@wrongstack/cli 0.306.2 → 0.306.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/dist/index.js +1 -1
  2. package/dist/{mcp-MSARYOPN.js → mcp-JNWEQ6T2.js} +17 -5
  3. package/package.json +24 -24
package/dist/index.js CHANGED
@@ -729,7 +729,7 @@ var loaders = {
729
729
  skills: async () => (await import("./tools-skills-UNKLOB7M.js")).skillsCmd,
730
730
  providers: async () => (await import("./providers-models-HQN3AT3K.js")).providersCmd,
731
731
  models: async () => (await import("./providers-models-HQN3AT3K.js")).modelsCmd,
732
- mcp: async () => (await import("./mcp-MSARYOPN.js")).mcpCmd,
732
+ mcp: async () => (await import("./mcp-JNWEQ6T2.js")).mcpCmd,
733
733
  plugin: async () => (await import("./plugin-usage-PTEETL3J.js")).pluginCmd,
734
734
  plugins: async () => (await import("./plugin-usage-PTEETL3J.js")).pluginCmd,
735
735
  diag: async () => (await import("./diag-doctor-WTBHPOMB.js")).diagCmd,
package/dist/{mcp-MSARYOPN.js → mcp-JNWEQ6T2.js} RENAMED
@@ -209,7 +209,7 @@ async function serveMcpStdio(deps) {
209
209
  });
210
210
  }
211
211
  const controller = new AbortController();
212
- const ctx = makeServeContext(
212
+ const selectionCtx = makeServeContext(
213
213
  deps.cwd,
214
214
  deps.projectRoot,
215
215
  controller.signal,
@@ -225,7 +225,7 @@ async function serveMcpStdio(deps) {
225
225
  // See wiring/pipeline.ts for why all four hosts must agree.
226
226
  requireKanbanGovernance: deps.config.tools?.kanbanGovernance ?? false
227
227
  });
228
- const allowed = await selectExposedTools(registry, ctx, permissionPolicy, whitelist);
228
+ const allowed = await selectExposedTools(registry, selectionCtx, permissionPolicy, whitelist);
229
229
  const allowedNames = new Set(allowed.map((t) => t.name));
230
230
  if (allowed.length === 0) {
231
231
  log(
@@ -249,7 +249,13 @@ async function serveMcpStdio(deps) {
249
249
  name,
250
250
  input: callArgs
251
251
  };
252
- const batch = await executor.executeBatch([use], ctx, "sequential");
252
+ const requestCtx = makeServeContext(
253
+ deps.cwd,
254
+ deps.projectRoot,
255
+ controller.signal,
256
+ deps.config.tools?.restrictToProjectRoot ?? false
257
+ );
258
+ const batch = await executor.executeBatch([use], requestCtx, "sequential");
253
259
  const result = batch.outputs[0]?.result;
254
260
  if (!result || result.type === "tool_confirm_pending") {
255
261
  return {
@@ -270,7 +276,13 @@ async function serveMcpStdio(deps) {
270
276
  if (flags["http"] === true || typeof flags["http"] === "string" || flags["port"] || flags["host"]) {
271
277
  const port = Number(flags["port"] ?? flags["http"] ?? 0) || 0;
272
278
  const httpHost = typeof flags["host"] === "string" ? flags["host"] : "127.0.0.1";
273
- const token = typeof flags["token"] === "string" ? flags["token"] : void 0;
279
+ const tokenFromArg = typeof flags["token"] === "string" ? flags["token"] : void 0;
280
+ const token = tokenFromArg ?? process.env.WRONGSTACK_MCP_TOKEN?.trim() ?? void 0;
281
+ if (tokenFromArg) {
282
+ log(
283
+ "[mcp-serve] --token puts the auth token in this process command line, which other local processes can read. Prefer WRONGSTACK_MCP_TOKEN."
284
+ );
285
+ }
274
286
  let handle2;
275
287
  try {
276
288
  handle2 = await serveHttp(server, {
@@ -417,4 +429,4 @@ function isRecord(value) {
417
429
  export {
418
430
  mcpCmd
419
431
  };
420
- //# sourceMappingURL=mcp-MSARYOPN.js.map
432
+ //# sourceMappingURL=mcp-JNWEQ6T2.js.map
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@wrongstack/cli",
3
- "version": "0.306.2",
3
+ "version": "0.306.3",
4
4
  "license": "MIT",
5
5
  "description": "WrongStack CLI — terminal AI coding agent with provider catalog from models.dev. Provides `wrongstack` and `wstack` binaries.",
6
6
  "keywords": [
@@ -42,31 +42,31 @@
42
42
  ],
43
43
  "dependencies": {
44
44
  "ws": "^8.21.1",
45
- "@wrongstack/acp": "0.306.2",
46
- "@wrongstack/mcp": "0.306.2",
47
- "@wrongstack/kanban": "0.306.2",
48
- "@wrongstack/core": "0.306.2",
49
- "@wrongstack/providers": "0.306.2",
50
- "@wrongstack/bench": "0.306.2",
51
- "@wrongstack/plug-lsp": "0.306.2",
52
- "@wrongstack/persistence": "0.306.2",
53
- "@wrongstack/requirement-intake": "0.306.2",
54
- "@wrongstack/plugins": "0.306.2",
55
- "@wrongstack/sdd": "0.306.2",
56
- "@wrongstack/security-scanner": "0.306.2",
57
- "@wrongstack/sage": "0.306.2",
58
- "@wrongstack/runtime": "0.306.2",
59
- "@wrongstack/telegram": "0.306.2",
60
- "@wrongstack/simpleui": "0.306.2",
61
- "@wrongstack/techstack": "0.306.2",
62
- "@wrongstack/webui-hq": "0.306.2",
63
- "@wrongstack/webui": "0.306.2",
64
- "@wrongstack/tui": "0.306.2",
65
- "@wrongstack/webui-server": "0.306.2",
66
- "@wrongstack/tools": "0.306.2"
45
+ "@wrongstack/kanban": "0.306.3",
46
+ "@wrongstack/acp": "0.306.3",
47
+ "@wrongstack/core": "0.306.3",
48
+ "@wrongstack/bench": "0.306.3",
49
+ "@wrongstack/mcp": "0.306.3",
50
+ "@wrongstack/plugins": "0.306.3",
51
+ "@wrongstack/providers": "0.306.3",
52
+ "@wrongstack/plug-lsp": "0.306.3",
53
+ "@wrongstack/requirement-intake": "0.306.3",
54
+ "@wrongstack/persistence": "0.306.3",
55
+ "@wrongstack/security-scanner": "0.306.3",
56
+ "@wrongstack/runtime": "0.306.3",
57
+ "@wrongstack/sage": "0.306.3",
58
+ "@wrongstack/techstack": "0.306.3",
59
+ "@wrongstack/tools": "0.306.3",
60
+ "@wrongstack/simpleui": "0.306.3",
61
+ "@wrongstack/sdd": "0.306.3",
62
+ "@wrongstack/telegram": "0.306.3",
63
+ "@wrongstack/tui": "0.306.3",
64
+ "@wrongstack/webui": "0.306.3",
65
+ "@wrongstack/webui-server": "0.306.3",
66
+ "@wrongstack/webui-hq": "0.306.3"
67
67
  },
68
68
  "optionalDependencies": {
69
- "@wrongstack/desktop": "0.306.2"
69
+ "@wrongstack/desktop": "0.306.3"
70
70
  },
71
71
  "devDependencies": {
72
72
  "@types/node": "^26.1.2",