@rapidthoughtlabs/heku 0.2.0 → 0.3.1

package/dist/cli.js

@@ -4601,7 +4601,7 @@ var require_schemes = __commonJS({
         serialize: httpSerialize
       }
     );
-    var https2 = (
+    var https = (
       /** @type {SchemeHandler} */
       {
         scheme: "https",
@@ -4650,7 +4650,7 @@ var require_schemes = __commonJS({
       /** @type {Record<SchemeName, SchemeHandler>} */
       {
         http: http2,
-        https: https2,
+        https,
         ws,
         wss,
         urn,
@@ -8442,7 +8442,7 @@ var require_supports_color = __commonJS({
   "node_modules/supports-color/index.js"(exports2, module2) {
     "use strict";
     init_esm_shims();
-    var os7 = __require("os");
+    var os6 = __require("os");
     var tty = __require("tty");
     var hasFlag = require_has_flag();
     var { env } = process;
@@ -8499,7 +8499,7 @@ var require_supports_color = __commonJS({
         return min;
       }
       if (process.platform === "win32") {
-        const osRelease = os7.release().split(".");
+        const osRelease = os6.release().split(".");
         if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
           return Number(osRelease[2]) >= 14931 ? 3 : 2;
         }
@@ -26827,10 +26827,10 @@ var require_view = __commonJS({
     var debug = require_src()("express:view");
     var path24 = __require("path");
     var fs23 = __require("fs");
-    var dirname3 = path24.dirname;
+    var dirname4 = path24.dirname;
     var basename3 = path24.basename;
     var extname2 = path24.extname;
-    var join3 = path24.join;
+    var join4 = path24.join;
     var resolve3 = path24.resolve;
     module2.exports = View;
     function View(name, options) {
@@ -26866,7 +26866,7 @@ var require_view = __commonJS({
       for (var i = 0; i < roots.length && !path25; i++) {
         var root = roots[i];
         var loc = resolve3(root, name);
-        var dir = dirname3(loc);
+        var dir = dirname4(loc);
         var file2 = basename3(loc);
         path25 = this.resolve(dir, file2);
       }
@@ -26892,12 +26892,12 @@ var require_view = __commonJS({
     };
     View.prototype.resolve = function resolve4(dir, file2) {
       var ext = this.ext;
-      var path25 = join3(dir, file2);
+      var path25 = join4(dir, file2);
       var stat4 = tryStat(path25);
       if (stat4 && stat4.isFile()) {
         return path25;
       }
-      path25 = join3(dir, basename3(file2, ext), "index" + ext);
+      path25 = join4(dir, basename3(file2, ext), "index" + ext);
       stat4 = tryStat(path25);
       if (stat4 && stat4.isFile()) {
         return path25;
@@ -30573,7 +30573,7 @@ var require_send = __commonJS({
     var Stream = __require("stream");
     var util2 = __require("util");
     var extname2 = path24.extname;
-    var join3 = path24.join;
+    var join4 = path24.join;
     var normalize2 = path24.normalize;
     var resolve3 = path24.resolve;
     var sep = path24.sep;
@@ -30745,7 +30745,7 @@ var require_send = __commonJS({
           return res;
         }
         parts = path25.split(sep);
-        path25 = normalize2(join3(root, path25));
+        path25 = normalize2(join4(root, path25));
       } else {
         if (UP_PATH_REGEXP.test(path25)) {
           debug('malicious path "%s"', path25);
@@ -30878,7 +30878,7 @@ var require_send = __commonJS({
           if (err) return self2.onStatError(err);
           return self2.error(404);
         }
-        var p = join3(path25, self2._index[i]);
+        var p = join4(path25, self2._index[i]);
         debug('stat "%s"', p);
         fs23.stat(p, function(err2, stat4) {
           if (err2) return next(err2);
@@ -32320,7 +32320,7 @@ var require_cross_spawn = __commonJS({
       enoent.hookChildProcess(spawned, parsed);
       return spawned;
     }
-    function spawnSync2(command2, args2, options) {
+    function spawnSync(command2, args2, options) {
       const parsed = parse3(command2, args2, options);
       const result = cp.spawnSync(parsed.command, parsed.args, parsed.options);
       result.error = result.error || enoent.verifyENOENTSync(result.status, parsed);
@@ -32328,7 +32328,7 @@ var require_cross_spawn = __commonJS({
     }
     module2.exports = spawn4;
     module2.exports.spawn = spawn4;
-    module2.exports.sync = spawnSync2;
+    module2.exports.sync = spawnSync;
     module2.exports._parse = parse3;
     module2.exports._enoent = enoent;
   }
@@ -33933,7 +33933,7 @@ var require_service_config = __commonJS({
     exports2.validateRetryThrottling = validateRetryThrottling;
     exports2.validateServiceConfig = validateServiceConfig;
     exports2.extractAndSelectServiceConfig = extractAndSelectServiceConfig;
-    var os7 = __require("os");
+    var os6 = __require("os");
     var constants_1 = require_constants();
     var DURATION_REGEX = /^\d+(\.\d{1,9})?s$/;
     var CLIENT_LANGUAGE_STRING = "node";
@@ -34232,7 +34232,7 @@ var require_service_config = __commonJS({
         if (Array.isArray(validatedConfig.clientHostname)) {
           let hostnameMatched = false;
           for (const hostname3 of validatedConfig.clientHostname) {
-            if (hostname3 === os7.hostname()) {
+            if (hostname3 === os6.hostname()) {
               hostnameMatched = true;
             }
           }
@@ -48781,7 +48781,7 @@ var require_subchannel_call = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.Http2SubchannelCall = void 0;
     var http2 = __require("http2");
-    var os7 = __require("os");
+    var os6 = __require("os");
     var constants_1 = require_constants();
     var metadata_1 = require_metadata2();
     var stream_decoder_1 = require_stream_decoder();
@@ -48789,7 +48789,7 @@ var require_subchannel_call = __commonJS({
     var constants_2 = require_constants();
     var TRACER_NAME = "subchannel_call";
     function getSystemErrorName(errno) {
-      for (const [name, num] of Object.entries(os7.constants.errno)) {
+      for (const [name, num] of Object.entries(os6.constants.errno)) {
         if (num === errno) {
           return name;
         }
@@ -79142,7 +79142,7 @@ var require_named_placeholders = __commonJS({
         }
         return s;
       }
-      function join3(tree) {
+      function join4(tree) {
         if (tree.length === 1) {
           return tree;
         }
@@ -79168,7 +79168,7 @@ var require_named_placeholders = __commonJS({
         if (cache2 && (tree = cache2.get(query))) {
           return toArrayParams(tree, paramsObj);
         }
-        tree = join3(parse3(query));
+        tree = join4(parse3(query));
         if (cache2) {
           cache2.set(query, tree);
         }
@@ -81773,9 +81773,9 @@ var require_bindings = __commonJS({
     init_esm_shims();
     var fs23 = __require("fs");
     var path24 = __require("path");
-    var fileURLToPath3 = require_file_uri_to_path();
-    var join3 = path24.join;
-    var dirname3 = path24.dirname;
+    var fileURLToPath4 = require_file_uri_to_path();
+    var join4 = path24.join;
+    var dirname4 = path24.dirname;
     var exists = fs23.accessSync && function(path25) {
       try {
         fs23.accessSync(path25);
@@ -81834,7 +81834,7 @@ var require_bindings = __commonJS({
       var requireFunc = typeof __webpack_require__ === "function" ? __non_webpack_require__ : __require;
       var tries = [], i = 0, l = opts.try.length, n, b, err;
       for (; i < l; i++) {
-        n = join3.apply(
+        n = join4.apply(
           null,
           opts.try[i].map(function(p) {
             return opts[p] || p;
@@ -81885,17 +81885,17 @@ var require_bindings = __commonJS({
       Error.stackTraceLimit = origSTL;
       var fileSchema = "file://";
       if (fileName.indexOf(fileSchema) === 0) {
-        fileName = fileURLToPath3(fileName);
+        fileName = fileURLToPath4(fileName);
       }
       return fileName;
     };
     exports2.getRoot = function getRoot(file2) {
-      var dir = dirname3(file2), prev;
+      var dir = dirname4(file2), prev;
       while (true) {
         if (dir === ".") {
           dir = process.cwd();
         }
-        if (exists(join3(dir, "package.json")) || exists(join3(dir, "node_modules"))) {
+        if (exists(join4(dir, "package.json")) || exists(join4(dir, "node_modules"))) {
           return dir;
         }
         if (prev === dir) {
@@ -81904,7 +81904,7 @@ var require_bindings = __commonJS({
           );
         }
         prev = dir;
-        dir = join3(dir, "..");
+        dir = join4(dir, "..");
       }
     };
   }
@@ -93824,7 +93824,7 @@ var require_client_metadata = __commonJS({
     exports2.makeClientMetadata = makeClientMetadata;
     exports2.addContainerMetadata = addContainerMetadata;
     exports2.getFAASEnv = getFAASEnv;
-    var os7 = __require("os");
+    var os6 = __require("os");
     var process5 = __require("process");
     var bson_1 = require_bson2();
     var error_1 = require_error2();
@@ -93894,7 +93894,7 @@ var require_client_metadata = __commonJS({
       if (!metadataDocument.ifItFitsItSits("platform", runtimeInfo)) {
         throw new error_1.MongoInvalidArgumentError("Unable to include driverInfo platform, metadata cannot exceed 512 bytes");
       }
-      const osInfo = (/* @__PURE__ */ new Map()).set("name", process5.platform).set("architecture", process5.arch).set("version", os7.release()).set("type", os7.type());
+      const osInfo = (/* @__PURE__ */ new Map()).set("name", process5.platform).set("architecture", process5.arch).set("version", os6.release()).set("type", os6.type());
       if (!metadataDocument.ifItFitsItSits("os", osInfo)) {
         for (const key of osInfo.keys()) {
           osInfo.delete(key);
@@ -93997,13 +93997,13 @@ var require_client_metadata = __commonJS({
     function getRuntimeInfo() {
       if ("Deno" in globalThis) {
         const version2 = typeof Deno?.version?.deno === "string" ? Deno?.version?.deno : "0.0.0-unknown";
-        return `Deno v${version2}, ${os7.endianness()}`;
+        return `Deno v${version2}, ${os6.endianness()}`;
       }
       if ("Bun" in globalThis) {
         const version2 = typeof Bun?.version === "string" ? Bun?.version : "0.0.0-unknown";
-        return `Bun v${version2}, ${os7.endianness()}`;
+        return `Bun v${version2}, ${os6.endianness()}`;
       }
-      return `Node.js ${process5.version}, ${os7.endianness()}`;
+      return `Node.js ${process5.version}, ${os6.endianness()}`;
     }
   }
 });
@@ -130795,7 +130795,7 @@ function isConnectorType(value) {
 // src/lib/config-rules.ts
 init_esm_shims();
 init_env_store();
-var RESERVED_IDS = ["one"];
+var RESERVED_IDS = ["heku"];
 function validateBaseId(id) {
   if (!id || typeof id !== "string" || id.trim() === "") {
     return "id must be a non-empty string";
@@ -131059,8 +131059,10 @@ function getInstalledEntry(slug, registry2 = "default") {
 
 // src/lib/version.ts
 init_esm_shims();
-var VERSION = true ? "0.2.0" : "0.0.0-dev";
-var PKG_NAME = true ? "@rapidthoughtlabs/heku" : "@rapidthoughtlabs/heku";
+import { readFileSync } from "fs";
+import { fileURLToPath as fileURLToPath2 } from "url";
+import { join, dirname } from "path";
+var VERSION = true ? "0.3.1" : readPkgVersion();
 
 // src/connectors/mcp.ts
 init_esm_shims();
@@ -133924,8 +133926,40 @@ var serverSettings = {
 function getServerSettings() {
   return { ...serverSettings };
 }
+var DISCOVERY_FLAT_SET = /* @__PURE__ */ new Set(["heku.search", "heku.list_tools", "heku.list_configs", "heku.invoke"]);
+var DISCOVERY_TRIO_SET = /* @__PURE__ */ new Set(["heku.search", "heku.list_tools", "heku.list_configs"]);
 function createAdminRouter(ctx) {
   const router = (0, import_express.Router)();
+  router.get("/tools-manifest", (req, res) => {
+    const styleParam = req.query.style;
+    const style = styleParam === "namespaced" || styleParam === "flat" ? styleParam : serverSettings.manifestStyle;
+    const tools = ctx.registry.list();
+    if (style === "namespaced") {
+      const visible2 = tools.filter(
+        (rt) => DISCOVERY_TRIO_SET.has(`${rt.configId}.${rt.tool.name}`)
+      );
+      res.json(
+        visible2.map((rt) => ({
+          name: `${rt.configId}.${rt.tool.name}`,
+          description: rt.tool.description,
+          inputSchema: buildInputSchema2(rt.tool.params ?? []),
+          configId: rt.configId
+        }))
+      );
+      return;
+    }
+    const visible = tools.filter(
+      (rt) => DISCOVERY_FLAT_SET.has(`${rt.configId}.${rt.tool.name}`)
+    );
+    res.json(
+      visible.map((rt) => ({
+        name: rt.tool.name,
+        description: rt.tool.description,
+        inputSchema: buildInputSchema2(rt.tool.params ?? []),
+        configId: rt.configId
+      }))
+    );
+  });
   router.get("/server-settings", (_req, res) => {
     res.json({
       hotReload: ctx.watcher ? !ctx.watcher.isPaused() : serverSettings.hotReload,
@@ -134326,6 +134360,8 @@ var ToolRegistry = class {
       }
       this.tools.set(qualifiedName, {
         configId: config2.id,
+        configName: config2.name,
+        configDescription: config2.description,
         connectorConfig: config2.connector,
         tool
       });
@@ -134349,8 +134385,8 @@ var ToolRegistry = class {
     return this.tools.size;
   }
 };
-var DISCOVERY_FLAT = /* @__PURE__ */ new Set(["one.search", "one.list_tools", "one.list_configs", "one.invoke"]);
-var DISCOVERY_TRIO = /* @__PURE__ */ new Set(["one.search", "one.list_tools", "one.list_configs"]);
+var DISCOVERY_FLAT = /* @__PURE__ */ new Set(["heku.search", "heku.list_tools", "heku.list_configs", "heku.invoke"]);
+var DISCOVERY_TRIO = /* @__PURE__ */ new Set(["heku.search", "heku.list_tools", "heku.list_configs"]);
 function buildManifestView(style, registry2) {
   if (style === "namespaced") {
     return {
@@ -134361,23 +134397,24 @@ function buildManifestView(style, registry2) {
   }
   return {
     visible: registry2.list().filter((rt) => DISCOVERY_FLAT.has(`${rt.configId}.${rt.tool.name}`)),
-    rewrite: (qualified) => qualified.replace(/^one\./, ""),
-    resolve: (incoming) => incoming.includes(".") ? incoming : `one.${incoming}`
+    rewrite: (qualified) => qualified.replace(/^heku\./, ""),
+    resolve: (incoming) => incoming.includes(".") ? incoming : `heku.${incoming}`
   };
 }
 var BLOCKED_WHEN_LOCKED = /* @__PURE__ */ new Set([
-  "one.create_config",
-  "one.update_config",
-  "one.delete_config",
-  "one.add_tool",
-  "one.remove_tool",
-  "one.update_tool",
-  "one.registry_install",
-  "one.auth_set"
+  "heku.create_config",
+  "heku.update_config",
+  "heku.delete_config",
+  "heku.add_tool",
+  "heku.remove_tool",
+  "heku.update_tool",
+  "heku.registry_install",
+  "heku.registry_update",
+  "heku.auth_set"
 ]);
 function blockedTool(qualifiedName, args2) {
   if (BLOCKED_WHEN_LOCKED.has(qualifiedName)) return qualifiedName;
-  if (qualifiedName === "one.invoke") {
+  if (qualifiedName === "heku.invoke") {
     const target = args2["tool"];
     if (typeof target === "string" && BLOCKED_WHEN_LOCKED.has(target)) return target;
   }
@@ -134393,7 +134430,7 @@ function makeServer(registry2, transportCtx) {
     const { visible, rewrite } = buildManifestView(manifestStyle, registry2);
     const tools = visible.map((rt) => ({
       name: rewrite(`${rt.configId}.${rt.tool.name}`),
-      description: `[${rt.configId}] ${rt.tool.description}`,
+      description: manifestStyle === "flat" ? rt.tool.description : `[${rt.configId}] ${rt.tool.description}`,
       inputSchema: buildInputSchema(rt.tool.params)
     }));
     return { tools };
@@ -135371,9 +135408,9 @@ var NodeFsHandler = class {
     if (this.fsw.closed) {
       return;
     }
-    const dirname3 = sp.dirname(file2);
+    const dirname4 = sp.dirname(file2);
     const basename3 = sp.basename(file2);
-    const parent = this.fsw._getWatchedDir(dirname3);
+    const parent = this.fsw._getWatchedDir(dirname4);
     let prevStats = stats;
     if (parent.has(basename3))
       return;
@@ -135400,7 +135437,7 @@ var NodeFsHandler = class {
             prevStats = newStats2;
           }
         } catch (error3) {
-          this.fsw._remove(dirname3, basename3);
+          this.fsw._remove(dirname4, basename3);
         }
       } else if (parent.has(basename3)) {
         const at = newStats.atimeMs;
@@ -136363,7 +136400,7 @@ init_loader();
 var DEBOUNCE_MS = 300;
 function isMcpConfigFile(filePath) {
   const base2 = path11.basename(filePath);
-  return base2.startsWith("mcp.") && base2.endsWith(".json") && base2 !== "mcp.one.json";
+  return base2.startsWith("mcp.") && base2.endsWith(".json") && base2 !== "mcp.heku.json";
 }
 function isMcpEnvFile(filePath) {
   const base2 = path11.basename(filePath);
@@ -136685,7 +136722,7 @@ function resolveConfigDir(cliOverride, systemConfig) {
 init_esm_shims();
 var import_express5 = __toESM(require_express2(), 1);
 var import_cors = __toESM(require_lib3(), 1);
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { fileURLToPath as fileURLToPath3 } from "url";
 
 // server/mcp-client.ts
 init_esm_shims();
@@ -137612,7 +137649,21 @@ function createApiRouter(mcp) {
       }
     }
   });
-  router.get("/tools/manifest", (_req, res) => {
+  router.get("/tools/manifest", async (req, res) => {
+    const style = req.query.style;
+    if (style === "flat" || style === "namespaced") {
+      try {
+        const tools = await admin.get(`/tools-manifest?style=${style}`);
+        res.json(tools);
+      } catch (err) {
+        if (err instanceof AdminUnavailableError) {
+          res.json([]);
+          return;
+        }
+        res.status(500).json({ error: err.message });
+      }
+      return;
+    }
     res.json(mcp.listTools());
   });
   router.post("/tools/call", async (req, res) => {
@@ -137822,6 +137873,9 @@ async function getConfigMeta(namespace, slug, connectorType, registryName = "def
   const slugWithConnector = connectorType ? `${slug}:${connectorType}` : slug;
   return jsonFetch(`/configs/${namespace}/${slugWithConnector}`, { registryName });
 }
+async function listVersions(namespace, slug, registryName = "default") {
+  return jsonFetch(`/configs/${namespace}/${slug}/versions`, { registryName });
+}
 async function fetchVersionPayload(namespace, slug, connectorType, version2, registryName = "default") {
   const slugWithConnector = connectorType ? `${slug}:${connectorType}` : slug;
   const vPath = version2 ?? "latest";
@@ -137982,7 +138036,7 @@ function createRegistryRouter() {
     const slug = colonIdx !== -1 ? rest.slice(0, colonIdx) : rest;
     const connectorType = colonIdx !== -1 ? rest.slice(colonIdx + 1) : void 0;
     const meta3 = await getConfigMeta(namespace, slug, connectorType, registry2);
-    res.json({ category: meta3.category, tags: meta3.tags });
+    res.json({ category: meta3.category, tags: meta3.tags, latest_version: meta3.latest_version ?? null });
   }));
   router.post("/check-updates", wrap(async (req, res) => {
     const { installed, registry: registry2 = "default" } = req.body;
@@ -138094,6 +138148,12 @@ function createRegistryRouter() {
     const { payload } = await fetchVersionPayload(namespace, slug, connector_type, void 0, registry2);
     res.json(payload);
   }));
+  router.get("/versions/:namespace/:slug", wrap(async (req, res) => {
+    const { namespace, slug } = req.params;
+    const registry2 = req.query["registry"] ?? "default";
+    const versions = await listVersions(namespace, slug, registry2);
+    res.json(versions);
+  }));
   router.delete("/uninstall/:id", wrap(async (req, res) => {
     const id = req.params["id"];
     const registry2 = req.query["registry"] ?? "default";
@@ -138152,7 +138212,7 @@ async function startBridge(options) {
     }
   };
 }
-var isMain = process.argv[1] === fileURLToPath2(import.meta.url);
+var isMain = process.argv[1] === fileURLToPath3(import.meta.url);
 if (isMain) {
   const port = Number(process.env["PORT"] ?? 3456);
   const bridge = await startBridge({ port });
@@ -138180,7 +138240,7 @@ init_env_store();
 // src/internal-config.ts
 init_esm_shims();
 var INTERNAL_CONFIG = {
-  id: "one",
+  id: "heku",
   name: "heku Self-Management",
   description: "Create configs, add tools, install from registry, manage auth \u2014 heku's own management interface for LLM agents.",
   connector: { type: "internal" },
@@ -138206,12 +138266,12 @@ var INTERNAL_CONFIG = {
     },
     {
       name: "list_configs",
-      description: "**Start here.** Returns the names of all active configs as a flat array. Config IDs follow the pattern `<base>-<connector>` where connector is one of: http, cli, file, grpc, graphql, mcp, sql, mongodb. Use these names to scope `one.search` or `one.list_tools`.",
+      description: "**Start here.** Returns all active configs as an array of objects with `id`, `name`, and `description`. Config IDs follow the pattern `<base>-<connector>` (e.g. `github-http`, `linear-graphql`). Use the description to pick the right config, then pass its `id` to `search` or `list_tools`.",
       params: []
     },
     {
       name: "search",
-      description: "Find tools by name or intent across all configs (or within a specific one). Returns matching tools with full schemas grouped by match quality: exact name match first, then partial, then description, then related. Indexes both native `one.*` self-management tools and all service tools. Pass config for exact-first matching: 'github-http' returns only github-http tools; 'github' matches both github-http and github-cli.",
+      description: "Find tools by name or intent across all configs (or within a specific one). Returns matching tools with full schemas grouped by quality: exact \u2192 partial \u2192 description \u2192 related. Covers both native `heku.*` self-management tools and all loaded service tools. Narrow by config: `github-http` returns only github-http tools; `github` matches github-http and github-cli. Once you have a tool name, call `invoke` with `config_id.tool_name` to execute it.",
       params: [
         {
           name: "query",
@@ -138229,13 +138289,13 @@ var INTERNAL_CONFIG = {
     },
     {
       name: "invoke",
-      description: "Execute any registered tool by its qualified name (config_id.tool_name). Use after one.search or one.list_tools to run the tool you found. Works for all service tools (open-meteo-http.get_forecast, github-http.create_issue, etc.) and all one.* self-management tools.",
+      description: "Execute any registered tool by its qualified name (`config_id.tool_name`). Workflow: (1) list_configs \u2192 pick a config id, (2) search or list_tools \u2192 get the tool name and required args, (3) invoke \u2192 run it. Examples: `github-http.create_issue`, `linear-graphql.create_issue`, `heku.server_status`.",
       params: [
         {
           name: "tool",
           type: "string",
           required: true,
-          description: "Qualified tool name in the format config_id.tool_name (e.g. 'open-meteo-http.get_forecast', 'github-http.create_issue', 'one.server_status')"
+          description: "Qualified tool name in the format config_id.tool_name (e.g. 'open-meteo-http.get_forecast', 'github-http.create_issue', 'heku.server_status')"
         },
         {
           name: "args",
@@ -138257,7 +138317,7 @@ var INTERNAL_CONFIG = {
     },
     {
       name: "delete_config",
-      description: "Delete a config file and unregister all its tools. Cannot delete the 'one' self-management config \u2014 use self_config: false in heku.config.json instead.",
+      description: "Delete a config file and unregister all its tools. Cannot delete the 'heku' self-management config \u2014 use self_config: false in heku.config.json instead.",
       params: [
         { name: "config_id", type: "string", required: true, description: "Config ID to delete" }
       ]
@@ -138296,9 +138356,9 @@ var INTERNAL_CONFIG = {
     },
     {
       name: "list_tools",
-      description: "Returns tools with full schemas ready to call. No args: returns only the native `one.*` self-management surface. With config_id: returns all tools in that config. For targeted lookup by name or intent, use `one.search` instead.",
+      description: "Returns tools with full schemas ready to call. No args: returns only the native `heku.*` self-management surface. With config_id: returns all tools in that config. For targeted lookup by name or intent, use `heku.search` instead.",
       params: [
-        { name: "config_id", type: "string", required: false, description: "Config ID to list tools for. Omit to list only native one.* tools." }
+        { name: "config_id", type: "string", required: false, description: "Config ID to list tools for. Omit to list only native heku.* tools." }
       ]
     },
     {
@@ -138345,6 +138405,14 @@ var INTERNAL_CONFIG = {
         { name: "registry", type: "string", required: false, description: "Registry source name (default: 'default')" }
       ]
     },
+    {
+      name: "registry_update",
+      description: "Update registry-installed configs to the latest available version. Preserves local credentials (connector.env) and overlays. Pass config_id to update a single config, or omit to update all installed configs.",
+      params: [
+        { name: "config_id", type: "string", required: false, description: "ID of the config to update (e.g. 'github-http'). Omit to update all installed configs." },
+        { name: "registry", type: "string", required: false, description: "Registry source name (default: 'default')" }
+      ]
+    },
     {
       name: "auth_status",
       description: "Check which configs have missing or misconfigured credentials. Returns per-config auth status and the specific env vars that are missing.",
@@ -141195,7 +141263,17 @@ async function handleGetConfig(ctx, args2) {
   return { success: true, data: raw };
 }
 async function handleListConfigs(ctx, _args) {
-  const configs = [...new Set(ctx.registry.list().map((rt) => rt.configId))].sort();
+  const seen = /* @__PURE__ */ new Map();
+  for (const rt of ctx.registry.list()) {
+    if (!seen.has(rt.configId)) {
+      seen.set(rt.configId, {
+        id: rt.configId,
+        ...rt.configName && { name: rt.configName },
+        ...rt.configDescription && { description: rt.configDescription }
+      });
+    }
+  }
+  const configs = [...seen.values()].sort((a, b) => a.id.localeCompare(b.id));
   return { success: true, data: { configs } };
 }
 async function handleUpdateConfig(ctx, args2) {
@@ -141412,7 +141490,7 @@ async function handleUpdateTool(ctx, args2) {
 }
 async function handleListTools(ctx, args2) {
   const filterById = args2.config_id;
-  const scopeId = filterById ?? "one";
+  const scopeId = filterById ?? "heku";
   const tools = ctx.registry.list().filter((rt) => rt.configId === scopeId).map((rt) => ({
     qualified_name: `${rt.configId}.${rt.tool.name}`,
     config_id: rt.configId,
@@ -141633,6 +141711,112 @@ async function handleRegistryInstall(ctx, args2) {
     return { success: false, data: { error: err.message } };
   }
 }
+async function handleRegistryUpdate(ctx, args2) {
+  const configId = args2.config_id;
+  const registry2 = args2.registry ?? "default";
+  const { installed } = loadManifest();
+  const forRegistry = installed.filter((e) => e.registry === registry2);
+  let toCheck;
+  if (configId) {
+    const entry = forRegistry.find((e) => {
+      const withoutNs = e.slug.replace(/^@[^/]+\//, "");
+      const colonIdx = withoutNs.indexOf(":");
+      if (colonIdx === -1) return false;
+      const base2 = withoutNs.slice(0, colonIdx);
+      const ct = withoutNs.slice(colonIdx + 1);
+      return `${base2}-${ct}` === configId;
+    });
+    if (!entry) {
+      return {
+        success: false,
+        data: { error: `"${configId}" is not a registry-installed config or was not found in the manifest. Only configs installed from the registry can be updated this way.` }
+      };
+    }
+    toCheck = [entry];
+  } else {
+    if (forRegistry.length === 0) {
+      return { success: true, data: { message: "No registry-installed configs to update", updated: [], up_to_date: [] } };
+    }
+    toCheck = forRegistry;
+  }
+  let updateCheck;
+  try {
+    updateCheck = await checkUpdates(
+      toCheck.map((e) => ({ slug: e.slug, version: e.version })),
+      registry2
+    );
+  } catch (err) {
+    if (err instanceof RegistryError) {
+      return { success: false, data: { error: err.message, status: err.status } };
+    }
+    return { success: false, data: { error: err.message } };
+  }
+  if (updateCheck.updates.length === 0) {
+    return {
+      success: true,
+      data: { message: "All configs are up to date", up_to_date: updateCheck.up_to_date }
+    };
+  }
+  const updated = [];
+  const errors2 = [];
+  for (const info of updateCheck.updates) {
+    const withoutAt = info.slug.startsWith("@") ? info.slug.slice(1) : info.slug;
+    const slashIdx = withoutAt.indexOf("/");
+    if (slashIdx === -1) continue;
+    const namespace = withoutAt.slice(0, slashIdx);
+    const rest = withoutAt.slice(slashIdx + 1);
+    const colonIdx = rest.indexOf(":");
+    const rawSlug = colonIdx !== -1 ? rest.slice(0, colonIdx) : rest;
+    const connType = colonIdx !== -1 ? rest.slice(colonIdx + 1) : void 0;
+    const installedId = `${rawSlug}-${connType ?? ""}`;
+    const outFile = path17.join(ctx.configDir, `mcp.${installedId}.json`);
+    try {
+      const { payload, version: resolvedVersion } = await fetchVersionPayload(
+        namespace,
+        rawSlug,
+        connType,
+        info.latest_version,
+        registry2
+      );
+      const payloadObj = payload;
+      payloadObj.id = installedId;
+      if (fs15.existsSync(outFile)) {
+        try {
+          const existing = JSON.parse(fs15.readFileSync(outFile, "utf-8"));
+          const existingConnector = existing.connector;
+          if (existingConnector?.env) {
+            const newConnector = payloadObj.connector ?? {};
+            newConnector.env = existingConnector.env;
+            payloadObj.connector = newConnector;
+          }
+          const existingOverlays = existing.overlays ?? {};
+          const newOverlays = payloadObj.overlays ?? {};
+          payloadObj.overlays = { ...existingOverlays, ...newOverlays };
+        } catch {
+        }
+      }
+      fs15.mkdirSync(ctx.configDir, { recursive: true });
+      fs15.writeFileSync(outFile, JSON.stringify(payloadObj, null, 2) + "\n", "utf-8");
+      addToManifest(info.slug, resolvedVersion, connType ?? "", registry2);
+      updated.push({ slug: info.slug, id: installedId, from: info.installed_version, to: resolvedVersion });
+    } catch (err) {
+      if (err instanceof RegistryError) {
+        errors2.push({ slug: info.slug, error: err.message });
+      } else {
+        errors2.push({ slug: info.slug, error: err.message });
+      }
+    }
+  }
+  return {
+    success: errors2.length === 0,
+    data: {
+      message: updated.length > 0 ? `Updated ${updated.length} config(s).${errors2.length > 0 ? ` ${errors2.length} failed.` : ""} Server will hot-reload automatically.` : `All configs are up to date.`,
+      updated,
+      up_to_date: updateCheck.up_to_date,
+      ...errors2.length > 0 && { errors: errors2 }
+    }
+  };
+}
 async function handleRegistryCheckUpdates(_ctx, args2) {
   const registry2 = args2.registry ?? "default";
   try {
@@ -141874,7 +142058,7 @@ async function handleInvoke(ctx, args2) {
       success: false,
       data: {
         error: `Tool "${toolName}" not found`,
-        hint: "Use one.search or one.list_tools to find available tool names",
+        hint: "Use heku.search or heku.list_tools to find available tool names",
         available_count: available.length
       }
     };
@@ -141927,6 +142111,7 @@ var HANDLERS = {
   registry_browse: handleRegistryBrowse,
   registry_install: handleRegistryInstall,
   registry_check_updates: handleRegistryCheckUpdates,
+  registry_update: handleRegistryUpdate,
   // Auth
   auth_status: handleAuthStatus,
   auth_set: handleAuthSet,
@@ -142419,8 +142604,8 @@ async function run(args2) {
   }
   log.info("server", `Loading configs from: ${configDir}`);
   const handAuthored = loadConfigs(configDir).filter((c) => {
-    if (c.id === "one") {
-      log.warn("server", `mcp.one.json in ${configDir} is ignored \u2014 internal config is built-in`);
+    if (c.id === "heku") {
+      log.warn("server", `mcp.heku.json in ${configDir} is ignored \u2014 internal config is built-in`);
       return false;
     }
     return true;
@@ -142430,7 +142615,7 @@ async function run(args2) {
     ...handAuthored
   ];
   if (handAuthored.length === 0) {
-    log.info("server", `No user configs yet \u2014 drop mcp.*.json files in ${configDir} or call one.registry_install`);
+    log.info("server", `No user configs yet \u2014 drop mcp.*.json files in ${configDir} or call heku.registry_install`);
   }
   for (const config2 of allConfigs) {
     if (config2.connector.type === "mcp") {
@@ -142563,13 +142748,13 @@ async function run(args2) {
   }
   if (systemConfig.self_config === false) {
     const before = allConfigs.length;
-    allConfigs.splice(0, allConfigs.length, ...allConfigs.filter((c) => c.id !== "one"));
+    allConfigs.splice(0, allConfigs.length, ...allConfigs.filter((c) => c.id !== "heku"));
     if (allConfigs.length < before) {
       log.info("server", "self_config: false \u2014 heku self-management disabled");
     }
   } else if (systemConfig.self_config && typeof systemConfig.self_config === "object") {
     const sc = systemConfig.self_config;
-    const oneConfig = allConfigs.find((c) => c.id === "one");
+    const oneConfig = allConfigs.find((c) => c.id === "heku");
     if (oneConfig) {
       if (sc.allow) {
         oneConfig.tools = oneConfig.tools.filter((t) => sc.allow.includes(t.name));
@@ -143358,7 +143543,7 @@ async function run5(args2) {
   } else {
     let candidates = [];
     if (fs18.existsSync(configDir)) {
-      candidates = fs18.readdirSync(configDir).filter((f) => f.startsWith("mcp.") && f.endsWith(".json") && f !== "mcp.one.json").map((f) => path20.join(configDir, f));
+      candidates = fs18.readdirSync(configDir).filter((f) => f.startsWith("mcp.") && f.endsWith(".json") && f !== "mcp.heku.json").map((f) => path20.join(configDir, f));
     }
     if (candidates.length === 0) {
       console.error(red("\u2717") + ` No config file found. Try: ${bold("heku publish <name>")}`);
@@ -144088,159 +144273,195 @@ async function run8(args2) {
 
 // src/commands/update.ts
 init_esm_shims();
-import { spawnSync } from "child_process";
-
-// src/lib/update-check.ts
-init_esm_shims();
-import https from "https";
 import fs22 from "fs";
 import path23 from "path";
-import os6 from "os";
-var CACHE_FILE = path23.join(os6.homedir(), ".heku", "update-check.json");
-var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
-function readCache() {
-  try {
-    return JSON.parse(fs22.readFileSync(CACHE_FILE, "utf-8"));
-  } catch {
-    return null;
-  }
-}
-function writeCache(latestVersion) {
-  try {
-    fs22.mkdirSync(path23.dirname(CACHE_FILE), { recursive: true });
-    fs22.writeFileSync(
-      CACHE_FILE,
-      JSON.stringify({ checkedAt: Date.now(), latestVersion }),
-      "utf-8"
-    );
-  } catch {
-  }
-}
-function fetchLatestVersion() {
-  return new Promise((resolve3, reject) => {
-    const req = https.get(
-      `https://registry.npmjs.org/${PKG_NAME}/latest`,
-      { headers: { Accept: "application/json" } },
-      (res) => {
-        let data = "";
-        res.on("data", (chunk) => {
-          data += chunk;
-        });
-        res.on("end", () => {
-          try {
-            if (res.statusCode !== 200) {
-              reject(new Error(`npm registry returned HTTP ${res.statusCode}`));
-              return;
-            }
-            const json2 = JSON.parse(data);
-            if (!json2.version) {
-              reject(new Error("npm registry response missing version field"));
-              return;
-            }
-            resolve3(json2.version);
-          } catch (e) {
-            reject(e);
-          }
-        });
-      }
-    );
-    req.on("error", reject);
-    req.setTimeout(5e3, () => {
-      req.destroy();
-      reject(new Error("timeout"));
-    });
-  });
-}
-function semverGt(a, b) {
-  const parse3 = (v) => v.replace(/[^0-9.]/g, "").split(".").map(Number);
-  const pa = parse3(a);
-  const pb = parse3(b);
-  for (let i = 0; i < 3; i++) {
-    const na = pa[i] ?? 0;
-    const nb = pb[i] ?? 0;
-    if (na > nb) return true;
-    if (na < nb) return false;
-  }
+function compoundId2(entry) {
+  const withoutNs = entry.slug.replace(/^@[^/]+\//, "");
+  const colonIdx = withoutNs.indexOf(":");
+  const rawSlug = colonIdx !== -1 ? withoutNs.slice(0, colonIdx) : withoutNs;
+  const ct = colonIdx !== -1 ? withoutNs.slice(colonIdx + 1) : entry.connector_type;
+  return `${rawSlug}-${ct}`;
+}
+function matchesTarget(entry, target) {
+  const slug = entry.slug;
+  if (slug === target || slug === `@${target}`) return true;
+  const withoutNs = slug.replace(/^@[^/]+\//, "");
+  const colonIdx = withoutNs.indexOf(":");
+  const rawSlug = colonIdx !== -1 ? withoutNs.slice(0, colonIdx) : withoutNs;
+  const ct = colonIdx !== -1 ? withoutNs.slice(colonIdx + 1) : "";
+  if (`${rawSlug}-${ct}` === target) return true;
+  if (withoutNs === target) return true;
+  const withoutConnector = slug.replace(/:.*$/, "");
+  if (withoutConnector === target || withoutConnector === `@${target}`) return true;
+  if (!target.includes(":") && !target.includes("-") && rawSlug === target) return true;
   return false;
 }
-function printUpdateNotice(latestVersion) {
-  const line1 = `  Update available: ${VERSION} \u2192 ${latestVersion}`;
-  const line2 = `  Run: npm install -g ${PKG_NAME}@latest`;
-  const width = Math.max(line1.length, line2.length) + 2;
-  const bar = "\u2500".repeat(width);
-  process.stderr.write(
-    `
-\u250C${bar}\u2510
-\u2502${line1.padEnd(width)}\u2502
-\u2502${line2.padEnd(width)}\u2502
-\u2514${bar}\u2518
-
-`
+async function downloadAndInstall(entry, latestVersion, configDir) {
+  const withoutAt = entry.slug.startsWith("@") ? entry.slug.slice(1) : entry.slug;
+  const slashIdx = withoutAt.indexOf("/");
+  const namespace = withoutAt.slice(0, slashIdx);
+  const rest = withoutAt.slice(slashIdx + 1);
+  const colonIdx = rest.indexOf(":");
+  const rawSlug = colonIdx !== -1 ? rest.slice(0, colonIdx) : rest;
+  const connType = colonIdx !== -1 ? rest.slice(colonIdx + 1) : entry.connector_type;
+  const id = `${rawSlug}-${connType}`;
+  const outFile = path23.join(configDir, `mcp.${id}.json`);
+  const { payload, version: resolvedVersion } = await fetchVersionPayload(
+    namespace,
+    rawSlug,
+    connType,
+    latestVersion,
+    entry.registry
   );
-}
-function checkForUpdate() {
-  const cache2 = readCache();
-  if (cache2 && typeof cache2.latestVersion === "string" && cache2.latestVersion.length > 0 && Date.now() - cache2.checkedAt < CACHE_TTL_MS) {
-    if (semverGt(cache2.latestVersion, VERSION)) {
-      printUpdateNotice(cache2.latestVersion);
+  const payloadObj = payload;
+  payloadObj.id = id;
+  if (fs22.existsSync(outFile)) {
+    try {
+      const existing = JSON.parse(fs22.readFileSync(outFile, "utf-8"));
+      const existingConn = existing.connector;
+      if (existingConn?.env) {
+        const newConn = payloadObj.connector ?? {};
+        newConn.env = existingConn.env;
+        payloadObj.connector = newConn;
+      }
+      const existingOverlays = existing.overlays ?? {};
+      const newOverlays = payloadObj.overlays ?? {};
+      payloadObj.overlays = { ...existingOverlays, ...newOverlays };
+    } catch {
     }
+  }
+  fs22.mkdirSync(configDir, { recursive: true });
+  fs22.writeFileSync(outFile, JSON.stringify(payloadObj, null, 2) + "\n", "utf-8");
+  addToManifest(entry.slug, resolvedVersion, connType, entry.registry, entry.forked_from ?? null);
+  return { id, from: entry.version, to: resolvedVersion };
+}
+async function run9(args2) {
+  const registryIdx = args2.indexOf("--registry");
+  const registry2 = registryIdx !== -1 ? args2[registryIdx + 1] ?? "default" : "default";
+  const skipIndices = /* @__PURE__ */ new Set();
+  if (registryIdx !== -1) {
+    skipIndices.add(registryIdx);
+    skipIndices.add(registryIdx + 1);
+  }
+  const target = args2.find((a, i) => !skipIndices.has(i) && !a.startsWith("--"));
+  const systemConfig = loadSystemConfig(process.cwd());
+  const configDir = resolveConfigDir(void 0, systemConfig);
+  const { installed } = loadManifest();
+  const forRegistry = installed.filter((e) => e.registry === registry2);
+  if (forRegistry.length === 0) {
+    console.log();
+    console.log(dim("  No registry-installed configs found."));
+    console.log(dim(`  Install one with: ${bold("heku install @ns/slug")}`));
+    console.log();
     return;
   }
-  fetchLatestVersion().then((latest) => {
-    writeCache(latest);
-    if (semverGt(latest, VERSION)) {
-      printUpdateNotice(latest);
+  let toCheck;
+  if (target) {
+    toCheck = forRegistry.filter((e) => matchesTarget(e, target));
+    if (toCheck.length === 0) {
+      console.log();
+      console.error(red("\u2717") + `  No installed config matches "${bold(target)}".`);
+      console.error(dim(`  Run ${bold("heku list")} to see installed configs.`));
+      console.log();
+      process.exit(1);
     }
-  }).catch(() => {
-  });
-}
-
-// src/commands/update.ts
-async function run9(_args) {
-  process.stderr.write(`  Checking for updates to ${bold(PKG_NAME)}...
-`);
-  let latest;
+  } else {
+    toCheck = forRegistry;
+  }
+  console.log();
+  if (target) {
+    console.log(bold(`  Checking ${cyan(target)}...`));
+  } else {
+    console.log(bold("  Checking for updates..."));
+  }
+  console.log();
+  let updateResult;
   try {
-    latest = await fetchLatestVersion();
-  } catch {
-    process.stderr.write(`  ${yellow("\u26A0")}  Could not reach npm registry. Check your network and try again.
-`);
+    updateResult = await checkUpdates(
+      toCheck.map((e) => ({ slug: e.slug, version: e.version })),
+      registry2
+    );
+  } catch (err) {
+    console.error(
+      red("\u2717") + `  ${err instanceof RegistryError ? err.message : err.message}`
+    );
     process.exit(1);
   }
-  if (!semverGt(latest, VERSION)) {
-    process.stderr.write(`  ${green("\u2713")}  Already up to date (${cyan(VERSION)})
-`);
+  const { updates, up_to_date, deprecated } = updateResult;
+  const colWidth = Math.max(
+    ...[...updates, ...up_to_date, ...deprecated].map((u) => {
+      const entry = toCheck.find((e) => e.slug === u.slug);
+      return entry ? compoundId2(entry).length : 0;
+    }),
+    12
+  );
+  for (const u of up_to_date) {
+    const entry = toCheck.find((e) => e.slug === u.slug);
+    const id = entry ? compoundId2(entry) : u.slug;
+    console.log(`  ${dim(id.padEnd(colWidth))}  ${dim(`v${u.version}`)}  ${dim("up to date")}`);
+  }
+  for (const u of updates) {
+    const entry = toCheck.find((e) => e.slug === u.slug);
+    const id = entry ? compoundId2(entry) : u.slug;
+    const badge = u.breaking ? yellow(`${u.severity} \xB7 breaking`) : cyan(u.severity);
+    console.log(
+      `  ${bold(id.padEnd(colWidth))}  ${dim(`v${u.installed_version}`)} \u2192 ${green(`v${u.latest_version}`)}  [${badge}]`
+    );
+  }
+  for (const d of deprecated) {
+    const entry = toCheck.find((e) => e.slug === d.slug);
+    const id = entry ? compoundId2(entry) : d.slug;
+    const note = d.replacement ? `  \u2192 use ${cyan(d.replacement)}` : "";
+    console.log(`  ${yellow(id.padEnd(colWidth))}  ${dim(`v${d.installed_version}`)}  ${yellow("deprecated")}${note}`);
+  }
+  console.log();
+  if (updates.length === 0) {
+    console.log(green("\u2713") + (target ? `  ${cyan(target)} is up to date.` : "  All configs are up to date."));
+    if (deprecated.length > 0) {
+      console.log(yellow("\u26A0") + `  ${deprecated.length} deprecated \u2014 consider replacing them.`);
+    }
+    console.log();
     return;
   }
-  process.stderr.write(`  ${bold(VERSION)} \u2192 ${bold(latest)}
-`);
-  process.stderr.write(`  Running: npm install -g ${PKG_NAME}@latest
-
-`);
-  const result = spawnSync("npm", ["install", "-g", `${PKG_NAME}@latest`], {
-    stdio: "inherit",
-    shell: true
-  });
-  if (result.status !== 0) {
-    process.stderr.write(
-      `
-  Update failed. You can update manually:
-    npm install -g ${PKG_NAME}@latest
-`
-    );
-    process.exit(result.status ?? 1);
+  const noun = updates.length === 1 ? "config" : "configs";
+  console.log(bold(`  Updating ${updates.length} ${noun}...`));
+  console.log();
+  const entryBySlug = new Map(toCheck.map((e) => [e.slug, e]));
+  let successCount = 0;
+  let failCount = 0;
+  for (const u of updates) {
+    const entry = entryBySlug.get(u.slug);
+    if (!entry) continue;
+    const id = compoundId2(entry);
+    process.stdout.write(`  ${bold(id.padEnd(colWidth))}  Downloading... `);
+    try {
+      const result = await downloadAndInstall(entry, u.latest_version, configDir);
+      console.log(green("done") + `  ${dim(`${result.from} \u2192 ${result.to}`)}`);
+      successCount++;
+    } catch (err) {
+      console.log(red("failed"));
+      const msg = err instanceof RegistryError ? err.message : err.message;
+      console.error(`  ${"".padEnd(colWidth)}  ${red("\u2717")}  ${msg}`);
+      failCount++;
+    }
   }
-  process.stderr.write(`
-  ${green("\u2713")}  Updated to ${bold(latest)}
-`);
+  console.log();
+  if (failCount === 0) {
+    const upToDateNote = up_to_date.length > 0 ? `  ${dim(`${up_to_date.length} already up to date.`)}` : "";
+    console.log(green("\u2713") + `  ${successCount} ${noun} updated.${upToDateNote}`);
+  } else if (successCount > 0) {
+    console.log(yellow("\u26A0") + `  ${successCount} updated, ${failCount} failed.`);
+  } else {
+    console.log(red("\u2717") + `  All updates failed.`);
+    process.exit(1);
+  }
+  console.log(dim("  Restart or reload heku to apply changes."));
+  console.log();
 }
 
 // src/cli.ts
 var args = process.argv.slice(2);
 var command = args[0] ?? "start";
-if (command !== "update") {
-  checkForUpdate();
-}
 switch (command) {
   case "start":
     await run(args.slice(1));
@@ -144296,11 +144517,12 @@ function printUsage() {
     heku auth setup [service]         Interactive credential setup wizard
     heku install <target>             Install a config from the registry
     heku uninstall <target>           Remove an installed registry config
+    heku update                       Update all installed configs to latest versions
+    heku update <config>              Update a specific config (e.g. github-http or @ns/github:http)
     heku login                        Log in to the mcp.rtl.space registry
     heku logout                       Log out of the registry
     heku publish [file]               Publish a config to the registry
     heku fork <namespace/slug>        Fork a registry config into your namespace
-    heku update                       Update heku to the latest version
     heku help                         Show this message
 
   HTTP mode: