@oxagen/cli 0.4.0 → 0.6.0

package/dist/commands/graph.search.d.ts

@@ -0,0 +1,10 @@
+export interface GraphSearchOptions {
+    query: string;
+    kinds?: string;
+    labels?: string;
+    limit?: string;
+    /** commander: `--system` => true, `--no-system` => false, omitted => undefined. */
+    system?: boolean;
+}
+export declare function handleGraphSearch(opts: GraphSearchOptions): Promise<void>;
+//# sourceMappingURL=graph.search.d.ts.map

package/dist/commands/graph.search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.search.d.ts","sourceRoot":"","sources":["../../src/commands/graph.search.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAWD,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAa/E"}

package/dist/commands/graph.search.js

@@ -0,0 +1,25 @@
+/** `oxagen graph search …` — unified natural-language (vector) search across the
+ *  entire knowledge graph, via the org-scoped `/graph/search` API. */
+import { apiPost } from "../lib/api.js";
+function splitCsv(value) {
+    if (!value)
+        return undefined;
+    const parts = value
+        .split(",")
+        .map((s) => s.trim())
+        .filter(Boolean);
+    return parts.length > 0 ? parts : undefined;
+}
+export async function handleGraphSearch(opts) {
+    // --system => isSystem=true, --no-system => false, neither => undefined (both).
+    const isSystem = opts.system === true ? true : opts.system === false ? false : undefined;
+    const result = await apiPost("graph/search", {
+        query: opts.query,
+        kinds: splitCsv(opts.kinds),
+        labels: splitCsv(opts.labels),
+        limit: opts.limit ? parseInt(opts.limit, 10) : 10,
+        isSystem,
+    });
+    process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+}
+//# sourceMappingURL=graph.search.js.map

package/dist/commands/graph.search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.search.js","sourceRoot":"","sources":["../../src/commands/graph.search.ts"],"names":[],"mappings":"AAAA;sEACsE;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAWxC,SAAS,QAAQ,CAAC,KAAyB;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK;SAChB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAwB;IAC9D,gFAAgF;IAChF,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAEzF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE;QAC3C,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAC3B,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAC7B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QACjD,QAAQ;KACT,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC/D,CAAC"}

package/dist/commands/markdown.generate.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const markdownGenerateCommand: Command;
+//# sourceMappingURL=markdown.generate.d.ts.map

package/dist/commands/markdown.generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.generate.d.ts","sourceRoot":"","sources":["../../src/commands/markdown.generate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpC,eAAO,MAAM,uBAAuB,SA2CjC,CAAC"}

package/dist/commands/markdown.generate.js

@@ -0,0 +1,37 @@
+import { Command } from "commander";
+import { apiRequest, ApiError } from "../lib/api-client.js";
+import { getOrgId, getWorkspaceId } from "../lib/config.js";
+export const markdownGenerateCommand = new Command("markdown-generate")
+    .description("Persist a Markdown document as a generated asset")
+    .requiredOption("-t, --title <title>", "Document title / filename (without .md extension)")
+    .option("-m, --markdown <source>", "Raw Markdown source (use --sections as fallback)")
+    .option("--sections <json>", "Structured sections as JSON: [{heading?, paragraphs: string[]}]")
+    .option("-o, --org <id>", "Organization ID")
+    .option("-w, --workspace <id>", "Workspace ID")
+    .action(async (options) => {
+    try {
+        let sections;
+        if (options.sections)
+            sections = JSON.parse(options.sections);
+        const data = await apiRequest("/markdown/generate", {
+            method: "POST",
+            body: JSON.stringify({
+                title: options.title,
+                markdown: options.markdown,
+                sections,
+                org_id: options.org ?? getOrgId(),
+                workspace_id: options.workspace ?? getWorkspaceId(),
+            }),
+        });
+        console.log(`Markdown document created`);
+        console.log(`  Asset ID: ${data.assetId}`);
+        console.log(`  Size:     ${data.sizeBytes} bytes`);
+        console.log(`  URL:      ${data.serveUrl}`);
+    }
+    catch (err) {
+        const msg = err instanceof ApiError ? err.message : String(err);
+        console.error(`Error: ${msg}`);
+        process.exit(1);
+    }
+});
+//# sourceMappingURL=markdown.generate.js.map

package/dist/commands/markdown.generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.generate.js","sourceRoot":"","sources":["../../src/commands/markdown.generate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAY5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,OAAO,CAAC,mBAAmB,CAAC;KACpE,WAAW,CAAC,kDAAkD,CAAC;KAC/D,cAAc,CAAC,qBAAqB,EAAE,mDAAmD,CAAC;KAC1F,MAAM,CAAC,yBAAyB,EAAE,kDAAkD,CAAC;KACrF,MAAM,CACL,mBAAmB,EACnB,iEAAiE,CAClE;KACA,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;KAC3C,MAAM,CAAC,sBAAsB,EAAE,cAAc,CAAC;KAC9C,MAAM,CACL,KAAK,EAAE,OAMN,EAAE,EAAE;IACH,IAAI,CAAC;QACH,IAAI,QAAiB,CAAC;QACtB,IAAI,OAAO,CAAC,QAAQ;YAAE,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAY,CAAC;QAEzE,MAAM,IAAI,GAAG,MAAM,UAAU,CAA2B,oBAAoB,EAAE;YAC5E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ;gBACR,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,QAAQ,EAAE;gBACjC,YAAY,EAAE,OAAO,CAAC,SAAS,IAAI,cAAc,EAAE;aACpD,CAAC;SACH,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,SAAS,QAAQ,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/commands/mcp.add.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `oxagen mcp add <name>` — Add an MCP server to the file-based configuration.
+ *
+ * Writes a server entry to the appropriate scope file:
+ *   --scope user    → ~/.config/oxagen/settings.json
+ *   --scope project → .oxagen/settings.json (default)
+ *   --scope local   → .oxagen/settings.local.json
+ *
+ * Validates against managed policy before writing.
+ */
+import { Command } from "commander";
+export declare const mcpAddCommand: Command;
+//# sourceMappingURL=mcp.add.d.ts.map

package/dist/commands/mcp.add.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.add.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.add.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA8BpC,eAAO,MAAM,aAAa,SAuFtB,CAAC"}

package/dist/commands/mcp.add.js

@@ -0,0 +1,110 @@
+/**
+ * `oxagen mcp add <name>` — Add an MCP server to the file-based configuration.
+ *
+ * Writes a server entry to the appropriate scope file:
+ *   --scope user    → ~/.config/oxagen/settings.json
+ *   --scope project → .oxagen/settings.json (default)
+ *   --scope local   → .oxagen/settings.local.json
+ *
+ * Validates against managed policy before writing.
+ */
+import { Command } from "commander";
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { homedir } from "node:os";
+import { loadManagedConfig, validateServerAgainstPolicy, formatViolation } from "@oxagen/mcp-config/managed";
+import { findProjectRoot } from "@oxagen/mcp-config/resolve";
+function getSettingsPath(scope, projectRoot) {
+    switch (scope) {
+        case "user":
+            return join(homedir(), ".config", "oxagen", "settings.json");
+        case "project":
+            return join(projectRoot, ".oxagen", "settings.json");
+        case "local":
+            return join(projectRoot, ".oxagen", "settings.local.json");
+    }
+}
+function readOrCreateSettings(filePath) {
+    if (!existsSync(filePath))
+        return {};
+    try {
+        return JSON.parse(readFileSync(filePath, "utf8"));
+    }
+    catch {
+        return {};
+    }
+}
+export const mcpAddCommand = new Command("add")
+    .description("Add an MCP server to the file-based configuration")
+    .argument("<name>", "Name for this server (used as the key in settings.json)")
+    .requiredOption("--url <url>", "Server endpoint URL (for http/sse/websocket transports)")
+    .option("--transport <type>", "Transport type: streamable-http, sse, stdio, websocket", "streamable-http")
+    .option("--auth <strategy>", "Auth strategy: none, bearer, header, oauth", "none")
+    .option("--env-token <varName>", "Environment variable name holding the bearer token")
+    .option("--oauth-server-url <url>", "OAuth authorization server URL")
+    .option("--scopes <scopes>", "OAuth scopes (comma-separated)")
+    .option("--command <cmd>", "Command to spawn (for stdio transport)")
+    .option("--args <args>", "Arguments for stdio command (comma-separated)")
+    .option("--scope <scope>", "Config scope: user, project, local", "project")
+    .option("--disabled", "Add server in disabled state")
+    .action(async (name, options) => {
+    const scope = options.scope;
+    const projectRoot = findProjectRoot();
+    // Build server config based on transport type
+    let serverConfig;
+    if (options.transport === "stdio") {
+        if (!options.command) {
+            console.error("Error: --command is required for stdio transport");
+            process.exit(1);
+        }
+        serverConfig = {
+            transport: "stdio",
+            command: options.command,
+            args: options.args?.split(",").map((a) => a.trim()) ?? [],
+            ...(options.disabled ? { disabled: true } : {}),
+        };
+    }
+    else {
+        if (!options.url) {
+            console.error("Error: --url is required for HTTP-based transports");
+            process.exit(1);
+        }
+        const base = {
+            url: options.url,
+            auth: options.auth,
+            ...(options.envToken ? { envToken: options.envToken } : {}),
+            ...(options.oauthServerUrl ? { oauthServerUrl: options.oauthServerUrl } : {}),
+            ...(options.scopes ? { scopes: options.scopes.split(",").map((s) => s.trim()) } : {}),
+            ...(options.disabled ? { disabled: true } : {}),
+        };
+        if (options.transport === "sse") {
+            serverConfig = { transport: "sse", ...base };
+        }
+        else if (options.transport === "websocket") {
+            serverConfig = { transport: "websocket", ...base };
+        }
+        else {
+            serverConfig = { transport: "streamable-http", ...base };
+        }
+    }
+    // Check managed policy
+    const managed = loadManagedConfig();
+    const violation = validateServerAgainstPolicy(name, serverConfig, managed);
+    if (violation) {
+        console.error(formatViolation(violation));
+        process.exit(1);
+    }
+    // Write to the appropriate settings file
+    const filePath = getSettingsPath(scope, projectRoot);
+    const dir = dirname(filePath);
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+    }
+    const settings = readOrCreateSettings(filePath);
+    const mcpServers = (settings["mcpServers"] ?? {});
+    mcpServers[name] = serverConfig;
+    settings["mcpServers"] = mcpServers;
+    writeFileSync(filePath, JSON.stringify(settings, null, 2) + "\n", "utf8");
+    console.log(`Added MCP server "${name}" to ${scope} scope (${filePath})`);
+});
+//# sourceMappingURL=mcp.add.js.map

package/dist/commands/mcp.add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.add.js","sourceRoot":"","sources":["../../src/commands/mcp.add.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7G,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAI7D,SAAS,eAAe,CAAC,KAAY,EAAE,WAAmB;IACxD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC/D,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QACvD,KAAK,OAAO;YACV,OAAO,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAA4B,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KAC5C,WAAW,CAAC,mDAAmD,CAAC;KAChE,QAAQ,CAAC,QAAQ,EAAE,yDAAyD,CAAC;KAC7E,cAAc,CAAC,aAAa,EAAE,yDAAyD,CAAC;KACxF,MAAM,CAAC,oBAAoB,EAAE,wDAAwD,EAAE,iBAAiB,CAAC;KACzG,MAAM,CAAC,mBAAmB,EAAE,4CAA4C,EAAE,MAAM,CAAC;KACjF,MAAM,CAAC,uBAAuB,EAAE,oDAAoD,CAAC;KACrF,MAAM,CAAC,0BAA0B,EAAE,gCAAgC,CAAC;KACpE,MAAM,CAAC,mBAAmB,EAAE,gCAAgC,CAAC;KAC7D,MAAM,CAAC,iBAAiB,EAAE,wCAAwC,CAAC;KACnE,MAAM,CAAC,eAAe,EAAE,+CAA+C,CAAC;KACxE,MAAM,CAAC,iBAAiB,EAAE,oCAAoC,EAAE,SAAS,CAAC;KAC1E,MAAM,CAAC,YAAY,EAAE,8BAA8B,CAAC;KACpD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAW5B,EAAE,EAAE;IACH,MAAM,KAAK,GAAG,OAAO,CAAC,KAAc,CAAC;IACrC,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;IAEtC,8CAA8C;IAC9C,IAAI,YAA6B,CAAC;IAElC,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,YAAY,GAAG;YACb,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE;YACzD,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,GAAG;YACX,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,IAA8C;YAC5D,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC;QAEF,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YAChC,YAAY,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;QAC/C,CAAC;aAAM,IAAI,OAAO,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YAC7C,YAAY,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,EAAqB,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,IAAI,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,2BAA2B,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAC3E,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,yCAAyC;IACzC,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC7E,UAAU,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,GAAG,UAAU,CAAC;IAEpC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,QAAQ,KAAK,WAAW,QAAQ,GAAG,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC"}

package/dist/commands/mcp.auth.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `oxagen mcp auth <server>` — Authenticate an MCP server.
+ *
+ * For OAuth servers: opens browser for the authorize flow, stores tokens locally.
+ * For bearer servers: prompts for (or reads from stdin) the token and stores it.
+ * For header servers: prompts for header values and stores them.
+ */
+import { Command } from "commander";
+export declare const mcpAuthCommand: Command;
+//# sourceMappingURL=mcp.auth.d.ts.map

package/dist/commands/mcp.auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.auth.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.auth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBpC,eAAO,MAAM,cAAc,SAqHvB,CAAC"}

package/dist/commands/mcp.auth.js

@@ -0,0 +1,132 @@
+/**
+ * `oxagen mcp auth <server>` — Authenticate an MCP server.
+ *
+ * For OAuth servers: opens browser for the authorize flow, stores tokens locally.
+ * For bearer servers: prompts for (or reads from stdin) the token and stores it.
+ * For header servers: prompts for header values and stores them.
+ */
+import { Command } from "commander";
+import { resolveSettings, findProjectRoot } from "@oxagen/mcp-config/resolve";
+import { writeCredential, readCredential } from "@oxagen/mcp-config/credentials";
+import { createInterface } from "node:readline";
+function prompt(question) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    return new Promise((resolve) => {
+        rl.question(question, (answer) => {
+            rl.close();
+            resolve(answer.trim());
+        });
+    });
+}
+export const mcpAuthCommand = new Command("auth")
+    .description("Authenticate an MCP server (store credentials locally)")
+    .argument("<server>", "Server name to authenticate")
+    .option("--token <token>", "Bearer token (avoids interactive prompt)")
+    .option("--stdin", "Read token from stdin (for piping)")
+    .option("--status", "Show current auth status without changing anything")
+    .action(async (server, options) => {
+    const projectRoot = findProjectRoot();
+    const { settings } = resolveSettings({ projectRoot });
+    const serverConfig = settings.mcpServers?.[server];
+    if (!serverConfig) {
+        console.error(`Error: server "${server}" not found in any settings scope.`);
+        console.error("Run `oxagen mcp list` to see configured servers.");
+        process.exit(1);
+    }
+    // Status check
+    if (options.status) {
+        const cred = readCredential(server);
+        if (!cred) {
+            console.log(`${server}: no stored credentials`);
+        }
+        else if (cred.accessToken) {
+            const expired = cred.expiresAt ? new Date(cred.expiresAt).getTime() < Date.now() : false;
+            const refreshable = !!cred.refreshToken;
+            console.log(`${server}: ${expired ? "EXPIRED" : "authenticated"}`);
+            if (cred.expiresAt)
+                console.log(`  Expires: ${cred.expiresAt}`);
+            if (refreshable)
+                console.log(`  Refresh token: available`);
+            if (cred.updatedAt)
+                console.log(`  Last updated: ${cred.updatedAt}`);
+        }
+        else {
+            console.log(`${server}: credential file exists but no access token`);
+        }
+        return;
+    }
+    if (serverConfig.transport === "stdio") {
+        console.log(`Server "${server}" uses stdio transport — no auth needed.`);
+        return;
+    }
+    const auth = "auth" in serverConfig ? serverConfig.auth : "none";
+    if (auth === "none") {
+        console.log(`Server "${server}" has auth=none — no credentials required.`);
+        return;
+    }
+    if (auth === "oauth") {
+        // OAuth flow requires a browser redirect. For now, provide instructions.
+        // Full OAuth CLI flow (opening browser, running callback server) is a future enhancement.
+        const oauthUrl = "oauthServerUrl" in serverConfig ? serverConfig.oauthServerUrl : serverConfig.url;
+        console.log(`Server "${server}" uses OAuth 2.1 authentication.`);
+        console.log("");
+        console.log("To authenticate:");
+        console.log(`  1. Run: oxagen mcp auth ${server} --token <access_token>`);
+        console.log("     (if you have a token from another flow)");
+        console.log("");
+        console.log("  2. Or use the web app to complete the OAuth flow:");
+        console.log(`     Visit your workspace settings → Integrations → ${server}`);
+        console.log("");
+        if (oauthUrl) {
+            console.log(`  OAuth server: ${oauthUrl}`);
+        }
+        // If --token was provided, store it
+        if (options.token) {
+            writeCredential(server, { accessToken: options.token, tokenType: "Bearer" });
+            console.log(`Stored access token for "${server}".`);
+        }
+        return;
+    }
+    if (auth === "bearer") {
+        let token = options.token;
+        if (options.stdin) {
+            const chunks = [];
+            for await (const chunk of process.stdin) {
+                chunks.push(chunk);
+            }
+            token = Buffer.concat(chunks).toString("utf8").trim();
+        }
+        if (!token) {
+            token = await prompt(`Enter bearer token for "${server}": `);
+        }
+        if (!token) {
+            console.error("Error: no token provided.");
+            process.exit(1);
+        }
+        writeCredential(server, { accessToken: token, tokenType: "Bearer" });
+        console.log(`Stored bearer token for "${server}".`);
+        return;
+    }
+    if (auth === "header") {
+        console.log(`Server "${server}" uses header-based auth.`);
+        console.log("Enter header values (or set them via environment variables in settings.json):");
+        const headers = {};
+        // Read headers interactively
+        const headerCount = await prompt("How many headers? ");
+        const count = parseInt(headerCount, 10) || 0;
+        for (let i = 0; i < count; i++) {
+            const key = await prompt(`  Header ${i + 1} name: `);
+            const value = await prompt(`  Header ${i + 1} value: `);
+            if (key)
+                headers[key] = value;
+        }
+        if (Object.keys(headers).length > 0) {
+            writeCredential(server, { headers });
+            console.log(`Stored ${Object.keys(headers).length} header(s) for "${server}".`);
+        }
+        else {
+            console.log("No headers provided. Credential unchanged.");
+        }
+    }
+});
+//# sourceMappingURL=mcp.auth.js.map

package/dist/commands/mcp.auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.auth.js","sourceRoot":"","sources":["../../src/commands/mcp.auth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAEjF,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,SAAS,MAAM,CAAC,QAAgB;IAC9B,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KAC9C,WAAW,CAAC,wDAAwD,CAAC;KACrE,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;KACnD,MAAM,CAAC,iBAAiB,EAAE,0CAA0C,CAAC;KACrE,MAAM,CAAC,SAAS,EAAE,oCAAoC,CAAC;KACvD,MAAM,CAAC,UAAU,EAAE,oDAAoD,CAAC;KACxE,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,OAA8D,EAAE,EAAE;IAC/F,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;IACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC,MAAM,CAAgC,CAAC;IAElF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,kBAAkB,MAAM,oCAAoC,CAAC,CAAC;QAC5E,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,eAAe;IACf,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,yBAAyB,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;YACzF,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACnE,IAAI,IAAI,CAAC,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAChE,IAAI,WAAW;gBAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC3D,IAAI,IAAI,CAAC,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,8CAA8C,CAAC,CAAC;QACvE,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,YAAY,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,0CAA0C,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAEjE,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,4CAA4C,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,yEAAyE;QACzE,0FAA0F;QAC1F,MAAM,QAAQ,GAAG,gBAAgB,IAAI,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC;QACnG,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,kCAAkC,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,6BAA6B,MAAM,yBAAyB,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,uDAAuD,MAAM,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,oCAAoC;QACpC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,eAAe,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,IAAI,CAAC,CAAC;QACtD,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,KAAK,GAAuB,OAAO,CAAC,KAAK,CAAC;QAE9C,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;YAC/B,CAAC;YACD,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,MAAM,MAAM,CAAC,2BAA2B,MAAM,KAAK,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,eAAe,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,IAAI,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,2BAA2B,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;QAC7F,MAAM,OAAO,GAA2B,EAAE,CAAC;QAE3C,6BAA6B;QAC7B,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxD,IAAI,GAAG;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,eAAe,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,mBAAmB,MAAM,IAAI,CAAC,CAAC;QAClF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/commands/mcp.check.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `oxagen mcp check` — Health check all configured MCP servers.
+ *
+ * Probes each enabled server and reports connectivity status.
+ * For HTTP servers: attempts a connection and tool list.
+ * For stdio servers: attempts to spawn the command.
+ */
+import { Command } from "commander";
+export declare const mcpCheckCommand: Command;
+//# sourceMappingURL=mcp.check.d.ts.map

package/dist/commands/mcp.check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.check.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.check.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsEpC,eAAO,MAAM,eAAe,SA2DxB,CAAC"}

package/dist/commands/mcp.check.js

@@ -0,0 +1,114 @@
+/**
+ * `oxagen mcp check` — Health check all configured MCP servers.
+ *
+ * Probes each enabled server and reports connectivity status.
+ * For HTTP servers: attempts a connection and tool list.
+ * For stdio servers: attempts to spawn the command.
+ */
+import { Command } from "commander";
+import { resolveSettings, findProjectRoot } from "@oxagen/mcp-config/resolve";
+import { resolveCredential } from "@oxagen/mcp-config/credentials";
+import { loadManagedConfig, getManagedServers } from "@oxagen/mcp-config/managed";
+async function checkServer(name, config) {
+    const transport = config.transport;
+    if ("disabled" in config && config.disabled) {
+        return { name, transport, status: "disabled" };
+    }
+    if (transport === "stdio") {
+        // For stdio, just verify the command exists (don't spawn it)
+        const { execSync } = await import("node:child_process");
+        try {
+            execSync(`which ${config.command}`, { stdio: "ignore" });
+            return { name, transport, status: "healthy" };
+        }
+        catch {
+            return { name, transport, status: "unreachable", error: `command "${config.command}" not found` };
+        }
+    }
+    // HTTP-based transports: resolve credentials and attempt connection
+    const cred = await resolveCredential({ serverName: name, config });
+    if (cred.source === "none" && "auth" in config && config.auth !== "none") {
+        return { name, transport, status: "auth_required", error: "no credentials configured" };
+    }
+    if (cred.expired) {
+        return { name, transport, status: "auth_required", error: "token expired" };
+    }
+    // Attempt HTTP probe
+    const url = "url" in config ? config.url : "";
+    const start = Date.now();
+    try {
+        const headers = { accept: "application/json" };
+        if (cred.token)
+            headers["authorization"] = `Bearer ${cred.token}`;
+        if (cred.headers)
+            Object.assign(headers, cred.headers);
+        const res = await fetch(url, {
+            method: "GET",
+            headers,
+            signal: AbortSignal.timeout(10_000),
+        });
+        const latencyMs = Date.now() - start;
+        if (res.status === 401 || res.status === 403) {
+            return { name, transport, status: "auth_required", latencyMs, error: `HTTP ${res.status}` };
+        }
+        // Any response (even 404/405) means the server is reachable
+        return { name, transport, status: "healthy", latencyMs };
+    }
+    catch (err) {
+        const latencyMs = Date.now() - start;
+        const error = err instanceof Error ? err.message : String(err);
+        return { name, transport, status: "unreachable", latencyMs, error };
+    }
+}
+export const mcpCheckCommand = new Command("check")
+    .description("Health check all configured MCP servers")
+    .option("--json", "Output results as JSON")
+    .option("--server <name>", "Check only this server")
+    .action(async (options) => {
+    const projectRoot = findProjectRoot();
+    const { settings } = resolveSettings({ projectRoot });
+    const managed = loadManagedConfig();
+    const managedServers = getManagedServers(managed);
+    // Merge all servers
+    const allServers = {
+        ...(settings.mcpServers ?? {}),
+        ...managedServers,
+    };
+    // Filter if --server specified
+    const targets = options.server
+        ? Object.fromEntries(Object.entries(allServers).filter(([name]) => name === options.server))
+        : allServers;
+    if (Object.keys(targets).length === 0) {
+        if (options.server) {
+            console.error(`Error: server "${options.server}" not found`);
+        }
+        else {
+            console.log("No MCP servers configured.");
+        }
+        process.exit(options.server ? 1 : 0);
+    }
+    const results = [];
+    for (const [name, config] of Object.entries(targets)) {
+        const result = await checkServer(name, config);
+        results.push(result);
+    }
+    if (options.json) {
+        console.log(JSON.stringify(results, null, 2));
+        return;
+    }
+    // Pretty print
+    console.log("MCP Server Health:\n");
+    for (const r of results) {
+        const icon = r.status === "healthy" ? "●"
+            : r.status === "disabled" ? "○"
+                : r.status === "auth_required" ? "◐"
+                    : "✕";
+        const latency = r.latencyMs ? ` (${r.latencyMs}ms)` : "";
+        const error = r.error ? ` — ${r.error}` : "";
+        console.log(`  ${icon} ${r.name}: ${r.status}${latency}${error}`);
+    }
+    const healthy = results.filter((r) => r.status === "healthy").length;
+    const total = results.filter((r) => r.status !== "disabled").length;
+    console.log(`\n  ${healthy}/${total} servers healthy`);
+});
+//# sourceMappingURL=mcp.check.js.map

package/dist/commands/mcp.check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.check.js","sourceRoot":"","sources":["../../src/commands/mcp.check.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAYlF,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,MAAuB;IAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAEnC,IAAI,UAAU,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,6DAA6D;QAC7D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,QAAQ,CAAC,SAAS,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,MAAM,CAAC,OAAO,aAAa,EAAE,CAAC;QACpG,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC1F,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAC9E,CAAC;IAED,qBAAqB;IACrB,MAAM,GAAG,GAAG,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACvE,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;QAClE,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAEvD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,KAAK;YACb,OAAO;YACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAErC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9F,CAAC;QACD,4DAA4D;QAC5D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACrC,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAChD,WAAW,CAAC,yCAAyC,CAAC;KACtD,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;KAC1C,MAAM,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;KACnD,MAAM,CAAC,KAAK,EAAE,OAA4C,EAAE,EAAE;IAC7D,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;IACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,eAAe,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,MAAM,cAAc,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAElD,oBAAoB;IACpB,MAAM,UAAU,GAAoC;QAClD,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC;QAC9B,GAAG,cAAc;KAClB,CAAC;IAEF,+BAA+B;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM;QAC5B,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CACvE;QACH,CAAC,CAAC,UAAU,CAAC;IAEf,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,CAAC,KAAK,CAAC,kBAAkB,OAAO,CAAC,MAAM,aAAa,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,eAAe;IACf,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG;YACvC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG;gBAC/B,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,GAAG;oBACpC,CAAC,CAAC,GAAG,CAAC;QACR,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,IAAI,KAAK,kBAAkB,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC"}

package/dist/commands/mcp.list.d.ts

@@ -0,0 +1,9 @@
+/**
+ * `oxagen mcp list` — List effective MCP servers (merged across all scopes).
+ *
+ * Shows each server with its transport, source scope, and auth status.
+ * If --verbose, also shows the file paths being loaded and any warnings.
+ */
+import { Command } from "commander";
+export declare const mcpListLocalCommand: Command;
+//# sourceMappingURL=mcp.list.d.ts.map

package/dist/commands/mcp.list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.list.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.list.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,eAAO,MAAM,mBAAmB,SAuG5B,CAAC"}

package/dist/commands/mcp.list.js

@@ -0,0 +1,93 @@
+/**
+ * `oxagen mcp list` — List effective MCP servers (merged across all scopes).
+ *
+ * Shows each server with its transport, source scope, and auth status.
+ * If --verbose, also shows the file paths being loaded and any warnings.
+ */
+import { Command } from "commander";
+import { resolveSettings, getSettingsPaths, findProjectRoot } from "@oxagen/mcp-config/resolve";
+import { loadManagedConfig, getManagedServers } from "@oxagen/mcp-config/managed";
+import { readCredential } from "@oxagen/mcp-config/credentials";
+export const mcpListLocalCommand = new Command("list")
+    .description("List effective MCP servers from file-based configuration")
+    .option("--verbose", "Show file paths and detailed configuration")
+    .option("--json", "Output as JSON")
+    .action(async (options) => {
+    const projectRoot = findProjectRoot();
+    const { settings, serverSources } = resolveSettings({ projectRoot });
+    // Inject managed servers
+    const managed = loadManagedConfig();
+    const managedServers = getManagedServers(managed);
+    // Build unified server list
+    const allServers = {};
+    // File-based servers
+    for (const [name, config] of Object.entries(settings.mcpServers ?? {})) {
+        const cred = readCredential(name);
+        let authStatus = "none";
+        if ("auth" in config && config.auth !== "none") {
+            if (cred?.accessToken) {
+                const expired = cred.expiresAt ? new Date(cred.expiresAt).getTime() < Date.now() : false;
+                authStatus = expired ? "expired" : "authenticated";
+            }
+            else {
+                authStatus = "not configured";
+            }
+        }
+        allServers[name] = {
+            config,
+            scope: serverSources[name] ?? "unknown",
+            managed: false,
+            authStatus,
+        };
+    }
+    // Managed servers (override file-based)
+    for (const [name, config] of Object.entries(managedServers)) {
+        allServers[name] = {
+            config,
+            scope: "managed",
+            managed: true,
+            authStatus: "org-managed",
+        };
+    }
+    if (options.json) {
+        console.log(JSON.stringify(allServers, null, 2));
+        return;
+    }
+    // Pretty print
+    const entries = Object.entries(allServers);
+    if (entries.length === 0) {
+        console.log("No MCP servers configured.");
+        if (options.verbose) {
+            const paths = getSettingsPaths(projectRoot);
+            console.log("\nSearched:");
+            console.log(`  User:    ${paths.user}`);
+            console.log(`  Project: ${paths.project}`);
+            console.log(`  Local:   ${paths.local}`);
+        }
+        return;
+    }
+    console.log("MCP Servers:\n");
+    // Calculate column widths
+    const nameWidth = Math.max(...entries.map(([n]) => n.length), 4);
+    const transportWidth = 16;
+    console.log(`  ${"NAME".padEnd(nameWidth)}  ${"TRANSPORT".padEnd(transportWidth)}  ${"SCOPE".padEnd(10)}  AUTH`);
+    console.log(`  ${"─".repeat(nameWidth)}  ${"─".repeat(transportWidth)}  ${"─".repeat(10)}  ${"─".repeat(16)}`);
+    for (const [name, info] of entries) {
+        const config = info.config;
+        const transport = config["transport"] ?? "unknown";
+        const disabled = config["disabled"] === true;
+        const prefix = disabled ? "  (disabled) " : "  ";
+        console.log(`${prefix}${name.padEnd(nameWidth)}  ${transport.padEnd(transportWidth)}  ${info.scope.padEnd(10)}  ${info.authStatus}`);
+    }
+    if (options.verbose) {
+        const paths = getSettingsPaths(projectRoot);
+        console.log("\nSettings files:");
+        console.log(`  User:    ${paths.user}`);
+        console.log(`  Project: ${paths.project}`);
+        console.log(`  Local:   ${paths.local}`);
+        if (managed) {
+            console.log(`  Managed: synced ${managed._syncedAt} (org: ${managed._orgId})`);
+        }
+    }
+});
+//# sourceMappingURL=mcp.list.js.map