frontmcp 0.12.2 → 1.0.0-beta.2

package/src/commands/build/exec/cli-runtime/session-manager.js

@@ -0,0 +1,122 @@
+"use strict";
+/**
+ * Session manager for CLI executables.
+ * Generates runtime module code for managing named sessions
+ * stored in ~/.frontmcp/apps/{appName}/sessions/.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateSessionManagerSource = generateSessionManagerSource;
+/**
+ * Generate the session-manager runtime module source for embedding in CLI bundle.
+ */
+function generateSessionManagerSource(appName) {
+    return `
+'use strict';
+
+var os = require('os');
+var path = require('path');
+var fs = require('fs');
+
+var APP_NAME = ${JSON.stringify(appName)};
+var SESSION_DIR = path.join(os.homedir(), '.frontmcp', 'apps', APP_NAME, 'sessions');
+var ACTIVE_FILE = path.join(SESSION_DIR, '.active');
+
+function ensureSessionDir() {
+  fs.mkdirSync(SESSION_DIR, { recursive: true });
+}
+
+function sessionPath(name) {
+  return path.join(SESSION_DIR, name + '.json');
+}
+
+function readSession(name) {
+  try {
+    var data = fs.readFileSync(sessionPath(name), 'utf8');
+    return JSON.parse(data);
+  } catch (_) { return null; }
+}
+
+function writeSession(session) {
+  ensureSessionDir();
+  fs.writeFileSync(sessionPath(session.name), JSON.stringify(session, null, 2), { mode: 0o600 });
+}
+
+function getActiveSessionName() {
+  try {
+    return fs.readFileSync(ACTIVE_FILE, 'utf8').trim() || 'default';
+  } catch (_) { return 'default'; }
+}
+
+function setActiveSession(name) {
+  ensureSessionDir();
+  fs.writeFileSync(ACTIVE_FILE, name, { mode: 0o600 });
+}
+
+function getOrCreateSession(name) {
+  name = name || getActiveSessionName();
+  var session = readSession(name);
+  if (!session) {
+    session = {
+      name: name,
+      createdAt: new Date().toISOString(),
+      lastUsedAt: new Date().toISOString(),
+      isActive: true
+    };
+    writeSession(session);
+    if (name === 'default' || !fs.existsSync(ACTIVE_FILE)) {
+      setActiveSession(name);
+    }
+  }
+  return session;
+}
+
+function touchSession(name) {
+  var session = readSession(name);
+  if (session) {
+    session.lastUsedAt = new Date().toISOString();
+    writeSession(session);
+  }
+}
+
+function listSessions() {
+  ensureSessionDir();
+  var active = getActiveSessionName();
+  try {
+    return fs.readdirSync(SESSION_DIR)
+      .filter(function(f) { return f.endsWith('.json'); })
+      .map(function(f) {
+        var name = f.replace(/\\.json$/, '');
+        var session = readSession(name);
+        return session ? Object.assign({}, session, { isActive: name === active }) : null;
+      })
+      .filter(Boolean);
+  } catch (_) { return []; }
+}
+
+function deleteSession(name) {
+  try {
+    fs.unlinkSync(sessionPath(name));
+    if (getActiveSessionName() === name) {
+      setActiveSession('default');
+    }
+    return true;
+  } catch (_) { return false; }
+}
+
+function switchSession(name) {
+  var session = getOrCreateSession(name);
+  setActiveSession(name);
+  return session;
+}
+
+module.exports = {
+  getOrCreateSession: getOrCreateSession,
+  touchSession: touchSession,
+  listSessions: listSessions,
+  deleteSession: deleteSession,
+  switchSession: switchSession,
+  getActiveSessionName: getActiveSessionName
+};
+`.trim();
+}
+//# sourceMappingURL=session-manager.js.map

package/src/commands/build/exec/cli-runtime/session-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.js","sourceRoot":"","sources":["../../../../../../src/commands/build/exec/cli-runtime/session-manager.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAaH,oEA6GC;AAhHD;;GAEG;AACH,SAAgB,4BAA4B,CAAC,OAAe;IAC1D,OAAO;;;;;;;iBAOQ,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoGvC,CAAC,IAAI,EAAE,CAAC;AACT,CAAC","sourcesContent":["/**\n * Session manager for CLI executables.\n * Generates runtime module code for managing named sessions\n * stored in ~/.frontmcp/apps/{appName}/sessions/.\n */\n\nexport interface SessionInfo {\n  name: string;\n  user?: string;\n  createdAt: string;\n  lastUsedAt: string;\n  isActive: boolean;\n}\n\n/**\n * Generate the session-manager runtime module source for embedding in CLI bundle.\n */\nexport function generateSessionManagerSource(appName: string): string {\n  return `\n'use strict';\n\nvar os = require('os');\nvar path = require('path');\nvar fs = require('fs');\n\nvar APP_NAME = ${JSON.stringify(appName)};\nvar SESSION_DIR = path.join(os.homedir(), '.frontmcp', 'apps', APP_NAME, 'sessions');\nvar ACTIVE_FILE = path.join(SESSION_DIR, '.active');\n\nfunction ensureSessionDir() {\n  fs.mkdirSync(SESSION_DIR, { recursive: true });\n}\n\nfunction sessionPath(name) {\n  return path.join(SESSION_DIR, name + '.json');\n}\n\nfunction readSession(name) {\n  try {\n    var data = fs.readFileSync(sessionPath(name), 'utf8');\n    return JSON.parse(data);\n  } catch (_) { return null; }\n}\n\nfunction writeSession(session) {\n  ensureSessionDir();\n  fs.writeFileSync(sessionPath(session.name), JSON.stringify(session, null, 2), { mode: 0o600 });\n}\n\nfunction getActiveSessionName() {\n  try {\n    return fs.readFileSync(ACTIVE_FILE, 'utf8').trim() || 'default';\n  } catch (_) { return 'default'; }\n}\n\nfunction setActiveSession(name) {\n  ensureSessionDir();\n  fs.writeFileSync(ACTIVE_FILE, name, { mode: 0o600 });\n}\n\nfunction getOrCreateSession(name) {\n  name = name || getActiveSessionName();\n  var session = readSession(name);\n  if (!session) {\n    session = {\n      name: name,\n      createdAt: new Date().toISOString(),\n      lastUsedAt: new Date().toISOString(),\n      isActive: true\n    };\n    writeSession(session);\n    if (name === 'default' || !fs.existsSync(ACTIVE_FILE)) {\n      setActiveSession(name);\n    }\n  }\n  return session;\n}\n\nfunction touchSession(name) {\n  var session = readSession(name);\n  if (session) {\n    session.lastUsedAt = new Date().toISOString();\n    writeSession(session);\n  }\n}\n\nfunction listSessions() {\n  ensureSessionDir();\n  var active = getActiveSessionName();\n  try {\n    return fs.readdirSync(SESSION_DIR)\n      .filter(function(f) { return f.endsWith('.json'); })\n      .map(function(f) {\n        var name = f.replace(/\\\\.json$/, '');\n        var session = readSession(name);\n        return session ? Object.assign({}, session, { isActive: name === active }) : null;\n      })\n      .filter(Boolean);\n  } catch (_) { return []; }\n}\n\nfunction deleteSession(name) {\n  try {\n    fs.unlinkSync(sessionPath(name));\n    if (getActiveSessionName() === name) {\n      setActiveSession('default');\n    }\n    return true;\n  } catch (_) { return false; }\n}\n\nfunction switchSession(name) {\n  var session = getOrCreateSession(name);\n  setActiveSession(name);\n  return session;\n}\n\nmodule.exports = {\n  getOrCreateSession: getOrCreateSession,\n  touchSession: touchSession,\n  listSessions: listSessions,\n  deleteSession: deleteSession,\n  switchSession: switchSession,\n  getActiveSessionName: getActiveSessionName\n};\n`.trim();\n}\n"]}

package/src/commands/build/exec/config.d.ts

@@ -2,6 +2,27 @@
  * frontmcp.config.js/json schema and loader.
  */
 import { SetupDefinition } from './setup';
+export interface OAuthConfig {
+    serverUrl?: string;
+    clientId?: string;
+    defaultScope?: string;
+    portRange?: [number, number];
+    defaultPort?: number;
+    timeout?: number;
+}
+export interface CliConfig {
+    enabled: boolean;
+    outputDefault?: 'text' | 'json';
+    authRequired?: boolean;
+    description?: string;
+    excludeTools?: string[];
+    nativeDeps?: {
+        brew?: string[];
+        apt?: string[];
+        npm?: string[];
+    };
+    oauth?: OAuthConfig;
+}
 export interface FrontmcpExecConfig {
     name: string;
     version?: string;
@@ -26,6 +47,10 @@ export interface FrontmcpExecConfig {
         minify?: boolean;
     };
     setup?: SetupDefinition;
+    cli?: CliConfig;
+    sea?: {
+        enabled?: boolean;
+    };
 }
 /**
  * Load frontmcp.config.js/json from the given directory.

package/src/commands/build/exec/config.js

@@ -27,7 +27,6 @@ async function loadExecConfig(cwd) {
                 return JSON.parse(content);
             }
             // JS/MJS/CJS config — require it
-            // eslint-disable-next-line @typescript-eslint/no-require-imports
             const mod = require(configPath);
             return (mod.default || mod);
         }

package/src/commands/build/exec/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../../src/commands/build/exec/config.ts"],"names":[],"mappings":";AAAA;;GAEG;;AA2CH,wCA6BC;AAKD,0CAgBC;;AA3FD,mDAA6B;AAC7B,+CAAyB;AA6BzB,MAAM,gBAAgB,GAAG;IACvB,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;CACtB,CAAC;AAEF;;;GAGG;AACI,KAAK,UAAU,cAAc,CAAC,GAAW;IAC9C,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBACrD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,CAAC;YACnD,CAAC;YACD,iCAAiC;YACjC,iEAAiE;YACjE,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAuB,CAAC;QACpD,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC9D,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO;QAC/B,KAAK,EAAE,GAAG,CAAC,IAAI;KAChB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,MAA0B;IAIxD,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,sBAAsB,MAAM,CAAC,IAAI,wCAAwC,CAC1E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,MAAM;QACT,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO;QAClC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,UAAU;KAC9C,CAAC;AACJ,CAAC","sourcesContent":["/**\n * frontmcp.config.js/json schema and loader.\n */\n\nimport * as path from 'path';\nimport * as fs from 'fs';\nimport { SetupDefinition } from './setup';\n\nexport interface FrontmcpExecConfig {\n  name: string;\n  version?: string;\n  entry?: string;\n  storage?: {\n    type: 'sqlite' | 'redis' | 'none';\n    required?: boolean;\n  };\n  network?: {\n    defaultPort?: number;\n    supportsSocket?: boolean;\n  };\n  dependencies?: {\n    system?: string[];\n    nativeAddons?: string[];\n  };\n  nodeVersion?: string;\n  esbuild?: {\n    external?: string[];\n    define?: Record<string, string>;\n    target?: string;\n    minify?: boolean;\n  };\n  setup?: SetupDefinition;\n}\n\nconst CONFIG_FILENAMES = [\n  'frontmcp.config.js',\n  'frontmcp.config.json',\n  'frontmcp.config.mjs',\n  'frontmcp.config.cjs',\n];\n\n/**\n * Load frontmcp.config.js/json from the given directory.\n * Falls back to deriving minimal config from package.json.\n */\nexport async function loadExecConfig(cwd: string): Promise<FrontmcpExecConfig> {\n  for (const filename of CONFIG_FILENAMES) {\n    const configPath = path.join(cwd, filename);\n    if (fs.existsSync(configPath)) {\n      if (filename.endsWith('.json')) {\n        const content = fs.readFileSync(configPath, 'utf-8');\n        return JSON.parse(content) as FrontmcpExecConfig;\n      }\n      // JS/MJS/CJS config — require it\n      // eslint-disable-next-line @typescript-eslint/no-require-imports\n      const mod = require(configPath);\n      return (mod.default || mod) as FrontmcpExecConfig;\n    }\n  }\n\n  // Fallback: derive from package.json\n  const pkgPath = path.join(cwd, 'package.json');\n  if (!fs.existsSync(pkgPath)) {\n    throw new Error(\n      'No frontmcp.config.js/json found and no package.json. Create a frontmcp.config.js to use --exec.',\n    );\n  }\n\n  const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));\n  return {\n    name: pkg.name?.replace(/^@[^/]+\\//, '') || path.basename(cwd),\n    version: pkg.version || '1.0.0',\n    entry: pkg.main,\n  };\n}\n\n/**\n * Validate config and return normalized version.\n */\nexport function normalizeConfig(config: FrontmcpExecConfig): Required<\n  Pick<FrontmcpExecConfig, 'name' | 'version' | 'nodeVersion'>\n> &\n  FrontmcpExecConfig {\n  if (!config.name || !/^[a-zA-Z0-9._-]+$/.test(config.name)) {\n    throw new Error(\n      `Invalid app name: \"${config.name}\". Must be alphanumeric with .-_ only.`,\n    );\n  }\n\n  return {\n    ...config,\n    name: config.name,\n    version: config.version || '1.0.0',\n    nodeVersion: config.nodeVersion || '>=22.0.0',\n  };\n}\n"]}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../../src/commands/build/exec/config.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAsEH,wCA6BC;AAKD,0CAgBC;;AAtHD,mDAA6B;AAC7B,+CAAyB;AAwDzB,MAAM,gBAAgB,GAAG;IACvB,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;CACtB,CAAC;AAEF;;;GAGG;AACI,KAAK,UAAU,cAAc,CAAC,GAAW;IAC9C,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBACrD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,CAAC;YACnD,CAAC;YACD,iCAAiC;YAEjC,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAuB,CAAC;QACpD,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC9D,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO;QAC/B,KAAK,EAAE,GAAG,CAAC,IAAI;KAChB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,MAA0B;IAIxD,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,sBAAsB,MAAM,CAAC,IAAI,wCAAwC,CAC1E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,MAAM;QACT,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO;QAClC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,UAAU;KAC9C,CAAC;AACJ,CAAC","sourcesContent":["/**\n * frontmcp.config.js/json schema and loader.\n */\n\nimport * as path from 'path';\nimport * as fs from 'fs';\nimport { SetupDefinition } from './setup';\n\nexport interface OAuthConfig {\n  serverUrl?: string;\n  clientId?: string;\n  defaultScope?: string;\n  portRange?: [number, number];\n  defaultPort?: number;\n  timeout?: number;\n}\n\nexport interface CliConfig {\n  enabled: boolean;\n  outputDefault?: 'text' | 'json';\n  authRequired?: boolean;\n  description?: string;\n  excludeTools?: string[];\n  nativeDeps?: {\n    brew?: string[];\n    apt?: string[];\n    npm?: string[];\n  };\n  oauth?: OAuthConfig;\n}\n\nexport interface FrontmcpExecConfig {\n  name: string;\n  version?: string;\n  entry?: string;\n  storage?: {\n    type: 'sqlite' | 'redis' | 'none';\n    required?: boolean;\n  };\n  network?: {\n    defaultPort?: number;\n    supportsSocket?: boolean;\n  };\n  dependencies?: {\n    system?: string[];\n    nativeAddons?: string[];\n  };\n  nodeVersion?: string;\n  esbuild?: {\n    external?: string[];\n    define?: Record<string, string>;\n    target?: string;\n    minify?: boolean;\n  };\n  setup?: SetupDefinition;\n  cli?: CliConfig;\n  sea?: {\n    enabled?: boolean;\n  };\n}\n\nconst CONFIG_FILENAMES = [\n  'frontmcp.config.js',\n  'frontmcp.config.json',\n  'frontmcp.config.mjs',\n  'frontmcp.config.cjs',\n];\n\n/**\n * Load frontmcp.config.js/json from the given directory.\n * Falls back to deriving minimal config from package.json.\n */\nexport async function loadExecConfig(cwd: string): Promise<FrontmcpExecConfig> {\n  for (const filename of CONFIG_FILENAMES) {\n    const configPath = path.join(cwd, filename);\n    if (fs.existsSync(configPath)) {\n      if (filename.endsWith('.json')) {\n        const content = fs.readFileSync(configPath, 'utf-8');\n        return JSON.parse(content) as FrontmcpExecConfig;\n      }\n      // JS/MJS/CJS config — require it\n       \n      const mod = require(configPath);\n      return (mod.default || mod) as FrontmcpExecConfig;\n    }\n  }\n\n  // Fallback: derive from package.json\n  const pkgPath = path.join(cwd, 'package.json');\n  if (!fs.existsSync(pkgPath)) {\n    throw new Error(\n      'No frontmcp.config.js/json found and no package.json. Create a frontmcp.config.js to use --exec.',\n    );\n  }\n\n  const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));\n  return {\n    name: pkg.name?.replace(/^@[^/]+\\//, '') || path.basename(cwd),\n    version: pkg.version || '1.0.0',\n    entry: pkg.main,\n  };\n}\n\n/**\n * Validate config and return normalized version.\n */\nexport function normalizeConfig(config: FrontmcpExecConfig): Required<\n  Pick<FrontmcpExecConfig, 'name' | 'version' | 'nodeVersion'>\n> &\n  FrontmcpExecConfig {\n  if (!config.name || !/^[a-zA-Z0-9._-]+$/.test(config.name)) {\n    throw new Error(\n      `Invalid app name: \"${config.name}\". Must be alphanumeric with .-_ only.`,\n    );\n  }\n\n  return {\n    ...config,\n    name: config.name,\n    version: config.version || '1.0.0',\n    nodeVersion: config.nodeVersion || '>=22.0.0',\n  };\n}\n"]}

package/src/commands/build/exec/esbuild-bundler.d.ts

@@ -7,5 +7,8 @@ export interface BundleResult {
     bundlePath: string;
     bundleSize: number;
 }
-export declare function bundleWithEsbuild(entryPath: string, outDir: string, config: FrontmcpExecConfig): Promise<BundleResult>;
+export declare function bundleWithEsbuild(entryPath: string, outDir: string, config: FrontmcpExecConfig, options?: {
+    selfContained?: boolean;
+    outputName?: string;
+}): Promise<BundleResult>;
 export declare function formatSize(bytes: number): string;

package/src/commands/build/exec/esbuild-bundler.js

@@ -8,30 +8,49 @@ exports.bundleWithEsbuild = bundleWithEsbuild;
 exports.formatSize = formatSize;
 const tslib_1 = require("tslib");
 const path = tslib_1.__importStar(require("path"));
-// Default native addons that must be kept external
+// Default packages that must be kept external:
+// - native addons that cannot be bundled
+// - optional/lazy-required peer dependencies
 const DEFAULT_EXTERNALS = [
     'better-sqlite3',
     'fsevents',
     '@swc/core',
     'esbuild',
+    '@vercel/kv',
+    '@frontmcp/storage-sqlite',
+    '@enclave-vm/core',
+    // Externalize FrontMCP packages for single-copy semantics
+    // (required for schema extraction — bundled copies create separate Symbol tokens)
+    '@frontmcp/sdk',
+    '@frontmcp/di',
+    '@frontmcp/utils',
+    '@frontmcp/auth',
+    '@frontmcp/adapters',
+    '@frontmcp/plugins',
+    'reflect-metadata',
 ];
-async function bundleWithEsbuild(entryPath, outDir, config) {
+async function bundleWithEsbuild(entryPath, outDir, config, options) {
     // Lazy-load esbuild
     let esbuild;
     try {
-        // eslint-disable-next-line @typescript-eslint/no-require-imports
         esbuild = require('esbuild');
     }
     catch {
         throw new Error('esbuild is required for --exec builds. Install it: npm install -D esbuild');
     }
-    const bundleName = `${config.name}.bundle.js`;
+    const bundleName = `${options?.outputName || config.name}.bundle.js`;
     const bundlePath = path.join(outDir, bundleName);
-    const external = [
-        ...DEFAULT_EXTERNALS,
-        ...(config.dependencies?.nativeAddons || []),
-        ...(config.esbuild?.external || []),
-    ];
+    // In self-contained mode (SEA), only keep true native addons external
+    const external = options?.selfContained
+        ? [
+            ...DEFAULT_EXTERNALS,
+            ...(config.dependencies?.nativeAddons || []),
+        ]
+        : [
+            ...DEFAULT_EXTERNALS,
+            ...(config.dependencies?.nativeAddons || []),
+            ...(config.esbuild?.external || []),
+        ];
     await esbuild.build({
         entryPoints: [entryPath],
         bundle: true,

package/src/commands/build/exec/esbuild-bundler.js.map

@@ -1 +1 @@
-{"version":3,"file":"esbuild-bundler.js","sourceRoot":"","sources":["../../../../../src/commands/build/exec/esbuild-bundler.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAkBH,8CAkDC;AAED,gCAIC;;AAxED,mDAA6B;AAG7B,mDAAmD;AACnD,MAAM,iBAAiB,GAAG;IACxB,gBAAgB;IAChB,UAAU;IACV,WAAW;IACX,SAAS;CACV,CAAC;AAOK,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,MAAc,EACd,MAA0B;IAE1B,oBAAoB;IACpB,IAAI,OAAiC,CAAC;IACtC,IAAI,CAAC;QACH,iEAAiE;QACjE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,IAAI,YAAY,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAEjD,MAAM,QAAQ,GAAG;QACf,GAAG,iBAAiB;QACpB,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,IAAI,EAAE,CAAC;QAC5C,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC;KACpC,CAAC;IAEF,MAAM,OAAO,CAAC,KAAK,CAAC;QAClB,WAAW,EAAE,CAAC,SAAS,CAAC;QACxB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,QAAQ;QAC1C,OAAO,EAAE,UAAU;QACnB,QAAQ;QACR,SAAS,EAAE,IAAI,EAAE,8CAA8C;QAC/D,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK;QACvC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM;QAC9B,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,SAAS;KACpB,CAAC,CAAC;IAEH,wBAAwB;IACxB,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAErC,OAAO;QACL,UAAU;QACV,UAAU,EAAE,IAAI,CAAC,IAAI;KACtB,CAAC;AACJ,CAAC;AAED,SAAgB,UAAU,CAAC,KAAa;IACtC,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,IAAI,CAAC;IACtC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AACpD,CAAC","sourcesContent":["/**\n * esbuild bundling for executable builds.\n * Produces a single CJS file for distribution.\n */\n\nimport * as path from 'path';\nimport { FrontmcpExecConfig } from './config';\n\n// Default native addons that must be kept external\nconst DEFAULT_EXTERNALS = [\n  'better-sqlite3',\n  'fsevents',\n  '@swc/core',\n  'esbuild',\n];\n\nexport interface BundleResult {\n  bundlePath: string;\n  bundleSize: number;\n}\n\nexport async function bundleWithEsbuild(\n  entryPath: string,\n  outDir: string,\n  config: FrontmcpExecConfig,\n): Promise<BundleResult> {\n  // Lazy-load esbuild\n  let esbuild: typeof import('esbuild');\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-require-imports\n    esbuild = require('esbuild');\n  } catch {\n    throw new Error(\n      'esbuild is required for --exec builds. Install it: npm install -D esbuild',\n    );\n  }\n\n  const bundleName = `${config.name}.bundle.js`;\n  const bundlePath = path.join(outDir, bundleName);\n\n  const external = [\n    ...DEFAULT_EXTERNALS,\n    ...(config.dependencies?.nativeAddons || []),\n    ...(config.esbuild?.external || []),\n  ];\n\n  await esbuild.build({\n    entryPoints: [entryPath],\n    bundle: true,\n    platform: 'node',\n    format: 'cjs',\n    target: config.esbuild?.target || 'node22',\n    outfile: bundlePath,\n    external,\n    keepNames: true, // preserve class names for decorator metadata\n    treeShaking: true,\n    minify: config.esbuild?.minify ?? false,\n    define: config.esbuild?.define,\n    sourcemap: false,\n    metafile: true,\n    logLevel: 'warning',\n  });\n\n  // Calculate bundle size\n  const fs = require('fs');\n  const stat = fs.statSync(bundlePath);\n\n  return {\n    bundlePath,\n    bundleSize: stat.size,\n  };\n}\n\nexport function formatSize(bytes: number): string {\n  if (bytes < 1024) return `${bytes} B`;\n  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;\n  return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;\n}\n"]}
+{"version":3,"file":"esbuild-bundler.js","sourceRoot":"","sources":["../../../../../src/commands/build/exec/esbuild-bundler.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAgCH,8CAyDC;AAED,gCAIC;;AA7FD,mDAA6B;AAG7B,+CAA+C;AAC/C,yCAAyC;AACzC,6CAA6C;AAC7C,MAAM,iBAAiB,GAAG;IACxB,gBAAgB;IAChB,UAAU;IACV,WAAW;IACX,SAAS;IACT,YAAY;IACZ,0BAA0B;IAC1B,kBAAkB;IAClB,0DAA0D;IAC1D,kFAAkF;IAClF,eAAe;IACf,cAAc;IACd,iBAAiB;IACjB,gBAAgB;IAChB,oBAAoB;IACpB,mBAAmB;IACnB,kBAAkB;CACnB,CAAC;AAOK,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,MAAc,EACd,MAA0B,EAC1B,OAA0D;IAE1D,oBAAoB;IACpB,IAAI,OAAiC,CAAC;IACtC,IAAI,CAAC;QAEH,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,OAAO,EAAE,UAAU,IAAI,MAAM,CAAC,IAAI,YAAY,CAAC;IACrE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAEjD,sEAAsE;IACtE,MAAM,QAAQ,GAAG,OAAO,EAAE,aAAa;QACrC,CAAC,CAAC;YACE,GAAG,iBAAiB;YACpB,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,IAAI,EAAE,CAAC;SAC7C;QACH,CAAC,CAAC;YACE,GAAG,iBAAiB;YACpB,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,IAAI,EAAE,CAAC;YAC5C,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC;SACpC,CAAC;IAEN,MAAM,OAAO,CAAC,KAAK,CAAC;QAClB,WAAW,EAAE,CAAC,SAAS,CAAC;QACxB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,QAAQ;QAC1C,OAAO,EAAE,UAAU;QACnB,QAAQ;QACR,SAAS,EAAE,IAAI,EAAE,8CAA8C;QAC/D,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK;QACvC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM;QAC9B,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,SAAS;KACpB,CAAC,CAAC;IAEH,wBAAwB;IACxB,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAErC,OAAO;QACL,UAAU;QACV,UAAU,EAAE,IAAI,CAAC,IAAI;KACtB,CAAC;AACJ,CAAC;AAED,SAAgB,UAAU,CAAC,KAAa;IACtC,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,IAAI,CAAC;IACtC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AACpD,CAAC","sourcesContent":["/**\n * esbuild bundling for executable builds.\n * Produces a single CJS file for distribution.\n */\n\nimport * as path from 'path';\nimport { FrontmcpExecConfig } from './config';\n\n// Default packages that must be kept external:\n// - native addons that cannot be bundled\n// - optional/lazy-required peer dependencies\nconst DEFAULT_EXTERNALS = [\n  'better-sqlite3',\n  'fsevents',\n  '@swc/core',\n  'esbuild',\n  '@vercel/kv',\n  '@frontmcp/storage-sqlite',\n  '@enclave-vm/core',\n  // Externalize FrontMCP packages for single-copy semantics\n  // (required for schema extraction — bundled copies create separate Symbol tokens)\n  '@frontmcp/sdk',\n  '@frontmcp/di',\n  '@frontmcp/utils',\n  '@frontmcp/auth',\n  '@frontmcp/adapters',\n  '@frontmcp/plugins',\n  'reflect-metadata',\n];\n\nexport interface BundleResult {\n  bundlePath: string;\n  bundleSize: number;\n}\n\nexport async function bundleWithEsbuild(\n  entryPath: string,\n  outDir: string,\n  config: FrontmcpExecConfig,\n  options?: { selfContained?: boolean; outputName?: string },\n): Promise<BundleResult> {\n  // Lazy-load esbuild\n  let esbuild: typeof import('esbuild');\n  try {\n\n    esbuild = require('esbuild');\n  } catch {\n    throw new Error(\n      'esbuild is required for --exec builds. Install it: npm install -D esbuild',\n    );\n  }\n\n  const bundleName = `${options?.outputName || config.name}.bundle.js`;\n  const bundlePath = path.join(outDir, bundleName);\n\n  // In self-contained mode (SEA), only keep true native addons external\n  const external = options?.selfContained\n    ? [\n        ...DEFAULT_EXTERNALS,\n        ...(config.dependencies?.nativeAddons || []),\n      ]\n    : [\n        ...DEFAULT_EXTERNALS,\n        ...(config.dependencies?.nativeAddons || []),\n        ...(config.esbuild?.external || []),\n      ];\n\n  await esbuild.build({\n    entryPoints: [entryPath],\n    bundle: true,\n    platform: 'node',\n    format: 'cjs',\n    target: config.esbuild?.target || 'node22',\n    outfile: bundlePath,\n    external,\n    keepNames: true, // preserve class names for decorator metadata\n    treeShaking: true,\n    minify: config.esbuild?.minify ?? false,\n    define: config.esbuild?.define,\n    sourcemap: false,\n    metafile: true,\n    logLevel: 'warning',\n  });\n\n  // Calculate bundle size\n  const fs = require('fs');\n  const stat = fs.statSync(bundlePath);\n\n  return {\n    bundlePath,\n    bundleSize: stat.size,\n  };\n}\n\nexport function formatSize(bytes: number): string {\n  if (bytes < 1024) return `${bytes} B`;\n  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;\n  return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;\n}\n"]}

package/src/commands/build/exec/index.d.ts

@@ -1,11 +1,16 @@
 /**
  * buildExec() orchestrator — produces a distributable bundle from a FrontMCP app.
  *
- * Output:
+ * Output (server-only mode):
  *   dist/{name}.bundle.js       — esbuild single-file bundle
  *   dist/{name}.manifest.json   — app metadata (runtime reqs, setup questions)
  *   dist/{name}                 — bash runner script
  *   dist/install-{name}.sh      — bash installer script
+ *
+ * Output (CLI mode, --cli flag):
+ *   All of the above, plus:
+ *   dist/{name}-cli.bundle.js   — CLI executable bundle (commander.js)
+ *   dist/{name}                 — bash runner dispatches to CLI bundle
  */
-import { ParsedArgs } from '../../../args';
+import { ParsedArgs } from '../../../core/args';
 export declare function buildExec(opts: ParsedArgs): Promise<void>;

package/src/commands/build/exec/index.js

@@ -2,19 +2,24 @@
 /**
  * buildExec() orchestrator — produces a distributable bundle from a FrontMCP app.
  *
- * Output:
+ * Output (server-only mode):
  *   dist/{name}.bundle.js       — esbuild single-file bundle
  *   dist/{name}.manifest.json   — app metadata (runtime reqs, setup questions)
  *   dist/{name}                 — bash runner script
  *   dist/install-{name}.sh      — bash installer script
+ *
+ * Output (CLI mode, --cli flag):
+ *   All of the above, plus:
+ *   dist/{name}-cli.bundle.js   — CLI executable bundle (commander.js)
+ *   dist/{name}                 — bash runner dispatches to CLI bundle
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildExec = buildExec;
 const tslib_1 = require("tslib");
 const path = tslib_1.__importStar(require("path"));
 const fs = tslib_1.__importStar(require("fs"));
-const colors_1 = require("../../../colors");
-const fs_1 = require("../../../utils/fs");
+const colors_1 = require("../../../core/colors");
+const fs_1 = require("../../../shared/fs");
 const config_1 = require("./config");
 const esbuild_bundler_1 = require("./esbuild-bundler");
 const manifest_1 = require("./manifest");
@@ -22,7 +27,7 @@ const runner_script_1 = require("./runner-script");
 const installer_script_1 = require("./installer-script");
 const setup_1 = require("./setup");
 const utils_1 = require("@frontmcp/utils");
-const tsconfig_1 = require("../../../tsconfig");
+const tsconfig_1 = require("../../../core/tsconfig");
 async function buildExec(opts) {
     const cwd = process.cwd();
     const outDir = path.resolve(cwd, opts.outDir || 'dist');
@@ -30,8 +35,16 @@ async function buildExec(opts) {
     // 1. Load config
     const rawConfig = await (0, config_1.loadExecConfig)(cwd);
     const config = (0, config_1.normalizeConfig)(rawConfig);
+    const cliEnabled = opts.cli || config.cli?.enabled;
+    const seaEnabled = opts.sea || config.sea?.enabled;
     console.log(`${(0, colors_1.c)('cyan', '[build:exec]')} name: ${config.name}`);
     console.log(`${(0, colors_1.c)('cyan', '[build:exec]')} version: ${config.version}`);
+    if (cliEnabled) {
+        console.log(`${(0, colors_1.c)('cyan', '[build:exec]')} CLI mode: enabled`);
+    }
+    if (seaEnabled) {
+        console.log(`${(0, colors_1.c)('cyan', '[build:exec]')} SEA mode: enabled (single executable)`);
+    }
     // 2. Resolve entry
     const entry = await (0, fs_1.resolveEntry)(cwd, config.entry || opts.entry);
     console.log(`${(0, colors_1.c)('cyan', '[build:exec]')} entry: ${path.relative(cwd, entry)}`);
@@ -74,30 +87,147 @@ async function buildExec(opts) {
     // 5. Bundle with esbuild
     console.log(`${(0, colors_1.c)('cyan', '[build:exec]')} bundling with esbuild...`);
     const compiledEntry = path.join(outDir, path.basename(entry).replace(/\.tsx?$/, '.js'));
+    // Always build non-self-contained first (schema extraction needs host SDK)
     const bundleResult = await (0, esbuild_bundler_1.bundleWithEsbuild)(compiledEntry, outDir, config);
     console.log(`${(0, colors_1.c)('green', '[build:exec]')} bundle created: ${path.relative(cwd, bundleResult.bundlePath)} (${(0, esbuild_bundler_1.formatSize)(bundleResult.bundleSize)})`);
     // 6. Generate manifest
     const bundleFilename = `${config.name}.bundle.js`;
     const manifest = (0, manifest_1.generateManifest)(config, bundleFilename);
+    // 7. CLI build step (if enabled)
+    let cliBundlePath;
+    if (cliEnabled) {
+        console.log(`${(0, colors_1.c)('cyan', '[build:exec]')} extracting schemas for CLI...`);
+        const { extractSchemas, SYSTEM_TOOL_NAMES } = await import('./cli-runtime/schema-extractor.js');
+        const { generateCliEntry, resolveToolCommandName } = await import('./cli-runtime/generate-cli-entry.js');
+        const { generateOutputFormatterSource } = await import('./cli-runtime/output-formatter.js');
+        const { generateSessionManagerSource } = await import('./cli-runtime/session-manager.js');
+        const { generateCredentialStoreSource } = await import('./cli-runtime/credential-store.js');
+        const { generateOAuthHelperSource } = await import('./cli-runtime/oauth-helper.js');
+        const { generateDaemonClientSource } = await import('./cli-runtime/daemon-client.js');
+        const { bundleCliWithEsbuild } = await import('./cli-runtime/cli-bundler.js');
+        // Extract schemas from server bundle
+        const schema = await extractSchemas(bundleResult.bundlePath);
+        const capabilities = schema.capabilities;
+        const userToolCount = schema.tools.filter((t) => !SYSTEM_TOOL_NAMES.has(t.name)).length;
+        console.log(`${(0, colors_1.c)('cyan', '[build:exec]')} extracted: ${schema.tools.length} tools (${userToolCount} user), ${schema.resources.length} resources, ${schema.resourceTemplates.length} templates, ${schema.prompts.length} prompts`);
+        if (capabilities.skills)
+            console.log(`${(0, colors_1.c)('cyan', '[build:exec]')} capability: skills`);
+        if (capabilities.jobs)
+            console.log(`${(0, colors_1.c)('cyan', '[build:exec]')} capability: jobs`);
+        if (capabilities.workflows)
+            console.log(`${(0, colors_1.c)('cyan', '[build:exec]')} capability: workflows`);
+        // Log tool name conflicts
+        const cliConfig = config.cli || { enabled: true };
+        const excludeTools = cliConfig.excludeTools || [];
+        schema.tools
+            .filter((t) => !excludeTools.includes(t.name))
+            .forEach((t) => {
+            const { wasRenamed, cmdName } = resolveToolCommandName(t.name);
+            if (wasRenamed) {
+                console.log(`${(0, colors_1.c)('yellow', '[build:exec]')} Tool "${t.name}" conflicts with built-in command, mapped to "${cmdName}"`);
+            }
+        });
+        // Generate runtime modules
+        const outputDefault = cliConfig.outputDefault || 'text';
+        const authRequired = cliConfig.authRequired ?? false;
+        const nativeDeps = cliConfig.nativeDeps || {};
+        const oauthConfig = cliConfig.oauth;
+        // Write runtime modules to temp files for bundling
+        const tempDir = path.join(outDir, '__cli_temp');
+        fs.mkdirSync(tempDir, { recursive: true });
+        fs.writeFileSync(path.join(tempDir, 'output-formatter.js'), generateOutputFormatterSource());
+        fs.writeFileSync(path.join(tempDir, 'session-manager.js'), generateSessionManagerSource(config.name));
+        fs.writeFileSync(path.join(tempDir, 'credential-store.js'), generateCredentialStoreSource(config.name));
+        fs.writeFileSync(path.join(tempDir, 'oauth-helper.js'), generateOAuthHelperSource(config.name));
+        fs.writeFileSync(path.join(tempDir, 'daemon-client.js'), generateDaemonClientSource());
+        // Generate CLI entry
+        const cliEntrySource = generateCliEntry({
+            appName: config.name,
+            appVersion: config.version || '1.0.0',
+            description: cliConfig.description || `${config.name} CLI`,
+            serverBundleFilename: bundleFilename,
+            outputDefault,
+            authRequired,
+            excludeTools,
+            nativeDeps,
+            schema,
+            oauthConfig,
+            selfContained: !!seaEnabled,
+        });
+        const cliEntryPath = path.join(tempDir, 'cli-entry.js');
+        fs.writeFileSync(cliEntryPath, cliEntrySource);
+        // Bundle CLI
+        console.log(`${(0, colors_1.c)('cyan', '[build:exec]')} bundling CLI...`);
+        const cliResult = await bundleCliWithEsbuild(cliEntryPath, outDir, config, {
+            selfContained: !!seaEnabled,
+        });
+        cliBundlePath = cliResult.bundlePath;
+        console.log(`${(0, colors_1.c)('green', '[build:exec]')} CLI bundle: ${path.relative(cwd, cliResult.bundlePath)} (${(0, esbuild_bundler_1.formatSize)(cliResult.bundleSize)})`);
+        // Clean temp
+        fs.rmSync(tempDir, { recursive: true, force: true });
+        // Extend manifest with CLI metadata
+        manifest.cli = {
+            enabled: true,
+            cliBundle: `${config.name}-cli.bundle.js`,
+            outputDefault,
+            authRequired,
+            toolCount: userToolCount,
+            resourceCount: schema.resources.length,
+            templateCount: schema.resourceTemplates.length,
+            promptCount: schema.prompts.length,
+            oauthEnabled: !!oauthConfig,
+            skillsEnabled: capabilities.skills || undefined,
+            jobsEnabled: capabilities.jobs || undefined,
+            workflowsEnabled: capabilities.workflows || undefined,
+        };
+    }
+    // 8. Build SEA binaries if enabled
+    let seaServerResult;
+    let seaCliResult;
+    if (seaEnabled) {
+        const { buildSea } = await import('./sea-builder.js');
+        // Rebuild server bundle as self-contained for SEA (inlines all deps)
+        // Use a temp filename so the original non-self-contained bundle is preserved
+        const seaTempName = `${config.name}.sea-temp`;
+        console.log(`${(0, colors_1.c)('cyan', '[build:sea]')} rebuilding server bundle (self-contained)...`);
+        const seaBundle = await (0, esbuild_bundler_1.bundleWithEsbuild)(compiledEntry, outDir, config, {
+            selfContained: true,
+            outputName: seaTempName,
+        });
+        console.log(`${(0, colors_1.c)('cyan', '[build:sea]')} building server SEA binary...`);
+        seaServerResult = await buildSea(seaBundle.bundlePath, outDir, config.name);
+        // Clean up temp self-contained bundle
+        fs.unlinkSync(seaBundle.bundlePath);
+        console.log(`${(0, colors_1.c)('green', '[build:sea]')} server binary: ${path.relative(cwd, seaServerResult.executablePath)} (${(0, esbuild_bundler_1.formatSize)(seaServerResult.executableSize)})`);
+        if (cliBundlePath) {
+            console.log(`${(0, colors_1.c)('cyan', '[build:sea]')} building CLI SEA binary...`);
+            seaCliResult = await buildSea(cliBundlePath, outDir, `${config.name}-cli`);
+            console.log(`${(0, colors_1.c)('green', '[build:sea]')} CLI binary: ${path.relative(cwd, seaCliResult.executablePath)} (${(0, esbuild_bundler_1.formatSize)(seaCliResult.executableSize)})`);
+        }
+    }
+    // 9. Write manifest
     const manifestPath = path.join(outDir, `${config.name}.manifest.json`);
     fs.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2), 'utf-8');
     console.log(`${(0, colors_1.c)('green', '[build:exec]')} manifest: ${path.relative(cwd, manifestPath)}`);
-    // 7. Generate runner script
-    const runnerContent = (0, runner_script_1.generateRunnerScript)(config);
+    // 10. Generate runner script (dispatches to CLI bundle or SEA binary)
+    const runnerContent = (0, runner_script_1.generateRunnerScript)(config, !!cliEnabled, !!seaEnabled);
     const runnerPath = path.join(outDir, config.name);
     fs.writeFileSync(runnerPath, runnerContent, { mode: 0o755 });
     console.log(`${(0, colors_1.c)('green', '[build:exec]')} runner: ${path.relative(cwd, runnerPath)}`);
-    // 8. Generate installer script
+    // 10. Generate installer script
     const installerContent = (0, installer_script_1.generateInstallerScript)(config);
     const installerPath = path.join(outDir, `install-${config.name}.sh`);
     fs.writeFileSync(installerPath, installerContent, { mode: 0o755 });
     console.log(`${(0, colors_1.c)('green', '[build:exec]')} installer: ${path.relative(cwd, installerPath)}`);
-    // 9. Clean up intermediate compiled files (keep only bundle + manifest + scripts)
+    // 12. Clean up intermediate compiled files
     const keepFiles = new Set([
         `${config.name}.bundle.js`,
+        `${config.name}-cli.bundle.js`,
         `${config.name}.manifest.json`,
         config.name,
         `install-${config.name}.sh`,
+        `${config.name}-bin`,
+        `${config.name}-cli-bin`,
     ]);
     const allFiles = fs.readdirSync(outDir);
     let cleaned = 0;
@@ -114,13 +244,33 @@ async function buildExec(opts) {
     if (cleaned > 0) {
         console.log(`${(0, colors_1.c)('gray', '[build:exec]')} cleaned ${cleaned} intermediate file(s)`);
     }
+    // 13. Print summary
     console.log(`\n${(0, colors_1.c)('green', 'Executable build completed.')}`);
     console.log(`\n${(0, colors_1.c)('bold', 'Output:')}`);
     console.log(`  ${path.relative(cwd, bundleResult.bundlePath)}  ${(0, colors_1.c)('gray', `(${(0, esbuild_bundler_1.formatSize)(bundleResult.bundleSize)})`)}`);
+    if (cliBundlePath) {
+        const cliStat = fs.statSync(cliBundlePath);
+        console.log(`  ${path.relative(cwd, cliBundlePath)}  ${(0, colors_1.c)('gray', `(${(0, esbuild_bundler_1.formatSize)(cliStat.size)})`)}`);
+    }
+    if (seaServerResult) {
+        console.log(`  ${path.relative(cwd, seaServerResult.executablePath)}  ${(0, colors_1.c)('gray', `(${(0, esbuild_bundler_1.formatSize)(seaServerResult.executableSize)})`)}`);
+    }
+    if (seaCliResult) {
+        console.log(`  ${path.relative(cwd, seaCliResult.executablePath)}  ${(0, colors_1.c)('gray', `(${(0, esbuild_bundler_1.formatSize)(seaCliResult.executableSize)})`)}`);
+    }
     console.log(`  ${path.relative(cwd, manifestPath)}`);
     console.log(`  ${path.relative(cwd, runnerPath)}`);
     console.log(`  ${path.relative(cwd, installerPath)}`);
-    console.log(`\n${(0, colors_1.c)('gray', 'Run the server:')} ./${path.relative(cwd, runnerPath)}`);
+    if (cliEnabled) {
+        console.log(`\n${(0, colors_1.c)('gray', 'Run the CLI:')} ./${path.relative(cwd, runnerPath)} --help`);
+        console.log(`${(0, colors_1.c)('gray', 'Start server:')} ./${path.relative(cwd, runnerPath)} serve`);
+    }
+    else {
+        console.log(`\n${(0, colors_1.c)('gray', 'Run the server:')} ./${path.relative(cwd, runnerPath)}`);
+    }
+    if (seaServerResult || seaCliResult) {
+        console.log(`\n${(0, colors_1.c)('yellow', 'Note:')} SEA binaries are native executables. Run directly (not via bash).`);
+    }
     console.log(`${(0, colors_1.c)('gray', 'Install to system:')} bash ./${path.relative(cwd, installerPath)}`);
 }
 //# sourceMappingURL=index.js.map