itfin-mcp 0.1.0 → 0.1.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Steven Tailor <stv.tailor@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -2,6 +2,8 @@
 
 Report time and request leave in ITFin by chatting with Claude Code, Codex or Claude Desktop.
 
+An unofficial tool. It is not made, endorsed or supported by ITFin.
+
 ## Install (about 2 minutes)
 
 You need macOS, Node.js 22+ and Chrome, Edge, Brave, Arc or Chromium.
@@ -71,13 +73,8 @@ npm test
 npm run typecheck
 ```
 
-To try a local build with the installer, pack it and point the installer at the tarball:
-
-```bash
-npm pack
-ITFIN_MCP_PACKAGE=$PWD/itfin-mcp-0.1.0.tgz bash scripts/install.sh
-```
+## License
 
-## Releases
+The code is [MIT](LICENSE), copyright Steven Tailor.
 
-Every merge into `main` publishes to npm ([workflow](.github/workflows/publish.yml)) as the next patch version and tags it `v<version>`. For a minor or major release, raise `version` in `package.json` in the PR.
+The license covers this project's code only. ITFin, its name, service, API and data belong to their owners and are not licensed here. The tool talks to ITFin only through the API your own account can already use, after you log in yourself. Use it within your company's ITFin terms.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "itfin-mcp",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Local MCP server for ITFin: projects, time entries and ITFin token lifecycle",
   "keywords": [
     "mcp",
@@ -9,6 +9,8 @@
     "codex",
     "timesheet"
   ],
+  "license": "MIT",
+  "author": "Steven Tailor <stv.tailor@gmail.com>",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/steven-tailor/itfin-mcp.git"

package/scripts/install.sh

@@ -38,20 +38,32 @@ command -v npm >/dev/null || fail "npm is required. It comes with Node.js: https
 
 PKG="$DIR/node_modules/itfin-mcp"
 version() { node -p 'require(process.argv[1]).version' "$PKG/package.json" 2>/dev/null || true; }
-OLD_VERSION=""
+OLD_VERSION="$(version)"
+# Installs before the npm package were a git clone of the repo, which npm can't install into. Only
+# a clean clone made by the old installer is replaced, never a checkout someone works in.
+LEGACY=""
 if [[ -d "$DIR/.git" ]]; then
-  # Installs before the npm package were a git clone of the repo, which npm can't install into.
-  [[ "$(git -C "$DIR" remote get-url origin 2>/dev/null)" == *itfin-mcp* ]] || fail "$DIR is a git repo that isn't itfin-mcp. Pick another folder with --dir."
-  echo "→ Replacing the git clone in $DIR with the npm package"
+  ORIGIN="$(git -C "$DIR" remote get-url origin 2>/dev/null || true)"
+  [[ "$ORIGIN" =~ ^https://github\.com/(softgem-dev|steven-tailor)/itfin-mcp(\.git)?$ && -z "$(git -C "$DIR" status --porcelain 2>/dev/null)" ]] \
+    || fail "$DIR is a git repo other than an itfin-mcp install, or has local changes. Pick another folder with --dir."
+  LEGACY=1
   OLD_VERSION="git"
-  rm -rf "$DIR"
-else
-  OLD_VERSION="$(version)"
 fi
 
+# A git install is replaced only after npm succeeds, so a failed update leaves it working.
+TARGET="$DIR"
+[[ -n "$LEGACY" ]] && TARGET="$DIR.npm-$$"
 echo "→ Installing $PACKAGE from npm"
-mkdir -p "$DIR"
-npm install --prefix "$DIR" --silent --no-audit --no-fund --omit=dev "$PACKAGE"
+mkdir -p "$TARGET"
+if ! npm install --prefix "$TARGET" --silent --no-audit --no-fund --omit=dev "$PACKAGE"; then
+  [[ -n "$LEGACY" ]] && rm -rf "$TARGET"
+  fail "npm could not install $PACKAGE."
+fi
+if [[ -n "$LEGACY" ]]; then
+  echo "→ Replacing the git clone in $DIR with the npm package"
+  rm -rf "$DIR"
+  mv "$TARGET" "$DIR"
+fi
 NEW_VERSION="$(version)"
 [[ -n "$NEW_VERSION" ]] || fail "npm did not install itfin-mcp into $DIR."