@rapidthoughtlabs/heku 0.2.0 → 0.3.0

package/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.3.0] - 2026-06-11
+
+### Added
+- **`heku update`** now updates registry-installed configs to their latest versions (instead of updating the heku binary). Accepts an optional target: `heku update github-http`, `heku update linear:graphql`, or `heku update @ns/linear` (all connector variants). Local credentials (`connector.env`) and overlays are preserved on update.
+- **`one.registry_update`** MCP tool — same update logic callable by an LLM agent. Updates one config by `config_id` or all installed configs when no argument is passed.
+- **`one.list_configs`** now returns `[{ id, name, description }]` objects instead of a flat array of IDs, so agents can identify the right config without an extra round-trip.
+
+### Changed
+- Publish modal always shows the version field. New (unpublished) configs show an empty field with a "not published yet" hint; existing configs are pre-filled with the next patch version and show the current published version as a hint.
+- Flat manifest (`search`, `list_configs`, `list_tools`, `invoke`) no longer prefixes tool descriptions with `[one]` — it was noise when only four tools are shown. Namespaced mode is unchanged.
+- Discovery tool descriptions updated with explicit workflow steps and call examples for users without custom system prompts.
+
 ## [0.2.0] - 2026-06-09
 
 ### Changed
@@ -35,7 +47,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Initial public release on npm as `@rapidthoughtlabs/mcpone`.
 - Single dynamic MCP server that turns JSON configs into working API tools.
 
-[Unreleased]: https://github.com/RapidThoughtLabs/heku/compare/v0.2.0...HEAD
+[Unreleased]: https://github.com/RapidThoughtLabs/heku/compare/v0.3.0...HEAD
+[0.3.0]: https://github.com/RapidThoughtLabs/heku/compare/v0.2.0...v0.3.0
 [0.2.0]: https://github.com/RapidThoughtLabs/heku/compare/v0.1.2...v0.2.0
 [0.1.2]: https://github.com/RapidThoughtLabs/heku/compare/v0.1.0...v0.1.2
 [0.1.0]: https://github.com/RapidThoughtLabs/heku/releases/tag/v0.1.0

package/README.md

@@ -14,7 +14,7 @@ Stop building one MCP server per API. Build one config.
 - **Hot-reload** — add or edit a config, tools update live without restart
 - **Auto-discovery** — gRPC reflection, GraphQL introspection, and child MCP tool listing fill in tools automatically
 - **Built-in console UI** — React dashboard for chat, config editing, and registry browsing
-- **Registry** — publish and install community configs from [mcp.rapidthoughtlabs.space](https://mcp.rapidthoughtlabs.space)
+- **Registry** — publish and install community configs from [app.rapidthoughtlabs.space](https://app.rapidthoughtlabs.space)
 - **Auth handled** — bearer, basic, API key, and OAuth2 with `.env`-based credential management
 - **Self-managing** — the server can create and edit its own configs via internal tools
 
@@ -186,7 +186,7 @@ Built with React 19, TailwindCSS v4, Zustand, and the MCP SDK.
 
 ## Registry
 
-[**mcp.rapidthoughtlabs.space**](https://mcp.rapidthoughtlabs.space) is the default registry for sharing configs.
+[**app.rapidthoughtlabs.space**](https://app.rapidthoughtlabs.space) is the default registry for sharing configs.
 
 ```bash
 heku install @rtl/github

package/dist/cli.js

@@ -4601,7 +4601,7 @@ var require_schemes = __commonJS({
         serialize: httpSerialize
       }
     );
-    var https2 = (
+    var https = (
       /** @type {SchemeHandler} */
       {
         scheme: "https",
@@ -4650,7 +4650,7 @@ var require_schemes = __commonJS({
       /** @type {Record<SchemeName, SchemeHandler>} */
       {
         http: http2,
-        https: https2,
+        https,
         ws,
         wss,
         urn,
@@ -8442,7 +8442,7 @@ var require_supports_color = __commonJS({
   "node_modules/supports-color/index.js"(exports2, module2) {
     "use strict";
     init_esm_shims();
-    var os7 = __require("os");
+    var os6 = __require("os");
     var tty = __require("tty");
     var hasFlag = require_has_flag();
     var { env } = process;
@@ -8499,7 +8499,7 @@ var require_supports_color = __commonJS({
         return min;
       }
       if (process.platform === "win32") {
-        const osRelease = os7.release().split(".");
+        const osRelease = os6.release().split(".");
         if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
           return Number(osRelease[2]) >= 14931 ? 3 : 2;
         }
@@ -32320,7 +32320,7 @@ var require_cross_spawn = __commonJS({
       enoent.hookChildProcess(spawned, parsed);
       return spawned;
     }
-    function spawnSync2(command2, args2, options) {
+    function spawnSync(command2, args2, options) {
       const parsed = parse3(command2, args2, options);
       const result = cp.spawnSync(parsed.command, parsed.args, parsed.options);
       result.error = result.error || enoent.verifyENOENTSync(result.status, parsed);
@@ -32328,7 +32328,7 @@ var require_cross_spawn = __commonJS({
     }
     module2.exports = spawn4;
     module2.exports.spawn = spawn4;
-    module2.exports.sync = spawnSync2;
+    module2.exports.sync = spawnSync;
     module2.exports._parse = parse3;
     module2.exports._enoent = enoent;
   }
@@ -33933,7 +33933,7 @@ var require_service_config = __commonJS({
     exports2.validateRetryThrottling = validateRetryThrottling;
     exports2.validateServiceConfig = validateServiceConfig;
     exports2.extractAndSelectServiceConfig = extractAndSelectServiceConfig;
-    var os7 = __require("os");
+    var os6 = __require("os");
     var constants_1 = require_constants();
     var DURATION_REGEX = /^\d+(\.\d{1,9})?s$/;
     var CLIENT_LANGUAGE_STRING = "node";
@@ -34232,7 +34232,7 @@ var require_service_config = __commonJS({
         if (Array.isArray(validatedConfig.clientHostname)) {
           let hostnameMatched = false;
           for (const hostname3 of validatedConfig.clientHostname) {
-            if (hostname3 === os7.hostname()) {
+            if (hostname3 === os6.hostname()) {
               hostnameMatched = true;
             }
           }
@@ -48781,7 +48781,7 @@ var require_subchannel_call = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.Http2SubchannelCall = void 0;
     var http2 = __require("http2");
-    var os7 = __require("os");
+    var os6 = __require("os");
     var constants_1 = require_constants();
     var metadata_1 = require_metadata2();
     var stream_decoder_1 = require_stream_decoder();
@@ -48789,7 +48789,7 @@ var require_subchannel_call = __commonJS({
     var constants_2 = require_constants();
     var TRACER_NAME = "subchannel_call";
     function getSystemErrorName(errno) {
-      for (const [name, num] of Object.entries(os7.constants.errno)) {
+      for (const [name, num] of Object.entries(os6.constants.errno)) {
         if (num === errno) {
           return name;
         }
@@ -93824,7 +93824,7 @@ var require_client_metadata = __commonJS({
     exports2.makeClientMetadata = makeClientMetadata;
     exports2.addContainerMetadata = addContainerMetadata;
     exports2.getFAASEnv = getFAASEnv;
-    var os7 = __require("os");
+    var os6 = __require("os");
     var process5 = __require("process");
     var bson_1 = require_bson2();
     var error_1 = require_error2();
@@ -93894,7 +93894,7 @@ var require_client_metadata = __commonJS({
       if (!metadataDocument.ifItFitsItSits("platform", runtimeInfo)) {
         throw new error_1.MongoInvalidArgumentError("Unable to include driverInfo platform, metadata cannot exceed 512 bytes");
       }
-      const osInfo = (/* @__PURE__ */ new Map()).set("name", process5.platform).set("architecture", process5.arch).set("version", os7.release()).set("type", os7.type());
+      const osInfo = (/* @__PURE__ */ new Map()).set("name", process5.platform).set("architecture", process5.arch).set("version", os6.release()).set("type", os6.type());
       if (!metadataDocument.ifItFitsItSits("os", osInfo)) {
         for (const key of osInfo.keys()) {
           osInfo.delete(key);
@@ -93997,13 +93997,13 @@ var require_client_metadata = __commonJS({
     function getRuntimeInfo() {
       if ("Deno" in globalThis) {
         const version2 = typeof Deno?.version?.deno === "string" ? Deno?.version?.deno : "0.0.0-unknown";
-        return `Deno v${version2}, ${os7.endianness()}`;
+        return `Deno v${version2}, ${os6.endianness()}`;
       }
       if ("Bun" in globalThis) {
         const version2 = typeof Bun?.version === "string" ? Bun?.version : "0.0.0-unknown";
-        return `Bun v${version2}, ${os7.endianness()}`;
+        return `Bun v${version2}, ${os6.endianness()}`;
       }
-      return `Node.js ${process5.version}, ${os7.endianness()}`;
+      return `Node.js ${process5.version}, ${os6.endianness()}`;
     }
   }
 });
@@ -131059,8 +131059,7 @@ function getInstalledEntry(slug, registry2 = "default") {
 
 // src/lib/version.ts
 init_esm_shims();
-var VERSION = true ? "0.2.0" : "0.0.0-dev";
-var PKG_NAME = true ? "@rapidthoughtlabs/heku" : "@rapidthoughtlabs/heku";
+var VERSION = true ? "0.3.0" : "0.0.0-dev";
 
 // src/connectors/mcp.ts
 init_esm_shims();
@@ -134326,6 +134325,8 @@ var ToolRegistry = class {
       }
       this.tools.set(qualifiedName, {
         configId: config2.id,
+        configName: config2.name,
+        configDescription: config2.description,
         connectorConfig: config2.connector,
         tool
       });
@@ -134373,6 +134374,7 @@ var BLOCKED_WHEN_LOCKED = /* @__PURE__ */ new Set([
   "one.remove_tool",
   "one.update_tool",
   "one.registry_install",
+  "one.registry_update",
   "one.auth_set"
 ]);
 function blockedTool(qualifiedName, args2) {
@@ -134393,7 +134395,7 @@ function makeServer(registry2, transportCtx) {
     const { visible, rewrite } = buildManifestView(manifestStyle, registry2);
     const tools = visible.map((rt) => ({
       name: rewrite(`${rt.configId}.${rt.tool.name}`),
-      description: `[${rt.configId}] ${rt.tool.description}`,
+      description: manifestStyle === "flat" ? rt.tool.description : `[${rt.configId}] ${rt.tool.description}`,
       inputSchema: buildInputSchema(rt.tool.params)
     }));
     return { tools };
@@ -137822,6 +137824,9 @@ async function getConfigMeta(namespace, slug, connectorType, registryName = "def
   const slugWithConnector = connectorType ? `${slug}:${connectorType}` : slug;
   return jsonFetch(`/configs/${namespace}/${slugWithConnector}`, { registryName });
 }
+async function listVersions(namespace, slug, registryName = "default") {
+  return jsonFetch(`/configs/${namespace}/${slug}/versions`, { registryName });
+}
 async function fetchVersionPayload(namespace, slug, connectorType, version2, registryName = "default") {
   const slugWithConnector = connectorType ? `${slug}:${connectorType}` : slug;
   const vPath = version2 ?? "latest";
@@ -137982,7 +137987,7 @@ function createRegistryRouter() {
     const slug = colonIdx !== -1 ? rest.slice(0, colonIdx) : rest;
     const connectorType = colonIdx !== -1 ? rest.slice(colonIdx + 1) : void 0;
     const meta3 = await getConfigMeta(namespace, slug, connectorType, registry2);
-    res.json({ category: meta3.category, tags: meta3.tags });
+    res.json({ category: meta3.category, tags: meta3.tags, latest_version: meta3.latest_version ?? null });
   }));
   router.post("/check-updates", wrap(async (req, res) => {
     const { installed, registry: registry2 = "default" } = req.body;
@@ -138094,6 +138099,12 @@ function createRegistryRouter() {
     const { payload } = await fetchVersionPayload(namespace, slug, connector_type, void 0, registry2);
     res.json(payload);
   }));
+  router.get("/versions/:namespace/:slug", wrap(async (req, res) => {
+    const { namespace, slug } = req.params;
+    const registry2 = req.query["registry"] ?? "default";
+    const versions = await listVersions(namespace, slug, registry2);
+    res.json(versions);
+  }));
   router.delete("/uninstall/:id", wrap(async (req, res) => {
     const id = req.params["id"];
     const registry2 = req.query["registry"] ?? "default";
@@ -138206,12 +138217,12 @@ var INTERNAL_CONFIG = {
     },
     {
       name: "list_configs",
-      description: "**Start here.** Returns the names of all active configs as a flat array. Config IDs follow the pattern `<base>-<connector>` where connector is one of: http, cli, file, grpc, graphql, mcp, sql, mongodb. Use these names to scope `one.search` or `one.list_tools`.",
+      description: "**Start here.** Returns all active configs as an array of objects with `id`, `name`, and `description`. Config IDs follow the pattern `<base>-<connector>` (e.g. `github-http`, `linear-graphql`). Use the description to pick the right config, then pass its `id` to `search` or `list_tools`.",
       params: []
     },
     {
       name: "search",
-      description: "Find tools by name or intent across all configs (or within a specific one). Returns matching tools with full schemas grouped by match quality: exact name match first, then partial, then description, then related. Indexes both native `one.*` self-management tools and all service tools. Pass config for exact-first matching: 'github-http' returns only github-http tools; 'github' matches both github-http and github-cli.",
+      description: "Find tools by name or intent across all configs (or within a specific one). Returns matching tools with full schemas grouped by quality: exact \u2192 partial \u2192 description \u2192 related. Covers both native `one.*` self-management tools and all loaded service tools. Narrow by config: `github-http` returns only github-http tools; `github` matches github-http and github-cli. Once you have a tool name, call `invoke` with `config_id.tool_name` to execute it.",
       params: [
         {
           name: "query",
@@ -138229,7 +138240,7 @@ var INTERNAL_CONFIG = {
     },
     {
       name: "invoke",
-      description: "Execute any registered tool by its qualified name (config_id.tool_name). Use after one.search or one.list_tools to run the tool you found. Works for all service tools (open-meteo-http.get_forecast, github-http.create_issue, etc.) and all one.* self-management tools.",
+      description: "Execute any registered tool by its qualified name (`config_id.tool_name`). Workflow: (1) list_configs \u2192 pick a config id, (2) search or list_tools \u2192 get the tool name and required args, (3) invoke \u2192 run it. Examples: `github-http.create_issue`, `linear-graphql.create_issue`, `one.server_status`.",
       params: [
         {
           name: "tool",
@@ -138345,6 +138356,14 @@ var INTERNAL_CONFIG = {
         { name: "registry", type: "string", required: false, description: "Registry source name (default: 'default')" }
       ]
     },
+    {
+      name: "registry_update",
+      description: "Update registry-installed configs to the latest available version. Preserves local credentials (connector.env) and overlays. Pass config_id to update a single config, or omit to update all installed configs.",
+      params: [
+        { name: "config_id", type: "string", required: false, description: "ID of the config to update (e.g. 'github-http'). Omit to update all installed configs." },
+        { name: "registry", type: "string", required: false, description: "Registry source name (default: 'default')" }
+      ]
+    },
     {
       name: "auth_status",
       description: "Check which configs have missing or misconfigured credentials. Returns per-config auth status and the specific env vars that are missing.",
@@ -141195,7 +141214,17 @@ async function handleGetConfig(ctx, args2) {
   return { success: true, data: raw };
 }
 async function handleListConfigs(ctx, _args) {
-  const configs = [...new Set(ctx.registry.list().map((rt) => rt.configId))].sort();
+  const seen = /* @__PURE__ */ new Map();
+  for (const rt of ctx.registry.list()) {
+    if (!seen.has(rt.configId)) {
+      seen.set(rt.configId, {
+        id: rt.configId,
+        ...rt.configName && { name: rt.configName },
+        ...rt.configDescription && { description: rt.configDescription }
+      });
+    }
+  }
+  const configs = [...seen.values()].sort((a, b) => a.id.localeCompare(b.id));
   return { success: true, data: { configs } };
 }
 async function handleUpdateConfig(ctx, args2) {
@@ -141633,6 +141662,112 @@ async function handleRegistryInstall(ctx, args2) {
     return { success: false, data: { error: err.message } };
   }
 }
+async function handleRegistryUpdate(ctx, args2) {
+  const configId = args2.config_id;
+  const registry2 = args2.registry ?? "default";
+  const { installed } = loadManifest();
+  const forRegistry = installed.filter((e) => e.registry === registry2);
+  let toCheck;
+  if (configId) {
+    const entry = forRegistry.find((e) => {
+      const withoutNs = e.slug.replace(/^@[^/]+\//, "");
+      const colonIdx = withoutNs.indexOf(":");
+      if (colonIdx === -1) return false;
+      const base2 = withoutNs.slice(0, colonIdx);
+      const ct = withoutNs.slice(colonIdx + 1);
+      return `${base2}-${ct}` === configId;
+    });
+    if (!entry) {
+      return {
+        success: false,
+        data: { error: `"${configId}" is not a registry-installed config or was not found in the manifest. Only configs installed from the registry can be updated this way.` }
+      };
+    }
+    toCheck = [entry];
+  } else {
+    if (forRegistry.length === 0) {
+      return { success: true, data: { message: "No registry-installed configs to update", updated: [], up_to_date: [] } };
+    }
+    toCheck = forRegistry;
+  }
+  let updateCheck;
+  try {
+    updateCheck = await checkUpdates(
+      toCheck.map((e) => ({ slug: e.slug, version: e.version })),
+      registry2
+    );
+  } catch (err) {
+    if (err instanceof RegistryError) {
+      return { success: false, data: { error: err.message, status: err.status } };
+    }
+    return { success: false, data: { error: err.message } };
+  }
+  if (updateCheck.updates.length === 0) {
+    return {
+      success: true,
+      data: { message: "All configs are up to date", up_to_date: updateCheck.up_to_date }
+    };
+  }
+  const updated = [];
+  const errors2 = [];
+  for (const info of updateCheck.updates) {
+    const withoutAt = info.slug.startsWith("@") ? info.slug.slice(1) : info.slug;
+    const slashIdx = withoutAt.indexOf("/");
+    if (slashIdx === -1) continue;
+    const namespace = withoutAt.slice(0, slashIdx);
+    const rest = withoutAt.slice(slashIdx + 1);
+    const colonIdx = rest.indexOf(":");
+    const rawSlug = colonIdx !== -1 ? rest.slice(0, colonIdx) : rest;
+    const connType = colonIdx !== -1 ? rest.slice(colonIdx + 1) : void 0;
+    const installedId = `${rawSlug}-${connType ?? ""}`;
+    const outFile = path17.join(ctx.configDir, `mcp.${installedId}.json`);
+    try {
+      const { payload, version: resolvedVersion } = await fetchVersionPayload(
+        namespace,
+        rawSlug,
+        connType,
+        info.latest_version,
+        registry2
+      );
+      const payloadObj = payload;
+      payloadObj.id = installedId;
+      if (fs15.existsSync(outFile)) {
+        try {
+          const existing = JSON.parse(fs15.readFileSync(outFile, "utf-8"));
+          const existingConnector = existing.connector;
+          if (existingConnector?.env) {
+            const newConnector = payloadObj.connector ?? {};
+            newConnector.env = existingConnector.env;
+            payloadObj.connector = newConnector;
+          }
+          const existingOverlays = existing.overlays ?? {};
+          const newOverlays = payloadObj.overlays ?? {};
+          payloadObj.overlays = { ...existingOverlays, ...newOverlays };
+        } catch {
+        }
+      }
+      fs15.mkdirSync(ctx.configDir, { recursive: true });
+      fs15.writeFileSync(outFile, JSON.stringify(payloadObj, null, 2) + "\n", "utf-8");
+      addToManifest(info.slug, resolvedVersion, connType ?? "", registry2);
+      updated.push({ slug: info.slug, id: installedId, from: info.installed_version, to: resolvedVersion });
+    } catch (err) {
+      if (err instanceof RegistryError) {
+        errors2.push({ slug: info.slug, error: err.message });
+      } else {
+        errors2.push({ slug: info.slug, error: err.message });
+      }
+    }
+  }
+  return {
+    success: errors2.length === 0,
+    data: {
+      message: updated.length > 0 ? `Updated ${updated.length} config(s).${errors2.length > 0 ? ` ${errors2.length} failed.` : ""} Server will hot-reload automatically.` : `All configs are up to date.`,
+      updated,
+      up_to_date: updateCheck.up_to_date,
+      ...errors2.length > 0 && { errors: errors2 }
+    }
+  };
+}
 async function handleRegistryCheckUpdates(_ctx, args2) {
   const registry2 = args2.registry ?? "default";
   try {
@@ -141927,6 +142062,7 @@ var HANDLERS = {
   registry_browse: handleRegistryBrowse,
   registry_install: handleRegistryInstall,
   registry_check_updates: handleRegistryCheckUpdates,
+  registry_update: handleRegistryUpdate,
   // Auth
   auth_status: handleAuthStatus,
   auth_set: handleAuthSet,
@@ -144088,159 +144224,195 @@ async function run8(args2) {
 
 // src/commands/update.ts
 init_esm_shims();
-import { spawnSync } from "child_process";
-
-// src/lib/update-check.ts
-init_esm_shims();
-import https from "https";
 import fs22 from "fs";
 import path23 from "path";
-import os6 from "os";
-var CACHE_FILE = path23.join(os6.homedir(), ".heku", "update-check.json");
-var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
-function readCache() {
-  try {
-    return JSON.parse(fs22.readFileSync(CACHE_FILE, "utf-8"));
-  } catch {
-    return null;
-  }
-}
-function writeCache(latestVersion) {
-  try {
-    fs22.mkdirSync(path23.dirname(CACHE_FILE), { recursive: true });
-    fs22.writeFileSync(
-      CACHE_FILE,
-      JSON.stringify({ checkedAt: Date.now(), latestVersion }),
-      "utf-8"
-    );
-  } catch {
-  }
-}
-function fetchLatestVersion() {
-  return new Promise((resolve3, reject) => {
-    const req = https.get(
-      `https://registry.npmjs.org/${PKG_NAME}/latest`,
-      { headers: { Accept: "application/json" } },
-      (res) => {
-        let data = "";
-        res.on("data", (chunk) => {
-          data += chunk;
-        });
-        res.on("end", () => {
-          try {
-            if (res.statusCode !== 200) {
-              reject(new Error(`npm registry returned HTTP ${res.statusCode}`));
-              return;
-            }
-            const json2 = JSON.parse(data);
-            if (!json2.version) {
-              reject(new Error("npm registry response missing version field"));
-              return;
-            }
-            resolve3(json2.version);
-          } catch (e) {
-            reject(e);
-          }
-        });
-      }
-    );
-    req.on("error", reject);
-    req.setTimeout(5e3, () => {
-      req.destroy();
-      reject(new Error("timeout"));
-    });
-  });
-}
-function semverGt(a, b) {
-  const parse3 = (v) => v.replace(/[^0-9.]/g, "").split(".").map(Number);
-  const pa = parse3(a);
-  const pb = parse3(b);
-  for (let i = 0; i < 3; i++) {
-    const na = pa[i] ?? 0;
-    const nb = pb[i] ?? 0;
-    if (na > nb) return true;
-    if (na < nb) return false;
-  }
+function compoundId2(entry) {
+  const withoutNs = entry.slug.replace(/^@[^/]+\//, "");
+  const colonIdx = withoutNs.indexOf(":");
+  const rawSlug = colonIdx !== -1 ? withoutNs.slice(0, colonIdx) : withoutNs;
+  const ct = colonIdx !== -1 ? withoutNs.slice(colonIdx + 1) : entry.connector_type;
+  return `${rawSlug}-${ct}`;
+}
+function matchesTarget(entry, target) {
+  const slug = entry.slug;
+  if (slug === target || slug === `@${target}`) return true;
+  const withoutNs = slug.replace(/^@[^/]+\//, "");
+  const colonIdx = withoutNs.indexOf(":");
+  const rawSlug = colonIdx !== -1 ? withoutNs.slice(0, colonIdx) : withoutNs;
+  const ct = colonIdx !== -1 ? withoutNs.slice(colonIdx + 1) : "";
+  if (`${rawSlug}-${ct}` === target) return true;
+  if (withoutNs === target) return true;
+  const withoutConnector = slug.replace(/:.*$/, "");
+  if (withoutConnector === target || withoutConnector === `@${target}`) return true;
+  if (!target.includes(":") && !target.includes("-") && rawSlug === target) return true;
   return false;
 }
-function printUpdateNotice(latestVersion) {
-  const line1 = `  Update available: ${VERSION} \u2192 ${latestVersion}`;
-  const line2 = `  Run: npm install -g ${PKG_NAME}@latest`;
-  const width = Math.max(line1.length, line2.length) + 2;
-  const bar = "\u2500".repeat(width);
-  process.stderr.write(
-    `
-\u250C${bar}\u2510
-\u2502${line1.padEnd(width)}\u2502
-\u2502${line2.padEnd(width)}\u2502
-\u2514${bar}\u2518
-
-`
+async function downloadAndInstall(entry, latestVersion, configDir) {
+  const withoutAt = entry.slug.startsWith("@") ? entry.slug.slice(1) : entry.slug;
+  const slashIdx = withoutAt.indexOf("/");
+  const namespace = withoutAt.slice(0, slashIdx);
+  const rest = withoutAt.slice(slashIdx + 1);
+  const colonIdx = rest.indexOf(":");
+  const rawSlug = colonIdx !== -1 ? rest.slice(0, colonIdx) : rest;
+  const connType = colonIdx !== -1 ? rest.slice(colonIdx + 1) : entry.connector_type;
+  const id = `${rawSlug}-${connType}`;
+  const outFile = path23.join(configDir, `mcp.${id}.json`);
+  const { payload, version: resolvedVersion } = await fetchVersionPayload(
+    namespace,
+    rawSlug,
+    connType,
+    latestVersion,
+    entry.registry
   );
-}
-function checkForUpdate() {
-  const cache2 = readCache();
-  if (cache2 && typeof cache2.latestVersion === "string" && cache2.latestVersion.length > 0 && Date.now() - cache2.checkedAt < CACHE_TTL_MS) {
-    if (semverGt(cache2.latestVersion, VERSION)) {
-      printUpdateNotice(cache2.latestVersion);
+  const payloadObj = payload;
+  payloadObj.id = id;
+  if (fs22.existsSync(outFile)) {
+    try {
+      const existing = JSON.parse(fs22.readFileSync(outFile, "utf-8"));
+      const existingConn = existing.connector;
+      if (existingConn?.env) {
+        const newConn = payloadObj.connector ?? {};
+        newConn.env = existingConn.env;
+        payloadObj.connector = newConn;
+      }
+      const existingOverlays = existing.overlays ?? {};
+      const newOverlays = payloadObj.overlays ?? {};
+      payloadObj.overlays = { ...existingOverlays, ...newOverlays };
+    } catch {
     }
+  }
+  fs22.mkdirSync(configDir, { recursive: true });
+  fs22.writeFileSync(outFile, JSON.stringify(payloadObj, null, 2) + "\n", "utf-8");
+  addToManifest(entry.slug, resolvedVersion, connType, entry.registry, entry.forked_from ?? null);
+  return { id, from: entry.version, to: resolvedVersion };
+}
+async function run9(args2) {
+  const registryIdx = args2.indexOf("--registry");
+  const registry2 = registryIdx !== -1 ? args2[registryIdx + 1] ?? "default" : "default";
+  const skipIndices = /* @__PURE__ */ new Set();
+  if (registryIdx !== -1) {
+    skipIndices.add(registryIdx);
+    skipIndices.add(registryIdx + 1);
+  }
+  const target = args2.find((a, i) => !skipIndices.has(i) && !a.startsWith("--"));
+  const systemConfig = loadSystemConfig(process.cwd());
+  const configDir = resolveConfigDir(void 0, systemConfig);
+  const { installed } = loadManifest();
+  const forRegistry = installed.filter((e) => e.registry === registry2);
+  if (forRegistry.length === 0) {
+    console.log();
+    console.log(dim("  No registry-installed configs found."));
+    console.log(dim(`  Install one with: ${bold("heku install @ns/slug")}`));
+    console.log();
     return;
   }
-  fetchLatestVersion().then((latest) => {
-    writeCache(latest);
-    if (semverGt(latest, VERSION)) {
-      printUpdateNotice(latest);
+  let toCheck;
+  if (target) {
+    toCheck = forRegistry.filter((e) => matchesTarget(e, target));
+    if (toCheck.length === 0) {
+      console.log();
+      console.error(red("\u2717") + `  No installed config matches "${bold(target)}".`);
+      console.error(dim(`  Run ${bold("heku list")} to see installed configs.`));
+      console.log();
+      process.exit(1);
     }
-  }).catch(() => {
-  });
-}
-
-// src/commands/update.ts
-async function run9(_args) {
-  process.stderr.write(`  Checking for updates to ${bold(PKG_NAME)}...
-`);
-  let latest;
+  } else {
+    toCheck = forRegistry;
+  }
+  console.log();
+  if (target) {
+    console.log(bold(`  Checking ${cyan(target)}...`));
+  } else {
+    console.log(bold("  Checking for updates..."));
+  }
+  console.log();
+  let updateResult;
   try {
-    latest = await fetchLatestVersion();
-  } catch {
-    process.stderr.write(`  ${yellow("\u26A0")}  Could not reach npm registry. Check your network and try again.
-`);
+    updateResult = await checkUpdates(
+      toCheck.map((e) => ({ slug: e.slug, version: e.version })),
+      registry2
+    );
+  } catch (err) {
+    console.error(
+      red("\u2717") + `  ${err instanceof RegistryError ? err.message : err.message}`
+    );
     process.exit(1);
   }
-  if (!semverGt(latest, VERSION)) {
-    process.stderr.write(`  ${green("\u2713")}  Already up to date (${cyan(VERSION)})
-`);
+  const { updates, up_to_date, deprecated } = updateResult;
+  const colWidth = Math.max(
+    ...[...updates, ...up_to_date, ...deprecated].map((u) => {
+      const entry = toCheck.find((e) => e.slug === u.slug);
+      return entry ? compoundId2(entry).length : 0;
+    }),
+    12
+  );
+  for (const u of up_to_date) {
+    const entry = toCheck.find((e) => e.slug === u.slug);
+    const id = entry ? compoundId2(entry) : u.slug;
+    console.log(`  ${dim(id.padEnd(colWidth))}  ${dim(`v${u.version}`)}  ${dim("up to date")}`);
+  }
+  for (const u of updates) {
+    const entry = toCheck.find((e) => e.slug === u.slug);
+    const id = entry ? compoundId2(entry) : u.slug;
+    const badge = u.breaking ? yellow(`${u.severity} \xB7 breaking`) : cyan(u.severity);
+    console.log(
+      `  ${bold(id.padEnd(colWidth))}  ${dim(`v${u.installed_version}`)} \u2192 ${green(`v${u.latest_version}`)}  [${badge}]`
+    );
+  }
+  for (const d of deprecated) {
+    const entry = toCheck.find((e) => e.slug === d.slug);
+    const id = entry ? compoundId2(entry) : d.slug;
+    const note = d.replacement ? `  \u2192 use ${cyan(d.replacement)}` : "";
+    console.log(`  ${yellow(id.padEnd(colWidth))}  ${dim(`v${d.installed_version}`)}  ${yellow("deprecated")}${note}`);
+  }
+  console.log();
+  if (updates.length === 0) {
+    console.log(green("\u2713") + (target ? `  ${cyan(target)} is up to date.` : "  All configs are up to date."));
+    if (deprecated.length > 0) {
+      console.log(yellow("\u26A0") + `  ${deprecated.length} deprecated \u2014 consider replacing them.`);
+    }
+    console.log();
     return;
   }
-  process.stderr.write(`  ${bold(VERSION)} \u2192 ${bold(latest)}
-`);
-  process.stderr.write(`  Running: npm install -g ${PKG_NAME}@latest
-
-`);
-  const result = spawnSync("npm", ["install", "-g", `${PKG_NAME}@latest`], {
-    stdio: "inherit",
-    shell: true
-  });
-  if (result.status !== 0) {
-    process.stderr.write(
-      `
-  Update failed. You can update manually:
-    npm install -g ${PKG_NAME}@latest
-`
-    );
-    process.exit(result.status ?? 1);
+  const noun = updates.length === 1 ? "config" : "configs";
+  console.log(bold(`  Updating ${updates.length} ${noun}...`));
+  console.log();
+  const entryBySlug = new Map(toCheck.map((e) => [e.slug, e]));
+  let successCount = 0;
+  let failCount = 0;
+  for (const u of updates) {
+    const entry = entryBySlug.get(u.slug);
+    if (!entry) continue;
+    const id = compoundId2(entry);
+    process.stdout.write(`  ${bold(id.padEnd(colWidth))}  Downloading... `);
+    try {
+      const result = await downloadAndInstall(entry, u.latest_version, configDir);
+      console.log(green("done") + `  ${dim(`${result.from} \u2192 ${result.to}`)}`);
+      successCount++;
+    } catch (err) {
+      console.log(red("failed"));
+      const msg = err instanceof RegistryError ? err.message : err.message;
+      console.error(`  ${"".padEnd(colWidth)}  ${red("\u2717")}  ${msg}`);
+      failCount++;
+    }
   }
-  process.stderr.write(`
-  ${green("\u2713")}  Updated to ${bold(latest)}
-`);
+  console.log();
+  if (failCount === 0) {
+    const upToDateNote = up_to_date.length > 0 ? `  ${dim(`${up_to_date.length} already up to date.`)}` : "";
+    console.log(green("\u2713") + `  ${successCount} ${noun} updated.${upToDateNote}`);
+  } else if (successCount > 0) {
+    console.log(yellow("\u26A0") + `  ${successCount} updated, ${failCount} failed.`);
+  } else {
+    console.log(red("\u2717") + `  All updates failed.`);
+    process.exit(1);
+  }
+  console.log(dim("  Restart or reload heku to apply changes."));
+  console.log();
 }
 
 // src/cli.ts
 var args = process.argv.slice(2);
 var command = args[0] ?? "start";
-if (command !== "update") {
-  checkForUpdate();
-}
 switch (command) {
   case "start":
     await run(args.slice(1));
@@ -144296,11 +144468,12 @@ function printUsage() {
     heku auth setup [service]         Interactive credential setup wizard
     heku install <target>             Install a config from the registry
     heku uninstall <target>           Remove an installed registry config
+    heku update                       Update all installed configs to latest versions
+    heku update <config>              Update a specific config (e.g. github-http or @ns/github:http)
     heku login                        Log in to the mcp.rtl.space registry
     heku logout                       Log out of the registry
     heku publish [file]               Publish a config to the registry
     heku fork <namespace/slug>        Fork a registry config into your namespace
-    heku update                       Update heku to the latest version
     heku help                         Show this message
 
   HTTP mode:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rapidthoughtlabs/heku",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "A single dynamic MCP server that turns JSON configs into working API tools",
   "type": "module",
   "main": "dist/cli.js",