@remcp/remcp 0.1.2 → 0.1.4

package/public/app.js

@@ -1,95 +0,0 @@
-import { initializeApp } from 'https://www.gstatic.com/firebasejs/10.14.1/firebase-app.js';
-import { getAuth, GoogleAuthProvider, onAuthStateChanged, signInWithPopup, signInWithEmailAndPassword, createUserWithEmailAndPassword, signOut } from 'https://www.gstatic.com/firebasejs/10.14.1/firebase-auth.js';
-
-const cfg = await fetch(`/api/config?fresh=${Date.now()}`, { cache: 'no-store' }).then(r => r.json());
-const auth = getAuth(initializeApp(cfg.firebase));
-const $ = selector => document.querySelector(selector);
-const showError = error => { $('#auth-error').textContent = error?.message || String(error); };
-const googleProvider = new GoogleAuthProvider();
-
-$('#mcp-url').textContent = cfg.mcpUrl;
-$('#google').onclick = async () => {
-  const button = $('#google');
-  const label = button.querySelector('span');
-  button.disabled = true;
-  $('#auth-error').textContent = '';
-  label.textContent = 'Opening Google…';
-  try { await signInWithPopup(auth, googleProvider); }
-  catch (error) { showError(error); }
-  finally { button.disabled = false; label.textContent = 'Continue with Google'; }
-};
-$('#email-login').onclick = () => signInWithEmailAndPassword(auth, $('#email').value, $('#password').value).catch(showError);
-$('#email-register').onclick = () => createUserWithEmailAndPassword(auth, $('#email').value, $('#password').value).catch(showError);
-$('#logout').onclick = () => signOut(auth);
-
-document.addEventListener('click', async event => {
-  const button = event.target.closest('[data-copy]');
-  if (!button) return;
-  const target = document.querySelector(button.dataset.copy);
-  if (!target) return;
-  await navigator.clipboard.writeText(target.textContent.trim());
-  const original = button.textContent;
-  button.textContent = 'Copied';
-  setTimeout(() => { button.textContent = original; }, 1200);
-});
-async function api(path, options = {}) {
-  const token = await auth.currentUser.getIdToken();
-  const response = await fetch(path, { ...options, headers: { ...(options.headers || {}), authorization: `Bearer ${token}`, 'content-type': 'application/json' } });
-  if (!response.ok) throw new Error(await response.text());
-  return response.status === 204 ? null : response.json();
-}
-
-function deviceRow(device) {
-  const row = document.createElement('div');
-  row.className = 'device';
-  const details = document.createElement('div');
-  const name = document.createElement('strong');
-  name.textContent = device.name || 'Unnamed device';
-  const meta = document.createElement('div');
-  meta.className = 'muted';
-  meta.textContent = `${device.platform || 'unknown'} · ${device.hostname || device.id}`;
-  const status = document.createElement('div');
-  status.className = device.online ? 'online' : 'offline';
-  status.textContent = device.online ? 'Online' : 'Offline';
-  details.append(name, meta, status);
-  const revoke = document.createElement('button');
-  revoke.className = 'danger';
-  revoke.type = 'button';
-  revoke.textContent = 'Revoke';
-  revoke.setAttribute('aria-label', `Revoke ${device.name || 'device'}`);
-  revoke.onclick = async () => {
-    if (!confirm(`Revoke ${device.name || 'this device'}? It will need to be paired again before reconnecting.`)) return;
-    await api(`/api/devices/${encodeURIComponent(device.id)}`, { method: 'DELETE' });
-    await refreshDevices();
-  };
-  row.append(details, revoke);
-  return row;
-}
-
-async function refreshDevices() {
-  const data = await api('/api/me');
-  const root = $('#devices');
-  root.replaceChildren();
-  if (!data.devices.length) { root.textContent = 'No devices yet.'; return; }
-  for (const device of data.devices) root.append(deviceRow(device));
-}
-$('#pair').onclick = async () => {
-  try {
-    const pairing = await api('/api/pair/create', { method: 'POST', body: '{}' });
-    $('#pairing').classList.remove('hidden');
-    $('#pair-command').textContent = pairing.command;
-    const expiry = new Intl.DateTimeFormat(undefined, { hour: 'numeric', minute: '2-digit' }).format(new Date(pairing.expiresAt));
-    $('#pair-expiry').textContent = `Expires ${expiry}`;
-  } catch (error) { showError(error); }
-};
-
-onAuthStateChanged(auth, async user => {
-  const signedIn = Boolean(user);
-  $('#signed-out').classList.toggle('hidden', signedIn);
-  $('#signed-in').classList.toggle('hidden', !signedIn);
-  $('#dashboard').classList.toggle('hidden', !signedIn);
-  $('#auth-error').textContent = '';
-  if (!signedIn) return;
-  $('#user-label').textContent = user.email || user.uid;
-  try { await refreshDevices(); } catch (error) { showError(error); }
-});

package/public/authorize.html

@@ -1,70 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width,initial-scale=1">
-  <meta name="color-scheme" content="light">
-  <meta name="theme-color" content="#f7f7f5">
-  <title>Authorize · ReMCP</title>
-  <meta name="description" content="Authorize an MCP client to access computers paired to your ReMCP account.">
-  <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=remcp-012">
-  <meta property="og:site_name" content="ReMCP">
-  <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
-  <link rel="icon" href="/favicon.ico" sizes="any">
-  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/favicon-48x48.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="16x16" href="/remcp-darkmode-16x16.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/remcp-darkmode-32x32.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/remcp-darkmode-48x48.png" media="(prefers-color-scheme: dark)">
-  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
-  <link rel="manifest" href="/site.webmanifest">
-</head>
-<body>
-<a class="skip-link" href="#oauth-main">Skip to authorization</a>
-<header class="site-header">
-  <a class="wordmark" href="/" aria-label="ReMCP home">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </a>
-  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a></nav>
-</header>
-<main id="oauth-main" class="oauth-shell">
-  <section class="oauth-card">
-    <div id="oauth-login">
-      <p class="eyebrow">Secure authorization</p>
-      <h2 id="oauth-title">Sign in to ReMCP</h2>
-      <p class="muted">Verify your account before reviewing this MCP client’s access request.</p>
-      <button id="google" class="button google-button" type="button">
-  <svg class="google-icon" viewBox="0 0 18 18" aria-hidden="true" focusable="false">
-    <path fill="#4285F4" d="M17.64 9.205c0-.638-.057-1.252-.164-1.841H9v3.481h4.844a4.14 4.14 0 0 1-1.796 2.715v2.259h2.909c1.702-1.567 2.683-3.874 2.683-6.614Z"/>
-    <path fill="#34A853" d="M9 18c2.43 0 4.468-.806 5.957-2.181l-2.909-2.259c-.806.54-1.835.859-3.048.859-2.344 0-4.328-1.585-5.037-3.714H.956v2.332A9 9 0 0 0 9 18Z"/>
-    <path fill="#FBBC05" d="M3.963 10.705A5.41 5.41 0 0 1 3.682 9c0-.592.102-1.168.281-1.705V4.963H.956A9 9 0 0 0 0 9c0 1.452.347 2.827.956 4.037l3.007-2.332Z"/>
-    <path fill="#EA4335" d="M9 3.581c1.321 0 2.507.454 3.441 1.346l2.581-2.581C13.464.892 11.426 0 9 0A9 9 0 0 0 .956 4.963l3.007 2.332C4.672 5.166 6.656 3.581 9 3.581Z"/>
-  </svg>
-  <span>Continue with Google</span>
-</button>
-      <div class="divider"><span>or use email</span></div>
-      <label for="email">Email</label>
-      <input id="email" name="email" type="email" autocomplete="email" inputmode="email" autocapitalize="none" spellcheck="false">
-      <label for="password">Password</label>
-      <input id="password" name="password" type="password" autocomplete="current-password">
-      <div class="button-row"><button id="email-login" class="button secondary" type="button">Sign In</button><button id="email-register" class="button ghost" type="button">Create Account</button></div>
-    </div>
-    <div id="oauth-consent" class="hidden">
-      <p class="eyebrow">Access request</p>
-      <h2>Authorize ReMCP Access</h2>
-      <p class="muted">This MCP client is requesting access to operate computers paired to this ReMCP account.</p>
-      <ul class="scope-list"><li><span>Identify your ReMCP account</span><strong>openid</strong></li><li><span>Share your verified email for workspace access rules</span><strong>email</strong></li><li><span>Control paired devices</span><strong>remcp:control</strong></li><li><span>Maintain the authorized connection</span><strong>offline_access</strong></li></ul>
-      <p class="oauth-meta">Client: <span id="client-id"></span></p>
-      <div class="oauth-actions"><button id="authorize" class="button" type="button">Authorize ReMCP Access</button><a class="button ghost" href="/">Not Now</a></div>
-    </div>
-    <p id="status" class="muted" aria-live="polite"></p>
-    <p id="error" class="error" role="alert" aria-live="assertive"></p>
-    <p class="footer-mini"><a href="/docs">Docs</a> · <a href="/docs#install">Install</a> · <a href="/docs#update">Update</a> · <a href="/security">Security</a> · <a href="/privacy">Privacy</a> · <a href="/terms">Terms</a></p>
-  </section>
-</main>
-<script type="module" src="/oauth-app.js?v=36155fefb47e"></script>
-</body>
-</html>

package/public/copy.js

@@ -1,49 +0,0 @@
-function legacyCopy(text) {
-  const input = document.createElement('textarea');
-  input.value = text;
-  input.setAttribute('readonly', '');
-  input.style.position = 'fixed';
-  input.style.inset = '0 auto auto -9999px';
-  document.body.append(input);
-  input.select();
-  input.setSelectionRange(0, input.value.length);
-  const copied = document.execCommand('copy');
-  input.remove();
-  if (!copied) throw new Error('Clipboard write failed');
-}
-
-async function copyText(text) {
-  if (window.isSecureContext && navigator.clipboard?.writeText) {
-    try {
-      await navigator.clipboard.writeText(text);
-      return;
-    } catch {
-      legacyCopy(text);
-      return;
-    }
-  }
-  legacyCopy(text);
-}
-
-document.addEventListener('click', async event => {
-  const button = event.target.closest('[data-copy]');
-  if (!button) return;
-  const target = document.querySelector(button.dataset.copy);
-  if (!target) return;
-
-  const original = button.textContent;
-  const originalLabel = button.getAttribute('aria-label') || 'Copy command';
-  try {
-    await copyText(target.textContent.trim());
-    button.textContent = 'Copied';
-    button.setAttribute('aria-label', 'Copied to clipboard');
-  } catch {
-    button.textContent = 'Copy failed';
-    button.setAttribute('aria-label', 'Copy failed. Select the command manually.');
-  }
-
-  window.setTimeout(() => {
-    button.textContent = original;
-    button.setAttribute('aria-label', originalLabel);
-  }, 1400);
-});

package/public/docs.html

@@ -1,94 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width,initial-scale=1">
-  <meta name="color-scheme" content="light">
-  <meta name="theme-color" content="#f7f7f5">
-  <title>Docs · ReMCP</title>
-  <meta name="description" content="Connect a computer to ReMCP and configure the hosted MCP endpoint.">
-  <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=remcp-012">
-  <meta property="og:site_name" content="ReMCP">
-  <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
-  <link rel="icon" href="/favicon.ico" sizes="any">
-  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/favicon-48x48.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="16x16" href="/remcp-darkmode-16x16.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/remcp-darkmode-32x32.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/remcp-darkmode-48x48.png" media="(prefers-color-scheme: dark)">
-  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
-  <link rel="manifest" href="/site.webmanifest">
-</head>
-<body>
-<a class="skip-link" href="#main">Skip to content</a>
-<header class="site-header">
-  <a class="wordmark" href="/" aria-label="ReMCP home">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </a>
-  <nav aria-label="Primary"><a href="/docs" aria-current="page">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a></nav>
-</header>
-<main id="main" class="doc-shell">
-  <aside class="doc-nav" aria-label="Documentation"><a href="/docs" aria-current="page">Setup</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></aside>
-  <article class="prose">
-    <p class="eyebrow">Documentation</p>
-    <h1>Install, pair and keep ReMCP updated.</h1>
-    <p>Use <code>npx</code> once to pair a computer. With <code>--install</code>, ReMCP creates a persistent global CLI and a user service, so normal operation no longer depends on the temporary npx cache.</p>
-
-    <h2 id="requirements">1. Requirements</h2>
-    <p>Install Node.js 22.5 or newer. The computer needs outbound HTTPS/WSS access to <code>remcp.delio24.com</code>; no inbound device port is required.</p>
-
-    <h2 id="pair">2. Get a pairing code</h2>
-    <p>Open <a href="/#connect">the ReMCP workspace</a>, sign in, and choose <strong>Generate Command</strong>. Pairing codes are short-lived and single-use.</p>
-
-    <h2 id="install">3. Install and pair</h2>
-    <div class="code-row"><pre><code id="docs-command-1">npx --yes @remcp/remcp@latest connect --server https://remcp.delio24.com --code YOUR_CODE --install</code></pre><button class="copy-button code-copy" type="button" data-copy="#docs-command-1" aria-label="Copy command" aria-live="polite">Copy</button></div>
-    <p>This stores a device-specific credential locally, installs the persistent <code>remcp</code> CLI, installs the compatible local device runtime, and starts the ReMCP user service.</p>
-
-    <h3>Verify the installation</h3>
-    <div class="code-row"><pre><code id="docs-command-2">remcp --version
-remcp status</code></pre><button class="copy-button code-copy" type="button" data-copy="#docs-command-2" aria-label="Copy command" aria-live="polite">Copy</button></div>
-    <p><code>status</code> shows the installed CLI version, paired device id, server URL and server health.</p>
-
-    <h2 id="mcp">4. Add the MCP endpoint</h2>
-    <div class="code-row"><pre><code id="docs-command-3">https://remcp.delio24.com/mcp</code></pre><button class="copy-button code-copy" type="button" data-copy="#docs-command-3" aria-label="Copy MCP endpoint" aria-live="polite">Copy</button></div>
-    <p>Choose OAuth when your MCP client asks for authentication. ReMCP uses authorization code flow with PKCE and refresh tokens.</p>
-
-    <h2 id="update">Update ReMCP</h2>
-    <div class="code-row"><pre><code id="docs-command-4">remcp update</code></pre><button class="copy-button code-copy" type="button" data-copy="#docs-command-4" aria-label="Copy command" aria-live="polite">Copy</button></div>
-    <p>The update command installs the latest published ReMCP CLI, refreshes the compatible local runtime, and restarts the user service when it is installed. Verify afterwards with <code>remcp --version</code> or <code>remcp status</code>.</p>
-
-    <h2 id="service">Service commands</h2>
-    <div class="code-row"><pre><code id="docs-command-5">remcp status
-remcp doctor
-remcp install
-remcp start</code></pre><button class="copy-button code-copy" type="button" data-copy="#docs-command-5" aria-label="Copy command" aria-live="polite">Copy</button></div>
-    <p><code>start</code> runs the agent in the foreground. <code>install</code> repairs or reinstalls the persistent user service for an already paired computer.</p>
-
-    <h2 id="uninstall">Uninstall</h2>
-    <div class="code-row"><pre><code id="docs-command-6">remcp uninstall</code></pre><button class="copy-button code-copy" type="button" data-copy="#docs-command-6" aria-label="Copy command" aria-live="polite">Copy</button></div>
-    <p>This stops and removes the background user service but keeps the CLI and local pairing configuration.</p>
-    <div class="code-row"><pre><code id="docs-command-7">remcp uninstall --purge</code></pre><button class="copy-button code-copy" type="button" data-copy="#docs-command-7" aria-label="Copy command" aria-live="polite">Copy</button></div>
-    <p><code>--purge</code> also removes the globally installed ReMCP packages. The local pairing configuration remains in <code>~/.config/remcp</code> so it is not silently destroyed.</p>
-
-    <h2 id="connection-model">Connection model</h2>
-    <p>The device agent creates an outbound secure WebSocket connection to the relay. You do not need to expose a listener on the computer.</p>
-    <div class="notice"><strong>Review mutating actions.</strong><p>Some tools can write files or run processes. Review the action requested by your MCP client before approving it.</p></div>
-
-    <h2 id="self-hosting">Self-hosting</h2>
-    <p>The central ReMCP service runs in Docker with persistent account, device and OAuth metadata. Device agents run natively so host access does not require a privileged container.</p>
-  </article>
-</main>
-<footer class="site-footer">
-  <div class="wordmark">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </div>
-  <nav aria-label="Footer"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></nav>
-  <p>Open-source remote MCP infrastructure.</p>
-</footer>
-<script type="module" src="/copy.js?v=remcp-012"></script>
-</body>
-</html>

package/public/index.html

@@ -1,154 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width,initial-scale=1">
-  <meta name="color-scheme" content="light">
-  <meta name="theme-color" content="#f7f7f5">
-  <title>ReMCP — Your computers over MCP</title>
-  <meta name="description" content="Securely pair your own computers and use their files, terminal and processes through authenticated MCP clients.">
-  <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=remcp-012">
-  <meta property="og:site_name" content="ReMCP">
-  <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
-  <link rel="icon" href="/favicon.ico" sizes="any">
-  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/favicon-48x48.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="16x16" href="/remcp-darkmode-16x16.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/remcp-darkmode-32x32.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/remcp-darkmode-48x48.png" media="(prefers-color-scheme: dark)">
-  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
-  <link rel="manifest" href="/site.webmanifest">
-</head>
-<body>
-<a class="skip-link" href="#main">Skip to content</a>
-<header class="site-header">
-  <a class="wordmark" href="/" aria-label="ReMCP home">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </a>
-  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a></nav>
-</header>
-<main id="main">
-  <section class="hero">
-    <div class="hero-copy">
-      <p class="eyebrow">Remote MCP, without exposed device ports</p>
-      <h1>Your computers.<br>Available to MCP.</h1>
-      <p class="lede">Pair a device once. ReMCP routes authenticated tool calls to its local agent while the device keeps an outbound-only connection.</p>
-      <div class="hero-actions">
-        <a class="button" href="#connect">Connect a Device</a>
-        <a class="text-link" href="/docs">Read Setup Guide <span aria-hidden="true">→</span></a>
-      </div>
-    </div>
-    <div class="hero-visual" role="img" aria-label="ReMCP connection diagram">
-      <div class="node client"><span>ChatGPT / MCP client</span><b>OAuth 2.1</b></div>
-      <div class="rail" aria-hidden="true"><span></span><i>encrypted</i></div>
-      <div class="node relay"><span>ReMCP relay</span><b translate="no">remcp.delio24.com</b></div>
-      <div class="rail" aria-hidden="true"><span></span><i>outbound</i></div>
-      <div class="node device-node"><span>Your device</span><b>local agent</b><em class="pulse">online</em></div>
-    </div>
-  </section>
-
-  <section class="principles" aria-label="Product principles">
-    <div><span>01</span><h2>Private by default</h2><p>Accounts and devices are isolated by authenticated user identity and revocable device credentials.</p></div>
-    <div><span>02</span><h2>No inbound laptop port</h2><p>The device agent connects outward to ReMCP. Your laptop does not need a public IP or open listener.</p></div>
-    <div><span>03</span><h2>Explicit control</h2><p>Read, write and destructive tools declare their behavior so MCP clients can apply the right review flow.</p></div>
-  </section>
-
-  <section id="install" class="quickstart">
-    <div class="section-heading">
-      <p class="eyebrow">Quick start</p>
-      <h2>One command to pair. One command to update.</h2>
-      <p>Use npx only for the first pairing. <code>--install</code> creates a persistent <code>remcp</code> CLI and background user service.</p>
-    </div>
-    <div class="quickstart-grid">
-      <article class="command-card">
-        <span>01</span><h3>Install &amp; pair</h3>
-        <div class="command-row"><code id="install-command">npx --yes @remcp/remcp@latest connect --server https://remcp.delio24.com --code YOUR_CODE --install</code><button class="copy-button" type="button" data-copy="#install-command">Copy</button></div>
-        <p>Generate <code>YOUR_CODE</code> in the workspace below.</p>
-      </article>
-      <article class="command-card">
-        <span>02</span><h3>Check</h3>
-        <div class="command-row"><code id="status-command">remcp status</code><button class="copy-button" type="button" data-copy="#status-command">Copy</button></div>
-        <p>Confirm the local CLI version, pairing and server health.</p>
-      </article>
-      <article id="update" class="command-card">
-        <span>03</span><h3>Update</h3>
-        <div class="command-row"><code id="update-command">remcp update</code><button class="copy-button" type="button" data-copy="#update-command">Copy</button></div>
-        <p>Updates the CLI and restarts the installed user service.</p>
-      </article>
-    </div>
-    <a class="text-link" href="/docs">Full installation and CLI guide <span aria-hidden="true">→</span></a>
-  </section>
-
-  <section id="connect" class="workspace">
-    <div class="section-heading">
-      <p class="eyebrow">Workspace</p>
-      <h2>Pair and manage devices</h2>
-      <p>Sign in to generate one-time pairing commands and revoke computers you no longer trust.</p>
-    </div>
-    <div class="workspace-grid">
-      <section class="auth-pane" aria-labelledby="account-title">
-        <h3 id="account-title">Account</h3>
-        <div id="signed-out" class="stack">
-          <p class="muted">Sign in to access your ReMCP device workspace.</p>
-          <button id="google" class="button google-button" type="button">
-  <svg class="google-icon" viewBox="0 0 18 18" aria-hidden="true" focusable="false">
-    <path fill="#4285F4" d="M17.64 9.205c0-.638-.057-1.252-.164-1.841H9v3.481h4.844a4.14 4.14 0 0 1-1.796 2.715v2.259h2.909c1.702-1.567 2.683-3.874 2.683-6.614Z"/>
-    <path fill="#34A853" d="M9 18c2.43 0 4.468-.806 5.957-2.181l-2.909-2.259c-.806.54-1.835.859-3.048.859-2.344 0-4.328-1.585-5.037-3.714H.956v2.332A9 9 0 0 0 9 18Z"/>
-    <path fill="#FBBC05" d="M3.963 10.705A5.41 5.41 0 0 1 3.682 9c0-.592.102-1.168.281-1.705V4.963H.956A9 9 0 0 0 0 9c0 1.452.347 2.827.956 4.037l3.007-2.332Z"/>
-    <path fill="#EA4335" d="M9 3.581c1.321 0 2.507.454 3.441 1.346l2.581-2.581C13.464.892 11.426 0 9 0A9 9 0 0 0 .956 4.963l3.007 2.332C4.672 5.166 6.656 3.581 9 3.581Z"/>
-  </svg>
-  <span>Continue with Google</span>
-</button>
-          <div class="divider"><span>or use email</span></div>
-          <label for="email">Email</label>
-          <input id="email" name="email" type="email" autocomplete="email" inputmode="email" autocapitalize="none" spellcheck="false">
-          <label for="password">Password</label>
-          <input id="password" name="password" type="password" autocomplete="current-password">
-          <div class="button-row">
-            <button id="email-login" class="button secondary" type="button">Sign In</button>
-            <button id="email-register" class="button ghost" type="button">Create Account</button>
-          </div>
-          <p id="auth-error" class="error" role="alert" aria-live="polite"></p>
-        </div>
-        <div id="signed-in" class="hidden stack">
-          <div class="identity"><span class="status-dot" aria-hidden="true"></span><div><strong id="user-label"></strong><small>Authenticated</small></div></div>
-          <button id="logout" class="button ghost" type="button">Sign Out</button>
-        </div>
-      </section>
-      <section class="endpoint-pane" aria-labelledby="endpoint-title">
-        <div><h3 id="endpoint-title">MCP endpoint</h3><p class="muted">Use this HTTPS endpoint when adding ReMCP to an MCP client.</p></div>
-        <div class="command-row"><code id="mcp-url">https://remcp.delio24.com/mcp</code><button class="copy-button" type="button" data-copy="#mcp-url" aria-label="Copy MCP endpoint">Copy</button></div>
-        <dl class="endpoint-facts"><div><dt>Transport</dt><dd>Streamable HTTP</dd></div><div><dt>Authentication</dt><dd>OAuth 2.1 + PKCE</dd></div></dl>
-      </section>
-    </div>
-    <section id="dashboard" class="hidden device-workspace" aria-label="Device management">
-      <div class="pair-panel">
-        <div><p class="eyebrow">Add a computer</p><h3>Generate a one-time pairing command</h3><p class="muted">The code expires automatically and can only be claimed once.</p></div>
-        <button id="pair" class="button" type="button">Generate Command</button>
-        <div id="pairing" class="hidden pairing-output"><code id="pair-command"></code><button class="copy-button" type="button" data-copy="#pair-command">Copy</button><p id="pair-expiry" class="muted"></p></div>
-      </div>
-      <div class="devices-panel"><div class="panel-title"><h3>Paired devices</h3><span class="muted">Online state updates when the page refreshes.</span></div><div id="devices" class="device-list" aria-live="polite">No devices yet.</div></div>
-    </section>
-  </section>
-
-  <section class="final-cta">
-    <p class="eyebrow">Self-hostable architecture</p>
-    <h2>Keep the relay yours.</h2>
-    <p>ReMCP can run as a small Docker service while each computer runs its own local agent.</p>
-    <a class="text-link" href="/security">Review the Security Model <span aria-hidden="true">→</span></a>
-  </section>
-</main>
-<footer class="site-footer">
-  <div class="wordmark">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </div>
-  <nav aria-label="Footer"><a href="/docs">Docs</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></nav>
-  <p>Open-source remote MCP infrastructure.</p>
-</footer>
-<script type="module" src="/app.js?v=14a728f07dd1"></script>
-</body>
-</html>

package/public/oauth-app.js

@@ -1,54 +0,0 @@
-import { initializeApp } from 'https://www.gstatic.com/firebasejs/10.14.1/firebase-app.js';
-import { getAuth, GoogleAuthProvider, onAuthStateChanged, signInWithPopup, signInWithEmailAndPassword, createUserWithEmailAndPassword } from 'https://www.gstatic.com/firebasejs/10.14.1/firebase-auth.js';
-
-const cfg = await fetch(`/api/config?fresh=${Date.now()}`, { cache: 'no-store' }).then(r => r.json());
-const auth = getAuth(initializeApp(cfg.firebase));
-const query = new URLSearchParams(location.search);
-const $ = selector => document.querySelector(selector);
-const showError = error => { $('#error').textContent = error?.message || String(error); };
-let currentUser = null;
-let completing = false;
-const googleProvider = new GoogleAuthProvider();
-
-$('#client-id').textContent = query.get('client_id') || 'MCP client';
-$('#google').onclick = async () => {
-  const button = $('#google');
-  const label = button.querySelector('span');
-  button.disabled = true;
-  $('#error').textContent = '';
-  label.textContent = 'Opening Google…';
-  try { await signInWithPopup(auth, googleProvider); }
-  catch (error) { showError(error); }
-  finally { button.disabled = false; label.textContent = 'Continue with Google'; }
-};
-$('#email-login').onclick = () => signInWithEmailAndPassword(auth, $('#email').value, $('#password').value).catch(showError);
-$('#email-register').onclick = () => createUserWithEmailAndPassword(auth, $('#email').value, $('#password').value).catch(showError);
-
-onAuthStateChanged(auth, user => {
-  currentUser = user;
-  $('#oauth-login').classList.toggle('hidden', Boolean(user));
-  $('#oauth-consent').classList.toggle('hidden', !user);
-  $('#status').textContent = user ? `Signed in as ${user.email || 'ReMCP user'}. Review access before continuing.` : '';
-});
-$('#authorize').onclick = async () => {
-  if (!currentUser || completing) return;
-  completing = true;
-  $('#authorize').disabled = true;
-  $('#status').textContent = 'Authorizing…';
-  $('#error').textContent = '';
-  try {
-    const body = { id_token: await currentUser.getIdToken() };
-    for (const key of ['client_id','redirect_uri','response_type','code_challenge','code_challenge_method','scope','state','resource']) {
-      if (query.has(key)) body[key] = query.get(key);
-    }
-    const response = await fetch('/oauth/authorize/complete', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(body) });
-    const data = await response.json();
-    if (!response.ok) throw new Error(data.error_description || data.error || 'Authorization failed');
-    location.assign(data.redirect_to);
-  } catch (error) {
-    completing = false;
-    $('#authorize').disabled = false;
-    $('#status').textContent = '';
-    showError(error);
-  }
-};