@kwonye/mcpx 0.1.104 → 0.1.106

package/dist/adapters/codex.d.ts

@@ -5,6 +5,8 @@ export declare class CodexAdapter implements ClientAdapter {
     supportsHttp(): boolean;
     syncPlugins(plugins: PluginSyncInput[]): PluginSyncResult;
     syncSkills(skills: Skill[]): void;
+    skillDirectory(): string;
+    additionalSkillDirectories(): string[];
     scanForImports(_config: McpxConfig, managedIndex: ManagedIndex): import("../types.js").ClientImportScanResult;
     syncGateway(_config: McpxConfig, options: SyncClientOptions): SyncResult;
 }

package/dist/adapters/index.d.ts

@@ -1,3 +1,4 @@
-import type { ClientAdapter } from "../types.js";
+import type { ClientAdapter, HarnessDescriptor } from "../types.js";
+export declare function registerHarness(id: string, factory: () => ClientAdapter, descriptor?: HarnessDescriptor): void;
 export declare function getAdapters(): ClientAdapter[];
 //# sourceMappingURL=index.d.ts.map

package/dist/adapters/json.d.ts

@@ -0,0 +1,26 @@
+import type { ClientAdapter, ManagedIndex, McpxConfig, SyncClientOptions, SyncResult, Skill, PluginSyncInput } from "../types.js";
+export declare function readNativeJson(file: string): Record<string, any>;
+export interface JsonHarnessOptions {
+    id: string;
+    configPath: () => string;
+    skillsPath: () => string;
+    format?: "opencode" | "standard";
+}
+/** Shared codec; a new JSON harness supplies paths and its native format. */
+export declare class JsonHarnessAdapter implements ClientAdapter {
+    readonly options: JsonHarnessOptions;
+    readonly id: string;
+    constructor(options: JsonHarnessOptions);
+    detectConfigPath(): string;
+    supportsHttp(): boolean;
+    skillDirectory(): string;
+    syncSkills(skills: Skill[]): void;
+    syncPlugins(plugins: PluginSyncInput[]): import("../types.js").PluginSyncResult;
+    private get key();
+    scanForImports(_config: McpxConfig, index: ManagedIndex): import("../types.js").ClientImportScanResult;
+    syncGateway(_config: McpxConfig, options: SyncClientOptions): SyncResult;
+}
+export declare class OpenCodeAdapter extends JsonHarnessAdapter {
+    constructor();
+}
+//# sourceMappingURL=json.d.ts.map

package/dist/adapters/pi.d.ts

@@ -0,0 +1,9 @@
+import { JsonHarnessAdapter } from "./json.js";
+import type { McpxConfig, SyncClientOptions, SyncResult } from "../types.js";
+export declare class PiAdapter extends JsonHarnessAdapter {
+    constructor(projectPath?: string);
+    additionalSkillDirectories(): string[];
+    managedName(name: string): string;
+    syncGateway(config: McpxConfig, options: SyncClientOptions): SyncResult;
+}
+//# sourceMappingURL=pi.d.ts.map

package/dist/chunk-0xt563m1.js

@@ -0,0 +1,126 @@
+// src/core/server-auth.ts
+function normalizeNamePart(value) {
+  return value.trim().toLowerCase().replace(/[^a-z0-9._-]+/g, "_").replace(/^_+|_+$/g, "") || "value";
+}
+function requireNonEmpty(value, label) {
+  const normalized = value?.trim();
+  if (!normalized) {
+    throw new Error(`${label} must be non-empty.`);
+  }
+  return normalized;
+}
+function toSecretRef(secretName) {
+  return `secret://${secretName}`;
+}
+function secretRefName(ref) {
+  if (!ref.startsWith("secret://")) {
+    return null;
+  }
+  const name = ref.slice("secret://".length).trim();
+  return name.length > 0 ? name : null;
+}
+function defaultAuthSecretName(serverName, target) {
+  return `auth_${normalizeNamePart(serverName)}_${target.kind}_${normalizeNamePart(target.key)}`;
+}
+function resolveAuthTarget(spec, header, env) {
+  if (spec.transport === "http") {
+    if (env) {
+      throw new Error("--env is only valid for stdio upstreams.");
+    }
+    return {
+      kind: "header",
+      key: requireNonEmpty(header ?? "Authorization", "Header name")
+    };
+  }
+  if (header) {
+    throw new Error("--header is only valid for HTTP upstreams.");
+  }
+  return {
+    kind: "env",
+    key: requireEnvName(env)
+  };
+}
+function requireEnvName(value) {
+  const name = requireNonEmpty(value, "Env var name");
+  if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name))
+    throw new Error("Invalid environment variable name.");
+  return name;
+}
+function applyAuthReference(spec, target, secretRef) {
+  if (target.kind === "header") {
+    if (spec.transport !== "http") {
+      throw new Error(`Cannot set header auth on ${spec.transport} upstream.`);
+    }
+    const headers = { ...spec.headers ?? {} };
+    for (const key of Object.keys(headers)) {
+      if (key.toLowerCase() === target.key.toLowerCase())
+        delete headers[key];
+    }
+    headers[target.key] = secretRef;
+    spec.headers = headers;
+    return;
+  }
+  if (spec.transport !== "stdio") {
+    throw new Error(`Cannot set env auth on ${spec.transport} upstream.`);
+  }
+  const env = { ...spec.env ?? {} };
+  env[target.key] = secretRef;
+  spec.env = env;
+}
+function removeAuthReference(spec, target) {
+  if (target.kind === "header") {
+    if (spec.transport !== "http") {
+      throw new Error(`Cannot remove header auth from ${spec.transport} upstream.`);
+    }
+    if (!spec.headers || !(target.key in spec.headers)) {
+      return null;
+    }
+    const previous2 = spec.headers[target.key] ?? null;
+    const next2 = { ...spec.headers };
+    delete next2[target.key];
+    spec.headers = Object.keys(next2).length > 0 ? next2 : undefined;
+    return previous2;
+  }
+  if (spec.transport !== "stdio") {
+    throw new Error(`Cannot remove env auth from ${spec.transport} upstream.`);
+  }
+  if (!spec.env || !(target.key in spec.env)) {
+    return null;
+  }
+  const previous = spec.env[target.key] ?? null;
+  const next = { ...spec.env };
+  delete next[target.key];
+  spec.env = Object.keys(next).length > 0 ? next : undefined;
+  return previous;
+}
+function listAuthBindings(spec) {
+  if (spec.transport === "http") {
+    return Object.entries(spec.headers ?? {}).map(([key, value]) => ({
+      kind: "header",
+      key,
+      value
+    }));
+  }
+  return Object.entries(spec.env ?? {}).map(([key, value]) => ({
+    kind: "env",
+    key,
+    value
+  }));
+}
+var TOKEN68 = /^[A-Za-z0-9\-._~+/]+=*$/;
+function maybePrefixBearer(target, value, raw = false) {
+  if (raw || target.kind !== "header" || target.key.toLowerCase() !== "authorization") {
+    return value;
+  }
+  if (/^\S+\s+\S+/.test(value)) {
+    return value;
+  }
+  if (TOKEN68.test(value)) {
+    return `Bearer ${value}`;
+  }
+  return value;
+}
+
+export { toSecretRef, secretRefName, defaultAuthSecretName, resolveAuthTarget, applyAuthReference, removeAuthReference, listAuthBindings, maybePrefixBearer };
+
+//# debugId=DF42F5BEBE285FB064756E2164756E21

package/dist/{chunk-s9v1epnk.js → chunk-1mrkz29t.js}

@@ -1,19 +1,27 @@
 import {
-  PluginCache,
   PluginManager,
+  capture,
   discoverComponents,
   hasManifest,
-  mutateConfig,
   readManifest,
   uninstallPlugin
-} from "./chunk-z1k63fa3.js";
+} from "./chunk-4aafp444.js";
+import {
+  mutateConfig
+} from "./chunk-hahs24dv.js";
+import {
+  PluginCache
+} from "./chunk-7rq88hb3.js";
 import {
   loadConfig
-} from "./chunk-wq4zd3t7.js";
+} from "./chunk-brxwa30j.js";
+import {
+  exports_external
+} from "./chunk-p7yzyt87.js";
 import {
   ensureDir,
   getMarketplaceCacheRoot
-} from "./chunk-cqenqnxk.js";
+} from "./chunk-grkz21sq.js";
 import {
   __require
 } from "./chunk-wj4tjacg.js";
@@ -25,57 +33,56 @@ import os from "node:os";
 import path from "node:path";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
-import { z } from "zod";
 var execFileAsync = promisify(execFile);
 var CLAUDE_MANIFEST = ".claude-plugin/marketplace.json";
 var CODEX_MANIFEST = ".agents/plugins/marketplace.json";
 var SUPPORTED = new Set(["skills", "commands", "agents", "hooks", "mcpServers"]);
 var UNSUPPORTED = new Set(["apps", "lspServers", "settings", "outputStyles", "dependencies"]);
-var authorSchema = z.object({
-  name: z.string(),
-  email: z.string().optional(),
-  url: z.string().optional()
+var authorSchema = exports_external.object({
+  name: exports_external.string(),
+  email: exports_external.string().optional(),
+  url: exports_external.string().optional()
 }).passthrough();
-var claudeEntrySchema = z.object({
-  name: z.string().min(1),
-  displayName: z.string().optional(),
-  description: z.string().optional(),
-  version: z.string().optional(),
+var claudeEntrySchema = exports_external.object({
+  name: exports_external.string().min(1),
+  displayName: exports_external.string().optional(),
+  description: exports_external.string().optional(),
+  version: exports_external.string().optional(),
   author: authorSchema.optional(),
-  homepage: z.string().optional(),
-  category: z.string().optional(),
-  tags: z.array(z.string()).optional(),
-  keywords: z.array(z.string()).optional(),
-  source: z.unknown(),
-  skills: z.unknown().optional(),
-  commands: z.unknown().optional(),
-  agents: z.unknown().optional(),
-  hooks: z.unknown().optional(),
-  mcpServers: z.unknown().optional(),
-  lspServers: z.unknown().optional(),
-  apps: z.unknown().optional(),
-  settings: z.unknown().optional(),
-  outputStyles: z.unknown().optional(),
-  dependencies: z.unknown().optional()
+  homepage: exports_external.string().optional(),
+  category: exports_external.string().optional(),
+  tags: exports_external.array(exports_external.string()).optional(),
+  keywords: exports_external.array(exports_external.string()).optional(),
+  source: exports_external.unknown(),
+  skills: exports_external.unknown().optional(),
+  commands: exports_external.unknown().optional(),
+  agents: exports_external.unknown().optional(),
+  hooks: exports_external.unknown().optional(),
+  mcpServers: exports_external.unknown().optional(),
+  lspServers: exports_external.unknown().optional(),
+  apps: exports_external.unknown().optional(),
+  settings: exports_external.unknown().optional(),
+  outputStyles: exports_external.unknown().optional(),
+  dependencies: exports_external.unknown().optional()
 }).passthrough();
-var claudeCatalogSchema = z.object({
-  name: z.string().min(1),
+var claudeCatalogSchema = exports_external.object({
+  name: exports_external.string().min(1),
   owner: authorSchema,
-  plugins: z.array(claudeEntrySchema)
+  plugins: exports_external.array(claudeEntrySchema)
 }).passthrough();
-var codexEntrySchema = z.object({
-  name: z.string().min(1),
-  source: z.unknown(),
-  category: z.string().optional(),
-  policy: z.object({
-    installation: z.string().optional(),
-    authentication: z.string().optional()
+var codexEntrySchema = exports_external.object({
+  name: exports_external.string().min(1),
+  source: exports_external.unknown(),
+  category: exports_external.string().optional(),
+  policy: exports_external.object({
+    installation: exports_external.string().optional(),
+    authentication: exports_external.string().optional()
   }).passthrough().optional()
 }).passthrough();
-var codexCatalogSchema = z.object({
-  name: z.string().min(1),
-  interface: z.object({ displayName: z.string().optional() }).passthrough().optional(),
-  plugins: z.array(codexEntrySchema)
+var codexCatalogSchema = exports_external.object({
+  name: exports_external.string().min(1),
+  interface: exports_external.object({ displayName: exports_external.string().optional() }).passthrough().optional(),
+  plugins: exports_external.array(codexEntrySchema)
 }).passthrough();
 function sourceKey(source) {
   return crypto.createHash("sha256").update(source).digest("hex").slice(0, 20);
@@ -233,14 +240,14 @@ function resolveMarketplacePluginSource(catalog, entry) {
       throw new Error(`Unsupported marketplace plugin source: ${value}`);
     return { type: "local", original: resolveContained(catalog.root, value) };
   }
-  const source = z.object({
-    source: z.string(),
-    repo: z.string().optional(),
-    url: z.string().optional(),
-    path: z.string().optional(),
-    ref: z.string().optional(),
-    sha: z.string().optional(),
-    package: z.string().optional()
+  const source = exports_external.object({
+    source: exports_external.string(),
+    repo: exports_external.string().optional(),
+    url: exports_external.string().optional(),
+    path: exports_external.string().optional(),
+    ref: exports_external.string().optional(),
+    sha: exports_external.string().optional(),
+    package: exports_external.string().optional()
   }).passthrough().parse(value);
   if (source.source === "local") {
     if (!source.path)
@@ -387,6 +394,7 @@ async function addMarketplace(source, manifestPath) {
       throw new Error(`Built-in marketplace ${catalog.name} cannot be replaced`);
     fresh.marketplaces[catalog.name] = marketplace;
   });
+  capture("marketplace_added", { source_type: marketplace.sourceType, format: marketplace.format });
   return marketplace;
 }
 async function refreshMarketplace(name) {
@@ -451,6 +459,7 @@ async function removeMarketplace(name) {
   await mutateConfig((fresh) => {
     delete fresh.marketplaces?.[name];
   });
+  capture("marketplace_removed", { source_type: marketplace.sourceType, installed_plugin_count: installed.length });
 }
 async function listMarketplacePlugins(query) {
   const initial = await listMarketplaces();
@@ -527,16 +536,20 @@ async function installMarketplacePlugin(id) {
       approvals[capability] = true;
   }
   const manager = new PluginManager;
-  return manager.installResolvedPlugin(source, {
+  const installed = await manager.installResolvedPlugin(source, {
     name: pluginName,
     approvals,
     marketplace: { name: marketplaceName, pluginName, sourceFingerprint: detail.sourceFingerprint }
   });
+  capture("plugin_installed", { marketplace: marketplaceName, capabilities: detail.supportedCapabilities });
+  return installed;
 }
 async function updateMarketplaceInstalledPlugin(pluginId, sync = true) {
   const plugin = loadConfig().plugins?.[pluginId];
   if (!plugin?.marketplace)
     throw new Error(`Plugin ${pluginId} is not marketplace-managed`);
+  if (plugin.pinned)
+    throw new Error(`Plugin ${pluginId} is pinned; unpin it before updating`);
   const qualified = `${plugin.marketplace.pluginName}@${plugin.marketplace.name}`;
   try {
     const detail = await inspectMarketplacePlugin(qualified);
@@ -552,7 +565,9 @@ async function updateMarketplaceInstalledPlugin(pluginId, sync = true) {
     if (!entry)
       throw new Error(`Plugin ${qualified} is no longer listed`);
     const source = resolveMarketplacePluginSource(catalog, entry);
-    return await new PluginManager().updateResolvedPlugin(pluginId, source, detail.sourceFingerprint, sync);
+    const updated = await new PluginManager().updateResolvedPlugin(pluginId, source, detail.sourceFingerprint, sync);
+    capture("plugin_updated", { marketplace: plugin.marketplace.name, plugin_name: plugin.marketplace.pluginName });
+    return updated;
   } catch (error) {
     await mutateConfig((config) => {
       const current = config.plugins?.[pluginId];
@@ -578,7 +593,7 @@ async function refreshMarketplaceWithPlugins(name) {
     }
   }
   if (updated.length > 0) {
-    const { pluginSync } = await import("./chunk-b58zsdp4.js");
+    const { pluginSync } = await import("./chunk-v041118a.js");
     await pluginSync();
   }
   return { marketplace, updated, errors };
@@ -600,4 +615,4 @@ async function refreshAutoUpdateMarketplaces() {
 
 export { resolveMarketplacePluginSource, listMarketplaces, addMarketplace, refreshMarketplace, setMarketplaceAutoUpdate, removeMarketplace, listMarketplacePlugins, inspectMarketplacePlugin, installMarketplacePlugin, updateMarketplaceInstalledPlugin, refreshMarketplaceWithPlugins, refreshAutoUpdateMarketplaces };
 
-//# debugId=95199795C0DBE5F464756E2164756E21
+//# debugId=CA752DBB3B8B9C7764756E2164756E21

package/dist/{chunk-31brdz5s.js → chunk-1v66g9d6.js}

@@ -8,8 +8,9 @@ import {
   resolveActiveConfig,
   saveConfig,
   saveProjectConfig
-} from "./chunk-wq4zd3t7.js";
-import"./chunk-cqenqnxk.js";
+} from "./chunk-brxwa30j.js";
+import"./chunk-p7yzyt87.js";
+import"./chunk-grkz21sq.js";
 import"./chunk-bjw71y54.js";
 import"./chunk-wj4tjacg.js";
 export {
@@ -24,4 +25,4 @@ export {
   saveProjectConfig
 };
 
-//# debugId=D849CB34D71D1D5364756E2164756E21
+//# debugId=A8828D397F34F54064756E2164756E21

package/dist/chunk-1yq3yb66.js

@@ -0,0 +1,126 @@
+// src/core/registry-client.ts
+var REGISTRY_BASE = "https://registry.modelcontextprotocol.io";
+async function fetchRegistryServerDetail(name) {
+  const encoded = encodeURIComponent(name);
+  const response = await fetch(`${REGISTRY_BASE}/v0.1/servers/${encoded}/versions/latest`, {
+    headers: { accept: "application/json" }
+  });
+  if (!response.ok) {
+    throw new Error(`Registry API error: ${response.status}`);
+  }
+  const data = await response.json();
+  return data.server;
+}
+var PACKAGE_PRIORITY = {
+  npm: 1,
+  pypi: 2,
+  nuget: 3,
+  oci: 4,
+  mcpb: 5
+};
+var RUNTIME_HINT = {
+  npm: "npx",
+  pypi: "uvx",
+  nuget: "dnx"
+};
+function selectBestPackage(packages = [], remotes = []) {
+  const stdioPkgs = packages.filter((p) => p.transport.type === "stdio").sort((a, b) => (PACKAGE_PRIORITY[a.registryType] ?? 99) - (PACKAGE_PRIORITY[b.registryType] ?? 99));
+  if (stdioPkgs.length > 0) {
+    return { kind: "package", package: stdioPkgs[0] };
+  }
+  const httpRemotes = remotes.filter((r) => r.type === "streamable-http");
+  if (httpRemotes.length > 0) {
+    return { kind: "remote", remote: httpRemotes[0] };
+  }
+  if (packages.length > 0) {
+    return { kind: "package", package: packages[0] };
+  }
+  if (remotes.length > 0) {
+    throw new Error("Server has no MCP v2-compatible streamable HTTP remote");
+  }
+  throw new Error("Server has no packages or remotes");
+}
+function extractRequiredInputs(option) {
+  const inputs = [];
+  if (option.kind === "package" && option.package?.environmentVariables) {
+    for (const env of option.package.environmentVariables) {
+      if (env.isRequired && !env.default) {
+        inputs.push({
+          name: env.name,
+          description: env.description,
+          isSecret: env.isSecret ?? false,
+          kind: "env"
+        });
+      }
+    }
+    for (const arg of option.package.packageArguments ?? []) {
+      if (arg.isRequired && !arg.value && !arg.default) {
+        inputs.push({
+          name: arg.name ?? arg.valueHint ?? "arg",
+          description: arg.description,
+          isSecret: false,
+          kind: "arg"
+        });
+      }
+    }
+  }
+  if (option.kind === "remote" && option.remote?.headers) {
+    for (const header of option.remote.headers) {
+      if (header.isRequired && !header.default) {
+        inputs.push({
+          name: header.name,
+          description: header.description,
+          isSecret: header.isSecret ?? false,
+          kind: "header"
+        });
+      }
+    }
+  }
+  return inputs;
+}
+function mapRegistryToSpec(_name, option, resolvedValues) {
+  if (option.kind === "remote") {
+    const headers = {};
+    for (const header of option.remote?.headers ?? []) {
+      const value = resolvedValues[header.name] ?? header.default;
+      if (value)
+        headers[header.name] = value;
+    }
+    return {
+      transport: "http",
+      url: option.remote.url,
+      ...Object.keys(headers).length > 0 ? { headers } : {}
+    };
+  }
+  const pkg = option.package;
+  const runtime = pkg.runtimeHint ?? RUNTIME_HINT[pkg.registryType] ?? "npx";
+  const args = [];
+  const identifier = pkg.version ? `${pkg.identifier}@${pkg.version}` : pkg.identifier;
+  args.push(identifier);
+  for (const arg of pkg.packageArguments ?? []) {
+    const value = arg.value ?? resolvedValues[arg.name ?? arg.valueHint ?? ""] ?? arg.default;
+    if (!value)
+      continue;
+    if (arg.type === "named" && arg.name) {
+      args.push(arg.name, value);
+    } else {
+      args.push(value);
+    }
+  }
+  const env = {};
+  for (const envVar of pkg.environmentVariables ?? []) {
+    const value = resolvedValues[envVar.name] ?? envVar.default;
+    if (value)
+      env[envVar.name] = value;
+  }
+  return {
+    transport: "stdio",
+    command: runtime,
+    args,
+    ...Object.keys(env).length > 0 ? { env } : {}
+  };
+}
+
+export { fetchRegistryServerDetail, selectBestPackage, extractRequiredInputs, mapRegistryToSpec };
+
+//# debugId=E7449C596396DD3864756E2164756E21

package/dist/chunk-27mq4agf.js

@@ -0,0 +1,33 @@
+import {
+  customizeSkill,
+  deleteSkill,
+  getSkill,
+  installSkillFromSource,
+  listSkills,
+  pinSkill,
+  rollbackSkill,
+  saveSkill,
+  unpinSkill,
+  updateSkill,
+  validateSkillPackage
+} from "./chunk-7rq88hb3.js";
+import"./chunk-brxwa30j.js";
+import"./chunk-p7yzyt87.js";
+import"./chunk-grkz21sq.js";
+import"./chunk-bjw71y54.js";
+import"./chunk-wj4tjacg.js";
+export {
+  customizeSkill,
+  deleteSkill,
+  getSkill,
+  installSkillFromSource,
+  listSkills,
+  pinSkill,
+  rollbackSkill,
+  saveSkill,
+  unpinSkill,
+  updateSkill,
+  validateSkillPackage
+};
+
+//# debugId=BC52D079DB4EE42C64756E2164756E21