npm - @remcp/remcp - Versions diffs - 0.1.3 → 0.1.4 - Mend

@remcp/remcp 0.1.3 → 0.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (56) hide show

package/README.md +54 -105
package/package.json +12 -52
package/src/agent.mjs +19 -24
package/src/cli.mjs +42 -19
package/src/runtime.mjs +15 -0
package/src/version.mjs +0 -2
package/THIRD_PARTY_NOTICES.md +0 -7
package/assets/remcp-icon.png +0 -0
package/mcp.json +0 -9
package/plugin.json +0 -37
package/public/android-chrome-192x192.png +0 -0
package/public/android-chrome-512x512.png +0 -0
package/public/app.js +0 -96
package/public/apple-touch-icon.png +0 -0
package/public/assets/art/hero-relay.webp +0 -0
package/public/assets/art/relay-detail.webp +0 -0
package/public/assets/icon-120.png +0 -0
package/public/assets/icon-16.png +0 -0
package/public/assets/icon-180.png +0 -0
package/public/assets/icon-192.png +0 -0
package/public/assets/icon-256.png +0 -0
package/public/assets/icon-32.png +0 -0
package/public/assets/icon-48.png +0 -0
package/public/assets/icon-512.png +0 -0
package/public/assets/og-remcp.png +0 -0
package/public/authorize.html +0 -59
package/public/copy.js +0 -40
package/public/docs.html +0 -93
package/public/favicon-16x16.png +0 -0
package/public/favicon-32x32.png +0 -0
package/public/favicon-48x48.png +0 -0
package/public/favicon.ico +0 -0
package/public/index.html +0 -134
package/public/oauth-app.js +0 -63
package/public/privacy.html +0 -80
package/public/remcp-darkmode-16x16.png +0 -0
package/public/remcp-darkmode-192x192.png +0 -0
package/public/remcp-darkmode-32x32.png +0 -0
package/public/remcp-darkmode-48x48.png +0 -0
package/public/remcp-darkmode-512x512.png +0 -0
package/public/security.html +0 -70
package/public/site.webmanifest +0 -23
package/public/style.css +0 -261
package/public/support.html +0 -75
package/public/terms.html +0 -77
package/skills/remcp-operator/SKILL.md +0 -36
package/src/auth.mjs +0 -71
package/src/config.mjs +0 -51
package/src/db.mjs +0 -102
package/src/mcp.mjs +0 -95
package/src/oauth.mjs +0 -164
package/src/relay.mjs +0 -97
package/src/review-sandbox.mjs +0 -96
package/src/server.mjs +0 -159
package/src/tool-catalog.json +0 -796
package/src/util.mjs +0 -24

package/public/privacy.html DELETED Viewed

@@ -1,80 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width,initial-scale=1">
-  <meta name="color-scheme" content="light">
-  <meta name="theme-color" content="#f7f7f5">
-  <title>Privacy Policy · ReMCP</title>
-  <meta name="description" content="How ReMCP processes account, device, OAuth and remote-computer data.">
-  <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=remcp-013">
-  <meta property="og:site_name" content="ReMCP">
-  <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
-  <link rel="icon" href="/favicon.ico" sizes="any">
-  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/favicon-48x48.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="16x16" href="/remcp-darkmode-16x16.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/remcp-darkmode-32x32.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/remcp-darkmode-48x48.png" media="(prefers-color-scheme: dark)">
-  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
-  <link rel="manifest" href="/site.webmanifest">
-</head>
-<body>
-<a class="skip-link" href="#main">Skip to content</a>
-<header class="site-header">
-  <a class="wordmark" href="/" aria-label="ReMCP home">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </a>
-  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a></nav>
-</header>
-<main id="main" class="doc-shell">
-  <aside class="doc-nav" aria-label="Documentation"><a href="/docs">Setup</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy" aria-current="page">Privacy</a><a href="/terms">Terms</a></aside>
-  <article class="prose">
-    <p class="eyebrow">Privacy</p>
-    <h1>Privacy Policy</h1>
-    <p><strong>Effective September 16, 2026.</strong> This policy covers the hosted ReMCP service at <code>remcp.delio24.com</code>. Self-hosted deployments are controlled by their own operators.</p>
-    <h2>Account data</h2>
-    <p>Hosted sign-in is provided by Firebase Authentication using Google or GitHub. ReMCP may receive your authentication user id, email address, email-verification status and display name. These data are used to authenticate you and separate your devices and OAuth grants from other accounts.</p>
-    <h2>Google and GitHub</h2>
-    <p>ReMCP uses Google and GitHub only as sign-in providers through Firebase Authentication. The hosted ReMCP application does not use Google access to read Gmail, Drive, Calendar or Contacts, and it does not use GitHub provider tokens to read repositories or perform GitHub actions.</p>
-    <h2>Device and OAuth metadata</h2>
-    <p>ReMCP stores device identifiers, device names, basic platform metadata, one-way hashes of device credentials, pairing records, OAuth client metadata and one-way hashes of refresh credentials. Raw reusable device credentials are not stored in plaintext by the relay.</p>
-    <h2>Files, commands and tool results</h2>
-    <p>When you invoke an MCP tool, the request and result pass through the relay to the selected device. This can include paths, file contents, command output and process information you asked ReMCP to handle. ReMCP does not intentionally retain MCP tool payloads as product data.</p>
-    <h2>Use and sharing</h2>
-    <p>Data are used to provide authentication, pairing, OAuth authorization, request routing, abuse prevention, security and reliability. ReMCP does not sell personal information and does not serve advertising. Infrastructure and authentication providers process data only as needed to operate the service.</p>
-    <h2>Retention and control</h2>
-    <p>Pairing codes expire after 10 minutes by default. MCP access tokens expire after 1 hour by default. Refresh credentials expire after 30 days by default and rotate on use. Device records remain until revoked or removed. Hosted Nginx access and error logs rotate daily with 14 rotated copies. Application container logs are limited to three files of at most 50 MB each. You can revoke paired devices from the workspace.</p>
-    <h2>Restricted data</h2>
-    <p>Do not send passwords, MFA or OTP codes, API/private keys, payment-card data, protected health information or government identifiers through ReMCP tool calls.</p>
-    <h2>Security and international processing</h2>
-    <p>ReMCP uses TLS for network transport and one-way hashes for reusable server-side credentials. Internet infrastructure and authentication providers may process data in more than one country. See the <a href="/security">Security page</a> for the current model.</p>
-    <h2>Children</h2>
-    <p>ReMCP is a developer and systems-administration tool and is not directed to children under 13.</p>
-    <h2>Changes and requests</h2>
-    <p>Material changes are published at this URL with an updated effective date. Account-data or deletion requests can be made through the <a href="/support">Support page</a>.</p>
-  </article>
-</main>
-<footer class="site-footer">
-  <div class="wordmark">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </div>
-  <nav aria-label="Footer"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></nav>
-  <p>Open-source remote MCP infrastructure.</p>
-</footer>
-</body>
-</html>

package/public/remcp-darkmode-16x16.png DELETED Viewed

Binary file

package/public/remcp-darkmode-192x192.png DELETED Viewed

Binary file

package/public/remcp-darkmode-32x32.png DELETED Viewed

Binary file

package/public/remcp-darkmode-48x48.png DELETED Viewed

Binary file

package/public/remcp-darkmode-512x512.png DELETED Viewed

Binary file

package/public/security.html DELETED Viewed

@@ -1,70 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width,initial-scale=1">
-  <meta name="color-scheme" content="light">
-  <meta name="theme-color" content="#f7f7f5">
-  <title>Security · ReMCP</title>
-  <meta name="description" content="How ReMCP isolates accounts, devices, credentials and remote MCP tool access.">
-  <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=remcp-013">
-  <meta property="og:site_name" content="ReMCP">
-  <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
-  <link rel="icon" href="/favicon.ico" sizes="any">
-  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/favicon-48x48.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="16x16" href="/remcp-darkmode-16x16.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/remcp-darkmode-32x32.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/remcp-darkmode-48x48.png" media="(prefers-color-scheme: dark)">
-  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
-  <link rel="manifest" href="/site.webmanifest">
-</head>
-<body>
-<a class="skip-link" href="#main">Skip to content</a>
-<header class="site-header">
-  <a class="wordmark" href="/" aria-label="ReMCP home">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </a>
-  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/security" aria-current="page">Security</a><a href="/support">Support</a></nav>
-</header>
-<main id="main" class="doc-shell">
-  <aside class="doc-nav" aria-label="Documentation"><a href="/docs">Setup</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security" aria-current="page">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></aside>
-  <article class="prose">
-    <p class="eyebrow">Security</p>
-    <h1>Security model.</h1>
-    <p>ReMCP is remote access infrastructure. Account identity, device credentials and tool risk are kept separate so each layer can be revoked independently.</p>
-    <h2>Account identity</h2>
-    <p>The hosted service uses Firebase Authentication with Google and GitHub sign-in. ReMCP does not provide hosted email/password sign-in. MCP authorization is scoped to the authenticated ReMCP account.</p>
-    <h2>Device pairing</h2>
-    <p>Pairing commands contain short-lived, single-use codes. A successfully paired computer receives its own random device credential; the server stores only a one-way hash of that credential.</p>
-    <h2>Network model</h2>
-    <p>The local agent opens an outbound WSS connection to the relay. The computer does not need a public IP address or inbound listening port.</p>
-    <h2>MCP authorization</h2>
-    <p>The public MCP endpoint uses OAuth authorization code flow with PKCE S256. Access tokens are short-lived and refresh credentials rotate on use.</p>
-    <h2>Tool risk</h2>
-    <p>MCP tool descriptors declare read-only, destructive and open-world hints. File writes, configuration changes and process execution can change local state; terminal commands can also reach external systems.</p>
-    <h2>Revocation</h2>
-    <p>Revoke a paired device from the workspace if it is lost, retired or no longer trusted. Revoked device credentials cannot reconnect.</p>
-    <div class="notice"><strong>Relay operator trust.</strong><p>A hosted relay can observe requests while routing them. For the highest infrastructure control, self-host ReMCP and secure that deployment as privileged infrastructure.</p></div>
-  </article>
-</main>
-<footer class="site-footer">
-  <div class="wordmark">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </div>
-  <nav aria-label="Footer"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></nav>
-  <p>Open-source remote MCP infrastructure.</p>
-</footer>
-</body>
-</html>

package/public/site.webmanifest DELETED Viewed

@@ -1,23 +0,0 @@
-{
-  "name": "ReMCP",
-  "short_name": "ReMCP",
-  "description": "Secure remote MCP access to computers you pair.",
-  "start_url": "/",
-  "display": "standalone",
-  "background_color": "#f7f6f2",
-  "theme_color": "#111114",
-  "icons": [
-    {
-      "src": "/android-chrome-192x192.png",
-      "sizes": "192x192",
-      "type": "image/png",
-      "purpose": "any"
-    },
-    {
-      "src": "/android-chrome-512x512.png",
-      "sizes": "512x512",
-      "type": "image/png",
-      "purpose": "any"
-    }
-  ]
-}

package/public/style.css DELETED Viewed

@@ -1,261 +0,0 @@
-:root {
-  --bg: #f7f7f5;
-  --surface: #ffffff;
-  --surface-subtle: #f1f1ee;
-  --ink: #171719;
-  --muted: #68686f;
-  --line: #e1e1dc;
-  --line-strong: #cfcfc8;
-  --accent: #4c50d8;
-  --accent-hover: #3f43c3;
-  --accent-soft: #f0f0ff;
-  --danger: #b42318;
-  --danger-soft: #fff2f0;
-  --ok: #16875b;
-  --ok-soft: #edf8f3;
-  --radius: 12px;
-  --container: 1180px;
-  color: var(--ink);
-  background: var(--bg);
-  font-family: ui-sans-serif, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
-  font-synthesis: none;
-  text-rendering: optimizeLegibility;
-}
-* { box-sizing: border-box; }
-html { scroll-behavior: smooth; background: var(--bg); }
-body { margin: 0; min-width: 320px; background: var(--bg); color: var(--ink); line-height: 1.55; -webkit-font-smoothing: antialiased; }
-a { color: inherit; text-decoration: none; }
-button, input { font: inherit; }
-button, a { touch-action: manipulation; -webkit-tap-highlight-color: transparent; }
-button { cursor: pointer; }
-button:disabled { cursor: not-allowed; opacity: .58; }
-img, svg { display: block; }
-.hidden { display: none !important; }
-.skip-link { position: fixed; top: 12px; left: 12px; z-index: 100; transform: translateY(-160%); padding: 10px 14px; border-radius: 8px; background: var(--ink); color: #fff; font-weight: 650; transition: transform 140ms ease; }
-.skip-link:focus { transform: translateY(0); }
-.site-header { min-height: 68px; display: flex; align-items: center; justify-content: space-between; gap: 28px; padding: 0 max(20px, calc((100vw - var(--container)) / 2)); border-bottom: 1px solid var(--line); background: rgba(247, 247, 245, .94); }
-.wordmark { display: inline-flex; align-items: center; gap: 9px; min-width: 0; font-size: 15px; font-weight: 760; letter-spacing: -.025em; }
-.wordmark span[translate="no"] { white-space: nowrap; }
-.brand-mark { width: 30px; height: 30px; flex: 0 0 30px; border-radius: 8px; }
-.site-header nav, .site-footer nav { display: flex; align-items: center; gap: 22px; }
-.site-header nav a, .site-footer nav a { color: var(--muted); font-size: 14px; font-weight: 550; }
-.site-header nav a:hover, .site-footer nav a:hover, .site-header nav a[aria-current="page"] { color: var(--ink); }
-.site-header nav a[aria-current="page"] { font-weight: 680; }
-main { display: block; }
-.hero { max-width: var(--container); min-height: 560px; margin: 0 auto; padding: clamp(64px, 8vw, 92px) 20px; display: grid; grid-template-columns: minmax(0, 1.03fr) minmax(360px, .97fr); align-items: center; gap: clamp(48px, 7vw, 96px); }
-.hero-copy { max-width: 650px; }
-.eyebrow { margin: 0 0 16px; color: var(--accent); font-size: 12px; font-weight: 760; letter-spacing: .13em; text-transform: uppercase; }
-.hero h1, .section-heading h2, .final-cta h2, .prose h1 { text-wrap: balance; }
-.hero h1 { margin: 0; max-width: 680px; font-size: clamp(52px, 6.2vw, 82px); line-height: .98; letter-spacing: -.06em; }
-.lede { max-width: 610px; margin: 25px 0 0; color: var(--muted); font-size: clamp(18px, 1.8vw, 21px); line-height: 1.58; text-wrap: pretty; }
-.hero-actions { display: flex; align-items: center; gap: 20px; flex-wrap: wrap; margin-top: 30px; }
-.button { min-height: 44px; display: inline-flex; align-items: center; justify-content: center; gap: 8px; padding: 10px 16px; border: 1px solid var(--ink); border-radius: 9px; background: var(--ink); color: #fff; font-weight: 680; line-height: 1.2; transition: background-color 140ms ease, border-color 140ms ease, color 140ms ease, transform 140ms ease; }
-.button:hover { background: #29292d; border-color: #29292d; }
-.button:active { transform: translateY(1px); }
-.button.secondary { border-color: var(--line-strong); background: var(--surface); color: var(--ink); }
-.button.secondary:hover { border-color: #b8b8b1; background: var(--surface-subtle); }
-.button.ghost { border-color: transparent; background: transparent; color: var(--muted); }
-.button.ghost:hover { border-color: var(--line); background: var(--surface-subtle); color: var(--ink); }
-.text-link { display: inline-flex; align-items: center; gap: 6px; padding: 7px 0; color: var(--ink); font-weight: 650; border-bottom: 1px solid var(--line-strong); }
-.text-link:hover { border-color: var(--ink); }
-.provider-stack { width: min(100%, 400px); display: grid; gap: 10px; margin-top: 4px; }
-.provider-button { position: relative; width: 100%; min-height: 46px; display: flex; align-items: center; justify-content: center; padding: 10px 16px 10px 48px; border-radius: 7px; font-size: 14px; font-weight: 600; line-height: 1; text-align: center; box-shadow: none; }
-.provider-button:active { transform: none; }
-.provider-icon { position: absolute; left: 14px; top: 50%; width: 20px; height: 20px; transform: translateY(-50%); }
-.google-button { border: 1px solid #747775; background: #fff; color: #1f1f1f; font-family: Roboto, Arial, sans-serif; font-weight: 500; }
-.google-button:hover { border-color: #5f6368; background: #f8fafd; color: #1f1f1f; }
-.github-button { border: 1px solid #1f2328; background: #24292f; color: #fff; }
-.github-button:hover { border-color: #1f2328; background: #1f2328; color: #fff; }
-.hero-visual { width: 100%; max-width: 520px; margin-left: auto; }
-.node { min-height: 62px; display: flex; align-items: center; justify-content: space-between; gap: 20px; padding: 17px 18px; border: 1px solid var(--line); border-radius: var(--radius); background: var(--surface); }
-.node span { font-weight: 690; }
-.node b { color: var(--muted); font-size: 12px; font-weight: 600; }
-.node.relay { border-color: #aeb0f4; background: #fbfbff; }
-.node.device-node { position: relative; padding-right: 94px; }
-.node .pulse { position: absolute; right: 16px; padding: 4px 8px; border-radius: 999px; background: var(--ok-soft); color: var(--ok); font-size: 11px; font-style: normal; font-weight: 650; }
-.rail { position: relative; height: 58px; display: grid; place-items: center; }
-.rail span { position: absolute; inset: 0 auto; width: 1px; background: var(--line-strong); }
-.rail i { position: relative; padding: 3px 8px; background: var(--bg); color: var(--muted); font-size: 11px; font-style: normal; }
-.principles { max-width: var(--container); margin: 0 auto; padding: 0 20px 72px; display: grid; grid-template-columns: repeat(3, 1fr); border-top: 1px solid var(--line); }
-.principles > div { min-height: 210px; padding: 36px 34px 0 0; }
-.principles > div + div { padding-left: 34px; border-left: 1px solid var(--line); }
-.principles span { color: var(--muted); font-size: 12px; font-variant-numeric: tabular-nums; }
-.principles h2 { margin: 28px 0 9px; font-size: 21px; line-height: 1.2; letter-spacing: -.025em; }
-.principles p { max-width: 330px; margin: 0; color: var(--muted); font-size: 15px; }
-.quickstart { max-width: var(--container); margin: 0 auto; padding: clamp(72px, 9vw, 104px) 20px; border-top: 1px solid var(--line); }
-.quickstart .section-heading { margin-left: 0; margin-right: 0; }
-.quickstart-grid { display: grid; grid-template-columns: 1.35fr .8fr .8fr; gap: 0; margin: 34px 0 26px; border-top: 1px solid var(--line); border-bottom: 1px solid var(--line); }
-.command-card { min-width: 0; padding: 28px 28px 30px 0; }
-.command-card + .command-card { padding-left: 28px; border-left: 1px solid var(--line); }
-.command-card > span { color: var(--muted); font-size: 12px; font-variant-numeric: tabular-nums; }
-.command-card h3 { margin: 18px 0 8px; font-size: 20px; letter-spacing: -.025em; }
-.command-card p { margin: 12px 0 0; color: var(--muted); font-size: 14px; }
-.site-header nav { min-width: 0; overflow-x: auto; scrollbar-width: none; }
-.site-header nav::-webkit-scrollbar { display: none; }
-.workspace { padding: clamp(72px, 9vw, 112px) 20px; border-top: 1px solid var(--line); border-bottom: 1px solid var(--line); background: var(--surface); }
-.workspace > * { max-width: var(--container); margin-left: auto; margin-right: auto; }
-.section-heading { max-width: 720px; margin-bottom: 45px; }
-.section-heading h2, .final-cta h2 { margin: 0; font-size: clamp(38px, 5vw, 58px); line-height: 1.02; letter-spacing: -.05em; }
-.section-heading > p:last-child, .final-cta > p { max-width: 620px; margin: 16px 0 0; color: var(--muted); font-size: 18px; }
-.workspace-grid { display: grid; grid-template-columns: minmax(0, .9fr) minmax(0, 1.1fr); border-top: 1px solid var(--line); border-bottom: 1px solid var(--line); }
-.auth-pane, .endpoint-pane { min-width: 0; padding: 34px 0 38px; }
-.auth-pane { padding-right: 48px; border-right: 1px solid var(--line); }
-.endpoint-pane { padding-left: 48px; }
-.auth-pane h3, .endpoint-pane h3, .pair-panel h3, .devices-panel h3, .oauth-card h2 { margin: 0 0 9px; font-size: 20px; line-height: 1.25; letter-spacing: -.025em; }
-.stack { display: flex; flex-direction: column; gap: 10px; }
-.muted { color: var(--muted); }
-.error { margin: 2px 0 0; color: var(--danger); font-size: 13px; }
-p:empty, .error:empty, #status:empty { display: none; }
-.identity { display: flex; align-items: center; gap: 11px; }
-.identity small { display: block; color: var(--muted); }
-.status-dot { width: 9px; height: 9px; flex: 0 0 9px; border-radius: 50%; background: var(--ok); box-shadow: 0 0 0 4px var(--ok-soft); }
-.copy-field { position: relative; min-width: 0; display: flex; align-items: center; margin-top: 14px; border: 1px solid var(--line-strong); border-radius: 9px; background: var(--surface); overflow: hidden; }
-.copy-field code { min-width: 0; flex: 1; overflow-x: auto; padding: 12px 48px 12px 13px; color: #2e2e33; font: 12.5px/1.55 ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; white-space: pre; scrollbar-width: thin; }
-.copy-field pre { min-width: 0; flex: 1; margin: 0; overflow: auto; }
-.copy-field pre code { display: block; }
-.copy-field.multiline { align-items: stretch; }
-.copy-field.compact { width: min(100%, 300px); margin-top: 0; }
-.copy-icon-button { position: absolute; top: 50%; right: 6px; width: 34px; height: 34px; display: grid; place-items: center; padding: 0; transform: translateY(-50%); border: 0; border-radius: 7px; background: transparent; color: #65656b; }
-.copy-icon-button:hover { background: var(--surface-subtle); color: var(--ink); }
-.copy-icon-button svg { width: 17px; height: 17px; fill: none; stroke: currentColor; stroke-width: 1.8; stroke-linecap: round; stroke-linejoin: round; }
-.copy-icon-button .icon-check { display: none; }
-.copy-icon-button[data-copied="true"] { color: var(--ok); }
-.copy-icon-button[data-copied="true"] .icon-copy { display: none; }
-.copy-icon-button[data-copied="true"] .icon-check { display: block; }
-.pairing-output { grid-column: 1 / -1; margin-top: 4px; }
-.pairing-output .copy-field { width: 100%; }
-.pairing-output p { margin: 8px 0 0; }
-.update-line { display: flex; align-items: center; gap: 14px; margin: 20px 0 24px; color: var(--muted); font-size: 13px; }
-.endpoint-facts { margin: 28px 0 0; border-top: 1px solid var(--line); }
-.endpoint-facts div { display: flex; justify-content: space-between; gap: 20px; padding: 12px 0; border-bottom: 1px solid var(--line); }
-.endpoint-facts dt { color: var(--muted); }
-.endpoint-facts dd { margin: 0; text-align: right; font-weight: 650; }
-.device-workspace { margin-top: 52px; }
-.pair-panel { display: grid; grid-template-columns: minmax(0, 1fr) auto; gap: 20px; align-items: center; padding-bottom: 34px; border-bottom: 1px solid var(--line); }
-.devices-panel { padding-top: 34px; }
-.panel-title { display: flex; align-items: baseline; justify-content: space-between; gap: 20px; }
-.device-list { margin-top: 14px; border-top: 1px solid var(--line); }
-.device { display: grid; grid-template-columns: minmax(0, 1fr) auto; align-items: center; gap: 18px; padding: 17px 0; border-bottom: 1px solid var(--line); }
-.device strong { font-size: 15px; }
-.device .muted { overflow-wrap: anywhere; font-size: 13px; }
-.online, .offline { display: inline-flex; align-items: center; gap: 6px; margin-top: 4px; font-size: 12px; }
-.online { color: var(--ok); }
-.offline { color: var(--muted); }
-.danger { min-height: 38px; padding: 8px 11px; border: 1px solid #e7c3be; border-radius: 8px; background: transparent; color: var(--danger); font-weight: 650; }
-.danger:hover { background: var(--danger-soft); }
-.final-cta { max-width: var(--container); margin: 0 auto; padding: clamp(72px, 9vw, 112px) 20px; }
-.final-cta .text-link { margin-top: 24px; }
-.site-footer { max-width: var(--container); min-height: 86px; margin: 0 auto; padding: 22px 20px; display: grid; grid-template-columns: 1fr auto 1fr; align-items: center; gap: 26px; border-top: 1px solid var(--line); font-size: 13px; }
-.site-footer p { margin: 0; color: var(--muted); text-align: right; }
-.doc-shell { width: min(100%, var(--container)); margin: 0 auto; padding: 48px 20px 76px; display: grid; grid-template-columns: 176px minmax(0, 760px); gap: clamp(36px, 6vw, 72px); }
-.doc-nav { position: sticky; top: 28px; align-self: start; display: flex; flex-direction: column; gap: 4px; }
-.doc-nav a { padding: 8px 10px; border-radius: 7px; color: var(--muted); font-size: 14px; font-weight: 550; }
-.doc-nav a:hover { background: var(--surface-subtle); color: var(--ink); }
-.doc-nav a[aria-current="page"] { background: var(--surface-subtle); color: var(--ink); font-weight: 680; }
-.prose { min-width: 0; }
-.prose h1 { margin: 0 0 18px; max-width: 700px; font-size: clamp(38px, 5vw, 54px); line-height: 1.04; letter-spacing: -.045em; }
-.prose h2 { scroll-margin-top: 24px; margin: 36px 0 9px; font-size: 23px; line-height: 1.22; letter-spacing: -.03em; }
-.prose h3 { scroll-margin-top: 24px; margin: 24px 0 7px; font-size: 17px; }
-.prose p, .prose li { color: #505057; font-size: 15.5px; text-wrap: pretty; }
-.prose p { margin: 0 0 12px; }
-.prose a { color: #3538ae; text-decoration: underline; text-decoration-color: #a5a7e9; text-underline-offset: 3px; }
-.prose a:hover { text-decoration-color: #3538ae; }
-.prose pre { margin: 0; }
-.prose .copy-field { margin: 12px 0 16px; background: #fbfbfa; }
-.prose .copy-field code { font-size: 12.5px; }
-.prose code { font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; font-size: .9em; }
-.prose :not(pre) > code { padding: 2px 5px; border-radius: 5px; background: var(--surface-subtle); color: #34343a; }
-.prose hr { margin: 46px 0; border: 0; border-top: 1px solid var(--line); }
-.prose .notice { margin: 20px 0; padding: 13px 15px; border: 1px solid #d8d8f7; border-radius: 9px; background: var(--accent-soft); }
-.prose .notice p { margin: 5px 0 0; }
-.oauth-shell { min-height: calc(100svh - 68px); display: grid; place-items: center; padding: 56px 20px 80px; }
-.oauth-card { width: min(100%, 520px); padding: 30px; border: 1px solid var(--line); border-radius: 14px; background: var(--surface); }
-.oauth-card .eyebrow { margin-bottom: 11px; }
-.oauth-card > p:first-child { margin-top: 0; }
-.oauth-card .provider-stack { width: 100%; margin-top: 20px; }
-.scope-list { margin: 24px 0; padding: 0; list-style: none; border-top: 1px solid var(--line); }
-.scope-list li { display: flex; justify-content: space-between; gap: 20px; padding: 13px 0; border-bottom: 1px solid var(--line); }
-.scope-list strong { color: var(--muted); font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; font-size: 12px; font-weight: 600; }
-.oauth-actions { display: flex; gap: 9px; margin-top: 18px; }
-.oauth-meta { overflow-wrap: anywhere; color: var(--muted); font-size: 12px; }
-.footer-mini { margin: 26px 0 0; color: var(--muted); font-size: 12px; }
-.footer-mini a { text-decoration: underline; text-underline-offset: 3px; }
-input:focus-visible, button:focus-visible, a:focus-visible { outline: 3px solid rgba(76, 80, 216, .28); outline-offset: 2px; }
-@media (max-width: 900px) {
-  .hero { min-height: auto; grid-template-columns: 1fr; padding-top: 76px; padding-bottom: 76px; }
-  .hero-copy { max-width: 700px; }
-  .hero-visual { max-width: 680px; margin: 4px 0 0; }
-  .principles { grid-template-columns: 1fr; padding-bottom: 58px; }
-  .principles > div, .principles > div + div { min-height: auto; padding: 28px 0; border-left: 0; border-bottom: 1px solid var(--line); }
-  .principles > div:last-child { border-bottom: 0; }
-  .workspace-grid { grid-template-columns: 1fr; }
-  .quickstart-grid { grid-template-columns: 1fr; }
-  .command-card, .command-card + .command-card { padding: 24px 0; border-left: 0; border-bottom: 1px solid var(--line); }
-  .command-card:last-child { border-bottom: 0; }
-  .auth-pane { padding-right: 0; border-right: 0; border-bottom: 1px solid var(--line); }
-  .endpoint-pane { padding-left: 0; }
-  .doc-shell { grid-template-columns: 1fr; gap: 0; padding-top: 34px; }
-  .doc-nav { display: none; }
-  .site-footer { grid-template-columns: 1fr; }
-  .site-footer nav { flex-wrap: wrap; }
-  .site-footer p { text-align: left; }
-}
-@media (max-width: 620px) {
-  .site-header { min-height: 62px; padding: 0 16px; }
-  .site-header { gap: 12px; }
-  .site-header nav { max-width: calc(100vw - 116px); gap: 12px; }
-  .site-header nav a { font-size: 12.5px; }
-  .hero { padding: 58px 18px 64px; }
-  .hero h1 { font-size: clamp(46px, 14vw, 60px); }
-  .hero-actions { align-items: stretch; flex-direction: column; gap: 10px; }
-  .hero-actions .button, .hero-actions .text-link { width: 100%; justify-content: center; }
-  .node { align-items: flex-start; flex-direction: column; gap: 3px; }
-  .node.device-node { padding-right: 18px; }
-  .node .pulse { top: 15px; }
-  .workspace, .final-cta, .quickstart { padding: 50px 18px; }
-  .section-heading { margin-bottom: 30px; }
-  .section-heading h2, .final-cta h2 { font-size: 36px; }
-  .section-heading > p:last-child, .final-cta > p { margin-top: 12px; font-size: 16px; }
-  .oauth-actions { flex-direction: column; }
-  .oauth-actions .button { width: 100%; }
-  .update-line { align-items: stretch; flex-direction: column; gap: 8px; }
-  .copy-field.compact { width: 100%; }
-  .pair-panel { grid-template-columns: 1fr; }
-  .pair-panel .button { justify-self: start; }
-  .panel-title { align-items: flex-start; flex-direction: column; }
-  .endpoint-facts div { align-items: flex-start; flex-direction: column; gap: 2px; }
-  .endpoint-facts dd { text-align: left; }
-  .site-footer { padding: 24px 18px; }
-  .site-footer nav { gap: 14px; }
-  .doc-shell { gap: 18px; padding: 24px 16px 56px; }
-  .prose h1 { margin-bottom: 14px; font-size: clamp(34px, 10vw, 42px); }
-  .prose h2 { margin-top: 28px; font-size: 21px; }
-  .prose h3 { margin-top: 21px; }
-  .prose p, .prose li { font-size: 15px; }
-  .oauth-shell { min-height: calc(100svh - 62px); padding: 28px 14px 60px; place-items: start center; }
-  .oauth-card { padding: 22px 18px; }
-  .scope-list li { align-items: flex-start; flex-direction: column; gap: 4px; }
-}
-@media (prefers-reduced-motion: reduce) {
-  html { scroll-behavior: auto; }
-  *, *::before, *::after { animation-duration: .01ms !important; animation-iteration-count: 1 !important; transition-duration: .01ms !important; }
-}

package/public/support.html DELETED Viewed

@@ -1,75 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width,initial-scale=1">
-  <meta name="color-scheme" content="light">
-  <meta name="theme-color" content="#f7f7f5">
-  <title>Support · ReMCP</title>
-  <meta name="description" content="Troubleshoot ReMCP sign-in, device pairing, agent connectivity and MCP authorization.">
-  <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=remcp-013">
-  <meta property="og:site_name" content="ReMCP">
-  <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
-  <link rel="icon" href="/favicon.ico" sizes="any">
-  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/favicon-48x48.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="16x16" href="/remcp-darkmode-16x16.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/remcp-darkmode-32x32.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/remcp-darkmode-48x48.png" media="(prefers-color-scheme: dark)">
-  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
-  <link rel="manifest" href="/site.webmanifest">
-</head>
-<body>
-<a class="skip-link" href="#main">Skip to content</a>
-<header class="site-header">
-  <a class="wordmark" href="/" aria-label="ReMCP home">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </a>
-  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support" aria-current="page">Support</a></nav>
-</header>
-<main id="main" class="doc-shell">
-  <aside class="doc-nav" aria-label="Documentation"><a href="/docs">Setup</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support" aria-current="page">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></aside>
-  <article class="prose">
-    <p class="eyebrow">Support</p>
-    <h1>Troubleshooting.</h1>
-    <p>Check the layer that is failing: sign-in, pairing, the local agent, or MCP authorization.</p>
-    <h2>Sign-in does not open</h2>
-    <p>Use <strong>Continue with Google</strong> or <strong>Continue with GitHub</strong>. ReMCP does not use email/password sign-in on the hosted site. If a popup is blocked, allow popups for <code>remcp.delio24.com</code> and try again.</p>
-    <h2>The <code>remcp</code> command is missing</h2>
-    <div class="copy-field"><code id="support-install">npm install --global @remcp/remcp@latest</code><button class="copy-icon-button" type="button" data-copy="#support-install" aria-label="Copy install command"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div>
-    <p>After installation, pair the computer from the signed-in workspace. The public install command alone does not pair a device.</p>
-    <h2>Pairing command expired</h2>
-    <p>Open the workspace and generate a new command. Each pairing command contains a one-time code and expires automatically.</p>
-    <h2>Device shows offline</h2>
-    <div class="copy-field"><code id="support-status">remcp status</code><button class="copy-icon-button" type="button" data-copy="#support-status" aria-label="Copy status command"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div>
-    <p>Confirm the user service is running and outbound HTTPS/WSS access to <code>remcp.delio24.com</code> is allowed. Re-pair only if the device credential was revoked or the local pairing state was removed.</p>
-    <h2>OAuth does not complete</h2>
-    <p>Return to the authorization page, sign in with the intended ReMCP account, review the requested scopes, and choose <strong>Authorize ReMCP Access</strong>.</p>
-    <h2>MCP tool cannot run</h2>
-    <p>Confirm the target device is online. A device tool needs the current ReMCP device id; clients can obtain it with <code>list_devices</code>.</p>
-    <h2>Update or repair</h2>
-    <div class="copy-field"><code id="support-update">remcp update</code><button class="copy-icon-button" type="button" data-copy="#support-update" aria-label="Copy update command"><svg class="icon-copy" viewBox="0 0 24 24" aria-hidden="true"><rect x="9" y="9" width="11" height="11" rx="2"/><path d="M15 9V6a2 2 0 0 0-2-2H6a2 2 0 0 0-2 2v7a2 2 0 0 0 2 2h3"/></svg><svg class="icon-check" viewBox="0 0 24 24" aria-hidden="true"><path d="m5 12 4 4L19 6"/></svg></button></div>
-    <p>If the CLI is paired but its background service is missing, run <code>remcp install</code>.</p>
-  </article>
-</main>
-<footer class="site-footer">
-  <div class="wordmark">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </div>
-  <nav aria-label="Footer"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></nav>
-  <p>Open-source remote MCP infrastructure.</p>
-</footer>
-<script type="module" src="/copy.js?v=remcp-013"></script>
-</body>
-</html>

package/public/terms.html DELETED Viewed

@@ -1,77 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width,initial-scale=1">
-  <meta name="color-scheme" content="light">
-  <meta name="theme-color" content="#f7f7f5">
-  <title>Terms of Service · ReMCP</title>
-  <meta name="description" content="Terms for using the hosted ReMCP service and its remote-computer capabilities.">
-  <link rel="preconnect" href="https://www.gstatic.com" crossorigin>
-  <link rel="stylesheet" href="/style.css?v=remcp-013">
-  <meta property="og:site_name" content="ReMCP">
-  <meta property="og:image" content="https://remcp.delio24.com/assets/og-remcp.png">
-  <link rel="icon" href="/favicon.ico" sizes="any">
-  <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/favicon-48x48.png" media="(prefers-color-scheme: light)">
-  <link rel="icon" type="image/png" sizes="16x16" href="/remcp-darkmode-16x16.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="32x32" href="/remcp-darkmode-32x32.png" media="(prefers-color-scheme: dark)">
-  <link rel="icon" type="image/png" sizes="48x48" href="/remcp-darkmode-48x48.png" media="(prefers-color-scheme: dark)">
-  <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
-  <link rel="manifest" href="/site.webmanifest">
-</head>
-<body>
-<a class="skip-link" href="#main">Skip to content</a>
-<header class="site-header">
-  <a class="wordmark" href="/" aria-label="ReMCP home">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </a>
-  <nav aria-label="Primary"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a></nav>
-</header>
-<main id="main" class="doc-shell">
-  <aside class="doc-nav" aria-label="Documentation"><a href="/docs">Setup</a><a href="/docs#install">Install</a><a href="/docs#update">Update</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms" aria-current="page">Terms</a></aside>
-  <article class="prose">
-    <p class="eyebrow">Legal</p>
-    <h1>Terms of Service</h1>
-    <p><strong>Effective September 16, 2026.</strong> These Terms apply to the hosted ReMCP service at <code>remcp.delio24.com</code>. The open-source software can also be self-hosted under its software licenses.</p>
-    <h2>Authorized systems only</h2>
-    <p>You may pair and control only computers and accounts that you own or are authorized to administer. You are responsible for protecting your sign-in account and revoking devices or OAuth grants you no longer trust.</p>
-    <h2>Remote actions</h2>
-    <p>ReMCP can read and modify files and can start, interact with or terminate processes. Some commands can affect external systems. Review consequential actions and maintain appropriate backups and operating-system permissions.</p>
-    <h2>Acceptable use</h2>
-    <p>Do not use ReMCP to access systems without authorization, steal credentials, distribute malware, evade security controls, interfere with other users, or violate applicable law or third-party rights.</p>
-    <h2>Sign-in providers</h2>
-    <p>The hosted service uses Firebase Authentication with Google and GitHub sign-in. Those providers and other infrastructure dependencies are governed by their own terms. ReMCP does not grant rights to third-party systems accessible from a paired computer.</p>
-    <h2>Service operation</h2>
-    <p>The hosted service may be updated, rate-limited, suspended or discontinued for security, abuse prevention, maintenance or legal reasons. Uninterrupted availability is not guaranteed. Self-hosted deployments are operated and secured by their administrators.</p>
-    <h2>Open-source software</h2>
-    <p>ReMCP and its dependencies include open-source software. Their license notices govern those software components independently of these hosted-service Terms.</p>
-    <h2>No warranty</h2>
-    <p>To the maximum extent permitted by applicable law, the service and software are provided “as is” and “as available,” without warranties of uninterrupted operation or fitness for a particular purpose. Rights that cannot legally be excluded remain unaffected.</p>
-    <h2>Responsibility for actions</h2>
-    <p>You are responsible for commands and changes made through devices you authorize. To the maximum extent permitted by law, ReMCP is not responsible for indirect or consequential loss arising from device changes, lost data, third-party systems or service interruption.</p>
-    <h2>Termination and changes</h2>
-    <p>You may stop using the service and revoke devices at any time. Access may be suspended for security, abuse or legal reasons. Material changes to these Terms will be published at this URL with a new effective date.</p>
-  </article>
-</main>
-<footer class="site-footer">
-  <div class="wordmark">
-    <img class="brand-mark" src="/android-chrome-192x192.png" width="30" height="30" alt="" aria-hidden="true">
-    <span translate="no">ReMCP</span>
-  </div>
-  <nav aria-label="Footer"><a href="/docs">Docs</a><a href="/security">Security</a><a href="/support">Support</a><a href="/privacy">Privacy</a><a href="/terms">Terms</a></nav>
-  <p>Open-source remote MCP infrastructure.</p>
-</footer>
-</body>
-</html>