@kwonye/mcpx 0.1.104 → 0.1.105

package/dist/{chunk-0xhdyt4z.js → chunk-h158rkts.js}

@@ -1,12 +1,12 @@
 import {
   resolvePluginId,
   resolvePluginVars
-} from "./chunk-z1k63fa3.js";
+} from "./chunk-56whm3hm.js";
 import {
   loadConfig
-} from "./chunk-wq4zd3t7.js";
-import"./chunk-cz8cdmw1.js";
-import"./chunk-cqenqnxk.js";
+} from "./chunk-01s7rhx3.js";
+import"./chunk-fw8dyt89.js";
+import"./chunk-4y0t0tfj.js";
 import"./chunk-bjw71y54.js";
 import"./chunk-wj4tjacg.js";
 

package/dist/{chunk-941dqsx2.js → chunk-t4hqf6yh.js}

@@ -1,25 +1,28 @@
 import {
   refreshAutoUpdateMarketplaces
-} from "./chunk-s9v1epnk.js";
+} from "./chunk-btbww96n.js";
 import {
   APP_VERSION,
   getGatewayInternalUrl,
   getGatewayUrl,
+  listSkills,
   mutateConfig,
   persistSyncState,
-  syncAllClients
-} from "./chunk-z1k63fa3.js";
+  syncAllClients,
+  validateSkillId,
+  validateSkillPackage
+} from "./chunk-56whm3hm.js";
 import {
   loadConfig,
   loadMergedConfig,
   saveConfig
-} from "./chunk-wq4zd3t7.js";
+} from "./chunk-01s7rhx3.js";
 import {
   SecretsManager,
   UpstreamError,
   classifyUpstreamError,
   ensureGatewayToken
-} from "./chunk-cz8cdmw1.js";
+} from "./chunk-fw8dyt89.js";
 import {
   ensureDir,
   ensureParentDir,
@@ -28,16 +31,18 @@ import {
   getMarketplaceUpdateStatePath,
   getOAuthLockPath,
   getPidPath,
+  getSkillsDir,
   getStagedVersionPath,
   getTelemetryPath,
   getUpdateLockPath,
   getUpdatesDir
-} from "./chunk-cqenqnxk.js";
+} from "./chunk-4y0t0tfj.js";
 import {
   isServerEnabled
 } from "./chunk-bjw71y54.js";
 import {
-  __export
+  __export,
+  __require
 } from "./chunk-wj4tjacg.js";
 
 // src/core/oauth.ts
@@ -10315,6 +10320,236 @@ function runDaemonForeground(config, port, secrets) {
   });
 }
 
+// src/core/share.ts
+import fs8 from "node:fs";
+import path5 from "node:path";
+import crypto4 from "node:crypto";
+import { z as z2 } from "zod";
+var ENVIRONMENT_FILE = "mcpx.environment.json";
+var LOCK_FILE = "mcpx.environment.lock.json";
+var packageEntrySchema = z2.object({
+  id: z2.string().min(1),
+  kind: z2.enum(["skill", "plugin"]),
+  path: z2.string().min(1),
+  source: z2.string().optional()
+});
+var shareServerSchema = z2.discriminatedUnion("transport", [
+  z2.object({ transport: z2.literal("http"), url: z2.url(), headers: z2.record(z2.string(), z2.string()).optional(), enabled: z2.boolean().default(true) }),
+  z2.object({ transport: z2.literal("stdio"), command: z2.string().min(1), args: z2.array(z2.string()).default([]), env: z2.record(z2.string(), z2.string()).optional(), cwd: z2.string().optional(), enabled: z2.boolean().default(true) })
+]);
+var environmentSchema = z2.object({
+  version: z2.literal(1),
+  generatedBy: z2.string().min(1),
+  servers: z2.record(z2.string(), shareServerSchema).default({}),
+  skills: z2.array(packageEntrySchema).default([]),
+  plugins: z2.array(packageEntrySchema).default([]),
+  clients: z2.array(z2.string()).default([]),
+  inputs: z2.array(z2.object({ name: z2.string(), description: z2.string().optional() })).default([])
+});
+var lockSchema = z2.object({
+  version: z2.literal(1),
+  mcpxCompatibility: z2.string().min(1),
+  manifestSha256: z2.string().regex(/^[a-f0-9]{64}$/),
+  packages: z2.record(z2.string(), z2.object({ sha256: z2.string().regex(/^[a-f0-9]{64}$/), revision: z2.string().optional() })).default({})
+});
+function sha256File(filePath) {
+  return crypto4.createHash("sha256").update(fs8.readFileSync(filePath)).digest("hex");
+}
+function sha256Tree(root) {
+  const hash = crypto4.createHash("sha256");
+  const visit = (current, relative2 = "") => {
+    const entries = fs8.readdirSync(current, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name));
+    for (const entry of entries) {
+      if (entry.name === ".DS_Store" || entry.name === ".git")
+        continue;
+      const child = path5.join(current, entry.name);
+      const childRelative = path5.join(relative2, entry.name);
+      hash.update(childRelative);
+      if (entry.isDirectory())
+        visit(child, childRelative);
+      else if (entry.isFile())
+        hash.update(fs8.readFileSync(child));
+    }
+  };
+  visit(root);
+  return hash.digest("hex");
+}
+function copyDirectory(source, destination) {
+  ensureDir(destination);
+  fs8.cpSync(source, destination, { recursive: true, dereference: true, filter: (sourcePath) => !sourcePath.split(path5.sep).includes(".git") && !sourcePath.endsWith(`${path5.sep}.DS_Store`) });
+}
+function resolveSharePath(root, relativePath) {
+  const resolvedRoot = path5.resolve(root);
+  const resolved = path5.resolve(root, relativePath);
+  if (resolved !== resolvedRoot && !resolved.startsWith(resolvedRoot + path5.sep))
+    throw new Error(`Package path escapes the environment folder: ${relativePath}`);
+  return resolved;
+}
+function scrubServer(name, spec, inputs) {
+  const result = { transport: spec.transport, enabled: spec.enabled ?? true };
+  if (spec.transport === "http") {
+    const parsedUrl = new URL(spec.url);
+    if (parsedUrl.username || parsedUrl.password || /(?:token|secret|key|password|auth)/i.test(parsedUrl.search)) {
+      throw new Error(`Server ${name} URL contains credentials and cannot be shared`);
+    }
+    result.url = spec.url;
+    if (spec.headers) {
+      result.headers = Object.fromEntries(Object.entries(spec.headers).map(([key, value]) => {
+        if (value.startsWith("secret://"))
+          return [key, value];
+        const inputName = `server.${name}.header.${key}`;
+        inputs.push({ name: inputName, description: `HTTP header ${key} for ${name}` });
+        return [key, `{{input:${inputName}}}`];
+      }));
+    }
+  } else {
+    if (path5.isAbsolute(spec.command))
+      throw new Error(`Server ${name} uses an absolute command path and cannot be shared`);
+    result.command = spec.command;
+    result.args = spec.args ?? [];
+    if (spec.cwd) {
+      if (path5.isAbsolute(spec.cwd))
+        throw new Error(`Server ${name} uses an absolute cwd and cannot be shared`);
+      result.cwd = spec.cwd;
+    }
+    if (spec.env) {
+      result.env = Object.fromEntries(Object.entries(spec.env).map(([key, value]) => {
+        if (value.startsWith("secret://"))
+          return [key, value];
+        const inputName = `server.${name}.env.${key}`;
+        inputs.push({ name: inputName, description: `Environment variable ${key} for ${name}` });
+        return [key, `{{input:${inputName}}}`];
+      }));
+    }
+  }
+  return result;
+}
+function replaceInputs(value, inputs) {
+  if (typeof value === "string") {
+    const match = value.match(/^\{\{input:([^}]+)\}\}$/);
+    return match ? inputs[match[1]] ?? value : value;
+  }
+  if (Array.isArray(value))
+    return value.map((entry) => replaceInputs(entry, inputs));
+  if (value && typeof value === "object")
+    return Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, replaceInputs(entry, inputs)]));
+  return value;
+}
+function exportEnvironment(destination, options = {}) {
+  const root = path5.resolve(destination);
+  ensureDir(root);
+  const config = loadConfig();
+  const inputs = [];
+  const generatedServerNames = new Set(Object.values(config.plugins ?? {}).flatMap((plugin) => plugin.serverNames));
+  const servers = Object.fromEntries(Object.entries(config.servers).filter(([name]) => !generatedServerNames.has(name)).map(([name, spec]) => [name, scrubServer(name, spec, inputs)]));
+  const packagesDir = path5.join(root, "packages");
+  ensureDir(packagesDir);
+  const selectedSkills = listSkills().filter((skill) => !options.skills || options.skills.includes(skill.id));
+  const skills = selectedSkills.map((skill) => {
+    const packagePath = path5.join(packagesDir, "skills", skill.id);
+    ensureDir(path5.dirname(packagePath));
+    if (skill.root)
+      copyDirectory(skill.root, packagePath);
+    else {
+      ensureDir(packagePath);
+      fs8.writeFileSync(path5.join(packagePath, "SKILL.md"), skill.content, "utf8");
+    }
+    return { id: skill.id, kind: "skill", path: `packages/skills/${skill.id}`, source: skill.source ?? "authored" };
+  });
+  const selectedPlugins = Object.values(config.plugins ?? {}).filter((plugin) => !options.plugins || options.plugins.includes(plugin.id) || options.plugins.includes(plugin.name));
+  const plugins = selectedPlugins.map((plugin) => {
+    const packagePath = path5.join(packagesDir, "plugins", plugin.name);
+    copyDirectory(plugin.root, packagePath);
+    return { id: plugin.name, kind: "plugin", path: `packages/plugins/${plugin.name}`, source: plugin.source };
+  });
+  const environment = environmentSchema.parse({ version: 1, generatedBy: "mcpx", servers, skills, plugins, clients: Object.keys(config.clients ?? {}), inputs });
+  const manifestPath = path5.join(root, ENVIRONMENT_FILE);
+  fs8.writeFileSync(manifestPath, JSON.stringify(environment, null, 2) + `
+`, "utf8");
+  const lock = {
+    version: 1,
+    mcpxCompatibility: "1",
+    manifestSha256: sha256File(manifestPath),
+    packages: Object.fromEntries([
+      ...skills.map((entry) => [`${entry.kind}:${entry.id}`, { sha256: sha256Tree(path5.join(root, entry.path)) }]),
+      ...plugins.map((entry) => {
+        const plugin = selectedPlugins.find((candidate) => candidate.name === entry.id);
+        return [`${entry.kind}:${entry.id}`, { sha256: sha256Tree(path5.join(root, entry.path)), revision: plugin?.resolvedSha }];
+      })
+    ])
+  };
+  fs8.writeFileSync(path5.join(root, LOCK_FILE), JSON.stringify(lock, null, 2) + `
+`, "utf8");
+  return { environment, lock };
+}
+async function importEnvironment(sourceDirectory, options = {}) {
+  const root = path5.resolve(sourceDirectory);
+  const manifestPath = path5.join(root, ENVIRONMENT_FILE);
+  const lockPath = path5.join(root, LOCK_FILE);
+  const environment = environmentSchema.parse(JSON.parse(fs8.readFileSync(manifestPath, "utf8")));
+  const lock = lockSchema.parse(JSON.parse(fs8.readFileSync(lockPath, "utf8")));
+  if (options.locked && lock.manifestSha256 !== sha256File(manifestPath))
+    throw new Error("Environment manifest does not match its lockfile");
+  const allEntries = [...environment.skills, ...environment.plugins];
+  for (const entry of allEntries) {
+    const packagePath = resolveSharePath(root, entry.path);
+    if (!fs8.existsSync(packagePath))
+      throw new Error(`Missing package content: ${entry.path}`);
+    if (entry.kind === "skill")
+      validateSkillPackage(packagePath);
+    const expected = lock.packages[`${entry.kind}:${entry.id}`]?.sha256;
+    if (options.locked && expected && expected !== sha256Tree(packagePath))
+      throw new Error(`Package integrity check failed: ${entry.id}`);
+  }
+  const inputs = options.inputs ?? {};
+  const missingInputs = environment.inputs.map((input) => input.name).filter((name) => !inputs[name]);
+  if (options.dryRun)
+    return { importedSkills: environment.skills.map((entry) => entry.id), importedPlugins: environment.plugins.map((entry) => entry.id), importedServers: Object.keys(environment.servers), missingInputs };
+  const currentConfig = loadConfig();
+  for (const entry of environment.skills) {
+    validateSkillId(entry.id);
+    const target = path5.join(getSkillsDir(), entry.id);
+    if (fs8.existsSync(target) && sha256Tree(target) !== sha256Tree(resolveSharePath(root, entry.path)))
+      throw new Error(`Skill already exists with different content: ${entry.id}`);
+  }
+  for (const [name, raw] of Object.entries(environment.servers)) {
+    if (currentConfig.servers[name] && JSON.stringify(currentConfig.servers[name]) !== JSON.stringify(replaceInputs(raw, inputs)))
+      throw new Error(`Server already exists with different configuration: ${name}`);
+  }
+  for (const entry of environment.plugins) {
+    if (Object.values(currentConfig.plugins ?? {}).some((plugin) => plugin.name === entry.id))
+      throw new Error(`Plugin already exists: ${entry.id}`);
+  }
+  const targetSkills = getSkillsDir();
+  for (const entry of environment.skills) {
+    validateSkillId(entry.id);
+    const target = path5.join(targetSkills, entry.id);
+    if (fs8.existsSync(target)) {
+      if (sha256Tree(target) !== sha256Tree(resolveSharePath(root, entry.path)))
+        throw new Error(`Skill already exists with different content: ${entry.id}`);
+      continue;
+    }
+    copyDirectory(resolveSharePath(root, entry.path), target);
+  }
+  const importedPlugins = [];
+  for (const entry of environment.plugins) {
+    const packagePath = resolveSharePath(root, entry.path);
+    const { installPlugin } = await import("./chunk-am903qjk.js");
+    await installPlugin(packagePath, { name: entry.id, enabled: true });
+    importedPlugins.push(entry.id);
+  }
+  const importedServers = [];
+  await mutateConfig((fresh) => {
+    for (const [name, raw] of Object.entries(environment.servers)) {
+      if (fresh.servers[name])
+        continue;
+      fresh.servers[name] = replaceInputs(raw, inputs);
+      importedServers.push(name);
+    }
+  });
+  return { importedSkills: environment.skills.map((entry) => entry.id), importedPlugins, importedServers, missingInputs };
+}
+
 // src/core/status.ts
 var STATUS_CLIENTS = ["claude", "claude-desktop", "codex", "cursor", "cline", "opencode", "kiro", "vscode", "qwen", "openclaw", "hermes"];
 function describeServerTarget(spec) {
@@ -10427,6 +10662,6 @@ async function buildStatusReport(config, managedIndex, daemon = getDaemonStatus(
   };
 }
 
-export { isOAuthReference, oauthReferenceServerName, __resetOAuthSupportCache, probeOAuthSupport, OAUTH_LOGIN_TIMEOUT_MS, OAuthCancelledError, OAuthLoginInProgressError, runOAuthLogin, getOAuthAccessToken, oauthSecretNames, clearOAuthCredentials, getOAuthCredentialStatus, MCP_V2_PROTOCOL_VERSION, probeHttpAuthRequirement, fetchRegistryServerDetail, selectBestPackage, extractRequiredInputs, mapRegistryToSpec, toSecretRef, secretRefName, defaultAuthSecretName, resolveAuthTarget, applyAuthReference, removeAuthReference, listAuthBindings, maybePrefixBearer, buildEnrichedPath, TELEMETRY_NOTICE_VERSION, isTelemetryEnvironmentDisabled, defaultTelemetryPreferences, loadTelemetryPreferences, getTelemetryStatus, acknowledgeTelemetryNotice, updateTelemetryPreferences, resetTelemetryInstallationId, markTelemetryMilestone, initializeTelemetry, setTelemetryErrorReporter, reportTelemetryError, captureTelemetryEvent, flushTelemetry, shutdownTelemetry, durationBucket, countBucket, uptimeBucket, platformFamily, architecture, compareVersions, checkForUpdates, getStagedUpdate, shouldUseStagedCli, clearStagedUpdate, getStagedCliPath, startBackgroundUpdateCheck, runBackgroundUpdate, performUpdate, performRollback, runMarketplaceAutoUpdate, startMarketplaceAutoUpdater, getDaemonStatus, startDaemon, stopDaemon, restartDaemon, readDaemonLogs, runDaemonForeground, STATUS_CLIENTS, buildStatusReport };
+export { isOAuthReference, oauthReferenceServerName, __resetOAuthSupportCache, probeOAuthSupport, OAUTH_LOGIN_TIMEOUT_MS, OAuthCancelledError, OAuthLoginInProgressError, runOAuthLogin, getOAuthAccessToken, oauthSecretNames, clearOAuthCredentials, getOAuthCredentialStatus, MCP_V2_PROTOCOL_VERSION, probeHttpAuthRequirement, fetchRegistryServerDetail, selectBestPackage, extractRequiredInputs, mapRegistryToSpec, toSecretRef, secretRefName, defaultAuthSecretName, resolveAuthTarget, applyAuthReference, removeAuthReference, listAuthBindings, maybePrefixBearer, buildEnrichedPath, TELEMETRY_NOTICE_VERSION, isTelemetryEnvironmentDisabled, defaultTelemetryPreferences, loadTelemetryPreferences, getTelemetryStatus, acknowledgeTelemetryNotice, updateTelemetryPreferences, resetTelemetryInstallationId, markTelemetryMilestone, initializeTelemetry, setTelemetryErrorReporter, reportTelemetryError, captureTelemetryEvent, flushTelemetry, shutdownTelemetry, durationBucket, countBucket, uptimeBucket, platformFamily, architecture, compareVersions, checkForUpdates, getStagedUpdate, shouldUseStagedCli, clearStagedUpdate, getStagedCliPath, startBackgroundUpdateCheck, runBackgroundUpdate, performUpdate, performRollback, runMarketplaceAutoUpdate, startMarketplaceAutoUpdater, getDaemonStatus, startDaemon, stopDaemon, restartDaemon, readDaemonLogs, runDaemonForeground, exportEnvironment, importEnvironment, STATUS_CLIENTS, buildStatusReport };
 
-//# debugId=29CCEFB8087AD3EF64756E2164756E21
+//# debugId=083977990173B02D64756E2164756E21

package/dist/{chunk-z34m83m4.js → chunk-y9a1rx7j.js}

@@ -10,8 +10,8 @@ import {
   unregisterProject,
   updateServer,
   validateServerName
-} from "./chunk-cz8cdmw1.js";
-import"./chunk-cqenqnxk.js";
+} from "./chunk-fw8dyt89.js";
+import"./chunk-4y0t0tfj.js";
 import"./chunk-bjw71y54.js";
 import"./chunk-wj4tjacg.js";
 export {