@s-gw/s-gw 0.1.0

package/package.json

@@ -0,0 +1,117 @@
+{
+  "name": "@s-gw/s-gw",
+  "version": "0.1.0",
+  "description": "Local credential control for AI coding agents.",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/sgateway/s-gw.git"
+  },
+  "homepage": "https://s-gw.com",
+  "bugs": {
+    "url": "https://github.com/sgateway/s-gw/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "bin": {
+    "s-gw": "./dist/cli.js",
+    "sgw": "./dist/cli.js",
+    "s-gw-mcp": "./dist/mcp-server.js",
+    "secret-gateway-mcp": "./dist/mcp-server.js"
+  },
+  "files": [
+    "assets",
+    "dist",
+    "docs",
+    "README.md",
+    "LICENSE",
+    "NOTICE",
+    "TRADEMARKS.md",
+    ".codex-plugin",
+    ".mcp.json",
+    "skills",
+    "!dist/assets/icons/s-gw-*.png",
+    "!dist/assets/icons/AppIcon.icns",
+    "!dist/installers",
+    "!dist/**/*.map",
+    "!docs/ui/local-console*.png",
+    "!assets/icons/s-gw-source.png",
+    "!assets/icons/s-gw-menu-bar-template-source.png",
+    "!assets/icons/s-gw-1024.png",
+    "!assets/icons/s-gw-512.png",
+    "!assets/icons/s-gw-256.png"
+  ],
+  "scripts": {
+    "build": "npm run build:native && npm run build:console-ui && tsc -p tsconfig.json",
+    "build:console-ui": "vite build --config vite.console.config.ts",
+    "dev:console-ui": "vite --config vite.console.config.ts",
+    "build:native": "npm run build:rust-core && node scripts/build-native-keychain.mjs && node scripts/build-menu-bar-helper.mjs && node scripts/build-macos-app.mjs && node scripts/build-windows-client.mjs",
+    "build:rust-core": "node scripts/build-rust-core.mjs",
+    "build:macos-app": "node scripts/build-macos-app.mjs",
+    "build:menubar": "node scripts/build-menu-bar-helper.mjs",
+    "build:windows-client": "npm run build:rust-core && node scripts/build-windows-client.mjs",
+    "build:installers": "npm run build && node scripts/build-installers.mjs",
+    "dev:macos-app": "scripts/dev-macos-app.sh",
+    "check": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.console.json --noEmit",
+    "package:local": "npm run verify && npm pack",
+    "package:dry-run": "npm pack --dry-run",
+    "check:rust": "cargo fmt --all -- --check && cargo clippy --locked --all-targets -- -D warnings && cargo test --locked -p sgw-core",
+    "pretest": "npm run build:rust-core",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "verify": "npm run build && npm run check:rust && npm test && npm audit && npm run package:dry-run",
+    "prepack": "npm run build"
+  },
+  "keywords": [
+    "mcp",
+    "secrets",
+    "credential-security",
+    "local-first",
+    "ai-agents",
+    "codex",
+    "claude",
+    "cursor",
+    "opencode"
+  ],
+  "author": "Barry Yuan",
+  "license": "Apache-2.0",
+  "dependencies": {
+    "@fontsource-variable/geist": "^5.2.9",
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "cmdk": "^1.1.1",
+    "d3-sankey": "^0.12.3",
+    "lucide-react": "^1.23.0",
+    "next-themes": "^0.4.6",
+    "radix-ui": "^1.6.1",
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7",
+    "react-grid-layout": "^2.2.3",
+    "react-resizable-panels": "^4.12.0",
+    "recharts": "^3.8.0",
+    "sonner": "^2.0.7",
+    "tailwind-merge": "^3.6.0",
+    "tw-animate-css": "^1.4.0",
+    "zod": "^3.25.76"
+  },
+  "devDependencies": {
+    "@tailwindcss/vite": "^4.3.2",
+    "@types/d3-sankey": "^0.12.5",
+    "@types/node": "^24.0.0",
+    "@types/react": "^19.2.17",
+    "@types/react-dom": "^19.2.3",
+    "@types/react-grid-layout": "^1.3.6",
+    "@vitejs/plugin-react": "^6.0.3",
+    "tailwindcss": "^4.3.2",
+    "tsx": "^4.20.3",
+    "typescript": "^5.8.3",
+    "vite": "^8.1.2",
+    "vitest": "^4.1.8",
+    "ws": "^8.21.0"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}

package/skills/s-gw/SKILL.md

@@ -0,0 +1,19 @@
+---
+name: s-gw
+description: Use s-gw when working with credentials, private keys, API tokens, SSH identities, browser credentials, or other sensitive data in agentic coding workflows. Prefer typed handles and local approved execution over exposing raw secret values to a model.
+---
+
+# s-gw
+
+Use s-gw to keep raw credentials local while still letting an agent plan and request useful credential-backed actions.
+
+Core rules:
+
+- Never ask the user to paste a raw secret into the chat.
+- Use `sgw_scan_file` to inspect local files and return typed handles instead of secret values.
+- Use `sgw_list_handles` and `sgw_describe_handle` when the agent needs to reason about available secrets.
+- Use `sgw_request_execution` to create a bounded operation manifest. The user must approve the request locally before execution.
+- Use `sgw_execute_request` only after approval. Returned output is sanitized and should be treated as the only model-visible result.
+- If a secret-backed action is too broad, ask for a narrower operation instead of requesting blanket access.
+
+s-gw is local-first. The MCP server runs on the user's machine over stdio. Raw secrets should remain in the local encrypted ledger or local OS/vault-backed stores.