siglent-sdg-mcp 2.0.2 → 2.0.4

package/README.md

@@ -1,5 +1,11 @@
 # siglent-sdg-mcp
 
+[![CI](https://github.com/MagnusJohansson/siglent-sdg-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/MagnusJohansson/siglent-sdg-mcp/actions/workflows/ci.yml)
+[![CodeQL](https://github.com/MagnusJohansson/siglent-sdg-mcp/actions/workflows/codeql.yml/badge.svg)](https://github.com/MagnusJohansson/siglent-sdg-mcp/actions/workflows/codeql.yml)
+[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/MagnusJohansson/siglent-sdg-mcp/badge)](https://scorecard.dev/viewer/?uri=github.com/MagnusJohansson/siglent-sdg-mcp)
+[![npm](https://img.shields.io/npm/v/siglent-sdg-mcp)](https://www.npmjs.com/package/siglent-sdg-mcp)
+[![License: MIT](https://img.shields.io/github/license/MagnusJohansson/siglent-sdg-mcp)](LICENSE)
+
 A [Model Context Protocol](https://modelcontextprotocol.io/) (MCP) server that lets AI assistants control Siglent SDG waveform generators over your local network. Connect Claude to your bench and generate, modulate, and configure signals through natural language.
 
 ## Overview
@@ -417,11 +423,11 @@ npm run hardware-check -- 192.168.1.126
 
 Publishing is triggered by **publishing a GitHub Release**, not by pushing a tag:
 
-1. Bump `version` in `package.json` and add a section to `CHANGELOG.md`, then merge to `main`.
-2. Create a release (draft first) with tag `vX.Y.Z` on `main`, using the changelog section as the release notes.
-3. Publish the release. This runs the npm publish (tests first, with provenance) and the GHCR image build.
+1. Bump `version` in `package.json` and `SERVER_VERSION` in `src/server.ts`, and add a `CHANGELOG.md` section. Merge to `main`.
+2. Create a release (draft first) with tag `vX.Y.Z` on `main`, using the changelog section as the release notes. Tick "pre-release" exactly when the version has a suffix such as `-rc.1`.
+3. Publish the release. The `Release` workflow runs three jobs in order: **verify**, then **npm**, then **docker**.
 
-The npm workflow fails if the tag doesn't match the `package.json` version. A pre-release publishes to the npm `next` dist-tag, and doesn't move the Docker `latest` tag. A draft release publishes nothing.
+The verify job fails, and nothing is published, if the tag doesn't match the `package.json` version, `SERVER_VERSION` differs from it, `repository.url` doesn't match the repository exactly, the pre-release checkbox doesn't match the version, the tagged commit isn't on `main`, or the build or tests fail. The Docker image is only pushed after the npm publish succeeds. A pre-release publishes to the npm `next` dist-tag and doesn't move the Docker `latest` tag. A draft release publishes nothing.
 
 ### Docker (local build)
 

package/build/security/scpi-guard.js

@@ -75,9 +75,11 @@ const QUERY_PARAMETER_RULES = [
 ];
 /**
  * IEEE 488.2 common commands that are pure queries. Others that accept a '?'
- * form (*RST?, *TST?, *CLS?) are actions, or would run a self-test.
+ * form (*RST?, *TST?, *CLS?) are actions, or would run a self-test. *ESR? is
+ * excluded too: reading the Event Status Register clears it, which a tool
+ * marked read-only must not do.
  */
-const COMMON_QUERIES = new Set(["IDN", "OPC", "ESR", "STB", "ESE", "SRE", "OPT"]);
+const COMMON_QUERIES = new Set(["IDN", "OPC", "STB", "ESE", "SRE", "OPT"]);
 export function assertIsQuery(cmd) {
     assertWireSafe(cmd);
     const m = QUERY_PATTERN.exec(cmd.trim());

package/build/server.d.ts

@@ -1,5 +1,5 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import type { ServerConfig } from "./config.js";
-export declare const SERVER_VERSION = "2.0.2";
+export declare const SERVER_VERSION = "2.0.4";
 /** Build the MCP server with all tools registered under the given configuration. */
 export declare function createServer(config: ServerConfig): McpServer;

package/build/server.js

@@ -8,7 +8,7 @@ import { registerBurstTools } from "./tools/burst.js";
 import { registerArbitraryTools } from "./tools/arbitrary.js";
 import { registerUtilityTools } from "./tools/utility.js";
 import { registerScpiTools } from "./tools/scpi.js";
-export const SERVER_VERSION = "2.0.2";
+export const SERVER_VERSION = "2.0.4";
 /** Build the MCP server with all tools registered under the given configuration. */
 export function createServer(config) {
     const server = new McpServer({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "siglent-sdg-mcp",
-  "version": "2.0.2",
+  "version": "2.0.4",
   "description": "MCP server for Siglent SDG waveform generator control via SCPI over TCP sockets",
   "type": "module",
   "main": "build/index.js",
@@ -36,13 +36,13 @@
     "url": "git+https://github.com/MagnusJohansson/siglent-sdg-mcp.git"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.26.0",
-    "zod": "^3.25.0"
+    "@modelcontextprotocol/sdk": "^1.32.2",
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",
     "typescript": "^5.7.0",
-    "vitest": "^3.0.0"
+    "vitest": "^4.1.12"
   },
   "engines": {
     "node": ">=20"