release: v0.1.3 (add hosted remote; OIDC release workflow)

Author: 0xdidi

.github/workflows/release.yml

@@ -0,0 +1,65 @@
+name: Release
+
+# Publishes to npm and the official MCP Registry when a version tag (vX.Y.Z) is pushed.
+#
+# Credentials:
+#   - npm: NO token. Uses npm Trusted Publishing (OIDC). Configure a trusted
+#     publisher on the @noteboxd/mcp package (npmjs.com -> package -> Settings ->
+#     Trusted Publishers) bound to this repo + workflow file "release.yml".
+#   - MCP Registry: the DNS namespace (com.noteboxd) is authenticated with the
+#     ed25519 key behind the noteboxd.com TXT record, provided as the
+#     MCP_DNS_PRIVATE_KEY secret (its repository access must include this repo).
+#
+# Cut a release:
+#   1. Bump the version in package.json, server.json, and src/config.ts (keep equal).
+#   2. git commit + git tag vX.Y.Z + git push --follow-tags
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write # required for npm Trusted Publishing (OIDC)
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          registry-url: "https://registry.npmjs.org"
+
+      - name: Verify tag matches package.json and server.json versions
+        run: |
+          TAG="${GITHUB_REF_NAME#v}"
+          PKG="$(node -p "require('./package.json').version")"
+          SRV="$(node -p "require('./server.json').version")"
+          if [ "$TAG" != "$PKG" ] || [ "$TAG" != "$SRV" ]; then
+            echo "Version mismatch: tag=$TAG package.json=$PKG server.json=$SRV"
+            exit 1
+          fi
+
+      - name: Install dependencies
+        run: npm install
+
+      - name: Upgrade npm (Trusted Publishing requires npm >= 11.5)
+        run: npm install -g npm@latest
+
+      - name: Publish to npm (OIDC, no token)
+        run: npm publish
+
+      - name: Install mcp-publisher
+        run: |
+          curl -L "https://github.com/modelcontextprotocol/registry/releases/latest/download/mcp-publisher_linux_amd64.tar.gz" | tar xz mcp-publisher
+          sudo mv mcp-publisher /usr/local/bin/
+
+      - name: Publish to MCP Registry (DNS auth)
+        env:
+          MCP_DNS_PRIVATE_KEY: ${{ secrets.MCP_DNS_PRIVATE_KEY }}
+        run: |
+          mcp-publisher login dns --domain noteboxd.com --private-key "$MCP_DNS_PRIVATE_KEY"
+          mcp-publisher publish

CONTRIBUTING.md

@@ -24,11 +24,19 @@ This package only wraps public `api.noteboxd.com/v1` endpoints. Please keep it t
 
 ## Releasing
 
-1. Bump the version in `package.json`, `src/config.ts`, and `server.json`.
-2. `pnpm build`
-3. `npm publish`
-4. Update `server.json` in the MCP registry. Before submitting, add back the `$schema` field
-   (`https://static.modelcontextprotocol.io/schemas/2025-07-09/server.schema.json`).
+Releases are automated by `.github/workflows/release.yml` on a version tag. It publishes to
+npm via Trusted Publishing (OIDC, no token) and to the official
+[MCP Registry](https://registry.modelcontextprotocol.io) via DNS auth.
+
+1. Bump the version in `package.json`, `server.json`, and `src/config.ts` (keep them equal).
+2. Commit, then tag and push:
+   ```bash
+   git commit -am "release: vX.Y.Z"
+   git tag vX.Y.Z
+   git push --follow-tags
+   ```
+
+The workflow checks the tag matches the file versions before publishing.
 
 ## Issues
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noteboxd/mcp",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "mcpName": "com.noteboxd/mcp",
   "description": "Model Context Protocol server for Noteboxd. Query fragrances, notes, accords, brands, perfumers, reviews, and charts from your AI assistant.",
   "publishConfig": {

server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/noteboxd/mcp",
     "source": "github"
   },
-  "version": "0.1.2",
+  "version": "0.1.3",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@noteboxd/mcp",
-      "version": "0.1.2",
+      "version": "0.1.3",
       "transport": {
         "type": "stdio"
       },
@@ -25,5 +25,11 @@
         }
       ]
     }
+  ],
+  "remotes": [
+    {
+      "type": "streamable-http",
+      "url": "https://mcp.noteboxd.com/mcp"
+    }
   ]
 }

src/config.ts

@@ -1,6 +1,6 @@
 // Change PACKAGE_NAME here if the package is ever published under a scope.
 export const PACKAGE_NAME = "noteboxd-mcp";
-export const PACKAGE_VERSION = "0.1.2";
+export const PACKAGE_VERSION = "0.1.3";
 
 // Public REST API origin. Override with NOTEBOXD_API_BASE_URL.
 export const DEFAULT_API_BASE_URL = "https://api.noteboxd.com";