KnownFix 0.3.17

Demand-led npm EOTP release.

• Adds npx knownfix search --json "<exact error>" for the complete machine-readable search_fixes result, including a paid match's private signed USDC/ETH checkout.
• Keeps default terminal output bearer-safe and gives one direct MCP next action without requiring agents to discover get_offer.
• Publishes a current npm ERR! code EOTP field note with interactive 2FA, GitHub OIDC Trusted Publishing, and granular-token branches.
• Links the verified exact fix, the six-fix npm Publishing Recovery Pack, public books, the Moltbook field report, and official npm guidance.

Package: https://www.npmjs.com/package/knownfix/v/0.3.17
Exact fix: https://b-hash88.github.io/knownfix/fixes/npm-publish-2fa-403.html
Recovery pack: https://b-hash88.github.io/knownfix/packs/npm-publishing-recovery-pack.html

KnownFix 0.3.16

Demand-led release for the error agents request most.

npm EOTP checkout

• A paid search_fixes match now returns a useful free diagnosis, confidence and compatibility, the dollar price, signed Base Pay USDC and exact-ETH offers, wallet parameters, and one pay-and-redeem action. Agents no longer need to discover get_offer first.
• npm ERR! code EOTP and the related publish 403 now recommend the six-fix npm Publishing Recovery Pack for $4.00, while preserving a separately signed $0.05 single-fix fallback in the same response.
• The crawlable diagnosis, agent-readable Markdown, and pack outline are linked below.

Registry recovery

• Adds the free, production-verified MCP Registry expired-JWT field report with one-off GitHub login and recurring GitHub OIDC recovery.
• The Official MCP Registry 0.3.18 record points to this installable knownfix@0.3.16 package and the public Streamable HTTP server.

Verify it

npx -y knownfix@0.3.16 search "npm ERR! code EOTP"

• npm EOTP diagnosis: https://b-hash88.github.io/knownfix/fixes/npm-publish-2fa-403.html
• npm Publishing Recovery Pack: https://b-hash88.github.io/knownfix/packs/npm-publishing-recovery-pack.html
• MCP Registry JWT recovery: https://b-hash88.github.io/knownfix/fixes/mcp-registry-jwt-expired-401.html
• Public books: https://knownfix-backend-28.b-hash88.deno.net/books

KnownFix 0.3.14

Adds a production-verified free guide for the npm exec matching-package PATH failure on Windows, including the neutral-directory release check and official npm documentation.

Catalog truth: 38 fixes, 34 verified in production, 4 documented, and 12 free in full. The storefront generator now escapes fix-page metadata safely and publishes commands and gotchas for free samples when available.

Verified with 100 backend tests, 18/18 live production E2E groups, exact npm registry integrity and shasum readback, and a neutral-directory execution of the published package.

KnownFix 0.3.13

KnownFix 0.3.13 removes an unnecessary step from agent checkout: unpaid get_fix and get_skill calls now return product-bound signed Base Pay USDC and exact-ETH offers directly. Requests that already carry a payment proof or private offer never receive a fresh offer and instead return an explicit no-double-pay recovery action. The public books ledger now tracks purchase-ready fix and skill checkout separately without storing buyer identity, offer tokens, transaction hashes, or query text. Paid bodies remain withheld until verified redemption. Verified with 99 backend tests and 18/18 live end-to-end groups across the public site, API, MCP server, and Base proof paths.

KnownFix 0.3.12

Adds a privacy-safe rolling 30-day target window to the public books JSON: 1% meaningful MCP tool use, a 30% paid-intent-to-offer event ratio, and five external sales. Attribution remains explicit: event counts are not unique users, raw HTTP includes automated/operator traffic, and operator-marked tests and settlements are excluded where stated. Payment and delivery behavior are unchanged.

npm EOTP/403 field guide

The package metadata and hosted MCP search recognize the current npm ERR! code EOTP wording and the related registry 403 as the same documented publishing-policy failure. Start with the free diagnosis before rotating any credential:

• Technical discussion and safe triage: b-hash88/knownfix#1
• Crawlable error page: https://b-hash88.github.io/knownfix/fixes/npm-publish-2fa-403.html
• Agent-readable Markdown: https://b-hash88.github.io/knownfix/fixes/npm-publish-2fa-403.md
• No-account lookup: npx -y knownfix@0.3.12 search "npm ERR! code EOTP"

The guide separates interactive 2FA, package policy, granular-token rules, and Trusted Publishing. It never asks users to place an OTP or token in source, CI configuration, agent prompts, or logs.

Verification

Verified with 99 backend tests and 18/18 live E2E groups, including the public books contract, free/paid boundary, Base Pay USDC and exact-ETH proof separation, and the EOTP discussion links.

KnownFix 0.3.11

Adds the exact EOTP token and eight demand-specific npm keywords after public npm and Glama searches failed to surface KnownFix for its highest-intent error query. The 97-character description now covers npm publish/EOTP, GitHub Actions, MCP, Windows, Base, and USDC/ETH packs. No payment or delivery behavior changed. Verified with 96 backend tests and 18/18 live end-to-end groups.

KnownFix 0.3.10

Improves high-intent discovery metadata with explicit npm publishing, GitHub Actions, MCP, Windows, and Base categories. The 97-character description is compatible with the official MCP Registry limit and reflects the measured Glama discoverability gap. No payment or delivery behavior changed. Verified with 96 backend tests and 18/18 live end-to-end groups.

KnownFix 0.3.9

KnownFix 0.3.9 adds exact npm CLI EOTP aliases to the documented npm 2FA/authorized-publishing recovery, so interactive EOTP and registry 403 searches reach one evidence-backed product instead of competing duplicates. The public HTML, Markdown, catalog JSON, JSON-LD, llms-full.txt, backend MCP, and npm package now agree on the 0.3.9 contract. Evidence: https://github.com/npm/cli/blob/81a901c9a5913f9bd8104e6196af3580eafa13cb/lib/utils/error-message.js and https://docs.npmjs.com/requiring-2fa-for-package-publishing-and-settings-modification/. Verification: 96 backend tests and 18/18 live end-to-end groups passed across GitHub Pages, Deno Deploy, npm, and Base mainnet proof checks.

KnownFix 0.3.8: complete MCP workflows

KnownFix 0.3.8 closes the remaining MCP workflow gaps identified by directory analysis. The remote server now publishes 12 tools, including a privacy-safe check_submission status lookup. audit_endpoint explicitly previews and redeems paid reports through the same tool, and get_skill clearly delivers assembled multi-fix bundles. All tools publish output schemas and all four MCP behavior annotations. Backend verification: 94 unit/security tests plus a live 12-tool contract readback. npm package and Registry manifest both point to the 0.3.8 backend and public storefront.

KnownFix 0.3.7: cited npm Trusted Publishing recovery

KnownFix 0.3.7

KnownFix 0.3.7 adds a documented recovery for npm Trusted Publishing jobs that emit misleading ENEEDAUTH or E404 output when the intended OIDC path does not activate.

Added

• New paid fix: npm-trusted-publishing-eneedauth.
• Free diagnosis preview covering npm and Node minimums, hosted-runner requirements, ID-token permission, and exact publisher mapping.
• Authoritative citations and dateModified structured data on sourced fix pages.
• HTTPS-only citation validation in the release verifier and backend tests.

Updated

• npm Publishing Recovery Pack now contains six complete recoveries.
• The first-publish granular-token recovery no longer mentions revoked Classic Automation tokens.
• Paid bundle assembly now includes reference configurations and source citations.
• MCP, OpenAPI, inventory, and discovery metadata report version 0.3.7 and 37 stocked fixes.

Verification

• Backend: 88 Deno tests passing plus deno check.
• Storefront: generated-site verifier passes with 37 fixes, 11 free samples, and five recovery packs.
• Desktop and mobile browser checks confirm citations, checkout controls, and the paid-body boundary.
• Live production: 18/18 E2E groups pass across Pages, backend, MCP, signed offers, both payment-proof paths, Base mainnet reads, request privacy, and cited fix pages.
• Distribution: npm and the official MCP Registry both read back 0.3.7 as current.

Sources:

• https://docs.npmjs.com/trusted-publishers/
• npm/cli#9088