@seekrit/cli 0.18.0 → 0.19.0

package/dist/index.js

@@ -96,26 +96,40 @@ const ENTITLEMENT_KEYS = Object.keys({
 		metric: "monthly_resolves"
 	}
 });
-const PLAN_FAMILY_IDS = Object.keys({
+//#endregion
+//#region ../../packages/core/src/plans.ts
+const PLAN_FAMILIES = {
 	free: {
 		id: "free",
 		name: "Free",
 		description: "Get started with the essentials.",
-		current: 1
+		current: 1,
+		hidden: false
+	},
+	team: {
+		id: "team",
+		name: "Team",
+		description: "For small teams collaborating on secrets.",
+		current: 1,
+		hidden: false
 	},
 	pro: {
 		id: "pro",
 		name: "Pro",
 		description: "For teams running secrets in production.",
-		current: 1
+		current: 1,
+		hidden: true
 	},
 	enterprise: {
 		id: "enterprise",
 		name: "Enterprise",
 		description: "Unlimited scale with advanced governance.",
-		current: 1
+		current: 1,
+		hidden: false
 	}
-});
+};
+const PLAN_FAMILY_IDS = Object.keys(PLAN_FAMILIES);
+PLAN_FAMILY_IDS.filter((family) => !PLAN_FAMILIES[family].hidden);
 //#endregion
 //#region ../../packages/core/src/billing.ts
 /**
@@ -665,6 +679,7 @@ z.object({
 z.object({ name: nameSchema });
 z.object({ name: nameSchema });
 z.object({ name: nameSchema });
+z.object({ required: z.boolean() });
 z.object({
 	email: emailSchema,
 	role: inviteRoleSchema.default("member")
@@ -1961,7 +1976,7 @@ function isServiceToken(value) {
 }
 //#endregion
 //#region package.json
-var version = "0.18.0";
+var version = "0.19.0";
 //#endregion
 //#region ../../packages/api-client/src/index.ts
 var SeekritApiError = class extends Error {
@@ -2038,6 +2053,17 @@ var SeekritClient = class {
 	listMembers(orgId) {
 		return this.request("GET", `/v1/orgs/${orgId}/members`);
 	}
+	/**
+	* The org-wide "require a second factor for all members" policy. `configured`
+	* is false when the identity provider isn't wired up (local dev), in which
+	* case the toggle is inert.
+	*/
+	getMfaPolicy(orgId) {
+		return this.request("GET", `/v1/orgs/${orgId}/mfa-policy`);
+	}
+	setMfaPolicy(orgId, input) {
+		return this.request("PATCH", `/v1/orgs/${orgId}/mfa-policy`, input);
+	}
 	listInvites(orgId) {
 		return this.request("GET", `/v1/orgs/${orgId}/invites`);
 	}
@@ -4589,7 +4615,7 @@ registerMongoCommands(program);
 registerKmsCommands(program);
 registerRecoveryCommands(program);
 program.command("mcp").description("run an MCP server over stdio so AI agents can drive seekrit").action(async () => {
-	const { runMcpServer } = await import("./mcp-CVhEQDfd.js");
+	const { runMcpServer } = await import("./mcp-DR_Ghb4w.js");
 	await runMcpServer();
 });
 program.command("audit").description("show the org audit trail").option("--org <slug>").option("--limit <n>", "entries to fetch", "50").action(async (options) => {

package/dist/{mcp-CVhEQDfd.js → mcp-DR_Ghb4w.js}

@@ -115,11 +115,11 @@ async function resolveTargetEnv(ctx, o) {
 	}
 	return resolveEnvTarget(ctx, o);
 }
-async function runMcpServer() {
+async function runMcpServer(options = {}) {
 	setFailThrows(true);
 	const server = new McpServer({
 		name: "seekrit",
-		version
+		version: options.version ?? version
 	});
 	/** Register a tool whose handler returns data (serialized) or throws (→ isError). */
 	const tool = (name, description, shape, handler) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seekrit/cli",
-  "version": "0.18.0",
+  "version": "0.19.0",
   "description": "End-to-end encrypted secrets manager CLI — inject decrypted secrets into any command.",
   "type": "module",
   "publishConfig": {
@@ -9,6 +9,9 @@
   "bin": {
     "seekrit": "./dist/index.js"
   },
+  "exports": {
+    "./mcp": "./src/mcp.ts"
+  },
   "files": [
     "dist"
   ],
@@ -24,8 +27,8 @@
     "@types/node": "^26.1.0",
     "tsdown": "^0.22.3",
     "@seekrit/api-client": "0.0.1",
-    "@seekrit/core": "0.0.1",
-    "@seekrit/crypto": "0.0.1"
+    "@seekrit/crypto": "0.0.1",
+    "@seekrit/core": "0.0.1"
   },
   "scripts": {
     "build": "tsdown",