@11agents/cli 0.1.4 → 0.1.5

package/README.md

@@ -27,6 +27,16 @@ export ELEVENAGENTS_SERVER="http://localhost:8082"
 
 On startup, the CLI prints its current version and target server to stderr. It also checks npm for a newer `@11agents/cli` package and prints an upgrade command when one is available.
 
+Project-scoped MCP and knowledge-base sync tokens can be stored in `~/.11agents/credentials`:
+
+```yaml
+# tokens:
+flatkey: gtm_xxxxxxxxxxxxxxxxxxxx
+voc-ai: gtm_yyyyyyyyyyyyyyyyyyyy
+```
+
+When syncing a project knowledge base, the CLI chooses tokens in this order: explicit tool/command token, matching project token from `~/.11agents/credentials`, `GTM_SWARM_TOKEN`, then the daemon control token as a compatibility fallback.
+
 ## Runtime Pool
 
 Scan local AI runtimes:
@@ -95,7 +105,7 @@ Run the local MCP server over stdio:
 11agents mcp start
 ```
 
-Configure your MCP client to run that command and pass the project token when calling tools. The server exposes:
+Configure your MCP client to run that command. The server automatically reads matching project tokens from `~/.11agents/credentials`; a tool-call token can still be passed explicitly when needed. The server exposes:
 
 - `knowledge_sync` — pull/push the project knowledge base between cloud and `~/.11agents/<project>/knowledge_base/`.
 

package/bin/11agents.js

@@ -38,6 +38,7 @@ Environment:
   GTM_WRITES_TOKEN     control-plane token for runtime registration
   ELEVENAGENTS_MACHINE stable machine key, defaults to hostname
   GTM_SWARM_TOKEN      project swarm token for push/node commands
+  ~/.11agents/credentials project token map for MCP knowledge sync
 
 Runtime task workspace:
   Daemon project headquarters live under ~/.11agents/<project>/.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@11agents/cli",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "11agents local runtime and telemetry CLI",
   "type": "module",
   "bin": {

package/src/commands/runtime.js

@@ -9,6 +9,7 @@ import { pathToFileURL } from 'node:url'
 import { fileURLToPath } from 'node:url'
 import { flag } from '../args.js'
 import { getControlConfig, requestJson } from '../client.js'
+import { resolveProjectToken } from '../credentials.js'
 import { syncKnowledge } from './knowledge.js'
 import { buildRuntimeScan } from '../runtime-scan.js'
 import { handleMcpRequest } from '../mcp.js'
@@ -206,6 +207,11 @@ function compactJson(value) {
 }
 
 async function mcpKnowledgeSync(flags = {}, deps = {}) {
+  const token = await resolveProjectToken(flags.project, {
+    homeDir: deps.homeDir,
+    token: flags.projectToken,
+    fallbackToken: flags.token,
+  })
   const result = await handleMcpRequest({
     method: 'tools/call',
     params: {
@@ -214,7 +220,7 @@ async function mcpKnowledgeSync(flags = {}, deps = {}) {
         project: flags.project,
         mode: flags.mode,
         server: flags.server,
-        token: flags.token,
+        token,
       },
     },
   }, deps)
@@ -259,6 +265,13 @@ function projectDirForTask(task, flags = {}, deps) {
   return buildRuntimeProjectDir(projectSlugForTask(task, flags), { homeDir: deps.homeDir })
 }
 
+async function projectSyncToken(project, flags = {}, deps = {}) {
+  return resolveProjectToken(project, {
+    homeDir: deps.homeDir,
+    fallbackToken: flags.token,
+  })
+}
+
 async function writeFileIfMissing(filePath, content) {
   try {
     await writeFile(filePath, content, { flag: 'wx' })
@@ -663,14 +676,16 @@ async function claimAndRunRuntimeTasks(registration, flags, deps, handlerModule,
 
     deps.log(JSON.stringify({ claimed: runtimeTask.id, runtime_id: runtime.id }, null, 2))
     if (runtimeTask.workspace?.slug) {
+      const token = await projectSyncToken(runtimeTask.workspace.slug, flags, deps)
+      const syncConfig = { ...config, token }
       await runWithDaemonRetry('sync knowledge base', () => (
         deps.syncKnowledge({
           project: runtimeTask.workspace.slug,
           mode: 'pull',
           server: flags.server,
-          token: flags.token,
+          token,
         }, {
-          requestJson: (apiPath, options = {}) => deps.requestJson(apiPath, { ...options, config }),
+          requestJson: (apiPath, options = {}) => deps.requestJson(apiPath, { ...options, config: syncConfig }),
           log: () => {},
         })
       ), deps, retryState)
@@ -692,14 +707,16 @@ async function claimAndRunRuntimeTasks(registration, flags, deps, handlerModule,
 
     if (runtimeTask.workspace?.slug) {
       const syncBack = knowledgeDeepOrganizeSpec(runtimeTask) ? deps.mcpKnowledgeSync : deps.syncKnowledge
+      const token = await projectSyncToken(runtimeTask.workspace.slug, flags, deps)
+      const syncConfig = { ...config, token }
       await runWithDaemonRetry('sync knowledge base back to cloud', () => (
         syncBack({
           project: runtimeTask.workspace.slug,
           mode: 'push',
           server: flags.server,
-          token: flags.token,
+          token,
         }, {
-          requestJson: (apiPath, options = {}) => deps.requestJson(apiPath, { ...options, config }),
+          requestJson: (apiPath, options = {}) => deps.requestJson(apiPath, { ...options, config: syncConfig }),
           log: () => {},
         })
       ), deps, retryState)

package/src/credentials.js

@@ -0,0 +1,70 @@
+import { readFile } from 'node:fs/promises'
+import os from 'node:os'
+import path from 'node:path'
+
+function slugify(value) {
+  return String(value || 'project')
+    .trim()
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, '-')
+    .replace(/^-|-$/g, '') || 'project'
+}
+
+function cleanHeader(value) {
+  return String(value || '').trim().replace(/^#\s*/, '').trim()
+}
+
+export function parseCredentials(content = '') {
+  const tokens = {}
+  let inTokens = false
+
+  for (const rawLine of String(content).split(/\r?\n/)) {
+    const line = rawLine.trim()
+    if (!line) continue
+
+    const header = cleanHeader(line)
+    if (/^tokens\s*:\s*$/.test(header)) {
+      inTokens = true
+      continue
+    }
+    if (line.startsWith('#')) continue
+
+    const match = line.match(/^([^:#]+):\s*(.+)$/)
+    if (!match) {
+      inTokens = false
+      continue
+    }
+    if (!inTokens && Object.keys(tokens).length === 0) inTokens = true
+    if (!inTokens) continue
+
+    const project = slugify(match[1])
+    const token = match[2].trim()
+    if (project && token) tokens[project] = token
+  }
+
+  return { tokens }
+}
+
+export async function readCredentials({ homeDir = os.homedir() } = {}) {
+  try {
+    return parseCredentials(await readFile(path.join(homeDir, '.11agents', 'credentials'), 'utf8'))
+  } catch (error) {
+    if (error?.code === 'ENOENT') return { tokens: {} }
+    throw error
+  }
+}
+
+export async function resolveProjectToken(project, {
+  homeDir = os.homedir(),
+  token = '',
+  fallbackToken = '',
+  env = process.env,
+} = {}) {
+  if (token) return token
+
+  const credentials = await readCredentials({ homeDir })
+  const projectToken = credentials.tokens[slugify(project)]
+  if (projectToken) return projectToken
+
+  return env.GTM_SWARM_TOKEN || fallbackToken || ''
+}

package/src/mcp.js

@@ -1,5 +1,6 @@
 import { syncKnowledge } from './commands/knowledge.js'
 import { requestJson } from './client.js'
+import { resolveProjectToken } from './credentials.js'
 
 const TOOLS = [
   {
@@ -45,16 +46,20 @@ export async function handleMcpRequest(request, deps = {}) {
   const name = request?.params?.name
   const args = toolArgs(request)
   if (name === 'knowledge_sync') {
+    const token = await resolveProjectToken(args.project, {
+      homeDir: deps.homeDir,
+      token: args.token,
+    })
     const result = await syncKnowledge({
       project: args.project,
       mode: args.mode,
       server: args.server,
-      token: args.token,
+      token,
     }, {
       ...deps,
       requestJson: (apiPath, options = {}) => (deps.requestJson || requestJson)(apiPath, {
         ...options,
-        config: { token: args.token || '', server: args.server || 'https://app.11agents.ai' },
+        config: { token, server: args.server || 'https://app.11agents.ai' },
       }),
     })
     return textResult(result)