@mcpcloud/cli 0.14.0 → 0.15.0

package/README.md

@@ -377,6 +377,7 @@ _Generated from the live command tree by `bun run docs:readme` — do not edit b
 | `mcp skills installations <skill>` | List the installation footprint of a skill (which orgs / users installed it) |
 | `mcp skills invoke <skill>` | Run a deployed skill from the terminal. Resolves the skill’s MCP endpoint, auto-discovers its single tool, and calls it. |
 | `mcp skills list` | List skills in an organization |
+| `mcp skills pull <registryArtifactId>` | Download an installed skill as SKILL.md + mcpcloud.json for your coding agent |
 | `mcp skills test-runs` | Inspect and trigger skill sandbox test runs |
 | `mcp skills test-runs get <testRunId>` | Show one skill test run with assertions, trace, and output |
 | `mcp skills test-runs list <skill>` | List sandbox test runs for a skill |

package/dist/index.js

@@ -4030,7 +4030,7 @@ function configFile() {
   return join(configDir(), "config.json");
 }
 var DEFAULT_PROFILE_NAME = "default";
-var DEFAULT_BASE_URL = "https://majestic-lobster-858.convex.site";
+var DEFAULT_BASE_URL = "https://api.mcpcloud.sh";
 var PRODUCTION_BASE_URL = DEFAULT_BASE_URL;
 var DEFAULT_APP_URL = "https://mcpcloud.sh";
 
@@ -10981,7 +10981,7 @@ function parseTimeoutMs(value, fallbackMs) {
   return Math.round(n * 1000);
 }
 function registerSkillInvokeCommand(skills) {
-  skills.command("invoke <skill>").description("Run a deployed skill from the terminal. Resolves the skill’s MCP endpoint, auto-discovers its single tool, and calls it.").option("--org <organizationId>", "Organization ID (overrides default)").option("--input <json>", "Skill input as inline JSON, `@path/to/input.json`, or `@-` for stdin. Defaults to `{}`.").option("--tool <name>", "Override the auto-discovered tool name (a deployed skill normally exposes exactly one)").option("--timeout <seconds>", "Request timeout in seconds (default 60, max 600)").option("--raw", "Print the raw JSON-RPC `result` envelope").addHelpText("after", [
+  skills.command("invoke <skill>").description("Run a deployed skill from the terminal. Resolves the skill’s MCP endpoint, auto-discovers its single tool, and calls it.").option("--org <organizationId>", "Organization ID (overrides default)").option("--input <json>", "Skill input as inline JSON, `@path/to/input.json`, or `@-` for stdin. Defaults to `{}`.").option("--tool <name>", "Override the auto-discovered tool name (a deployed skill normally exposes exactly one)").option("--timeout <seconds>", "Request timeout in seconds (default 60, max 600)").option("--raw", "Print the raw JSON-RPC `result` envelope").option("--token <token>", "Skill runtime token (skr_…). Prefer --token-stdin.").option("--token-stdin", "Read the skill runtime token from stdin (recommended — keeps it out of argv)").addHelpText("after", [
     "",
     "Examples:",
     `  $ mcp skills invoke skill_123 --input '{"topic":"weather"}'`,
@@ -11017,13 +11017,29 @@ async function runSkillInvoke(skillRef, opts) {
   if (active.status !== "active") {
     printWarn(`Skill deployment is ${active.status}, not active — the call may be refused.`);
   }
+  const runtimeToken = opts.tokenStdin ? await readStdin2() : opts.token?.trim() ?? "";
+  if (!runtimeToken) {
+    if (isJsonMode()) {
+      printJson({
+        ok: false,
+        error: "runtime_token_required",
+        hint: "Pass --token-stdin (or --token). Reveal the token on the skill's deployment card."
+      });
+    } else {
+      printError("A skill endpoint requires an Authorization: Bearer token — none was provided.");
+      printWarn(`Reveal it on the skill's deployment card, then: echo "$SKILL_TOKEN" | mcp skills invoke <skill> --token-stdin`);
+    }
+    throw new CliExitError(1);
+  }
+  const headers = { Authorization: `Bearer ${runtimeToken}` };
   const timeoutMs = parseTimeoutMs(opts.timeout, 60000);
-  const toolName = opts.tool ?? await discoverSkillTool(active.mcpUrl, timeoutMs);
+  const toolName = opts.tool ?? await discoverSkillTool(active.mcpUrl, timeoutMs, headers);
   const result = await invokeMcpTool({
     url: active.mcpUrl,
     toolName,
     toolArguments: parsedInput.ok ? parsedInput.value : {},
-    timeoutMs
+    timeoutMs,
+    headers
   });
   if (isJsonMode()) {
     printJson({
@@ -11057,8 +11073,15 @@ async function runSkillInvoke(skillRef, opts) {
     printWarn(`Skill reported isError=true. Inspect ${c.bold("--json")} or ${c.bold("--raw")} for the full envelope.`);
   }
 }
-async function discoverSkillTool(mcpUrl, timeoutMs) {
-  const listed = await listMcpTools({ url: mcpUrl, timeoutMs });
+async function readStdin2() {
+  const chunks = [];
+  for await (const chunk of process.stdin) {
+    chunks.push(Buffer.from(chunk));
+  }
+  return Buffer.concat(chunks).toString("utf8").trim();
+}
+async function discoverSkillTool(mcpUrl, timeoutMs, headers) {
+  const listed = await listMcpTools({ url: mcpUrl, timeoutMs, headers });
   if (!listed.ok) {
     const detail = listed.reason === "rpc-error" ? listed.error.message : `${listed.status > 0 ? `HTTP ${listed.status}` : "network error"}: ${listed.message}`;
     printError(`Could not list the skill's tools to auto-discover the entry point (${detail}). Pass --tool <name> to call it directly.`);
@@ -11104,15 +11127,98 @@ function invokeResultToJson(result) {
   };
 }
 
+// src/commands/skills-pull.ts
+import { mkdirSync as mkdirSync8, writeFileSync as writeFileSync7 } from "node:fs";
+import { dirname as dirname6, isAbsolute as isAbsolute3, join as join11, resolve as resolve7 } from "node:path";
+function formatBytes2(bytes) {
+  if (bytes < 1024)
+    return `${bytes} B`;
+  return `${(bytes / 1024).toFixed(1)} KB`;
+}
+function assertSafeRelativePath2(path) {
+  if (isAbsolute3(path) || path.split(/[\\/]/).includes("..")) {
+    throw new Error(`Refusing to write unsafe package path: ${path}`);
+  }
+}
+function registerSkillPullCommand(skills) {
+  skills.command("pull <registryArtifactId>").description("Download an installed skill as SKILL.md + mcpcloud.json for your coding agent").option("--org <organizationId>", "Organization ID").option("--output <dir>", "Write the package files to a directory (default: ./<slug>)").option("--skill-version <semver>", "Published version (defaults to the latest)").addHelpText("after", [
+    "",
+    "Examples:",
+    "  # Pull a skill you installed from the marketplace:",
+    "  $ mcp skills pull p179hst... --output ./skills/ship-an-mcp-server",
+    "",
+    "  # Then point your agent at the servers it needs:",
+    "  $ cat ./skills/ship-an-mcp-server/mcpcloud.json"
+  ].join(`
+`)).action(runAction(async (registryArtifactId, opts) => {
+    const organizationId = await resolveOrgId(opts.org);
+    const result = await api.post("/api/v1/skill/package", {
+      organizationId,
+      registryArtifactId,
+      ...opts.skillVersion ? { version: opts.skillVersion } : {}
+    });
+    const dir = resolve7(opts.output ?? `./${result.skill.slug}`);
+    for (const file of result.files) {
+      assertSafeRelativePath2(file.path);
+      const full = join11(dir, file.path);
+      mkdirSync8(dirname6(full), { recursive: true });
+      writeFileSync7(full, file.content);
+    }
+    if (isJsonMode()) {
+      printJson({
+        skill: result.skill,
+        fileCount: result.fileCount,
+        byteSize: result.byteSize,
+        dependencies: result.dependencies,
+        output: dir
+      });
+      return;
+    }
+    printSuccess(`Pulled ${result.skill.name} v${result.skill.version} (${result.fileCount} files, ${formatBytes2(result.byteSize)}) to ${dir}.`);
+    const missing = result.dependencies.filter((entry) => !entry.installed);
+    if (result.dependencies.length === 0) {
+      printKeyValue({
+        Next: `Copy ${join11(dir, "SKILL.md")} into the skills directory your agent reads.`
+      });
+      return;
+    }
+    printKeyValue({
+      Next: `Copy ${join11(dir, "SKILL.md")} into the skills directory your agent reads.`,
+      Servers: result.dependencies.map((entry) => `${entry.name}${entry.installed ? "" : " (not installed)"}`).join(", ")
+    });
+    if (missing.length > 0) {
+      printKeyValue({
+        "Heads up": `Install ${missing.map((entry) => entry.name).join(", ")} before running this skill.`
+      });
+    }
+  }));
+}
+
 // src/commands/skills.ts
-async function runClaudeMcpAdd(connectionName, mcpUrl) {
-  return new Promise((resolve7) => {
-    const child = spawn3("claude", ["mcp", "add", "--transport", "http", connectionName, mcpUrl], {
+async function readStdin3() {
+  const chunks = [];
+  for await (const chunk of process.stdin) {
+    chunks.push(Buffer.from(chunk));
+  }
+  return Buffer.concat(chunks).toString("utf8").trim();
+}
+async function runClaudeMcpAdd(connectionName, mcpUrl, bearerToken) {
+  return new Promise((resolve8) => {
+    const child = spawn3("claude", [
+      "mcp",
+      "add",
+      "--transport",
+      "http",
+      connectionName,
+      mcpUrl,
+      "--header",
+      `Authorization: Bearer ${bearerToken}`
+    ], {
       stdio: "inherit",
       shell: false
     });
-    child.on("error", () => resolve7(127));
-    child.on("exit", (code) => resolve7(code ?? 1));
+    child.on("error", () => resolve8(127));
+    child.on("exit", (code) => resolve8(code ?? 1));
   });
 }
 function registerSkillCommands(program2) {
@@ -11120,6 +11226,7 @@ function registerSkillCommands(program2) {
   registerSkillMutationCommands(skills);
   registerSkillTestCommands(skills);
   registerSkillInvokeCommand(skills);
+  registerSkillPullCommand(skills);
   skills.command("list").description("List skills in an organization").option("--org <organizationId>", "Organization ID").option("--project <project>", "Filter by project (id or name)").option("--limit <n>", "Maximum results (default 25)", parsePositiveIntOption("limit"), "25").addHelpText("after", [
     "",
     "Examples:",
@@ -11181,7 +11288,8 @@ function registerSkillCommands(program2) {
       "mcp endpoint": s.activeDeployment?.mcpUrl ?? "—"
     });
   }));
-  skills.command("connect <skill>").description("Print (or apply) the MCP configuration that connects this skill to your coding agent").option("--org <organizationId>", "Organization ID").option("--agent <agent>", `Agent preset: ${AGENT_KEYS.join(", ")}`, "claude-code").option("--name <name>", "Override the connection name shown in the agent (defaults to the skill slug)").option("--apply", 'For claude-code: invoke "claude mcp add" automatically. Other agents print only.').action(runAction(async (skillRef, opts) => {
+  skills.command("connect <skill>").description("Print (or apply) the MCP configuration that connects this skill to your coding agent").option("--org <organizationId>", "Organization ID").option("--agent <agent>", `Agent preset: ${AGENT_KEYS.join(", ")}`, "claude-code").option("--name <name>", "Override the connection name shown in the agent (defaults to the skill slug)").option("--apply", 'For claude-code: invoke "claude mcp add" automatically. Other agents print only.').option("--token <token>", "Skill runtime token (skr_…) to inline into --apply. Prefer --token-stdin.").option("--token-stdin", "Read the skill runtime token from stdin (recommended — keeps it out of argv)").action(runAction(async (skillRef, opts) => {
+    const runtimeToken = opts.tokenStdin ? await readStdin3() : opts.token?.trim() ?? "";
     if (!isAgentKey(opts.agent)) {
       printError(`Unknown --agent '${opts.agent}'. Valid values: ${AGENT_KEYS.join(", ")}.`);
       throw new CliExitError(1);
@@ -11227,10 +11335,23 @@ function registerSkillCommands(program2) {
         }
         throw new CliExitError(1);
       }
+      if (!runtimeToken) {
+        if (isJsonMode()) {
+          printJson({
+            ok: false,
+            error: "runtime_token_required",
+            hint: "Pass --token-stdin (or --token). Reveal the token on the skill's deployment card."
+          });
+        } else {
+          printError("A skill endpoint requires an Authorization: Bearer token, so --apply needs one too.");
+          printInfo(`Reveal it on the skill's deployment card, then: echo "$SKILL_TOKEN" | mcp skills connect <skill> --apply --token-stdin`);
+        }
+        throw new CliExitError(1);
+      }
       if (!isJsonMode()) {
-        printInfo(`Applying via "claude mcp add --transport http ${connectionName} ${deployment.mcpUrl}"…`);
+        printInfo(`Applying via "claude mcp add --transport http ${connectionName} ${deployment.mcpUrl} --header …"…`);
       }
-      const code = await runClaudeMcpAdd(connectionName, deployment.mcpUrl);
+      const code = await runClaudeMcpAdd(connectionName, deployment.mcpUrl, runtimeToken);
       if (code === 127) {
         if (isJsonMode()) {
           printJson({
@@ -11286,7 +11407,10 @@ function registerSkillCommands(program2) {
         agent: preset.key,
         connectionName,
         location: preset.location,
-        snippet: preset.snippet
+        snippet: preset.snippet,
+        requiresAuthHeader: true,
+        authHeader: "Authorization",
+        authScheme: "Bearer"
       });
       return;
     }
@@ -11298,6 +11422,12 @@ function registerSkillCommands(program2) {
     printInfo(`Add this to    ${preset.location}`);
     printInfo("");
     printInfo(preset.snippet);
+    printInfo("");
+    printWarn("This endpoint requires an Authorization: Bearer <skill runtime token> header — the snippet above does not include one.");
+    printInfo("Reveal the token on the skill's deployment card, then add it to your client's header config.");
+    if (agent === "claude-code") {
+      printInfo(`  claude mcp add --transport http ${connectionName} ${deployment.mcpUrl} --header "Authorization: Bearer <token>"`);
+    }
     if (preset.applyHint) {
       printInfo("");
       printInfo(preset.applyHint);
@@ -11780,9 +11910,9 @@ function registerDomainCommands(program2) {
 
 // src/commands/config.ts
 import { homedir as homedir2 } from "node:os";
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 function configFilePath() {
-  return join11(homedir2(), ".mcpcloud", "config.json");
+  return join12(homedir2(), ".mcpcloud", "config.json");
 }
 function previewKey2(key) {
   if (!key)
@@ -12028,34 +12158,34 @@ function registerConfigCommands(program2) {
 
 // src/commands/dev.ts
 import { existsSync as existsSync33 } from "node:fs";
-import { isAbsolute as isAbsolute3, relative as relative7, resolve as resolve8 } from "node:path";
+import { isAbsolute as isAbsolute4, relative as relative7, resolve as resolve9 } from "node:path";
 
 // src/lib/dev/sessions.ts
 import {
   existsSync as existsSync14,
-  mkdirSync as mkdirSync8,
+  mkdirSync as mkdirSync9,
   readFileSync as readFileSync12,
   readdirSync as readdirSync2,
   unlinkSync,
-  writeFileSync as writeFileSync7
+  writeFileSync as writeFileSync8
 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 var SESSIONS_DIR_NAME = "dev-sessions";
 function sessionsDir() {
-  return join12(homedir3(), ".mcpcloud", SESSIONS_DIR_NAME);
+  return join13(homedir3(), ".mcpcloud", SESSIONS_DIR_NAME);
 }
 function sessionFile(pid) {
-  return join12(sessionsDir(), `${pid}.json`);
+  return join13(sessionsDir(), `${pid}.json`);
 }
 function ensureDir() {
   const dir = sessionsDir();
   if (!existsSync14(dir))
-    mkdirSync8(dir, { recursive: true, mode: 448 });
+    mkdirSync9(dir, { recursive: true, mode: 448 });
 }
 function recordSession(record) {
   ensureDir();
-  writeFileSync7(sessionFile(record.pid), JSON.stringify(record, null, 2), {
+  writeFileSync8(sessionFile(record.pid), JSON.stringify(record, null, 2), {
     encoding: "utf-8",
     mode: 384
   });
@@ -12076,7 +12206,7 @@ function listSessions() {
   for (const entry of readdirSync2(dir)) {
     if (!entry.endsWith(".json"))
       continue;
-    const path = join12(dir, entry);
+    const path = join13(dir, entry);
     try {
       const parsed = JSON.parse(readFileSync12(path, "utf-8"));
       if (typeof parsed.pid !== "number") {
@@ -12271,27 +12401,27 @@ function invokeResultToJson2(result) {
 import {
   appendFileSync as appendFileSync2,
   existsSync as existsSync15,
-  mkdirSync as mkdirSync9,
+  mkdirSync as mkdirSync10,
   readFileSync as readFileSync13,
   readdirSync as readdirSync3,
   renameSync,
   statSync as statSync2
 } from "node:fs";
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 var INSPECTOR_DIRNAME = "inspector";
 var ACTIVE_FILE = "calls.ndjson";
 var ROTATED_PREFIX = "calls.";
 var ROTATED_SUFFIX = ".ndjson";
 var ROTATION_LIMIT_BYTES = 50 * 1024 * 1024;
 function inspectorDir(cwd) {
-  return join13(devRoot(cwd), INSPECTOR_DIRNAME);
+  return join14(devRoot(cwd), INSPECTOR_DIRNAME);
 }
 function ensureInspectorDir(dir) {
   if (!existsSync15(dir))
-    mkdirSync9(dir, { recursive: true });
+    mkdirSync10(dir, { recursive: true });
 }
 function activeFilePath(dir) {
-  return join13(dir, ACTIVE_FILE);
+  return join14(dir, ACTIVE_FILE);
 }
 function isRotatedName(name) {
   return name !== ACTIVE_FILE && name.startsWith(ROTATED_PREFIX) && name.endsWith(ROTATED_SUFFIX);
@@ -12301,7 +12431,7 @@ function listRotatedFiles(dir) {
     return [];
   const rotated = readdirSync3(dir).filter(isRotatedName);
   rotated.sort();
-  return rotated.map((n) => join13(dir, n));
+  return rotated.map((n) => join14(dir, n));
 }
 function parseLines(text) {
   if (!text)
@@ -12526,7 +12656,7 @@ import {
   closeSync,
   statSync as statSync3
 } from "node:fs";
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 var DEFAULT_INTERVAL_MS = 250;
 var MAX_READ_CHUNK = 64 * 1024;
 function registerDevTailCommand(dev) {
@@ -12535,7 +12665,7 @@ function registerDevTailCommand(dev) {
 async function runDevTail(opts) {
   const cwd = process.cwd();
   const dir = inspectorDir(cwd);
-  const activePath = join14(dir, ACTIVE_FILE);
+  const activePath = join15(dir, ACTIVE_FILE);
   const intervalMs = parseInterval(opts.intervalMs);
   if (!existsSync16(dir)) {
     printInfo(`No inspector history yet at ${dir}. Run \`mcp dev\` to start capturing.`);
@@ -12643,7 +12773,7 @@ function emitLines(text, filter) {
   }
 }
 function sleep(ms) {
-  return new Promise((resolve7) => setTimeout(resolve7, ms));
+  return new Promise((resolve8) => setTimeout(resolve8, ms));
 }
 
 // src/lib/dev/bootstrap.ts
@@ -12761,12 +12891,12 @@ async function runInteractiveBootstrap() {
 // src/lib/dev/bundle-sync.ts
 import {
   existsSync as existsSync17,
-  mkdirSync as mkdirSync10,
+  mkdirSync as mkdirSync11,
   readFileSync as readFileSync14,
   rmSync as rmSync2,
-  writeFileSync as writeFileSync8
+  writeFileSync as writeFileSync9
 } from "node:fs";
-import { dirname as dirname6, join as join15 } from "node:path";
+import { dirname as dirname7, join as join16 } from "node:path";
 async function resolveServerProject(args) {
   const data = await api.get("/api/v1/server", {
     organizationId: args.organizationId,
@@ -12828,7 +12958,7 @@ async function fetchBundle(args) {
 }
 function materializeBundle(destDir, bundle, options = {}) {
   if (!existsSync17(destDir)) {
-    mkdirSync10(destDir, { recursive: true });
+    mkdirSync11(destDir, { recursive: true });
   }
   const preserve = options.preservePaths;
   const kept = new Set;
@@ -12843,9 +12973,9 @@ function materializeBundle(destDir, bundle, options = {}) {
       preservedCount += 1;
       continue;
     }
-    const target = join15(destDir, safePath);
-    mkdirSync10(dirname6(target), { recursive: true });
-    writeFileSync8(target, file.content, "utf-8");
+    const target = join16(destDir, safePath);
+    mkdirSync11(dirname7(target), { recursive: true });
+    writeFileSync9(target, file.content, "utf-8");
     writtenCount += 1;
   }
   let removed = 0;
@@ -12873,7 +13003,7 @@ function pruneStaleFiles(rootDir, currentDir, kept) {
   const { relative: relative6 } = __require("node:path");
   let removed = 0;
   for (const entry of readdirSync4(currentDir)) {
-    const abs = join15(currentDir, entry);
+    const abs = join16(currentDir, entry);
     const stat = statSync4(abs);
     if (stat.isDirectory()) {
       removed += pruneStaleFiles(rootDir, abs, kept);
@@ -12940,7 +13070,7 @@ function startGitPullPoll(args) {
 // src/lib/dev/editor.ts
 import { spawn as spawn4 } from "node:child_process";
 import { existsSync as existsSync18, statSync as statSync4 } from "node:fs";
-import { delimiter as delimiter2, join as join16 } from "node:path";
+import { delimiter as delimiter2, join as join17 } from "node:path";
 import { platform as platform3 } from "node:os";
 var TARGET_LABEL = {
   tools: "tool metadata",
@@ -12976,7 +13106,7 @@ function findOnPath2(command) {
     if (!dir)
       continue;
     for (const ext of exts) {
-      const candidate = join16(dir, command + ext);
+      const candidate = join17(dir, command + ext);
       if (existsSync18(candidate) && isExecutable(candidate))
         return candidate;
     }
@@ -13258,7 +13388,7 @@ function parseOpenChoice(raw) {
 
 // src/lib/dev/file-watcher.ts
 import { existsSync as existsSync19, statSync as statSync5, watch as fsWatch2 } from "node:fs";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 var DEFAULT_IGNORE = ["node_modules", ".git", "_mcpsh_host.mjs"];
 function watchDir(options) {
   if (!existsSync19(options.rootDir)) {
@@ -13297,7 +13427,7 @@ function watchDir(options) {
       for (const entry of readdirSync4(options.rootDir)) {
         if (ignore.has(entry))
           continue;
-        const sub = join17(options.rootDir, entry);
+        const sub = join18(options.rootDir, entry);
         try {
           const stat = statSync5(sub);
           if (!stat.isDirectory())
@@ -13564,7 +13694,7 @@ async function handleOne2(args) {
 // src/lib/dev/local-runtime.ts
 import { spawn as spawn5 } from "node:child_process";
 import { existsSync as existsSync22 } from "node:fs";
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 function detectRuntime(preferred = "auto") {
   if (preferred === "bun" || preferred === "node")
     return preferred;
@@ -13601,52 +13731,52 @@ function startRuntime(options) {
       if (child.exitCode !== null)
         return;
       child.kill("SIGTERM");
-      await new Promise((resolve7) => {
+      await new Promise((resolve8) => {
         const timer = setTimeout(() => {
           if (child.exitCode === null)
             child.kill("SIGKILL");
-          resolve7();
+          resolve8();
         }, 3000);
         child.once("exit", () => {
           clearTimeout(timer);
-          resolve7();
+          resolve8();
         });
       });
     }
   };
 }
 async function installDependencies(options) {
-  const pkgPath = join18(options.serverDir, "package.json");
+  const pkgPath = join19(options.serverDir, "package.json");
   if (!existsSync22(pkgPath))
     return { ran: false, exitCode: null };
-  const nodeModules = join18(options.serverDir, "node_modules");
+  const nodeModules = join19(options.serverDir, "node_modules");
   if (options.skipIfPresent !== false && existsSync22(nodeModules)) {
     return { ran: false, exitCode: 0 };
   }
   options.onStep?.("Installing dependencies (bun install)…");
-  return await new Promise((resolve7) => {
+  return await new Promise((resolve8) => {
     const child = spawn5("bun", ["install", "--silent"], {
       cwd: options.serverDir,
       stdio: "inherit"
     });
-    child.on("error", () => resolve7({ ran: true, exitCode: 127 }));
-    child.on("exit", (code) => resolve7({ ran: true, exitCode: code }));
+    child.on("error", () => resolve8({ ran: true, exitCode: 127 }));
+    child.on("exit", (code) => resolve8({ ran: true, exitCode: code }));
   });
 }
 
 // src/lib/dev/prepare.ts
-import { existsSync as existsSync26, writeFileSync as writeFileSync12 } from "node:fs";
-import { join as join22, relative as relative6 } from "node:path";
+import { existsSync as existsSync26, writeFileSync as writeFileSync13 } from "node:fs";
+import { join as join23, relative as relative6 } from "node:path";
 
 // src/lib/dev/git-clone.ts
 import { spawnSync } from "node:child_process";
 import {
   existsSync as existsSync23,
-  mkdirSync as mkdirSync11,
+  mkdirSync as mkdirSync12,
   readFileSync as readFileSync15,
-  writeFileSync as writeFileSync9
+  writeFileSync as writeFileSync10
 } from "node:fs";
-import { dirname as dirname7, join as join19 } from "node:path";
+import { dirname as dirname8, join as join20 } from "node:path";
 
 class GitNotAvailableError extends Error {
   constructor() {
@@ -13719,21 +13849,21 @@ function isGitAvailable() {
   }
 }
 function applyLocalExcludes(repoDir) {
-  const excludePath = join19(repoDir, ".git", "info", "exclude");
+  const excludePath = join20(repoDir, ".git", "info", "exclude");
   const existing = existsSync23(excludePath) ? readFileSync15(excludePath, "utf-8") : "";
   const next = mergeLocalExcludes(existing);
   if (next === null)
     return;
-  if (!existsSync23(dirname7(excludePath))) {
-    mkdirSync11(dirname7(excludePath), { recursive: true });
+  if (!existsSync23(dirname8(excludePath))) {
+    mkdirSync12(dirname8(excludePath), { recursive: true });
   }
-  writeFileSync9(excludePath, next, "utf-8");
+  writeFileSync10(excludePath, next, "utf-8");
 }
 function ensureClone(opts) {
   if (!isGitAvailable()) {
     throw new GitNotAvailableError;
   }
-  if (existsSync23(join19(opts.repoDir, ".git"))) {
+  if (existsSync23(join20(opts.repoDir, ".git"))) {
     opts.onStep?.("Refreshing existing clone (git fetch)…");
     runGit(gitFetchArgs(opts.branch), opts.repoDir);
     applyLocalExcludes(opts.repoDir);
@@ -13749,12 +13879,12 @@ function ensureClone(opts) {
 }
 
 // src/lib/dev/host-runtime.ts
-import { existsSync as existsSync25, mkdirSync as mkdirSync13, writeFileSync as writeFileSync11 } from "node:fs";
-import { dirname as dirname8, join as join21 } from "node:path";
+import { existsSync as existsSync25, mkdirSync as mkdirSync14, writeFileSync as writeFileSync12 } from "node:fs";
+import { dirname as dirname9, join as join22 } from "node:path";
 
 // src/lib/dev/inspector-module.ts
-import { existsSync as existsSync24, mkdirSync as mkdirSync12, writeFileSync as writeFileSync10 } from "node:fs";
-import { join as join20 } from "node:path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync13, writeFileSync as writeFileSync11 } from "node:fs";
+import { join as join21 } from "node:path";
 
 // src/lib/dev/inspector-assets.ts
 var INSPECTOR_HTML = `<!doctype html>
@@ -28890,9 +29020,9 @@ function buildInspectorModule() {
 }
 function writeInspectorModule(serverDir2) {
   if (!existsSync24(serverDir2))
-    mkdirSync12(serverDir2, { recursive: true });
-  const target = join20(serverDir2, INSPECTOR_FILE_NAME);
-  writeFileSync10(target, buildInspectorModule(), "utf-8");
+    mkdirSync13(serverDir2, { recursive: true });
+  const target = join21(serverDir2, INSPECTOR_FILE_NAME);
+  writeFileSync11(target, buildInspectorModule(), "utf-8");
   return target;
 }
 
@@ -29072,10 +29202,10 @@ function buildHostScript(options) {
 }
 function writeHostScript(serverDir2, options) {
   if (!existsSync25(serverDir2))
-    mkdirSync13(serverDir2, { recursive: true });
-  const target = join21(serverDir2, HOST_FILE_NAME);
-  mkdirSync13(dirname8(target), { recursive: true });
-  writeFileSync11(target, buildHostScript(options), "utf-8");
+    mkdirSync14(serverDir2, { recursive: true });
+  const target = join22(serverDir2, HOST_FILE_NAME);
+  mkdirSync14(dirname9(target), { recursive: true });
+  writeFileSync12(target, buildHostScript(options), "utf-8");
   if (options.inspector) {
     writeInspectorModule(serverDir2);
   }
@@ -29108,7 +29238,7 @@ async function prepareDev(opts) {
     projectId = projectId ?? gitLink.projectId;
     serverName = `${gitLink.owner}/${gitLink.name}`;
     repoDir = gitCloneDir(cwd, gitLink.owner, gitLink.name);
-    dest = gitLink.pathPrefix ? join22(repoDir, gitLink.pathPrefix) : repoDir;
+    dest = gitLink.pathPrefix ? join23(repoDir, gitLink.pathPrefix) : repoDir;
     printStep(`Git-linked server — cloning ${gitLink.owner}/${gitLink.name}@${gitLink.branch}…`);
     try {
       const result = ensureClone({
@@ -29129,7 +29259,7 @@ async function prepareDev(opts) {
       process.exit(1);
     }
     if (!existsSync26(env)) {
-      writeFileSync12(env, `{}
+      writeFileSync13(env, `{}
 `, "utf-8");
       printInfo(`  → seeded ${relative6(cwd, env)} (empty; fill secrets here)`);
     }
@@ -29154,7 +29284,7 @@ async function prepareDev(opts) {
     const result = materializeBundle(dest, bundle, { prune: true });
     printInfo(`  → wrote ${result.filesWritten} files (pruned ${result.filesRemoved})`);
     if (!existsSync26(env)) {
-      writeFileSync12(env, `{}
+      writeFileSync13(env, `{}
 `, "utf-8");
       printInfo(`  → seeded ${relative6(cwd, env)} (empty; fill secrets here)`);
     }
@@ -29180,7 +29310,7 @@ async function prepareDev(opts) {
       process.exit(1);
     }
   }
-  const entryRel = ENTRY_CANDIDATES.find((c2) => existsSync26(join22(dest, c2)));
+  const entryRel = ENTRY_CANDIDATES.find((c2) => existsSync26(join23(dest, c2)));
   if (!entryRel) {
     printError("Could not locate an entry file (expected src/worker.ts).");
     process.exit(1);
@@ -29338,13 +29468,13 @@ function createBurstGuard() {
 }
 
 // src/lib/dev/agent-connectors/claude-code.ts
-import { existsSync as existsSync28, unlinkSync as unlinkSync2, writeFileSync as writeFileSync14 } from "node:fs";
+import { existsSync as existsSync28, unlinkSync as unlinkSync2, writeFileSync as writeFileSync15 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 
 // src/lib/dev/agent-connectors/json-config-utils.ts
-import { existsSync as existsSync27, mkdirSync as mkdirSync14, readFileSync as readFileSync16, writeFileSync as writeFileSync13 } from "node:fs";
-import { dirname as dirname9, join as join23, basename } from "node:path";
+import { existsSync as existsSync27, mkdirSync as mkdirSync15, readFileSync as readFileSync16, writeFileSync as writeFileSync14 } from "node:fs";
+import { dirname as dirname10, join as join24, basename } from "node:path";
 function readJsonFile(path) {
   if (!existsSync27(path))
     return { ok: true, value: {} };
@@ -29362,9 +29492,9 @@ function readJsonFile(path) {
   }
 }
 function atomicWriteJson(path, value) {
-  mkdirSync14(dirname9(path), { recursive: true });
+  mkdirSync15(dirname10(path), { recursive: true });
   const tmp = `${path}.mcpsh-${process.pid}-${Date.now()}.tmp`;
-  writeFileSync13(tmp, JSON.stringify(value, null, 2) + `
+  writeFileSync14(tmp, JSON.stringify(value, null, 2) + `
 `, "utf-8");
   const { renameSync: renameSync2 } = __require("node:fs");
   renameSync2(tmp, path);
@@ -29373,33 +29503,33 @@ function backupConfig(args) {
   if (!existsSync27(args.configPath)) {
     return { backupPath: null, existed: false };
   }
-  mkdirSync14(args.backupsDir, { recursive: true });
+  mkdirSync15(args.backupsDir, { recursive: true });
   const filename = `${args.agentId}__${basename(args.configPath)}.bak`;
-  const backupPath = join23(args.backupsDir, filename);
+  const backupPath = join24(args.backupsDir, filename);
   if (!existsSync27(backupPath)) {
     const raw = readFileSync16(args.configPath, "utf-8");
-    writeFileSync13(backupPath, raw, "utf-8");
+    writeFileSync14(backupPath, raw, "utf-8");
   }
   return { backupPath, existed: true };
 }
 function restoreFromBackup(args) {
   const filename = `${args.agentId}__${basename(args.configPath)}.bak`;
-  const backupPath = join23(args.backupsDir, filename);
+  const backupPath = join24(args.backupsDir, filename);
   if (!existsSync27(backupPath)) {
     return { restored: false };
   }
   const raw = readFileSync16(backupPath, "utf-8");
-  mkdirSync14(dirname9(args.configPath), { recursive: true });
-  writeFileSync13(args.configPath, raw, "utf-8");
+  mkdirSync15(dirname10(args.configPath), { recursive: true });
+  writeFileSync14(args.configPath, raw, "utf-8");
   return { restored: true };
 }
 
 // src/lib/dev/agent-connectors/claude-code.ts
 function configPath() {
-  return join24(homedir4(), ".claude.json");
+  return join25(homedir4(), ".claude.json");
 }
 function legacyConfigPath() {
-  return join24(homedir4(), ".claude", "mcp.json");
+  return join25(homedir4(), ".claude", "mcp.json");
 }
 function resolveConfigPath() {
   if (existsSync28(configPath()))
@@ -29414,7 +29544,7 @@ var claudeCodeConnector = {
   hotkey: "c",
   describeLocation: () => resolveConfigPath(),
   async detect() {
-    const claudeDir = join24(homedir4(), ".claude");
+    const claudeDir = join25(homedir4(), ".claude");
     if (existsSync28(configPath()) || existsSync28(legacyConfigPath()) || existsSync28(claudeDir)) {
       return { installed: true, note: "Found Claude Code config" };
     }
@@ -29463,7 +29593,7 @@ var claudeCodeConnector = {
           try {
             unlinkSync2(path);
           } catch {
-            writeFileSync14(path, `{}
+            writeFileSync15(path, `{}
 `, "utf-8");
           }
         }
@@ -29476,15 +29606,15 @@ var claudeCodeConnector = {
 // src/lib/dev/agent-connectors/codex.ts
 import {
   existsSync as existsSync29,
-  mkdirSync as mkdirSync15,
+  mkdirSync as mkdirSync16,
   readFileSync as readFileSync17,
   unlinkSync as unlinkSync3,
-  writeFileSync as writeFileSync15
+  writeFileSync as writeFileSync16
 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { dirname as dirname10, join as join25 } from "node:path";
+import { dirname as dirname11, join as join26 } from "node:path";
 function configPath2() {
-  return join25(homedir5(), ".codex", "config.toml");
+  return join26(homedir5(), ".codex", "config.toml");
 }
 var SECTION_PREFIX = "mcp_servers.";
 function buildSection(name, url) {
@@ -29522,7 +29652,7 @@ var codexConnector = {
   hotkey: "x",
   describeLocation: () => configPath2(),
   async detect() {
-    if (existsSync29(join25(homedir5(), ".codex")) || existsSync29(configPath2())) {
+    if (existsSync29(join26(homedir5(), ".codex")) || existsSync29(configPath2())) {
       return { installed: true, note: "Found ~/.codex/" };
     }
     return { installed: false };
@@ -29551,8 +29681,8 @@ var codexConnector = {
       next += `
 `;
     next += buildSection(args.name, args.url);
-    mkdirSync15(dirname10(path), { recursive: true });
-    writeFileSync15(path, next, "utf-8");
+    mkdirSync16(dirname11(path), { recursive: true });
+    writeFileSync16(path, next, "utf-8");
     return { added: !conflict, conflict };
   },
   async remove(args) {
@@ -29562,7 +29692,7 @@ var codexConnector = {
       const range = findSectionRange(existing, args.name);
       if (range) {
         const next = existing.slice(0, range.start) + existing.slice(range.end);
-        writeFileSync15(path, next, "utf-8");
+        writeFileSync16(path, next, "utf-8");
       }
     }
     const restored = restoreFromBackup({
@@ -29583,11 +29713,11 @@ var codexConnector = {
 };
 
 // src/lib/dev/agent-connectors/continue.ts
-import { existsSync as existsSync30, unlinkSync as unlinkSync4, writeFileSync as writeFileSync16 } from "node:fs";
+import { existsSync as existsSync30, unlinkSync as unlinkSync4, writeFileSync as writeFileSync17 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 function configPath3() {
-  return join26(homedir6(), ".continue", "config.json");
+  return join27(homedir6(), ".continue", "config.json");
 }
 function isContinueServerEntry(value) {
   return Boolean(value && typeof value === "object" && typeof value.name === "string");
@@ -29598,7 +29728,7 @@ var continueConnector = {
   hotkey: "n",
   describeLocation: () => configPath3(),
   async detect() {
-    const dir = join26(homedir6(), ".continue");
+    const dir = join27(homedir6(), ".continue");
     if (existsSync30(dir) || existsSync30(configPath3())) {
       return { installed: true, note: "Found ~/.continue/" };
     }
@@ -29647,7 +29777,7 @@ var continueConnector = {
           try {
             unlinkSync4(path);
           } catch {
-            writeFileSync16(path, `{}
+            writeFileSync17(path, `{}
 `, "utf-8");
           }
         }
@@ -29658,11 +29788,11 @@ var continueConnector = {
 };
 
 // src/lib/dev/agent-connectors/cursor.ts
-import { existsSync as existsSync31, unlinkSync as unlinkSync5, writeFileSync as writeFileSync17 } from "node:fs";
+import { existsSync as existsSync31, unlinkSync as unlinkSync5, writeFileSync as writeFileSync18 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 function globalConfigPath() {
-  return join27(homedir7(), ".cursor", "mcp.json");
+  return join28(homedir7(), ".cursor", "mcp.json");
 }
 var cursorConnector = {
   id: "cursor",
@@ -29670,8 +29800,8 @@ var cursorConnector = {
   hotkey: "u",
   describeLocation: () => globalConfigPath(),
   async detect() {
-    const cursorDir = join27(homedir7(), ".cursor");
-    const macAppSupport = join27(homedir7(), "Library", "Application Support", "Cursor");
+    const cursorDir = join28(homedir7(), ".cursor");
+    const macAppSupport = join28(homedir7(), "Library", "Application Support", "Cursor");
     if (existsSync31(cursorDir) || existsSync31(macAppSupport)) {
       return { installed: true, note: "Found Cursor config dir" };
     }
@@ -29720,7 +29850,7 @@ var cursorConnector = {
           try {
             unlinkSync5(path);
           } catch {
-            writeFileSync17(path, `{}
+            writeFileSync18(path, `{}
 `, "utf-8");
           }
         }
@@ -29731,30 +29861,30 @@ var cursorConnector = {
 };
 
 // src/lib/dev/agent-connectors/vscode-copilot.ts
-import { existsSync as existsSync32, unlinkSync as unlinkSync6, writeFileSync as writeFileSync18 } from "node:fs";
+import { existsSync as existsSync32, unlinkSync as unlinkSync6, writeFileSync as writeFileSync19 } from "node:fs";
 import { homedir as homedir8, platform as platform4 } from "node:os";
-import { join as join28, resolve as resolve7 } from "node:path";
+import { join as join29, resolve as resolve8 } from "node:path";
 function userLevelConfigPath() {
   const home = homedir8();
   const p2 = platform4();
   if (p2 === "darwin")
-    return join28(home, "Library", "Application Support", "Code", "User", "mcp.json");
+    return join29(home, "Library", "Application Support", "Code", "User", "mcp.json");
   if (p2 === "win32") {
-    const appData = process.env["APPDATA"] ?? join28(home, "AppData", "Roaming");
-    return join28(appData, "Code", "User", "mcp.json");
+    const appData = process.env["APPDATA"] ?? join29(home, "AppData", "Roaming");
+    return join29(appData, "Code", "User", "mcp.json");
   }
-  const xdg = process.env["XDG_CONFIG_HOME"] ?? join28(home, ".config");
-  return join28(xdg, "Code", "User", "mcp.json");
+  const xdg = process.env["XDG_CONFIG_HOME"] ?? join29(home, ".config");
+  return join29(xdg, "Code", "User", "mcp.json");
 }
 function isHomeDir(cwd) {
-  return resolve7(cwd) === resolve7(homedir8());
+  return resolve8(cwd) === resolve8(homedir8());
 }
 function hasWorkspaceVscode(cwd) {
-  return existsSync32(join28(cwd, ".vscode"));
+  return existsSync32(join29(cwd, ".vscode"));
 }
 function configPath4(cwd) {
   if (!isHomeDir(cwd) && hasWorkspaceVscode(cwd)) {
-    return join28(cwd, ".vscode", "mcp.json");
+    return join29(cwd, ".vscode", "mcp.json");
   }
   return userLevelConfigPath();
 }
@@ -29816,7 +29946,7 @@ var vscodeCopilotConnector = {
           try {
             unlinkSync6(path);
           } catch {
-            writeFileSync18(path, `{}
+            writeFileSync19(path, `{}
 `, "utf-8");
           }
         }
@@ -29960,7 +30090,7 @@ function parseGraceMs(value, fallbackMs) {
   return Math.round(n * 1000);
 }
 function resolveSpecPath(cwd, raw) {
-  return isAbsolute3(raw) ? raw : resolve8(cwd, raw);
+  return isAbsolute4(raw) ? raw : resolve9(cwd, raw);
 }
 function buildConnectionName(serverId) {
   const slug = serverId.toLowerCase().replace(/[^a-z0-9]+/g, "-").slice(0, 24) || "mcp-server";
@@ -31062,11 +31192,11 @@ async function confirmRollback(deploymentId) {
 // src/commands/doctor.ts
 import { existsSync as existsSync35, statSync as statSync6, readFileSync as readFileSync19 } from "node:fs";
 import { homedir as homedir9, platform as platform6 } from "node:os";
-import { join as join30, delimiter as delimiter3 } from "node:path";
+import { join as join31, delimiter as delimiter3 } from "node:path";
 
 // src/lib/version-check.ts
-import { existsSync as existsSync34, mkdirSync as mkdirSync16, readFileSync as readFileSync18, writeFileSync as writeFileSync19 } from "node:fs";
-import { join as join29 } from "node:path";
+import { existsSync as existsSync34, mkdirSync as mkdirSync17, readFileSync as readFileSync18, writeFileSync as writeFileSync20 } from "node:fs";
+import { join as join30 } from "node:path";
 var CACHE_TTL_MS = 24 * 60 * 60 * 1000;
 var FETCH_TIMEOUT_MS2 = 2000;
 var REGISTRY_URL = "https://registry.npmjs.org/@mcpcloud/cli/latest";
@@ -31074,7 +31204,7 @@ function cacheDir() {
   return configDir();
 }
 function cacheFile() {
-  return join29(cacheDir(), "version-check.json");
+  return join30(cacheDir(), "version-check.json");
 }
 function readCache() {
   if (!existsSync34(cacheFile()))
@@ -31091,8 +31221,8 @@ function readCache() {
 function writeCache(entry) {
   try {
     if (!existsSync34(cacheDir()))
-      mkdirSync16(cacheDir(), { recursive: true, mode: 448 });
-    writeFileSync19(cacheFile(), JSON.stringify(entry, null, 2), { mode: 384 });
+      mkdirSync17(cacheDir(), { recursive: true, mode: 448 });
+    writeFileSync20(cacheFile(), JSON.stringify(entry, null, 2), { mode: 384 });
   } catch {}
 }
 function compareVersions(a, b2) {
@@ -31203,7 +31333,7 @@ function checkNode() {
 }
 function checkConfigFile() {
   const t0 = Date.now();
-  const path = join30(homedir9(), ".mcpcloud", "config.json");
+  const path = join31(homedir9(), ".mcpcloud", "config.json");
   if (!existsSync35(path)) {
     return {
       name: "Config file",
@@ -31357,7 +31487,7 @@ function checkClaudeCli() {
   for (const dir of PATH.split(delimiter3)) {
     if (!dir)
       continue;
-    const candidate = join30(dir, exe);
+    const candidate = join31(dir, exe);
     if (existsSync35(candidate)) {
       return {
         name: "claude CLI",
@@ -31697,10 +31827,10 @@ function prompt2(question) {
     throw new Error("Interactive prompts are disabled in CI mode. Pass --org / --project / --name explicitly or run `mcp init` outside CI.");
   }
   const rl = createInterface3({ input: process.stdin, output: process.stderr });
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     rl.question(question, (answer) => {
       rl.close();
-      resolve9(answer.trim());
+      resolve10(answer.trim());
     });
   });
 }
@@ -32312,6 +32442,9 @@ function invokeResultToJson3(result) {
   };
 }
 
+// src/commands/marketplace.ts
+import { readFile } from "node:fs/promises";
+
 // src/lib/resolve-marketplace.ts
 var ARTIFACT_KIND = {
   label: "artifact",
@@ -32563,14 +32696,14 @@ function registerMarketplaceCommands(program2) {
     printSuccess(`Forked ${c.bold(data.fork.artifactType)} → ${data.fork.forkedId} (draft).`);
     printStep(data.fork.artifactType === "server" ? `Iterate: \`mcp dev\` then \`mcp servers deploy ${data.fork.forkedId} --wait\`.` : `Iterate on skill ${data.fork.forkedId} then \`mcp skills deploy\`.`);
   }));
-  marketplace.command("publish <server|skill>").description("Publish a deployed server or a versioned skill to the registry (requires org admin)").requiredOption("--type <type>", "Artifact type: server | skill").requiredOption("--project <project>", "The artifact's project (id or name)").option("--semver <semver>", "Version to publish (required for servers; skills use their current version)").option("--visibility <visibility>", "public (marketplace) | private (your org only). Default public.", "public").option("--changelog <text>", "Optional changelog for this version").option("--org <organizationId>", "Organization ID").addHelpText("after", [
+  marketplace.command("publish <server|skill>").description("Publish a deployed server or a versioned skill to the registry (requires org admin)").requiredOption("--type <type>", "Artifact type: server | skill").requiredOption("--project <project>", "The artifact's project (id or name)").option("--semver <semver>", "Version to publish (required for servers; skills use their current version)").option("--visibility <visibility>", "public (marketplace) | private (your org only). Default public.", "public").option("--changelog <text>", "Changelog for this version. Required for every version after the first.").option("--readme <path>", "Path to a markdown README for the listing. Required on first publish; omit later to keep the published one.").option("--org <organizationId>", "Organization ID").addHelpText("after", [
     "",
     "Notes:",
     "  Servers must be successfully deployed before publishing. Publishing to",
     "  the public marketplace or a private-org registry requires the Pro plan.",
     "",
     "Examples:",
-    "  $ mcp marketplace publish srv_123 --type server --project proj_1 --semver 1.0.0",
+    "  $ mcp marketplace publish srv_123 --type server --project proj_1 --semver 1.0.0 --readme ./README.md",
     "  $ mcp marketplace publish skill_9 --type skill --project proj_1 --visibility private"
   ].join(`
 `)).action(runAction(async (id, opts) => {
@@ -32585,12 +32718,14 @@ function registerMarketplaceCommands(program2) {
     }
     const access = visibility === "private" ? "privateOrg" : "public";
     const projectId = await resolveProjectId(opts.project, orgId);
+    const readmeContent = opts.readme ? await readFile(opts.readme, "utf8") : null;
     const body = {
       organizationId: orgId,
       artifactType: type,
       projectId,
       access,
-      ...opts.changelog ? { changelog: opts.changelog } : {}
+      ...opts.changelog ? { changelog: opts.changelog } : {},
+      ...readmeContent ? { readmeContent } : {}
     };
     if (type === "server") {
       if (!opts.semver) {
@@ -33200,24 +33335,24 @@ function registerConnectionsCommands(program2) {
 import { spawn as spawn7 } from "node:child_process";
 import {
   existsSync as existsSync36,
-  mkdirSync as mkdirSync17,
+  mkdirSync as mkdirSync18,
   readdirSync as readdirSync4,
   readFileSync as readFileSync20,
   rmSync as rmSync3,
   statSync as statSync7
 } from "node:fs";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 import { pathToFileURL } from "node:url";
 function pluginsDir() {
-  return join31(configDir(), "plugins");
+  return join32(configDir(), "plugins");
 }
 function ensureDir2() {
   const dir = pluginsDir();
   if (!existsSync36(dir))
-    mkdirSync17(dir, { recursive: true, mode: 448 });
+    mkdirSync18(dir, { recursive: true, mode: 448 });
 }
 function readManifestFromPackageDir(packageDir) {
-  const pkgPath = join31(packageDir, "package.json");
+  const pkgPath = join32(packageDir, "package.json");
   if (!existsSync36(pkgPath))
     return null;
   let pkg;
@@ -33229,7 +33364,7 @@ function readManifestFromPackageDir(packageDir) {
   if (!pkg.name)
     return null;
   const relEntry = pkg.mcpsh?.register ?? pkg.mcp?.register ?? pkg.main ?? "index.js";
-  const entry = join31(packageDir, relEntry);
+  const entry = join32(packageDir, relEntry);
   if (!existsSync36(entry))
     return null;
   return {
@@ -33245,7 +33380,7 @@ function listInstalledPlugins() {
     return [];
   const out = [];
   for (const entry of readdirSync4(dir)) {
-    const full = join31(dir, entry);
+    const full = join32(dir, entry);
     let s;
     try {
       s = statSync7(full);
@@ -33256,7 +33391,7 @@ function listInstalledPlugins() {
       continue;
     if (entry.startsWith("@")) {
       for (const child of readdirSync4(full)) {
-        const m2 = readManifestFromPackageDir(join31(full, child));
+        const m2 = readManifestFromPackageDir(join32(full, child));
         if (m2)
           out.push(m2);
       }
@@ -33291,15 +33426,15 @@ async function loadPlugins(program2) {
 }
 var PACKAGE_SPEC_PATTERN = /^(@[a-z0-9~-][\w.~-]*\/)?[a-z0-9~-][\w.~-]*(@[-\w.^~><=*+|]+)?$/i;
 function runNpm(args, cwd) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     const isWindows = process.platform === "win32";
     const child = spawn7(isWindows ? "npm.cmd" : "npm", args, {
       shell: isWindows,
       cwd,
       stdio: "inherit"
     });
-    child.on("close", (code) => resolve9(code ?? 1));
-    child.on("error", () => resolve9(1));
+    child.on("close", (code) => resolve10(code ?? 1));
+    child.on("error", () => resolve10(1));
   });
 }
 async function installPlugin(packageSpec) {
@@ -33320,12 +33455,12 @@ async function installPlugin(packageSpec) {
   if (code !== 0) {
     throw new Error(`npm install ${packageSpec} exited with code ${code}.`);
   }
-  const nm = join31(dir, "node_modules");
+  const nm = join32(dir, "node_modules");
   if (!existsSync36(nm)) {
     throw new Error(`npm install ran but produced no node_modules under ${dir}.`);
   }
   const baseName = packageSpec.replace(/@[^@/]+$/, "");
-  const candidatePath = baseName.startsWith("@") ? join31(nm, baseName.split("/")[0], baseName.split("/")[1] ?? "") : join31(nm, baseName);
+  const candidatePath = baseName.startsWith("@") ? join32(nm, baseName.split("/")[0], baseName.split("/")[1] ?? "") : join32(nm, baseName);
   const manifest = readManifestFromPackageDir(candidatePath);
   if (!manifest) {
     throw new Error(`Installed but could not read plugin manifest at ${candidatePath}.`);
@@ -33333,10 +33468,10 @@ async function installPlugin(packageSpec) {
   return { name: manifest.name, entry: manifest.entry };
 }
 function removePlugin(name) {
-  const nm = join31(pluginsDir(), "node_modules");
+  const nm = join32(pluginsDir(), "node_modules");
   if (!existsSync36(nm))
     return false;
-  const target = name.startsWith("@") ? join31(nm, name.split("/")[0], name.split("/")[1] ?? "") : join31(nm, name);
+  const target = name.startsWith("@") ? join32(nm, name.split("/")[0], name.split("/")[1] ?? "") : join32(nm, name);
   if (!existsSync36(target))
     return false;
   rmSync3(target, { recursive: true, force: true });
@@ -33344,7 +33479,7 @@ function removePlugin(name) {
 }
 function listInstalledPluginsCombined() {
   const direct = listInstalledPlugins();
-  const nm = join31(pluginsDir(), "node_modules");
+  const nm = join32(pluginsDir(), "node_modules");
   if (!existsSync36(nm))
     return direct;
   const seen = new Set(direct.map((p2) => p2.name));
@@ -33352,7 +33487,7 @@ function listInstalledPluginsCombined() {
   for (const entry of readdirSync4(nm)) {
     if (entry === ".bin" || entry === ".package-lock.json")
       continue;
-    const full = join31(nm, entry);
+    const full = join32(nm, entry);
     let s;
     try {
       s = statSync7(full);
@@ -33363,7 +33498,7 @@ function listInstalledPluginsCombined() {
       continue;
     if (entry.startsWith("@")) {
       for (const child of readdirSync4(full)) {
-        const m2 = readManifestFromPackageDir(join31(full, child));
+        const m2 = readManifestFromPackageDir(join32(full, child));
         if (m2 && !seen.has(m2.name)) {
           seen.add(m2.name);
           out.push(m2);
@@ -33823,7 +33958,7 @@ function clipboardCandidatesFor(platform7, waylandDisplay) {
   return linux;
 }
 async function defaultIsExecutable(binary) {
-  return await new Promise((resolve9) => {
+  return await new Promise((resolve10) => {
     const isWin = process.platform === "win32";
     const cmd = isWin ? "where" : "command";
     const args = isWin ? [binary] : ["-v", binary];
@@ -33831,8 +33966,8 @@ async function defaultIsExecutable(binary) {
       shell: !isWin,
       stdio: "ignore"
     });
-    child.on("error", () => resolve9(false));
-    child.on("exit", (code) => resolve9(code === 0));
+    child.on("error", () => resolve10(false));
+    child.on("exit", (code) => resolve10(code === 0));
   });
 }
 async function detectClipboard(probe) {
@@ -33854,7 +33989,7 @@ async function copyToClipboard(text, probe) {
     };
   }
   const spawnImpl = probe?.spawnImpl ?? spawn8;
-  return await new Promise((resolve9) => {
+  return await new Promise((resolve10) => {
     const child = spawnImpl(candidate.binary, candidate.args, {
       stdio: ["pipe", "ignore", "pipe"]
     });
@@ -33863,7 +33998,7 @@ async function copyToClipboard(text, probe) {
       stderr += chunk.toString("utf-8");
     });
     child.on("error", (err) => {
-      resolve9({
+      resolve10({
         kind: "failed",
         binary: candidate.binary,
         message: err instanceof Error ? err.message : String(err)
@@ -33871,9 +34006,9 @@ async function copyToClipboard(text, probe) {
     });
     child.on("exit", (code) => {
       if (code === 0) {
-        resolve9({ kind: "ok", binary: candidate.binary });
+        resolve10({ kind: "ok", binary: candidate.binary });
       } else {
-        resolve9({
+        resolve10({
           kind: "failed",
           binary: candidate.binary,
           message: stderr.trim() || `${candidate.binary} exited with status ${code ?? "?"}`
@@ -33883,7 +34018,7 @@ async function copyToClipboard(text, probe) {
     try {
       child.stdin?.end(text);
     } catch (err) {
-      resolve9({
+      resolve10({
         kind: "failed",
         binary: candidate.binary,
         message: err instanceof Error ? err.message : String(err)
@@ -34954,11 +35089,11 @@ function displayValueFor(field, value) {
 // src/lib/tui/state-store.ts
 import {
   existsSync as existsSync37,
-  mkdirSync as mkdirSync18,
+  mkdirSync as mkdirSync19,
   readFileSync as readFileSync21,
-  writeFileSync as writeFileSync20
+  writeFileSync as writeFileSync21
 } from "node:fs";
-import { join as join32 } from "node:path";
+import { join as join33 } from "node:path";
 var ALL_TABS = [
   "servers",
   "projects",
@@ -34968,7 +35103,7 @@ var ALL_TABS = [
   "devSessions"
 ];
 function tuiStateFile() {
-  return join32(configDir(), "tui-state.json");
+  return join33(configDir(), "tui-state.json");
 }
 function isTab(v2) {
   return typeof v2 === "string" && ALL_TABS.includes(v2);
@@ -35046,9 +35181,9 @@ function readTuiState() {
 function writeTuiState(state) {
   try {
     if (!existsSync37(configDir())) {
-      mkdirSync18(configDir(), { recursive: true, mode: 448 });
+      mkdirSync19(configDir(), { recursive: true, mode: 448 });
     }
-    writeFileSync20(tuiStateFile(), JSON.stringify(state, null, 2), {
+    writeFileSync21(tuiStateFile(), JSON.stringify(state, null, 2), {
       encoding: "utf-8",
       mode: 384
     });
@@ -37053,7 +37188,7 @@ function registerUiCommand(program2) {
       }
       return false;
     };
-    await new Promise((resolve9) => {
+    await new Promise((resolve10) => {
       const flushAndExit = () => {
         try {
           if (persistTimer) {
@@ -37063,7 +37198,7 @@ function registerUiCommand(program2) {
           writeTuiState(snapshotForPersist());
         } catch {}
         shutdown(handles);
-        resolve9();
+        resolve10();
       };
       const executePaletteCommand = (id) => {
         if (id.startsWith("tab:")) {
@@ -37672,7 +37807,7 @@ function registerUiCommand(program2) {
 
 // src/commands/update.ts
 import { spawn as spawn9 } from "node:child_process";
-import { dirname as dirname11 } from "node:path";
+import { dirname as dirname12 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function detectInstallContext() {
   const override = process.env["MCPSH_PACKAGE_MANAGER"]?.trim().toLowerCase();
@@ -37685,7 +37820,7 @@ function detectInstallContext() {
   }
   const here = (() => {
     try {
-      return dirname11(fileURLToPath2(import.meta.url));
+      return dirname12(fileURLToPath2(import.meta.url));
     } catch {
       return process.argv[1] ?? "";
     }
@@ -37733,10 +37868,10 @@ function buildCommand(manager) {
   }
 }
 function runShell(command) {
-  return new Promise((resolve9) => {
+  return new Promise((resolve10) => {
     const child = spawn9(command, { shell: true, stdio: "inherit" });
-    child.on("close", (code) => resolve9(code ?? 1));
-    child.on("error", () => resolve9(1));
+    child.on("close", (code) => resolve10(code ?? 1));
+    child.on("error", () => resolve10(1));
   });
 }
 function registerUpdateCommand(program2) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcpcloud/cli",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "The official CLI for MCPCloud — manage projects, servers, skills, and API keys from the terminal",
   "type": "module",
   "bin": {