ccraft 1.0.13 → 1.0.14

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccraft",
-  "version": "1.0.13",
+  "version": "1.0.14",
   "description": "Intelligent Claude Code project configurator — role-aware agents, skills, rules, MCPs, and workflows",
   "type": "module",
   "bin": {

package/src/commands/install.js

@@ -14,6 +14,7 @@ import {
 import {
   gatherProjectPath,
   gatherCreateProfile,
+  gatherMcpKeys,
   confirmInstallation,
 } from '../prompts/gather.js';
 import { themedInput } from '../ui/prompts.js';
@@ -401,7 +402,7 @@ export async function runInstall(options = {}) {
 
     // All MCPs are auto-installed; no interactive selection
     const selectedMcps = mcpConfigs || [];
-    const mcpKeys = {};
+    let mcpKeys = {};
     const securityConfig = { addSecurityGitignore: true };
 
     // Confirmation gate (skipped in create mode and non-interactive mode)
@@ -420,6 +421,11 @@ export async function runInstall(options = {}) {
     // ================================================================
     renderPhaseHeader(4, phaseOpts);
 
+    // Prompt for API keys for MCPs that need them
+    if (!options.yes) {
+      mcpKeys = await gatherMcpKeys(selectedMcps);
+    }
+
     let results;
     let filesToWrite;
 

package/src/prompts/gather.js

@@ -227,6 +227,49 @@ export async function gatherMcpConfig(scoredMcps) {
   return { selectedMcps, mcpKeys };
 }
 
+// ── MCP API key collection (standalone) ──────────────────────────────
+
+/**
+ * Prompt the user for API keys for MCPs that require them.
+ * Returns { [mcpId]: { KEY_NAME: 'value' } }.
+ */
+export async function gatherMcpKeys(selectedMcps) {
+  const mcpKeys = {};
+  const needKeys = selectedMcps.filter((m) => m.requiresKey);
+
+  if (needKeys.length === 0) return mcpKeys;
+
+  console.log(chalk.dim('\n  Some MCP servers require API keys.\n'));
+
+  for (const mcp of needKeys) {
+    const keyDefs = mcp.keyNames || [{ name: mcp.keyName, description: mcp.keyDescription }];
+    const collected = {};
+
+    for (const keyDef of keyDefs) {
+      const key = await themedPassword({
+        message: `${mcp.id} — ${keyDef.description}:`,
+        hint: `Press Enter to skip. You can set ${keyDef.name} as an env variable later.`,
+        mask: '*',
+      });
+      if (key && key.trim()) {
+        const { warning } = validateApiKeyFormat(mcp.id, keyDef.name, key.trim());
+        if (warning) {
+          console.log(chalk.yellow(`    ⚠ ${warning}`));
+        }
+        collected[keyDef.name] = key.trim();
+      } else {
+        console.log(chalk.dim(`    Skipped — set ${keyDef.name} env var later`));
+      }
+    }
+
+    if (Object.keys(collected).length > 0) {
+      mcpKeys[mcp.id] = collected;
+    }
+  }
+
+  return mcpKeys;
+}
+
 // ── Security configuration ────────────────────────────────────────────
 
 export function gatherSecurityConfig(detected) {