@mcp-index/sdk 0.8.0 → 0.9.0

package/CHANGELOG.md

@@ -8,6 +8,19 @@ additive feature, patch = fix). Backward-compatible additions only in 0.2.0.
 Staged for the next publish — `npm publish` packs the current `README.md`, so these
 ride out automatically with the next version bump (no ad-hoc republish needed).
 
+## 0.9.0 — 2026-07-14
+
+### Added
+- **`mcpindex login` CLI.** New `mcpindex` bin with `login` / `whoami`. `login` opens
+  the browser for GitHub OAuth (`read:user` only), captures the server-minted free API
+  key on a one-shot loopback listener bound to `127.0.0.1`, and stores it at
+  `~/.mcpindex/credentials.json` (`0600`, atomic write, never through a symlink). The
+  callback is bound to a per-session nonce carried in the loopback path (closes
+  key-fixation); the key never transits a third party. `MCPINDEX_WEB_BASE` overrides the
+  default host. `whoami` reports sign-in state without ever printing the key.
+- **`--provider github|google`** on `mcpindex login` (default `github`) — selects the
+  identity provider; the loopback/nonce handoff is provider-agnostic.
+
 ## 0.7.0 — 2026-07-12
 
 ### Added

package/README.md

@@ -26,6 +26,26 @@ const guarded = wrap(session);   // pins each tool's contract on first use (TOFU
 // Review / Re-pin / Validate.
 ```
 
+## Sign in (optional) — `mcpindex login`
+
+Signs you in with GitHub and stores a free API key at `~/.mcpindex/credentials.json`
+(mode `0600`), used to authenticate deeper trust checks. Optional — `wrap()` needs no
+account and sends nothing on its own.
+
+```sh
+npm i -g @mcp-index/sdk   # then:
+mcpindex login            # opens your browser; captures the key on a loopback listener
+mcpindex login --provider google   # sign in with Google instead of GitHub (default: github)
+mcpindex whoami           # shows sign-in state (never prints the key)
+
+# or without a global install:
+npx -p @mcp-index/sdk mcpindex login
+```
+
+The key is minted server-side after GitHub OAuth and handed to a one-shot HTTP listener
+bound to `127.0.0.1` — it never transits a third party. Point `MCPINDEX_WEB_BASE` at a
+different host to override the default (`https://mcpindex.ai`).
+
 ## What it does
 
 - Pins each MCP tool's contract trust-on-first-use (TOFU), persisted across restarts.

package/dist/src/cli.d.ts

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+/**
+ * `mcpindex` CLI. Currently one command: `login` — self-serve sign-in (GitHub or Google) that mints
+ * and stores a free api_key at ~/.mcpindex/credentials.json. See src/login.ts for the loopback flow.
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/src/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":";AACA;;;GAGG"}

package/dist/src/cli.js

@@ -0,0 +1,57 @@
+#!/usr/bin/env node
+/**
+ * `mcpindex` CLI. Currently one command: `login` — self-serve sign-in (GitHub or Google) that mints
+ * and stores a free api_key at ~/.mcpindex/credentials.json. See src/login.ts for the loopback flow.
+ */
+import { loadApiKey, credentialsPath, runLogin, parseProvider } from "./login.js";
+const USAGE = `mcpindex - trust-to-act gate for MCP tool calls
+
+Usage:
+  mcpindex login [--provider github|google]   Sign in; mints and stores a free api_key (default github)
+  mcpindex whoami                             Show whether a key is stored (never prints the key)
+  mcpindex help                               Show this help
+
+Env:
+  MCPINDEX_WEB_BASE  Override the login host (default https://mcpindex.ai)
+`;
+async function main(argv) {
+    const cmd = argv[0];
+    switch (cmd) {
+        case "login": {
+            const provider = parseProvider(argv.slice(1));
+            if (provider === null) {
+                process.stderr.write(`login: --provider must be "github" or "google"\n`);
+                return 2;
+            }
+            try {
+                await runLogin({ provider });
+                return 0;
+            }
+            catch (e) {
+                process.stderr.write(`login failed: ${e instanceof Error ? e.message : String(e)}\n`);
+                return 1;
+            }
+        }
+        case "whoami": {
+            const has = loadApiKey() !== null;
+            process.stdout.write(has ? `signed in (key at ${credentialsPath()})\n` : "not signed in - run: mcpindex login\n");
+            return has ? 0 : 1;
+        }
+        case "help":
+        case "--help":
+        case "-h":
+        case undefined:
+            process.stdout.write(USAGE);
+            return 0;
+        default:
+            process.stderr.write(`unknown command: ${cmd}\n\n${USAGE}`);
+            return 2;
+    }
+}
+main(process.argv.slice(2))
+    .then((code) => process.exit(code))
+    .catch((e) => {
+    process.stderr.write(`mcpindex: ${e instanceof Error ? e.message : String(e)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/src/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":";AACA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAElF,MAAM,KAAK,GAAG;;;;;;;;;CASb,CAAC;AAEF,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;gBACzE,OAAO,CAAC,CAAC;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC7B,OAAO,CAAC,CAAC;YACX,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtF,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,GAAG,GAAG,UAAU,EAAE,KAAK,IAAI,CAAC;YAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC;YAClH,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI,CAAC;QACV,KAAK,SAAS;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,GAAG,OAAO,KAAK,EAAE,CAAC,CAAC;YAC5D,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACxB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KAClC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;IACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/src/login.d.ts

@@ -0,0 +1,56 @@
+/**
+ * `mcpindex login` - self-serve GitHub login that mints a free api_key and stores it.
+ *
+ * Flow (the gh/vercel-login pattern): start a LOOPBACK http listener on a random port, open the
+ * browser to `<web>/api/auth/login/start?cli_callback=http://127.0.0.1:<port>`, the web callback
+ * redirects the browser back to the loopback listener with `?key=...`, we capture it, store it at
+ * `~/.mcpindex/credentials.json` (mode 0600), and tell the browser to close.
+ *
+ * The api_key never transits a third party: GitHub sees only the OAuth code; the web mints the
+ * key and hands it to THIS machine's loopback. Storage is 0600 so other users can't read it.
+ */
+/** Self-serve identity providers the web login supports. Default is github. */
+export type LoginProvider = "github" | "google";
+export declare function credentialsPath(): string;
+/**
+ * Persist the api_key (0600). Only the key is stored; never the raw OAuth code/token.
+ * Write to a fresh temp file (`wx`, never through a pre-staged symlink) then atomic-rename into
+ * place, so the key never lands in a world-readable inode and no partial-write window exists.
+ */
+export declare function saveApiKey(apiKey: string, path?: string): void;
+/** Load the stored api_key, or null if absent/unreadable. */
+export declare function loadApiKey(path?: string): string | null;
+/**
+ * Extract the minted key from the loopback callback URL, but only if the request path matches the
+ * session nonce (`/<state>`). The nonce binds the callback to the login this process started: a
+ * webpage the victim has open cannot forge it (it never learns the path), which closes the
+ * key-fixation window on a shared loopback port. Returns null on any mismatch/malformed input.
+ */
+export declare function extractKeyFromCallback(reqUrl: string, state: string): string | null;
+/** A url-safe one-time nonce that rides in the loopback callback path. */
+export declare function newLoginState(): string;
+/** Parse an optional `--provider <github|google>` from the login args. Returns null on a bad value. */
+export declare function parseProvider(args: string[]): LoginProvider | null;
+export declare function buildStartUrl(webBase: string, port: number, state: string, provider?: LoginProvider): string;
+export interface LoginResult {
+    apiKey: string;
+    path: string;
+}
+/**
+ * Run the interactive login. Resolves with the stored key, or rejects on timeout. `print` and
+ * `open` are injectable for tests; by default the browser opens automatically.
+ */
+export declare function runLogin(opts?: {
+    webBase?: string;
+    timeoutMs?: number;
+    print?: (msg: string) => void;
+    open?: (url: string) => void;
+    /** Identity provider to sign in with (default github). */
+    provider?: LoginProvider;
+    /** Test seam: observe the bound address/port. Purely observational — never changes the bind. */
+    onListen?: (info: {
+        address: string;
+        port: number;
+    }) => void;
+}): Promise<LoginResult>;
+//# sourceMappingURL=login.d.ts.map

package/dist/src/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAWH,+EAA+E;AAC/E,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEhD,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,MAA0B,GAAG,IAAI,CA+BjF;AAED,6DAA6D;AAC7D,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAA0B,GAAG,MAAM,GAAG,IAAI,CAO1E;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASnF;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,uGAAuG;AACvG,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,GAAG,IAAI,CAMlE;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,QAAQ,GAAE,aAAwB,GACjC,MAAM,CAOR;AAkCD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CACtB,IAAI,GAAE;IACJ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,gGAAgG;IAChG,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CACzD,GACL,OAAO,CAAC,WAAW,CAAC,CAoFtB"}

package/dist/src/login.js

@@ -0,0 +1,233 @@
+/**
+ * `mcpindex login` - self-serve GitHub login that mints a free api_key and stores it.
+ *
+ * Flow (the gh/vercel-login pattern): start a LOOPBACK http listener on a random port, open the
+ * browser to `<web>/api/auth/login/start?cli_callback=http://127.0.0.1:<port>`, the web callback
+ * redirects the browser back to the loopback listener with `?key=...`, we capture it, store it at
+ * `~/.mcpindex/credentials.json` (mode 0600), and tell the browser to close.
+ *
+ * The api_key never transits a third party: GitHub sees only the OAuth code; the web mints the
+ * key and hands it to THIS machine's loopback. Storage is 0600 so other users can't read it.
+ */
+import { randomBytes } from "node:crypto";
+import { spawn } from "node:child_process";
+import { createServer } from "node:http";
+import { chmodSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { homedir, platform } from "node:os";
+import { dirname, join } from "node:path";
+const DEFAULT_WEB_BASE = "https://mcpindex.ai";
+export function credentialsPath() {
+    return join(homedir(), ".mcpindex", "credentials.json");
+}
+/**
+ * Persist the api_key (0600). Only the key is stored; never the raw OAuth code/token.
+ * Write to a fresh temp file (`wx`, never through a pre-staged symlink) then atomic-rename into
+ * place, so the key never lands in a world-readable inode and no partial-write window exists.
+ */
+export function saveApiKey(apiKey, path = credentialsPath()) {
+    const dir = dirname(path);
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    try {
+        chmodSync(dir, 0o700); // tighten even if the dir pre-existed at a wider mode (mkdir mode only applies on create)
+    }
+    catch {
+        /* best-effort */
+    }
+    const tmp = `${path}.${process.pid}.${randomBytes(4).toString("hex")}.tmp`;
+    try {
+        unlinkSync(tmp);
+    }
+    catch {
+        /* no stale temp - expected */
+    }
+    try {
+        // `wx` = O_CREAT|O_EXCL: fails rather than following a pre-staged symlink/file at `tmp`.
+        writeFileSync(tmp, JSON.stringify({ api_key: apiKey }) + "\n", { encoding: "utf8", flag: "wx", mode: 0o600 });
+        try {
+            chmodSync(tmp, 0o600);
+        }
+        catch {
+            /* best-effort on platforms without POSIX modes */
+        }
+        renameSync(tmp, path); // atomic; replaces any pre-existing file/symlink at the destination name
+    }
+    catch (e) {
+        try {
+            unlinkSync(tmp); // never leave a key-bearing temp behind on a failed write/rename
+        }
+        catch {
+            /* nothing to clean */
+        }
+        throw e;
+    }
+}
+/** Load the stored api_key, or null if absent/unreadable. */
+export function loadApiKey(path = credentialsPath()) {
+    try {
+        const raw = JSON.parse(readFileSync(path, "utf8"));
+        return typeof raw.api_key === "string" && raw.api_key ? raw.api_key : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Extract the minted key from the loopback callback URL, but only if the request path matches the
+ * session nonce (`/<state>`). The nonce binds the callback to the login this process started: a
+ * webpage the victim has open cannot forge it (it never learns the path), which closes the
+ * key-fixation window on a shared loopback port. Returns null on any mismatch/malformed input.
+ */
+export function extractKeyFromCallback(reqUrl, state) {
+    try {
+        const u = new URL(reqUrl, "http://127.0.0.1");
+        if (!state || u.pathname !== `/${state}`)
+            return null;
+        const key = u.searchParams.get("key");
+        return typeof key === "string" && key.startsWith("mcpk_") ? key : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** A url-safe one-time nonce that rides in the loopback callback path. */
+export function newLoginState() {
+    return randomBytes(24).toString("base64url");
+}
+/** Parse an optional `--provider <github|google>` from the login args. Returns null on a bad value. */
+export function parseProvider(args) {
+    const i = args.indexOf("--provider");
+    if (i === -1)
+        return "github"; // default
+    const v = args[i + 1];
+    if (v === "github" || v === "google")
+        return v;
+    return null;
+}
+export function buildStartUrl(webBase, port, state, provider = "github") {
+    const cb = encodeURIComponent(`http://127.0.0.1:${port}/${state}`);
+    let url = `${webBase.replace(/\/+$/, "")}/api/auth/login/start?cli_callback=${cb}`;
+    // The web defaults to github when the param is absent; only append for the non-default provider
+    // so the github URL stays byte-for-byte identical (backward-compat).
+    if (provider === "google")
+        url += `&provider=google`;
+    return url;
+}
+/** True only for a well-formed http(s) URL. Guards against a malformed MCPINDEX_WEB_BASE. */
+function isHttpUrl(s) {
+    try {
+        const u = new URL(s);
+        return u.protocol === "http:" || u.protocol === "https:";
+    }
+    catch {
+        return false;
+    }
+}
+function openBrowser(url) {
+    let cmd;
+    let args;
+    if (platform() === "darwin") {
+        cmd = "open";
+        args = [url];
+    }
+    else if (platform() === "win32") {
+        // rundll32 FileProtocolHandler opens the default browser WITHOUT routing the URL through
+        // cmd.exe's parser (which would interpret &, ^, |, % in the URL). No shell on any platform.
+        cmd = "rundll32";
+        args = ["url.dll,FileProtocolHandler", url];
+    }
+    else {
+        cmd = "xdg-open";
+        args = [url];
+    }
+    try {
+        spawn(cmd, args, { stdio: "ignore", detached: true }).unref();
+    }
+    catch {
+        /* headless / no browser -> the caller prints the URL to open manually */
+    }
+}
+/**
+ * Run the interactive login. Resolves with the stored key, or rejects on timeout. `print` and
+ * `open` are injectable for tests; by default the browser opens automatically.
+ */
+export function runLogin(opts = {}) {
+    const webBase = opts.webBase ?? process.env.MCPINDEX_WEB_BASE ?? DEFAULT_WEB_BASE;
+    const provider = opts.provider ?? "github";
+    const timeoutMs = opts.timeoutMs ?? 180_000;
+    const print = opts.print ?? ((m) => process.stderr.write(m + "\n"));
+    const open = opts.open ?? openBrowser;
+    if (!isHttpUrl(webBase)) {
+        return Promise.reject(new Error(`invalid login web base (MCPINDEX_WEB_BASE): ${webBase}`));
+    }
+    const state = newLoginState();
+    return new Promise((resolve, reject) => {
+        let settled = false; // one-shot: guards resolve/reject and the credential write against re-entry
+        const server = createServer((req, res) => {
+            const key = extractKeyFromCallback(req.url ?? "", state);
+            if (!key) {
+                res.writeHead(400, { "content-type": "text/plain" });
+                res.end("no key");
+                return;
+            }
+            if (settled) {
+                // A second valid callback must NOT overwrite the stored key or double-resolve.
+                res.writeHead(409, { "content-type": "text/plain" });
+                res.end("already completed");
+                return;
+            }
+            settled = true;
+            // Save BEFORE claiming success, so a storage failure surfaces as an error page + non-zero
+            // exit rather than a "Signed in" page that contradicts a failed CLI.
+            try {
+                saveApiKey(key);
+            }
+            catch (e) {
+                cleanup();
+                res.writeHead(500, { "content-type": "text/html; charset=utf-8" });
+                res.end("<!doctype html><p>Could not store your key. Return to your terminal.</p>");
+                reject(e instanceof Error ? e : new Error(String(e)));
+                return;
+            }
+            res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
+            res.end("<!doctype html><p>Signed in. You can close this tab and return to your terminal.</p>");
+            cleanup();
+            print("Signed in. Your mcpindex key is stored.");
+            resolve({ apiKey: key, path: credentialsPath() });
+        });
+        const timer = setTimeout(() => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            reject(new Error("login timed out"));
+        }, timeoutMs);
+        function cleanup() {
+            clearTimeout(timer);
+            server.close();
+        }
+        server.on("error", (e) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            reject(e);
+        });
+        // Loopback ONLY: binding all interfaces would make the key listener reachable off-host.
+        server.listen(0, "127.0.0.1", () => {
+            const addr = server.address();
+            const port = typeof addr === "object" && addr ? addr.port : 0;
+            const address = typeof addr === "object" && addr ? addr.address : "";
+            if (!port) {
+                settled = true;
+                cleanup();
+                reject(new Error("could not bind a loopback port"));
+                return;
+            }
+            opts.onListen?.({ address, port });
+            const url = buildStartUrl(webBase, port, state, provider);
+            print(`Opening your browser to sign in:\n  ${url}\nIf it does not open, paste that URL into your browser.`);
+            open(url);
+        });
+    });
+}
+//# sourceMappingURL=login.js.map

package/dist/src/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAK/C,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,OAAe,eAAe,EAAE;IACzE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,0FAA0F;IACnH,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3E,IAAI,CAAC;QACH,UAAU,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IACD,IAAI,CAAC;QACH,yFAAyF;QACzF,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9G,IAAI,CAAC;YACH,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;QACD,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,yEAAyE;IAClG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC;YACH,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,iEAAiE;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,UAAU,CAAC,OAAe,eAAe,EAAE;IACzD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA0B,CAAC;QAC5E,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,KAAa;IAClE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QACtD,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,UAAU;IACzC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,IAAY,EACZ,KAAa,EACb,WAA0B,QAAQ;IAElC,MAAM,EAAE,GAAG,kBAAkB,CAAC,oBAAoB,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IACnE,IAAI,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,sCAAsC,EAAE,EAAE,CAAC;IACnF,gGAAgG;IAChG,qEAAqE;IACrE,IAAI,QAAQ,KAAK,QAAQ;QAAE,GAAG,IAAI,kBAAkB,CAAC;IACrD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6FAA6F;AAC7F,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,GAAW,CAAC;IAChB,IAAI,IAAc,CAAC;IACnB,IAAI,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC5B,GAAG,GAAG,MAAM,CAAC;QACb,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;SAAM,IAAI,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAClC,yFAAyF;QACzF,4FAA4F;QAC5F,GAAG,GAAG,UAAU,CAAC;QACjB,IAAI,GAAG,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,UAAU,CAAC;QACjB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;AACH,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACtB,OASI,EAAE;IAEN,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,gBAAgB,CAAC;IAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;IAEtC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+CAA+C,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAE9B,OAAO,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClD,IAAI,OAAO,GAAG,KAAK,CAAC,CAAC,4EAA4E;QAEjG,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;YACxE,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;YACzD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAClB,OAAO;YACT,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,+EAA+E;gBAC/E,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;gBACrD,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,0FAA0F;YAC1F,qEAAqE;YACrE,IAAI,CAAC;gBACH,UAAU,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,EAAE,CAAC;gBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;gBACpF,MAAM,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACnE,GAAG,CAAC,GAAG,CAAC,sFAAsF,CAAC,CAAC;YAChG,OAAO,EAAE,CAAC;YACV,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACjD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACvC,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,SAAS,OAAO;YACd,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;QAED,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACvB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,wFAAwF;QACxF,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC1D,KAAK,CAAC,uCAAuC,GAAG,0DAA0D,CAAC,CAAC;YAC5G,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-index/sdk",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Pre-flight MCP tool-contract drift interceptor — one-line wrap() over an MCP client session that HOLDs a tool call before your agent runs it when the contract drifted from your pin. No credential handling.",
   "license": "PolyForm-Noncommercial-1.0.0",
   "author": "Bhartis LLC",
@@ -13,6 +13,9 @@
   "type": "module",
   "main": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
+  "bin": {
+    "mcpindex": "./dist/src/cli.js"
+  },
   "exports": {
     ".": {
       "types": "./dist/src/index.d.ts",