@neurynae/toolcairn-mcp 0.8.3 → 0.8.5

package/bin/toolpilot-mcp.js

@@ -1,5 +1,24 @@
 #!/usr/bin/env node
-// Entry point for `npx @toolpilot/mcp` or `toolpilot-mcp` CLI.
-// Forces TOOLPILOT_MODE=production so the server uses the HTTP bridge.
+// Entry point for `npx @neurynae/toolcairn-mcp` or `toolcairn-mcp` CLI.
+//
+// Subcommands:
+//   (none)       — start the MCP server (default)
+//   scan [dir]   — scan project dependencies and check ToolCairn health status
+//   scan --json  — same but output raw JSON
+//
 process.env.TOOLPILOT_MODE = process.env.TOOLPILOT_MODE ?? 'production';
-import('../dist/index.js');
+
+const args = process.argv.slice(2);
+
+if (args[0] === 'scan') {
+  // Stack scanner CLI — does NOT start the MCP server
+  import('../dist/cli/scan.js').then(({ runScan }) => {
+    return runScan(args.slice(1));
+  }).catch((err) => {
+    console.error('scan failed:', err.message);
+    process.exit(1);
+  });
+} else {
+  // Default: start the MCP server
+  import('../dist/index.js');
+}

package/dist/index.js

@@ -1,10 +1,47 @@
 import { createRequire as __nodeCreateRequire } from 'module'; const require = __nodeCreateRequire(import.meta.url);
-import {
-  __commonJS,
-  __require,
-  __toESM,
-  init_esm_shims
-} from "./chunk-B74KV6FC.js";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
+var __commonJS = (cb, mod) => function __require2() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// ../../node_modules/.pnpm/tsup@8.5.1_postcss@8.5.8_tsx@4.21.0_typescript@5.9.3/node_modules/tsup/assets/esm_shims.js
+import path from "path";
+import { fileURLToPath } from "url";
+var init_esm_shims = __esm({
+  "../../node_modules/.pnpm/tsup@8.5.1_postcss@8.5.8_tsx@4.21.0_typescript@5.9.3/node_modules/tsup/assets/esm_shims.js"() {
+    "use strict";
+  }
+});
 
 // ../../packages/config/dist/index.js
 var require_dist = __commonJS({
@@ -15,34 +52,14 @@ var require_dist = __commonJS({
     exports.config = void 0;
     var zod_1 = __require("zod");
     var configSchema = zod_1.z.object({
-      // ── Memgraph ──────────────────────────────────────────────────────────────
-      MEMGRAPH_URL: zod_1.z.string().default("bolt://localhost:7687"),
-      MEMGRAPH_USER: zod_1.z.string().default(""),
-      MEMGRAPH_PASSWORD: zod_1.z.string().default(""),
-      // ── Qdrant ────────────────────────────────────────────────────────────────
-      QDRANT_URL: zod_1.z.string().default("http://localhost:6333"),
-      QDRANT_API_KEY: zod_1.z.string().optional(),
-      // ── PostgreSQL ────────────────────────────────────────────────────────────
-      DATABASE_URL: zod_1.z.string().default("postgresql://toolpilot:toolpilot@localhost:5432/toolpilot"),
-      // ── Redis ─────────────────────────────────────────────────────────────────
-      REDIS_URL: zod_1.z.string().default("redis://localhost:6379"),
-      // ── Nomic Embed Code ──────────────────────────────────────────────────────
-      NOMIC_API_KEY: zod_1.z.string().optional(),
-      // ── GitHub (Indexer) ──────────────────────────────────────────────────────
-      GITHUB_TOKEN: zod_1.z.string().optional(),
       // ── MCP Server ────────────────────────────────────────────────────────────
       MCP_SERVER_PORT: zod_1.z.coerce.number().int().positive().default(3001),
       MCP_SERVER_HOST: zod_1.z.string().default("0.0.0.0"),
-      // ── Web App ───────────────────────────────────────────────────────────────
-      NEXT_PUBLIC_APP_URL: zod_1.z.string().default("http://localhost:3000"),
-      ADMIN_SECRET: zod_1.z.string().default("change-me-in-production"),
       // ── Deployment Mode ───────────────────────────────────────────────────────
       /** dev: direct Docker DB connections | production: HTTP client to remote API */
       TOOLPILOT_MODE: zod_1.z.enum(["dev", "staging", "production"]).default("dev"),
-      /** URL of the ToolPilot HTTP API (used when TOOLPILOT_MODE=production) */
+      /** URL of the ToolCairn HTTP API (used when TOOLPILOT_MODE=production) */
       TOOLPILOT_API_URL: zod_1.z.string().default("https://api.neurynae.com"),
-      /** Secret shared between Cloudflare Worker and the API origin server */
-      ORIGIN_SECRET: zod_1.z.string().optional(),
       // ── General ───────────────────────────────────────────────────────────────
       NODE_ENV: zod_1.z.enum(["development", "test", "production"]).default("development"),
       LOG_LEVEL: zod_1.z.enum(["fatal", "error", "warn", "info", "debug", "trace"]).default("info")
@@ -62,7 +79,7 @@ var require_dist = __commonJS({
 
 // src/index.prod.ts
 init_esm_shims();
-var import_config3 = __toESM(require_dist(), 1);
+var import_config4 = __toESM(require_dist(), 1);
 import { McpServer as McpServer2 } from "@modelcontextprotocol/sdk/server/mcp.js";
 
 // ../../packages/remote/dist/index.js
@@ -132,9 +149,9 @@ var ToolCairnClient = class {
     }
   }
   // ── Private ──────────────────────────────────────────────────────────────
-  async post(path, body) {
+  async post(path2, body) {
     try {
-      const res = await this.rawPost(path, body);
+      const res = await this.rawPost(path2, body);
       const data = await res.json();
       if (data && typeof data === "object" && "content" in data) {
         return data;
@@ -159,7 +176,7 @@ var ToolCairnClient = class {
       };
     }
   }
-  rawPost(path, body) {
+  rawPost(path2, body) {
     const headers = {
       "Content-Type": "application/json",
       "X-ToolCairn-Key": this.apiKey,
@@ -168,7 +185,7 @@ var ToolCairnClient = class {
     if (this.accessToken) {
       headers.Authorization = `Bearer ${this.accessToken}`;
     }
-    return fetch(`${this.baseUrl}${path}`, {
+    return fetch(`${this.baseUrl}${path2}`, {
       method: "POST",
       headers,
       body: JSON.stringify(body),
@@ -857,13 +874,13 @@ async function createIfAbsent(filePath, content, label) {
 
 // src/server.prod.ts
 init_esm_shims();
-var import_config = __toESM(require_dist(), 1);
+var import_config2 = __toESM(require_dist(), 1);
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
-// ../../packages/tools/dist/local.js
+// ../../packages/tools-local/dist/index.js
 init_esm_shims();
 
-// ../../packages/tools/dist/schemas.js
+// ../../packages/tools-local/dist/schemas.js
 init_esm_shims();
 import { z } from "zod";
 var searchToolsSchema = {
@@ -988,7 +1005,7 @@ var refineRequirementSchema = {
   }).optional()
 };
 
-// ../../packages/tools/dist/utils.js
+// ../../packages/tools-local/dist/utils.js
 init_esm_shims();
 function okResult(data) {
   return {
@@ -1002,10 +1019,10 @@ function errResult(error, message) {
   };
 }
 
-// ../../packages/tools/dist/handlers/classify-prompt.js
+// ../../packages/tools-local/dist/handlers/classify-prompt.js
 init_esm_shims();
 import pino2 from "pino";
-var logger2 = pino2({ name: "@toolpilot/tools:classify-prompt" });
+var logger2 = pino2({ name: "@toolcairn/tools:classify-prompt" });
 var TOOL_REQUIRED_CLASSIFICATIONS = [
   "tool_discovery",
   "stack_building",
@@ -1064,16 +1081,16 @@ Respond with ONLY 0 or 1.`;
   }
 }
 
-// ../../packages/tools/dist/handlers/toolpilot-init.js
+// ../../packages/tools-local/dist/handlers/toolcairn-init.js
 init_esm_shims();
 import pino3 from "pino";
 
-// ../../packages/tools/dist/templates/agent-instructions.js
+// ../../packages/tools-local/dist/templates/agent-instructions.js
 init_esm_shims();
 var TOOLPILOT_MCP_ENTRY = {
   toolpilot: {
     command: "npx",
-    args: ["-y", "@toolpilot/mcp@latest"]
+    args: ["-y", "@toolcairn/mcp@latest"]
   }
 };
 var CORE_RULES = `
@@ -1204,13 +1221,13 @@ function getOpenCodeMcpEntry(serverPath) {
   return {
     toolpilot: {
       type: "local",
-      command: resolvedPath ? ["node", resolvedPath] : ["npx", "-y", "@toolpilot/mcp@latest"],
+      command: resolvedPath ? ["node", resolvedPath] : ["npx", "-y", "@toolcairn/mcp@latest"],
       enabled: true
     }
   };
 }
 
-// ../../packages/tools/dist/templates/generate-tracker.js
+// ../../packages/tools-local/dist/templates/generate-tracker.js
 init_esm_shims();
 function generateTrackerHtml2(eventsPath) {
   return `<!DOCTYPE html>
@@ -1615,9 +1632,9 @@ if (!EVENTS_PATH || EVENTS_PATH === 'null') {
 </html>`;
 }
 
-// ../../packages/tools/dist/handlers/toolpilot-init.js
-var logger3 = pino3({ name: "@toolpilot/tools:toolpilot-init" });
-async function handleToolpilotInit(args) {
+// ../../packages/tools-local/dist/handlers/toolcairn-init.js
+var logger3 = pino3({ name: "@toolcairn/tools:toolpilot-init" });
+async function handleToolcairnInit(args) {
   try {
     logger3.info({ agent: args.agent, project_root: args.project_root }, "toolpilot_init called");
     const instructions = getInstructionsForAgent(args.agent);
@@ -1702,10 +1719,10 @@ async function handleToolpilotInit(args) {
   }
 }
 
-// ../../packages/tools/dist/handlers/init-project-config.js
+// ../../packages/tools-local/dist/handlers/init-project-config.js
 init_esm_shims();
 import pino4 from "pino";
-var logger4 = pino4({ name: "@toolpilot/tools:init-project-config" });
+var logger4 = pino4({ name: "@toolcairn/tools:init-project-config" });
 async function handleInitProjectConfig(args) {
   try {
     logger4.info({ project: args.project_name }, "init_project_config called");
@@ -1718,7 +1735,7 @@ async function handleInitProjectConfig(args) {
       chosen_reason: "Auto-detected from project files during toolpilot_init",
       alternatives_considered: []
     }));
-    const config4 = {
+    const config5 = {
       version: "1.0",
       project: {
         name: args.project_name,
@@ -1738,7 +1755,7 @@ async function handleInitProjectConfig(args) {
         }
       ]
     };
-    const config_json = JSON.stringify(config4, null, 2);
+    const config_json = JSON.stringify(config5, null, 2);
     return okResult({
       config_json,
       file_path: ".toolpilot/config.json",
@@ -1752,10 +1769,10 @@ async function handleInitProjectConfig(args) {
   }
 }
 
-// ../../packages/tools/dist/handlers/read-project-config.js
+// ../../packages/tools-local/dist/handlers/read-project-config.js
 init_esm_shims();
 import pino5 from "pino";
-var logger5 = pino5({ name: "@toolpilot/tools:read-project-config" });
+var logger5 = pino5({ name: "@toolcairn/tools:read-project-config" });
 var STALENESS_THRESHOLD_DAYS = 90;
 function daysSince(isoDate) {
   return (Date.now() - new Date(isoDate).getTime()) / (1e3 * 60 * 60 * 24);
@@ -1763,18 +1780,18 @@ function daysSince(isoDate) {
 async function handleReadProjectConfig(args) {
   try {
     logger5.info("read_project_config called");
-    let config4;
+    let config5;
     try {
-      config4 = JSON.parse(args.config_content);
+      config5 = JSON.parse(args.config_content);
     } catch {
       return errResult("parse_error", "config_content is not valid JSON");
     }
-    if (config4.version !== "1.0") {
-      return errResult("version_error", `Unsupported config version: ${config4.version}`);
+    if (config5.version !== "1.0") {
+      return errResult("version_error", `Unsupported config version: ${config5.version}`);
     }
-    const confirmedToolNames = config4.tools.confirmed.map((t) => t.name);
-    const pendingToolNames = config4.tools.pending_evaluation.map((t) => t.name);
-    const staleTools = config4.tools.confirmed.filter((t) => {
+    const confirmedToolNames = config5.tools.confirmed.map((t) => t.name);
+    const pendingToolNames = config5.tools.pending_evaluation.map((t) => t.name);
+    const staleTools = config5.tools.confirmed.filter((t) => {
       const date = t.last_verified ?? t.chosen_at ?? t.confirmed_at;
       return date ? daysSince(date) > STALENESS_THRESHOLD_DAYS : true;
     }).map((t) => {
@@ -1787,10 +1804,10 @@ async function handleReadProjectConfig(args) {
         recommendation: "Consider using check_issue to verify no new known issues"
       };
     });
-    const non_oss_tools = config4.tools.confirmed.filter((t) => t.source === "non_oss").map((t) => t.name);
-    const toolpilot_indexed_tools = config4.tools.confirmed.filter((t) => t.source === "toolpilot").map((t) => t.name);
+    const non_oss_tools = config5.tools.confirmed.filter((t) => t.source === "non_oss").map((t) => t.name);
+    const toolpilot_indexed_tools = config5.tools.confirmed.filter((t) => t.source === "toolpilot").map((t) => t.name);
     return okResult({
-      project: config4.project,
+      project: config5.project,
       confirmed_tools: confirmedToolNames,
       pending_tools: pendingToolNames,
       non_oss_tools,
@@ -1798,9 +1815,9 @@ async function handleReadProjectConfig(args) {
       stale_tools: staleTools,
       total_confirmed: confirmedToolNames.length,
       total_pending: pendingToolNames.length,
-      last_audit_entry: config4.audit_log.at(-1) ?? null,
+      last_audit_entry: config5.audit_log.at(-1) ?? null,
       agent_instructions: [
-        `Project: ${config4.project.name} (${config4.project.language}${config4.project.framework ? `, ${config4.project.framework}` : ""})`,
+        `Project: ${config5.project.name} (${config5.project.language}${config5.project.framework ? `, ${config5.project.framework}` : ""})`,
         `Already confirmed tools: ${confirmedToolNames.join(", ") || "none"}`,
         "When recommending tools, skip any already in confirmed_tools.",
         non_oss_tools.length > 0 ? `Non-OSS tools in project (handle separately): ${non_oss_tools.join(", ")}` : "",
@@ -1813,16 +1830,16 @@ async function handleReadProjectConfig(args) {
   }
 }
 
-// ../../packages/tools/dist/handlers/update-project-config.js
+// ../../packages/tools-local/dist/handlers/update-project-config.js
 init_esm_shims();
 import pino6 from "pino";
-var logger6 = pino6({ name: "@toolpilot/tools:update-project-config" });
+var logger6 = pino6({ name: "@toolcairn/tools:update-project-config" });
 async function handleUpdateProjectConfig(args) {
   try {
     logger6.info({ action: args.action, tool: args.tool_name }, "update_project_config called");
-    let config4;
+    let config5;
     try {
-      config4 = JSON.parse(args.current_config);
+      config5 = JSON.parse(args.current_config);
     } catch {
       return errResult("parse_error", "current_config is not valid JSON");
     }
@@ -1830,8 +1847,8 @@ async function handleUpdateProjectConfig(args) {
     const data = args.data ?? {};
     switch (args.action) {
       case "add_tool": {
-        config4.tools.pending_evaluation = config4.tools.pending_evaluation.filter((t) => t.name !== args.tool_name);
-        if (!config4.tools.confirmed.some((t) => t.name === args.tool_name)) {
+        config5.tools.pending_evaluation = config5.tools.pending_evaluation.filter((t) => t.name !== args.tool_name);
+        if (!config5.tools.confirmed.some((t) => t.name === args.tool_name)) {
           const newTool = {
             name: args.tool_name,
             source: data.source ?? "toolpilot",
@@ -1843,9 +1860,9 @@ async function handleUpdateProjectConfig(args) {
             query_id: data.query_id,
             notes: data.notes
           };
-          config4.tools.confirmed.push(newTool);
+          config5.tools.confirmed.push(newTool);
         }
-        config4.audit_log.push({
+        config5.audit_log.push({
           action: "add_tool",
           tool: args.tool_name,
           timestamp: now,
@@ -1854,9 +1871,9 @@ async function handleUpdateProjectConfig(args) {
         break;
       }
       case "remove_tool": {
-        config4.tools.confirmed = config4.tools.confirmed.filter((t) => t.name !== args.tool_name);
-        config4.tools.pending_evaluation = config4.tools.pending_evaluation.filter((t) => t.name !== args.tool_name);
-        config4.audit_log.push({
+        config5.tools.confirmed = config5.tools.confirmed.filter((t) => t.name !== args.tool_name);
+        config5.tools.pending_evaluation = config5.tools.pending_evaluation.filter((t) => t.name !== args.tool_name);
+        config5.audit_log.push({
           action: "remove_tool",
           tool: args.tool_name,
           timestamp: now,
@@ -1865,22 +1882,22 @@ async function handleUpdateProjectConfig(args) {
         break;
       }
       case "update_tool": {
-        const idx = config4.tools.confirmed.findIndex((t) => t.name === args.tool_name);
+        const idx = config5.tools.confirmed.findIndex((t) => t.name === args.tool_name);
         if (idx === -1) {
           return errResult("not_found", `Tool "${args.tool_name}" not found in confirmed tools`);
         }
-        const existing = config4.tools.confirmed[idx];
+        const existing = config5.tools.confirmed[idx];
         if (!existing) {
           return errResult("not_found", `Tool "${args.tool_name}" not found`);
         }
-        config4.tools.confirmed[idx] = {
+        config5.tools.confirmed[idx] = {
           ...existing,
           ...data.version !== void 0 ? { version: data.version } : {},
           ...data.notes !== void 0 ? { notes: data.notes } : {},
           ...data.chosen_reason !== void 0 ? { chosen_reason: data.chosen_reason } : {},
           ...data.alternatives_considered !== void 0 ? { alternatives_considered: data.alternatives_considered } : {}
         };
-        config4.audit_log.push({
+        config5.audit_log.push({
           action: "update_tool",
           tool: args.tool_name,
           timestamp: now,
@@ -1889,15 +1906,15 @@ async function handleUpdateProjectConfig(args) {
         break;
       }
       case "add_evaluation": {
-        if (!config4.tools.pending_evaluation.some((t) => t.name === args.tool_name) && !config4.tools.confirmed.some((t) => t.name === args.tool_name)) {
+        if (!config5.tools.pending_evaluation.some((t) => t.name === args.tool_name) && !config5.tools.confirmed.some((t) => t.name === args.tool_name)) {
           const pending = {
             name: args.tool_name,
             category: data.category ?? "other",
             added_at: now
           };
-          config4.tools.pending_evaluation.push(pending);
+          config5.tools.pending_evaluation.push(pending);
         }
-        config4.audit_log.push({
+        config5.audit_log.push({
           action: "add_evaluation",
           tool: args.tool_name,
           timestamp: now,
@@ -1906,14 +1923,14 @@ async function handleUpdateProjectConfig(args) {
         break;
       }
     }
-    const updated_config_json = JSON.stringify(config4, null, 2);
+    const updated_config_json = JSON.stringify(config5, null, 2);
     return okResult({
       updated_config_json,
       file_path: ".toolpilot/config.json",
       action_applied: args.action,
       tool_name: args.tool_name,
-      confirmed_count: config4.tools.confirmed.length,
-      pending_count: config4.tools.pending_evaluation.length,
+      confirmed_count: config5.tools.confirmed.length,
+      pending_count: config5.tools.pending_evaluation.length,
       instructions: "Write updated_config_json to .toolpilot/config.json to persist this change."
     });
   } catch (e) {
@@ -1928,21 +1945,11 @@ import { z as z2 } from "zod";
 
 // src/middleware/event-logger.ts
 init_esm_shims();
+var import_config = __toESM(require_dist(), 1);
 import { appendFile, mkdir as mkdir3 } from "fs/promises";
 import { dirname } from "path";
 import pino7 from "pino";
 var logger7 = pino7({ name: "@toolcairn/mcp-server:event-logger" });
-var _prisma = null;
-async function getPrisma() {
-  if (!_prisma) {
-    try {
-      const mod = await import("./dist-LZ2PMHGT.js");
-      _prisma = new mod.PrismaClient();
-    } catch {
-    }
-  }
-  return _prisma;
-}
 function isTrackingEnabled() {
   return process.env.TOOLCAIRN_TRACKING_ENABLED !== "false";
 }
@@ -1989,23 +1996,26 @@ async function writeToFile(eventsPath, event) {
     logger7.warn({ err: e, path: eventsPath }, "Failed to write event to JSONL file");
   }
 }
-async function writeToPrisma(event) {
+async function sendToApi(event) {
   try {
-    const prisma = await getPrisma();
-    if (!prisma) return;
-    await prisma.mcpEvent.create({
-      data: {
-        id: event.id,
+    const creds = await loadCredentials();
+    if (!creds) return;
+    const headers = { "Content-Type": "application/json" };
+    if (creds.access_token) headers["Authorization"] = `Bearer ${creds.access_token}`;
+    if (creds.client_id) headers["X-ToolCairn-Key"] = creds.client_id;
+    await fetch(`${import_config.config.TOOLPILOT_API_URL}/v1/events`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify({
         tool_name: event.tool_name,
         query_id: event.query_id,
         duration_ms: event.duration_ms,
         status: event.status,
-        metadata: event.metadata ? JSON.parse(JSON.stringify(event.metadata)) : void 0,
-        created_at: new Date(event.created_at)
-      }
+        metadata: event.metadata
+      })
     });
   } catch (e) {
-    logger7.warn({ err: e }, "Failed to write McpEvent to Prisma");
+    logger7.debug({ err: e }, "Failed to send event to API \u2014 non-fatal");
   }
 }
 function withEventLogging(toolName, handler) {
@@ -2033,7 +2043,7 @@ function withEventLogging(toolName, handler) {
         metadata: result ? extractMetadata(toolName, result) : null,
         created_at: (/* @__PURE__ */ new Date()).toISOString()
       };
-      writeToPrisma(event).catch(() => {
+      sendToApi(event).catch(() => {
       });
       const eventsPath = getEventsPath();
       if (eventsPath) {
@@ -2096,7 +2106,7 @@ async function addToolsToServer(server) {
     throw new Error("ToolCairn: authentication required.");
   }
   const remote = new ToolCairnClient({
-    baseUrl: import_config.config.TOOLPILOT_API_URL,
+    baseUrl: import_config2.config.TOOLPILOT_API_URL,
     apiKey: creds.client_id,
     accessToken: creds.access_token
   });
@@ -2115,7 +2125,7 @@ async function addToolsToServer(server) {
       description: "Set up ToolCairn integration for the current project. Generates agent instruction content, MCP config entry, and project config initializer.",
       inputSchema: toolpilotInitSchema
     },
-    withEventLogging("toolcairn_init", async (args) => handleToolpilotInit(args))
+    withEventLogging("toolcairn_init", async (args) => handleToolcairnInit(args))
   );
   server.registerTool(
     "init_project_config",
@@ -2264,7 +2274,7 @@ async function addToolsToServer(server) {
         };
       }
       try {
-        const user = await startDeviceAuth(import_config.config.TOOLPILOT_API_URL);
+        const user = await startDeviceAuth(import_config2.config.TOOLPILOT_API_URL);
         return {
           content: [
             {
@@ -2299,7 +2309,7 @@ async function buildProdServer() {
 
 // src/transport.ts
 init_esm_shims();
-var import_config2 = __toESM(require_dist(), 1);
+var import_config3 = __toESM(require_dist(), 1);
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 function createTransport() {
@@ -2332,7 +2342,7 @@ async function main() {
         userCode = pending.user_code;
         logger9.info({ userCode }, "Resuming pending sign-in");
       } else {
-        const codeData = await requestDeviceCode(import_config3.config.TOOLPILOT_API_URL);
+        const codeData = await requestDeviceCode(import_config4.config.TOOLPILOT_API_URL);
         verificationUri = codeData.verification_uri;
         userCode = codeData.user_code;
         logger9.info({ userCode }, "New sign-in started");
@@ -2369,7 +2379,7 @@ Open the URL, sign in, and confirm the code shown. All 14 tools will appear auto
         ]
       })
     );
-    startDeviceAuth(import_config3.config.TOOLPILOT_API_URL).then(async () => {
+    startDeviceAuth(import_config4.config.TOOLPILOT_API_URL).then(async () => {
       logger9.info("Sign-in complete \u2014 adding all tools to running server");
       try {
         await addToolsToServer(server);