@kwonye/mcpx 0.1.77 → 0.1.80

package/dist/{cli-s4py8ckf.js → cli-ma89vavk.js}

@@ -1,14 +1,18 @@
 import {
+  ensureParentDir,
+  getGatewayTokenPath,
   getSecretNamesPath,
   readJsonFile,
   writeJsonAtomic
-} from "./cli-fsf33sgp.js";
+} from "./cli-08mgt3c8.js";
 import {
   __require,
   normalizeServerSpecEnabled
 } from "./cli-s4gspqdf.js";
 
 // src/core/registry.ts
+import crypto from "node:crypto";
+import fs from "node:fs";
 import path from "node:path";
 function validateServerName(name) {
   if (!/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,62}$/.test(name)) {
@@ -53,11 +57,38 @@ function getGatewayTokenSecretName(config) {
 }
 function ensureGatewayToken(config, secrets) {
   const secretName = getGatewayTokenSecretName(config);
-  const existing = secrets.getSecret(secretName);
-  if (existing) {
-    return existing;
-  }
-  return secrets.rotateLocalToken(secretName);
+  const tokenPath = getGatewayTokenPath(secretName);
+  const envValue = process.env[`MCPX_SECRET_${secretName}`];
+  if (envValue && envValue.length > 0) {
+    return envValue;
+  }
+  try {
+    const fileValue = fs.readFileSync(tokenPath, "utf8").trim();
+    if (fileValue) {
+      return fileValue;
+    }
+  } catch {}
+  const keychainValue = secrets.getSecret(secretName);
+  if (keychainValue) {
+    ensureParentDir(tokenPath);
+    fs.writeFileSync(tokenPath, keychainValue, { mode: 384 });
+    return keychainValue;
+  }
+  const token = crypto.randomBytes(32).toString("base64url");
+  ensureParentDir(tokenPath);
+  fs.writeFileSync(tokenPath, token, { mode: 384 });
+  return token;
+}
+function rotateGatewayToken(config, secrets) {
+  const secretName = getGatewayTokenSecretName(config);
+  const token = crypto.randomBytes(32).toString("base64url");
+  const tokenPath = getGatewayTokenPath(secretName);
+  ensureParentDir(tokenPath);
+  fs.writeFileSync(tokenPath, token, { mode: 384 });
+  try {
+    secrets.setSecret(secretName, token);
+  } catch {}
+  return token;
 }
 function registerProject(globalConfig, projectPath, name) {
   if (!globalConfig.projects) {
@@ -76,8 +107,8 @@ function unregisterProject(globalConfig, projectPath) {
 }
 
 // src/core/secrets.ts
-import crypto from "node:crypto";
-import fs from "node:fs";
+import crypto2 from "node:crypto";
+import fs2 from "node:fs";
 var keytarSync = null;
 try {
   const keytar = (()=>{throw new Error("Cannot require module "+"../node_modules/keytar/lib/keytar.js");})();
@@ -168,7 +199,7 @@ class SecretsManager {
     return secret;
   }
   rotateLocalToken(secretName = "local_gateway_token") {
-    const token = crypto.randomBytes(32).toString("base64url");
+    const token = crypto2.randomBytes(32).toString("base64url");
     this.setSecret(secretName, token);
     return token;
   }
@@ -177,11 +208,11 @@ function readSecretValueFromStdin() {
   if (process.stdin.isTTY) {
     throw new Error("No value provided. Use --value or pipe a value via stdin.");
   }
-  const content = fs.readFileSync(process.stdin.fd, "utf8").trim();
+  const content = fs2.readFileSync(process.stdin.fd, "utf8").trim();
   if (content.length === 0) {
     throw new Error("Empty secret value provided.");
   }
   return content;
 }
 
-export { SecretsManager, readSecretValueFromStdin, validateServerName, addServer, removeServer, updateServer, setServerEnabled, getGatewayTokenSecretName, ensureGatewayToken, registerProject, unregisterProject };
+export { SecretsManager, readSecretValueFromStdin, validateServerName, addServer, removeServer, updateServer, setServerEnabled, getGatewayTokenSecretName, ensureGatewayToken, rotateGatewayToken, registerProject, unregisterProject };