@remcp/remcp 0.1.3 → 0.1.4

package/public/app.js

@@ -1,96 +0,0 @@
-import { initializeApp } from 'https://www.gstatic.com/firebasejs/10.14.1/firebase-app.js';
-import { getAuth, GoogleAuthProvider, GithubAuthProvider, onAuthStateChanged, signInWithPopup, signOut } from 'https://www.gstatic.com/firebasejs/10.14.1/firebase-auth.js';
-
-const cfg = await fetch(`/api/config?fresh=${Date.now()}`, { cache: 'no-store' }).then(r => r.json());
-const auth = getAuth(initializeApp(cfg.firebase));
-const $ = selector => document.querySelector(selector);
-const googleProvider = new GoogleAuthProvider();
-const githubProvider = new GithubAuthProvider();
-googleProvider.setCustomParameters({ prompt: 'select_account' });
-
-const friendlyAuthError = error => {
-  const code = error?.code || '';
-  if (code === 'auth/popup-closed-by-user' || code === 'auth/cancelled-popup-request') return '';
-  if (code === 'auth/account-exists-with-different-credential') return 'This email is already linked to another sign-in provider.';
-  if (code === 'auth/operation-not-allowed') return 'This sign-in provider is not enabled.';
-  return error?.message || String(error);
-};
-const showError = error => { $('#auth-error').textContent = friendlyAuthError(error); };
-
-async function signIn(button, provider, idleLabel) {
-  const label = button.querySelector('span');
-  button.disabled = true;
-  $('#auth-error').textContent = '';
-  label.textContent = 'Opening…';
-  try { await signInWithPopup(auth, provider); }
-  catch (error) { showError(error); }
-  finally { button.disabled = false; label.textContent = idleLabel; }
-}
-
-$('#mcp-url').textContent = cfg.mcpUrl;
-$('#google').onclick = () => signIn($('#google'), googleProvider, 'Continue with Google');
-$('#github').onclick = () => signIn($('#github'), githubProvider, 'Continue with GitHub');
-$('#logout').onclick = () => signOut(auth);
-
-async function api(path, options = {}) {
-  const token = await auth.currentUser.getIdToken();
-  const response = await fetch(path, { ...options, headers: { ...(options.headers || {}), authorization: `Bearer ${token}`, 'content-type': 'application/json' } });
-  if (!response.ok) throw new Error(await response.text());
-  return response.status === 204 ? null : response.json();
-}
-
-function deviceRow(device) {
-  const row = document.createElement('div');
-  row.className = 'device';
-  const details = document.createElement('div');
-  const name = document.createElement('strong');
-  name.textContent = device.name || 'Unnamed device';
-  const meta = document.createElement('div');
-  meta.className = 'muted';
-  meta.textContent = `${device.platform || 'unknown'} · ${device.hostname || device.id}`;
-  const status = document.createElement('div');
-  status.className = device.online ? 'online' : 'offline';
-  status.textContent = device.online ? 'Online' : 'Offline';
-  details.append(name, meta, status);
-  const revoke = document.createElement('button');
-  revoke.className = 'danger';
-  revoke.type = 'button';
-  revoke.textContent = 'Revoke';
-  revoke.setAttribute('aria-label', `Revoke ${device.name || 'device'}`);
-  revoke.onclick = async () => {
-    if (!confirm(`Revoke ${device.name || 'this device'}? It will need to be paired again before reconnecting.`)) return;
-    await api(`/api/devices/${encodeURIComponent(device.id)}`, { method: 'DELETE' });
-    await refreshDevices();
-  };
-  row.append(details, revoke);
-  return row;
-}
-
-async function refreshDevices() {
-  const data = await api('/api/me');
-  const root = $('#devices');
-  root.replaceChildren();
-  if (!data.devices.length) { root.textContent = 'No paired devices.'; return; }
-  for (const device of data.devices) root.append(deviceRow(device));
-}
-
-$('#pair').onclick = async () => {
-  try {
-    const pairing = await api('/api/pair/create', { method: 'POST', body: '{}' });
-    $('#pairing').classList.remove('hidden');
-    $('#pair-command').textContent = pairing.command;
-    const expiry = new Intl.DateTimeFormat(undefined, { hour: 'numeric', minute: '2-digit' }).format(new Date(pairing.expiresAt));
-    $('#pair-expiry').textContent = `One-time command · expires ${expiry}`;
-  } catch (error) { showError(error); }
-};
-
-onAuthStateChanged(auth, async user => {
-  const signedIn = Boolean(user);
-  $('#signed-out').classList.toggle('hidden', signedIn);
-  $('#signed-in').classList.toggle('hidden', !signedIn);
-  $('#dashboard').classList.toggle('hidden', !signedIn);
-  $('#auth-error').textContent = '';
-  if (!signedIn) return;
-  $('#user-label').textContent = user.email || user.displayName || user.uid;
-  try { await refreshDevices(); } catch (error) { showError(error); }
-});

package/public/authorize.html

@@ -1,59 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width,initial-scale=1">
-  <meta name="color-scheme" content="light">
-  <meta name="theme-color" content="#f7f7f5">
-  <title>Authorize · ReMCP</title>
-  <meta name="description" content="Authorize an MCP client to access computers paired to your ReMCP account.">
-  <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=remcp-013">
-  <meta property="og:site_name" content="ReMCP">
-  <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
-  <link rel="icon" href="/favicon.ico" sizes="any">
-  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/favicon-48x48.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="16x16" href="/remcp-darkmode-16x16.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/remcp-darkmode-32x32.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/remcp-darkmode-48x48.png" media="(prefers-color-scheme: dark)">
-  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
-  <link rel="manifest" href="/site.webmanifest">
-</head>
-<body>
-<a class="skip-link" href="#oauth-main">Skip to authorization</a>
-<header class="site-header">
-  <a class="wordmark" href="/" aria-label="ReMCP home">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </a>
-  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a></nav>
-</header>
-<main id="oauth-main" class="oauth-shell">
-  <section class="oauth-card">
-    <div id="oauth-login">
-      <p class="eyebrow">Secure authorization</p>
-      <h2 id="oauth-title">Sign in to ReMCP</h2>
-      <p class="muted">Continue with Google or GitHub, then review the MCP client’s access request.</p>
-      <div class="provider-stack">
-        <button id="google" class="provider-button google-button" type="button"><svg class="provider-icon" viewBox="0 0 18 18" aria-hidden="true"><path fill="#4285F4" d="M17.64 9.205c0-.638-.057-1.252-.164-1.841H9v3.481h4.844a4.14 4.14 0 0 1-1.796 2.715v2.259h2.909c1.702-1.567 2.683-3.874 2.683-6.614Z"/><path fill="#34A853" d="M9 18c2.43 0 4.468-.806 5.957-2.181l-2.909-2.259c-.806.54-1.835.859-3.048.859-2.344 0-4.328-1.585-5.037-3.714H.956v2.332A9 9 0 0 0 9 18Z"/><path fill="#FBBC05" d="M3.963 10.705A5.41 5.41 0 0 1 3.682 9c0-.592.102-1.168.281-1.705V4.963H.956A9 9 0 0 0 0 9c0 1.452.347 2.827.956 4.037l3.007-2.332Z"/><path fill="#EA4335" d="M9 3.581c1.321 0 2.507.454 3.441 1.346l2.581-2.581C13.464.892 11.426 0 9 0A9 9 0 0 0 .956 4.963l3.007 2.332C4.672 5.166 6.656 3.581 9 3.581Z"/></svg><span>Continue with Google</span></button>
-        <button id="github" class="provider-button github-button" type="button"><svg class="provider-icon" viewBox="0 0 24 24" aria-hidden="true"><path fill="currentColor" d="M12 .7a11.5 11.5 0 0 0-3.64 22.41c.58.11.79-.25.79-.56v-2.24c-3.22.7-3.9-1.37-3.9-1.37-.53-1.34-1.29-1.7-1.29-1.7-1.05-.72.08-.71.08-.71 1.16.08 1.77 1.19 1.77 1.19 1.04 1.77 2.72 1.26 3.38.96.1-.75.4-1.26.73-1.55-2.57-.29-5.27-1.29-5.27-5.68 0-1.26.45-2.29 1.19-3.1-.12-.29-.52-1.47.11-3.06 0 0 .97-.31 3.16 1.18a10.9 10.9 0 0 1 5.76 0c2.19-1.49 3.16-1.18 3.16-1.18.63 1.59.23 2.77.11 3.06.74.81 1.19 1.84 1.19 3.1 0 4.4-2.71 5.38-5.29 5.67.42.36.79 1.07.79 2.16v3.21c0 .31.21.68.8.56A11.5 11.5 0 0 0 12 .7Z"/></svg><span>Continue with GitHub</span></button>
-      </div>
-    </div>
-    <div id="oauth-consent" class="hidden">
-      <p class="eyebrow">Access request</p>
-      <h2>Authorize ReMCP Access</h2>
-      <p class="muted">This MCP client is requesting access to operate computers paired to this ReMCP account.</p>
-      <ul class="scope-list"><li><span>Identify your ReMCP account</span><strong>openid</strong></li><li><span>Share your verified email for workspace access rules</span><strong>email</strong></li><li><span>Control paired devices</span><strong>remcp:control</strong></li><li><span>Maintain the authorized connection</span><strong>offline_access</strong></li></ul>
-      <p class="oauth-meta">Client: <span id="client-id"></span></p>
-      <div class="oauth-actions"><button id="authorize" class="button" type="button">Authorize ReMCP Access</button><a class="button ghost" href="/">Not Now</a></div>
-    </div>
-    <p id="status" class="muted" aria-live="polite"></p>
-    <p id="error" class="error" role="alert" aria-live="assertive"></p>
-    <p class="footer-mini"><a href="/docs">Docs</a> · <a href="/security">Security</a> · <a href="/privacy">Privacy</a> · <a href="/terms">Terms</a></p>
-  </section>
-</main>
-<script type="module" src="/oauth-app.js?v=remcp-013"></script>
-</body>
-</html>

package/public/copy.js

@@ -1,40 +0,0 @@
-function legacyCopy(text) {
-  const input = document.createElement('textarea');
-  input.value = text;
-  input.setAttribute('readonly', '');
-  input.style.position = 'fixed';
-  input.style.inset = '0 auto auto -9999px';
-  document.body.append(input);
-  input.select();
-  input.setSelectionRange(0, input.value.length);
-  const copied = document.execCommand('copy');
-  input.remove();
-  if (!copied) throw new Error('Clipboard write failed');
-}
-
-async function copyText(text) {
-  if (window.isSecureContext && navigator.clipboard?.writeText) {
-    try { await navigator.clipboard.writeText(text); return; } catch {}
-  }
-  legacyCopy(text);
-}
-
-document.addEventListener('click', async event => {
-  const button = event.target.closest('[data-copy]');
-  if (!button) return;
-  const target = document.querySelector(button.dataset.copy);
-  if (!target) return;
-  const text = ('value' in target ? target.value : target.textContent).trim();
-  const label = button.getAttribute('aria-label') || 'Copy';
-  try {
-    await copyText(text);
-    button.dataset.copied = 'true';
-    button.setAttribute('aria-label', 'Copied');
-  } catch {
-    button.setAttribute('aria-label', 'Copy failed');
-  }
-  window.setTimeout(() => {
-    delete button.dataset.copied;
-    button.setAttribute('aria-label', label);
-  }, 1400);
-});

package/public/docs.html

@@ -1,93 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width,initial-scale=1">
-  <meta name="color-scheme" content="light">
-  <meta name="theme-color" content="#f7f7f5">
-  <title>Docs · ReMCP</title>
-  <meta name="description" content="Connect a computer to ReMCP and configure the hosted MCP endpoint.">
-  <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=remcp-013">
-  <meta property="og:site_name" content="ReMCP">
-  <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
-  <link rel="icon" href="/favicon.ico" sizes="any">
-  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/favicon-48x48.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="16x16" href="/remcp-darkmode-16x16.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/remcp-darkmode-32x32.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/remcp-darkmode-48x48.png" media="(prefers-color-scheme: dark)">
-  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
-  <link rel="manifest" href="/site.webmanifest">
-</head>
-<body>
-<a class="skip-link" href="#main">Skip to content</a>
-<header class="site-header">
-  <a class="wordmark" href="/" aria-label="ReMCP home">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </a>
-  <nav aria-label="Primary"><a href="/docs" aria-current="page">Docs</a><a href="/security">Security</a><a href="/support">Support</a></nav>
-</header>
-<main id="main" class="doc-shell">
-  <aside class="doc-nav" aria-label="Documentation"><a href="/docs" aria-current="page">Setup</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></aside>
-  <article class="prose">
-    <p class="eyebrow">Documentation</p>
-    <h1>Install and pair ReMCP.</h1>
-    <p>Install the CLI first. Pairing happens from the signed-in workspace, which generates the real one-time command for your computer.</p>
-
-    <h2 id="requirements">Requirements</h2>
-    <p>Node.js 22.5 or newer. The computer needs outbound HTTPS/WSS access to <code>remcp.delio24.com</code>. No inbound device port is required.</p>
-
-    <h2 id="install">1. Install the CLI</h2>
-    <div class="copy-field"><code id="docs-install">npm install --global @remcp/remcp@latest</code><button class="copy-icon-button" type="button" data-copy="#docs-install" aria-label="Copy install command"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div>
-    <p>This installs the <code>remcp</code> command. It does not pair a computer and does not contain a placeholder code.</p>
-
-    <h2 id="pair">2. Pair a computer</h2>
-    <p>Open the <a href="/#connect">ReMCP workspace</a>, continue with Google or GitHub, and choose <strong>Generate pairing command</strong>. Run that exact generated command on the computer you want to pair.</p>
-    <div class="notice"><strong>Use the generated command.</strong><p>Pairing codes are short-lived and single-use. Do not type a made-up code or reuse an expired command.</p></div>
-
-    <h2 id="verify">3. Verify</h2>
-    <div class="copy-field multiline"><pre><code id="docs-verify">remcp --version
-remcp status</code></pre><button class="copy-icon-button" type="button" data-copy="#docs-verify" aria-label="Copy verification commands"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div>
-    <p><code>status</code> shows the installed CLI version, pairing state and server health.</p>
-
-    <h2 id="mcp">4. Add the MCP endpoint</h2>
-    <div class="copy-field"><code id="docs-mcp">https://remcp.delio24.com/mcp</code><button class="copy-icon-button" type="button" data-copy="#docs-mcp" aria-label="Copy MCP endpoint"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div>
-    <p>Add this endpoint to your MCP client and use OAuth when prompted. ReMCP uses authorization code flow with PKCE and refresh-token rotation.</p>
-
-    <h2 id="update">Update</h2>
-    <div class="copy-field"><code id="docs-update">remcp update</code><button class="copy-icon-button" type="button" data-copy="#docs-update" aria-label="Copy update command"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div>
-    <p>Updates the installed ReMCP CLI and compatible local runtime, then restarts the user service when present.</p>
-
-    <h2 id="service">Service commands</h2>
-    <div class="copy-field multiline"><pre><code id="docs-service">remcp status
-remcp doctor
-remcp install
-remcp start</code></pre><button class="copy-icon-button" type="button" data-copy="#docs-service" aria-label="Copy service commands"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div>
-    <p><code>install</code> installs or repairs the background user service for an already paired computer. <code>start</code> runs the agent in the foreground.</p>
-
-    <h2 id="uninstall">Uninstall</h2>
-    <div class="copy-field"><code id="docs-uninstall">remcp uninstall</code><button class="copy-icon-button" type="button" data-copy="#docs-uninstall" aria-label="Copy uninstall command"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div>
-    <p>Removes the background service. To also remove globally installed ReMCP packages:</p>
-    <div class="copy-field"><code id="docs-purge">remcp uninstall --purge</code><button class="copy-icon-button" type="button" data-copy="#docs-purge" aria-label="Copy purge command"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div>
-
-    <h2 id="connection-model">Connection model</h2>
-    <p>The device agent opens an outbound secure WebSocket connection to the relay. MCP clients connect to the HTTPS MCP endpoint through OAuth. Only devices paired to the signed-in account are exposed to that account.</p>
-
-    <h2 id="self-hosting">Self-hosting</h2>
-    <p>The server can be self-hosted with Docker. Keep it behind TLS, persist its data volume, and proxy WebSocket upgrades for the device-agent route. See the repository README for deployment variables.</p>
-  </article>
-</main>
-<footer class="site-footer">
-  <div class="wordmark">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </div>
-  <nav aria-label="Footer"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></nav>
-  <p>Open-source remote MCP infrastructure.</p>
-</footer>
-<script type="module" src="/copy.js?v=remcp-013"></script>
-</body>
-</html>

package/public/index.html

@@ -1,134 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width,initial-scale=1">
-  <meta name="color-scheme" content="light">
-  <meta name="theme-color" content="#f7f7f5">
-  <title>ReMCP — Your computers over MCP</title>
-  <meta name="description" content="Securely pair your own computers and use their files, terminal and processes through authenticated MCP clients.">
-  <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=remcp-013">
-  <meta property="og:site_name" content="ReMCP">
-  <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
-  <link rel="icon" href="/favicon.ico" sizes="any">
-  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/favicon-48x48.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="16x16" href="/remcp-darkmode-16x16.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/remcp-darkmode-32x32.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/remcp-darkmode-48x48.png" media="(prefers-color-scheme: dark)">
-  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
-  <link rel="manifest" href="/site.webmanifest">
-</head>
-<body>
-<a class="skip-link" href="#main">Skip to content</a>
-<header class="site-header">
-  <a class="wordmark" href="/" aria-label="ReMCP home">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </a>
-  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a></nav>
-</header>
-<main id="main">
-  <section class="hero">
-    <div class="hero-copy">
-      <p class="eyebrow">Remote MCP for your computers</p>
-      <h1>Use your computers from any MCP client.</h1>
-      <p class="lede">ReMCP pairs a computer to one authenticated MCP endpoint. The local agent connects outbound, so the computer does not need a public port.</p>
-      <div class="hero-actions">
-        <a class="button" href="#connect">Open workspace</a>
-        <a class="text-link" href="/docs">Read docs <span aria-hidden="true">→</span></a>
-      </div>
-    </div>
-    <div class="hero-visual" role="img" aria-label="ReMCP connection diagram">
-      <div class="node client"><span>ChatGPT / MCP client</span><b>OAuth 2.1</b></div>
-      <div class="rail" aria-hidden="true"><span></span><i>encrypted</i></div>
-      <div class="node relay"><span>ReMCP relay</span><b translate="no">remcp.delio24.com</b></div>
-      <div class="rail" aria-hidden="true"><span></span><i>outbound</i></div>
-      <div class="node device-node"><span>Your device</span><b>local agent</b><em class="pulse">online</em></div>
-    </div>
-  </section>
-
-  <section class="principles" aria-label="Connection facts">
-    <div><span>Connection</span><h2>Outbound only</h2><p>The device agent opens the connection to ReMCP. No inbound device port is required.</p></div>
-    <div><span>Authentication</span><h2>OAuth + PKCE</h2><p>MCP clients authorize against your ReMCP account. Device credentials are independent and revocable.</p></div>
-    <div><span>Control</span><h2>Your paired devices</h2><p>Tool calls are routed only to computers paired with the signed-in account.</p></div>
-  </section>
-
-  <section id="install" class="quickstart">
-    <div class="section-heading">
-      <p class="eyebrow">Setup</p>
-      <h2>Install first. Pair from the workspace.</h2>
-      <p>The public install command contains no pairing code. Sign in below to generate the exact one-time command for your computer.</p>
-    </div>
-    <div class="quickstart-grid">
-      <article class="command-card">
-        <span>01</span><h3>Install the CLI</h3>
-        <div class="copy-field"><code id="install-command">npm install --global @remcp/remcp@latest</code><button class="copy-icon-button" type="button" data-copy="#install-command" aria-label="Copy install command"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div>
-        <p>Installs the current <code>remcp</code> command globally.</p>
-      </article>
-      <article class="command-card">
-        <span>02</span><h3>Pair a computer</h3>
-        <p>Sign in to the workspace, choose <strong>Generate pairing command</strong>, then run the generated command on that computer.</p>
-      </article>
-      <article class="command-card">
-        <span>03</span><h3>Verify</h3>
-        <div class="copy-field"><code id="status-command">remcp status</code><button class="copy-icon-button" type="button" data-copy="#status-command" aria-label="Copy status command"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div>
-        <p>Checks the installed version, pairing state and server health.</p>
-      </article>
-    </div>
-    <div class="update-line"><span>Already installed?</span><div class="copy-field compact"><code id="update-command">remcp update</code><button class="copy-icon-button" type="button" data-copy="#update-command" aria-label="Copy update command"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div></div>
-    <a class="text-link" href="/docs">Installation and CLI reference <span aria-hidden="true">→</span></a>
-  </section>
-
-  <section id="connect" class="workspace">
-    <div class="section-heading">
-      <p class="eyebrow">Workspace</p>
-      <h2>Workspace</h2>
-      <p>Sign in with Google or GitHub to generate pairing commands and manage your devices.</p>
-    </div>
-    <div class="workspace-grid">
-      <section class="auth-pane" aria-labelledby="account-title">
-        <h3 id="account-title">Account</h3>
-        <div id="signed-out" class="stack">
-          <p class="muted">Sign in to manage your paired computers.</p>
-          <div class="provider-stack">
-            <button id="google" class="provider-button google-button" type="button"><svg class="provider-icon" viewBox="0 0 18 18" aria-hidden="true"><path fill="#4285F4" d="M17.64 9.205c0-.638-.057-1.252-.164-1.841H9v3.481h4.844a4.14 4.14 0 0 1-1.796 2.715v2.259h2.909c1.702-1.567 2.683-3.874 2.683-6.614Z"/><path fill="#34A853" d="M9 18c2.43 0 4.468-.806 5.957-2.181l-2.909-2.259c-.806.54-1.835.859-3.048.859-2.344 0-4.328-1.585-5.037-3.714H.956v2.332A9 9 0 0 0 9 18Z"/><path fill="#FBBC05" d="M3.963 10.705A5.41 5.41 0 0 1 3.682 9c0-.592.102-1.168.281-1.705V4.963H.956A9 9 0 0 0 0 9c0 1.452.347 2.827.956 4.037l3.007-2.332Z"/><path fill="#EA4335" d="M9 3.581c1.321 0 2.507.454 3.441 1.346l2.581-2.581C13.464.892 11.426 0 9 0A9 9 0 0 0 .956 4.963l3.007 2.332C4.672 5.166 6.656 3.581 9 3.581Z"/></svg><span>Continue with Google</span></button>
-            <button id="github" class="provider-button github-button" type="button"><svg class="provider-icon" viewBox="0 0 24 24" aria-hidden="true"><path fill="currentColor" d="M12 .7a11.5 11.5 0 0 0-3.64 22.41c.58.11.79-.25.79-.56v-2.24c-3.22.7-3.9-1.37-3.9-1.37-.53-1.34-1.29-1.7-1.29-1.7-1.05-.72.08-.71.08-.71 1.16.08 1.77 1.19 1.77 1.19 1.04 1.77 2.72 1.26 3.38.96.1-.75.4-1.26.73-1.55-2.57-.29-5.27-1.29-5.27-5.68 0-1.26.45-2.29 1.19-3.1-.12-.29-.52-1.47.11-3.06 0 0 .97-.31 3.16 1.18a10.9 10.9 0 0 1 5.76 0c2.19-1.49 3.16-1.18 3.16-1.18.63 1.59.23 2.77.11 3.06.74.81 1.19 1.84 1.19 3.1 0 4.4-2.71 5.38-5.29 5.67.42.36.79 1.07.79 2.16v3.21c0 .31.21.68.8.56A11.5 11.5 0 0 0 12 .7Z"/></svg><span>Continue with GitHub</span></button>
-          </div>
-          <p id="auth-error" class="error" role="alert" aria-live="polite"></p>
-        </div>
-        <div id="signed-in" class="hidden stack">
-          <div class="identity"><span class="status-dot" aria-hidden="true"></span><div><strong id="user-label"></strong><small>Authenticated</small></div></div>
-          <button id="logout" class="button ghost" type="button">Sign Out</button>
-        </div>
-      </section>
-      <section class="endpoint-pane" aria-labelledby="endpoint-title">
-        <div><h3 id="endpoint-title">MCP endpoint</h3><p class="muted">Use this HTTPS endpoint when adding ReMCP to an MCP client.</p></div>
-        <div class="copy-field"><code id="mcp-url">https://remcp.delio24.com/mcp</code><button class="copy-icon-button" type="button" data-copy="#mcp-url" aria-label="Copy MCP endpoint"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div>
-        <dl class="endpoint-facts"><div><dt>Transport</dt><dd>Streamable HTTP</dd></div><div><dt>Authentication</dt><dd>OAuth 2.1 + PKCE</dd></div></dl>
-      </section>
-    </div>
-    <section id="dashboard" class="hidden device-workspace" aria-label="Device management">
-      <div class="pair-panel">
-        <div><p class="eyebrow">Add a computer</p><h3>Generate pairing command</h3><p class="muted">The generated command contains a short-lived one-time code. Run it only on the computer you want to pair.</p></div>
-        <button id="pair" class="button" type="button">Generate pairing command</button>
-        <div id="pairing" class="hidden pairing-output"><div class="copy-field"><code id="pair-command"></code><button class="copy-icon-button" type="button" data-copy="#pair-command" aria-label="Copy pairing command"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div><p id="pair-expiry" class="muted"></p></div>
-      </div>
-      <div class="devices-panel"><div class="panel-title"><h3>Paired devices</h3><span class="muted">Online state updates when the page refreshes.</span></div><div id="devices" class="device-list" aria-live="polite">No devices yet.</div></div>
-    </section>
-  </section>
-</main>
-<footer class="site-footer">
-  <div class="wordmark">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </div>
-  <nav aria-label="Footer"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></nav>
-  <p>Open-source remote MCP infrastructure.</p>
-</footer>
-<script type="module" src="/copy.js?v=remcp-013"></script>
-<script type="module" src="/app.js?v=remcp-013"></script>
-</body>
-</html>

package/public/oauth-app.js

@@ -1,63 +0,0 @@
-import { initializeApp } from 'https://www.gstatic.com/firebasejs/10.14.1/firebase-app.js';
-import { getAuth, GoogleAuthProvider, GithubAuthProvider, onAuthStateChanged, signInWithPopup } from 'https://www.gstatic.com/firebasejs/10.14.1/firebase-auth.js';
-
-const cfg = await fetch(`/api/config?fresh=${Date.now()}`, { cache: 'no-store' }).then(r => r.json());
-const auth = getAuth(initializeApp(cfg.firebase));
-const query = new URLSearchParams(location.search);
-const $ = selector => document.querySelector(selector);
-const googleProvider = new GoogleAuthProvider();
-const githubProvider = new GithubAuthProvider();
-googleProvider.setCustomParameters({ prompt: 'select_account' });
-let currentUser = null;
-let completing = false;
-
-const showError = error => {
-  const code = error?.code || '';
-  if (code === 'auth/popup-closed-by-user' || code === 'auth/cancelled-popup-request') return;
-  $('#error').textContent = code === 'auth/account-exists-with-different-credential'
-    ? 'This email is already linked to another sign-in provider.'
-    : error?.message || String(error);
-};
-async function signIn(button, provider, idleLabel) {
-  const label = button.querySelector('span');
-  button.disabled = true;
-  $('#error').textContent = '';
-  label.textContent = 'Opening…';
-  try { await signInWithPopup(auth, provider); }
-  catch (error) { showError(error); }
-  finally { button.disabled = false; label.textContent = idleLabel; }
-}
-
-$('#client-id').textContent = query.get('client_id') || 'MCP client';
-$('#google').onclick = () => signIn($('#google'), googleProvider, 'Continue with Google');
-$('#github').onclick = () => signIn($('#github'), githubProvider, 'Continue with GitHub');
-
-onAuthStateChanged(auth, user => {
-  currentUser = user;
-  $('#oauth-login').classList.toggle('hidden', Boolean(user));
-  $('#oauth-consent').classList.toggle('hidden', !user);
-  $('#status').textContent = user ? `Signed in as ${user.email || user.displayName || 'ReMCP user'}.` : '';
-});
-
-$('#authorize').onclick = async () => {
-  if (!currentUser || completing) return;
-  completing = true;
-  $('#authorize').disabled = true;
-  $('#status').textContent = 'Authorizing…';
-  $('#error').textContent = '';
-  try {
-    const body = { id_token: await currentUser.getIdToken() };
-    for (const key of ['client_id','redirect_uri','response_type','code_challenge','code_challenge_method','scope','state','resource']) {
-      if (query.has(key)) body[key] = query.get(key);
-    }
-    const response = await fetch('/oauth/authorize/complete', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(body) });
-    const data = await response.json();
-    if (!response.ok) throw new Error(data.error_description || data.error || 'Authorization failed');
-    location.assign(data.redirect_to);
-  } catch (error) {
-    completing = false;
-    $('#authorize').disabled = false;
-    $('#status').textContent = '';
-    showError(error);
-  }
-};