easyeda-mcp-pro 0.17.0 → 0.17.1

package/README.md

@@ -1,19 +1,49 @@
-# easyeda-mcp-pro
+<div align="center">
 
-**Production-grade MCP server for EasyEDA Pro: safe PCB design inspection, BOM sourcing, manufacturing export, and AI-assisted hardware review.**
+# easyeda-mcp-pro
 
-[![CI](https://github.com/oaslananka/easyeda-mcp-pro/actions/workflows/ci.yml/badge.svg)](https://github.com/oaslananka/easyeda-mcp-pro/actions/workflows/ci.yml)
-[![npm version](https://img.shields.io/npm/v/easyeda-mcp-pro.svg)](https://www.npmjs.com/package/easyeda-mcp-pro)
-[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![OpenSSF Best Practices](https://www.bestpractices.dev/projects/13406/badge)](https://www.bestpractices.dev/projects/13406)
-[![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/oaslananka/easyeda-mcp-pro)
+<p>
+  Production-grade MCP server for EasyEDA Pro: safe PCB design inspection, BOM sourcing, manufacturing export, and AI-assisted hardware review.
+</p>
 
-<p align="center">
-  <a href="https://www.buymeacoffee.com/oaslananka">
-    <img src="https://img.buymeacoffee.com/button-api/?text=Buy%20me%20a%20coffee&emoji=%E2%98%95&slug=oaslananka&button_colour=FFDD00&font_colour=000000&font_family=Arial&outline_colour=000000&coffee_colour=ffffff" alt="Buy me a coffee" />
+<p>
+  <a href="https://github.com/oaslananka/easyeda-mcp-pro/actions/workflows/ci.yml">
+    <img src="https://github.com/oaslananka/easyeda-mcp-pro/actions/workflows/ci.yml/badge.svg" alt="CI status" />
+  </a>
+  <a href="https://www.npmjs.com/package/easyeda-mcp-pro">
+    <img src="https://img.shields.io/npm/v/easyeda-mcp-pro.svg?logo=npm" alt="npm version" />
+  </a>
+  <a href="https://www.npmjs.com/package/easyeda-mcp-pro">
+    <img src="https://img.shields.io/npm/dt/easyeda-mcp-pro?logo=npm&label=total%20downloads" alt="npm total downloads" />
+  </a>
+  <a href="https://www.npmjs.com/package/easyeda-mcp-pro">
+    <img src="https://img.shields.io/node/v/easyeda-mcp-pro" alt="supported Node.js version" />
+  </a>
+  <a href="https://opensource.org/licenses/MIT">
+    <img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT" />
+  </a>
+  <a href="https://www.bestpractices.dev/projects/13406">
+    <img src="https://www.bestpractices.dev/projects/13406/badge" alt="OpenSSF Best Practices" />
+  </a>
+  <a href="https://github.com/oaslananka/easyeda-mcp-pro/security/policy">
+    <img src="https://img.shields.io/badge/security-policy-blue" alt="Security policy" />
+  </a>
+  <a href="https://deepwiki.com/oaslananka/easyeda-mcp-pro">
+    <img src="https://deepwiki.com/badge.svg" alt="Ask DeepWiki" />
   </a>
 </p>
 
+<p>
+  <strong>Compliance docs:</strong>
+  <a href="THIRD_PARTY_NOTICES.md">Third-Party Notices</a>
+  ·
+  <a href="docs/vendor-terms.md">Vendor Terms and Unsupported Workflows</a>
+  ·
+  <a href="docs/OPENSSF_BEST_PRACTICES.md">OpenSSF Best Practices</a>
+</p>
+
+</div>
+
 ---
 
 ## Quick Start
@@ -46,7 +76,7 @@ For advanced configurations, manual instructions, and specific clients, see [Ins
 
 ## Overview
 
-easyeda-mcp-pro is a [Model Context Protocol (MCP)](https://modelcontextprotocol.io) server that bridges AI assistants with hardware design workflows in EasyEDA Pro. It exposes 52 profile-gated MCP tools for schematic inspection and editing, controlled EasyEDA Pro API calls, BOM management, design rule checks, PCB board analysis, fabrication exports, and supplier integration.
+easyeda-mcp-pro is a [Model Context Protocol (MCP)](https://modelcontextprotocol.io) server that bridges AI assistants with hardware design workflows in EasyEDA Pro. It exposes up to 60 profile-gated MCP tools for schematic inspection and editing, controlled EasyEDA Pro API calls, BOM management, design rule checks, PCB board analysis, fabrication exports, diagnostics, and supplier integration.
 
 The server connects to EasyEDA Pro via a WebSocket bridge extension, enabling real-time access to open project data. It integrates with JLCPCB, LCSC, Mouser, and DigiKey for BOM sourcing and pricing.
 
@@ -456,6 +486,24 @@ When `OAUTH_ENABLED=true`, every request to `/mcp` must include an `Authorizatio
 
 The server enforces startup safety checks: **non-loopback `HTTP_HOST` without OAuth is rejected**, and `HTTP_AUTH_DISABLED=true` is rejected outside non-production loopback deployments.
 
+### Docker defaults
+
+The Docker image starts in HTTP mode with `HTTP_HOST=127.0.0.1` so the default container boot path is safe and passes the same startup safety checks as local HTTP mode. For an externally reachable container, override the bind address and configure OAuth plus an explicit origin allowlist:
+
+```bash
+docker run --rm \
+  -e HTTP_HOST=0.0.0.0 \
+  -e ALLOWED_ORIGINS=https://your-client.example.com \
+  -e OAUTH_ENABLED=true \
+  -e OAUTH_ISSUER=https://issuer.example.com/ \
+  -e OAUTH_JWKS_URI=https://issuer.example.com/.well-known/jwks.json \
+  -e OAUTH_AUDIENCE=easyeda-mcp-pro \
+  -p 127.0.0.1:3000:3000 \
+  ghcr.io/oaslananka/easyeda-mcp-pro:latest
+```
+
+Do not expose non-loopback HTTP without OAuth. Use a reverse proxy or platform gateway for TLS termination and external access.
+
 #### HTTP Security Features
 
 - **Rate limiting**: Per-IP sliding window (configurable via `HTTP_RATE_LIMIT_MAX`), returns `429 Too Many Requests` with retry-after header
@@ -468,7 +516,14 @@ See `.env.example` for the complete list of configuration variables.
 
 ## MCP Tools
 
-The server currently registers 50 default profile-gated tools. Tools are filtered by the active `TOOL_PROFILE`: `core` exposes the normal workflow tools, `pro` adds manufacturing exports, `full` adds controlled documented EasyEDA API calls, and `dev` adds runtime probes for debugging.
+The server currently registers up to 60 profile-gated tools. Tools are filtered by the active `TOOL_PROFILE`:
+
+- `core`: 42 tools
+- `pro`: 47 tools
+- `full`: 56 tools
+- `dev`: 60 tools
+
+`core` exposes the standard workflow tools, `pro` adds manufacturing exports, `full` adds controlled documented EasyEDA API calls, and `dev` adds runtime probes for debugging.
 
 Capability scopes add a second authorization layer when `TOOL_SCOPES` is set. Leave it empty for the default local all-capabilities mode, or restrict it with comma/space separated scopes such as `diagnostics:read`, `schematic:read`, `schematic:write`, `bom:read`, `bom:source`, `checks:read`, `pcb:read`, `pcb:write`, `export:write`, `api:read`, `api:write`, and `bridge:execute`.
 
@@ -568,7 +623,7 @@ The schematic write APIs use EasyEDA Pro extension APIs that EasyEDA currently m
 │  (via Plugin)    │     Protocol      │  └───────────────┘  │
 └─────────────────┘                    │  ┌───────────────┐  │
                                        │  │  ToolRegistry  │  │
-                                       │  │  (41 tools)   │  │
+                                       │  │ (up to 60 tools) │ │
                                        │  └───────────────┘  │
                                        │  ┌───────────────┐  │
                                        │  │    Storage     │──┼──► SQLite
@@ -712,6 +767,18 @@ This repository uses automated workflows to manage dependencies and releases:
 
 ---
 
+## Support the project
+
+If this project helps you save time while working with EasyEDA Pro, BOM workflows, or MCP integrations, you can support ongoing development here:
+
+<p align="left">
+  <a href="https://www.buymeacoffee.com/oaslananka">
+    <img src="https://img.buymeacoffee.com/button-api/?text=Buy%20me%20a%20coffee&emoji=%E2%98%95&slug=oaslananka&button_colour=FFDD00&font_colour=000000&font_family=Inter&outline_colour=000000&coffee_colour=ffffff" alt="Buy me a coffee" />
+  </a>
+</p>
+
+---
+
 ## License
 
 [MIT](LICENSE)

package/dist/config/version.d.ts

@@ -1 +1 @@
-export declare const SERVER_VERSION = "0.17.0";
+export declare const SERVER_VERSION = "0.17.1";

package/dist/config/version.js

@@ -1,2 +1,2 @@
-export const SERVER_VERSION = '0.17.0'; // x-release-please-version
+export const SERVER_VERSION = '0.17.1'; // x-release-please-version
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "easyeda-mcp-pro",
-  "version": "0.17.0",
+  "version": "0.17.1",
   "mcpName": "io.github.oaslananka/easyeda-mcp-pro",
   "description": "MCP server for EasyEDA Pro: PCB inspection, BOM, exports, and hardware review.",
   "keywords": [
@@ -72,7 +72,8 @@
     "check:metadata": "node scripts/check-metadata.mjs",
     "inventory:capture": "tsx scripts/capture-runtime-inventory.mts",
     "inventory:diff": "tsx scripts/diff-runtime-inventory.mts",
-    "eval:golden": "tsx scripts/run-evals.mts"
+    "eval:golden": "tsx scripts/run-evals.mts",
+    "eval:golden:update": "tsx scripts/run-evals.mts --update-baseline"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",