@remcp/remcp 0.1.0

package/public/style.css

@@ -0,0 +1,231 @@
+:root {
+  --bg: #f7f7f5;
+  --surface: #ffffff;
+  --surface-subtle: #f1f1ee;
+  --ink: #171719;
+  --muted: #68686f;
+  --line: #e1e1dc;
+  --line-strong: #cfcfc8;
+  --accent: #4c50d8;
+  --accent-hover: #3f43c3;
+  --accent-soft: #f0f0ff;
+  --danger: #b42318;
+  --danger-soft: #fff2f0;
+  --ok: #16875b;
+  --ok-soft: #edf8f3;
+  --radius: 12px;
+  --container: 1180px;
+  color: var(--ink);
+  background: var(--bg);
+  font-family: ui-sans-serif, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  font-synthesis: none;
+  text-rendering: optimizeLegibility;
+}
+
+* { box-sizing: border-box; }
+html { scroll-behavior: smooth; background: var(--bg); }
+body { margin: 0; min-width: 320px; background: var(--bg); color: var(--ink); line-height: 1.55; -webkit-font-smoothing: antialiased; }
+a { color: inherit; text-decoration: none; }
+button, input { font: inherit; }
+button, a { touch-action: manipulation; -webkit-tap-highlight-color: transparent; }
+button { cursor: pointer; }
+button:disabled { cursor: not-allowed; opacity: .58; }
+img, svg { display: block; }
+.hidden { display: none !important; }
+
+.skip-link { position: fixed; top: 12px; left: 12px; z-index: 100; transform: translateY(-160%); padding: 10px 14px; border-radius: 8px; background: var(--ink); color: #fff; font-weight: 650; transition: transform 140ms ease; }
+.skip-link:focus { transform: translateY(0); }
+
+.site-header { min-height: 68px; display: flex; align-items: center; justify-content: space-between; gap: 28px; padding: 0 max(20px, calc((100vw - var(--container)) / 2)); border-bottom: 1px solid var(--line); background: rgba(247, 247, 245, .94); }
+.wordmark { display: inline-flex; align-items: center; gap: 9px; min-width: 0; font-size: 15px; font-weight: 760; letter-spacing: -.025em; }
+.wordmark span[translate="no"] { white-space: nowrap; }
+.brand-mark { width: 30px; height: 30px; flex: 0 0 30px; border-radius: 8px; }
+.site-header nav, .site-footer nav { display: flex; align-items: center; gap: 22px; }
+.site-header nav a, .site-footer nav a { color: var(--muted); font-size: 14px; font-weight: 550; }
+.site-header nav a:hover, .site-footer nav a:hover, .site-header nav a[aria-current="page"] { color: var(--ink); }
+.site-header nav a[aria-current="page"] { font-weight: 680; }
+
+main { display: block; }
+.hero { max-width: var(--container); min-height: 650px; margin: 0 auto; padding: clamp(72px, 9vw, 112px) 20px; display: grid; grid-template-columns: minmax(0, 1.03fr) minmax(360px, .97fr); align-items: center; gap: clamp(48px, 7vw, 96px); }
+.hero-copy { max-width: 650px; }
+.eyebrow { margin: 0 0 16px; color: var(--accent); font-size: 12px; font-weight: 760; letter-spacing: .13em; text-transform: uppercase; }
+.hero h1, .section-heading h2, .final-cta h2, .prose h1 { text-wrap: balance; }
+.hero h1 { margin: 0; max-width: 680px; font-size: clamp(52px, 6.2vw, 82px); line-height: .98; letter-spacing: -.06em; }
+.lede { max-width: 610px; margin: 25px 0 0; color: var(--muted); font-size: clamp(18px, 1.8vw, 21px); line-height: 1.58; text-wrap: pretty; }
+.hero-actions { display: flex; align-items: center; gap: 20px; flex-wrap: wrap; margin-top: 30px; }
+
+.button { min-height: 44px; display: inline-flex; align-items: center; justify-content: center; gap: 8px; padding: 10px 16px; border: 1px solid var(--ink); border-radius: 9px; background: var(--ink); color: #fff; font-weight: 680; line-height: 1.2; transition: background-color 140ms ease, border-color 140ms ease, color 140ms ease, transform 140ms ease; }
+.button:hover { background: #29292d; border-color: #29292d; }
+.button:active { transform: translateY(1px); }
+.button.secondary { border-color: var(--line-strong); background: var(--surface); color: var(--ink); }
+.button.secondary:hover { border-color: #b8b8b1; background: var(--surface-subtle); }
+.button.ghost { border-color: transparent; background: transparent; color: var(--muted); }
+.button.ghost:hover { border-color: var(--line); background: var(--surface-subtle); color: var(--ink); }
+.text-link { display: inline-flex; align-items: center; gap: 6px; padding: 7px 0; color: var(--ink); font-weight: 650; border-bottom: 1px solid var(--line-strong); }
+.text-link:hover { border-color: var(--ink); }
+
+.google-button { position: relative; width: min(100%, 400px); min-height: 44px; padding: 9px 16px 9px 44px; border: 1px solid #747775; border-radius: 4px; background: #fff; color: #1f1f1f; font-family: Roboto, Arial, sans-serif; font-size: 14px; font-weight: 500; letter-spacing: .1px; box-shadow: none; }
+.google-button:hover { border-color: #6f7274; background: #f8fafd; color: #1f1f1f; }
+.google-button:active { background: #f1f3f4; transform: none; }
+.google-icon { position: absolute; left: 12px; top: 50%; width: 20px; height: 20px; transform: translateY(-50%); }
+
+.hero-visual { width: 100%; max-width: 520px; margin-left: auto; }
+.node { min-height: 62px; display: flex; align-items: center; justify-content: space-between; gap: 20px; padding: 17px 18px; border: 1px solid var(--line); border-radius: var(--radius); background: var(--surface); }
+.node span { font-weight: 690; }
+.node b { color: var(--muted); font-size: 12px; font-weight: 600; }
+.node.relay { border-color: #aeb0f4; background: #fbfbff; }
+.node.device-node { position: relative; padding-right: 94px; }
+.node .pulse { position: absolute; right: 16px; padding: 4px 8px; border-radius: 999px; background: var(--ok-soft); color: var(--ok); font-size: 11px; font-style: normal; font-weight: 650; }
+.rail { position: relative; height: 58px; display: grid; place-items: center; }
+.rail span { position: absolute; inset: 0 auto; width: 1px; background: var(--line-strong); }
+.rail i { position: relative; padding: 3px 8px; background: var(--bg); color: var(--muted); font-size: 11px; font-style: normal; }
+
+.principles { max-width: var(--container); margin: 0 auto; padding: 0 20px 72px; display: grid; grid-template-columns: repeat(3, 1fr); border-top: 1px solid var(--line); }
+.principles > div { min-height: 210px; padding: 36px 34px 0 0; }
+.principles > div + div { padding-left: 34px; border-left: 1px solid var(--line); }
+.principles span { color: var(--muted); font-size: 12px; font-variant-numeric: tabular-nums; }
+.principles h2 { margin: 28px 0 9px; font-size: 21px; line-height: 1.2; letter-spacing: -.025em; }
+.principles p { max-width: 330px; margin: 0; color: var(--muted); font-size: 15px; }
+
+.workspace { padding: clamp(72px, 9vw, 112px) 20px; border-top: 1px solid var(--line); border-bottom: 1px solid var(--line); background: var(--surface); }
+.workspace > * { max-width: var(--container); margin-left: auto; margin-right: auto; }
+.section-heading { max-width: 720px; margin-bottom: 45px; }
+.section-heading h2, .final-cta h2 { margin: 0; font-size: clamp(38px, 5vw, 58px); line-height: 1.02; letter-spacing: -.05em; }
+.section-heading > p:last-child, .final-cta > p { max-width: 620px; margin: 16px 0 0; color: var(--muted); font-size: 18px; }
+.workspace-grid { display: grid; grid-template-columns: minmax(0, .9fr) minmax(0, 1.1fr); border-top: 1px solid var(--line); border-bottom: 1px solid var(--line); }
+.auth-pane, .endpoint-pane { min-width: 0; padding: 34px 0 38px; }
+.auth-pane { padding-right: 48px; border-right: 1px solid var(--line); }
+.endpoint-pane { padding-left: 48px; }
+.auth-pane h3, .endpoint-pane h3, .pair-panel h3, .devices-panel h3, .oauth-card h2 { margin: 0 0 9px; font-size: 20px; line-height: 1.25; letter-spacing: -.025em; }
+.stack { display: flex; flex-direction: column; gap: 10px; }
+.muted { color: var(--muted); }
+label { display: block; margin: 10px 0 6px; color: #343438; font-size: 13px; font-weight: 650; }
+.stack label { margin: 3px 0 -4px; }
+input { width: 100%; min-height: 44px; padding: 10px 12px; border: 1px solid var(--line-strong); border-radius: 8px; background: var(--surface); color: var(--ink); transition: border-color 140ms ease, box-shadow 140ms ease; }
+input:hover { border-color: #b9b9b2; }
+input:focus-visible { border-color: var(--accent); }
+.button-row { display: flex; gap: 9px; margin-top: 5px; }
+.divider { display: flex; align-items: center; gap: 11px; margin: 7px 0; color: var(--muted); font-size: 12px; }
+.divider::before, .divider::after { content: ""; flex: 1; height: 1px; background: var(--line); }
+.error { min-height: 20px; margin: 2px 0 0; color: var(--danger); font-size: 13px; }
+.identity { display: flex; align-items: center; gap: 11px; }
+.identity small { display: block; color: var(--muted); }
+.status-dot { width: 9px; height: 9px; flex: 0 0 9px; border-radius: 50%; background: var(--ok); box-shadow: 0 0 0 4px var(--ok-soft); }
+
+.command-row, .pairing-output { display: grid; grid-template-columns: minmax(0, 1fr) auto; gap: 9px; align-items: start; margin-top: 20px; }
+.command-row code, .pairing-output code, .code-block { overflow: auto; padding: 12px 13px; border: 1px solid var(--line); border-radius: 8px; background: var(--surface-subtle); font: 12.5px/1.55 ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; word-break: break-all; }
+.copy-button { min-height: 42px; padding: 9px 12px; border: 1px solid var(--line-strong); border-radius: 8px; background: var(--surface); color: var(--ink); font-weight: 650; }
+.copy-button:hover { background: var(--surface-subtle); }
+.endpoint-facts { margin: 28px 0 0; border-top: 1px solid var(--line); }
+.endpoint-facts div { display: flex; justify-content: space-between; gap: 20px; padding: 12px 0; border-bottom: 1px solid var(--line); }
+.endpoint-facts dt { color: var(--muted); }
+.endpoint-facts dd { margin: 0; text-align: right; font-weight: 650; }
+.device-workspace { margin-top: 52px; }
+.pair-panel { display: grid; grid-template-columns: minmax(0, 1fr) auto; gap: 20px; align-items: center; padding-bottom: 34px; border-bottom: 1px solid var(--line); }
+.pairing-output { grid-column: 1 / -1; }
+.pairing-output p { grid-column: 1 / -1; margin: 0; }
+.devices-panel { padding-top: 34px; }
+.panel-title { display: flex; align-items: baseline; justify-content: space-between; gap: 20px; }
+.device-list { margin-top: 14px; border-top: 1px solid var(--line); }
+.device { display: grid; grid-template-columns: minmax(0, 1fr) auto; align-items: center; gap: 18px; padding: 17px 0; border-bottom: 1px solid var(--line); }
+.device strong { font-size: 15px; }
+.device .muted { overflow-wrap: anywhere; font-size: 13px; }
+.online, .offline { display: inline-flex; align-items: center; gap: 6px; margin-top: 4px; font-size: 12px; }
+.online { color: var(--ok); }
+.offline { color: var(--muted); }
+.danger { min-height: 38px; padding: 8px 11px; border: 1px solid #e7c3be; border-radius: 8px; background: transparent; color: var(--danger); font-weight: 650; }
+.danger:hover { background: var(--danger-soft); }
+
+.final-cta { max-width: var(--container); margin: 0 auto; padding: clamp(72px, 9vw, 112px) 20px; }
+.final-cta .text-link { margin-top: 24px; }
+.site-footer { max-width: var(--container); min-height: 86px; margin: 0 auto; padding: 22px 20px; display: grid; grid-template-columns: 1fr auto 1fr; align-items: center; gap: 26px; border-top: 1px solid var(--line); font-size: 13px; }
+.site-footer p { margin: 0; color: var(--muted); text-align: right; }
+
+.doc-shell { width: min(100%, var(--container)); margin: 0 auto; padding: 64px 20px 112px; display: grid; grid-template-columns: 190px minmax(0, 760px); gap: clamp(48px, 8vw, 96px); }
+.doc-nav { position: sticky; top: 28px; align-self: start; display: flex; flex-direction: column; gap: 4px; }
+.doc-nav a { padding: 8px 10px; border-radius: 7px; color: var(--muted); font-size: 14px; font-weight: 550; }
+.doc-nav a:hover { background: var(--surface-subtle); color: var(--ink); }
+.doc-nav a[aria-current="page"] { background: var(--surface-subtle); color: var(--ink); font-weight: 680; }
+.prose { min-width: 0; }
+.prose h1 { margin: 0 0 22px; max-width: 740px; font-size: clamp(42px, 5.5vw, 62px); line-height: 1.02; letter-spacing: -.05em; }
+.prose h2 { scroll-margin-top: 28px; margin: 52px 0 12px; font-size: 25px; line-height: 1.2; letter-spacing: -.035em; }
+.prose h3 { scroll-margin-top: 28px; margin: 31px 0 8px; font-size: 18px; }
+.prose p, .prose li { color: #505057; font-size: 16px; text-wrap: pretty; }
+.prose p { margin: 0 0 16px; }
+.prose a { color: #3538ae; text-decoration: underline; text-decoration-color: #a5a7e9; text-underline-offset: 3px; }
+.prose a:hover { text-decoration-color: #3538ae; }
+.prose pre { overflow: auto; margin: 18px 0 24px; padding: 16px; border-radius: 10px; background: #1e1e21; color: #f4f4f2; }
+.prose code { font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; font-size: .9em; }
+.prose :not(pre) > code { padding: 2px 5px; border-radius: 5px; background: var(--surface-subtle); color: #34343a; }
+.prose hr { margin: 46px 0; border: 0; border-top: 1px solid var(--line); }
+.prose .notice { margin: 28px 0; padding: 16px 18px; border: 1px solid #d8d8f7; border-radius: 9px; background: var(--accent-soft); }
+.prose .notice p { margin: 5px 0 0; }
+
+.oauth-shell { min-height: calc(100svh - 68px); display: grid; place-items: center; padding: 56px 20px 80px; }
+.oauth-card { width: min(100%, 520px); padding: 30px; border: 1px solid var(--line); border-radius: 14px; background: var(--surface); }
+.oauth-card .eyebrow { margin-bottom: 11px; }
+.oauth-card > p:first-child { margin-top: 0; }
+.oauth-card .google-button { width: 100%; }
+.scope-list { margin: 24px 0; padding: 0; list-style: none; border-top: 1px solid var(--line); }
+.scope-list li { display: flex; justify-content: space-between; gap: 20px; padding: 13px 0; border-bottom: 1px solid var(--line); }
+.scope-list strong { color: var(--muted); font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; font-size: 12px; font-weight: 600; }
+.oauth-actions { display: flex; gap: 9px; margin-top: 18px; }
+.oauth-meta { overflow-wrap: anywhere; color: var(--muted); font-size: 12px; }
+.footer-mini { margin: 26px 0 0; color: var(--muted); font-size: 12px; }
+.footer-mini a { text-decoration: underline; text-underline-offset: 3px; }
+
+input:focus-visible, button:focus-visible, a:focus-visible { outline: 3px solid rgba(76, 80, 216, .28); outline-offset: 2px; }
+
+@media (max-width: 900px) {
+  .hero { min-height: auto; grid-template-columns: 1fr; padding-top: 76px; padding-bottom: 76px; }
+  .hero-copy { max-width: 700px; }
+  .hero-visual { max-width: 680px; margin: 4px 0 0; }
+  .principles { grid-template-columns: 1fr; padding-bottom: 58px; }
+  .principles > div, .principles > div + div { min-height: auto; padding: 28px 0; border-left: 0; border-bottom: 1px solid var(--line); }
+  .principles > div:last-child { border-bottom: 0; }
+  .workspace-grid { grid-template-columns: 1fr; }
+  .auth-pane { padding-right: 0; border-right: 0; border-bottom: 1px solid var(--line); }
+  .endpoint-pane { padding-left: 0; }
+  .doc-shell { grid-template-columns: 1fr; gap: 38px; padding-top: 42px; }
+  .doc-nav { position: static; flex-direction: row; flex-wrap: wrap; gap: 4px; padding-bottom: 18px; border-bottom: 1px solid var(--line); }
+  .site-footer { grid-template-columns: 1fr; }
+  .site-footer nav { flex-wrap: wrap; }
+  .site-footer p { text-align: left; }
+}
+
+@media (max-width: 620px) {
+  .site-header { min-height: 62px; padding: 0 16px; }
+  .site-header { gap: 12px; }
+  .site-header nav { gap: 10px; }
+  .site-header nav a { font-size: 12.5px; }
+  .hero { padding: 58px 18px 64px; }
+  .hero h1 { font-size: clamp(46px, 14vw, 60px); }
+  .hero-actions { align-items: stretch; flex-direction: column; gap: 10px; }
+  .hero-actions .button, .hero-actions .text-link { width: 100%; justify-content: center; }
+  .node { align-items: flex-start; flex-direction: column; gap: 3px; }
+  .node.device-node { padding-right: 18px; }
+  .node .pulse { top: 15px; }
+  .workspace, .final-cta { padding-left: 18px; padding-right: 18px; }
+  .button-row, .oauth-actions { flex-direction: column; }
+  .button-row .button, .oauth-actions .button { width: 100%; }
+  .pair-panel { grid-template-columns: 1fr; }
+  .pair-panel .button { justify-self: start; }
+  .panel-title { align-items: flex-start; flex-direction: column; }
+  .command-row, .pairing-output { grid-template-columns: 1fr; }
+  .copy-button { justify-self: start; }
+  .endpoint-facts div { align-items: flex-start; flex-direction: column; gap: 2px; }
+  .endpoint-facts dd { text-align: left; }
+  .site-footer { padding: 24px 18px; }
+  .site-footer nav { gap: 14px; }
+  .doc-shell { padding: 34px 18px 80px; }
+  .doc-nav { overflow-x: auto; flex-wrap: nowrap; margin: 0 -18px; padding: 0 18px 16px; }
+  .doc-nav a { white-space: nowrap; }
+  .oauth-shell { min-height: calc(100svh - 62px); padding: 28px 14px 60px; place-items: start center; }
+  .oauth-card { padding: 22px 18px; }
+  .scope-list li { align-items: flex-start; flex-direction: column; gap: 4px; }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  html { scroll-behavior: auto; }
+  *, *::before, *::after { animation-duration: .01ms !important; animation-iteration-count: 1 !important; transition-duration: .01ms !important; }
+}

package/public/support.html

@@ -0,0 +1,57 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <meta name="color-scheme" content="light">
+  <meta name="theme-color" content="#f7f7f5">
+  <title>Support · ReMCP</title>
+  <meta name="description" content="Troubleshoot ReMCP sign-in, device pairing, agent connectivity and MCP authorization.">
+  <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
+  <link rel="stylesheet" href="/style.css?v=b92ac4c9219a">
+  <meta property="og:site_name" content="ReMCP">
+  <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
+  <link rel="icon" href="/favicon.ico" sizes="any">
+  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" media="(prefers-color-scheme: light)">
+  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" media="(prefers-color-scheme: light)">
+  <link rel="icon" type="image/png" sizes="48x48" href="/favicon-48x48.png" media="(prefers-color-scheme: light)">
+  <link rel="icon" type="image/png" sizes="16x16" href="/remcp-darkmode-16x16.png" media="(prefers-color-scheme: dark)">
+  <link rel="icon" type="image/png" sizes="32x32" href="/remcp-darkmode-32x32.png" media="(prefers-color-scheme: dark)">
+  <link rel="icon" type="image/png" sizes="48x48" href="/remcp-darkmode-48x48.png" media="(prefers-color-scheme: dark)">
+  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
+  <link rel="manifest" href="/site.webmanifest">
+</head>
+<body>
+<a class="skip-link" href="#main">Skip to content</a>
+<header class="site-header">
+  <a class="wordmark" href="/" aria-label="ReMCP home">
+    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
+    <span translate="no">ReMCP</span>
+  </a>
+  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support" aria-current="page">Support</a></nav>
+</header>
+<main id="main" class="doc-shell">
+  <aside class="doc-nav" aria-label="Documentation"><a href="/docs">Setup</a><a href="/security">Security</a><a href="/support" aria-current="page">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></aside>
+  <article class="prose">
+    <p class="eyebrow">Support</p>
+    <h1>Troubleshoot ReMCP.</h1>
+    <p>Most connection failures fall into one of three layers: account authentication, device pairing, or the local device agent.</p>
+<h2>Device shows offline</h2><p>Verify the ReMCP agent service is running and outbound HTTPS/WSS access to <code>remcp.delio24.com</code> is allowed. Re-pair the device if its credential was revoked.</p>
+<h2>OAuth does not complete</h2><p>Return to the authorization screen, sign in to the intended ReMCP account, review the requested access, and choose <strong>Authorize ReMCP Access</strong>.</p>
+<h2>MCP tool cannot run</h2><p>Confirm the target computer is online and use <code>list_devices</code> to obtain its current device id. Device tools require that id.</p>
+<h2>Pairing code expired</h2><p>Generate a new pairing command from the workspace. Pairing codes are intentionally short-lived and single-use.</p>
+<h2>Need deployment help?</h2><p>For a self-hosted deployment, contact the operator who provisioned your ReMCP instance and include the affected layer: sign-in, pairing, agent connectivity, or MCP authorization.</p>
+  </article>
+</main>
+<footer class="site-footer">
+  <div class="wordmark">
+    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
+    <span translate="no">ReMCP</span>
+  </div>
+  <nav aria-label="Footer">
+    <a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a>
+  </nav>
+  <p>Open-source remote MCP infrastructure.</p>
+</footer>
+</body>
+</html>

package/public/terms.html

@@ -0,0 +1,62 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <meta name="color-scheme" content="light">
+  <meta name="theme-color" content="#f7f7f5">
+  <title>Terms of Service · ReMCP</title>
+  <meta name="description" content="Terms for using the hosted ReMCP service and its remote-computer capabilities.">
+  <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
+  <link rel="stylesheet" href="/style.css?v=b92ac4c9219a">
+  <meta property="og:site_name" content="ReMCP">
+  <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
+  <link rel="icon" href="/favicon.ico" sizes="any">
+  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" media="(prefers-color-scheme: light)">
+  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" media="(prefers-color-scheme: light)">
+  <link rel="icon" type="image/png" sizes="48x48" href="/favicon-48x48.png" media="(prefers-color-scheme: light)">
+  <link rel="icon" type="image/png" sizes="16x16" href="/remcp-darkmode-16x16.png" media="(prefers-color-scheme: dark)">
+  <link rel="icon" type="image/png" sizes="32x32" href="/remcp-darkmode-32x32.png" media="(prefers-color-scheme: dark)">
+  <link rel="icon" type="image/png" sizes="48x48" href="/remcp-darkmode-48x48.png" media="(prefers-color-scheme: dark)">
+  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
+  <link rel="manifest" href="/site.webmanifest">
+</head>
+<body>
+<a class="skip-link" href="#main">Skip to content</a>
+<header class="site-header">
+  <a class="wordmark" href="/" aria-label="ReMCP home">
+    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
+    <span translate="no">ReMCP</span>
+  </a>
+  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a></nav>
+</header>
+<main id="main" class="doc-shell">
+  <aside class="doc-nav" aria-label="Legal and policy navigation"><a href="/docs">Setup</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms" aria-current="page">Terms</a></aside>
+  <article class="prose">
+    <p class="eyebrow">Legal</p>
+    <h1>Terms of Service</h1>
+    <p><strong>Effective September 16, 2026.</strong> These Terms apply to the hosted ReMCP service at remcp.delio24.com. The open-source software may also be self-hosted under its applicable software license.</p>
+<h2>Your account and devices</h2><p>You may connect only computers and accounts that you own or are authorized to administer. You are responsible for protecting your sign-in account, reviewing paired devices, and revoking devices or OAuth grants you no longer trust.</p>
+<h2>Remote actions</h2><p>ReMCP can expose powerful local operations, including reading and modifying files and starting or terminating processes. Some actions can be destructive or can affect external systems when a command run on your computer reaches them. You are responsible for reviewing and authorizing requested actions and for maintaining appropriate backups and operating-system permissions.</p>
+<h2>Acceptable use</h2><p>You may not use ReMCP to access systems without authorization, distribute malware, evade security controls, interfere with other users, conduct credential theft, or violate applicable law or third-party rights. You may not attempt to access devices belonging to another ReMCP account.</p>
+<h2>Service operation</h2><p>The hosted service may be updated, rate-limited, suspended or discontinued to protect users, respond to abuse, maintain security or operate the service. ReMCP does not guarantee uninterrupted availability. Self-hosted deployments are operated and secured by their administrators.</p>
+<h2>Third-party services and software</h2><p>Authentication may rely on Firebase/Google, and device functionality may rely on open-source dependencies. Those services and packages are subject to their own terms and licenses. ReMCP does not grant rights to third-party systems that you access from a paired device.</p>
+<h2>Open-source software</h2><p>The ReMCP source distribution includes software under open-source licenses. License notices in the source distribution govern those components independently of these hosted-service Terms.</p>
+<h2>No warranty</h2><p>To the maximum extent permitted by applicable law, the service and software are provided on an “as is” and “as available” basis without warranties of uninterrupted operation, fitness for a particular purpose, or freedom from all defects. Nothing in these Terms limits rights that cannot legally be excluded.</p>
+<h2>Responsibility for losses</h2><p>You are responsible for commands and changes made through devices you authorize. To the maximum extent permitted by applicable law, ReMCP is not responsible for indirect, incidental or consequential losses arising from device changes, lost data, third-party systems or service interruptions. Mandatory consumer or statutory rights remain unaffected.</p>
+<h2>Termination</h2><p>You may stop using the service and revoke your devices at any time. Access may be suspended for security, abuse or legal reasons. Provisions that by their nature should survive termination, including responsibility for prior actions and license obligations, continue to apply.</p>
+<h2>Changes</h2><p>Material changes to these Terms will be published at this URL with a new effective date. Continued use after changes become effective constitutes acceptance where permitted by law.</p>
+  </article>
+</main>
+<footer class="site-footer">
+  <div class="wordmark">
+    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
+    <span translate="no">ReMCP</span>
+  </div>
+  <nav aria-label="Footer">
+    <a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a>
+  </nav>
+  <p>Open-source remote MCP infrastructure.</p>
+</footer>
+</body>
+</html>

package/skills/remcp-operator/SKILL.md

@@ -0,0 +1,36 @@
+---
+name: remcp-operator
+description: Safely operate computers paired through ReMCP. Use when the user asks to inspect or change files, directories, local processes, terminal sessions, or ReMCP device state on one of their paired computers.
+---
+
+# ReMCP Operator
+
+Use ReMCP only when the request actually needs a paired computer. Do not invoke ReMCP for general knowledge, writing, weather, web research, or conceptual questions that can be answered without the user's device.
+
+## Device selection
+
+1. Call `list_devices` before the first device operation unless a current ReMCP device id is already unambiguous in the conversation.
+2. Prefer an online device whose user-facing name or hostname matches the request.
+3. If more than one online device plausibly matches and choosing the wrong machine could change state, ask the user which device to use.
+
+## Read before write
+
+Inspect the smallest amount of device state needed to understand the request before changing it. Prefer `list_directory`, `get_file_info`, `read_file`, `list_processes`, or existing process output before a write or terminal mutation.
+## Changes
+
+- Use the narrowest tool that performs the requested change. Prefer `edit_block`, `write_file`, or `move_file` over a shell command when the dedicated tool expresses the action clearly.
+- Do not broaden a requested path, command, or target without a reason tied to the user's task.
+- Treat `set_config_value`, file replacement, process termination, and generic terminal commands as state-changing actions.
+- Generic terminal commands may also affect external services. Keep commands scoped to the user's stated goal and surface consequential effects before execution when they are not already clear from the request.
+
+## Verification
+
+After a change, use the cheapest relevant read to verify the result. Examples: re-read the edited range, list the destination directory after a move, or read process output after starting a command.
+
+## Long-running processes
+
+Use `start_process` once and then `read_process_output` or `interact_with_process` for the existing session. Avoid starting duplicate long-running processes just to obtain new output.
+
+## Out-of-scope requests
+
+Do not use ReMCP to access a computer the user has not paired or is not authorized to control. Do not ask for passwords, MFA codes, private keys, or other credentials through ReMCP tool inputs.

package/src/agent.mjs

@@ -0,0 +1,89 @@
+import os from 'node:os';
+import { existsSync } from 'node:fs';
+import path from 'node:path';
+import process from 'node:process';
+import { fileURLToPath } from 'node:url';
+import WebSocket from 'ws';
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
+
+function desktopCommanderEntry() {
+  try { return fileURLToPath(import.meta.resolve('@wonderwhy-er/desktop-commander')); } catch {}
+  const configured = String(process.env.REMCP_DESKTOP_COMMANDER_ENTRY || '').trim();
+  const candidates = [
+    configured,
+    '/usr/lib/node_modules/@wonderwhy-er/desktop-commander/dist/index.js',
+    '/usr/local/lib/node_modules/@wonderwhy-er/desktop-commander/dist/index.js',
+    path.join(os.homedir(), '.hermes/node/lib/node_modules/@wonderwhy-er/desktop-commander/dist/index.js'),
+  ].filter(Boolean);
+  for (const candidate of candidates) if (existsSync(candidate)) return candidate;
+  throw new Error('@wonderwhy-er/desktop-commander is not installed');
+}
+
+export async function runAgent(options) {
+  const serverUrl = String(options.serverUrl || '').replace(/\/$/, '');
+  const deviceToken = String(options.deviceToken || '');
+  const deviceId = String(options.deviceId || '');
+  const deviceName = String(options.deviceName || os.hostname());
+  if (!serverUrl || !deviceToken || !deviceId) throw new Error('serverUrl, deviceToken and deviceId are required');
+  const agentUrl = serverUrl.replace(/^http/, 'ws') + '/agent';
+  const reconnectMs = Number(options.reconnectMs || 3000);
+  let stopping = false;
+  let activeSocket;
+
+  const mcp = new Client({ name: 'remcp-agent', version: '0.1.0' });
+  const transport = new StdioClientTransport({ command: process.execPath, args: [desktopCommanderEntry()] });
+  await mcp.connect(transport);
+  console.log('Local Desktop Commander MCP ready');
+
+  async function respond(ws, message) {
+    try {
+      let result;
+      if (message.method === 'tools/list') result = await mcp.listTools();
+      else if (message.method === 'tools/call') result = await mcp.callTool(message.params);
+      else if (message.method === 'ping') result = { ok: true, hostname: os.hostname(), platform: process.platform, arch: process.arch, uptimeSeconds: Math.floor(os.uptime()) };
+      else throw new Error(`Unsupported relay method: ${message.method}`);
+      ws.send(JSON.stringify({ type: 'response', id: message.id, result }));
+    } catch (error) {
+      ws.send(JSON.stringify({ type: 'response', id: message.id, error: { message: error instanceof Error ? error.message : String(error) } }));
+    }
+  }
+
+  function connect() {
+    if (stopping) return;
+    const ws = new WebSocket(agentUrl, { headers: { Authorization: `Bearer ${deviceToken}` } });
+    activeSocket = ws;
+    ws.on('open', () => {
+      ws.send(JSON.stringify({ type: 'hello', deviceId, deviceName, hostname: os.hostname(), platform: process.platform, arch: process.arch, agentVersion: '0.1.0' }));
+      console.log(`Connected to ${agentUrl} as ${deviceName} (${deviceId})`);
+    });
+    ws.on('message', raw => {
+      let message;
+      try { message = JSON.parse(raw.toString()); } catch { return; }
+      if (message?.type === 'request') void respond(ws, message);
+    });
+    ws.on('close', () => { if (!stopping) setTimeout(connect, reconnectMs); });
+    ws.on('error', error => console.error(`ReMCP relay: ${error.message}`));
+  }
+
+  async function stop() {
+    if (stopping) return;
+    stopping = true;
+    try { activeSocket?.close(); } catch {}
+    try { await mcp.close(); } catch {}
+    try { await transport.close(); } catch {}
+  }
+  process.once('SIGINT', () => void stop().finally(() => process.exit(0)));
+  process.once('SIGTERM', () => void stop().finally(() => process.exit(0)));
+  connect();
+  return { stop };
+}
+
+if (import.meta.url === `file://${process.argv[1]}` && process.env.REMCP_SERVER_URL) {
+  await runAgent({
+    serverUrl: process.env.REMCP_SERVER_URL,
+    deviceToken: process.env.REMCP_DEVICE_TOKEN,
+    deviceId: process.env.REMCP_DEVICE_ID,
+    deviceName: process.env.REMCP_DEVICE_NAME,
+  });
+}

package/src/auth.mjs

@@ -0,0 +1,70 @@
+import { createRemoteJWKSet, jwtVerify, SignJWT } from 'jose';
+import { config } from './config.mjs';
+import { bearer } from './util.mjs';
+import { upsertUser } from './db.mjs';
+
+const firebaseJwks = createRemoteJWKSet(new URL('https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com'));
+const signingKey = new TextEncoder().encode(config.tokenSecret);
+
+export async function verifyFirebaseToken(token) {
+  const { payload } = await jwtVerify(token, firebaseJwks, {
+    issuer: `https://securetoken.google.com/${config.firebaseProjectId}`,
+    audience: config.firebaseProjectId,
+  });
+  if (!payload.sub) throw new Error('Firebase token has no subject');
+  const email = typeof payload.email === 'string' ? payload.email.toLowerCase() : '';
+  const uid = config.ownerEmail && email === config.ownerEmail ? `owner:${config.ownerEmail}` : payload.sub;
+  return {
+    uid,
+    firebaseUid: payload.sub,
+    email,
+    name: typeof payload.name === 'string' ? payload.name : '',
+  };
+}
+
+export async function requireFirebase(req, res, next) {
+  try {
+    const token = bearer(req);
+    if (!token) return res.status(401).json({ error: 'firebase_auth_required' });
+    const user = await verifyFirebaseToken(token);
+    upsertUser(user);
+    req.user = user;
+    next();
+  } catch (error) {
+    res.status(401).json({ error: 'invalid_firebase_token', message: error.message });
+  }
+}
+
+export async function signMcpAccessToken({ uid, clientId, scope }) {
+  return new SignJWT({ scope, client_id: clientId, typ: 'remcp_access' })
+    .setProtectedHeader({ alg: 'HS256' })
+    .setIssuer(config.publicUrl)
+    .setAudience(`${config.publicUrl}/mcp`)
+    .setSubject(uid)
+    .setIssuedAt()
+    .setExpirationTime(`${config.accessTtlSeconds}s`)
+    .sign(signingKey);
+}
+
+export async function verifyMcpAccessToken(token) {
+  const { payload } = await jwtVerify(token, signingKey, {
+    issuer: config.publicUrl,
+    audience: `${config.publicUrl}/mcp`,
+  });
+  if (payload.typ !== 'remcp_access' || !payload.sub) throw new Error('Invalid ReMCP access token');
+  return { uid: payload.sub, scope: String(payload.scope || ''), clientId: String(payload.client_id || '') };
+}
+
+export async function requireMcpAuth(req, res, next) {
+  try {
+    const token = bearer(req);
+    if (!token) throw new Error('missing_token');
+    const auth = await verifyMcpAccessToken(token);
+    if (!auth.scope.split(/\s+/).includes('remcp:control')) throw new Error('missing_scope');
+    req.mcpAuth = auth;
+    next();
+  } catch {
+    res.setHeader('WWW-Authenticate', `Bearer resource_metadata="${config.publicUrl}/.well-known/oauth-protected-resource/mcp"`);
+    res.status(401).json({ error: 'unauthorized' });
+  }
+}