@thantos66/claude-context-mcp 0.1.0

package/dist/services/mcp-config.js

@@ -0,0 +1,163 @@
+import fs from "node:fs/promises";
+import { McpConfigFileSchema, McpServerEntrySchema, isStdioServer, } from "../schemas/mcp-config.js";
+import { atomicWriteFile, stringifyJson } from "./atomic-write.js";
+import { backupFile } from "./backup.js";
+import { mcpConfigPathFor } from "./paths.js";
+const SECRET_KEY_RX = /(key|token|secret|password|apikey)/i;
+/** Load an MCP config file, returning `{ mcpServers: {} }` if absent. */
+export async function loadMcpConfig(path) {
+    let raw;
+    try {
+        raw = await fs.readFile(path, "utf8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            return { mcpServers: {} };
+        }
+        throw err;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new Error(`Invalid JSON in ${path}: ${err.message}`);
+    }
+    return McpConfigFileSchema.parse(parsed);
+}
+/**
+ * Write an MCP config file: backup → atomic write.
+ * When `dryRun: true`, returns a diff and leaves disk untouched.
+ */
+export async function saveMcpConfig(path, next, { dryRun = false } = {}) {
+    const validated = McpConfigFileSchema.parse(next);
+    const nextText = stringifyJson(validated);
+    if (dryRun) {
+        let prevText = "";
+        try {
+            prevText = await fs.readFile(path, "utf8");
+        }
+        catch (err) {
+            if (err.code !== "ENOENT")
+                throw err;
+        }
+        return {
+            path,
+            backup: null,
+            dryRun: true,
+            diff: makeUnifiedDiff(prevText, nextText, path),
+        };
+    }
+    const backup = await backupFile(path);
+    await atomicWriteFile(path, nextText);
+    return { path, backup, dryRun: false };
+}
+/** List servers across one scope. Redacts secrets by default. */
+export async function listServers(scope, opts = {}) {
+    const path = mcpConfigPathFor(scope, opts.projectPath);
+    const cfg = await loadMcpConfig(path);
+    const entries = Object.entries(cfg.mcpServers ?? {});
+    return entries.map(([name, entry]) => ({
+        scope,
+        name,
+        path,
+        entry: opts.revealSecrets ? entry : redactSecrets(entry),
+    }));
+}
+/** Add or replace a server entry in a scope. */
+export async function addServer(params) {
+    const { scope, name, entry, projectPath, dryRun, overwrite } = params;
+    const validatedEntry = McpServerEntrySchema.parse(entry);
+    const path = mcpConfigPathFor(scope, projectPath);
+    const cfg = await loadMcpConfig(path);
+    cfg.mcpServers ??= {};
+    if (!overwrite && cfg.mcpServers[name] !== undefined) {
+        throw new Error(`MCP server "${name}" already exists in ${path}. Pass overwrite: true to replace.`);
+    }
+    cfg.mcpServers[name] = validatedEntry;
+    return saveMcpConfig(path, cfg, { dryRun });
+}
+/** Patch individual fields of an existing server entry. */
+export async function updateServer(params) {
+    const { scope, name, patch, projectPath, dryRun } = params;
+    const path = mcpConfigPathFor(scope, projectPath);
+    const cfg = await loadMcpConfig(path);
+    const current = cfg.mcpServers?.[name];
+    if (!current) {
+        throw new Error(`MCP server "${name}" not found in ${path}.`);
+    }
+    const merged = { ...current, ...patch };
+    cfg.mcpServers[name] = McpServerEntrySchema.parse(merged);
+    return saveMcpConfig(path, cfg, { dryRun });
+}
+/** Remove a server by name. */
+export async function removeServer(params) {
+    const { scope, name, projectPath, dryRun } = params;
+    const path = mcpConfigPathFor(scope, projectPath);
+    const cfg = await loadMcpConfig(path);
+    if (!cfg.mcpServers?.[name]) {
+        throw new Error(`MCP server "${name}" not found in ${path}.`);
+    }
+    delete cfg.mcpServers[name];
+    return saveMcpConfig(path, cfg, { dryRun });
+}
+/** Toggle the `disabled` flag on an existing server entry. */
+export async function setServerDisabled(params) {
+    return updateServer({
+        scope: params.scope,
+        name: params.name,
+        patch: { disabled: params.disabled },
+        projectPath: params.projectPath,
+        dryRun: params.dryRun,
+    });
+}
+/** Get a single server entry. */
+export async function getServer(params) {
+    const { scope, name, projectPath, revealSecrets } = params;
+    const path = mcpConfigPathFor(scope, projectPath);
+    const cfg = await loadMcpConfig(path);
+    const entry = cfg.mcpServers?.[name];
+    if (!entry)
+        return null;
+    return {
+        scope,
+        name,
+        path,
+        entry: revealSecrets ? entry : redactSecrets(entry),
+    };
+}
+/** Replace env-value secrets with "[REDACTED]" unless explicitly opted in. */
+function redactSecrets(entry) {
+    if (!isStdioServer(entry) || !entry.env)
+        return entry;
+    const redactedEnv = {};
+    for (const [k, v] of Object.entries(entry.env)) {
+        redactedEnv[k] = SECRET_KEY_RX.test(k) ? "[REDACTED]" : v;
+    }
+    return { ...entry, env: redactedEnv };
+}
+/**
+ * Minimal unified diff for dry-run output. Not a full diff engine — just
+ * enough to read at a glance in tool responses.
+ */
+export function makeUnifiedDiff(a, b, label) {
+    if (a === b)
+        return `# no changes to ${label}\n`;
+    const aLines = a.split("\n");
+    const bLines = b.split("\n");
+    const header = `--- ${label} (current)\n+++ ${label} (proposed)\n`;
+    const body = [];
+    const max = Math.max(aLines.length, bLines.length);
+    for (let i = 0; i < max; i++) {
+        const aL = aLines[i];
+        const bL = bLines[i];
+        if (aL === bL)
+            continue;
+        if (aL !== undefined)
+            body.push(`- ${aL}`);
+        if (bL !== undefined)
+            body.push(`+ ${bL}`);
+    }
+    return header + body.join("\n") + "\n";
+}
+//# sourceMappingURL=mcp-config.js.map

package/dist/services/mcp-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-config.js","sourceRoot":"","sources":["../../src/services/mcp-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EAGpB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG9C,MAAM,aAAa,GAAG,qCAAqC,CAAC;AAS5D,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,IAAmB,EACnB,EAAE,MAAM,GAAG,KAAK,KAA2B,EAAE;IAE7C,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAE1C,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;QAClE,CAAC;QACD,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACzC,CAAC;AASD,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAY,EACZ,OAA0D,EAAE;IAE5D,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,KAAK;QACL,IAAI;QACJ,IAAI;QACJ,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC;KACzD,CAAC,CAAC,CAAC;AACN,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAO/B;IACC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IACtE,MAAM,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,GAAG,CAAC,UAAU,KAAK,EAAE,CAAC;IACtB,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,uBAAuB,IAAI,oCAAoC,CACnF,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC;IACtC,OAAO,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAMlC;IACC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC3D,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,kBAAkB,IAAI,GAAG,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAoB,CAAC;IAC1D,GAAG,CAAC,UAAW,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,OAAO,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,+BAA+B;AAC/B,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAKlC;IACC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACpD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,kBAAkB,IAAI,GAAG,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAMvC;IACC,OAAO,YAAY,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAA6B;QAC/D,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,iCAAiC;AACjC,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAK/B;IACC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAC3D,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO;QACL,KAAK;QACL,IAAI;QACJ,IAAI;QACJ,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,aAAa,CAAC,KAAqB;IAC1C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,WAAW,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,CAAS,EACT,CAAS,EACT,KAAa;IAEb,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,mBAAmB,KAAK,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,OAAO,KAAK,mBAAmB,KAAK,eAAe,CAAC;IACnE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACxB,IAAI,EAAE,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,EAAE,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACzC,CAAC"}

package/dist/services/paths.d.ts

@@ -0,0 +1,42 @@
+import { type Scope } from "../constants.js";
+/**
+ * Throws if `projectPath` is not a usable absolute path.
+ *
+ * Guards against two footguns:
+ * 1. Relative paths (ambiguous — we can't know what they're relative to).
+ * 2. Paths outside the user's home directory (likely a typo or attack).
+ *    Opt-out with `allowOutsideHome: true` on the per-call basis.
+ */
+export declare function assertValidProjectPath(projectPath: string, { allowOutsideHome }?: {
+    allowOutsideHome?: boolean;
+}): void;
+/** Resolve the MCP servers config file for a given scope. */
+export declare function mcpConfigPathFor(scope: Scope, projectPath?: string): string;
+/** Resolve the settings.json file for a given Claude Code scope. */
+export declare function settingsPathFor(scope: "user" | "project", projectPath?: string): string;
+/** Resolve the agents directory for a given Claude Code scope. */
+export declare function agentsDirFor(scope: "user" | "project", projectPath?: string): string;
+/** Resolve the skills directory for a given Claude Code scope. */
+export declare function skillsDirFor(scope: "user" | "project", projectPath?: string): string;
+/**
+ * Summary of every config path the tool knows about for the current OS.
+ * Returned from the `meta_platform_paths` tool for discovery/debugging.
+ */
+export declare function allPlatformPaths(projectPath?: string): {
+    platform: NodeJS.Platform;
+    desktop: {
+        mcpServers: string;
+    };
+    user: {
+        mcpServers: string;
+        settings: string;
+        agents: string;
+        skills: string;
+    };
+    project: {
+        mcpServers: string;
+        settings: string;
+        agents: string;
+        skills: string;
+    } | null;
+};

package/dist/services/paths.js

@@ -0,0 +1,91 @@
+import path from "node:path";
+import os from "node:os";
+import { claudeDesktopConfigPath, claudeCodeUserJsonPath, claudeCodeUserSettingsPath, claudeCodeUserAgentsDir, claudeCodeUserSkillsDir, projectMcpJsonPath, projectSettingsPath, projectAgentsDir, projectSkillsDir, } from "../constants.js";
+/**
+ * Throws if `projectPath` is not a usable absolute path.
+ *
+ * Guards against two footguns:
+ * 1. Relative paths (ambiguous — we can't know what they're relative to).
+ * 2. Paths outside the user's home directory (likely a typo or attack).
+ *    Opt-out with `allowOutsideHome: true` on the per-call basis.
+ */
+export function assertValidProjectPath(projectPath, { allowOutsideHome = false } = {}) {
+    if (!path.isAbsolute(projectPath)) {
+        throw new Error(`projectPath must be absolute, got ${JSON.stringify(projectPath)}`);
+    }
+    if (!allowOutsideHome) {
+        const home = os.homedir();
+        const rel = path.relative(home, projectPath);
+        if (rel.startsWith("..") || path.isAbsolute(rel)) {
+            throw new Error(`projectPath ${JSON.stringify(projectPath)} is outside $HOME (${home}). ` +
+                `Pass allowOutsideHome: true to override.`);
+        }
+    }
+}
+/** Resolve the MCP servers config file for a given scope. */
+export function mcpConfigPathFor(scope, projectPath) {
+    switch (scope) {
+        case "desktop":
+            return claudeDesktopConfigPath();
+        case "user":
+            return claudeCodeUserJsonPath();
+        case "project": {
+            if (!projectPath)
+                throw new Error("projectPath required for scope=project");
+            assertValidProjectPath(projectPath);
+            return projectMcpJsonPath(projectPath);
+        }
+    }
+}
+/** Resolve the settings.json file for a given Claude Code scope. */
+export function settingsPathFor(scope, projectPath) {
+    if (scope === "user")
+        return claudeCodeUserSettingsPath();
+    if (!projectPath)
+        throw new Error("projectPath required for scope=project");
+    assertValidProjectPath(projectPath);
+    return projectSettingsPath(projectPath);
+}
+/** Resolve the agents directory for a given Claude Code scope. */
+export function agentsDirFor(scope, projectPath) {
+    if (scope === "user")
+        return claudeCodeUserAgentsDir();
+    if (!projectPath)
+        throw new Error("projectPath required for scope=project");
+    assertValidProjectPath(projectPath);
+    return projectAgentsDir(projectPath);
+}
+/** Resolve the skills directory for a given Claude Code scope. */
+export function skillsDirFor(scope, projectPath) {
+    if (scope === "user")
+        return claudeCodeUserSkillsDir();
+    if (!projectPath)
+        throw new Error("projectPath required for scope=project");
+    assertValidProjectPath(projectPath);
+    return projectSkillsDir(projectPath);
+}
+/**
+ * Summary of every config path the tool knows about for the current OS.
+ * Returned from the `meta_platform_paths` tool for discovery/debugging.
+ */
+export function allPlatformPaths(projectPath) {
+    return {
+        platform: process.platform,
+        desktop: { mcpServers: claudeDesktopConfigPath() },
+        user: {
+            mcpServers: claudeCodeUserJsonPath(),
+            settings: claudeCodeUserSettingsPath(),
+            agents: claudeCodeUserAgentsDir(),
+            skills: claudeCodeUserSkillsDir(),
+        },
+        project: projectPath
+            ? {
+                mcpServers: projectMcpJsonPath(projectPath),
+                settings: projectSettingsPath(projectPath),
+                agents: projectAgentsDir(projectPath),
+                skills: projectSkillsDir(projectPath),
+            }
+            : null,
+    };
+}
+//# sourceMappingURL=paths.js.map

package/dist/services/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/services/paths.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAEL,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,EAAE,gBAAgB,GAAG,KAAK,KAAqC,EAAE;IAEjE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC7C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,sBAAsB,IAAI,KAAK;gBACvE,0CAA0C,CAC7C,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,gBAAgB,CAAC,KAAY,EAAE,WAAoB;IACjE,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,uBAAuB,EAAE,CAAC;QACnC,KAAK,MAAM;YACT,OAAO,sBAAsB,EAAE,CAAC;QAClC,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5E,sBAAsB,CAAC,WAAW,CAAC,CAAC;YACpC,OAAO,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAC7B,KAAyB,EACzB,WAAoB;IAEpB,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,0BAA0B,EAAE,CAAC;IAC1D,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5E,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACpC,OAAO,mBAAmB,CAAC,WAAW,CAAC,CAAC;AAC1C,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,YAAY,CAC1B,KAAyB,EACzB,WAAoB;IAEpB,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,uBAAuB,EAAE,CAAC;IACvD,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5E,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACpC,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC;AACvC,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,YAAY,CAC1B,KAAyB,EACzB,WAAoB;IAEpB,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,uBAAuB,EAAE,CAAC;IACvD,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5E,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACpC,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAoB;IACnD,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,EAAE,UAAU,EAAE,uBAAuB,EAAE,EAAE;QAClD,IAAI,EAAE;YACJ,UAAU,EAAE,sBAAsB,EAAE;YACpC,QAAQ,EAAE,0BAA0B,EAAE;YACtC,MAAM,EAAE,uBAAuB,EAAE;YACjC,MAAM,EAAE,uBAAuB,EAAE;SAClC;QACD,OAAO,EAAE,WAAW;YAClB,CAAC,CAAC;gBACE,UAAU,EAAE,kBAAkB,CAAC,WAAW,CAAC;gBAC3C,QAAQ,EAAE,mBAAmB,CAAC,WAAW,CAAC;gBAC1C,MAAM,EAAE,gBAAgB,CAAC,WAAW,CAAC;gBACrC,MAAM,EAAE,gBAAgB,CAAC,WAAW,CAAC;aACtC;YACH,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC"}

package/dist/services/permissions.d.ts

@@ -0,0 +1,38 @@
+import { type SettingsFile, type PermissionsBlock, type DefaultMode, type PermissionListName } from "../schemas/settings.js";
+import { type WriteResult } from "./mcp-config.js";
+/** Load settings.json, returning an empty object if absent. */
+export declare function loadSettings(path: string): Promise<SettingsFile>;
+/** Return the permissions block for a scope, merging empty lists as needed. */
+export declare function listPermissions(scope: "user" | "project", projectPath?: string): Promise<{
+    path: string;
+    permissions: Required<PermissionsBlock>;
+    defaultMode?: DefaultMode;
+}>;
+/** Add rule(s) to one of allow|deny|ask. Idempotent: duplicates are skipped. */
+export declare function addRules(params: {
+    scope: "user" | "project";
+    list: PermissionListName;
+    rules: string[];
+    projectPath?: string;
+    dryRun?: boolean;
+}): Promise<WriteResult & {
+    added: string[];
+    alreadyPresent: string[];
+}>;
+/** Remove one rule (by exact string) from allow|deny|ask. */
+export declare function removeRule(params: {
+    scope: "user" | "project";
+    list: PermissionListName;
+    rule: string;
+    projectPath?: string;
+    dryRun?: boolean;
+}): Promise<WriteResult & {
+    removed: boolean;
+}>;
+/** Set the `defaultMode` field on settings.json. */
+export declare function setDefaultMode(params: {
+    scope: "user" | "project";
+    mode: DefaultMode;
+    projectPath?: string;
+    dryRun?: boolean;
+}): Promise<WriteResult>;

package/dist/services/permissions.js

@@ -0,0 +1,104 @@
+import fs from "node:fs/promises";
+import { SettingsFileSchema, } from "../schemas/settings.js";
+import { atomicWriteFile, stringifyJson } from "./atomic-write.js";
+import { backupFile } from "./backup.js";
+import { settingsPathFor } from "./paths.js";
+import { makeUnifiedDiff } from "./mcp-config.js";
+/** Load settings.json, returning an empty object if absent. */
+export async function loadSettings(path) {
+    try {
+        const raw = await fs.readFile(path, "utf8");
+        const parsed = JSON.parse(raw);
+        return SettingsFileSchema.parse(parsed);
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return {};
+        throw err;
+    }
+}
+async function saveSettings(path, next, { dryRun = false } = {}) {
+    const validated = SettingsFileSchema.parse(next);
+    const nextText = stringifyJson(validated);
+    if (dryRun) {
+        let prevText = "";
+        try {
+            prevText = await fs.readFile(path, "utf8");
+        }
+        catch (err) {
+            if (err.code !== "ENOENT")
+                throw err;
+        }
+        return {
+            path,
+            backup: null,
+            dryRun: true,
+            diff: makeUnifiedDiff(prevText, nextText, path),
+        };
+    }
+    const backup = await backupFile(path);
+    await atomicWriteFile(path, nextText);
+    return { path, backup, dryRun: false };
+}
+/** Return the permissions block for a scope, merging empty lists as needed. */
+export async function listPermissions(scope, projectPath) {
+    const path = settingsPathFor(scope, projectPath);
+    const settings = await loadSettings(path);
+    const p = settings.permissions ?? {};
+    return {
+        path,
+        permissions: {
+            allow: p.allow ?? [],
+            deny: p.deny ?? [],
+            ask: p.ask ?? [],
+        },
+        defaultMode: settings.defaultMode,
+    };
+}
+/** Add rule(s) to one of allow|deny|ask. Idempotent: duplicates are skipped. */
+export async function addRules(params) {
+    const { scope, list, rules, projectPath, dryRun } = params;
+    const path = settingsPathFor(scope, projectPath);
+    const settings = await loadSettings(path);
+    settings.permissions ??= {};
+    const current = (settings.permissions[list] ??= []);
+    const added = [];
+    const alreadyPresent = [];
+    for (const rule of rules) {
+        if (current.includes(rule)) {
+            alreadyPresent.push(rule);
+        }
+        else {
+            current.push(rule);
+            added.push(rule);
+        }
+    }
+    const result = await saveSettings(path, settings, { dryRun });
+    return { ...result, added, alreadyPresent };
+}
+/** Remove one rule (by exact string) from allow|deny|ask. */
+export async function removeRule(params) {
+    const { scope, list, rule, projectPath, dryRun } = params;
+    const path = settingsPathFor(scope, projectPath);
+    const settings = await loadSettings(path);
+    const arr = settings.permissions?.[list];
+    if (!arr) {
+        return { path, backup: null, dryRun: dryRun ?? false, removed: false };
+    }
+    const idx = arr.indexOf(rule);
+    if (idx === -1) {
+        return { path, backup: null, dryRun: dryRun ?? false, removed: false };
+    }
+    arr.splice(idx, 1);
+    const result = await saveSettings(path, settings, { dryRun });
+    return { ...result, removed: true };
+}
+/** Set the `defaultMode` field on settings.json. */
+export async function setDefaultMode(params) {
+    const { scope, mode, projectPath, dryRun } = params;
+    const path = settingsPathFor(scope, projectPath);
+    const settings = await loadSettings(path);
+    settings.defaultMode = mode;
+    return saveSettings(path, settings, { dryRun });
+}
+//# sourceMappingURL=permissions.js.map

package/dist/services/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/services/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EACL,kBAAkB,GAKnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAoB,MAAM,iBAAiB,CAAC;AAEpE,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,IAAkB,EAClB,EAAE,MAAM,GAAG,KAAK,KAA2B,EAAE;IAE7C,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;QAClE,CAAC;QACD,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;SAChD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAyB,EACzB,WAAoB;IAEpB,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;IACrC,OAAO;QACL,IAAI;QACJ,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;YAClB,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;SACjB;QACD,WAAW,EAAE,QAAQ,CAAC,WAAW;KAClC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAM9B;IACC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC3D,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1C,QAAQ,CAAC,WAAW,KAAK,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;AAC9C,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAMhC;IACC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1D,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAKpC;IACC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACpD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1C,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC;IAC5B,OAAO,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC"}

package/dist/services/skills.d.ts

@@ -0,0 +1,62 @@
+import { type SkillFrontmatter } from "../schemas/skill-frontmatter.js";
+export interface SkillRecord {
+    scope: "user" | "project";
+    name: string;
+    dir: string;
+    skillMdPath: string;
+    frontmatter: SkillFrontmatter;
+    body: string;
+}
+export interface SkillWriteResult {
+    path: string;
+    backup: string | null;
+    dryRun: boolean;
+    preview?: string;
+}
+/** List all skill folders under the scope's skills dir. */
+export declare function listSkills(scope: "user" | "project", projectPath?: string): Promise<SkillRecord[]>;
+export declare function getSkill(params: {
+    scope: "user" | "project";
+    name: string;
+    projectPath?: string;
+}): Promise<SkillRecord | null>;
+/** Serialize a skill record to SKILL.md contents. */
+export declare function serializeSkill(frontmatter: SkillFrontmatter, body: string): string;
+/** Scaffold a new skill folder with a SKILL.md. */
+export declare function createSkill(params: {
+    scope: "user" | "project";
+    name: string;
+    description: string;
+    allowedTools?: string;
+    model?: string;
+    body?: string;
+    projectPath?: string;
+    overwrite?: boolean;
+    dryRun?: boolean;
+}): Promise<SkillWriteResult>;
+/** Patch frontmatter fields or replace the SKILL.md body. */
+export declare function updateSkill(params: {
+    scope: "user" | "project";
+    name: string;
+    description?: string;
+    allowedTools?: string;
+    model?: string;
+    body?: string;
+    projectPath?: string;
+    dryRun?: boolean;
+}): Promise<SkillWriteResult>;
+/** Toggle `disable-model-invocation` flag while preserving files. */
+export declare function setSkillEnabled(params: {
+    scope: "user" | "project";
+    name: string;
+    enabled: boolean;
+    projectPath?: string;
+    dryRun?: boolean;
+}): Promise<SkillWriteResult>;
+/** Remove a skill folder entirely. Backs up the full directory first. */
+export declare function deleteSkill(params: {
+    scope: "user" | "project";
+    name: string;
+    projectPath?: string;
+    dryRun?: boolean;
+}): Promise<SkillWriteResult>;