easyeda-mcp-pro 0.17.0 → 0.18.0

package/README.md

@@ -1,19 +1,51 @@
-# easyeda-mcp-pro
+<div align="center">
 
-**Production-grade MCP server for EasyEDA Pro: safe PCB design inspection, BOM sourcing, manufacturing export, and AI-assisted hardware review.**
+# easyeda-mcp-pro
 
-[![CI](https://github.com/oaslananka/easyeda-mcp-pro/actions/workflows/ci.yml/badge.svg)](https://github.com/oaslananka/easyeda-mcp-pro/actions/workflows/ci.yml)
-[![npm version](https://img.shields.io/npm/v/easyeda-mcp-pro.svg)](https://www.npmjs.com/package/easyeda-mcp-pro)
-[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![OpenSSF Best Practices](https://www.bestpractices.dev/projects/13406/badge)](https://www.bestpractices.dev/projects/13406)
-[![Ask DeepWiki](https://deepwiki.com/badge.svg)](https://deepwiki.com/oaslananka/easyeda-mcp-pro)
+<p>
+  Production-grade MCP server for EasyEDA Pro: safe PCB design inspection, BOM sourcing, manufacturing export, and AI-assisted hardware review.
+</p>
 
-<p align="center">
-  <a href="https://www.buymeacoffee.com/oaslananka">
-    <img src="https://img.buymeacoffee.com/button-api/?text=Buy%20me%20a%20coffee&emoji=%E2%98%95&slug=oaslananka&button_colour=FFDD00&font_colour=000000&font_family=Arial&outline_colour=000000&coffee_colour=ffffff" alt="Buy me a coffee" />
+<p>
+  <a href="https://github.com/oaslananka/easyeda-mcp-pro/actions/workflows/ci.yml">
+    <img src="https://github.com/oaslananka/easyeda-mcp-pro/actions/workflows/ci.yml/badge.svg" alt="CI status" />
+  </a>
+  <a href="https://www.npmjs.com/package/easyeda-mcp-pro">
+    <img src="https://img.shields.io/npm/v/easyeda-mcp-pro.svg?logo=npm" alt="npm version" />
+  </a>
+  <a href="https://www.npmjs.com/package/easyeda-mcp-pro">
+    <img src="https://img.shields.io/npm/dt/easyeda-mcp-pro?logo=npm&label=total%20downloads" alt="npm total downloads" />
+  </a>
+  <a href="https://www.npmjs.com/package/easyeda-mcp-pro">
+    <img src="https://img.shields.io/node/v/easyeda-mcp-pro" alt="supported Node.js version" />
+  </a>
+  <a href="https://opensource.org/licenses/MIT">
+    <img src="https://img.shields.io/badge/License-MIT-yellow.svg" alt="License: MIT" />
+  </a>
+  <a href="https://www.bestpractices.dev/projects/13406">
+    <img src="https://www.bestpractices.dev/projects/13406/badge" alt="OpenSSF Best Practices" />
+  </a>
+  <a href="https://github.com/oaslananka/easyeda-mcp-pro/security/policy">
+    <img src="https://img.shields.io/badge/security-policy-blue" alt="Security policy" />
+  </a>
+  <a href="https://deepwiki.com/oaslananka/easyeda-mcp-pro">
+    <img src="https://deepwiki.com/badge.svg" alt="Ask DeepWiki" />
   </a>
 </p>
 
+<p>
+  <strong>Compliance docs:</strong>
+  <a href="THIRD_PARTY_NOTICES.md">Third-Party Notices</a>
+  ·
+  <a href="docs/vendor-terms.md">Vendor Terms and Unsupported Workflows</a>
+  ·
+  <a href="docs/OPENSSF_BEST_PRACTICES.md">OpenSSF Best Practices</a>
+  ·
+  <a href="docs/REMOTE_MCP_MODES.md">Remote MCP Modes</a>
+</p>
+
+</div>
+
 ---
 
 ## Quick Start
@@ -46,7 +78,7 @@ For advanced configurations, manual instructions, and specific clients, see [Ins
 
 ## Overview
 
-easyeda-mcp-pro is a [Model Context Protocol (MCP)](https://modelcontextprotocol.io) server that bridges AI assistants with hardware design workflows in EasyEDA Pro. It exposes 52 profile-gated MCP tools for schematic inspection and editing, controlled EasyEDA Pro API calls, BOM management, design rule checks, PCB board analysis, fabrication exports, and supplier integration.
+easyeda-mcp-pro is a [Model Context Protocol (MCP)](https://modelcontextprotocol.io) server that bridges AI assistants with hardware design workflows in EasyEDA Pro. It exposes up to 60 profile-gated MCP tools for schematic inspection and editing, controlled EasyEDA Pro API calls, BOM management, design rule checks, PCB board analysis, fabrication exports, diagnostics, and supplier integration.
 
 The server connects to EasyEDA Pro via a WebSocket bridge extension, enabling real-time access to open project data. It integrates with JLCPCB, LCSC, Mouser, and DigiKey for BOM sourcing and pricing.
 
@@ -456,6 +488,24 @@ When `OAUTH_ENABLED=true`, every request to `/mcp` must include an `Authorizatio
 
 The server enforces startup safety checks: **non-loopback `HTTP_HOST` without OAuth is rejected**, and `HTTP_AUTH_DISABLED=true` is rejected outside non-production loopback deployments.
 
+### Docker defaults
+
+The Docker image starts in HTTP mode with `HTTP_HOST=127.0.0.1` so the default container boot path is safe and passes the same startup safety checks as local HTTP mode. For an externally reachable container, override the bind address and configure OAuth plus an explicit origin allowlist:
+
+```bash
+docker run --rm \
+  -e HTTP_HOST=0.0.0.0 \
+  -e ALLOWED_ORIGINS=https://your-client.example.com \
+  -e OAUTH_ENABLED=true \
+  -e OAUTH_ISSUER=https://issuer.example.com/ \
+  -e OAUTH_JWKS_URI=https://issuer.example.com/.well-known/jwks.json \
+  -e OAUTH_AUDIENCE=easyeda-mcp-pro \
+  -p 127.0.0.1:3000:3000 \
+  ghcr.io/oaslananka/easyeda-mcp-pro:latest
+```
+
+Do not expose non-loopback HTTP without OAuth. Use a reverse proxy or platform gateway for TLS termination and external access.
+
 #### HTTP Security Features
 
 - **Rate limiting**: Per-IP sliding window (configurable via `HTTP_RATE_LIMIT_MAX`), returns `429 Too Many Requests` with retry-after header
@@ -468,7 +518,14 @@ See `.env.example` for the complete list of configuration variables.
 
 ## MCP Tools
 
-The server currently registers 50 default profile-gated tools. Tools are filtered by the active `TOOL_PROFILE`: `core` exposes the normal workflow tools, `pro` adds manufacturing exports, `full` adds controlled documented EasyEDA API calls, and `dev` adds runtime probes for debugging.
+The server currently registers up to 60 profile-gated tools. Tools are filtered by the active `TOOL_PROFILE`:
+
+- `core`: 42 tools
+- `pro`: 47 tools
+- `full`: 56 tools
+- `dev`: 60 tools
+
+`core` exposes the standard workflow tools, `pro` adds manufacturing exports, `full` adds controlled documented EasyEDA API calls, and `dev` adds runtime probes for debugging.
 
 Capability scopes add a second authorization layer when `TOOL_SCOPES` is set. Leave it empty for the default local all-capabilities mode, or restrict it with comma/space separated scopes such as `diagnostics:read`, `schematic:read`, `schematic:write`, `bom:read`, `bom:source`, `checks:read`, `pcb:read`, `pcb:write`, `export:write`, `api:read`, `api:write`, and `bridge:execute`.
 
@@ -568,7 +625,7 @@ The schematic write APIs use EasyEDA Pro extension APIs that EasyEDA currently m
 │  (via Plugin)    │     Protocol      │  └───────────────┘  │
 └─────────────────┘                    │  ┌───────────────┐  │
                                        │  │  ToolRegistry  │  │
-                                       │  │  (41 tools)   │  │
+                                       │  │ (up to 60 tools) │ │
                                        │  └───────────────┘  │
                                        │  ┌───────────────┐  │
                                        │  │    Storage     │──┼──► SQLite
@@ -712,6 +769,18 @@ This repository uses automated workflows to manage dependencies and releases:
 
 ---
 
+## Support the project
+
+If this project helps you save time while working with EasyEDA Pro, BOM workflows, or MCP integrations, you can support ongoing development here:
+
+<p align="left">
+  <a href="https://www.buymeacoffee.com/oaslananka">
+    <img src="https://img.buymeacoffee.com/button-api/?text=Buy%20me%20a%20coffee&emoji=%E2%98%95&slug=oaslananka&button_colour=FFDD00&font_colour=000000&font_family=Inter&outline_colour=000000&coffee_colour=ffffff" alt="Buy me a coffee" />
+  </a>
+</p>
+
+---
+
 ## License
 
 [MIT](LICENSE)

package/dist/config/version.d.ts

@@ -1 +1 @@
-export declare const SERVER_VERSION = "0.17.0";
+export declare const SERVER_VERSION = "0.18.0";

package/dist/config/version.js

@@ -1,2 +1,2 @@
-export const SERVER_VERSION = '0.17.0'; // x-release-please-version
+export const SERVER_VERSION = '0.18.0'; // x-release-please-version
 //# sourceMappingURL=version.js.map

package/dist/remote/approval-policy.d.ts

@@ -0,0 +1,33 @@
+import type { ActiveProject, RemoteRiskLevel } from './protocol.js';
+export interface ApprovalRequestInput {
+    approvalId: string;
+    userId: string;
+    sessionId: string;
+    toolName: string;
+    riskLevel: RemoteRiskLevel;
+    inputHash: string;
+    actionSummary: string;
+    activeProject?: ActiveProject;
+    expiresAt: Date;
+}
+export type ApprovalDecision = 'approved' | 'rejected' | 'timeout';
+export interface ApprovalRecord extends ApprovalRequestInput {
+    decision?: ApprovalDecision;
+    decidedAt?: Date;
+}
+export declare function requiresApproval(riskLevel: RemoteRiskLevel): boolean;
+export declare function isDestructiveRisk(riskLevel: RemoteRiskLevel): boolean;
+export declare class ApprovalStore {
+    private readonly approvals;
+    request(input: ApprovalRequestInput): ApprovalRecord;
+    resolve(approvalId: string, decision: ApprovalDecision, now?: Date): ApprovalRecord | undefined;
+    consumeApproved(input: {
+        approvalId: string;
+        userId: string;
+        sessionId: string;
+        toolName: string;
+        inputHash: string;
+        now?: Date;
+    }): boolean;
+    get(approvalId: string): ApprovalRecord | undefined;
+}

package/dist/remote/approval-policy.js

@@ -0,0 +1,41 @@
+export function requiresApproval(riskLevel) {
+    return riskLevel !== 'read';
+}
+export function isDestructiveRisk(riskLevel) {
+    return riskLevel === 'destructive';
+}
+export class ApprovalStore {
+    approvals = new Map();
+    request(input) {
+        const record = { ...input };
+        this.approvals.set(input.approvalId, record);
+        return record;
+    }
+    resolve(approvalId, decision, now = new Date()) {
+        const record = this.approvals.get(approvalId);
+        if (!record)
+            return undefined;
+        record.decision = now.getTime() > record.expiresAt.getTime() ? 'timeout' : decision;
+        record.decidedAt = now;
+        return record;
+    }
+    consumeApproved(input) {
+        const record = this.approvals.get(input.approvalId);
+        if (!record)
+            return false;
+        const now = input.now ?? new Date();
+        const matches = record.userId === input.userId &&
+            record.sessionId === input.sessionId &&
+            record.toolName === input.toolName &&
+            record.inputHash === input.inputHash &&
+            record.decision === 'approved' &&
+            record.expiresAt.getTime() > now.getTime();
+        if (matches)
+            this.approvals.delete(input.approvalId);
+        return matches;
+    }
+    get(approvalId) {
+        return this.approvals.get(approvalId);
+    }
+}
+//# sourceMappingURL=approval-policy.js.map

package/dist/remote/approval-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-policy.js","sourceRoot":"","sources":["../../src/remote/approval-policy.ts"],"names":[],"mappings":"AAqBA,MAAM,UAAU,gBAAgB,CAAC,SAA0B;IACzD,OAAO,SAAS,KAAK,MAAM,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAA0B;IAC1D,OAAO,SAAS,KAAK,aAAa,CAAC;AACrC,CAAC;AAED,MAAM,OAAO,aAAa;IACP,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE/D,OAAO,CAAC,KAA2B;QACjC,MAAM,MAAM,GAAmB,EAAE,GAAG,KAAK,EAAE,CAAC;QAC5C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,CACL,UAAkB,EAClB,QAA0B,EAC1B,GAAG,GAAG,IAAI,IAAI,EAAE;QAEhB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpF,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC;QACvB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,eAAe,CAAC,KAOf;QACC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QACpC,MAAM,OAAO,GACX,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC9B,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YACpC,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YAClC,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YACpC,MAAM,CAAC,QAAQ,KAAK,UAAU;YAC9B,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,OAAO;YAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,GAAG,CAAC,UAAkB;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/remote/index.d.ts

@@ -0,0 +1,5 @@
+export * from './approval-policy.js';
+export * from './observability.js';
+export * from './protocol.js';
+export * from './scope.js';
+export * from './session-router.js';

package/dist/remote/index.js

@@ -0,0 +1,6 @@
+export * from './approval-policy.js';
+export * from './observability.js';
+export * from './protocol.js';
+export * from './scope.js';
+export * from './session-router.js';
+//# sourceMappingURL=index.js.map

package/dist/remote/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/remote/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}

package/dist/remote/observability.d.ts

@@ -0,0 +1,27 @@
+import type { RemoteDeploymentMode, RemoteRiskLevel } from './protocol.js';
+export type RemoteAuditEventName = 'remote.session.registered' | 'remote.session.paired' | 'remote.session.disconnected' | 'remote.tool.requested' | 'remote.tool.dispatched' | 'remote.tool.completed' | 'remote.tool.failed' | 'remote.approval.requested' | 'remote.approval.resolved' | 'remote.identity.rejected';
+export interface RemoteAuditEvent {
+    event: RemoteAuditEventName;
+    observedAt: string;
+    mode: RemoteDeploymentMode;
+    userId?: string;
+    sessionId?: string;
+    connectionId?: string;
+    toolName?: string;
+    riskLevel?: RemoteRiskLevel;
+    inputHash?: string;
+    status?: 'ok' | 'error' | 'rejected' | 'timeout';
+    durationMs?: number;
+    errorCode?: string;
+}
+export declare function redactRemotePayload(value: unknown): unknown;
+export declare class RemoteAuditLog {
+    private readonly maxEvents;
+    private events;
+    constructor(maxEvents?: number);
+    record(event: Omit<RemoteAuditEvent, 'observedAt'> & {
+        observedAt?: string;
+    }): RemoteAuditEvent;
+    recent(limit?: number): RemoteAuditEvent[];
+    clear(): void;
+}

package/dist/remote/observability.js

@@ -0,0 +1,37 @@
+const REDACTED = '[redacted]';
+const SECRET_KEY_PATTERN = /(token|secret|password|credential|apiKey|api_key|pairingCode)/i;
+export function redactRemotePayload(value) {
+    if (Array.isArray(value))
+        return value.map((item) => redactRemotePayload(item));
+    if (!value || typeof value !== 'object')
+        return value;
+    const out = {};
+    for (const [key, child] of Object.entries(value)) {
+        out[key] = SECRET_KEY_PATTERN.test(key) ? REDACTED : redactRemotePayload(child);
+    }
+    return out;
+}
+export class RemoteAuditLog {
+    maxEvents;
+    events = [];
+    constructor(maxEvents = 200) {
+        this.maxEvents = maxEvents;
+    }
+    record(event) {
+        const stored = {
+            ...event,
+            observedAt: event.observedAt ?? new Date().toISOString(),
+        };
+        this.events.push(stored);
+        if (this.events.length > this.maxEvents)
+            this.events = this.events.slice(-this.maxEvents);
+        return stored;
+    }
+    recent(limit = 25) {
+        return this.events.slice(-limit);
+    }
+    clear() {
+        this.events = [];
+    }
+}
+//# sourceMappingURL=observability.js.map

package/dist/remote/observability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.js","sourceRoot":"","sources":["../../src/remote/observability.ts"],"names":[],"mappings":"AA6BA,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,kBAAkB,GAAG,gEAAgE,CAAC;AAE5F,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,cAAc;IAGI;IAFrB,MAAM,GAAuB,EAAE,CAAC;IAExC,YAA6B,YAAY,GAAG;QAAf,cAAS,GAAT,SAAS,CAAM;IAAG,CAAC;IAEhD,MAAM,CAAC,KAAqE;QAC1E,MAAM,MAAM,GAAqB;YAC/B,GAAG,KAAK;YACR,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACzD,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1F,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,KAAK,GAAG,EAAE;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,CAAC;CACF"}

package/dist/remote/protocol.d.ts

@@ -0,0 +1,321 @@
+import { z } from 'zod';
+export declare const REMOTE_RELAY_PROTOCOL_VERSION: "2026-07-remote-relay-v1";
+export declare const RemoteDeploymentModeSchema: z.ZodEnum<{
+    local: "local";
+    hosted: "hosted";
+    self_hosted: "self_hosted";
+}>;
+export declare const RemoteRiskLevelSchema: z.ZodEnum<{
+    export: "export";
+    write: "write";
+    read: "read";
+    destructive: "destructive";
+}>;
+export declare const RemoteScopeSchema: z.ZodEnum<{
+    "easyeda.read": "easyeda.read";
+    "easyeda.write": "easyeda.write";
+    "easyeda.export": "easyeda.export";
+    "easyeda.project_admin": "easyeda.project_admin";
+}>;
+export type RemoteDeploymentMode = z.infer<typeof RemoteDeploymentModeSchema>;
+export type RemoteRiskLevel = z.infer<typeof RemoteRiskLevelSchema>;
+export type RemoteScope = z.infer<typeof RemoteScopeSchema>;
+export declare const ActiveProjectSchema: z.ZodObject<{
+    projectId: z.ZodOptional<z.ZodString>;
+    projectName: z.ZodOptional<z.ZodString>;
+    documentType: z.ZodDefault<z.ZodEnum<{
+        unknown: "unknown";
+        schematic: "schematic";
+        pcb: "pcb";
+    }>>;
+    url: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ActiveProject = z.infer<typeof ActiveProjectSchema>;
+export declare const RegisterSessionMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    sessionId: z.ZodOptional<z.ZodString>;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"register_session">;
+    extensionVersion: z.ZodString;
+    mode: z.ZodEnum<{
+        hosted: "hosted";
+        self_hosted: "self_hosted";
+    }>;
+    activeProject: z.ZodOptional<z.ZodObject<{
+        projectId: z.ZodOptional<z.ZodString>;
+        projectName: z.ZodOptional<z.ZodString>;
+        documentType: z.ZodDefault<z.ZodEnum<{
+            unknown: "unknown";
+            schematic: "schematic";
+            pcb: "pcb";
+        }>>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export declare const SessionRegisteredMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"session_registered">;
+    sessionId: z.ZodString;
+    paired: z.ZodBoolean;
+    expiresAt: z.ZodString;
+}, z.core.$strip>;
+export declare const HeartbeatMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    sessionId: z.ZodOptional<z.ZodString>;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"heartbeat">;
+}, z.core.$strip>;
+export declare const ToolRequestMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"tool_request">;
+    sessionId: z.ZodString;
+    toolName: z.ZodString;
+    riskLevel: z.ZodEnum<{
+        export: "export";
+        write: "write";
+        read: "read";
+        destructive: "destructive";
+    }>;
+    requiresApproval: z.ZodBoolean;
+    input: z.ZodOptional<z.ZodUnknown>;
+    inputHash: z.ZodString;
+    activeProjectHint: z.ZodOptional<z.ZodObject<{
+        projectId: z.ZodOptional<z.ZodString>;
+        projectName: z.ZodOptional<z.ZodString>;
+        documentType: z.ZodDefault<z.ZodEnum<{
+            unknown: "unknown";
+            schematic: "schematic";
+            pcb: "pcb";
+        }>>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    deadlineMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const ToolResponseMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"tool_response">;
+    sessionId: z.ZodString;
+    requestMessageId: z.ZodString;
+    ok: z.ZodBoolean;
+    result: z.ZodOptional<z.ZodUnknown>;
+    error: z.ZodOptional<z.ZodObject<{
+        code: z.ZodString;
+        message: z.ZodString;
+        suggestion: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    durationMs: z.ZodNumber;
+}, z.core.$strip>;
+export declare const ApprovalRequestMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"approval_request">;
+    sessionId: z.ZodString;
+    approvalId: z.ZodString;
+    toolName: z.ZodString;
+    riskLevel: z.ZodEnum<{
+        export: "export";
+        write: "write";
+        read: "read";
+        destructive: "destructive";
+    }>;
+    actionSummary: z.ZodString;
+    inputHash: z.ZodString;
+    activeProject: z.ZodOptional<z.ZodObject<{
+        projectId: z.ZodOptional<z.ZodString>;
+        projectName: z.ZodOptional<z.ZodString>;
+        documentType: z.ZodDefault<z.ZodEnum<{
+            unknown: "unknown";
+            schematic: "schematic";
+            pcb: "pcb";
+        }>>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    expiresAt: z.ZodString;
+}, z.core.$strip>;
+export declare const ApprovalResultMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"approval_result">;
+    sessionId: z.ZodString;
+    approvalId: z.ZodString;
+    result: z.ZodEnum<{
+        timeout: "timeout";
+        rejected: "rejected";
+        approved: "approved";
+    }>;
+}, z.core.$strip>;
+export declare const SessionClosedMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"session_closed">;
+    sessionId: z.ZodString;
+    reason: z.ZodEnum<{
+        disconnected: "disconnected";
+        user_disabled: "user_disabled";
+        expired: "expired";
+        replaced: "replaced";
+    }>;
+}, z.core.$strip>;
+export declare const RelayErrorMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"error">;
+    sessionId: z.ZodOptional<z.ZodString>;
+    code: z.ZodString;
+    message: z.ZodString;
+}, z.core.$strip>;
+export declare const RelayMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    sessionId: z.ZodOptional<z.ZodString>;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"register_session">;
+    extensionVersion: z.ZodString;
+    mode: z.ZodEnum<{
+        hosted: "hosted";
+        self_hosted: "self_hosted";
+    }>;
+    activeProject: z.ZodOptional<z.ZodObject<{
+        projectId: z.ZodOptional<z.ZodString>;
+        projectName: z.ZodOptional<z.ZodString>;
+        documentType: z.ZodDefault<z.ZodEnum<{
+            unknown: "unknown";
+            schematic: "schematic";
+            pcb: "pcb";
+        }>>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"session_registered">;
+    sessionId: z.ZodString;
+    paired: z.ZodBoolean;
+    expiresAt: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    sessionId: z.ZodOptional<z.ZodString>;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"heartbeat">;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"tool_request">;
+    sessionId: z.ZodString;
+    toolName: z.ZodString;
+    riskLevel: z.ZodEnum<{
+        export: "export";
+        write: "write";
+        read: "read";
+        destructive: "destructive";
+    }>;
+    requiresApproval: z.ZodBoolean;
+    input: z.ZodOptional<z.ZodUnknown>;
+    inputHash: z.ZodString;
+    activeProjectHint: z.ZodOptional<z.ZodObject<{
+        projectId: z.ZodOptional<z.ZodString>;
+        projectName: z.ZodOptional<z.ZodString>;
+        documentType: z.ZodDefault<z.ZodEnum<{
+            unknown: "unknown";
+            schematic: "schematic";
+            pcb: "pcb";
+        }>>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    deadlineMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"tool_response">;
+    sessionId: z.ZodString;
+    requestMessageId: z.ZodString;
+    ok: z.ZodBoolean;
+    result: z.ZodOptional<z.ZodUnknown>;
+    error: z.ZodOptional<z.ZodObject<{
+        code: z.ZodString;
+        message: z.ZodString;
+        suggestion: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    durationMs: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"approval_request">;
+    sessionId: z.ZodString;
+    approvalId: z.ZodString;
+    toolName: z.ZodString;
+    riskLevel: z.ZodEnum<{
+        export: "export";
+        write: "write";
+        read: "read";
+        destructive: "destructive";
+    }>;
+    actionSummary: z.ZodString;
+    inputHash: z.ZodString;
+    activeProject: z.ZodOptional<z.ZodObject<{
+        projectId: z.ZodOptional<z.ZodString>;
+        projectName: z.ZodOptional<z.ZodString>;
+        documentType: z.ZodDefault<z.ZodEnum<{
+            unknown: "unknown";
+            schematic: "schematic";
+            pcb: "pcb";
+        }>>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    expiresAt: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"approval_result">;
+    sessionId: z.ZodString;
+    approvalId: z.ZodString;
+    result: z.ZodEnum<{
+        timeout: "timeout";
+        rejected: "rejected";
+        approved: "approved";
+    }>;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"session_closed">;
+    sessionId: z.ZodString;
+    reason: z.ZodEnum<{
+        disconnected: "disconnected";
+        user_disabled: "user_disabled";
+        expired: "expired";
+        replaced: "replaced";
+    }>;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"error">;
+    sessionId: z.ZodOptional<z.ZodString>;
+    code: z.ZodString;
+    message: z.ZodString;
+}, z.core.$strip>], "type">;
+export type RelayMessage = z.infer<typeof RelayMessageSchema>;
+export type RegisterSessionMessage = z.infer<typeof RegisterSessionMessageSchema>;
+export type ToolRequestMessage = z.infer<typeof ToolRequestMessageSchema>;
+export type ApprovalRequestMessage = z.infer<typeof ApprovalRequestMessageSchema>;

package/dist/remote/protocol.js

@@ -0,0 +1,104 @@
+import { z } from 'zod';
+export const REMOTE_RELAY_PROTOCOL_VERSION = '2026-07-remote-relay-v1';
+export const RemoteDeploymentModeSchema = z.enum(['local', 'hosted', 'self_hosted']);
+export const RemoteRiskLevelSchema = z.enum(['read', 'write', 'export', 'destructive']);
+export const RemoteScopeSchema = z.enum([
+    'easyeda.read',
+    'easyeda.write',
+    'easyeda.export',
+    'easyeda.project_admin',
+]);
+export const ActiveProjectSchema = z.object({
+    projectId: z.string().min(1).optional(),
+    projectName: z.string().min(1).optional(),
+    documentType: z.enum(['schematic', 'pcb', 'unknown']).default('unknown'),
+    url: z.string().url().optional(),
+});
+const BaseRelayMessageSchema = z.object({
+    protocolVersion: z.literal(REMOTE_RELAY_PROTOCOL_VERSION),
+    messageId: z.string().min(1),
+    sessionId: z.string().min(1).optional(),
+    timestamp: z.string().datetime(),
+});
+export const RegisterSessionMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('register_session'),
+    extensionVersion: z.string().min(1),
+    mode: RemoteDeploymentModeSchema.exclude(['local']),
+    activeProject: ActiveProjectSchema.optional(),
+    capabilities: z.array(z.string().min(1)).default([]),
+});
+export const SessionRegisteredMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('session_registered'),
+    sessionId: z.string().min(1),
+    paired: z.boolean(),
+    expiresAt: z.string().datetime(),
+});
+export const HeartbeatMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('heartbeat'),
+});
+export const ToolRequestMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('tool_request'),
+    sessionId: z.string().min(1),
+    toolName: z.string().min(1),
+    riskLevel: RemoteRiskLevelSchema,
+    requiresApproval: z.boolean(),
+    input: z.unknown().optional(),
+    inputHash: z.string().min(1),
+    activeProjectHint: ActiveProjectSchema.optional(),
+    deadlineMs: z.number().int().positive().optional(),
+});
+export const ToolResponseMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('tool_response'),
+    sessionId: z.string().min(1),
+    requestMessageId: z.string().min(1),
+    ok: z.boolean(),
+    result: z.unknown().optional(),
+    error: z
+        .object({
+        code: z.string().min(1),
+        message: z.string().min(1),
+        suggestion: z.string().min(1).optional(),
+    })
+        .optional(),
+    durationMs: z.number().nonnegative(),
+});
+export const ApprovalRequestMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('approval_request'),
+    sessionId: z.string().min(1),
+    approvalId: z.string().min(1),
+    toolName: z.string().min(1),
+    riskLevel: RemoteRiskLevelSchema,
+    actionSummary: z.string().min(1),
+    inputHash: z.string().min(1),
+    activeProject: ActiveProjectSchema.optional(),
+    expiresAt: z.string().datetime(),
+});
+export const ApprovalResultMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('approval_result'),
+    sessionId: z.string().min(1),
+    approvalId: z.string().min(1),
+    result: z.enum(['approved', 'rejected', 'timeout']),
+});
+export const SessionClosedMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('session_closed'),
+    sessionId: z.string().min(1),
+    reason: z.enum(['user_disabled', 'expired', 'disconnected', 'replaced']),
+});
+export const RelayErrorMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('error'),
+    sessionId: z.string().min(1).optional(),
+    code: z.string().min(1),
+    message: z.string().min(1),
+});
+export const RelayMessageSchema = z.discriminatedUnion('type', [
+    RegisterSessionMessageSchema,
+    SessionRegisteredMessageSchema,
+    HeartbeatMessageSchema,
+    ToolRequestMessageSchema,
+    ToolResponseMessageSchema,
+    ApprovalRequestMessageSchema,
+    ApprovalResultMessageSchema,
+    SessionClosedMessageSchema,
+    RelayErrorMessageSchema,
+]);
+//# sourceMappingURL=protocol.js.map

package/dist/remote/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/remote/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,6BAA6B,GAAG,yBAAkC,CAAC;AAChF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACtC,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,uBAAuB;CACxB,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACxE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACxE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACnC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,IAAI,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC;IACnD,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC7C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACrD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,sBAAsB,CAAC,MAAM,CAAC;IAC1E,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC,MAAM,CAAC;IAClE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACpE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,SAAS,EAAE,qBAAqB;IAChC,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,iBAAiB,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACjD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC;SACD,QAAQ,EAAE;IACb,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACxE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,SAAS,EAAE,qBAAqB;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACvE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACtE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;CACzE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACnE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,4BAA4B;IAC5B,8BAA8B;IAC9B,sBAAsB;IACtB,wBAAwB;IACxB,yBAAyB;IACzB,4BAA4B;IAC5B,2BAA2B;IAC3B,0BAA0B;IAC1B,uBAAuB;CACxB,CAAC,CAAC"}

package/dist/remote/scope.d.ts

@@ -0,0 +1,16 @@
+import type { RemoteRiskLevel, RemoteScope } from './protocol.js';
+export interface RemoteIdentity {
+    userId: string;
+    scopes: readonly RemoteScope[];
+    expiresAt?: Date;
+}
+export type ScopeCheckResult = {
+    ok: true;
+} | {
+    ok: false;
+    code: 'IDENTITY_MISSING' | 'IDENTITY_EXPIRED' | 'SCOPE_MISSING';
+    message: string;
+};
+export declare function requiredScopeForRisk(riskLevel: RemoteRiskLevel): RemoteScope;
+export declare function hasRemoteScope(identity: RemoteIdentity, scope: RemoteScope): boolean;
+export declare function checkRemoteScope(identity: RemoteIdentity | undefined, riskLevel: RemoteRiskLevel, now?: Date): ScopeCheckResult;

package/dist/remote/scope.js

@@ -0,0 +1,25 @@
+export function requiredScopeForRisk(riskLevel) {
+    if (riskLevel === 'read')
+        return 'easyeda.read';
+    if (riskLevel === 'write')
+        return 'easyeda.write';
+    if (riskLevel === 'export')
+        return 'easyeda.export';
+    return 'easyeda.project_admin';
+}
+export function hasRemoteScope(identity, scope) {
+    return identity.scopes.includes(scope) || identity.scopes.includes('easyeda.project_admin');
+}
+export function checkRemoteScope(identity, riskLevel, now = new Date()) {
+    if (!identity)
+        return { ok: false, code: 'IDENTITY_MISSING', message: 'Remote identity is required.' };
+    if (identity.expiresAt && identity.expiresAt.getTime() <= now.getTime()) {
+        return { ok: false, code: 'IDENTITY_EXPIRED', message: 'Remote identity has expired.' };
+    }
+    const required = requiredScopeForRisk(riskLevel);
+    if (!hasRemoteScope(identity, required)) {
+        return { ok: false, code: 'SCOPE_MISSING', message: `Remote tool requires ${required}.` };
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=scope.js.map

package/dist/remote/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/remote/scope.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,oBAAoB,CAAC,SAA0B;IAC7D,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC;IAChD,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,eAAe,CAAC;IAClD,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,gBAAgB,CAAC;IACpD,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAwB,EAAE,KAAkB;IACzE,OAAO,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,QAAoC,EACpC,SAA0B,EAC1B,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,IAAI,CAAC,QAAQ;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IAC1F,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,wBAAwB,QAAQ,GAAG,EAAE,CAAC;IAC5F,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/remote/session-router.d.ts

@@ -0,0 +1,54 @@
+import type { ActiveProject, RemoteDeploymentMode, RemoteRiskLevel } from './protocol.js';
+export interface ExtensionSession {
+    sessionId: string;
+    connectionId: string;
+    mode: Exclude<RemoteDeploymentMode, 'local'>;
+    extensionVersion: string;
+    userId?: string;
+    activeProject?: ActiveProject;
+    connected: boolean;
+    createdAt: Date;
+    lastSeenAt: Date;
+    expiresAt: Date;
+}
+export type SessionRouteResult = {
+    ok: true;
+    session: ExtensionSession;
+} | {
+    ok: false;
+    code: 'SESSION_UNPAIRED' | 'SESSION_DISCONNECTED' | 'SESSION_EXPIRED' | 'SESSION_AMBIGUOUS' | 'PROJECT_INACTIVE';
+    message: string;
+};
+export declare class RemoteSessionRouter {
+    private readonly now;
+    private readonly makeId;
+    private readonly sessions;
+    private readonly pairings;
+    constructor(now?: () => Date, makeId?: () => string);
+    registerSession(input: {
+        connectionId: string;
+        mode: Exclude<RemoteDeploymentMode, 'local'>;
+        extensionVersion: string;
+        activeProject?: ActiveProject;
+        ttlMs?: number;
+    }): ExtensionSession;
+    createPairingCode(input: {
+        userId: string;
+        sessionId?: string;
+        ttlMs?: number;
+    }): string;
+    completePairing(input: {
+        code: string;
+        userId: string;
+        sessionId: string;
+    }): boolean;
+    heartbeat(sessionId: string): boolean;
+    updateActiveProject(sessionId: string, activeProject?: ActiveProject): boolean;
+    disconnect(sessionId: string): boolean;
+    resolve(input: {
+        userId: string;
+        riskLevel: RemoteRiskLevel;
+        sessionId?: string;
+    }): SessionRouteResult;
+    getSession(sessionId: string): ExtensionSession | undefined;
+}

package/dist/remote/session-router.js

@@ -0,0 +1,138 @@
+import { randomUUID } from 'node:crypto';
+export class RemoteSessionRouter {
+    now;
+    makeId;
+    sessions = new Map();
+    pairings = new Map();
+    constructor(now = () => new Date(), makeId = () => randomUUID()) {
+        this.now = now;
+        this.makeId = makeId;
+    }
+    registerSession(input) {
+        const now = this.now();
+        const session = {
+            sessionId: `sess_${this.makeId()}`,
+            connectionId: input.connectionId,
+            mode: input.mode,
+            extensionVersion: input.extensionVersion,
+            activeProject: input.activeProject,
+            connected: true,
+            createdAt: now,
+            lastSeenAt: now,
+            expiresAt: new Date(now.getTime() + (input.ttlMs ?? 2 * 60 * 60 * 1000)),
+        };
+        this.sessions.set(session.sessionId, session);
+        return session;
+    }
+    createPairingCode(input) {
+        const now = this.now();
+        const code = `EDA-${this.makeId().replace(/-/g, '').slice(0, 8).toUpperCase()}`;
+        this.pairings.set(code, {
+            code,
+            userId: input.userId,
+            sessionId: input.sessionId,
+            createdAt: now,
+            expiresAt: new Date(now.getTime() + (input.ttlMs ?? 10 * 60 * 1000)),
+        });
+        return code;
+    }
+    completePairing(input) {
+        const pairing = this.pairings.get(input.code);
+        const session = this.sessions.get(input.sessionId);
+        const now = this.now();
+        if (!pairing || !session)
+            return false;
+        if (pairing.usedAt)
+            return false;
+        if (pairing.userId !== input.userId)
+            return false;
+        if (pairing.sessionId && pairing.sessionId !== input.sessionId)
+            return false;
+        if (pairing.expiresAt.getTime() <= now.getTime())
+            return false;
+        if (!session.connected || session.expiresAt.getTime() <= now.getTime())
+            return false;
+        pairing.usedAt = now;
+        session.userId = input.userId;
+        session.lastSeenAt = now;
+        return true;
+    }
+    heartbeat(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session || !session.connected)
+            return false;
+        session.lastSeenAt = this.now();
+        return true;
+    }
+    updateActiveProject(sessionId, activeProject) {
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return false;
+        session.activeProject = activeProject;
+        session.lastSeenAt = this.now();
+        return true;
+    }
+    disconnect(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return false;
+        session.connected = false;
+        session.lastSeenAt = this.now();
+        return true;
+    }
+    resolve(input) {
+        const now = this.now();
+        const candidates = [...this.sessions.values()].filter((session) => session.userId === input.userId &&
+            (!input.sessionId || session.sessionId === input.sessionId));
+        if (candidates.length === 0) {
+            return {
+                ok: false,
+                code: 'SESSION_UNPAIRED',
+                message: 'No paired EasyEDA extension session.',
+            };
+        }
+        const active = candidates.filter((session) => session.connected);
+        if (active.length === 0) {
+            return {
+                ok: false,
+                code: 'SESSION_DISCONNECTED',
+                message: 'Paired EasyEDA extension is disconnected.',
+            };
+        }
+        const unexpired = active.filter((session) => session.expiresAt.getTime() > now.getTime());
+        if (unexpired.length === 0) {
+            return {
+                ok: false,
+                code: 'SESSION_EXPIRED',
+                message: 'Paired EasyEDA extension session expired.',
+            };
+        }
+        if (!input.sessionId && unexpired.length > 1) {
+            return {
+                ok: false,
+                code: 'SESSION_AMBIGUOUS',
+                message: 'Multiple active EasyEDA sessions require explicit selection.',
+            };
+        }
+        const session = unexpired[0];
+        if (!session) {
+            return {
+                ok: false,
+                code: 'SESSION_UNPAIRED',
+                message: 'No paired EasyEDA extension session.',
+            };
+        }
+        if (input.riskLevel !== 'read' && !session.activeProject) {
+            return {
+                ok: false,
+                code: 'PROJECT_INACTIVE',
+                message: 'No active EasyEDA project is visible.',
+            };
+        }
+        return { ok: true, session };
+    }
+    getSession(sessionId) {
+        return this.sessions.get(sessionId);
+    }
+}
+//# sourceMappingURL=session-router.js.map

package/dist/remote/session-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-router.js","sourceRoot":"","sources":["../../src/remote/session-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAsCzC,MAAM,OAAO,mBAAmB;IAKX;IACA;IALF,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC/C,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE3D,YACmB,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAClC,SAAuB,GAAG,EAAE,CAAC,UAAU,EAAE;QADzC,QAAG,GAAH,GAAG,CAA+B;QAClC,WAAM,GAAN,MAAM,CAAmC;IACzD,CAAC;IAEJ,eAAe,CAAC,KAMf;QACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAqB;YAChC,SAAS,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE;YAClC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;SACzE,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,iBAAiB,CAAC,KAA6D;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAChF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE;YACtB,IAAI;YACJ,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;SACrE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe,CAAC,KAA0D;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,OAAO,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7E,IAAI,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE;YAAE,OAAO,KAAK,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE;YAAE,OAAO,KAAK,CAAC;QACrF,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC;QACrB,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC9B,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,CAAC,SAAiB;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QACjD,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mBAAmB,CAAC,SAAiB,EAAE,aAA6B;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;QACtC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC;QAC1B,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,KAIP;QACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACnD,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC/B,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAC9D,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,sCAAsC;aAChD,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,2CAA2C;aACrD,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,2CAA2C;aACrD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,8DAA8D;aACxE,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,sCAAsC;aAChD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACzD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,uCAAuC;aACjD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "easyeda-mcp-pro",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "mcpName": "io.github.oaslananka/easyeda-mcp-pro",
   "description": "MCP server for EasyEDA Pro: PCB inspection, BOM, exports, and hardware review.",
   "keywords": [
@@ -72,7 +72,8 @@
     "check:metadata": "node scripts/check-metadata.mjs",
     "inventory:capture": "tsx scripts/capture-runtime-inventory.mts",
     "inventory:diff": "tsx scripts/diff-runtime-inventory.mts",
-    "eval:golden": "tsx scripts/run-evals.mts"
+    "eval:golden": "tsx scripts/run-evals.mts",
+    "eval:golden:update": "tsx scripts/run-evals.mts --update-baseline"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",