@envseal/cli 0.1.6 → 0.1.7

package/dist/commands/doctor.js

@@ -1,7 +1,7 @@
 import { existsSync, statSync } from 'node:fs';
 import { join } from 'node:path';
 import { SepError } from '@envseal/protocol';
-import { inspectDotenvGitSafety, loadManifest, projectPaths, readHookHeartbeat } from '@envseal/core';
+import { inspectDotenvGitSafety, loadManifest, projectPaths, readHookDecisions, readHookHeartbeat } from '@envseal/core';
 import { emit, fail } from '../output.js';
 import { EXIT } from '../exit-codes.js';
 import { detectHost } from '../host.js';
@@ -49,6 +49,7 @@ export async function doctor(root, json) {
         const egress = manifest?.policy?.egress;
         const inspection = inspectPrimaryHostWiring(root, host.id, { probe: true });
         const hookLastRan = readHookHeartbeat(root);
+        const hookDecisions = readHookDecisions(root);
         const output = {
             projectRoot: root,
             manifestPath,
@@ -72,6 +73,7 @@ export async function doctor(root, json) {
             egressPolicy: egress ?? { mode: 'warn', allow: [] },
             hookFailClosed,
             hookLastRan,
+            hookDecisions,
             missingRequiredCount: status.missingRequired.length,
             missingRequired: status.missingRequired,
             rotationOverdue: status.entries
@@ -85,6 +87,9 @@ export async function doctor(root, json) {
                         status: inspection.mcp.status,
                         message: inspection.mcp.message,
                         commandOk: inspection.mcp.commandOk,
+                        ...(inspection.mcp.otherServers === undefined
+                            ? {}
+                            : { otherServers: inspection.mcp.otherServers }),
                     },
                 }),
         };
@@ -102,6 +107,13 @@ export async function doctor(root, json) {
             console.log(`Egress policy: ${egress?.mode === 'allowlist' ? `allowlist (${egress.allow.length} allowed host${egress.allow.length === 1 ? '' : 's'})` : 'warn (default)'}`);
             console.log(`Hook on internal error: ${hookFailClosed ? 'fail-closed' : 'fail-open (default)'}`);
             console.log(`Hook heartbeat: ${describeHeartbeatAge(hookLastRan)}`);
+            if (hookDecisions !== null) {
+                console.log(`Hook decisions (approx): ${hookDecisions.allow} allow, ${hookDecisions.deny} deny`);
+            }
+            const siblings = inspection.mcp?.otherServers ?? [];
+            if (siblings.length > 0) {
+                console.log(`Other MCP servers (outside envseal read protection): ${siblings.join(', ')}`);
+            }
             console.log(`Missing required keys: ${status.missingRequired.length}`);
             if (status.missingRequired.length > 0) {
                 for (const key of status.missingRequired) {

package/dist/host-wiring/copilot.js

@@ -79,11 +79,20 @@ export function inspectCopilotSettings(root, options = {}) {
         };
     }
     const entry = list.find((item) => entryName(item) === ENVSEAL_MCP_SERVER_NAME);
+    // Names only, never entry values: a sibling argv or env block can hold a
+    // real credential, and doctor output must not become a new exfil channel.
+    // List configs can repeat a name; report each server once.
+    const otherServers = [
+        ...new Set(list
+            .map((item) => entryName(item))
+            .filter((name) => name !== undefined && name !== ENVSEAL_MCP_SERVER_NAME)),
+    ].sort();
     if (entry === undefined || isEmptyEnvsealStub(entry) || !looksLikeEnvsealServer(entry)) {
         return {
             wired: false,
             status: entry === undefined ? 'missing' : 'stub',
             commandOk: null,
+            otherServers,
             message: `.vscode/settings.json github.copilot.mcp has no working envseal-mcp. ${hint}`,
         };
     }
@@ -94,6 +103,6 @@ export function inspectCopilotSettings(root, options = {}) {
         message =
             'Copilot MCP is configured, but the launch command did not report a version. Run `envseal init`. [VERIFY]';
     }
-    return { wired: true, status: 'wired', commandOk, message };
+    return { wired: true, status: 'wired', commandOk, otherServers, message };
 }
 //# sourceMappingURL=copilot.js.map

package/dist/host-wiring/mcp.d.ts

@@ -13,7 +13,19 @@ export type McpInspection = {
     message: string;
     /** null when the launch command was not probed (npx is not side-effect free). */
     commandOk: boolean | null;
+    /**
+     * Names of co-registered MCP servers besides envseal-mcp. Names only, never
+     * entry values: a sibling argv or env block can hold a real credential, and
+     * doctor output must not become a new exfil channel. Undefined when the host
+     * config shape carries no enumerable server list.
+     */
+    otherServers?: string[];
 };
+/**
+ * Sorted names of every server in a `mcpServers`-style map except envseal-mcp.
+ * Keys only: callers must never forward the entry values.
+ */
+export declare function siblingServerNames(servers: Record<string, unknown>): string[];
 /**
  * Launch argv a host can spawn without a global `envseal-mcp` on PATH.
  * Project MCP uses the workspace as cwd — never bake `--project` in.

package/dist/host-wiring/mcp.js

@@ -4,6 +4,15 @@ import { spawnSync } from 'node:child_process';
 export const ENVSEAL_MCP_PACKAGE = '@envseal/mcp-server';
 export const ENVSEAL_MCP_SERVER_NAME = 'envseal-mcp';
 export const NPX_ARGS = ['-y', ENVSEAL_MCP_PACKAGE];
+/**
+ * Sorted names of every server in a `mcpServers`-style map except envseal-mcp.
+ * Keys only: callers must never forward the entry values.
+ */
+export function siblingServerNames(servers) {
+    return Object.keys(servers)
+        .filter((name) => name !== ENVSEAL_MCP_SERVER_NAME)
+        .sort();
+}
 /**
  * Launch argv a host can spawn without a global `envseal-mcp` on PATH.
  * Project MCP uses the workspace as cwd — never bake `--project` in.
@@ -203,11 +212,13 @@ export function inspectMcpServersFile(path, label, options = {}) {
     }
     const entry = servers[ENVSEAL_MCP_SERVER_NAME];
     const kind = classifyEntry(entry);
+    const otherServers = siblingServerNames(servers);
     if (kind === 'missing') {
         return {
             wired: false,
             status: 'missing',
             commandOk: null,
+            otherServers,
             message: `${label} has no envseal-mcp. ${hint}`,
         };
     }
@@ -216,6 +227,7 @@ export function inspectMcpServersFile(path, label, options = {}) {
             wired: false,
             status: 'stub',
             commandOk: null,
+            otherServers,
             message: `${label} envseal-mcp is the empty envseal-mcp stub (not on PATH for the host). ${hint}`,
         };
     }
@@ -225,7 +237,7 @@ export function inspectMcpServersFile(path, label, options = {}) {
     if (commandOk === false) {
         message = `MCP is configured in ${label}, but the launch command did not report a version. Run \`envseal init\` if the host cannot connect.`;
     }
-    return { wired: true, status: 'wired', commandOk, message };
+    return { wired: true, status: 'wired', commandOk, otherServers, message };
 }
 /** Map an inspection to the doctor `agentWiring.mcp` field. */
 export function mcpWiringState(inspection) {

package/dist/host-wiring/zed.js

@@ -1,6 +1,6 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { ENVSEAL_MCP_SERVER_NAME, isRecord, mcpLaunch, nextEnvsealEntry, parseJsonObject, writeJson, classifyEntry, probeVersion, } from './mcp.js';
+import { ENVSEAL_MCP_SERVER_NAME, isRecord, mcpLaunch, nextEnvsealEntry, parseJsonObject, writeJson, classifyEntry, probeVersion, siblingServerNames, } from './mcp.js';
 function zedHint(platform) {
     const launch = mcpLaunch(platform);
     return `Run \`envseal init\` to merge { "mcp": { "${ENVSEAL_MCP_SERVER_NAME}": ${JSON.stringify(launch)} } } into .zed/settings.json. [VERIFY]`;
@@ -69,11 +69,13 @@ export function inspectZedSettings(root, options = {}) {
     }
     const entry = mcp[ENVSEAL_MCP_SERVER_NAME];
     const kind = classifyEntry(entry);
+    const otherServers = siblingServerNames(mcp);
     if (kind === 'missing') {
         return {
             wired: false,
             status: 'missing',
             commandOk: null,
+            otherServers,
             message: `.zed/settings.json has no envseal-mcp. ${hint}`,
         };
     }
@@ -82,6 +84,7 @@ export function inspectZedSettings(root, options = {}) {
             wired: false,
             status: 'stub',
             commandOk: null,
+            otherServers,
             message: `.zed/settings.json envseal-mcp is the empty stub. ${hint}`,
         };
     }
@@ -92,6 +95,6 @@ export function inspectZedSettings(root, options = {}) {
         message =
             'Zed MCP is configured, but the launch command did not report a version. Run `envseal init`. [VERIFY]';
     }
-    return { wired: true, status: 'wired', commandOk, message };
+    return { wired: true, status: 'wired', commandOk, otherServers, message };
 }
 //# sourceMappingURL=zed.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@envseal/cli",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "type": "module",
   "license": "Apache-2.0",
   "main": "./dist/index.js",
@@ -23,13 +23,13 @@
     "provenance": true
   },
   "dependencies": {
-    "@envseal/protocol": "0.1.6",
-    "@envseal/prompters": "0.1.6",
-    "@envseal/registry": "0.1.6",
-    "@envseal/core": "0.1.6",
-    "@envseal/mcp-server": "0.1.6",
-    "@envseal/http-server": "0.1.6",
-    "@envseal/detector": "0.1.6"
+    "@envseal/core": "0.1.7",
+    "@envseal/prompters": "0.1.7",
+    "@envseal/protocol": "0.1.7",
+    "@envseal/detector": "0.1.7",
+    "@envseal/registry": "0.1.7",
+    "@envseal/http-server": "0.1.7",
+    "@envseal/mcp-server": "0.1.7"
   },
   "repository": {
     "type": "git",