mcp-word-bridge 3.2.3 → 3.2.4

package/README.md

@@ -227,21 +227,23 @@ mcp-word-bridge/
 5. Changes go through Word's editing pipeline — cursor follows edits like a human typing
 6. When the MCP client terminates the process, the bridge server stops automatically
 
-## Regenerating TLS Certificates
+## TLS Certificate
 
-A self-signed localhost certificate is **auto-generated on first run** if `certs/cert.pem` and `certs/key.pem` don't exist. No manual step needed.
+A self-signed localhost certificate is **auto-generated on first run** if `certs/cert.pem` and `certs/key.pem` don't exist. The server prints the exact trust command with the resolved path:
 
-To trust the cert (required for Word to connect without warnings):
-
-**macOS:**
-```bash
-sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain node_modules/mcp-word-bridge/certs/cert.pem
 ```
+[mcp-word-bridge] ✓ Certificate generated.
+[mcp-word-bridge]
+[mcp-word-bridge] To trust the certificate (required once for Word to connect):
+[mcp-word-bridge]   security add-trusted-cert -r trustRoot -k ~/Library/Keychains/login.keychain-db "/path/to/certs/cert.pem"
+```
+
+Run the printed command once. No `sudo` required — it adds to your user login keychain.
 
-**To regenerate manually:**
+**To regenerate:**
 ```bash
 rm certs/cert.pem certs/key.pem
-node index.js  # will regenerate on startup
+# restart the MCP server — it will regenerate and print the trust command again
 ```
 
 ## Known Limitations & Word API Behavior

package/index.js

@@ -40,8 +40,17 @@ function ensureCerts() {
     ].join('\n'));
   }
   execSync('openssl req -x509 -newkey rsa:2048 -keyout "' + keyPath + '" -out "' + certPath + '" -days 3650 -nodes -config "' + confPath + '"', { stdio: 'pipe' });
-  process.stderr.write('[mcp-word-bridge] Certificate generated at ' + CERTS_DIR + '\n');
-  process.stderr.write('[mcp-word-bridge] NOTE: You may need to trust this cert in your OS keychain for Word to connect.\n');
+  process.stderr.write('[mcp-word-bridge] ✓ Certificate generated.\n');
+  process.stderr.write('[mcp-word-bridge]\n');
+  process.stderr.write('[mcp-word-bridge] To trust the certificate (required once for Word to connect):\n');
+  if (process.platform === 'darwin') {
+    process.stderr.write('[mcp-word-bridge]   security add-trusted-cert -r trustRoot -k ~/Library/Keychains/login.keychain-db "' + certPath + '"\n');
+  } else if (process.platform === 'win32') {
+    process.stderr.write('[mcp-word-bridge]   certutil -user -addstore Root "' + certPath + '"\n');
+  } else {
+    process.stderr.write('[mcp-word-bridge]   sudo cp "' + certPath + '" /usr/local/share/ca-certificates/ && sudo update-ca-certificates\n');
+  }
+  process.stderr.write('[mcp-word-bridge]\n');
 }
 
 ensureCerts();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-word-bridge",
-  "version": "3.2.3",
+  "version": "3.2.4",
   "description": "MCP server for live Word document editing via Office Add-in",
   "main": "index.js",
   "bin": {