@thinremote/thinr-cli 1.1.0-alpha.1 → 1.1.0

package/CHANGELOG.md

@@ -70,6 +70,11 @@ consistent error taxonomy across both interfaces.
 - Bad `-i key=value` values surface as a clean Commander
   `InvalidArgumentError` instead of a stack trace.
 - Node.js engine requirement bumped to **`>=18`**; `.nvmrc` pinned to 20.
+- The MCP server's `initialize` response now reports the CLI's
+  `package.json` version in `serverInfo.version` (was hardcoded).
+- Runtime dependencies refreshed, including majors: `@inquirer/prompts`
+  7 → 8, `conf` 14 → 15, `open` 10 → 11, `ora` 8 → 9. All npm audit
+  advisories cleared (0 vulnerabilities on install).
 
 ### Removed
 
@@ -88,6 +93,9 @@ consistent error taxonomy across both interfaces.
   `npm run typecheck`.
 - Unit tests with `node --test` (zero deps): MCP registry invariants +
   error helpers. Script: `npm test`.
+- Publish pipeline migrated from a long-lived `NPM_TOKEN` secret to npm
+  Trusted Publishing (OIDC), with `--provenance` attestations on every
+  publish. GitHub Actions bumped to `checkout@v5` / `setup-node@v5`.
 
 ## [1.0.2] - 2025-07-21
 

package/bin/thinr.js

@@ -68,7 +68,7 @@ program
     .description('Start the MCP server (stdio) for AI tool integration')
     .action(async () => {
         try {
-            await startMCPServer();
+            await startMCPServer({ version: pkg.version });
         } catch (error) {
             console.error(`Error: ${error.message}`);
             process.exit(1);

package/lib/mcp/server.js

@@ -11,8 +11,12 @@ import { withProfile } from './helpers.js';
 /**
  * Start a generic MCP server for ThinRemote.
  * All tools accept device (when relevant) plus optional user/profile parameters.
+ *
+ * @param {{ version?: string }} [opts] `version` is echoed back in the
+ *   MCP `initialize` response's `serverInfo.version`. Caller is expected
+ *   to pass the CLI's `package.json#version` so the two never drift.
  */
-export async function startMCPServer() {
+export async function startMCPServer({ version = 'unknown' } = {}) {
     const config = readConfig();
     if (config.server) {
         setBaseURL(`https://${config.server}`);
@@ -21,7 +25,7 @@ export async function startMCPServer() {
     const server = new Server(
         {
             name: 'thinr',
-            version: '1.0.0',
+            version,
         },
         {
             capabilities: { tools: {} },

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@thinremote/thinr-cli",
-    "version": "1.1.0-alpha.1",
+    "version": "1.1.0",
     "description": "CLI for ThinRemote — remote management for IoT devices, with an MCP server for AI clients",
     "main": "bin/thinr.js",
     "bin": {
@@ -42,16 +42,16 @@
     "author": "ThinRemote",
     "license": "MIT",
     "dependencies": {
-        "@inquirer/prompts": "^7.5.3",
+        "@inquirer/prompts": "^8.4.1",
         "@modelcontextprotocol/sdk": "^1.29.0",
         "axios": "^1.10.0",
         "chalk": "^5.4.1",
         "commander": "^14.0.0",
-        "conf": "^14.0.0",
+        "conf": "^15.1.0",
         "figlet": "^1.8.1",
         "jsonwebtoken": "^9.0.2",
-        "open": "^10.1.2",
-        "ora": "^8.2.0",
+        "open": "^11.0.0",
+        "ora": "^9.3.0",
         "ws": "^8.18.2"
     },
     "type": "module",