frontmcp 0.12.2 → 1.0.0-beta.2

package/README.md

@@ -14,7 +14,7 @@
 [![License](https://img.shields.io/github/license/agentfront/frontmcp.svg?v=1)](https://github.com/agentfront/frontmcp/blob/main/LICENSE)
 [![Snyk](https://snyk.io/test/github/agentfront/frontmcp/badge.svg)](https://snyk.io/test/github/agentfront/frontmcp)
 
-[Docs][docs-home] • [Quickstart][docs-quickstart] • [API Reference][docs-sdk-ref] • [Discord](https://discord.gg/frontmcp)
+[Docs][docs-home] • [Quickstart][docs-quickstart] • [API Reference][docs-sdk-ref] • [Discord](https://discord.gg/53AHnJnmwR)
 
 </div>
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "frontmcp",
-  "version": "0.12.2",
+  "version": "1.0.0-beta.2",
   "description": "FrontMCP command line interface",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -23,14 +23,15 @@
   },
   "main": "./src/index.js",
   "bin": {
-    "frontmcp": "./src/cli.js"
+    "frontmcp": "./src/core/cli.js"
   },
   "engines": {
     "node": ">=22.0.0"
   },
   "dependencies": {
     "@clack/prompts": "^0.10.0",
-    "@frontmcp/utils": "0.12.2",
+    "@frontmcp/utils": "1.0.0-beta.2",
+    "commander": "^13.0.0",
     "tslib": "^2.3.0",
     "@rspack/core": "^1.7.6",
     "esbuild": "^0.27.3"
@@ -39,8 +40,8 @@
     "typescript": "^5.5.3",
     "tsx": "^4.20.6",
     "@types/node": "^24.0.0",
-    "@modelcontextprotocol/inspector": "^0.20.0"
+    "@modelcontextprotocol/inspector": "^0.21.1"
   },
-  "types": "./src/index.d.ts",
+  "types": "./index.d.js",
   "type": "commonjs"
 }

package/src/commands/build/bundler.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.bundleForServerless = bundleForServerless;
 const core_1 = require("@rspack/core");
-const colors_1 = require("../../colors");
+const colors_1 = require("../../core/colors");
 /**
  * Bundle the serverless entry point into a single CJS file using rspack.
  * This resolves ESM/CJS compatibility issues and dynamic import problems.

package/src/commands/build/bundler.js.map

@@ -1 +1 @@
-{"version":3,"file":"bundler.js","sourceRoot":"","sources":["../../../../src/commands/build/bundler.ts"],"names":[],"mappings":";;AAWA,kDAoFC;AA/FD,uCAAsC;AACtC,yCAAiC;AAEjC;;;;;;;GAOG;AACI,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,MAAc,EACd,cAAsB;IAEtB,MAAM,QAAQ,GAAG,IAAA,aAAM,EAAC;QACtB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE;YACN,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YAC9B,KAAK,EAAE,KAAK;SACb;QACD,iDAAiD;QACjD,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QAChC,oFAAoF;QACpF,SAAS,EAAE;YACT,WAAW,EAAE,WAAW;YACxB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,SAAS;YAClB,wDAAwD;YACxD,KAAK,EAAE,OAAO;YACd,WAAW,EAAE,WAAW;YACxB,kBAAkB,EAAE,kBAAkB;YACtC,mBAAmB,EAAE,mBAAmB;SACzC;QACD,OAAO,EAAE;YACP,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;YAC5C,gGAAgG;YAChG,cAAc,EAAE,KAAK;SACtB;QACD,MAAM,EAAE;YACN,KAAK,EAAE,EAAE;YACT,MAAM,EAAE;gBACN,UAAU,EAAE;oBACV,sEAAsE;oBACtE,iDAAiD;oBACjD,iBAAiB,EAAE,OAAO;oBAC1B,mBAAmB,EAAE,KAAK;oBAC1B,sBAAsB,EAAE,KAAK;iBAC9B;aACF;SACF;QACD,uDAAuD;QACvD,YAAY,EAAE;YACZ,QAAQ,EAAE,KAAK;SAChB;QACD,wEAAwE;QACxE,cAAc,EAAE;YACd,+EAA+E;YAC/E,mEAAmE;YACnE,8EAA8E;YAC9E,gDAAgD;SACjD;QACD,0BAA0B;QAC1B,KAAK,EAAE,iBAAiB;KACzB,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YAC1B,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;YACD,IAAI,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC;gBACvF,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,aAAa,EAAE,CAAC,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC5B,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC3B,OAAO,CAAC,GAAG,CAAC,IAAA,UAAC,EAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACtD,CAAC,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAC1B,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,CAAC,GAAG,CAAC,IAAA,UAAC,EAAC,QAAQ,EAAE,+BAA+B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC9E,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { rspack } from '@rspack/core';\nimport { c } from '../../colors';\n\n/**\n * Bundle the serverless entry point into a single CJS file using rspack.\n * This resolves ESM/CJS compatibility issues and dynamic import problems.\n *\n * @param entryPath - Absolute path to the entry file (e.g., dist/index.js)\n * @param outDir - Output directory for the bundled file\n * @param outputFilename - Name of the output bundle (e.g., 'handler.cjs')\n */\nexport async function bundleForServerless(\n  entryPath: string,\n  outDir: string,\n  outputFilename: string,\n): Promise<void> {\n  const compiler = rspack({\n    mode: 'production',\n    target: 'node',\n    entry: entryPath,\n    output: {\n      path: outDir,\n      filename: outputFilename,\n      library: { type: 'commonjs2' },\n      clean: false,\n    },\n    // Use node externals preset for built-in modules\n    externalsPresets: { node: true },\n    // Exclude problematic optional dependencies (native binaries that can't be bundled)\n    externals: {\n      '@swc/core': '@swc/core',\n      fsevents: 'fsevents',\n      esbuild: 'esbuild',\n      // React is optional - only needed for MDX/JSX rendering\n      react: 'react',\n      'react-dom': 'react-dom',\n      'react-dom/server': 'react-dom/server',\n      'react/jsx-runtime': 'react/jsx-runtime',\n    },\n    resolve: {\n      extensions: ['.js', '.mjs', '.cjs', '.json'],\n      // Allow imports without file extensions (TypeScript compiles without .js but ESM requires them)\n      fullySpecified: false,\n    },\n    module: {\n      rules: [],\n      parser: {\n        javascript: {\n          // Handle dynamic requires like require('@vercel/kv') inside functions\n          // by wrapping them instead of externalizing them\n          dynamicImportMode: 'eager',\n          exprContextCritical: false,\n          unknownContextCritical: false,\n        },\n      },\n    },\n    // Don't minimize to preserve readability for debugging\n    optimization: {\n      minimize: false,\n    },\n    // Suppress known third-party library warnings that don't affect runtime\n    ignoreWarnings: [\n      // Express view engine dynamic require - expected behavior, harmless at runtime\n      /Critical dependency: the request of a dependency is an expression/,\n      // Handlebars require.extensions - deprecated Node.js API but works at runtime\n      /require\\.extensions is not supported by Rspack/,\n    ],\n    // Suppress verbose output\n    stats: 'errors-warnings',\n  });\n\n  return new Promise((resolve, reject) => {\n    compiler.run((err, stats) => {\n      if (err) {\n        return reject(err);\n      }\n      if (stats?.hasErrors()) {\n        const info = stats.toJson();\n        const errorMessages = info.errors?.map((e) => e.message).join('\\n') || 'Unknown error';\n        return reject(new Error(`Bundle failed:\\n${errorMessages}`));\n      }\n      if (stats?.hasWarnings()) {\n        const info = stats.toJson();\n        info.warnings?.forEach((w) => {\n          console.log(c('yellow', `  Warning: ${w.message}`));\n        });\n      }\n      compiler.close((closeErr) => {\n        if (closeErr) {\n          console.log(c('yellow', `  Warning closing compiler: ${closeErr.message}`));\n        }\n        resolve();\n      });\n    });\n  });\n}\n"]}
+{"version":3,"file":"bundler.js","sourceRoot":"","sources":["../../../../src/commands/build/bundler.ts"],"names":[],"mappings":";;AAWA,kDAoFC;AA/FD,uCAAsC;AACtC,8CAAsC;AAEtC;;;;;;;GAOG;AACI,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,MAAc,EACd,cAAsB;IAEtB,MAAM,QAAQ,GAAG,IAAA,aAAM,EAAC;QACtB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE;YACN,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YAC9B,KAAK,EAAE,KAAK;SACb;QACD,iDAAiD;QACjD,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QAChC,oFAAoF;QACpF,SAAS,EAAE;YACT,WAAW,EAAE,WAAW;YACxB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,SAAS;YAClB,wDAAwD;YACxD,KAAK,EAAE,OAAO;YACd,WAAW,EAAE,WAAW;YACxB,kBAAkB,EAAE,kBAAkB;YACtC,mBAAmB,EAAE,mBAAmB;SACzC;QACD,OAAO,EAAE;YACP,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;YAC5C,gGAAgG;YAChG,cAAc,EAAE,KAAK;SACtB;QACD,MAAM,EAAE;YACN,KAAK,EAAE,EAAE;YACT,MAAM,EAAE;gBACN,UAAU,EAAE;oBACV,sEAAsE;oBACtE,iDAAiD;oBACjD,iBAAiB,EAAE,OAAO;oBAC1B,mBAAmB,EAAE,KAAK;oBAC1B,sBAAsB,EAAE,KAAK;iBAC9B;aACF;SACF;QACD,uDAAuD;QACvD,YAAY,EAAE;YACZ,QAAQ,EAAE,KAAK;SAChB;QACD,wEAAwE;QACxE,cAAc,EAAE;YACd,+EAA+E;YAC/E,mEAAmE;YACnE,8EAA8E;YAC9E,gDAAgD;SACjD;QACD,0BAA0B;QAC1B,KAAK,EAAE,iBAAiB;KACzB,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YAC1B,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;YACD,IAAI,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC;gBACvF,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,aAAa,EAAE,CAAC,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC5B,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC3B,OAAO,CAAC,GAAG,CAAC,IAAA,UAAC,EAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACtD,CAAC,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAC1B,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,CAAC,GAAG,CAAC,IAAA,UAAC,EAAC,QAAQ,EAAE,+BAA+B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC9E,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { rspack } from '@rspack/core';\nimport { c } from '../../core/colors';\n\n/**\n * Bundle the serverless entry point into a single CJS file using rspack.\n * This resolves ESM/CJS compatibility issues and dynamic import problems.\n *\n * @param entryPath - Absolute path to the entry file (e.g., dist/index.js)\n * @param outDir - Output directory for the bundled file\n * @param outputFilename - Name of the output bundle (e.g., 'handler.cjs')\n */\nexport async function bundleForServerless(\n  entryPath: string,\n  outDir: string,\n  outputFilename: string,\n): Promise<void> {\n  const compiler = rspack({\n    mode: 'production',\n    target: 'node',\n    entry: entryPath,\n    output: {\n      path: outDir,\n      filename: outputFilename,\n      library: { type: 'commonjs2' },\n      clean: false,\n    },\n    // Use node externals preset for built-in modules\n    externalsPresets: { node: true },\n    // Exclude problematic optional dependencies (native binaries that can't be bundled)\n    externals: {\n      '@swc/core': '@swc/core',\n      fsevents: 'fsevents',\n      esbuild: 'esbuild',\n      // React is optional - only needed for MDX/JSX rendering\n      react: 'react',\n      'react-dom': 'react-dom',\n      'react-dom/server': 'react-dom/server',\n      'react/jsx-runtime': 'react/jsx-runtime',\n    },\n    resolve: {\n      extensions: ['.js', '.mjs', '.cjs', '.json'],\n      // Allow imports without file extensions (TypeScript compiles without .js but ESM requires them)\n      fullySpecified: false,\n    },\n    module: {\n      rules: [],\n      parser: {\n        javascript: {\n          // Handle dynamic requires like require('@vercel/kv') inside functions\n          // by wrapping them instead of externalizing them\n          dynamicImportMode: 'eager',\n          exprContextCritical: false,\n          unknownContextCritical: false,\n        },\n      },\n    },\n    // Don't minimize to preserve readability for debugging\n    optimization: {\n      minimize: false,\n    },\n    // Suppress known third-party library warnings that don't affect runtime\n    ignoreWarnings: [\n      // Express view engine dynamic require - expected behavior, harmless at runtime\n      /Critical dependency: the request of a dependency is an expression/,\n      // Handlebars require.extensions - deprecated Node.js API but works at runtime\n      /require\\.extensions is not supported by Rspack/,\n    ],\n    // Suppress verbose output\n    stats: 'errors-warnings',\n  });\n\n  return new Promise((resolve, reject) => {\n    compiler.run((err, stats) => {\n      if (err) {\n        return reject(err);\n      }\n      if (stats?.hasErrors()) {\n        const info = stats.toJson();\n        const errorMessages = info.errors?.map((e) => e.message).join('\\n') || 'Unknown error';\n        return reject(new Error(`Bundle failed:\\n${errorMessages}`));\n      }\n      if (stats?.hasWarnings()) {\n        const info = stats.toJson();\n        info.warnings?.forEach((w) => {\n          console.log(c('yellow', `  Warning: ${w.message}`));\n        });\n      }\n      compiler.close((closeErr) => {\n        if (closeErr) {\n          console.log(c('yellow', `  Warning closing compiler: ${closeErr.message}`));\n        }\n        resolve();\n      });\n    });\n  });\n}\n"]}

package/src/commands/build/exec/cli-runtime/cli-bundler.d.ts

@@ -0,0 +1,17 @@
+/**
+ * esbuild configuration for the CLI bundle.
+ * Bundles the generated CLI entry point with commander.js inlined.
+ */
+import { FrontmcpExecConfig } from '../config';
+export interface CliBundleResult {
+    bundlePath: string;
+    bundleSize: number;
+}
+/**
+ * Bundle the generated CLI entry with esbuild.
+ * Commander.js and runtime modules are inlined; the server bundle is external
+ * unless selfContained mode is enabled (for SEA builds).
+ */
+export declare function bundleCliWithEsbuild(cliEntryPath: string, outDir: string, config: FrontmcpExecConfig, options?: {
+    selfContained?: boolean;
+}): Promise<CliBundleResult>;

package/src/commands/build/exec/cli-runtime/cli-bundler.js

@@ -0,0 +1,75 @@
+"use strict";
+/**
+ * esbuild configuration for the CLI bundle.
+ * Bundles the generated CLI entry point with commander.js inlined.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bundleCliWithEsbuild = bundleCliWithEsbuild;
+const tslib_1 = require("tslib");
+const path = tslib_1.__importStar(require("path"));
+/**
+ * Bundle the generated CLI entry with esbuild.
+ * Commander.js and runtime modules are inlined; the server bundle is external
+ * unless selfContained mode is enabled (for SEA builds).
+ */
+async function bundleCliWithEsbuild(cliEntryPath, outDir, config, options) {
+    let esbuild;
+    try {
+        esbuild = require('esbuild');
+    }
+    catch {
+        throw new Error('esbuild is required for CLI builds. Install it: npm install -D esbuild');
+    }
+    const cliBundleName = `${config.name}-cli.bundle.js`;
+    const bundlePath = path.join(outDir, cliBundleName);
+    const selfContained = options?.selfContained ?? false;
+    // The server bundle is loaded via require() at runtime — keep external
+    // unless selfContained mode where everything is inlined for SEA
+    const serverBundleName = `${config.name}.bundle.js`;
+    const external = selfContained
+        ? [
+            // Only true native addons and optional peer deps stay external in self-contained mode
+            'better-sqlite3',
+            'fsevents',
+            '@vercel/kv',
+            '@frontmcp/storage-sqlite',
+            '@enclave-vm/core',
+            ...(config.dependencies?.nativeAddons || []),
+        ]
+        : [
+            `./${serverBundleName}`,
+            '@frontmcp/sdk',
+            'better-sqlite3',
+            'fsevents',
+            '@vercel/kv',
+            '@frontmcp/storage-sqlite',
+            '@enclave-vm/core',
+            ...(config.dependencies?.nativeAddons || []),
+            ...(config.esbuild?.external || []),
+        ];
+    await esbuild.build({
+        entryPoints: [cliEntryPath],
+        bundle: true,
+        platform: 'node',
+        format: 'cjs',
+        target: config.esbuild?.target || 'node22',
+        outfile: bundlePath,
+        external,
+        keepNames: true,
+        treeShaking: true,
+        minify: config.esbuild?.minify ?? false,
+        banner: {
+            js: '#!/usr/bin/env node',
+        },
+        define: config.esbuild?.define,
+        sourcemap: false,
+        logLevel: 'warning',
+    });
+    const fs = require('fs');
+    const stat = fs.statSync(bundlePath);
+    return {
+        bundlePath,
+        bundleSize: stat.size,
+    };
+}
+//# sourceMappingURL=cli-bundler.js.map

package/src/commands/build/exec/cli-runtime/cli-bundler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-bundler.js","sourceRoot":"","sources":["../../../../../../src/commands/build/exec/cli-runtime/cli-bundler.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAeH,oDAuEC;;AApFD,mDAA6B;AAQ7B;;;;GAIG;AACI,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,MAAc,EACd,MAA0B,EAC1B,OAAqC;IAErC,IAAI,OAAiC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,MAAM,CAAC,IAAI,gBAAgB,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,KAAK,CAAC;IAEtD,uEAAuE;IACvE,gEAAgE;IAChE,MAAM,gBAAgB,GAAG,GAAG,MAAM,CAAC,IAAI,YAAY,CAAC;IAEpD,MAAM,QAAQ,GAAG,aAAa;QAC5B,CAAC,CAAC;YACE,sFAAsF;YACtF,gBAAgB;YAChB,UAAU;YACV,YAAY;YACZ,0BAA0B;YAC1B,kBAAkB;YAClB,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,IAAI,EAAE,CAAC;SAC7C;QACH,CAAC,CAAC;YACE,KAAK,gBAAgB,EAAE;YACvB,eAAe;YACf,gBAAgB;YAChB,UAAU;YACV,YAAY;YACZ,0BAA0B;YAC1B,kBAAkB;YAClB,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,IAAI,EAAE,CAAC;YAC5C,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC;SACpC,CAAC;IAEN,MAAM,OAAO,CAAC,KAAK,CAAC;QAClB,WAAW,EAAE,CAAC,YAAY,CAAC;QAC3B,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,QAAQ;QAC1C,OAAO,EAAE,UAAU;QACnB,QAAQ;QACR,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK;QACvC,MAAM,EAAE;YACN,EAAE,EAAE,qBAAqB;SAC1B;QACD,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM;QAC9B,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,SAAS;KACpB,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAErC,OAAO;QACL,UAAU;QACV,UAAU,EAAE,IAAI,CAAC,IAAI;KACtB,CAAC;AACJ,CAAC","sourcesContent":["/**\n * esbuild configuration for the CLI bundle.\n * Bundles the generated CLI entry point with commander.js inlined.\n */\n\nimport * as path from 'path';\nimport { FrontmcpExecConfig } from '../config';\n\nexport interface CliBundleResult {\n  bundlePath: string;\n  bundleSize: number;\n}\n\n/**\n * Bundle the generated CLI entry with esbuild.\n * Commander.js and runtime modules are inlined; the server bundle is external\n * unless selfContained mode is enabled (for SEA builds).\n */\nexport async function bundleCliWithEsbuild(\n  cliEntryPath: string,\n  outDir: string,\n  config: FrontmcpExecConfig,\n  options?: { selfContained?: boolean },\n): Promise<CliBundleResult> {\n  let esbuild: typeof import('esbuild');\n  try {\n    esbuild = require('esbuild');\n  } catch {\n    throw new Error(\n      'esbuild is required for CLI builds. Install it: npm install -D esbuild',\n    );\n  }\n\n  const cliBundleName = `${config.name}-cli.bundle.js`;\n  const bundlePath = path.join(outDir, cliBundleName);\n  const selfContained = options?.selfContained ?? false;\n\n  // The server bundle is loaded via require() at runtime — keep external\n  // unless selfContained mode where everything is inlined for SEA\n  const serverBundleName = `${config.name}.bundle.js`;\n\n  const external = selfContained\n    ? [\n        // Only true native addons and optional peer deps stay external in self-contained mode\n        'better-sqlite3',\n        'fsevents',\n        '@vercel/kv',\n        '@frontmcp/storage-sqlite',\n        '@enclave-vm/core',\n        ...(config.dependencies?.nativeAddons || []),\n      ]\n    : [\n        `./${serverBundleName}`,\n        '@frontmcp/sdk',\n        'better-sqlite3',\n        'fsevents',\n        '@vercel/kv',\n        '@frontmcp/storage-sqlite',\n        '@enclave-vm/core',\n        ...(config.dependencies?.nativeAddons || []),\n        ...(config.esbuild?.external || []),\n      ];\n\n  await esbuild.build({\n    entryPoints: [cliEntryPath],\n    bundle: true,\n    platform: 'node',\n    format: 'cjs',\n    target: config.esbuild?.target || 'node22',\n    outfile: bundlePath,\n    external,\n    keepNames: true,\n    treeShaking: true,\n    minify: config.esbuild?.minify ?? false,\n    banner: {\n      js: '#!/usr/bin/env node',\n    },\n    define: config.esbuild?.define,\n    sourcemap: false,\n    logLevel: 'warning',\n  });\n\n  const fs = require('fs');\n  const stat = fs.statSync(bundlePath);\n\n  return {\n    bundlePath,\n    bundleSize: stat.size,\n  };\n}\n"]}

package/src/commands/build/exec/cli-runtime/credential-store.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Credential store for CLI executables.
+ * Generates runtime module code for secure credential storage with
+ * platform-aware backends: macOS Keychain, Linux secret-tool, encrypted file fallback.
+ */
+export interface CredentialBlob {
+    token: string;
+    refreshToken?: string;
+    expiresAt?: string;
+    user?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface CredentialStore {
+    get(session: string): Promise<CredentialBlob | null>;
+    set(session: string, blob: CredentialBlob): Promise<void>;
+    delete(session: string): Promise<boolean>;
+    list(): Promise<string[]>;
+}
+/**
+ * Generate the credential-store runtime module source for embedding in CLI bundle.
+ */
+export declare function generateCredentialStoreSource(appName: string): string;

package/src/commands/build/exec/cli-runtime/credential-store.js

@@ -0,0 +1,140 @@
+"use strict";
+/**
+ * Credential store for CLI executables.
+ * Generates runtime module code for secure credential storage with
+ * platform-aware backends: macOS Keychain, Linux secret-tool, encrypted file fallback.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateCredentialStoreSource = generateCredentialStoreSource;
+/**
+ * Generate the credential-store runtime module source for embedding in CLI bundle.
+ */
+function generateCredentialStoreSource(appName) {
+    return `
+'use strict';
+
+var crypto = require('crypto');
+var os = require('os');
+var path = require('path');
+var fs = require('fs');
+var childProcess = require('child_process');
+
+var APP_NAME = ${JSON.stringify(appName)};
+var CRED_DIR = path.join(os.homedir(), '.frontmcp', 'apps', APP_NAME, 'credentials');
+
+function ensureCredDir() {
+  fs.mkdirSync(CRED_DIR, { recursive: true });
+}
+
+function runCmd(cmd, args, input) {
+  return new Promise(function(resolve, reject) {
+    var proc = childProcess.spawn(cmd, args, { stdio: ['pipe', 'pipe', 'pipe'] });
+    var stdout = '';
+    var stderr = '';
+    proc.stdout.on('data', function(d) { stdout += d; });
+    proc.stderr.on('data', function(d) { stderr += d; });
+    if (input) { proc.stdin.write(input); proc.stdin.end(); }
+    proc.on('close', function(code) {
+      if (code === 0) resolve(stdout.trim());
+      else reject(new Error(stderr.trim() || 'Command failed: ' + cmd + ' ' + args.join(' ')));
+    });
+  });
+}
+
+function deriveKey() {
+  var hostname = os.hostname();
+  var salt = APP_NAME + ':' + hostname;
+  return crypto.createHash('sha256').update(salt).digest();
+}
+
+function encryptBlob(data) {
+  var key = deriveKey();
+  var iv = crypto.randomBytes(12);
+  var cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
+  var encrypted = Buffer.concat([cipher.update(JSON.stringify(data), 'utf8'), cipher.final()]);
+  var tag = cipher.getAuthTag();
+  return Buffer.concat([iv, tag, encrypted]).toString('base64');
+}
+
+function decryptBlob(encoded) {
+  var key = deriveKey();
+  var buf = Buffer.from(encoded, 'base64');
+  var iv = buf.subarray(0, 12);
+  var tag = buf.subarray(12, 28);
+  var encrypted = buf.subarray(28);
+  var decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
+  decipher.setAuthTag(tag);
+  var decrypted = Buffer.concat([decipher.update(encrypted), decipher.final()]);
+  return JSON.parse(decrypted.toString('utf8'));
+}
+
+// macOS Keychain backend
+var KeychainStore = {
+  get: async function(session) {
+    try {
+      var encoded = await runCmd('security', ['find-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session, '-w']);
+      return decryptBlob(encoded);
+    } catch (_) { return null; }
+  },
+  set: async function(session, blob) {
+    var encoded = encryptBlob(blob);
+    try { await runCmd('security', ['delete-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session]); } catch (_) { /* ok */ }
+    await runCmd('security', ['add-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session, '-w', encoded, '-U']);
+  },
+  delete: async function(session) {
+    try {
+      await runCmd('security', ['delete-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session]);
+      return true;
+    } catch (_) { return false; }
+  },
+  list: async function() {
+    try {
+      var out = await runCmd('security', ['dump-keychain']);
+      var matches = [];
+      var re = new RegExp('"svce"<blob>="frontmcp\\\\.' + APP_NAME.replace(/[.*+?^\${}()|[\\]\\\\]/g, '\\\\$&') + '"[\\\\s\\\\S]*?"acct"<blob>="([^"]*)"', 'g');
+      var m; while ((m = re.exec(out)) !== null) { matches.push(m[1]); }
+      return [...new Set(matches)];
+    } catch (_) { return []; }
+  }
+};
+
+// Encrypted file backend (fallback)
+var FileStore = {
+  get: async function(session) {
+    var filePath = path.join(CRED_DIR, session + '.enc');
+    try {
+      var encoded = fs.readFileSync(filePath, 'utf8');
+      return decryptBlob(encoded);
+    } catch (_) { return null; }
+  },
+  set: async function(session, blob) {
+    ensureCredDir();
+    var encoded = encryptBlob(blob);
+    var filePath = path.join(CRED_DIR, session + '.enc');
+    fs.writeFileSync(filePath, encoded, { mode: 0o600 });
+  },
+  delete: async function(session) {
+    var filePath = path.join(CRED_DIR, session + '.enc');
+    try { fs.unlinkSync(filePath); return true; } catch (_) { return false; }
+  },
+  list: async function() {
+    ensureCredDir();
+    try {
+      return fs.readdirSync(CRED_DIR)
+        .filter(function(f) { return f.endsWith('.enc'); })
+        .map(function(f) { return f.replace(/\\.enc$/, ''); });
+    } catch (_) { return []; }
+  }
+};
+
+function createCredentialStore() {
+  if (process.platform === 'darwin') {
+    return KeychainStore;
+  }
+  return FileStore;
+}
+
+module.exports = { createCredentialStore, encryptBlob, decryptBlob };
+`.trim();
+}
+//# sourceMappingURL=credential-store.js.map

package/src/commands/build/exec/cli-runtime/credential-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store.js","sourceRoot":"","sources":["../../../../../../src/commands/build/exec/cli-runtime/credential-store.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAoBH,sEA+HC;AAlID;;GAEG;AACH,SAAgB,6BAA6B,CAAC,OAAe;IAC3D,OAAO;;;;;;;;;iBASQ,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoHvC,CAAC,IAAI,EAAE,CAAC;AACT,CAAC","sourcesContent":["/**\n * Credential store for CLI executables.\n * Generates runtime module code for secure credential storage with\n * platform-aware backends: macOS Keychain, Linux secret-tool, encrypted file fallback.\n */\n\nexport interface CredentialBlob {\n  token: string;\n  refreshToken?: string;\n  expiresAt?: string;\n  user?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface CredentialStore {\n  get(session: string): Promise<CredentialBlob | null>;\n  set(session: string, blob: CredentialBlob): Promise<void>;\n  delete(session: string): Promise<boolean>;\n  list(): Promise<string[]>;\n}\n\n/**\n * Generate the credential-store runtime module source for embedding in CLI bundle.\n */\nexport function generateCredentialStoreSource(appName: string): string {\n  return `\n'use strict';\n\nvar crypto = require('crypto');\nvar os = require('os');\nvar path = require('path');\nvar fs = require('fs');\nvar childProcess = require('child_process');\n\nvar APP_NAME = ${JSON.stringify(appName)};\nvar CRED_DIR = path.join(os.homedir(), '.frontmcp', 'apps', APP_NAME, 'credentials');\n\nfunction ensureCredDir() {\n  fs.mkdirSync(CRED_DIR, { recursive: true });\n}\n\nfunction runCmd(cmd, args, input) {\n  return new Promise(function(resolve, reject) {\n    var proc = childProcess.spawn(cmd, args, { stdio: ['pipe', 'pipe', 'pipe'] });\n    var stdout = '';\n    var stderr = '';\n    proc.stdout.on('data', function(d) { stdout += d; });\n    proc.stderr.on('data', function(d) { stderr += d; });\n    if (input) { proc.stdin.write(input); proc.stdin.end(); }\n    proc.on('close', function(code) {\n      if (code === 0) resolve(stdout.trim());\n      else reject(new Error(stderr.trim() || 'Command failed: ' + cmd + ' ' + args.join(' ')));\n    });\n  });\n}\n\nfunction deriveKey() {\n  var hostname = os.hostname();\n  var salt = APP_NAME + ':' + hostname;\n  return crypto.createHash('sha256').update(salt).digest();\n}\n\nfunction encryptBlob(data) {\n  var key = deriveKey();\n  var iv = crypto.randomBytes(12);\n  var cipher = crypto.createCipheriv('aes-256-gcm', key, iv);\n  var encrypted = Buffer.concat([cipher.update(JSON.stringify(data), 'utf8'), cipher.final()]);\n  var tag = cipher.getAuthTag();\n  return Buffer.concat([iv, tag, encrypted]).toString('base64');\n}\n\nfunction decryptBlob(encoded) {\n  var key = deriveKey();\n  var buf = Buffer.from(encoded, 'base64');\n  var iv = buf.subarray(0, 12);\n  var tag = buf.subarray(12, 28);\n  var encrypted = buf.subarray(28);\n  var decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);\n  decipher.setAuthTag(tag);\n  var decrypted = Buffer.concat([decipher.update(encrypted), decipher.final()]);\n  return JSON.parse(decrypted.toString('utf8'));\n}\n\n// macOS Keychain backend\nvar KeychainStore = {\n  get: async function(session) {\n    try {\n      var encoded = await runCmd('security', ['find-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session, '-w']);\n      return decryptBlob(encoded);\n    } catch (_) { return null; }\n  },\n  set: async function(session, blob) {\n    var encoded = encryptBlob(blob);\n    try { await runCmd('security', ['delete-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session]); } catch (_) { /* ok */ }\n    await runCmd('security', ['add-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session, '-w', encoded, '-U']);\n  },\n  delete: async function(session) {\n    try {\n      await runCmd('security', ['delete-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session]);\n      return true;\n    } catch (_) { return false; }\n  },\n  list: async function() {\n    try {\n      var out = await runCmd('security', ['dump-keychain']);\n      var matches = [];\n      var re = new RegExp('\"svce\"<blob>=\"frontmcp\\\\\\\\.' + APP_NAME.replace(/[.*+?^\\${}()|[\\\\]\\\\\\\\]/g, '\\\\\\\\$&') + '\"[\\\\\\\\s\\\\\\\\S]*?\"acct\"<blob>=\"([^\"]*)\"', 'g');\n      var m; while ((m = re.exec(out)) !== null) { matches.push(m[1]); }\n      return [...new Set(matches)];\n    } catch (_) { return []; }\n  }\n};\n\n// Encrypted file backend (fallback)\nvar FileStore = {\n  get: async function(session) {\n    var filePath = path.join(CRED_DIR, session + '.enc');\n    try {\n      var encoded = fs.readFileSync(filePath, 'utf8');\n      return decryptBlob(encoded);\n    } catch (_) { return null; }\n  },\n  set: async function(session, blob) {\n    ensureCredDir();\n    var encoded = encryptBlob(blob);\n    var filePath = path.join(CRED_DIR, session + '.enc');\n    fs.writeFileSync(filePath, encoded, { mode: 0o600 });\n  },\n  delete: async function(session) {\n    var filePath = path.join(CRED_DIR, session + '.enc');\n    try { fs.unlinkSync(filePath); return true; } catch (_) { return false; }\n  },\n  list: async function() {\n    ensureCredDir();\n    try {\n      return fs.readdirSync(CRED_DIR)\n        .filter(function(f) { return f.endsWith('.enc'); })\n        .map(function(f) { return f.replace(/\\\\.enc$/, ''); });\n    } catch (_) { return []; }\n  }\n};\n\nfunction createCredentialStore() {\n  if (process.platform === 'darwin') {\n    return KeychainStore;\n  }\n  return FileStore;\n}\n\nmodule.exports = { createCredentialStore, encryptBlob, decryptBlob };\n`.trim();\n}\n"]}

package/src/commands/build/exec/cli-runtime/daemon-client.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Lightweight daemon client for CLI exec.
+ *
+ * Sends MCP JSON-RPC requests over a Unix socket using Node.js built-in http module.
+ * This avoids the full FrontMCP SDK initialization (~420ms) by talking to an
+ * already-running daemon process.
+ *
+ * NOTE: This file is used as a CJS runtime module — it gets bundled into the CLI
+ * output by esbuild alongside the generated CLI entry. It must remain free of
+ * TypeScript-only constructs at runtime (the .ts extension is for build-time only).
+ */
+/**
+ * Generate the daemon-client JavaScript source code (CJS module).
+ * This is embedded into the CLI bundle at build time.
+ */
+export declare function generateDaemonClientSource(): string;

package/src/commands/build/exec/cli-runtime/daemon-client.js

@@ -0,0 +1,169 @@
+"use strict";
+/**
+ * Lightweight daemon client for CLI exec.
+ *
+ * Sends MCP JSON-RPC requests over a Unix socket using Node.js built-in http module.
+ * This avoids the full FrontMCP SDK initialization (~420ms) by talking to an
+ * already-running daemon process.
+ *
+ * NOTE: This file is used as a CJS runtime module — it gets bundled into the CLI
+ * output by esbuild alongside the generated CLI entry. It must remain free of
+ * TypeScript-only constructs at runtime (the .ts extension is for build-time only).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateDaemonClientSource = generateDaemonClientSource;
+/* eslint-disable @typescript-eslint/no-require-imports */
+/**
+ * Generate the daemon-client JavaScript source code (CJS module).
+ * This is embedded into the CLI bundle at build time.
+ */
+function generateDaemonClientSource() {
+    return `'use strict';
+
+var http = require('http');
+
+/**
+ * Send a JSON-RPC request over a Unix socket.
+ * @param {string} socketPath - Path to the Unix socket file.
+ * @param {string} method - JSON-RPC method name.
+ * @param {object} [params] - Method parameters.
+ * @returns {Promise<object>} Parsed JSON-RPC result.
+ */
+function rpcCall(socketPath, method, params) {
+  return new Promise(function(resolve, reject) {
+    var body = JSON.stringify({
+      jsonrpc: '2.0',
+      id: Date.now(),
+      method: method,
+      params: params || {}
+    });
+
+    var req = http.request({
+      socketPath: socketPath,
+      path: '/mcp',
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        'Content-Length': Buffer.byteLength(body)
+      },
+      timeout: 10000
+    }, function(res) {
+      var chunks = [];
+      res.on('data', function(chunk) { chunks.push(chunk); });
+      res.on('end', function() {
+        try {
+          var json = JSON.parse(Buffer.concat(chunks).toString());
+          if (json.error) {
+            var err = new Error(json.error.message || 'RPC error');
+            err.code = json.error.code;
+            err.data = json.error.data;
+            reject(err);
+          } else {
+            resolve(json.result);
+          }
+        } catch (e) {
+          reject(new Error('Invalid JSON response from daemon'));
+        }
+      });
+    });
+
+    req.on('error', function(err) {
+      reject(err);
+    });
+
+    req.on('timeout', function() {
+      req.destroy();
+      reject(new Error('Daemon request timed out'));
+    });
+
+    req.write(body);
+    req.end();
+  });
+}
+
+/**
+ * Create a daemon client that implements the same interface as DirectClient.
+ * @param {string} socketPath - Path to the Unix socket file.
+ * @returns {object} Client object with MCP methods.
+ */
+function createDaemonClient(socketPath) {
+  function call(method, params) {
+    return rpcCall(socketPath, method, params);
+  }
+
+  return {
+    ping: function() {
+      return call('ping');
+    },
+    callTool: function(name, args) {
+      return call('tools/call', { name: name, arguments: args || {} });
+    },
+    listTools: function() {
+      return call('tools/list');
+    },
+    listResources: function() {
+      return call('resources/list');
+    },
+    readResource: function(uri) {
+      return call('resources/read', { uri: uri });
+    },
+    listResourceTemplates: function() {
+      return call('resources/templates/list');
+    },
+    listPrompts: function() {
+      return call('prompts/list');
+    },
+    getPrompt: function(name, args) {
+      return call('prompts/get', { name: name, arguments: args || {} });
+    },
+    searchSkills: function(query) {
+      return call('skills/search', { query: query || '' });
+    },
+    loadSkills: function(ids) {
+      return call('skills/load', { ids: ids });
+    },
+    listSkills: function() {
+      return call('skills/list');
+    },
+    listJobs: function() {
+      return call('jobs/list');
+    },
+    executeJob: function(name, input, opts) {
+      return call('jobs/execute', { name: name, input: input, options: opts });
+    },
+    getJobStatus: function(runId) {
+      return call('jobs/status', { runId: runId });
+    },
+    listWorkflows: function() {
+      return call('workflows/list');
+    },
+    executeWorkflow: function(name, input, opts) {
+      return call('workflows/execute', { name: name, input: input, options: opts });
+    },
+    getWorkflowStatus: function(runId) {
+      return call('workflows/status', { runId: runId });
+    },
+    subscribeResource: function(uri) {
+      return call('resources/subscribe', { uri: uri });
+    },
+    unsubscribeResource: function(uri) {
+      return call('resources/unsubscribe', { uri: uri });
+    },
+    onResourceUpdated: function() {
+      console.warn('Resource subscriptions are not supported in daemon mode (HTTP-based, no push).');
+      return function() {};
+    },
+    onNotification: function() {
+      console.warn('Notifications are not supported in daemon mode (HTTP-based, no push).');
+      return function() {};
+    },
+    close: function() {
+      return Promise.resolve();
+    }
+  };
+}
+
+exports.createDaemonClient = createDaemonClient;
+`;
+}
+//# sourceMappingURL=daemon-client.js.map

package/src/commands/build/exec/cli-runtime/daemon-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-client.js","sourceRoot":"","sources":["../../../../../../src/commands/build/exec/cli-runtime/daemon-client.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAQH,gEAoJC;AA1JD,0DAA0D;AAE1D;;;GAGG;AACH,SAAgB,0BAA0B;IACxC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkJR,CAAC;AACF,CAAC","sourcesContent":["/**\n * Lightweight daemon client for CLI exec.\n *\n * Sends MCP JSON-RPC requests over a Unix socket using Node.js built-in http module.\n * This avoids the full FrontMCP SDK initialization (~420ms) by talking to an\n * already-running daemon process.\n *\n * NOTE: This file is used as a CJS runtime module — it gets bundled into the CLI\n * output by esbuild alongside the generated CLI entry. It must remain free of\n * TypeScript-only constructs at runtime (the .ts extension is for build-time only).\n */\n\n/* eslint-disable @typescript-eslint/no-require-imports */\n\n/**\n * Generate the daemon-client JavaScript source code (CJS module).\n * This is embedded into the CLI bundle at build time.\n */\nexport function generateDaemonClientSource(): string {\n  return `'use strict';\n\nvar http = require('http');\n\n/**\n * Send a JSON-RPC request over a Unix socket.\n * @param {string} socketPath - Path to the Unix socket file.\n * @param {string} method - JSON-RPC method name.\n * @param {object} [params] - Method parameters.\n * @returns {Promise<object>} Parsed JSON-RPC result.\n */\nfunction rpcCall(socketPath, method, params) {\n  return new Promise(function(resolve, reject) {\n    var body = JSON.stringify({\n      jsonrpc: '2.0',\n      id: Date.now(),\n      method: method,\n      params: params || {}\n    });\n\n    var req = http.request({\n      socketPath: socketPath,\n      path: '/mcp',\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        'Content-Length': Buffer.byteLength(body)\n      },\n      timeout: 10000\n    }, function(res) {\n      var chunks = [];\n      res.on('data', function(chunk) { chunks.push(chunk); });\n      res.on('end', function() {\n        try {\n          var json = JSON.parse(Buffer.concat(chunks).toString());\n          if (json.error) {\n            var err = new Error(json.error.message || 'RPC error');\n            err.code = json.error.code;\n            err.data = json.error.data;\n            reject(err);\n          } else {\n            resolve(json.result);\n          }\n        } catch (e) {\n          reject(new Error('Invalid JSON response from daemon'));\n        }\n      });\n    });\n\n    req.on('error', function(err) {\n      reject(err);\n    });\n\n    req.on('timeout', function() {\n      req.destroy();\n      reject(new Error('Daemon request timed out'));\n    });\n\n    req.write(body);\n    req.end();\n  });\n}\n\n/**\n * Create a daemon client that implements the same interface as DirectClient.\n * @param {string} socketPath - Path to the Unix socket file.\n * @returns {object} Client object with MCP methods.\n */\nfunction createDaemonClient(socketPath) {\n  function call(method, params) {\n    return rpcCall(socketPath, method, params);\n  }\n\n  return {\n    ping: function() {\n      return call('ping');\n    },\n    callTool: function(name, args) {\n      return call('tools/call', { name: name, arguments: args || {} });\n    },\n    listTools: function() {\n      return call('tools/list');\n    },\n    listResources: function() {\n      return call('resources/list');\n    },\n    readResource: function(uri) {\n      return call('resources/read', { uri: uri });\n    },\n    listResourceTemplates: function() {\n      return call('resources/templates/list');\n    },\n    listPrompts: function() {\n      return call('prompts/list');\n    },\n    getPrompt: function(name, args) {\n      return call('prompts/get', { name: name, arguments: args || {} });\n    },\n    searchSkills: function(query) {\n      return call('skills/search', { query: query || '' });\n    },\n    loadSkills: function(ids) {\n      return call('skills/load', { ids: ids });\n    },\n    listSkills: function() {\n      return call('skills/list');\n    },\n    listJobs: function() {\n      return call('jobs/list');\n    },\n    executeJob: function(name, input, opts) {\n      return call('jobs/execute', { name: name, input: input, options: opts });\n    },\n    getJobStatus: function(runId) {\n      return call('jobs/status', { runId: runId });\n    },\n    listWorkflows: function() {\n      return call('workflows/list');\n    },\n    executeWorkflow: function(name, input, opts) {\n      return call('workflows/execute', { name: name, input: input, options: opts });\n    },\n    getWorkflowStatus: function(runId) {\n      return call('workflows/status', { runId: runId });\n    },\n    subscribeResource: function(uri) {\n      return call('resources/subscribe', { uri: uri });\n    },\n    unsubscribeResource: function(uri) {\n      return call('resources/unsubscribe', { uri: uri });\n    },\n    onResourceUpdated: function() {\n      console.warn('Resource subscriptions are not supported in daemon mode (HTTP-based, no push).');\n      return function() {};\n    },\n    onNotification: function() {\n      console.warn('Notifications are not supported in daemon mode (HTTP-based, no push).');\n      return function() {};\n    },\n    close: function() {\n      return Promise.resolve();\n    }\n  };\n}\n\nexports.createDaemonClient = createDaemonClient;\n`;\n}\n"]}

package/src/commands/build/exec/cli-runtime/generate-cli-entry.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Generates the CLI entry point TypeScript/JavaScript source code.
+ * This creates a commander.js-based CLI where each MCP tool is a subcommand.
+ */
+import { CliConfig, OAuthConfig } from '../config';
+import { ExtractedSchema } from './schema-extractor';
+export declare const RESERVED_COMMANDS: Set<string>;
+export interface CliEntryOptions {
+    appName: string;
+    appVersion: string;
+    description: string;
+    serverBundleFilename: string;
+    outputDefault: 'text' | 'json';
+    authRequired: boolean;
+    excludeTools: string[];
+    nativeDeps: NonNullable<CliConfig['nativeDeps']>;
+    schema: ExtractedSchema;
+    oauthConfig?: OAuthConfig;
+    /** When true, generate static requires that esbuild can resolve (for SEA builds). */
+    selfContained?: boolean;
+}
+/**
+ * Resolve tool command name, appending '-tool' suffix if it conflicts with a built-in command.
+ * Returns { cmdName, wasRenamed } so the caller can log a warning at build time.
+ */
+export declare function resolveToolCommandName(toolName: string): {
+    cmdName: string;
+    wasRenamed: boolean;
+};
+/**
+ * Generate the CLI entry source code (CJS module).
+ */
+export declare function generateCliEntry(options: CliEntryOptions): string;
+/**
+ * Extract {param} placeholders from a URI template string.
+ */
+export declare function extractTemplateParams(uriTemplate: string): string[];