@lexq/cli 0.2.0 → 0.3.0

package/dist/index.js

@@ -13,11 +13,19 @@ import { stdin, stdout } from "process";
 import dedent from "dedent";
 
 // src/lib/config.ts
-import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from "fs";
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
 var CONFIG_DIR = join(homedir(), ".lexq");
 var CONFIG_FILE = join(CONFIG_DIR, "config.json");
+var DIR_MODE = 448;
+var FILE_MODE = 384;
+function restrict(target, mode) {
+  try {
+    chmodSync(target, mode);
+  } catch {
+  }
+}
 var DEFAULT_CONFIG = {
   baseUrl: "https://api.lexq.io/api/v1/partners",
   format: "json"
@@ -33,11 +41,16 @@ function loadConfig() {
 }
 function saveConfig(config) {
   if (!existsSync(CONFIG_DIR)) {
-    mkdirSync(CONFIG_DIR, { recursive: true });
+    mkdirSync(CONFIG_DIR, { recursive: true, mode: DIR_MODE });
   }
+  restrict(CONFIG_DIR, DIR_MODE);
   const current = loadConfig();
   const merged = { ...current, ...config };
-  writeFileSync(CONFIG_FILE, JSON.stringify(merged, null, 2), "utf-8");
+  writeFileSync(CONFIG_FILE, JSON.stringify(merged, null, 2), {
+    encoding: "utf-8",
+    mode: FILE_MODE
+  });
+  restrict(CONFIG_FILE, FILE_MODE);
 }
 function deleteConfig() {
   if (existsSync(CONFIG_FILE)) {
@@ -3317,7 +3330,7 @@ import dedent17 from "dedent";
 import { readFileSync as readFileSync3 } from "fs";
 import { dirname, join as join2 } from "path";
 import { fileURLToPath } from "url";
-import { StdioServerTransport } from "@modelcontextprotocol/server/stdio";
+import { serveStdio } from "@modelcontextprotocol/server/stdio";
 import { McpServer } from "@modelcontextprotocol/server";
 
 // src/mcp/tools/_shared.ts
@@ -4782,15 +4795,24 @@ function getVersion() {
     return "0.1.0";
   }
 }
-async function startMcpServer() {
-  const server = new McpServer({
-    name: "lexq",
-    version: getVersion()
-  });
+function startMcpServer() {
+  const version = getVersion();
   const callApi = createCallApiFromConfig();
-  registerAllTools(server, callApi);
-  const transport = new StdioServerTransport();
-  await server.connect(transport);
+  serveStdio(
+    () => {
+      const server = new McpServer({ name: "lexq", version });
+      registerAllTools(server, callApi);
+      return server;
+    },
+    {
+      /* stdout carries the protocol. Anything written there that is not a JSON-RPC message
+         breaks the client's parser, so this goes to stderr — the only channel a stdio server
+         can report on. Without it a transport that fails to start does so silently. */
+      onerror: (error) => {
+        console.error("[lexq mcp]", error.message);
+      }
+    }
+  );
 }
 
 // src/commands/serve.ts
@@ -4815,14 +4837,14 @@ function registerServeCommand(program) {
             }
           }
       `
-  ).action(async (opts) => {
+  ).action((opts) => {
     if (!opts.mcp) {
       console.error(
         "Error: --mcp flag is required.\nUsage: lexq serve --mcp\n\nStarts a stdio MCP server for Claude Desktop, Claude.ai, Gemini, etc."
       );
       process.exit(1);
     }
-    await startMcpServer();
+    startMcpServer();
   });
 }
 

package/dist/mcp/register.js

@@ -177,7 +177,7 @@ function registerGroupTools(server, callApi) {
 import { z as z3 } from "zod";
 
 // src/lib/config.ts
-import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from "fs";
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
 var CONFIG_DIR = join(homedir(), ".lexq");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lexq/cli",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "LexQ CLI — manage policies, simulate rules, and deploy from the terminal. Built for humans and AI agents.",
   "type": "module",
   "bin": {