@kwonye/mcpx 0.1.81 → 0.1.84

package/dist/{cli-6bv85kke.js → cli-59dbb6rz.js}

@@ -2,11 +2,11 @@ import {
   loadConfig,
   loadMergedConfig,
   saveConfig
-} from "./cli-0ztrmp65.js";
+} from "./cli-bq7zsrv6.js";
 import {
   SecretsManager,
   ensureGatewayToken
-} from "./cli-e6jzjwh5.js";
+} from "./cli-dvj5waat.js";
 import {
   ensureDir,
   ensureParentDir,
@@ -21,7 +21,7 @@ import {
   readJsonFile,
   sha256,
   writeJsonAtomic
-} from "./cli-08mgt3c8.js";
+} from "./cli-zbbeadz8.js";
 import {
   isServerEnabled
 } from "./cli-s4gspqdf.js";
@@ -2033,6 +2033,8 @@ class McpxOAuthProvider {
 
 class InteractiveOAuthProvider extends McpxOAuthProvider {
   #openUrl;
+  #cachedClientInfo;
+  #cachedCodeVerifier;
   constructor(serverName, secrets, redirectUrl, state, openUrl) {
     super(serverName, secrets, redirectUrl, state);
     this.#openUrl = openUrl;
@@ -2040,6 +2042,30 @@ class InteractiveOAuthProvider extends McpxOAuthProvider {
   async redirectToAuthorization(authorizationUrl) {
     await this.#openUrl(authorizationUrl.toString());
   }
+  clientInformation() {
+    this.#cachedClientInfo ??= super.clientInformation();
+    return this.#cachedClientInfo;
+  }
+  saveClientInformation(clientInformation) {
+    super.saveClientInformation(clientInformation);
+    this.#cachedClientInfo = clientInformation;
+  }
+  codeVerifier() {
+    if (this.#cachedCodeVerifier !== undefined) {
+      return this.#cachedCodeVerifier;
+    }
+    return super.codeVerifier();
+  }
+  saveCodeVerifier(codeVerifier) {
+    super.saveCodeVerifier(codeVerifier);
+    this.#cachedCodeVerifier = codeVerifier;
+  }
+  invalidateCredentials(scope) {
+    super.invalidateCredentials(scope);
+    if (scope === "all" || scope === "client") {
+      this.#cachedClientInfo = undefined;
+    }
+  }
 }
 function listen(server) {
   return new Promise((resolve, reject) => {
@@ -2108,13 +2134,22 @@ function bindOAuthReference(config, serverName) {
     Authorization: `oauth://${encodeURIComponent(serverName)}`
   };
 }
-async function runOAuthLogin(serverName, spec, secrets, openUrl, configPath) {
+async function runOAuthLogin(serverName, spec, secrets, openUrl, configPath, codeReceiver) {
+  new McpxOAuthProvider(serverName, secrets).invalidateCredentials("all");
   const state = crypto.randomUUID();
-  const callbackServer = http.createServer();
-  const port = await listen(callbackServer);
-  const redirectUrl = `http://127.0.0.1:${port}/callback`;
+  let callbackServer;
+  let redirectUrl;
+  let codePromise;
+  if (codeReceiver) {
+    redirectUrl = codeReceiver.redirectUrl;
+    codePromise = codeReceiver.waitForCode(state);
+  } else {
+    callbackServer = http.createServer();
+    const port = await listen(callbackServer);
+    redirectUrl = `http://127.0.0.1:${port}/callback`;
+    codePromise = waitForAuthorizationCode(callbackServer, state);
+  }
   const provider = new InteractiveOAuthProvider(serverName, secrets, redirectUrl, state, openUrl);
-  const codePromise = waitForAuthorizationCode(callbackServer, state);
   try {
     const initial = await auth(provider, {
       serverUrl: spec.url
@@ -2136,7 +2171,9 @@ async function runOAuthLogin(serverName, spec, secrets, openUrl, configPath) {
     syncAllClients(config, secrets);
     return { serverName, authorized: true };
   } finally {
-    await closeServer(callbackServer);
+    if (callbackServer) {
+      await closeServer(callbackServer);
+    }
   }
 }
 async function getOAuthAccessToken(serverName, spec, secrets, options = {}) {
@@ -3758,7 +3795,10 @@ async function buildStatusReport(config, managedIndex, daemon = getDaemonStatus(
   const serverNames = Object.keys(config.servers).sort((left, right) => left.localeCompare(right));
   const servers = serverNames.map((name) => {
     const spec = config.servers[name];
-    const tokenCount = tokenCounts[name];
+    let tokenCount = tokenCounts[name];
+    if (tokenCount?.error && buildAuthBindings(spec).length > 0) {
+      tokenCount = { ...tokenCount, error: undefined };
+    }
     const serverEntry = {
       name,
       enabled: isServerEnabled(spec),

package/dist/{cli-0ztrmp65.js → cli-bq7zsrv6.js}

@@ -3,7 +3,7 @@ import {
   getConfigPath,
   readJsonFile,
   writeJsonAtomic
-} from "./cli-08mgt3c8.js";
+} from "./cli-zbbeadz8.js";
 import {
   normalizeServerSpecEnabled
 } from "./cli-s4gspqdf.js";

package/dist/{cli-e6jzjwh5.js → cli-dvj5waat.js}

@@ -1,10 +1,11 @@
 import {
   ensureParentDir,
   getGatewayTokenPath,
-  getSecretNamesPath,
+  getSecretsKeyPath,
+  getSecretsStorePath,
   readJsonFile,
   writeJsonAtomic
-} from "./cli-08mgt3c8.js";
+} from "./cli-zbbeadz8.js";
 import {
   normalizeServerSpecEnabled
 } from "./cli-s4gspqdf.js";
@@ -64,18 +65,14 @@ function ensureGatewayToken(config, secrets) {
   try {
     const fileValue = fs.readFileSync(tokenPath, "utf8").trim();
     if (fileValue) {
+      secrets.setSecret(secretName, fileValue);
       return fileValue;
     }
   } catch {}
-  const keychainValue = secrets.getSecret(secretName);
-  if (keychainValue) {
-    ensureParentDir(tokenPath);
-    fs.writeFileSync(tokenPath, keychainValue, { mode: 384 });
-    return keychainValue;
-  }
   const token = crypto.randomBytes(32).toString("base64url");
   ensureParentDir(tokenPath);
   fs.writeFileSync(tokenPath, token, { mode: 384 });
+  secrets.setSecret(secretName, token);
   return token;
 }
 function rotateGatewayToken(config, secrets) {
@@ -84,9 +81,7 @@ function rotateGatewayToken(config, secrets) {
   const tokenPath = getGatewayTokenPath(secretName);
   ensureParentDir(tokenPath);
   fs.writeFileSync(tokenPath, token, { mode: 384 });
-  try {
-    secrets.setSecret(secretName, token);
-  } catch {}
+  secrets.setSecret(secretName, token);
   return token;
 }
 function registerProject(globalConfig, projectPath, name) {
@@ -108,95 +103,117 @@ function unregisterProject(globalConfig, projectPath) {
 // src/core/secrets.ts
 import crypto2 from "node:crypto";
 import fs2 from "node:fs";
-import { createRequire } from "node:module";
-var keytarSync = null;
-try {
-  const _require = createRequire(import.meta.url);
-  const keytar = _require("keytar");
-  keytarSync = keytar;
-} catch {
-  keytarSync = null;
+var ALGORITHM = "aes-256-gcm";
+function loadKey(keyPath) {
+  try {
+    const stored = fs2.readFileSync(keyPath, "utf8").trim();
+    return Buffer.from(stored, "base64");
+  } catch (err) {
+    if (err.code !== "ENOENT")
+      throw err;
+  }
+  ensureParentDir(keyPath);
+  const key = crypto2.randomBytes(32);
+  try {
+    fs2.writeFileSync(keyPath, key.toString("base64") + `
+`, { flag: "wx", mode: 384 });
+  } catch (err) {
+    if (err.code === "EEXIST") {
+      const stored = fs2.readFileSync(keyPath, "utf8").trim();
+      return Buffer.from(stored, "base64");
+    }
+    throw err;
+  }
+  return key;
 }
-function parseSecretRef(ref) {
-  if (!ref.startsWith("secret://")) {
+function readSecretsData(storePath, keyPath) {
+  const envelope = readJsonFile(storePath, null);
+  if (!envelope || envelope.version !== 1 || envelope.algorithm !== ALGORITHM)
+    return null;
+  try {
+    const key = loadKey(keyPath);
+    const iv = Buffer.from(envelope.iv, "base64");
+    const authTag = Buffer.from(envelope.authTag, "base64");
+    const ciphertext = Buffer.from(envelope.ciphertext, "base64");
+    const decipher = crypto2.createDecipheriv(ALGORITHM, key, iv);
+    decipher.setAuthTag(authTag);
+    const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    return JSON.parse(decrypted.toString("utf8"));
+  } catch {
     return null;
   }
+}
+function buildEnvelope(keyPath, data) {
+  const key = loadKey(keyPath);
+  const iv = crypto2.randomBytes(12);
+  const cipher = crypto2.createCipheriv(ALGORITHM, key, iv);
+  const plaintext = JSON.stringify(data);
+  const encrypted = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
+  return {
+    version: 1,
+    algorithm: ALGORITHM,
+    iv: iv.toString("base64"),
+    authTag: cipher.getAuthTag().toString("base64"),
+    ciphertext: encrypted.toString("base64")
+  };
+}
+function parseSecretRef(ref) {
+  if (!ref.startsWith("secret://"))
+    return null;
   const name = ref.slice("secret://".length);
   return name.length > 0 ? name : null;
 }
 
 class SecretsManager {
-  service;
-  nameIndexPath;
-  constructor(service = "mcpx", nameIndexPath = getSecretNamesPath()) {
-    this.service = service;
-    this.nameIndexPath = nameIndexPath;
-  }
-  loadNameIndex() {
-    return readJsonFile(this.nameIndexPath, { names: [] });
-  }
-  saveNameIndex(index) {
-    const deduped = Array.from(new Set(index.names)).sort();
-    writeJsonAtomic(this.nameIndexPath, { names: deduped });
-  }
-  trackSecretName(name) {
-    const index = this.loadNameIndex();
-    if (!index.names.includes(name)) {
-      index.names.push(name);
-      this.saveNameIndex(index);
-    }
+  storePath;
+  keyPath;
+  constructor(storePath = getSecretsStorePath(), keyPath = getSecretsKeyPath()) {
+    this.storePath = storePath;
+    this.keyPath = keyPath;
   }
-  untrackSecretName(name) {
-    const index = this.loadNameIndex();
-    index.names = index.names.filter((entry) => entry !== name);
-    this.saveNameIndex(index);
+  readStore() {
+    const data = readSecretsData(this.storePath, this.keyPath);
+    return data?.secrets ?? null;
+  }
+  recoverCorruptStore() {
+    try {
+      if (fs2.existsSync(this.storePath)) {
+        fs2.renameSync(this.storePath, `${this.storePath}.corrupt-${Date.now()}`);
+      }
+    } catch {}
   }
   listSecretNames() {
-    return this.loadNameIndex().names;
+    return Object.keys(this.readStore() ?? {}).sort();
   }
   setSecret(name, value) {
-    if (keytarSync) {
-      keytarSync.setPassword(this.service, name, value);
-    } else {
-      throw new Error("Secret storage is unavailable: keytar native addon failed to load. " + "Install libsecret (Linux) or ensure Xcode CLI tools (macOS), then reinstall dependencies.");
+    let map = this.readStore();
+    if (map === null) {
+      this.recoverCorruptStore();
+      map = {};
     }
-    this.trackSecretName(name);
+    map[name] = value;
+    const envelope = buildEnvelope(this.keyPath, { secrets: map });
+    writeJsonAtomic(this.storePath, envelope);
   }
   removeSecret(name) {
-    if (keytarSync) {
-      try {
-        keytarSync.deletePassword(this.service, name);
-      } catch {}
-    }
-    this.untrackSecretName(name);
+    const map = this.readStore() ?? {};
+    delete map[name];
+    const envelope = buildEnvelope(this.keyPath, { secrets: map });
+    writeJsonAtomic(this.storePath, envelope);
   }
   getSecret(name) {
     const envOverride = process.env[`MCPX_SECRET_${name}`];
-    if (envOverride && envOverride.length > 0) {
+    if (envOverride && envOverride.length > 0)
       return envOverride;
-    }
-    if (!keytarSync) {
-      return null;
-    }
-    try {
-      const value = keytarSync.getPassword(this.service, name);
-      if (typeof value === "string" && value.length > 0) {
-        return value;
-      }
-      return null;
-    } catch {
-      return null;
-    }
+    return (this.readStore() ?? {})[name] ?? null;
   }
   resolveMaybeSecret(value) {
     const secretName = parseSecretRef(value);
-    if (!secretName) {
+    if (!secretName)
       return value;
-    }
     const secret = this.getSecret(secretName);
-    if (!secret) {
+    if (!secret)
       throw new Error(`Secret not found: ${secretName}`);
-    }
     return secret;
   }
   rotateLocalToken(secretName = "local_gateway_token") {

package/dist/{cli-7bax8twd.js → cli-f0phhbax.js}

@@ -2,11 +2,11 @@ import {
   loadConfig,
   loadMergedConfig,
   saveConfig
-} from "./cli-0ztrmp65.js";
+} from "./cli-bq7zsrv6.js";
 import {
   SecretsManager,
   ensureGatewayToken
-} from "./cli-e6jzjwh5.js";
+} from "./cli-dvj5waat.js";
 import {
   ensureDir,
   ensureParentDir,
@@ -21,7 +21,7 @@ import {
   readJsonFile,
   sha256,
   writeJsonAtomic
-} from "./cli-08mgt3c8.js";
+} from "./cli-zbbeadz8.js";
 import {
   isServerEnabled
 } from "./cli-s4gspqdf.js";
@@ -2033,6 +2033,8 @@ class McpxOAuthProvider {
 
 class InteractiveOAuthProvider extends McpxOAuthProvider {
   #openUrl;
+  #cachedClientInfo;
+  #cachedCodeVerifier;
   constructor(serverName, secrets, redirectUrl, state, openUrl) {
     super(serverName, secrets, redirectUrl, state);
     this.#openUrl = openUrl;
@@ -2040,6 +2042,30 @@ class InteractiveOAuthProvider extends McpxOAuthProvider {
   async redirectToAuthorization(authorizationUrl) {
     await this.#openUrl(authorizationUrl.toString());
   }
+  clientInformation() {
+    this.#cachedClientInfo ??= super.clientInformation();
+    return this.#cachedClientInfo;
+  }
+  saveClientInformation(clientInformation) {
+    super.saveClientInformation(clientInformation);
+    this.#cachedClientInfo = clientInformation;
+  }
+  codeVerifier() {
+    if (this.#cachedCodeVerifier !== undefined) {
+      return this.#cachedCodeVerifier;
+    }
+    return super.codeVerifier();
+  }
+  saveCodeVerifier(codeVerifier) {
+    super.saveCodeVerifier(codeVerifier);
+    this.#cachedCodeVerifier = codeVerifier;
+  }
+  invalidateCredentials(scope) {
+    super.invalidateCredentials(scope);
+    if (scope === "all" || scope === "client") {
+      this.#cachedClientInfo = undefined;
+    }
+  }
 }
 function listen(server) {
   return new Promise((resolve, reject) => {
@@ -2108,13 +2134,22 @@ function bindOAuthReference(config, serverName) {
     Authorization: `oauth://${encodeURIComponent(serverName)}`
   };
 }
-async function runOAuthLogin(serverName, spec, secrets, openUrl, configPath) {
+async function runOAuthLogin(serverName, spec, secrets, openUrl, configPath, codeReceiver) {
+  new McpxOAuthProvider(serverName, secrets).invalidateCredentials("all");
   const state = crypto.randomUUID();
-  const callbackServer = http.createServer();
-  const port = await listen(callbackServer);
-  const redirectUrl = `http://127.0.0.1:${port}/callback`;
+  let callbackServer;
+  let redirectUrl;
+  let codePromise;
+  if (codeReceiver) {
+    redirectUrl = codeReceiver.redirectUrl;
+    codePromise = codeReceiver.waitForCode(state);
+  } else {
+    callbackServer = http.createServer();
+    const port = await listen(callbackServer);
+    redirectUrl = `http://127.0.0.1:${port}/callback`;
+    codePromise = waitForAuthorizationCode(callbackServer, state);
+  }
   const provider = new InteractiveOAuthProvider(serverName, secrets, redirectUrl, state, openUrl);
-  const codePromise = waitForAuthorizationCode(callbackServer, state);
   try {
     const initial = await auth(provider, {
       serverUrl: spec.url
@@ -2136,7 +2171,9 @@ async function runOAuthLogin(serverName, spec, secrets, openUrl, configPath) {
     syncAllClients(config, secrets);
     return { serverName, authorized: true };
   } finally {
-    await closeServer(callbackServer);
+    if (callbackServer) {
+      await closeServer(callbackServer);
+    }
   }
 }
 async function getOAuthAccessToken(serverName, spec, secrets, options = {}) {
@@ -2171,7 +2208,7 @@ async function getOAuthAccessToken(serverName, spec, secrets, options = {}) {
 }
 
 // src/version.ts
-var APP_VERSION = "0.1.81";
+var APP_VERSION = "0.1.84";
 
 // src/core/update.ts
 import fs7 from "node:fs";
@@ -3758,7 +3795,10 @@ async function buildStatusReport(config, managedIndex, daemon = getDaemonStatus(
   const serverNames = Object.keys(config.servers).sort((left, right) => left.localeCompare(right));
   const servers = serverNames.map((name) => {
     const spec = config.servers[name];
-    const tokenCount = tokenCounts[name];
+    let tokenCount = tokenCounts[name];
+    if (tokenCount?.error && buildAuthBindings(spec).length > 0) {
+      tokenCount = { ...tokenCount, error: undefined };
+    }
     const serverEntry = {
       name,
       enabled: isServerEnabled(spec),

package/dist/{cli-08mgt3c8.js → cli-zbbeadz8.js}

@@ -29,8 +29,11 @@ function getSkillsDir() {
 function getManagedIndexPath() {
   return path.join(getDataRoot(), "mcpx", "managed-index.json");
 }
-function getSecretNamesPath() {
-  return path.join(getDataRoot(), "mcpx", "secret-names.json");
+function getSecretsStorePath() {
+  return path.join(getDataRoot(), "mcpx", "secrets.json");
+}
+function getSecretsKeyPath() {
+  return path.join(getDataRoot(), "mcpx", "secrets.key");
 }
 function getRuntimeDir() {
   return path.join(getStateRoot(), "mcpx", "runtime");
@@ -105,4 +108,4 @@ function sha256(value) {
   return crypto.createHash("sha256").update(value).digest("hex");
 }
 
-export { homeDir, getConfigPath, getSkillsDir, getManagedIndexPath, getSecretNamesPath, getPidPath, getLogPath, getGatewayTokenPath, getUpdatesDir, getStagedVersionPath, getUpdateLockPath, ensureDir, ensureParentDir, findProjectConfigPath, readJsonFile, writeJsonAtomic, sha256 };
+export { homeDir, getConfigPath, getSkillsDir, getManagedIndexPath, getSecretsStorePath, getSecretsKeyPath, getPidPath, getLogPath, getGatewayTokenPath, getUpdatesDir, getStagedVersionPath, getUpdateLockPath, ensureDir, ensureParentDir, findProjectConfigPath, readJsonFile, writeJsonAtomic, sha256 };

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAo2DA,wBAAsB,MAAM,CAAC,IAAI,WAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAmE/D"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAq1DA,wBAAsB,MAAM,CAAC,IAAI,WAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAmE/D"}

package/dist/cli.js

@@ -38,7 +38,7 @@ import {
   stopDaemon,
   syncAllClients,
   toSecretRef
-} from "./cli-7bax8twd.js";
+} from "./cli-f0phhbax.js";
 import {
   loadConfig,
   loadMergedConfig,
@@ -46,7 +46,7 @@ import {
   resolveActiveConfig,
   saveConfig,
   saveProjectConfig
-} from "./cli-0ztrmp65.js";
+} from "./cli-bq7zsrv6.js";
 import {
   SecretsManager,
   addServer,
@@ -56,11 +56,12 @@ import {
   removeServer,
   rotateGatewayToken,
   setServerEnabled
-} from "./cli-e6jzjwh5.js";
+} from "./cli-dvj5waat.js";
 import {
   getConfigPath,
-  getManagedIndexPath
-} from "./cli-08mgt3c8.js";
+  getManagedIndexPath,
+  getSecretsStorePath
+} from "./cli-zbbeadz8.js";
 import {
   __require,
   isServerEnabled
@@ -900,7 +901,6 @@ async function runStdioProxy(serverName) {
 }
 
 // src/cli.ts
-var __dirname = "/home/runner/work/mcpx/mcpx/cli/src";
 var VALID_CLIENTS = STATUS_CLIENTS;
 function parseKeyValueFlag(value, label) {
   const split = value.indexOf("=");
@@ -1959,21 +1959,10 @@ function registerDoctorCommand(program) {
       details: getManagedIndexPath()
     });
     try {
-      const keytar = __require(path.join(__dirname, "..", "node_modules", "keytar", "lib", "keytar.js"));
-      try {
-        keytar.getPassword("mcpx-doctor-check", "__probe__");
-      } catch {}
-      checks.push({ check: "keyring", status: "ok", details: "keytar native addon loaded" });
+      new SecretsManager().listSecretNames();
+      checks.push({ check: "secrets_store", status: "ok", details: getSecretsStorePath() });
     } catch {
-      if (process.platform === "linux") {
-        checks.push({ check: "keyring", status: "warn", details: "keytar native addon unavailable; install libsecret-1-dev and reinstall dependencies" });
-      } else if (process.platform === "win32") {
-        checks.push({ check: "keyring", status: "warn", details: "keytar native addon unavailable; rebuild keytar with 'npx node-gyp rebuild' in app/node_modules/keytar" });
-      } else if (process.platform === "darwin") {
-        checks.push({ check: "keyring", status: "warn", details: "keytar native addon unavailable; reinstall dependencies or check Xcode CLI tools" });
-      } else {
-        checks.push({ check: "keyring", status: "warn", details: "keytar native addon unavailable" });
-      }
+      checks.push({ check: "secrets_store", status: "warn", details: "encrypted secrets store unavailable" });
     }
     const daemon = getDaemonStatus(config);
     checks.push({
@@ -2323,11 +2312,11 @@ function registerProjectCommands(program, cliPath) {
       name: projectName,
       servers: {}
     };
-    const { saveProjectConfig: saveProjectConfig2 } = await import("./config-p8tjffpa.js");
+    const { saveProjectConfig: saveProjectConfig2 } = await import("./config-ajxqtkq6.js");
     saveProjectConfig2(localConfig, targetPath);
     process.stdout.write(`Initialized project configuration at: ${targetPath}
 `);
-    const { registerProject: registerProject2 } = await import("./registry-7rxwynsy.js");
+    const { registerProject: registerProject2 } = await import("./registry-j53hz9d4.js");
     const globalConfig = loadConfig();
     registerProject2(globalConfig, process.cwd(), projectName);
     saveConfig(globalConfig);
@@ -2358,7 +2347,7 @@ function registerProjectCommands(program, cliPath) {
       process.exit(1);
     }
     const entry = globalConfig.projects[resolvedPath];
-    const { unregisterProject: unregisterProject2 } = await import("./registry-7rxwynsy.js");
+    const { unregisterProject: unregisterProject2 } = await import("./registry-j53hz9d4.js");
     unregisterProject2(globalConfig, resolvedPath);
     saveConfig(globalConfig);
     process.stdout.write(`Unregistered project "${entry.name}" (${resolvedPath}) from the global configuration.

package/dist/{config-p8tjffpa.js → config-ajxqtkq6.js}

@@ -6,8 +6,8 @@ import {
   resolveActiveConfig,
   saveConfig,
   saveProjectConfig
-} from "./cli-0ztrmp65.js";
-import"./cli-08mgt3c8.js";
+} from "./cli-bq7zsrv6.js";
+import"./cli-zbbeadz8.js";
 import"./cli-s4gspqdf.js";
 export {
   saveProjectConfig,

package/dist/core/index.d.ts

@@ -2,6 +2,7 @@ export { loadConfig, saveConfig, defaultConfig, loadMergedConfig, loadProjectCon
 export { parseCliAddCommand, tokenizeCommandLine } from "./add-command.js";
 export { buildEnrichedPath } from "./spawn-env.js";
 export { runOAuthLogin, getOAuthAccessToken, isOAuthReference, oauthReferenceServerName } from "./oauth.js";
+export type { OAuthCodeReceiver } from "./oauth.js";
 export { getDaemonStatus, startDaemon, stopDaemon, restartDaemon, readDaemonLogs, runDaemonForeground } from "./daemon.js";
 export type { DaemonStatus, DaemonStartResult } from "./daemon.js";
 export { syncAllClients, getGatewayUrl } from "./sync.js";

package/dist/core/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC5H,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAG5G,OAAO,EACL,eAAe,EACf,WAAW,EACX,UAAU,EACV,aAAa,EACb,cAAc,EACd,mBAAmB,EACpB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGnE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGpK,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG3E,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAChE,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAG3G,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAG3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGhE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACzI,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGjG,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D,YAAY,EACV,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,aAAa,EACb,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,uBAAuB,EACvB,oBAAoB,EACpB,UAAU,EACV,mBAAmB,EACpB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC5H,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAC5G,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAGpD,OAAO,EACL,eAAe,EACf,WAAW,EACX,UAAU,EACV,aAAa,EACb,cAAc,EACd,mBAAmB,EACpB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGnE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGpK,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG3E,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,WAAW,EACZ,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAChE,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAG3G,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAG3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGhE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACzI,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGjG,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D,YAAY,EACV,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,aAAa,EACb,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,uBAAuB,EACvB,oBAAoB,EACpB,UAAU,EACV,mBAAmB,EACpB,MAAM,aAAa,CAAC"}

package/dist/core/index.js

@@ -41,7 +41,7 @@ import {
   stopDaemon,
   syncAllClients,
   toSecretRef
-} from "../cli-7bax8twd.js";
+} from "../cli-f0phhbax.js";
 import {
   defaultConfig,
   loadConfig,
@@ -51,7 +51,7 @@ import {
   saveConfig,
   saveProjectConfig,
   tokenizeCommandLine
-} from "../cli-0ztrmp65.js";
+} from "../cli-bq7zsrv6.js";
 import {
   SecretsManager,
   addServer,
@@ -62,11 +62,11 @@ import {
   setServerEnabled,
   unregisterProject,
   updateServer
-} from "../cli-e6jzjwh5.js";
+} from "../cli-dvj5waat.js";
 import {
   getConfigPath,
   getManagedIndexPath
-} from "../cli-08mgt3c8.js";
+} from "../cli-zbbeadz8.js";
 import"../cli-s4gspqdf.js";
 export {
   updateServer,

package/dist/core/oauth.d.ts

@@ -2,7 +2,11 @@ import type { HttpServerSpec } from "../types.js";
 import { SecretsManager } from "./secrets.js";
 export declare function isOAuthReference(value: string): boolean;
 export declare function oauthReferenceServerName(value: string): string;
-export declare function runOAuthLogin(serverName: string, spec: HttpServerSpec, secrets: SecretsManager, openUrl: (url: string) => void | Promise<void>, configPath?: string): Promise<{
+export interface OAuthCodeReceiver {
+    redirectUrl: string;
+    waitForCode: (expectedState: string, timeoutMs?: number) => Promise<string>;
+}
+export declare function runOAuthLogin(serverName: string, spec: HttpServerSpec, secrets: SecretsManager, openUrl: (url: string) => void | Promise<void>, configPath?: string, codeReceiver?: OAuthCodeReceiver): Promise<{
     serverName: string;
     authorized: true;
 }>;

package/dist/core/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/core/oauth.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,aAAa,CAAC;AAE9D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AA6B9C,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAK9D;AAkMD,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAC9C,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,IAAI,CAAA;CAAE,CAAC,CAiCnD;AAED,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GACvC,OAAO,CAAC,MAAM,CAAC,CAiCjB"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/core/oauth.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,aAAa,CAAC;AAE9D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AA6B9C,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAK9D;AAoOD,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC7E;AAED,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAC9C,UAAU,CAAC,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,iBAAiB,GAC/B,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,IAAI,CAAA;CAAE,CAAC,CAkDnD;AAED,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,cAAc,EACvB,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GACvC,OAAO,CAAC,MAAM,CAAC,CAiCjB"}

package/dist/core/paths.d.ts

@@ -5,7 +5,8 @@ export declare function getStateRoot(): string;
 export declare function getConfigPath(): string;
 export declare function getSkillsDir(): string;
 export declare function getManagedIndexPath(): string;
-export declare function getSecretNamesPath(): string;
+export declare function getSecretsStorePath(): string;
+export declare function getSecretsKeyPath(): string;
 export declare function getRuntimeDir(): string;
 export declare function getLogDir(): string;
 export declare function getPidPath(): string;

package/dist/core/paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAaA,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE/C;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAEtD;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,SAAgB,GAAG,MAAM,GAAG,IAAI,CAc7E;AAED,wBAAgB,eAAe,CAAC,QAAQ,SAAgB,GAAG,MAAM,GAAG,IAAI,CAGvE"}
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAaA,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE/C;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAEtD;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,SAAgB,GAAG,MAAM,GAAG,IAAI,CAc7E;AAED,wBAAgB,eAAe,CAAC,QAAQ,SAAgB,GAAG,MAAM,GAAG,IAAI,CAGvE"}

package/dist/core/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8B,KAAK,UAAU,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAIrD;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,UAAQ,GAAG,IAAI,CAQzG;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,IAAI,CAMlF;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAQ7F;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAUzF;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAMpE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAiCtF;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAetF;AAED,wBAAgB,eAAe,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAUlG;AAED,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAIrF"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8B,KAAK,UAAU,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAIrD;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,UAAQ,GAAG,IAAI,CAQzG;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,IAAI,CAMlF;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAQ7F;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAUzF;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAMpE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CA2BtF;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAUtF;AAED,wBAAgB,eAAe,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAUlG;AAED,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAIrF"}

package/dist/core/secrets.d.ts

@@ -1,11 +1,9 @@
 export declare class SecretsManager {
-    private readonly service;
-    private readonly nameIndexPath;
-    constructor(service?: string, nameIndexPath?: string);
-    private loadNameIndex;
-    private saveNameIndex;
-    private trackSecretName;
-    private untrackSecretName;
+    private readonly storePath;
+    private readonly keyPath;
+    constructor(storePath?: string, keyPath?: string);
+    private readStore;
+    private recoverCorruptStore;
     listSecretNames(): string[];
     setSecret(name: string, value: string): void;
     removeSecret(name: string): void;

package/dist/core/secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/core/secrets.ts"],"names":[],"mappings":"AAyCA,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,OAAO,SAAS,EAAE,aAAa,SAAuB;IAKlE,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,iBAAiB;IAMzB,eAAe,IAAI,MAAM,EAAE;IAI3B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAa5C,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAYhC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAqBtC,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAczC,gBAAgB,CAAC,UAAU,SAAwB,GAAG,MAAM;CAK7D;AAED,wBAAgB,wBAAwB,IAAI,MAAM,CAWjD"}
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/core/secrets.ts"],"names":[],"mappings":"AAgFA,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,SAAS,SAAwB,EAAE,OAAO,SAAsB;IAK5E,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,mBAAmB;IAU3B,eAAe,IAAI,MAAM,EAAE;IAI3B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAW5C,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAOhC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAOtC,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IASzC,gBAAgB,CAAC,UAAU,SAAwB,GAAG,MAAM;CAK7D;AAED,wBAAgB,wBAAwB,IAAI,MAAM,CAWjD"}

package/dist/core/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/core/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAGjE,OAAO,EAAmB,KAAK,QAAQ,EAAE,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAItK,eAAO,MAAM,cAAc,EAAE,QAAQ,EAAmG,CAAC;AAEzI,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C;AAyED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,UAAU,EAClB,YAAY,EAAE,YAAY,EAC1B,MAAM,GAAE,YAAsC,GAC7C,OAAO,CAAC,YAAY,CAAC,CAkDvB"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/core/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAGjE,OAAO,EAAmB,KAAK,QAAQ,EAAE,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAItK,eAAO,MAAM,cAAc,EAAE,QAAQ,EAAmG,CAAC;AAEzI,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C;AAyED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,UAAU,EAClB,YAAY,EAAE,YAAY,EAC1B,MAAM,GAAE,YAAsC,GAC7C,OAAO,CAAC,YAAY,CAAC,CA2DvB"}

package/dist/{registry-7rxwynsy.js → registry-j53hz9d4.js}

@@ -9,8 +9,8 @@ import {
   unregisterProject,
   updateServer,
   validateServerName
-} from "./cli-e6jzjwh5.js";
-import"./cli-08mgt3c8.js";
+} from "./cli-dvj5waat.js";
+import"./cli-zbbeadz8.js";
 import"./cli-s4gspqdf.js";
 export {
   validateServerName,

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const APP_VERSION = "0.1.81";
+export declare const APP_VERSION = "0.1.84";
 //# sourceMappingURL=version.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kwonye/mcpx",
-  "version": "0.1.81",
+  "version": "0.1.84",
   "description": "HTTP-first MCP gateway and cross-client installer",
   "keywords": [
     "mcp",
@@ -45,7 +45,7 @@
     "dev": "bun run src/cli.ts --",
     "sync-version": "bun scripts/sync-version.mjs",
     "prebuild": "bun run sync-version",
-    "build": "bun build src/cli.ts src/core/index.ts src/types.ts --outdir dist --target node --format esm --splitting --external commander --external hono --external zod --external \"@modelcontextprotocol/sdk\" --external \"@iarna/toml\" --external keytar && tsc -p tsconfig.json --emitDeclarationOnly --declaration --declarationMap",
+    "build": "bun build src/cli.ts src/core/index.ts src/types.ts --outdir dist --target node --format esm --splitting --external commander --external hono --external zod --external \"@modelcontextprotocol/sdk\" --external \"@iarna/toml\" && tsc -p tsconfig.json --emitDeclarationOnly --declaration --declarationMap",
     "prepublishOnly": "bun run build",
     "test": "bun test",
     "test:watch": "bun test --watch"
@@ -55,7 +55,6 @@
     "@modelcontextprotocol/sdk": "^1.29.0",
     "commander": "^14.0.1",
     "hono": "^4.12.14",
-    "keytar": "^7.9.0",
     "zod": "^4.1.12"
   },
   "devDependencies": {