@executioncontrolprotocol/cli 0.4.0 → 0.5.0

package/dist/commands/config/secrets/yaml/set-policy.d.ts

@@ -0,0 +1,13 @@
+import { Command } from "@oclif/core";
+export default class ConfigSecretsYamlSetPolicy extends Command {
+    static summary: string;
+    static args: {
+        mode: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=set-policy.d.ts.map

package/dist/commands/config/secrets/yaml/set-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-policy.d.ts","sourceRoot":"","sources":["../../../../../src/commands/config/secrets/yaml/set-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,OAAO,EAAE,MAAM,aAAa,CAAC;AAQ5C,MAAM,CAAC,OAAO,OAAO,0BAA2B,SAAQ,OAAO;IAC7D,MAAM,CAAC,OAAO,SAAqD;IAEnE,MAAM,CAAC,IAAI;;MAMT;IAEF,MAAM,CAAC,KAAK;;;MAA2B;IAEjC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAe3B"}

package/dist/commands/config/secrets/yaml/set-policy.js

@@ -0,0 +1,29 @@
+import { Args, Command } from "@oclif/core";
+import { configScopeFlags } from "../../../../lib/config-flags.js";
+import { persistConfig, readForMutation } from "../../../../lib/system-config-cli.js";
+const MODES = ["permissive", "warn", "strict"];
+export default class ConfigSecretsYamlSetPolicy extends Command {
+    static summary = "Set secrets.policy (permissive | warn | strict)";
+    static args = {
+        mode: Args.string({
+            required: true,
+            description: "Policy mode",
+            options: MODES,
+        }),
+    };
+    static flags = { ...configScopeFlags };
+    async run() {
+        const { args, flags } = await this.parse(ConfigSecretsYamlSetPolicy);
+        const cwd = process.cwd();
+        const { path, config } = readForMutation({
+            global: flags.global,
+            cwd,
+            explicit: flags.config,
+        });
+        config.secrets ??= {};
+        config.secrets.policy = args.mode;
+        persistConfig(path, config);
+        this.log(`Set secrets.policy = ${args.mode} (${path})`);
+    }
+}
+//# sourceMappingURL=set-policy.js.map

package/dist/commands/config/secrets/yaml/set-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-policy.js","sourceRoot":"","sources":["../../../../../src/commands/config/secrets/yaml/set-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAG5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAEtF,MAAM,KAAK,GAAuB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAEnE,MAAM,CAAC,OAAO,OAAO,0BAA2B,SAAQ,OAAO;IAC7D,MAAM,CAAC,OAAO,GAAG,iDAAiD,CAAC;IAEnE,MAAM,CAAC,IAAI,GAAG;QACZ,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;YAChB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,aAAa;YAC1B,OAAO,EAAE,KAAK;SACf,CAAC;KACH,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEvC,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;YACvC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,IAAwB,CAAC;QAEtD,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC;IAC1D,CAAC"}

package/dist/commands/config/secrets.d.ts

@@ -0,0 +1,8 @@
+import { Command } from "@oclif/core";
+export default class ConfigSecrets extends Command {
+    static summary: string;
+    static description: string;
+    static examples: string[];
+    run(): Promise<void>;
+}
+//# sourceMappingURL=secrets.d.ts.map

package/dist/commands/config/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../src/commands/config/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAGtC,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,OAAO;IAChD,MAAM,CAAC,OAAO,SAA0D;IAExE,MAAM,CAAC,WAAW,SAMkD;IAEpE,MAAM,CAAC,QAAQ,WAIb;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAmB3B"}

package/dist/commands/config/secrets.js

@@ -0,0 +1,35 @@
+import { Command } from "@oclif/core";
+import { OS_PROVIDER_ID } from "../../lib/secret-provider-ids.js";
+export default class ConfigSecrets extends Command {
+    static summary = "Manage secrets (process.env, dot.env, os.secrets, …)";
+    static description = `Store and inspect secret values outside config files. Prefer os.secrets on Mac/Windows.
+
+Subcommands:
+  add|get|remove|list     CRUD-style commands for a provider key
+  providers list|doctor   Availability and health
+  yaml get                Print secrets.* + security.secrets from the YAML file
+  yaml set-default-provider|set-policy   Edit non-secret YAML fields`;
+    static examples = [
+        `ecp config secrets add --provider ${OS_PROVIDER_ID} --key server/fetch.token --prompt`,
+        `ecp config secrets get --provider ${OS_PROVIDER_ID} --key ecp.server.fetch.token`,
+        "ecp config secrets providers doctor",
+    ];
+    async run() {
+        await this.parse(ConfigSecrets);
+        this.log([
+            "Usage: ecp config secrets <subcommand>",
+            "",
+            `  add       Add or replace a secret (${OS_PROVIDER_ID}, …)`,
+            "  get       Read a secret (default: redacted preview)",
+            "  remove    Remove a stored secret",
+            "  list      List keys (when supported by provider)",
+            "  providers list|doctor",
+            "  yaml get  Print secrets + security.secrets blocks",
+            "  yaml set-default-provider <id>",
+            "  yaml set-policy <permissive|warn|strict>",
+            "",
+            "Run ecp config secrets <cmd> --help for flags.",
+        ].join("\n"));
+    }
+}
+//# sourceMappingURL=secrets.js.map

package/dist/commands/config/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../src/commands/config/secrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAElE,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,OAAO;IAChD,MAAM,CAAC,OAAO,GAAG,sDAAsD,CAAC;IAExE,MAAM,CAAC,WAAW,GAAG;;;;;;qEAM8C,CAAC;IAEpE,MAAM,CAAC,QAAQ,GAAG;QAChB,qCAAqC,cAAc,oCAAoC;QACvF,qCAAqC,cAAc,+BAA+B;QAClF,qCAAqC;KACtC,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,CACN;YACE,wCAAwC;YACxC,EAAE;YACF,wCAAwC,cAAc,MAAM;YAC5D,uDAAuD;YACvD,oCAAoC;YACpC,oDAAoD;YACpD,yBAAyB;YACzB,qDAAqD;YACrD,kCAAkC;YAClC,4CAA4C;YAC5C,EAAE;YACF,gDAAgD;SACjD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC"}

package/dist/commands/config/security/get.d.ts

@@ -0,0 +1,11 @@
+import { Command } from "@oclif/core";
+export default class ConfigSecurityGet extends Command {
+    static summary: string;
+    static flags: {
+        format: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=get.d.ts.map

package/dist/commands/config/security/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/commands/config/security/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAS,MAAM,aAAa,CAAC;AAO7C,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,OAAO;IACpD,MAAM,CAAC,OAAO,SAAoD;IAElE,MAAM,CAAC,KAAK;;;;MAOV;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAkB3B"}

package/dist/commands/config/security/get.js

@@ -0,0 +1,33 @@
+import { Command, Flags } from "@oclif/core";
+import { formatConfigFileHeaderLine, runWithCommandError } from "../../../lib/command-helpers.js";
+import { configScopeFlags } from "../../../lib/config-flags.js";
+import { loadConfigForDisplay } from "../../../lib/system-config-cli.js";
+import { getSecurityConfig, stringifySystemConfig } from "@executioncontrolprotocol/runtime";
+export default class ConfigSecurityGet extends Command {
+    static summary = "Print the security policy block (YAML or JSON)";
+    static flags = {
+        ...configScopeFlags,
+        format: Flags.string({
+            description: "Serialization format",
+            options: ["yaml", "json"],
+            default: "yaml",
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(ConfigSecurityGet);
+        const cwd = process.cwd();
+        await runWithCommandError(this, async () => {
+            const { path, exists, config } = loadConfigForDisplay({
+                global: flags.global,
+                cwd,
+                explicit: flags.config,
+            });
+            this.log(formatConfigFileHeaderLine(path, exists));
+            const sec = getSecurityConfig(config) ?? {};
+            const fmt = flags.format;
+            const slice = { security: sec };
+            this.log(stringifySystemConfig(slice, fmt).trim());
+        });
+    }
+}
+//# sourceMappingURL=get.js.map

package/dist/commands/config/security/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../../src/commands/config/security/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAwB,MAAM,mCAAmC,CAAC;AAEnH,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,OAAO;IACpD,MAAM,CAAC,OAAO,GAAG,gDAAgD,CAAC;IAElE,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,gBAAgB;QACnB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;YACnB,WAAW,EAAE,sBAAsB;YACnC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAU;YAClC,OAAO,EAAE,MAAM;SAChB,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAE1B,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC;gBACpD,MAAM,EAAE,KAAK,CAAC,MAAiB;gBAC/B,GAAG;gBACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;aAC7C,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,MAAyB,CAAC;YAC5C,MAAM,KAAK,GAAoB,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;YACjD,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC"}

package/dist/commands/config/security/plugins/update.d.ts

@@ -0,0 +1,13 @@
+import { Command } from "@oclif/core";
+export default class ConfigSecurityPluginsUpdate extends Command {
+    static summary: string;
+    static description: string;
+    static flags: {
+        json: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        file: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=update.d.ts.map

package/dist/commands/config/security/plugins/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../../src/commands/config/security/plugins/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAS,MAAM,aAAa,CAAC;AAS7C,MAAM,CAAC,OAAO,OAAO,2BAA4B,SAAQ,OAAO;IAC9D,MAAM,CAAC,OAAO,SAA0D;IAExE,MAAM,CAAC,WAAW,SACgG;IAElH,MAAM,CAAC,KAAK;;;;;MAQV;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAkC3B"}

package/dist/commands/config/security/plugins/update.js

@@ -0,0 +1,49 @@
+import { Command, Flags } from "@oclif/core";
+import { readFileSync } from "node:fs";
+import { commandErrorMessage } from "../../../../lib/command-helpers.js";
+import { configScopeFlags } from "../../../../lib/config-flags.js";
+import { persistConfig, readForMutation, touchSecurity } from "../../../../lib/system-config-cli.js";
+export default class ConfigSecurityPluginsUpdate extends Command {
+    static summary = "Replace security.plugins (PluginSecurityPolicy JSON)";
+    static description = "Sets allowKinds, allowSourceTypes, allowIds, denyIds, strict, etc. Replaces the whole security.plugins block.";
+    static flags = {
+        ...configScopeFlags,
+        json: Flags.string({
+            description: "JSON object (PluginSecurityPolicy)",
+        }),
+        file: Flags.string({
+            description: "Path to a JSON file",
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(ConfigSecurityPluginsUpdate);
+        if (!flags.json && !flags.file) {
+            this.error("Provide --json or --file.", { exit: 1 });
+        }
+        if (flags.json && flags.file) {
+            this.error("Use only one of --json or --file.", { exit: 1 });
+        }
+        const raw = flags.file ? readFileSync(flags.file, "utf-8") : String(flags.json);
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (e) {
+            this.error(`Invalid JSON: ${commandErrorMessage(e)}`, { exit: 1 });
+        }
+        if (!parsed || typeof parsed !== "object") {
+            this.error("Security policy must be a JSON object.", { exit: 1 });
+        }
+        const cwd = process.cwd();
+        const { path, config } = readForMutation({
+            global: flags.global,
+            cwd,
+            explicit: flags.config,
+        });
+        const sec = touchSecurity(config);
+        sec.plugins = parsed;
+        persistConfig(path, config);
+        this.log(`Updated security.plugins (${path})`);
+    }
+}
+//# sourceMappingURL=update.js.map

package/dist/commands/config/security/plugins/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../../src/commands/config/security/plugins/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAIvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAErG,MAAM,CAAC,OAAO,OAAO,2BAA4B,SAAQ,OAAO;IAC9D,MAAM,CAAC,OAAO,GAAG,sDAAsD,CAAC;IAExE,MAAM,CAAC,WAAW,GAChB,+GAA+G,CAAC;IAElH,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,gBAAgB;QACnB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,oCAAoC;SAClD,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,qBAAqB;SACnC,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChF,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,iBAAiB,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,wCAAwC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;YACvC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,GAAG,CAAC,OAAO,GAAG,MAA8B,CAAC;QAE7C,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,6BAA6B,IAAI,GAAG,CAAC,CAAC;IACjD,CAAC"}

package/dist/commands/config/tools/add.d.ts

@@ -0,0 +1,16 @@
+import { Command } from "@oclif/core";
+export default class ConfigToolsAdd extends Command {
+    static summary: string;
+    static description: string;
+    static args: {
+        name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        file: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=add.d.ts.map

package/dist/commands/config/tools/add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.d.ts","sourceRoot":"","sources":["../../../../src/commands/config/tools/add.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,OAAO,EAAS,MAAM,aAAa,CAAC;AAOnD,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,OAAO;IACjD,MAAM,CAAC,OAAO,SAAyD;IAEvE,MAAM,CAAC,WAAW,SAE6H;IAE/I,MAAM,CAAC,IAAI;;MAKT;IAEF,MAAM,CAAC,KAAK;;;;;MAQV;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA0C3B"}

package/dist/commands/config/tools/add.js

@@ -0,0 +1,60 @@
+import { Args, Command, Flags } from "@oclif/core";
+import { readFileSync } from "node:fs";
+import { commandErrorMessage } from "../../../lib/command-helpers.js";
+import { configScopeFlags } from "../../../lib/config-flags.js";
+import { persistConfig, readForMutation } from "../../../lib/system-config-cli.js";
+export default class ConfigToolsAdd extends Command {
+    static summary = "Add an MCP tool server entry (tools.servers.<name>)";
+    static description = "Registers a logical server name for Context mounts. Pass the server block as JSON " +
+        '(must include a "transport" object). Example: \'{"transport":{"type":"stdio","command":"docker","args":["run","-i","--rm","mcp/fetch"]}}\'';
+    static args = {
+        name: Args.string({
+            required: true,
+            description: "Logical server name (matches Context mount server:)",
+        }),
+    };
+    static flags = {
+        ...configScopeFlags,
+        json: Flags.string({
+            description: "JSON object for the tool server entry (e.g. {\"transport\":{...}})",
+        }),
+        file: Flags.string({
+            description: "Path to a JSON file containing the tool server entry",
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(ConfigToolsAdd);
+        if (!flags.json && !flags.file) {
+            this.error("Provide --json or --file with the tool server definition.", { exit: 1 });
+        }
+        if (flags.json && flags.file) {
+            this.error("Use only one of --json or --file.", { exit: 1 });
+        }
+        const raw = flags.file ? readFileSync(flags.file, "utf-8") : String(flags.json);
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (e) {
+            this.error(`Invalid JSON: ${commandErrorMessage(e)}`, { exit: 1 });
+        }
+        if (!parsed || typeof parsed !== "object" || !("transport" in parsed)) {
+            this.error('Tool server entry must be a JSON object with a "transport" field.', { exit: 1 });
+        }
+        const cwd = process.cwd();
+        const { path, config } = readForMutation({
+            global: flags.global,
+            cwd,
+            explicit: flags.config,
+        });
+        config.tools ??= {};
+        config.tools.servers ??= {};
+        if (config.tools.servers[args.name]) {
+            this.error(`Tool server "${args.name}" already exists. Use "ecp config tools update" to replace it.`, { exit: 1 });
+        }
+        config.tools.servers[args.name] = parsed;
+        persistConfig(path, config);
+        this.log(`Added tool server "${args.name}" (${path})`);
+    }
+}
+//# sourceMappingURL=add.js.map

package/dist/commands/config/tools/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../../../src/commands/config/tools/add.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEnF,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,OAAO;IACjD,MAAM,CAAC,OAAO,GAAG,qDAAqD,CAAC;IAEvE,MAAM,CAAC,WAAW,GAChB,oFAAoF;QACpF,4IAA4I,CAAC;IAE/I,MAAM,CAAC,IAAI,GAAG;QACZ,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;YAChB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,qDAAqD;SACnE,CAAC;KACH,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,gBAAgB;QACnB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,oEAAoE;SAClF,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,sDAAsD;SACpE,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,2DAA2D,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChF,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,iBAAiB,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,IAAK,MAAiB,CAAC,EAAE,CAAC;YAClF,IAAI,CAAC,KAAK,CAAC,mEAAmE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;YACvC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC;QAC5B,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CACR,gBAAgB,IAAI,CAAC,IAAI,gEAAgE,EACzF,EAAE,IAAI,EAAE,CAAC,EAAE,CACZ,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAgD,CAAC;QAEnF,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC;IACzD,CAAC"}

package/dist/commands/config/tools/get.d.ts

@@ -0,0 +1,10 @@
+import { Command } from "@oclif/core";
+export default class ConfigToolsGet extends Command {
+    static summary: string;
+    static flags: {
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=get.d.ts.map

package/dist/commands/config/tools/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/commands/config/tools/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAMtC,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,OAAO;IACjD,MAAM,CAAC,OAAO,SAA+C;IAE7D,MAAM,CAAC,KAAK;;;MAA2B;IAEjC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAsB3B"}

package/dist/commands/config/tools/get.js

@@ -0,0 +1,29 @@
+import { Command } from "@oclif/core";
+import { formatConfigFileHeaderLine, runWithCommandError } from "../../../lib/command-helpers.js";
+import { configScopeFlags } from "../../../lib/config-flags.js";
+import { loadConfigForDisplay } from "../../../lib/system-config-cli.js";
+export default class ConfigToolsGet extends Command {
+    static summary = "Get MCP tool server names (tools.servers)";
+    static flags = { ...configScopeFlags };
+    async run() {
+        const { flags } = await this.parse(ConfigToolsGet);
+        const cwd = process.cwd();
+        await runWithCommandError(this, async () => {
+            const { path, exists, config } = loadConfigForDisplay({
+                global: flags.global,
+                cwd,
+                explicit: flags.config,
+            });
+            this.log(formatConfigFileHeaderLine(path, exists));
+            const names = config.tools?.servers ? Object.keys(config.tools.servers) : [];
+            if (names.length === 0) {
+                this.log("(no tool servers configured)");
+                return;
+            }
+            for (const n of names.sort()) {
+                this.log(`- ${n}`);
+            }
+        });
+    }
+}
+//# sourceMappingURL=get.js.map

package/dist/commands/config/tools/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../../../src/commands/config/tools/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,OAAO;IACjD,MAAM,CAAC,OAAO,GAAG,2CAA2C,CAAC;IAE7D,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEvC,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAE1B,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACzC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC;gBACpD,MAAM,EAAE,KAAK,CAAC,MAAiB;gBAC/B,GAAG;gBACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;aAC7C,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC7B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC"}

package/dist/commands/config/tools/remove.d.ts

@@ -0,0 +1,13 @@
+import { Command } from "@oclif/core";
+export default class ConfigToolsRemove extends Command {
+    static summary: string;
+    static args: {
+        name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=remove.d.ts.map

package/dist/commands/config/tools/remove.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../../../src/commands/config/tools/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,OAAO,EAAE,MAAM,aAAa,CAAC;AAK5C,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,OAAO;IACpD,MAAM,CAAC,OAAO,SAA2D;IAEzE,MAAM,CAAC,IAAI;;MAET;IAEF,MAAM,CAAC,KAAK;;;MAA2B;IAEjC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAgB3B"}

package/dist/commands/config/tools/remove.js

@@ -0,0 +1,25 @@
+import { Args, Command } from "@oclif/core";
+import { configScopeFlags } from "../../../lib/config-flags.js";
+import { persistConfig, readForMutation } from "../../../lib/system-config-cli.js";
+export default class ConfigToolsRemove extends Command {
+    static summary = "Remove an MCP tool server entry (disable tool wiring)";
+    static args = {
+        name: Args.string({ required: true, description: "Logical server name" }),
+    };
+    static flags = { ...configScopeFlags };
+    async run() {
+        const { args, flags } = await this.parse(ConfigToolsRemove);
+        const cwd = process.cwd();
+        const { path, config } = readForMutation({
+            global: flags.global,
+            cwd,
+            explicit: flags.config,
+        });
+        if (config.tools?.servers && args.name in config.tools.servers) {
+            delete config.tools.servers[args.name];
+        }
+        persistConfig(path, config);
+        this.log(`Removed tool server "${args.name}" (${path})`);
+    }
+}
+//# sourceMappingURL=remove.js.map

package/dist/commands/config/tools/remove.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.js","sourceRoot":"","sources":["../../../../src/commands/config/tools/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEnF,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,OAAO;IACpD,MAAM,CAAC,OAAO,GAAG,uDAAuD,CAAC;IAEzE,MAAM,CAAC,IAAI,GAAG;QACZ,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;KAC1E,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEvC,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;YACvC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC/D,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAED,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC;IAC3D,CAAC"}

package/dist/commands/config/tools/update.d.ts

@@ -0,0 +1,16 @@
+import { Command } from "@oclif/core";
+export default class ConfigToolsUpdate extends Command {
+    static summary: string;
+    static description: string;
+    static args: {
+        name: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        json: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        file: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        global: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        config: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=update.d.ts.map

package/dist/commands/config/tools/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../../src/commands/config/tools/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,OAAO,EAAS,MAAM,aAAa,CAAC;AAOnD,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,OAAO;IACpD,MAAM,CAAC,OAAO,SAA4D;IAE1E,MAAM,CAAC,WAAW,SACwF;IAE1G,MAAM,CAAC,IAAI;;MAKT;IAEF,MAAM,CAAC,KAAK;;;;;MAQV;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAuC3B"}

package/dist/commands/config/tools/update.js

@@ -0,0 +1,59 @@
+import { Args, Command, Flags } from "@oclif/core";
+import { readFileSync } from "node:fs";
+import { commandErrorMessage } from "../../../lib/command-helpers.js";
+import { configScopeFlags } from "../../../lib/config-flags.js";
+import { persistConfig, readForMutation } from "../../../lib/system-config-cli.js";
+export default class ConfigToolsUpdate extends Command {
+    static summary = "Update an MCP tool server entry (tools.servers.<name>)";
+    static description = "Replaces the server block for an existing name. Same shape as add (JSON with a \"transport\" object).";
+    static args = {
+        name: Args.string({
+            required: true,
+            description: "Logical server name (matches Context mount server:)",
+        }),
+    };
+    static flags = {
+        ...configScopeFlags,
+        json: Flags.string({
+            description: "JSON object for the tool server entry (e.g. {\"transport\":{...}})",
+        }),
+        file: Flags.string({
+            description: "Path to a JSON file containing the tool server entry",
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(ConfigToolsUpdate);
+        if (!flags.json && !flags.file) {
+            this.error("Provide --json or --file with the tool server definition.", { exit: 1 });
+        }
+        if (flags.json && flags.file) {
+            this.error("Use only one of --json or --file.", { exit: 1 });
+        }
+        const raw = flags.file ? readFileSync(flags.file, "utf-8") : String(flags.json);
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (e) {
+            this.error(`Invalid JSON: ${commandErrorMessage(e)}`, { exit: 1 });
+        }
+        if (!parsed || typeof parsed !== "object" || !("transport" in parsed)) {
+            this.error('Tool server entry must be a JSON object with a "transport" field.', { exit: 1 });
+        }
+        const cwd = process.cwd();
+        const { path, config } = readForMutation({
+            global: flags.global,
+            cwd,
+            explicit: flags.config,
+        });
+        config.tools ??= {};
+        config.tools.servers ??= {};
+        if (!config.tools.servers[args.name]) {
+            this.error(`No tool server named "${args.name}". Use "ecp config tools add" first.`, { exit: 1 });
+        }
+        config.tools.servers[args.name] = parsed;
+        persistConfig(path, config);
+        this.log(`Updated tool server "${args.name}" (${path})`);
+    }
+}
+//# sourceMappingURL=update.js.map

package/dist/commands/config/tools/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../src/commands/config/tools/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEnF,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,OAAO;IACpD,MAAM,CAAC,OAAO,GAAG,wDAAwD,CAAC;IAE1E,MAAM,CAAC,WAAW,GAChB,uGAAuG,CAAC;IAE1G,MAAM,CAAC,IAAI,GAAG;QACZ,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;YAChB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,qDAAqD;SACnE,CAAC;KACH,CAAC;IAEF,MAAM,CAAC,KAAK,GAAG;QACb,GAAG,gBAAgB;QACnB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,oEAAoE;SAClF,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,sDAAsD;SACpE,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,2DAA2D,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChF,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,iBAAiB,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,IAAK,MAAiB,CAAC,EAAE,CAAC;YAClF,IAAI,CAAC,KAAK,CAAC,mEAAmE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;YACvC,MAAM,EAAE,KAAK,CAAC,MAAiB;YAC/B,GAAG;YACH,QAAQ,EAAE,KAAK,CAAC,MAA4B;SAC7C,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,yBAAyB,IAAI,CAAC,IAAI,sCAAsC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAgD,CAAC;QAEnF,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC;IAC3D,CAAC"}

package/dist/commands/config.d.ts

@@ -0,0 +1,8 @@
+import { Command } from "@oclif/core";
+export default class Config extends Command {
+    static summary: string;
+    static description: string;
+    static examples: string[];
+    run(): Promise<void>;
+}
+//# sourceMappingURL=config.d.ts.map

package/dist/commands/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAGtC,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,OAAO;IACzC,MAAM,CAAC,OAAO,SAAqC;IAEnD,MAAM,CAAC,WAAW,SAKgE;IAElF,MAAM,CAAC,QAAQ,WAUb;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAsB3B"}

package/dist/commands/config.js

@@ -0,0 +1,43 @@
+import { Command } from "@oclif/core";
+import { OS_PROVIDER_ID } from "../lib/secret-provider-ids.js";
+export default class Config extends Command {
+    static summary = "Manage ECP system configuration";
+    static description = `Inspect and edit system config (project ecp.config.* or global ~/.ecp/).
+
+v0.5 layout: policy under top-level security (mirrors models, tools, loggers, …); wiring under models.providers, tools.servers, loggers.config, agents.endpoints, plugins.installs, secrets.
+
+Subcommands: security, plugins (installs + deprecated allow paths), models, tools, loggers, secrets (store ops + yaml *), endpoints (agents.endpoints).
+You can also edit the file directly — use "ecp config path" for the resolved path.`;
+    static examples = [
+        "ecp config init",
+        "ecp config init --global",
+        "ecp config get",
+        "ecp config path --global",
+        "ecp config plugins get",
+        "ecp config models allow add ollama llama3.2:3b",
+        "ecp config tools add fetch --json '{\"transport\":{\"type\":\"stdio\",\"command\":\"docker\",\"args\":[\"run\",\"-i\",\"--rm\",\"mcp/fetch\"]}}'",
+        `ecp config secrets add --provider ${OS_PROVIDER_ID} --key server/fetch.token --prompt`,
+        "ecp config secrets providers doctor",
+    ];
+    async run() {
+        await this.parse(Config);
+        this.log([
+            "Usage: ecp config <subcommand>",
+            "",
+            "  init              Write best-practices default if missing",
+            "  path              Print config file path",
+            "  get               Print merged config (YAML or JSON)",
+            "  security          Dump security.* (policy mirror)",
+            "  plugins           installs list/add/remove; legacy allow → security.models",
+            "  models            CRUD for models.providers",
+            "  tools             CRUD for tools.servers",
+            "  loggers           security.loggers + loggers.config",
+            `  secrets           Store ops + yaml get/set-default-provider/set-policy`,
+            "  endpoints         CRUD for agents.endpoints (A2A URLs)",
+            "",
+            "Resource commands use verbs: add, get, remove, update (see ecp config <topic> --help).",
+            "Run ecp config --help for flags and full help.",
+        ].join("\n"));
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/commands/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,OAAO;IACzC,MAAM,CAAC,OAAO,GAAG,iCAAiC,CAAC;IAEnD,MAAM,CAAC,WAAW,GAAG;;;;;mFAK4D,CAAC;IAElF,MAAM,CAAC,QAAQ,GAAG;QAChB,iBAAiB;QACjB,0BAA0B;QAC1B,gBAAgB;QAChB,0BAA0B;QAC1B,wBAAwB;QACxB,gDAAgD;QAChD,kJAAkJ;QAClJ,qCAAqC,cAAc,oCAAoC;QACvF,qCAAqC;KACtC,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG,CACN;YACE,gCAAgC;YAChC,EAAE;YACF,6DAA6D;YAC7D,4CAA4C;YAC5C,wDAAwD;YACxD,qDAAqD;YACrD,8EAA8E;YAC9E,+CAA+C;YAC/C,4CAA4C;YAC5C,uDAAuD;YACvD,0EAA0E;YAC1E,0DAA0D;YAC1D,EAAE;YACF,wFAAwF;YACxF,gDAAgD;SACjD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC"}

package/dist/commands/graph.d.ts

@@ -1,9 +1,10 @@
-import { Command } from "@oclif/core";
-export default class Graph extends Command {
+import { EcpEnvironmentCommand } from "../lib/ecp-environment-command.js";
+export default class Graph extends EcpEnvironmentCommand {
     static summary: string;
     static hidden: boolean;
     static flags: {
         "trace-dir": import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        environment: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
     };
     static args: {
         runId: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;

package/dist/commands/graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../src/commands/graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,aAAa,CAAC;AASnD,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,OAAO;IACxC,MAAM,CAAC,OAAO,SAA6B;IAE3C,MAAM,CAAC,MAAM,UAAQ;IAErB,MAAM,CAAC,KAAK;;MAKV;IAEF,MAAM,CAAC,IAAI;;MAKT;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAmB3B"}
+{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../src/commands/graph.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,qBAAqB;IACtD,MAAM,CAAC,OAAO,SAA6B;IAE3C,MAAM,CAAC,MAAM,UAAQ;IAErB,MAAM,CAAC,KAAK;;;MAMV;IAEF,MAAM,CAAC,IAAI;;MAKT;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAoB3B"}