npm - mobilecoder-mcp - Versions diffs - 2.1.4 → 2.1.5 - Mend

mobilecoder-mcp 2.1.4 → 2.1.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/README.md CHANGED Viewed

@@ -1,331 +1,118 @@
-# MobileCoder MCP
+# 🔐 MobileCoder ZK-Relay Agent (v2.1.5)
-> MCP server for MobileCoderMCP - enables mobile to desktop coding
+> **Zero-Knowledge. Zero-Trust. Total Connectivity.**
+> Securely bridge your mobile device to your desktop IDE (Cursor, Windsurf, VSCode) with military-grade encryption.
-Transform your mobile device into a powerful coding companion for Cursor, Windsurf, and VSCode. Connect your phone to your IDE and code from anywhere with WebRTC-powered real-time communication.
-## Features
-- **QR Code Quick Connect** - Scan and connect in seconds
-- **End-to-End Encryption** - DTLS-secured WebRTC connections
-- **Universal IDE Support** - Works with Cursor, Windsurf, and VSCode
-- **Real-Time Sync** - Low-latency signaling over WebSocket
-- **Security Hardened** - HMAC integrity, SDP validation, replay protection
+[![npm version](https://img.shields.io/npm/v/mobilecoder-mcp.svg)](https://www.npmjs.com/package/mobilecoder-mcp)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Security: ZK-Relay](https://img.shields.io/badge/Security-Zero--Knowledge-green.svg)]()
 ---
-## What's New in v1.0.2
-### Security Hardening & Stability
-This version brings critical security improvements to ensure robust WebRTC signaling and data integrity.
+## ⚡ Why ZK-Relay?
-- **HMAC Message Integrity**: Added Hash-based Message Authentication Code (HMAC) to verify that signaling messages haven't been tampered with during transit.
+The MobileCoder ZK-Relay architecture replaces traditional WebRTC to ensure **100% connectivity** even behind strict corporate firewalls and complex NATs, without compromising on privacy.
-- **SDP Validation**: Strict Session Description Protocol (SDP) validation to prevent malicious payload injection.
+- **Zero-Trust Relay**: The server only acts as a blind mailbox. It cannot see, decrypt, or store your data.
+- **End-to-End Encryption**: Every message is encrypted on your device and decrypted on your mobile (AES-256-CBC).
+- **Universal Bypass**: No more "ICE Connection Failed". If you have internet, you have a connection.
-- **DTLS Fingerprint Check**: Added validation for DTLS fingerprints to ensure secure end-to-end encrypted media streams.
+---
-- **Replay Attack Protection**: Implemented message nonces and tracking to block unauthorized session re-use.
+## 🛡️ Security Features
-- **Memory Leak Prevention**: Optimized event listeners and connection cleanup cycles for long-running sessions.
+We've hardened version 2.1.x with advanced cryptographic protocols:
-- **HTTPS Enforcement**: Enhanced origin validation to ensure secure contexts (HTTPS) for all WebRTC operations.
+- **🔐 PBKDF2 Key Derivation**: Your 6-digit pairing code is strengthened using PBKDF2-SHA256 with **100,000 iterations** to derive a master encryption key.
+- **🔄 Perfect Forward Secrecy (PFS)**: Session keys are automatically rotated every **10 minutes**. Even if one key is compromised, your past sessions remain secure.
+- **🛡️ Replay Attack Prevention**: Every message includes a unique **nonce (IV)** and a **timestamp**. Expired or duplicate messages are rejected.
+- **☁️ Ephemeral Sessions**: No data ever touches a disk. All communication is held in memory and destroyed immediately after the session ends.
 ---
-## Installation
-### Global Install
-```bash
-npm install -g mobilecoder-mcp@latest
-```
-### Using npx (No Install Required)
+## 🚀 Installation
+### Using npx (Recommended)
+No installation required. Run the latest version directly:
 ```bash
 npx mobilecoder-mcp@latest init
 ```
----
-## Quick Start
-### 1. Initialize Connection
+### Global Install
 ```bash
-mobilecoder-mcp init
+npm install -g mobilecoder-mcp@latest
 ```
-This will:
-- Generate a unique 6-character pairing code
-- Display a QR code for mobile scanning
-- Automatically configure your IDEs (Cursor, Windsurf, VSCode)
-- Start the MCP server
-### 2. Connect Mobile Device
-1. Visit [https://mobilecoder.xyz/connect](https://mobilecoder.xyz/connect) on your mobile device
-2. Enter the pairing code displayed in terminal
-3. Alternatively, scan the QR code shown in terminal
-### 3. Start Coding
-Your mobile device is now connected! Use it to:
-- Generate code with AI assistance
-- Execute terminal commands
-- Browse and edit files
-- Get real-time feedback
 ---
-## Commands
-### `mobilecoder-mcp init`
-Initialize a new connection, generate QR code, and start the agent.
+## 🛠️ Quick Start
+### 1. Initialize
+Run the agent in your project directory:
 ```bash
 mobilecoder-mcp init
 ```
+This command will:
+- Generate a secure 6-digit session code.
+- Display a **QR Code** for instant mobile pairing.
+- Start the encrypted relay client.
+- Automatically detect and optimize for your IDE (**Cursor**, **Windsurf**, or **VSCode**).
-**Options:**
-- `-s, --signaling <url>` - Custom signaling server URL (default: https://api.mobilecoder.xyz/api)
-- `--debug` - Enable debug logging
-### `mobilecoder-mcp start`
-Start the agent with an existing connection code.
-```bash
-mobilecoder-mcp start --code=ABC123
-```
-**Options:**
-- `-c, --code <code>` - Your 6-character connection code (required)
-- `-s, --signaling <url>` - Custom signaling server URL
-- `--debug` - Enable debug logging
-### `mobilecoder-mcp reset`
-Remove MobileCoderMCP configuration from IDEs.
-```bash
-mobilecoder-mcp reset
-```
-**Options:**
-- `-i, --ide <ide>` - Specific IDE to reset (cursor, windsurf, vscode, all)
----
-## Environment Variables
-| Variable | Description | Default |
-|----------|-------------|---------|
-| `MCP_SIGNALING_URL` | Signaling server URL | `https://api.mobilecoder.xyz/api` |
-| `MOBILE_CODER_WEB_URL` | Web app URL for QR codes | `https://mobilecoder.xyz` |
-| `MCP_CONNECTION_CODE` | Pre-defined connection code | Auto-generated |
----
-## How It Works
-```
-[Desktop IDE]           WebRTC (P2P)           [Mobile Device]
-[MCP Server]         Signaling (WebSocket)       [Web App]
-```
-1. **Desktop**: MCP server starts, generates pairing code
-2. **Mobile**: User enters code on web app
-3. **Signaling**: Server facilitates WebRTC handshake
-4. **P2P Connection**: Direct peer-to-peer connection established
-5. **Data Flow**: Commands/results flow directly (no server middleman)
----
-## IDE Configuration
-The `init` command automatically configures supported IDEs:
-### Cursor
-```json
-~/.cursor/mcp.json
-```
-### Windsurf
-```json
-~/.codeium/windsurf/mcp_config.json
-```
-### VSCode
-```json
-~/.vscode/mcp.json
-```
+### 2. Connect
+Scan the QR code or visit [mobilecoder.xyz](https://mobilecoder.xyz) on your mobile device and enter the code.
-Manual configuration example:
-```json
-{
-  "mcpServers": {
-    "mobile-coder": {
-      "command": "npx",
-      "args": ["mobilecoder-mcp", "start", "--code", "YOUR_CODE", "--signaling", "https://api.mobilecoder.xyz/api"],
-      "env": {
-        "MCP_CONNECTION_CODE": "YOUR_CODE",
-        "MCP_SIGNALING_URL": "https://api.mobilecoder.xyz/api"
-      }
-    }
-  }
-}
-```
+### 3. Build from Anywhere
+Use your mobile phone to:
+- ✍️ Write and edit code with AI assistance.
+- 🐚 Execute terminal commands.
+- 📂 Browse project files.
+- 🚀 Deploy applications.
 ---
-## Security
-### End-to-End Encryption
-- **DTLS 1.2/1.3**: All WebRTC media encrypted
-- **HMAC-SHA256**: Message integrity verification
-- **SDP Validation**: Malicious payload prevention
-- **Nonce Tracking**: Replay attack protection
-### Data Privacy
+## ⌨️ CLI Commands
-- **No Server Storage**: Signaling only, no message logging
-- **P2P Architecture**: Data flows directly between devices
-- **Ephemeral Keys**: Session-specific encryption keys
-### Best Practices
-1. **Use HTTPS**: Always in production (enforced by default)
-2. **Secure Codes**: Connection codes expire after 5 minutes
-3. **Rate Limiting**: Signaling endpoints protected
-4. **CORS Whitelist**: Only authorized origins allowed
+| Command | Description |
+|---------|-------------|
+| `init` | Start a new secure session with a fresh QR code. |
+| `start --code=XXXXXX` | Resume a session with a specific code. |
+| `--debug` | Enable detailed JSON-RPC and Relay logging. |
+| `--signaling <url>` | Use a custom signaling/relay server. |
 ---
-## Troubleshooting
-### Connection Issues
+## 🏗️ Architecture
-**Problem**: "Connection timeout" or "Cannot connect to signaling server"
-**Solutions**:
-- Check internet connection on both devices
-- Verify `MCP_SIGNALING_URL` is correct
-- Ensure signaling server is running: `curl https://api.mobilecoder.xyz/api/health`
-### WebRTC Handshake Fails
-**Problem**: "ICE connection failed" or "No remote candidate"
-**Solutions**:
-- Check firewall settings (UDP ports 3478, 5349)
-- Verify TURN server is accessible
-- Try different network (disable VPN if needed)
-### Code Already in Use
-**Problem**: "Connection code is already in use"
-**Solution**:
-- Wait 2 minutes for code to expire
-- Or generate new code: `mobilecoder-mcp init`
----
-## Development
-### Build from Source
-```bash
-git clone https://github.com/hasmetdurak/mobilecoder-mcp.git
-cd mobilecoder-mcp/mcp-server
-npm install
-npm run build
-npm link
+```text
+ [Desktop IDE] <---> [ZK-Relay Agent] <--- Encrypted Channel (AES-256) ---> [Mobile Client]
+                            |                                                    |
+                            +----------- [ Blind Relay Server ] -----------------+
+                                     (Blindly relays encrypted packets)
 ```
-### Run in Development Mode
-```bash
-npm run dev  # Watch mode with auto-rebuild
-```
-### Run Debug Mode
-```bash
-mobilecoder-mcp init --debug
-```
----
-## Architecture
-### MCP Server
-```
-mcp-server/
-├── src/
-│   ├── index.ts          # CLI entry point
-│   ├── agent.ts          # Universal MCP agent
-│   ├── webrtc.ts         # WebRTC connection manager
-│   ├── security.ts       # HMAC & validation
-│   ├── mcp-handler.ts    # MCP tool handlers
-│   ├── tool-detector.ts  # IDE tool detection
-│   └── adapters/
-│       └── cli-adapter.ts # CLI-specific adapters
-├── dist/                 # Compiled JavaScript
-└── package.json
-```
-### Dependencies
-- `@modelcontextprotocol/sdk` - MCP protocol implementation
-- `simple-peer` - WebRTC wrapper for Node.js
-- `@roamhq/wrtc` - Native WebRTC bindings
-- `commander` - CLI framework
-- `qrcode-terminal` - Terminal QR codes
+1. **Handshake**: Devices perform a PBKDF2-based key exchange.
+2. **Encryption**: Desktop encrypts data locally with a 256-bit key.
+3. **Relay**: Encrypted packets flow through our high-speed relay server.
+4. **Decryption**: Mobile client decrypts data using the same derived key.
 ---
-## Contributing
-Contributions are welcome! Please feel free to submit a Pull Request.
+## 🤝 Contributing
-1. Fork the repository
-2. Create your feature branch (`git checkout -b feature/amazing-feature`)
-3. Commit your changes (`git commit -m 'Add amazing feature'`)
-4. Push to the branch (`git push origin feature/amazing-feature`)
-5. Open a Pull Request
+We welcome security audits and features!
+1. Fork the repo.
+2. Create your branch: `git checkout -b feat/secure-terminal`.
+3. Commit changes: `git commit -m 'Add biometric auth'`.
+4. Push to branch: `git push origin feat/secure-terminal`.
+5. Open a Pull Request.
 ---
-## License
-MIT License - see LICENSE file for details
----
-## Support
+## 📄 License & Support
+- **License**: MIT
 - **Issues**: [GitHub Issues](https://github.com/hasmetdurak/mobilecoder-mcp/issues)
-- **Web App**: [https://mobilecoder.xyz](https://mobilecoder.xyz)
-- **API Docs**: [https://api.mobilecoder.xyz](https://api.mobilecoder.xyz)
----
-## Acknowledgments
-Built with:
-- [Model Context Protocol (MCP)](https://modelcontextprotocol.io)
-- [Simple Peer](https://github.com/feross/simple-peer)
-- [WebRTC](https://webrtc.org/)
+- **Website**: [mobilecoder.xyz](https://mobilecoder.xyz)
 ---
-**Version**: 1.0.3 | **Author**: @hasmetdurak | **License**: MIT
+**Version**: 2.1.5 | **Author**: @hasmetdurak | **Built for the Future of Mobile Coding.**

package/dist/cli.js CHANGED Viewed

@@ -11,7 +11,7 @@ const program = new commander_1.Command();
 program
     .name('mobilecoder-mcp')
     .description('MobileCoder Desktop Agent - ZK-Relay Edition')
-    .version('2.1.4');
+    .version('2.1.5');
 program
     .command('init')
     .description('Start the secure relay agent')

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "mobilecoder-mcp",
-  "version": "2.1.4",
+  "version": "2.1.5",
   "description": "Secure Zero-Knowledge Terminal Relay for MobileCoder",
   "type": "commonjs",
   "main": "dist/agent.js",