@rapidthoughtlabs/heku 0.3.0 → 0.3.1

package/README.md

@@ -1,6 +1,6 @@
 # heku
 
-> One server. Any REST API. Any LLM.
+> One server. Any API. Any LLM.
 
 **heku** is a single dynamic [Model Context Protocol](https://modelcontextprotocol.io) server that turns JSON config files into working API tools. No code to write — drop a config, and your LLM gets the tools instantly.
 
@@ -8,13 +8,21 @@ Stop building one MCP server per API. Build one config.
 
 ---
 
+## Try it now
+
+**[console.rapidthoughtlabs.space](https://console.rapidthoughtlabs.space)** — hosted console you can point at any running heku instance. Connect, browse configs, chat with your tools, and inspect the system prompt — no local build needed.
+
+**[app.rapidthoughtlabs.space](https://app.rapidthoughtlabs.space)** — **heku hub**, the online registry for browsing, installing, and publishing heku configs. Find community-built connectors for GitHub, Slack, Linear, and more — or publish your own.
+
+---
+
 ## Features
 
-- **7 connector types** — HTTP, gRPC, GraphQL, CLI, File, child-MCP, and Internal (self-management)
+- **8 connector types** — 4 standard (HTTP, GraphQL, gRPC, child-MCP) + 4 experimental (CLI, File, SQL, MongoDB)
 - **Hot-reload** — add or edit a config, tools update live without restart
 - **Auto-discovery** — gRPC reflection, GraphQL introspection, and child MCP tool listing fill in tools automatically
 - **Built-in console UI** — React dashboard for chat, config editing, and registry browsing
-- **Registry** — publish and install community configs from [app.rapidthoughtlabs.space](https://app.rapidthoughtlabs.space)
+- **heku hub** — publish and install community configs from [app.rapidthoughtlabs.space](https://app.rapidthoughtlabs.space)
 - **Auth handled** — bearer, basic, API key, and OAuth2 with `.env`-based credential management
 - **Self-managing** — the server can create and edit its own configs via internal tools
 
@@ -39,12 +47,13 @@ heku start
 
 ## Quick start
 
-Create a config in `mcp-configs/mcp.github.json`:
+Create `mcp-configs/mcp.github.json`:
 
 ```json
 {
-  "id": "github",
+  "id": "github-http",
   "name": "GitHub API",
+  "description": "Manage GitHub repos, issues, and pull requests",
   "connector": {
     "type": "http",
     "base_url": "https://api.github.com",
@@ -64,33 +73,327 @@ Create a config in `mcp-configs/mcp.github.json`:
 }
 ```
 
-Set your token:
-
 ```bash
-heku auth setup github
+heku auth setup github-http   # writes GITHUB_TOKEN to .env
+heku start
 ```
 
-Start the server:
+Your LLM now has a `github-http.list_repos` tool.
 
-```bash
-heku start
+---
+
+## Connectors
+
+Tool names follow the pattern `config_id.tool_name` — e.g. `github-http.list_repos`, `linear-graphql.create_issue`.
+
+### Standard
+
+#### `http` — REST API
+
+Define each endpoint as a tool. Supports `path`, `query`, `body`, and `header` params.
+
+```json
+{
+  "id": "stripe-http",
+  "name": "Stripe",
+  "connector": {
+    "type": "http",
+    "base_url": "https://api.stripe.com/v1",
+    "auth": { "type": "bearer", "token_env": "STRIPE_API_KEY" }
+  },
+  "tools": [
+    {
+      "name": "list_customers",
+      "description": "List Stripe customers with optional filters",
+      "method": "GET",
+      "path": "/customers",
+      "params": [
+        { "name": "limit",  "type": "number", "required": false, "location": "query", "description": "Max results (1–100)" },
+        { "name": "email",  "type": "string", "required": false, "location": "query", "description": "Filter by email address" }
+      ]
+    },
+    {
+      "name": "create_customer",
+      "description": "Create a new Stripe customer",
+      "method": "POST",
+      "path": "/customers",
+      "params": [
+        { "name": "email", "type": "string", "required": true,  "location": "body", "description": "Customer email" },
+        { "name": "name",  "type": "string", "required": false, "location": "body", "description": "Full name" }
+      ]
+    }
+  ]
+}
+```
+
+**Tool fields:** `name`, `description`, `method` (`GET`/`POST`/`PUT`/`PATCH`/`DELETE`), `path` (supports `{{param}}` placeholders), `params[]`, `body_template?`, `response_map?`, `error_map?`
+
+**Param locations:** `path` · `query` · `body` · `header`
+
+---
+
+#### `graphql` — GraphQL API
+
+Tools are auto-discovered via introspection. Set `tools: []`.
+
+```json
+{
+  "id": "linear-graphql",
+  "name": "Linear",
+  "connector": {
+    "type": "graphql",
+    "endpoint": "https://api.linear.app/graphql",
+    "auth": { "type": "bearer", "token_env": "LINEAR_API_KEY" },
+    "include_mutations": true,
+    "include_queries": true
+  },
+  "tools": []
+}
+```
+
+**Connector fields:** `endpoint`, `auth?`, `introspect?` (default `true`), `include_mutations?` (default `true`), `include_queries?` (default `true`), `headers?`, `timeout_ms?`
+
+---
+
+#### `grpc` — gRPC service
+
+Tools are auto-discovered via server reflection or a `.proto` file. Set `tools: []`.
+
+```json
+{
+  "id": "myservice-grpc",
+  "name": "My gRPC Service",
+  "connector": {
+    "type": "grpc",
+    "endpoint": "localhost:50051",
+    "reflection": true,
+    "tls": false
+  },
+  "tools": []
+}
+```
+
+Or with a proto file:
+
+```json
+{
+  "connector": {
+    "type": "grpc",
+    "endpoint": "grpc.example.com:443",
+    "proto_path": "./protos/service.proto",
+    "tls": true,
+    "auth": { "type": "bearer", "token_env": "GRPC_TOKEN" }
+  }
+}
+```
+
+**Connector fields:** `endpoint`, `reflection?` or `proto_path?` (one required), `tls?` (`true`/`false` or cert object), `auth?`, `metadata?`, `service_filter?`, `timeout_ms?`
+
+---
+
+#### `mcp` — child MCP server
+
+Spawn any existing MCP server (stdio or SSE) and proxy its tools through heku. Tools are auto-discovered. Set `tools: []`.
+
+```json
+{
+  "id": "filesystem-mcp",
+  "name": "Filesystem MCP",
+  "connector": {
+    "type": "mcp",
+    "transport": "stdio",
+    "command": "npx",
+    "args": ["-y", "@modelcontextprotocol/server-filesystem", "/tmp"],
+    "install_command": "npm",
+    "install_args": ["install", "-g", "@modelcontextprotocol/server-filesystem"]
+  },
+  "tools": []
+}
+```
+
+SSE transport:
+
+```json
+{
+  "connector": {
+    "type": "mcp",
+    "transport": "sse",
+    "url": "http://localhost:8080/sse"
+  }
+}
+```
+
+**Connector fields:** `transport` (`stdio`/`sse`), `command?` + `args?` + `env?` (stdio), `url?` (sse), `install_command?`, `install_args?`, `install_cwd?`, `install_env?`, `install_timeout_ms?`, `active?`
+
+> **Note:** `mcp` configs cannot be published to the registry — they reference local processes.
+
+---
+
+### Experimental
+
+> These connector types are functional but their config schema and behaviour may change in future releases.
+
+---
+
+#### `cli` — shell command
+
+Wrap any CLI tool as an MCP tool. Use `args_template` for positional args or `stdin_template` to pipe input.
+
+```json
+{
+  "id": "git-cli",
+  "name": "Git",
+  "connector": { "type": "cli" },
+  "tools": [
+    {
+      "name": "log",
+      "description": "Show recent git commits",
+      "args_template": ["git", "log", "--oneline", "-{{limit}}"],
+      "params": [
+        { "name": "limit", "type": "number", "required": false, "description": "Number of commits to show" }
+      ],
+      "output_as": "text"
+    },
+    {
+      "name": "diff",
+      "description": "Show unstaged changes",
+      "command": "git diff",
+      "params": [],
+      "output_as": "text"
+    }
+  ]
+}
+```
+
+**Tool fields:** `name`, `description`, `params[]`, `command?` (string) or `args_template?` (array), `stdin_template?`, `output_as?` (`"text"` | `"json"`)
+
+---
+
+#### `file` — filesystem
+
+Read, write, append, delete, or list files. `path_template` supports `{{param}}` placeholders.
+
+```json
+{
+  "id": "notes-file",
+  "name": "Notes",
+  "connector": { "type": "file" },
+  "tools": [
+    {
+      "name": "read_note",
+      "description": "Read a note by name",
+      "operation": "read",
+      "path_template": "/home/user/notes/{{name}}.md",
+      "params": [
+        { "name": "name", "type": "string", "required": true, "description": "Note filename without extension" }
+      ]
+    },
+    {
+      "name": "save_note",
+      "description": "Save or overwrite a note",
+      "operation": "write",
+      "path_template": "/home/user/notes/{{name}}.md",
+      "content_template": "{{content}}",
+      "params": [
+        { "name": "name",    "type": "string", "required": true, "description": "Note filename without extension" },
+        { "name": "content", "type": "string", "required": true, "description": "Note content" }
+      ]
+    }
+  ]
+}
+```
+
+**Tool fields:** `name`, `description`, `params[]`, `operation` (`read`/`write`/`append`/`delete`/`list`), `path_template`, `content_template?` (required for `write`/`append`)
+
+---
+
+#### `sql` — relational database
+
+Named SQL queries with `:param` placeholders. Supports PostgreSQL, MySQL, and SQLite.
+
+```json
+{
+  "id": "analytics-sql",
+  "name": "Analytics DB",
+  "connector": {
+    "type": "sql",
+    "dialect": "postgres",
+    "connection_string_env": "DATABASE_URL"
+  },
+  "tools": [
+    {
+      "name": "active_users",
+      "description": "Count active users in a date range",
+      "sql": "SELECT COUNT(*) as count FROM users WHERE created_at BETWEEN :from AND :to AND active = true",
+      "params": [
+        { "name": "from", "type": "string", "required": true, "description": "Start date (ISO 8601)" },
+        { "name": "to",   "type": "string", "required": true, "description": "End date (ISO 8601)" }
+      ],
+      "max_rows": 1
+    }
+  ]
+}
 ```
 
-Your LLM now has a `github.list_repos` tool. That's it.
+**Connector fields:** `dialect` (`postgres`/`mysql`/`sqlite`), `connection_string_env?` or field-based (`host`, `port`, `database`, `username_env`, `password_env`), `ssl?`, `pool_max?`
+
+**Tool fields:** `name`, `description`, `params[]`, `sql` (`:name` placeholders only — no `{{}}`, no `?`, no `$N`), `max_rows?` (1–10000), `timeout_ms?`
 
 ---
 
-## Connector types
+#### `mongodb` — MongoDB
+
+Document operations with JSON templates. Placeholders use `{{param}}` in templates.
+
+```json
+{
+  "id": "catalog-mongo",
+  "name": "Product Catalog",
+  "connector": {
+    "type": "mongodb",
+    "database": "catalog",
+    "connection_string_env": "MONGO_URI"
+  },
+  "tools": [
+    {
+      "name": "find_products",
+      "description": "Search products by category and price range",
+      "collection": "products",
+      "operation": "find",
+      "filter_template": { "category": "{{category}}", "price": { "$lte": "{{max_price}}" } },
+      "params": [
+        { "name": "category",  "type": "string", "required": true,  "description": "Product category" },
+        { "name": "max_price", "type": "number", "required": false, "description": "Maximum price" }
+      ],
+      "max_rows": 50
+    }
+  ]
+}
+```
+
+**Connector fields:** `database`, `connection_string_env?` or `host?`+`port?`, `auth_source?`, `tls?`
+
+**Tool fields:** `name`, `description`, `params[]`, `collection`, `operation` (`find`/`findOne`/`aggregate`/`insertOne`/`insertMany`/`updateOne`/`updateMany`/`deleteOne`/`deleteMany`/`countDocuments`/`distinct`), plus operation-specific templates: `filter_template`, `update_template`, `document_template`, `documents_template`, `pipeline_template`, `projection?`, `sort?`, `max_rows?`, `limit?`, `timeout_ms?`
+
+---
 
-| Type | Use case |
+## Auth types
+
+All credentials read from environment variables — `heku auth setup` writes them to `.env`:
+
+| Type | Header |
 |---|---|
-| `http` | REST APIs — define method, path, params, response mapping |
-| `grpc` | gRPC services — load via `.proto` file or server reflection; tools auto-discovered |
-| `graphql` | GraphQL APIs — introspection-based auto-discovery, or define operations manually |
-| `cli` | Wrap any shell command as a tool with templated args/stdin |
-| `file` | Filesystem operations: read, write, append, delete, list |
-| `mcp` | Spawn another MCP server (stdio or SSE) and proxy its tools through heku |
-| `internal` | heku's own management surface — create configs, install from registry, set auth |
+| `bearer` | `Authorization: Bearer {token}` |
+| `basic` | `Authorization: Basic base64(user:token)` |
+| `api_key` | Custom header, e.g. `X-API-Key` |
+| `oauth2_static` | Pre-acquired OAuth2 access token |
+
+```json
+{ "type": "bearer",       "token_env": "GITHUB_TOKEN" }
+{ "type": "api_key",      "key_env": "MY_KEY", "header_name": "X-Api-Key" }
+{ "type": "basic",        "username_env": "MY_USER", "token_env": "MY_PASS" }
+{ "type": "oauth2_static","token_env": "MY_OAUTH_TOKEN" }
+```
 
 ---
 
@@ -119,43 +422,17 @@ heku update                  Update heku to the latest version
 heku help                    Show usage
 ```
 
-Run with `--http` to start the console UI alongside the stdio server:
+Start with the console UI:
 
 ```bash
 heku start --http --port 3456
 ```
 
----
-
-## Configuration
-
-### Config file shape
-
-Configs live in `mcp-configs/mcp.{id}.json`:
-
-```typescript
-{
-  id: string;                  // becomes the tool namespace prefix
-  name: string;
-  description?: string;        // shown to the LLM
-  connector: ConnectorConfig;  // one of 7 types
-  tools: ToolDef[];            // empty for auto-discovery (grpc/graphql/mcp)
-  overlays?: {                 // override tool descriptions without editing the config
-    [toolName: string]: { description?: string }
-  };
-}
-```
-
-### Auth types
-
-All credentials read from environment variables — `heku auth setup` writes them to `.env`:
+Then open **[console.rapidthoughtlabs.space](https://console.rapidthoughtlabs.space)** and connect to `http://localhost:3456`.
 
-- **`bearer`** — `Authorization: Bearer {token}`
-- **`basic`** — base64(username:token)
-- **`api_key`** — custom header (e.g. `X-API-Key`)
-- **`oauth2_static`** — pre-acquired OAuth2 access token
+---
 
-### System config (optional)
+## System config (optional)
 
 Drop `heku.config.json` in your config directory:
 
@@ -163,7 +440,7 @@ Drop `heku.config.json` in your config directory:
 {
   "log_level": "info",
   "rate_limits": {
-    "github": { "requests_per_minute": 60 }
+    "github-http": { "requests_per_minute": 60 }
   },
   "self_config": true
 }
@@ -173,28 +450,27 @@ Drop `heku.config.json` in your config directory:
 
 ## Console UI
 
-The dashboard is a React + Vite app that talks to the heku server:
+The dashboard is a React + Vite app — available hosted at **[console.rapidthoughtlabs.space](https://console.rapidthoughtlabs.space)** or embedded when you run `heku start --http`.
 
-- **Chat** — test tools through a model of your choice
+- **Chat** — test tools through a model of your choice (OpenAI, Together AI)
 - **Configs** — visual editor for connector and tool definitions
+- **Prompts** — inspect the system prompt layers and token counts
 - **Registry** — browse, install, and publish configs
-- **Auth** — see credential status across all configs at a glance
-
-Built with React 19, TailwindCSS v4, Zustand, and the MCP SDK.
+- **Auth** — credential status across all configs at a glance
 
 ---
 
-## Registry
+## heku hub
 
-[**app.rapidthoughtlabs.space**](https://app.rapidthoughtlabs.space) is the default registry for sharing configs.
+**[app.rapidthoughtlabs.space](https://app.rapidthoughtlabs.space)** is the default registry for sharing configs — browse community connectors, install with one command, and publish your own.
 
 ```bash
 heku install @rtl/github
 heku install @rtl/slack@1.2.0
-heku publish my-config.json
+heku publish mcp-configs/mcp.stripe-http.json
 ```
 
-Use `--registry` to point at a different one.
+Use `--registry <url>` to point at a self-hosted registry.
 
 ---
 
@@ -227,7 +503,30 @@ mcp-configs/     Local config files (gitignored)
 
 ## Tech stack
 
-TypeScript · Node.js (ESM) · `@modelcontextprotocol/sdk` · Express · React 19 · Vite · TailwindCSS · Zustand · `@grpc/grpc-js` · GraphQL · tsup · Vitest
+TypeScript · Node.js (ESM) · `@modelcontextprotocol/sdk` · Express · React 19 · Vite · Zustand · `@grpc/grpc-js` · GraphQL · tsup · Vitest
+
+---
+
+## Changelog
+
+### 0.3.1
+- Renamed meta-tool namespace from `mcp.one.*` to `heku.*` across all connectors, prompts, and client code
+- Fixed deployed console manifest style switcher (settings API calls now use the correct bridge base URL)
+- Fixed prompt page config catalog not refreshing when heku connects after page load
+- Markdown rendering in the demo chat — assistant responses now render formatted text
+- Config catalog descriptions now show in composed prompt preview; falls back to display name when description is absent
+- Dual manifest preview in Prompts page — flat and namespaced styles with separate token counts
+- heku server version now reads from `package.json` at runtime in dev mode instead of showing `0.0.0-dev`
+
+### 0.3.0
+- Registry versioning overhaul — semver-based publish/install flow
+- CLI registry commands: `install`, `uninstall`, `fork`, `publish`
+- Console registry browser tab
+
+### 0.2.x
+- SQL and MongoDB connector types (experimental)
+- Config write lock — block LLM agents from mutating configs
+- Hot-reload watcher improvements
 
 ---
 

package/dist/cli.js

@@ -26827,10 +26827,10 @@ var require_view = __commonJS({
     var debug = require_src()("express:view");
     var path24 = __require("path");
     var fs23 = __require("fs");
-    var dirname3 = path24.dirname;
+    var dirname4 = path24.dirname;
     var basename3 = path24.basename;
     var extname2 = path24.extname;
-    var join3 = path24.join;
+    var join4 = path24.join;
     var resolve3 = path24.resolve;
     module2.exports = View;
     function View(name, options) {
@@ -26866,7 +26866,7 @@ var require_view = __commonJS({
       for (var i = 0; i < roots.length && !path25; i++) {
         var root = roots[i];
         var loc = resolve3(root, name);
-        var dir = dirname3(loc);
+        var dir = dirname4(loc);
         var file2 = basename3(loc);
         path25 = this.resolve(dir, file2);
       }
@@ -26892,12 +26892,12 @@ var require_view = __commonJS({
     };
     View.prototype.resolve = function resolve4(dir, file2) {
       var ext = this.ext;
-      var path25 = join3(dir, file2);
+      var path25 = join4(dir, file2);
       var stat4 = tryStat(path25);
       if (stat4 && stat4.isFile()) {
         return path25;
       }
-      path25 = join3(dir, basename3(file2, ext), "index" + ext);
+      path25 = join4(dir, basename3(file2, ext), "index" + ext);
       stat4 = tryStat(path25);
       if (stat4 && stat4.isFile()) {
         return path25;
@@ -30573,7 +30573,7 @@ var require_send = __commonJS({
     var Stream = __require("stream");
     var util2 = __require("util");
     var extname2 = path24.extname;
-    var join3 = path24.join;
+    var join4 = path24.join;
     var normalize2 = path24.normalize;
     var resolve3 = path24.resolve;
     var sep = path24.sep;
@@ -30745,7 +30745,7 @@ var require_send = __commonJS({
           return res;
         }
         parts = path25.split(sep);
-        path25 = normalize2(join3(root, path25));
+        path25 = normalize2(join4(root, path25));
       } else {
         if (UP_PATH_REGEXP.test(path25)) {
           debug('malicious path "%s"', path25);
@@ -30878,7 +30878,7 @@ var require_send = __commonJS({
           if (err) return self2.onStatError(err);
           return self2.error(404);
         }
-        var p = join3(path25, self2._index[i]);
+        var p = join4(path25, self2._index[i]);
         debug('stat "%s"', p);
         fs23.stat(p, function(err2, stat4) {
           if (err2) return next(err2);
@@ -79142,7 +79142,7 @@ var require_named_placeholders = __commonJS({
         }
         return s;
       }
-      function join3(tree) {
+      function join4(tree) {
         if (tree.length === 1) {
           return tree;
         }
@@ -79168,7 +79168,7 @@ var require_named_placeholders = __commonJS({
         if (cache2 && (tree = cache2.get(query))) {
           return toArrayParams(tree, paramsObj);
         }
-        tree = join3(parse3(query));
+        tree = join4(parse3(query));
         if (cache2) {
           cache2.set(query, tree);
         }
@@ -81773,9 +81773,9 @@ var require_bindings = __commonJS({
     init_esm_shims();
     var fs23 = __require("fs");
     var path24 = __require("path");
-    var fileURLToPath3 = require_file_uri_to_path();
-    var join3 = path24.join;
-    var dirname3 = path24.dirname;
+    var fileURLToPath4 = require_file_uri_to_path();
+    var join4 = path24.join;
+    var dirname4 = path24.dirname;
     var exists = fs23.accessSync && function(path25) {
       try {
         fs23.accessSync(path25);
@@ -81834,7 +81834,7 @@ var require_bindings = __commonJS({
       var requireFunc = typeof __webpack_require__ === "function" ? __non_webpack_require__ : __require;
       var tries = [], i = 0, l = opts.try.length, n, b, err;
       for (; i < l; i++) {
-        n = join3.apply(
+        n = join4.apply(
           null,
           opts.try[i].map(function(p) {
             return opts[p] || p;
@@ -81885,17 +81885,17 @@ var require_bindings = __commonJS({
       Error.stackTraceLimit = origSTL;
       var fileSchema = "file://";
       if (fileName.indexOf(fileSchema) === 0) {
-        fileName = fileURLToPath3(fileName);
+        fileName = fileURLToPath4(fileName);
       }
       return fileName;
     };
     exports2.getRoot = function getRoot(file2) {
-      var dir = dirname3(file2), prev;
+      var dir = dirname4(file2), prev;
       while (true) {
         if (dir === ".") {
           dir = process.cwd();
         }
-        if (exists(join3(dir, "package.json")) || exists(join3(dir, "node_modules"))) {
+        if (exists(join4(dir, "package.json")) || exists(join4(dir, "node_modules"))) {
           return dir;
         }
         if (prev === dir) {
@@ -81904,7 +81904,7 @@ var require_bindings = __commonJS({
           );
         }
         prev = dir;
-        dir = join3(dir, "..");
+        dir = join4(dir, "..");
       }
     };
   }
@@ -130795,7 +130795,7 @@ function isConnectorType(value) {
 // src/lib/config-rules.ts
 init_esm_shims();
 init_env_store();
-var RESERVED_IDS = ["one"];
+var RESERVED_IDS = ["heku"];
 function validateBaseId(id) {
   if (!id || typeof id !== "string" || id.trim() === "") {
     return "id must be a non-empty string";
@@ -131059,7 +131059,10 @@ function getInstalledEntry(slug, registry2 = "default") {
 
 // src/lib/version.ts
 init_esm_shims();
-var VERSION = true ? "0.3.0" : "0.0.0-dev";
+import { readFileSync } from "fs";
+import { fileURLToPath as fileURLToPath2 } from "url";
+import { join, dirname } from "path";
+var VERSION = true ? "0.3.1" : readPkgVersion();
 
 // src/connectors/mcp.ts
 init_esm_shims();
@@ -133923,8 +133926,40 @@ var serverSettings = {
 function getServerSettings() {
   return { ...serverSettings };
 }
+var DISCOVERY_FLAT_SET = /* @__PURE__ */ new Set(["heku.search", "heku.list_tools", "heku.list_configs", "heku.invoke"]);
+var DISCOVERY_TRIO_SET = /* @__PURE__ */ new Set(["heku.search", "heku.list_tools", "heku.list_configs"]);
 function createAdminRouter(ctx) {
   const router = (0, import_express.Router)();
+  router.get("/tools-manifest", (req, res) => {
+    const styleParam = req.query.style;
+    const style = styleParam === "namespaced" || styleParam === "flat" ? styleParam : serverSettings.manifestStyle;
+    const tools = ctx.registry.list();
+    if (style === "namespaced") {
+      const visible2 = tools.filter(
+        (rt) => DISCOVERY_TRIO_SET.has(`${rt.configId}.${rt.tool.name}`)
+      );
+      res.json(
+        visible2.map((rt) => ({
+          name: `${rt.configId}.${rt.tool.name}`,
+          description: rt.tool.description,
+          inputSchema: buildInputSchema2(rt.tool.params ?? []),
+          configId: rt.configId
+        }))
+      );
+      return;
+    }
+    const visible = tools.filter(
+      (rt) => DISCOVERY_FLAT_SET.has(`${rt.configId}.${rt.tool.name}`)
+    );
+    res.json(
+      visible.map((rt) => ({
+        name: rt.tool.name,
+        description: rt.tool.description,
+        inputSchema: buildInputSchema2(rt.tool.params ?? []),
+        configId: rt.configId
+      }))
+    );
+  });
   router.get("/server-settings", (_req, res) => {
     res.json({
       hotReload: ctx.watcher ? !ctx.watcher.isPaused() : serverSettings.hotReload,
@@ -134350,8 +134385,8 @@ var ToolRegistry = class {
     return this.tools.size;
   }
 };
-var DISCOVERY_FLAT = /* @__PURE__ */ new Set(["one.search", "one.list_tools", "one.list_configs", "one.invoke"]);
-var DISCOVERY_TRIO = /* @__PURE__ */ new Set(["one.search", "one.list_tools", "one.list_configs"]);
+var DISCOVERY_FLAT = /* @__PURE__ */ new Set(["heku.search", "heku.list_tools", "heku.list_configs", "heku.invoke"]);
+var DISCOVERY_TRIO = /* @__PURE__ */ new Set(["heku.search", "heku.list_tools", "heku.list_configs"]);
 function buildManifestView(style, registry2) {
   if (style === "namespaced") {
     return {
@@ -134362,24 +134397,24 @@ function buildManifestView(style, registry2) {
   }
   return {
     visible: registry2.list().filter((rt) => DISCOVERY_FLAT.has(`${rt.configId}.${rt.tool.name}`)),
-    rewrite: (qualified) => qualified.replace(/^one\./, ""),
-    resolve: (incoming) => incoming.includes(".") ? incoming : `one.${incoming}`
+    rewrite: (qualified) => qualified.replace(/^heku\./, ""),
+    resolve: (incoming) => incoming.includes(".") ? incoming : `heku.${incoming}`
   };
 }
 var BLOCKED_WHEN_LOCKED = /* @__PURE__ */ new Set([
-  "one.create_config",
-  "one.update_config",
-  "one.delete_config",
-  "one.add_tool",
-  "one.remove_tool",
-  "one.update_tool",
-  "one.registry_install",
-  "one.registry_update",
-  "one.auth_set"
+  "heku.create_config",
+  "heku.update_config",
+  "heku.delete_config",
+  "heku.add_tool",
+  "heku.remove_tool",
+  "heku.update_tool",
+  "heku.registry_install",
+  "heku.registry_update",
+  "heku.auth_set"
 ]);
 function blockedTool(qualifiedName, args2) {
   if (BLOCKED_WHEN_LOCKED.has(qualifiedName)) return qualifiedName;
-  if (qualifiedName === "one.invoke") {
+  if (qualifiedName === "heku.invoke") {
     const target = args2["tool"];
     if (typeof target === "string" && BLOCKED_WHEN_LOCKED.has(target)) return target;
   }
@@ -135373,9 +135408,9 @@ var NodeFsHandler = class {
     if (this.fsw.closed) {
       return;
     }
-    const dirname3 = sp.dirname(file2);
+    const dirname4 = sp.dirname(file2);
     const basename3 = sp.basename(file2);
-    const parent = this.fsw._getWatchedDir(dirname3);
+    const parent = this.fsw._getWatchedDir(dirname4);
     let prevStats = stats;
     if (parent.has(basename3))
       return;
@@ -135402,7 +135437,7 @@ var NodeFsHandler = class {
             prevStats = newStats2;
           }
         } catch (error3) {
-          this.fsw._remove(dirname3, basename3);
+          this.fsw._remove(dirname4, basename3);
         }
       } else if (parent.has(basename3)) {
         const at = newStats.atimeMs;
@@ -136365,7 +136400,7 @@ init_loader();
 var DEBOUNCE_MS = 300;
 function isMcpConfigFile(filePath) {
   const base2 = path11.basename(filePath);
-  return base2.startsWith("mcp.") && base2.endsWith(".json") && base2 !== "mcp.one.json";
+  return base2.startsWith("mcp.") && base2.endsWith(".json") && base2 !== "mcp.heku.json";
 }
 function isMcpEnvFile(filePath) {
   const base2 = path11.basename(filePath);
@@ -136687,7 +136722,7 @@ function resolveConfigDir(cliOverride, systemConfig) {
 init_esm_shims();
 var import_express5 = __toESM(require_express2(), 1);
 var import_cors = __toESM(require_lib3(), 1);
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { fileURLToPath as fileURLToPath3 } from "url";
 
 // server/mcp-client.ts
 init_esm_shims();
@@ -137614,7 +137649,21 @@ function createApiRouter(mcp) {
       }
     }
   });
-  router.get("/tools/manifest", (_req, res) => {
+  router.get("/tools/manifest", async (req, res) => {
+    const style = req.query.style;
+    if (style === "flat" || style === "namespaced") {
+      try {
+        const tools = await admin.get(`/tools-manifest?style=${style}`);
+        res.json(tools);
+      } catch (err) {
+        if (err instanceof AdminUnavailableError) {
+          res.json([]);
+          return;
+        }
+        res.status(500).json({ error: err.message });
+      }
+      return;
+    }
     res.json(mcp.listTools());
   });
   router.post("/tools/call", async (req, res) => {
@@ -138163,7 +138212,7 @@ async function startBridge(options) {
     }
   };
 }
-var isMain = process.argv[1] === fileURLToPath2(import.meta.url);
+var isMain = process.argv[1] === fileURLToPath3(import.meta.url);
 if (isMain) {
   const port = Number(process.env["PORT"] ?? 3456);
   const bridge = await startBridge({ port });
@@ -138191,7 +138240,7 @@ init_env_store();
 // src/internal-config.ts
 init_esm_shims();
 var INTERNAL_CONFIG = {
-  id: "one",
+  id: "heku",
   name: "heku Self-Management",
   description: "Create configs, add tools, install from registry, manage auth \u2014 heku's own management interface for LLM agents.",
   connector: { type: "internal" },
@@ -138222,7 +138271,7 @@ var INTERNAL_CONFIG = {
     },
     {
       name: "search",
-      description: "Find tools by name or intent across all configs (or within a specific one). Returns matching tools with full schemas grouped by quality: exact \u2192 partial \u2192 description \u2192 related. Covers both native `one.*` self-management tools and all loaded service tools. Narrow by config: `github-http` returns only github-http tools; `github` matches github-http and github-cli. Once you have a tool name, call `invoke` with `config_id.tool_name` to execute it.",
+      description: "Find tools by name or intent across all configs (or within a specific one). Returns matching tools with full schemas grouped by quality: exact \u2192 partial \u2192 description \u2192 related. Covers both native `heku.*` self-management tools and all loaded service tools. Narrow by config: `github-http` returns only github-http tools; `github` matches github-http and github-cli. Once you have a tool name, call `invoke` with `config_id.tool_name` to execute it.",
       params: [
         {
           name: "query",
@@ -138240,13 +138289,13 @@ var INTERNAL_CONFIG = {
     },
     {
       name: "invoke",
-      description: "Execute any registered tool by its qualified name (`config_id.tool_name`). Workflow: (1) list_configs \u2192 pick a config id, (2) search or list_tools \u2192 get the tool name and required args, (3) invoke \u2192 run it. Examples: `github-http.create_issue`, `linear-graphql.create_issue`, `one.server_status`.",
+      description: "Execute any registered tool by its qualified name (`config_id.tool_name`). Workflow: (1) list_configs \u2192 pick a config id, (2) search or list_tools \u2192 get the tool name and required args, (3) invoke \u2192 run it. Examples: `github-http.create_issue`, `linear-graphql.create_issue`, `heku.server_status`.",
       params: [
         {
           name: "tool",
           type: "string",
           required: true,
-          description: "Qualified tool name in the format config_id.tool_name (e.g. 'open-meteo-http.get_forecast', 'github-http.create_issue', 'one.server_status')"
+          description: "Qualified tool name in the format config_id.tool_name (e.g. 'open-meteo-http.get_forecast', 'github-http.create_issue', 'heku.server_status')"
         },
         {
           name: "args",
@@ -138268,7 +138317,7 @@ var INTERNAL_CONFIG = {
     },
     {
       name: "delete_config",
-      description: "Delete a config file and unregister all its tools. Cannot delete the 'one' self-management config \u2014 use self_config: false in heku.config.json instead.",
+      description: "Delete a config file and unregister all its tools. Cannot delete the 'heku' self-management config \u2014 use self_config: false in heku.config.json instead.",
       params: [
         { name: "config_id", type: "string", required: true, description: "Config ID to delete" }
       ]
@@ -138307,9 +138356,9 @@ var INTERNAL_CONFIG = {
     },
     {
       name: "list_tools",
-      description: "Returns tools with full schemas ready to call. No args: returns only the native `one.*` self-management surface. With config_id: returns all tools in that config. For targeted lookup by name or intent, use `one.search` instead.",
+      description: "Returns tools with full schemas ready to call. No args: returns only the native `heku.*` self-management surface. With config_id: returns all tools in that config. For targeted lookup by name or intent, use `heku.search` instead.",
       params: [
-        { name: "config_id", type: "string", required: false, description: "Config ID to list tools for. Omit to list only native one.* tools." }
+        { name: "config_id", type: "string", required: false, description: "Config ID to list tools for. Omit to list only native heku.* tools." }
       ]
     },
     {
@@ -141441,7 +141490,7 @@ async function handleUpdateTool(ctx, args2) {
 }
 async function handleListTools(ctx, args2) {
   const filterById = args2.config_id;
-  const scopeId = filterById ?? "one";
+  const scopeId = filterById ?? "heku";
   const tools = ctx.registry.list().filter((rt) => rt.configId === scopeId).map((rt) => ({
     qualified_name: `${rt.configId}.${rt.tool.name}`,
     config_id: rt.configId,
@@ -142009,7 +142058,7 @@ async function handleInvoke(ctx, args2) {
       success: false,
       data: {
         error: `Tool "${toolName}" not found`,
-        hint: "Use one.search or one.list_tools to find available tool names",
+        hint: "Use heku.search or heku.list_tools to find available tool names",
         available_count: available.length
       }
     };
@@ -142555,8 +142604,8 @@ async function run(args2) {
   }
   log.info("server", `Loading configs from: ${configDir}`);
   const handAuthored = loadConfigs(configDir).filter((c) => {
-    if (c.id === "one") {
-      log.warn("server", `mcp.one.json in ${configDir} is ignored \u2014 internal config is built-in`);
+    if (c.id === "heku") {
+      log.warn("server", `mcp.heku.json in ${configDir} is ignored \u2014 internal config is built-in`);
       return false;
     }
     return true;
@@ -142566,7 +142615,7 @@ async function run(args2) {
     ...handAuthored
   ];
   if (handAuthored.length === 0) {
-    log.info("server", `No user configs yet \u2014 drop mcp.*.json files in ${configDir} or call one.registry_install`);
+    log.info("server", `No user configs yet \u2014 drop mcp.*.json files in ${configDir} or call heku.registry_install`);
   }
   for (const config2 of allConfigs) {
     if (config2.connector.type === "mcp") {
@@ -142699,13 +142748,13 @@ async function run(args2) {
   }
   if (systemConfig.self_config === false) {
     const before = allConfigs.length;
-    allConfigs.splice(0, allConfigs.length, ...allConfigs.filter((c) => c.id !== "one"));
+    allConfigs.splice(0, allConfigs.length, ...allConfigs.filter((c) => c.id !== "heku"));
     if (allConfigs.length < before) {
       log.info("server", "self_config: false \u2014 heku self-management disabled");
     }
   } else if (systemConfig.self_config && typeof systemConfig.self_config === "object") {
     const sc = systemConfig.self_config;
-    const oneConfig = allConfigs.find((c) => c.id === "one");
+    const oneConfig = allConfigs.find((c) => c.id === "heku");
     if (oneConfig) {
       if (sc.allow) {
         oneConfig.tools = oneConfig.tools.filter((t) => sc.allow.includes(t.name));
@@ -143494,7 +143543,7 @@ async function run5(args2) {
   } else {
     let candidates = [];
     if (fs18.existsSync(configDir)) {
-      candidates = fs18.readdirSync(configDir).filter((f) => f.startsWith("mcp.") && f.endsWith(".json") && f !== "mcp.one.json").map((f) => path20.join(configDir, f));
+      candidates = fs18.readdirSync(configDir).filter((f) => f.startsWith("mcp.") && f.endsWith(".json") && f !== "mcp.heku.json").map((f) => path20.join(configDir, f));
     }
     if (candidates.length === 0) {
       console.error(red("\u2717") + ` No config file found. Try: ${bold("heku publish <name>")}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rapidthoughtlabs/heku",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "A single dynamic MCP server that turns JSON configs into working API tools",
   "type": "module",
   "main": "dist/cli.js",