   .principles > div, .principles > div + div { min-height: auto; padding: 28px 0; border-left: 0; border-bottom: 1px solid var(--line); }
   .principles > div:last-child { border-bottom: 0; }
   .workspace-grid { grid-template-columns: 1fr; }
+  .quickstart-grid { grid-template-columns: 1fr; }
+  .command-card, .command-card + .command-card { padding: 24px 0; border-left: 0; border-bottom: 1px solid var(--line); }
+  .command-card:last-child { border-bottom: 0; }
   .auth-pane { padding-right: 0; border-right: 0; border-bottom: 1px solid var(--line); }
   .endpoint-pane { padding-left: 0; }
-  .doc-shell { grid-template-columns: 1fr; gap: 38px; padding-top: 42px; }
-  .doc-nav { position: static; flex-direction: row; flex-wrap: wrap; gap: 4px; padding-bottom: 18px; border-bottom: 1px solid var(--line); }
+  .doc-shell { grid-template-columns: 1fr; gap: 0; padding-top: 34px; }
+  .doc-nav { display: none; }
   .site-footer { grid-template-columns: 1fr; }
   .site-footer nav { flex-wrap: wrap; }
   .site-footer p { text-align: left; }
@@ -196,7 +216,7 @@ input:focus-visible, button:focus-visible, a:focus-visible { outline: 3px solid
 @media (max-width: 620px) {
   .site-header { min-height: 62px; padding: 0 16px; }
   .site-header { gap: 12px; }
-  .site-header nav { gap: 10px; }
+  .site-header nav { max-width: calc(100vw - 116px); gap: 12px; }
   .site-header nav a { font-size: 12.5px; }
   .hero { padding: 58px 18px 64px; }
   .hero h1 { font-size: clamp(46px, 14vw, 60px); }
@@ -205,21 +225,29 @@ input:focus-visible, button:focus-visible, a:focus-visible { outline: 3px solid
   .node { align-items: flex-start; flex-direction: column; gap: 3px; }
   .node.device-node { padding-right: 18px; }
   .node .pulse { top: 15px; }
-  .workspace, .final-cta { padding-left: 18px; padding-right: 18px; }
+  .workspace, .final-cta, .quickstart { padding: 50px 18px; }
+  .section-heading { margin-bottom: 30px; }
+  .section-heading h2, .final-cta h2 { font-size: 36px; }
+  .section-heading > p:last-child, .final-cta > p { margin-top: 12px; font-size: 16px; }
   .button-row, .oauth-actions { flex-direction: column; }
   .button-row .button, .oauth-actions .button { width: 100%; }
   .pair-panel { grid-template-columns: 1fr; }
   .pair-panel .button { justify-self: start; }
   .panel-title { align-items: flex-start; flex-direction: column; }
-  .command-row, .pairing-output { grid-template-columns: 1fr; }
-  .copy-button { justify-self: start; }
+  .command-row, .pairing-output { grid-template-columns: minmax(0, 1fr) auto; }
+  .copy-button { justify-self: stretch; }
   .endpoint-facts div { align-items: flex-start; flex-direction: column; gap: 2px; }
   .endpoint-facts dd { text-align: left; }
   .site-footer { padding: 24px 18px; }
   .site-footer nav { gap: 14px; }
-  .doc-shell { padding: 34px 18px 80px; }
-  .doc-nav { overflow-x: auto; flex-wrap: nowrap; margin: 0 -18px; padding: 0 18px 16px; }
-  .doc-nav a { white-space: nowrap; }
+  .doc-shell { gap: 18px; padding: 24px 16px 56px; }
+  .prose h1 { margin-bottom: 14px; font-size: clamp(34px, 10vw, 42px); }
+  .prose h2 { margin-top: 28px; font-size: 21px; }
+  .prose h3 { margin-top: 21px; }
+  .prose p, .prose li { font-size: 15px; }
+  .prose .code-row { margin: 10px 0 14px; }
+  .prose .code-row pre { padding: 12px 10px 12px 13px; }
+  .prose .code-row .code-copy { margin-right: 7px; }
   .oauth-shell { min-height: calc(100svh - 62px); padding: 28px 14px 60px; place-items: start center; }
   .oauth-card { padding: 22px 18px; }
   .scope-list li { align-items: flex-start; flex-direction: column; gap: 4px; }

package/public/support.html

@@ -8,7 +8,7 @@
   <title>Support · ReMCP</title>
   <meta name="description" content="Troubleshoot ReMCP sign-in, device pairing, agent connectivity and MCP authorization.">
   <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=b92ac4c9219a">
+  <link rel="stylesheet" href="/style.css?v=remcp-012">
   <meta property="og:site_name" content="ReMCP">
   <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
   <link rel="icon" href="/favicon.ico" sizes="any">
@@ -28,10 +28,10 @@
     <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
     <span translate="no">ReMCP</span>
   </a>
-  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support" aria-current="page">Support</a></nav>
+  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support" aria-current="page">Support</a></nav>
 </header>
 <main id="main" class="doc-shell">
-  <aside class="doc-nav" aria-label="Documentation"><a href="/docs">Setup</a><a href="/security">Security</a><a href="/support" aria-current="page">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></aside>
+  <aside class="doc-nav" aria-label="Documentation"><a href="/docs">Setup</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support" aria-current="page">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></aside>
   <article class="prose">
     <p class="eyebrow">Support</p>
     <h1>Troubleshoot ReMCP.</h1>
@@ -40,6 +40,9 @@
 <h2>OAuth does not complete</h2><p>Return to the authorization screen, sign in to the intended ReMCP account, review the requested access, and choose <strong>Authorize ReMCP Access</strong>.</p>
 <h2>MCP tool cannot run</h2><p>Confirm the target computer is online and use <code>list_devices</code> to obtain its current device id. Device tools require that id.</p>
 <h2>Pairing code expired</h2><p>Generate a new pairing command from the workspace. Pairing codes are intentionally short-lived and single-use.</p>
+<h2>Check the installed agent</h2><div class="code-row"><pre><code id="support-command-1">remcp --version
+remcp status</code></pre><button class="copy-button code-copy" type="button" data-copy="#support-command-1" aria-label="Copy command" aria-live="polite">Copy</button></div><p>If <code>remcp</code> is not found, repeat the <a href="/docs#install">install command</a>. The first npx invocation is temporary; <code>--install</code> creates the persistent CLI.</p>
+<h2>Update or repair</h2><div class="code-row"><pre><code id="support-command-2">remcp update</code></pre><button class="copy-button code-copy" type="button" data-copy="#support-command-2" aria-label="Copy command" aria-live="polite">Copy</button></div><p>This refreshes the published CLI and restarts the installed user service. For an already paired device whose service is missing, run <code>remcp install</code>.</p>
 <h2>Need deployment help?</h2><p>For a self-hosted deployment, contact the operator who provisioned your ReMCP instance and include the affected layer: sign-in, pairing, agent connectivity, or MCP authorization.</p>
   </article>
 </main>
@@ -48,10 +51,9 @@
     <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
     <span translate="no">ReMCP</span>
   </div>
-  <nav aria-label="Footer">
-    <a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a>
-  </nav>
+  <nav aria-label="Footer"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></nav>
   <p>Open-source remote MCP infrastructure.</p>
 </footer>
+<script type="module" src="/copy.js?v=remcp-012"></script>
 </body>
 </html>

package/public/terms.html

@@ -8,7 +8,7 @@
   <title>Terms of Service · ReMCP</title>
   <meta name="description" content="Terms for using the hosted ReMCP service and its remote-computer capabilities.">
   <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=b92ac4c9219a">
+  <link rel="stylesheet" href="/style.css?v=remcp-012">
   <meta property="og:site_name" content="ReMCP">
   <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
   <link rel="icon" href="/favicon.ico" sizes="any">
@@ -28,10 +28,10 @@
     <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
     <span translate="no">ReMCP</span>
   </a>
-  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a></nav>
+  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a></nav>
 </header>
 <main id="main" class="doc-shell">
-  <aside class="doc-nav" aria-label="Legal and policy navigation"><a href="/docs">Setup</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms" aria-current="page">Terms</a></aside>
+  <aside class="doc-nav" aria-label="Documentation"><a href="/docs">Setup</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms" aria-current="page">Terms</a></aside>
   <article class="prose">
     <p class="eyebrow">Legal</p>
     <h1>Terms of Service</h1>
@@ -53,9 +53,7 @@
     <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
     <span translate="no">ReMCP</span>
   </div>
-  <nav aria-label="Footer">
-    <a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a>
-  </nav>
+  <nav aria-label="Footer"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></nav>
   <p>Open-source remote MCP infrastructure.</p>
 </footer>
 </body>

package/skills/remcp-operator/SKILL.md

@@ -33,4 +33,4 @@ Use `start_process` once and then `read_process_output` or `interact_with_proces
 
 ## Out-of-scope requests
 
-Do not use ReMCP to access a computer the user has not paired or is not authorized to control. Do not ask for passwords, MFA codes, private keys, or other credentials through ReMCP tool inputs.
+Do not use ReMCP to access a computer the user has not paired or is not authorized to control. Do not ask for or process passwords, MFA codes, private keys, API keys, payment-card data, protected health information, government identifiers, or other restricted credentials/data through ReMCP tools. If a requested file or command would expose those categories, ask the user to use a safer local workflow instead.

package/src/agent.mjs

@@ -6,6 +6,7 @@ import { fileURLToPath } from 'node:url';
 import WebSocket from 'ws';
 import { Client } from '@modelcontextprotocol/sdk/client/index.js';
 import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
+import { VERSION } from './version.mjs';
 
 function desktopCommanderEntry() {
   try { return fileURLToPath(import.meta.resolve('@wonderwhy-er/desktop-commander')); } catch {}
@@ -31,10 +32,10 @@ export async function runAgent(options) {
   let stopping = false;
   let activeSocket;
 
-  const mcp = new Client({ name: 'remcp-agent', version: '0.1.0' });
+  const mcp = new Client({ name: 'remcp-agent', version: VERSION });
   const transport = new StdioClientTransport({ command: process.execPath, args: [desktopCommanderEntry()] });
   await mcp.connect(transport);
-  console.log('Local Desktop Commander MCP ready');
+  console.log('Local device runtime ready');
 
   async function respond(ws, message) {
     try {
@@ -54,7 +55,7 @@ export async function runAgent(options) {
     const ws = new WebSocket(agentUrl, { headers: { Authorization: `Bearer ${deviceToken}` } });
     activeSocket = ws;
     ws.on('open', () => {
-      ws.send(JSON.stringify({ type: 'hello', deviceId, deviceName, hostname: os.hostname(), platform: process.platform, arch: process.arch, agentVersion: '0.1.0' }));
+      ws.send(JSON.stringify({ type: 'hello', deviceId, deviceName, hostname: os.hostname(), platform: process.platform, arch: process.arch, agentVersion: VERSION }));
       console.log(`Connected to ${agentUrl} as ${deviceName} (${deviceId})`);
     });
     ws.on('message', raw => {

package/src/auth.mjs

@@ -18,6 +18,7 @@ export async function verifyFirebaseToken(token) {
     uid,
     firebaseUid: payload.sub,
     email,
+    emailVerified: payload.email_verified === true,
     name: typeof payload.name === 'string' ? payload.name : '',
   };
 }

package/src/cli.mjs

@@ -2,11 +2,15 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import process from 'node:process';
+import { spawnSync } from 'node:child_process';
 import { runAgent } from './agent.mjs';
+import { LOCAL_RUNTIME_NAME, LOCAL_RUNTIME_SPEC, PACKAGE_NAME, VERSION } from './version.mjs';
 
 const home = os.homedir();
 const configDir = process.env.REMCP_CONFIG_DIR || path.join(home, '.config', 'remcp');
 const configFile = path.join(configDir, 'config.json');
+const serviceFile = path.join(home, '.config', 'systemd', 'user', 'remcp-agent.service');
+const npmCommand = process.platform === 'win32' ? 'npm.cmd' : 'npm';
 
 function parse(argv) {
   const [command = 'help', ...rest] = argv;
@@ -18,73 +22,141 @@ function parse(argv) {
   }
   return { command, flags };
 }
+
+function run(command, args, options = {}) {
+  const result = spawnSync(command, args, { stdio: 'inherit', ...options });
+  if (result.error) throw result.error;
+  if (result.status !== 0) throw new Error(`${command} failed with exit code ${result.status}`);
+  return result;
+}
+
+function output(command, args) {
+  const result = spawnSync(command, args, { encoding: 'utf8' });
+  if (result.error) throw result.error;
+  if (result.status !== 0) throw new Error(`${command} failed with exit code ${result.status}`);
+  return String(result.stdout || '').trim();
+}
+
 function loadConfig() {
-  if (!fs.existsSync(configFile)) throw new Error(`ReMCP is not paired. Run: remcp connect --server https://host --code CODE`);
+  if (!fs.existsSync(configFile)) throw new Error(`ReMCP is not paired. Run: npx --yes ${PACKAGE_NAME}@latest connect --server https://remcp.delio24.com --code CODE --install`);
   return JSON.parse(fs.readFileSync(configFile, 'utf8'));
 }
+
 function saveConfig(value) {
   fs.mkdirSync(configDir, { recursive: true, mode: 0o700 });
   fs.writeFileSync(configFile, JSON.stringify(value, null, 2) + '\n', { mode: 0o600 });
   fs.chmodSync(configFile, 0o600);
 }
-function unitPath() { return path.join(home, '.config', 'systemd', 'user', 'remcp-agent.service'); }
-function installLinuxService() {
-  const unit = `[Unit]\nDescription=ReMCP device agent\nAfter=network-online.target\nWants=network-online.target\n\n[Service]\nType=simple\nExecStart=${process.execPath} ${process.argv[1]} start\nRestart=always\nRestartSec=3\nNoNewPrivileges=true\n\n[Install]\nWantedBy=default.target\n`;
-  fs.mkdirSync(path.dirname(unitPath()), { recursive: true });
-  fs.writeFileSync(unitPath(), unit);
-  const { spawnSync } = requireSpawn();
+
+function globalPrefix() {
+  return output(npmCommand, ['prefix', '--global']);
+}
+
+function globalCliPath() {
+  const prefix = globalPrefix();
+  return process.platform === 'win32' ? path.join(prefix, 'remcp.cmd') : path.join(prefix, 'bin', 'remcp');
+}
+
+function npmGlobalInstall(packageSpec) {
+  run(npmCommand, ['install', '--global', packageSpec, LOCAL_RUNTIME_SPEC, '--no-audit', '--no-fund', '--loglevel=error']);
+}
+
+function quoteSystemd(value) {
+  return `"${String(value).replaceAll('\\', '\\\\').replaceAll('"', '\\"')}"`;
+}
+
+function installLinuxService(cliPath = globalCliPath()) {
+  const unit = `[Unit]\nDescription=ReMCP device agent\nAfter=network-online.target\nWants=network-online.target\n\n[Service]\nType=simple\nExecStart=${quoteSystemd(cliPath)} start\nRestart=always\nRestartSec=3\nNoNewPrivileges=true\n\n[Install]\nWantedBy=default.target\n`;
+  fs.mkdirSync(path.dirname(serviceFile), { recursive: true });
+  fs.writeFileSync(serviceFile, unit);
+  run('systemctl', ['--user', 'daemon-reload']);
+  run('systemctl', ['--user', 'enable', '--now', 'remcp-agent.service']);
+}
+
+function installPersistentAgent() {
+  if (process.platform !== 'linux') throw new Error('Automatic background service installation currently supports Linux');
+  console.log(`Installing ${PACKAGE_NAME}@${VERSION} and the local device runtime…`);
+  npmGlobalInstall(`${PACKAGE_NAME}@${VERSION}`);
+  installLinuxService(globalCliPath());
+  console.log('ReMCP is installed as a user service. Future updates: remcp update');
+}
+
+function restartLinuxServiceIfInstalled() {
+  if (process.platform !== 'linux' || !fs.existsSync(serviceFile)) return;
+  run('systemctl', ['--user', 'daemon-reload']);
+  run('systemctl', ['--user', 'restart', 'remcp-agent.service']);
+}
+
+function uninstallLinuxService() {
+  if (process.platform !== 'linux') return;
+  spawnSync('systemctl', ['--user', 'disable', '--now', 'remcp-agent.service'], { stdio: 'inherit' });
+  try { fs.unlinkSync(serviceFile); } catch {}
   spawnSync('systemctl', ['--user', 'daemon-reload'], { stdio: 'inherit' });
-  spawnSync('systemctl', ['--user', 'enable', '--now', 'remcp-agent.service'], { stdio: 'inherit' });
 }
-function requireSpawn() {
-  return { spawnSync: (command, args, opts) => {
-    const result = requireChild().spawnSync(command, args, opts);
-    if (result.status !== 0) throw new Error(`${command} failed`);
-    return result;
-  }};
+
+function printHelp() {
+  console.log(`ReMCP ${VERSION}\n\nCommands:\n  npx --yes ${PACKAGE_NAME}@latest connect --server https://remcp.delio24.com --code ABC12345 --install\n  remcp start\n  remcp status\n  remcp doctor\n  remcp update\n  remcp install\n  remcp uninstall\n  remcp uninstall --purge\n  remcp --version`);
 }
-let childModule;
-function requireChild() { if (!childModule) throw new Error('child_process not initialized'); return childModule; }
 
 export async function main(argv = process.argv.slice(2)) {
-  childModule = await import('node:child_process');
   const { command, flags } = parse(argv);
+
+  if (command === '--version' || command === '-v' || command === 'version') {
+    console.log(VERSION);
+    return;
+  }
+
   if (command === 'connect') {
     const server = String(flags.server || '').replace(/\/$/, '');
     const code = String(flags.code || '').toUpperCase();
     if (!server || !code) throw new Error('--server and --code are required');
     const response = await fetch(`${server}/api/pair/claim`, {
-      method: 'POST', headers: { 'content-type': 'application/json' },
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
       body: JSON.stringify({ code, name: String(flags.name || os.hostname()), hostname: os.hostname(), platform: process.platform, arch: process.arch }),
     });
     if (!response.ok) throw new Error(`Pairing failed (${response.status}): ${await response.text()}`);
     const paired = await response.json();
     saveConfig({ serverUrl: server, deviceId: paired.deviceId, deviceToken: paired.deviceToken, deviceName: String(flags.name || os.hostname()) });
     console.log(`Paired ${os.hostname()} with ${server}`);
-    if (flags.install) {
-      if (process.platform === 'linux') installLinuxService();
-      else console.log('Automatic service installation currently supports Linux. Run `remcp start` or install a launch service for this user.');
-    }
+    if (flags.install) installPersistentAgent();
     return;
   }
-  if (command === 'start') { await runAgent(loadConfig()); return; }
+
+  if (command === 'start') {
+    await runAgent(loadConfig());
+    return;
+  }
+
   if (command === 'status' || command === 'doctor') {
     const cfg = loadConfig();
-    const health = await fetch(`${cfg.serverUrl}/health`).then(r => r.json());
-    console.log(JSON.stringify({ configured: true, deviceId: cfg.deviceId, deviceName: cfg.deviceName, server: cfg.serverUrl, serverHealth: health }, null, 2));
+    const health = await fetch(`${cfg.serverUrl}/health?fresh=${Date.now()}`, { cache: 'no-store' }).then(r => r.json());
+    console.log(JSON.stringify({ configured: true, cliVersion: VERSION, deviceId: cfg.deviceId, deviceName: cfg.deviceName, server: cfg.serverUrl, serverHealth: health }, null, 2));
     return;
   }
+
   if (command === 'install') {
-    if (process.platform !== 'linux') throw new Error('Automatic service installation currently supports Linux');
-    loadConfig(); installLinuxService(); return;
+    loadConfig();
+    installPersistentAgent();
+    return;
   }
+
+  if (command === 'update') {
+    console.log(`Updating ${PACKAGE_NAME} to the latest published version…`);
+    npmGlobalInstall(`${PACKAGE_NAME}@latest`);
+    restartLinuxServiceIfInstalled();
+    console.log('ReMCP updated. Run `remcp --version` or `remcp status` to verify.');
+    return;
+  }
+
   if (command === 'uninstall') {
-    if (process.platform === 'linux') {
-      childModule.spawnSync('systemctl', ['--user','disable','--now','remcp-agent.service'], { stdio: 'inherit' });
-      try { fs.unlinkSync(unitPath()); } catch {}
-      childModule.spawnSync('systemctl', ['--user','daemon-reload'], { stdio: 'inherit' });
+    uninstallLinuxService();
+    if (flags.purge) {
+      console.log('Removing global ReMCP packages…');
+      run(npmCommand, ['uninstall', '--global', PACKAGE_NAME, LOCAL_RUNTIME_NAME, '--no-audit', '--no-fund', '--loglevel=error']);
     }
     return;
   }
-  console.log(`ReMCP 0.1.0\n\nCommands:\n  remcp connect --server https://remcp.delio24.com --code ABC12345 --install\n  remcp start\n  remcp status\n  remcp install\n  remcp uninstall`);
+
+  printHelp();
 }

package/src/config.mjs

@@ -22,7 +22,7 @@ function loadSigningSecret() {
   return generated;
 }
 const tokenSecret = loadSigningSecret();
-const installSpec = (process.env.REMCP_INSTALL_SPEC || '@remcp/remcp').trim();
+const installSpec = (process.env.REMCP_INSTALL_SPEC || '@remcp/remcp@latest').trim();
 if (!/^[A-Za-z0-9@._:/#-]+$/.test(installSpec)) throw new Error('REMCP_INSTALL_SPEC contains unsupported characters');
 
 export const config = Object.freeze({
@@ -38,7 +38,7 @@ export const config = Object.freeze({
   refreshTtlSeconds: Number(process.env.REFRESH_TTL_SECONDS || 2592000),
   rpcTimeoutMs: Number(process.env.RPC_TIMEOUT_MS || 120000),
   domainVerificationToken: (process.env.OPENAI_DOMAIN_VERIFICATION_TOKEN || '').trim(),
-  domainVerificationPath: (process.env.OPENAI_DOMAIN_VERIFICATION_PATH || '/.well-known/openai-domain-verification').trim(),
+  domainVerificationPath: (process.env.OPENAI_DOMAIN_VERIFICATION_PATH || '/.well-known/openai-apps-challenge').trim(),
   firebase: {
     apiKey: required('FIREBASE_API_KEY'),
     authDomain: required('FIREBASE_AUTH_DOMAIN'),

package/src/db.mjs

@@ -9,7 +9,7 @@ export const db = new DatabaseSync(join(config.dataDir, 'remcp.sqlite'));
 db.exec(`PRAGMA journal_mode=WAL; PRAGMA foreign_keys=ON; PRAGMA busy_timeout=5000;`);
 db.exec(`
 CREATE TABLE IF NOT EXISTS users (
-  uid TEXT PRIMARY KEY, email TEXT, name TEXT, created_at INTEGER NOT NULL, last_login_at INTEGER NOT NULL
+  uid TEXT PRIMARY KEY, email TEXT, name TEXT, email_verified INTEGER NOT NULL DEFAULT 0, created_at INTEGER NOT NULL, last_login_at INTEGER NOT NULL
 );
 CREATE TABLE IF NOT EXISTS pair_codes (
   code_hash TEXT PRIMARY KEY, uid TEXT NOT NULL REFERENCES users(uid) ON DELETE CASCADE,
@@ -34,12 +34,15 @@ CREATE TABLE IF NOT EXISTS oauth_refresh_tokens (
   scope TEXT NOT NULL, expires_at INTEGER NOT NULL, revoked_at INTEGER
 );
 `);
+try { db.exec('ALTER TABLE users ADD COLUMN email_verified INTEGER NOT NULL DEFAULT 0'); } catch {}
 
-export function upsertUser({ uid, email = '', name = '' }) {
+export const getUser = uid => db.prepare('SELECT * FROM users WHERE uid=?').get(uid);
+
+export function upsertUser({ uid, email = '', name = '', emailVerified = false }) {
   const t = now();
-  db.prepare(`INSERT INTO users(uid,email,name,created_at,last_login_at) VALUES(?,?,?,?,?)
-    ON CONFLICT(uid) DO UPDATE SET email=excluded.email,name=excluded.name,last_login_at=excluded.last_login_at`)
-    .run(uid, email, name, t, t);
+  db.prepare(`INSERT INTO users(uid,email,name,email_verified,created_at,last_login_at) VALUES(?,?,?,?,?,?)
+    ON CONFLICT(uid) DO UPDATE SET email=excluded.email,name=excluded.name,email_verified=excluded.email_verified,last_login_at=excluded.last_login_at`)
+    .run(uid, email, name, emailVerified ? 1 : 0, t, t);
   return db.prepare('SELECT * FROM users WHERE uid=?').get(uid);
 }
 

package/src/mcp.mjs

@@ -1,13 +1,14 @@
 import { readFileSync } from 'node:fs';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+import { VERSION } from './version.mjs';
 
 const rawCatalog = JSON.parse(readFileSync(new URL('./tool-catalog.json', import.meta.url), 'utf8'));
 const destructive = new Set(['set_config_value','write_file','write_pdf','move_file','edit_block','start_process','interact_with_process','force_terminate','kill_process']);
 const openWorld = new Set(['start_process','interact_with_process']);
 const descriptions = {
-  get_config: 'Read the local Desktop Commander configuration for the selected paired device.',
-  set_config_value: 'Change one supported Desktop Commander configuration value on the selected paired device.',
+  get_config: 'Read the local device runtime configuration for the selected paired device.',
+  set_config_value: 'Change one supported local device runtime configuration value on the selected paired device.',
   read_file: 'Read a local file or a user-supplied URL from the selected paired device.',
   read_multiple_files: 'Read multiple local files from the selected paired device in one call.',
   write_file: 'Create, replace, or append to a file on the selected paired device.',
@@ -28,10 +29,14 @@ const descriptions = {
   list_sessions: 'List active terminal sessions on the selected paired device.',
   list_processes: 'List running operating-system processes on the selected paired device.',
   kill_process: 'Terminate a process by PID on the selected paired device.',
-  get_usage_stats: 'Read local Desktop Commander usage statistics from the selected paired device.',
-  get_recent_tool_calls: 'Read recent local Desktop Commander tool-call history from the selected paired device.',
+  get_usage_stats: 'Read local device runtime usage statistics from the selected paired device.',
+  get_recent_tool_calls: 'Read recent local device runtime tool-call history from the selected paired device.',
 };
 
+function publicDescription(tool) {
+  return String(descriptions[tool.name] || tool.description || '').replace(/\s+/g, ' ').trim();
+}
+
 function publicTool(tool) {
   const schema = structuredClone(tool.inputSchema || { type: 'object', properties: {} });
   schema.type = 'object';
@@ -45,14 +50,14 @@ function publicTool(tool) {
   return {
     name: tool.name,
     title: upstream.title || tool.name,
-    description: descriptions[tool.name] || tool.description,
+    description: publicDescription(tool),
     inputSchema: schema,
     annotations: {
       title: upstream.title || tool.name,
       readOnlyHint: tool.name === 'start_search' ? false : upstream.readOnlyHint === true,
       destructiveHint: destructive.has(tool.name),
       idempotentHint: upstream.idempotentHint === true,
-      openWorldHint: tool.name === 'read_file' ? false : (openWorld.has(tool.name) || upstream.openWorldHint === true),
+      openWorldHint: openWorld.has(tool.name) || tool.name === 'read_file' || upstream.openWorldHint === true,
     },
   };
 }
@@ -68,7 +73,7 @@ const listDevicesTool = {
 };
 
 export function createMcpServer(uid, relay) {
-  const server = new Server({ name: 'remcp', version: '0.1.0' }, { capabilities: { tools: {} } });
+  const server = new Server({ name: 'remcp', version: VERSION }, { capabilities: { tools: {} } });
 
   server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: [listDevicesTool, ...catalog] }));
   server.setRequestHandler(CallToolRequestSchema, async request => {

package/src/oauth.mjs

@@ -2,9 +2,9 @@ import crypto from 'node:crypto';
 import express from 'express';
 import { rateLimit } from 'express-rate-limit';
 import { config } from './config.mjs';
-import { verifyFirebaseToken, signMcpAccessToken } from './auth.mjs';
-import { createOauthCode, consumeOauthCode, getOauthClient, getRefreshToken, revokeRefreshToken, saveOauthClient, saveRefreshToken, upsertUser } from './db.mjs';
-import { normalizeScope, now, randomId, randomToken, sha256, validRedirectUri } from './util.mjs';
+import { verifyFirebaseToken, signMcpAccessToken, verifyMcpAccessToken } from './auth.mjs';
+import { createOauthCode, consumeOauthCode, getOauthClient, getRefreshToken, getUser, revokeRefreshToken, saveOauthClient, saveRefreshToken, upsertUser } from './db.mjs';
+import { bearer, normalizeScope, now, randomId, randomToken, sha256, validRedirectUri } from './util.mjs';
 
 const CODE_TTL_MS = 5 * 60 * 1000;
 const router = express.Router();
@@ -18,12 +18,13 @@ function metadata() {
     authorization_endpoint: endpoint('/oauth/authorize'),
     token_endpoint: endpoint('/oauth/token'),
     registration_endpoint: endpoint('/oauth/register'),
+    userinfo_endpoint: endpoint('/oauth/userinfo'),
     revocation_endpoint: endpoint('/oauth/revoke'),
     response_types_supported: ['code'],
     grant_types_supported: ['authorization_code', 'refresh_token'],
     token_endpoint_auth_methods_supported: ['none'],
     code_challenge_methods_supported: ['S256'],
-    scopes_supported: ['remcp:control', 'offline_access'],
+    scopes_supported: ['openid', 'email', 'remcp:control', 'offline_access'],
   };
 }
 
@@ -32,7 +33,7 @@ function protectedResource() {
     resource: endpoint('/mcp'),
     authorization_servers: [config.publicUrl],
     bearer_methods_supported: ['header'],
-    scopes_supported: ['remcp:control', 'offline_access'],
+    scopes_supported: ['openid', 'email', 'remcp:control', 'offline_access'],
     resource_documentation: config.publicUrl,
     resource_policy_uri: endpoint('/privacy'),
     resource_tos_uri: endpoint('/terms'),
@@ -136,6 +137,24 @@ router.post('/oauth/token', tokenLimiter, async (req, res) => {
   }
 });
 
+
+router.get('/oauth/userinfo', oauthLimiter, async (req, res) => {
+  noStore(res);
+  try {
+    const token = bearer(req);
+    if (!token) throw new Error('missing_token');
+    const auth = await verifyMcpAccessToken(token);
+    const scopes = new Set(auth.scope.split(/\s+/).filter(Boolean));
+    if (!scopes.has('openid') || !scopes.has('email')) throw new Error('insufficient_scope');
+    const user = getUser(auth.uid);
+    if (!user?.email || user.email_verified !== 1) throw new Error('verified_email_required');
+    res.json({ sub: auth.uid, email: user.email, email_verified: true, ...(user.name ? { name: user.name } : {}) });
+  } catch (error) {
+    res.setHeader('WWW-Authenticate', 'Bearer error="invalid_token"');
+    res.status(401).json({ error: 'invalid_token', error_description: error.message });
+  }
+});
+
 router.post('/oauth/revoke', oauthLimiter, (req, res) => {
   const token = String(req.body?.token || '');
   if (token) revokeRefreshToken(sha256(token));