mcpman 0.6.0 → 0.7.0

package/dist/index.js

@@ -1,4 +1,13 @@
 #!/usr/bin/env node
+import {
+  LOCKFILE_NAME,
+  addEntry,
+  createEmptyLockfile,
+  findLockfile,
+  readLockfile,
+  resolveLockfilePath,
+  writeLockfile
+} from "./chunk-YZNTMR6O.js";
 import {
   computeTrustScore
 } from "./chunk-RGKHLY5G.js";
@@ -20,7 +29,7 @@ import {
 } from "./chunk-6X6Q6UZC.js";
 
 // src/index.ts
-import { defineCommand as defineCommand21, runMain } from "citty";
+import { defineCommand as defineCommand27, runMain } from "citty";
 
 // src/commands/audit.ts
 import * as p from "@clack/prompts";
@@ -28,89 +37,26 @@ import { defineCommand } from "citty";
 import { createSpinner } from "nanospinner";
 import pc from "picocolors";
 
-// src/core/lockfile.ts
+// src/core/security-scanner.ts
 import fs from "fs";
 import os from "os";
 import path from "path";
-var LOCKFILE_NAME = "mcpman.lock";
-function findLockfile() {
-  let dir = process.cwd();
-  while (true) {
-    const candidate = path.join(dir, LOCKFILE_NAME);
-    if (fs.existsSync(candidate)) return candidate;
-    const parent = path.dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  return null;
-}
-function getGlobalLockfilePath() {
-  return path.join(os.homedir(), ".mcpman", LOCKFILE_NAME);
-}
-function resolveLockfilePath() {
-  return findLockfile() ?? getGlobalLockfilePath();
-}
-function readLockfile(filePath) {
-  const target = filePath ?? resolveLockfilePath();
-  if (!fs.existsSync(target)) {
-    return { lockfileVersion: 1, servers: {} };
-  }
-  try {
-    const raw = fs.readFileSync(target, "utf-8");
-    return JSON.parse(raw);
-  } catch {
-    return { lockfileVersion: 1, servers: {} };
-  }
-}
-function serialize(data) {
-  const sorted = {
-    lockfileVersion: data.lockfileVersion,
-    servers: Object.fromEntries(
-      Object.entries(data.servers).sort(([a], [b]) => a.localeCompare(b))
-    )
-  };
-  return `${JSON.stringify(sorted, null, 2)}
-`;
-}
-function writeLockfile(data, filePath) {
-  const target = filePath ?? resolveLockfilePath();
-  const dir = path.dirname(target);
-  if (!fs.existsSync(dir)) {
-    fs.mkdirSync(dir, { recursive: true });
-  }
-  const tmp = `${target}.tmp`;
-  fs.writeFileSync(tmp, serialize(data), "utf-8");
-  fs.renameSync(tmp, target);
-}
-function addEntry(name, entry, filePath) {
-  const data = readLockfile(filePath);
-  data.servers[name] = entry;
-  writeLockfile(data, filePath);
-}
-function createEmptyLockfile(filePath) {
-  writeLockfile({ lockfileVersion: 1, servers: {} }, filePath);
-}
-
-// src/core/security-scanner.ts
-import fs2 from "fs";
-import os2 from "os";
-import path2 from "path";
-var CACHE_PATH = path2.join(os2.homedir(), ".mcpman", ".audit-cache.json");
+var CACHE_PATH = path.join(os.homedir(), ".mcpman", ".audit-cache.json");
 var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
 function readCache() {
   try {
-    if (!fs2.existsSync(CACHE_PATH)) return {};
-    return JSON.parse(fs2.readFileSync(CACHE_PATH, "utf-8"));
+    if (!fs.existsSync(CACHE_PATH)) return {};
+    return JSON.parse(fs.readFileSync(CACHE_PATH, "utf-8"));
   } catch {
     return {};
   }
 }
 function writeCache(cache) {
-  const dir = path2.dirname(CACHE_PATH);
-  if (!fs2.existsSync(dir)) fs2.mkdirSync(dir, { recursive: true });
+  const dir = path.dirname(CACHE_PATH);
+  if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
   const tmp = `${CACHE_PATH}.tmp`;
-  fs2.writeFileSync(tmp, JSON.stringify(cache, null, 2), "utf-8");
-  fs2.renameSync(tmp, CACHE_PATH);
+  fs.writeFileSync(tmp, JSON.stringify(cache, null, 2), "utf-8");
+  fs.renameSync(tmp, CACHE_PATH);
 }
 function getCachedReport(name, version) {
   const cache = readCache();
@@ -340,13 +286,13 @@ async function resolveFromGitHub(githubUrl) {
 
 // src/core/plugin-loader.ts
 import { execSync } from "child_process";
-import fs4 from "fs";
+import fs3 from "fs";
 import { createRequire } from "module";
-import path4 from "path";
+import path3 from "path";
 
 // src/core/config-service.ts
-import fs3 from "fs";
-import path3 from "path";
+import fs2 from "fs";
+import path2 from "path";
 var VALID_KEYS = /* @__PURE__ */ new Set([
   "defaultClient",
   "updateCheckInterval",
@@ -356,7 +302,7 @@ var VALID_KEYS = /* @__PURE__ */ new Set([
 ]);
 function readConfig(configPath = getConfigPath()) {
   try {
-    const raw = fs3.readFileSync(configPath, "utf-8");
+    const raw = fs2.readFileSync(configPath, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
       return {};
@@ -367,11 +313,11 @@ function readConfig(configPath = getConfigPath()) {
   }
 }
 function writeConfig(data, configPath = getConfigPath()) {
-  const dir = path3.dirname(configPath);
-  fs3.mkdirSync(dir, { recursive: true });
+  const dir = path2.dirname(configPath);
+  fs2.mkdirSync(dir, { recursive: true });
   const tmp = `${configPath}.tmp`;
-  fs3.writeFileSync(tmp, JSON.stringify(data, null, 2), { encoding: "utf-8" });
-  fs3.renameSync(tmp, configPath);
+  fs2.writeFileSync(tmp, JSON.stringify(data, null, 2), { encoding: "utf-8" });
+  fs2.renameSync(tmp, configPath);
 }
 function getConfigValue(key, configPath = getConfigPath()) {
   const data = readConfig(configPath);
@@ -395,8 +341,8 @@ function isValidPlugin(obj) {
 }
 function loadPlugin(pkg, pluginDir = getPluginDir()) {
   try {
-    const requirePath = path4.join(pluginDir, "node_modules", pkg);
-    const pluginRequire = createRequire(path4.join(pluginDir, "index.js"));
+    const requirePath = path3.join(pluginDir, "node_modules", pkg);
+    const pluginRequire = createRequire(path3.join(pluginDir, "index.js"));
     const mod = pluginRequire(requirePath);
     const exported = mod?.default ?? mod;
     if (isValidPlugin(exported)) return exported;
@@ -416,10 +362,10 @@ function loadAllPlugins(pluginDir = getPluginDir()) {
   return plugins;
 }
 function installPluginPackage(name, pluginDir = getPluginDir()) {
-  fs4.mkdirSync(pluginDir, { recursive: true });
-  const pkgJsonPath = path4.join(pluginDir, "package.json");
-  if (!fs4.existsSync(pkgJsonPath)) {
-    fs4.writeFileSync(
+  fs3.mkdirSync(pluginDir, { recursive: true });
+  const pkgJsonPath = path3.join(pluginDir, "package.json");
+  if (!fs3.existsSync(pkgJsonPath)) {
+    fs3.writeFileSync(
       pkgJsonPath,
       JSON.stringify({ name: "mcpman-plugins", private: true }, null, 2)
     );
@@ -907,10 +853,286 @@ async function runAuditFix(reports, servers, skipConfirm) {
 `);
 }
 
-// src/commands/config.ts
-import * as p2 from "@clack/prompts";
+// src/commands/completions.ts
+import fs4 from "fs";
+import os2 from "os";
+import path4 from "path";
 import { defineCommand as defineCommand2 } from "citty";
 import pc2 from "picocolors";
+
+// src/core/completion-generator.ts
+function getCommandList() {
+  return [
+    "install",
+    "list",
+    "remove",
+    "doctor",
+    "init",
+    "secrets",
+    "sync",
+    "audit",
+    "update",
+    "upgrade",
+    "config",
+    "search",
+    "info",
+    "run",
+    "logs",
+    "test",
+    "profiles",
+    "plugin",
+    "export",
+    "import",
+    "create",
+    "link",
+    "watch",
+    "registry",
+    "completions",
+    "why"
+  ];
+}
+var SERVER_ARG_COMMANDS = [
+  "run",
+  "test",
+  "logs",
+  "watch",
+  "remove",
+  "update",
+  "info",
+  "audit",
+  "link",
+  "why"
+];
+function getServerNames(lockfilePath) {
+  try {
+    const data = readLockfile(lockfilePath);
+    return Object.keys(data.servers);
+  } catch {
+    return [];
+  }
+}
+function generateBashCompletion() {
+  const serverCmds = SERVER_ARG_COMMANDS.join("|");
+  return `# mcpman bash completion
+# Add to ~/.bashrc or ~/.bash_profile:
+#   source <(mcpman completions bash)
+# Or append permanently:
+#   mcpman completions bash >> ~/.bashrc
+
+_mcpman_completions() {
+  local cur="\${COMP_WORDS[COMP_CWORD]}"
+  local prev="\${COMP_WORDS[COMP_CWORD-1]}"
+
+  if [ "$COMP_CWORD" -eq 1 ]; then
+    COMPREPLY=($(compgen -W "$(mcpman completions --list-commands 2>/dev/null)" -- "$cur"))
+    return
+  fi
+
+  case "$prev" in
+    ${serverCmds})
+      COMPREPLY=($(compgen -W "$(mcpman completions --list-servers 2>/dev/null)" -- "$cur"))
+      ;;
+    --client|-c)
+      COMPREPLY=($(compgen -W "claude-desktop cursor vscode windsurf" -- "$cur"))
+      ;;
+    --runtime|-r)
+      COMPREPLY=($(compgen -W "node python" -- "$cur"))
+      ;;
+  esac
+}
+
+complete -F _mcpman_completions mcpman
+`;
+}
+function generateZshCompletion() {
+  const serverCmds = SERVER_ARG_COMMANDS.map((c) => `'${c}'`).join(" ");
+  return `#compdef mcpman
+# mcpman zsh completion
+# Add to ~/.zshrc:
+#   source <(mcpman completions zsh)
+# Or use compinit:
+#   mcpman completions zsh > "\${fpath[1]}/_mcpman"
+
+_mcpman() {
+  local state
+
+  _arguments \\
+    '1: :->command' \\
+    '*: :->args'
+
+  case $state in
+    command)
+      local commands
+      commands=($(mcpman completions --list-commands 2>/dev/null))
+      _describe 'command' commands
+      ;;
+    args)
+      local cmd="\${words[2]}"
+      local server_cmds=(${serverCmds})
+      if (( server_cmds[(I)$cmd] )); then
+        local servers
+        servers=($(mcpman completions --list-servers 2>/dev/null))
+        _describe 'server' servers
+      fi
+      ;;
+  esac
+}
+
+compdef _mcpman mcpman
+`;
+}
+function generateFishCompletion() {
+  const serverCmds = SERVER_ARG_COMMANDS.join(" ");
+  return `# mcpman fish completion
+# Add to ~/.config/fish/completions/mcpman.fish:
+#   mcpman completions fish > ~/.config/fish/completions/mcpman.fish
+
+# Disable file completion for mcpman
+complete -c mcpman -f
+
+# Subcommand completions (dynamic)
+complete -c mcpman -n '__fish_use_subcommand' \\
+  -a "(mcpman completions --list-commands 2>/dev/null)"
+
+# Server name completions for commands that take a server arg
+for cmd in ${serverCmds}
+  complete -c mcpman -n "__fish_seen_subcommand_from $cmd" \\
+    -a "(mcpman completions --list-servers 2>/dev/null)"
+end
+
+# --client flag completions
+complete -c mcpman -l client -s c \\
+  -a "claude-desktop cursor vscode windsurf" \\
+  -d "Target client"
+
+# --runtime flag completions
+complete -c mcpman -l runtime -s r \\
+  -a "node python" \\
+  -d "Runtime"
+`;
+}
+
+// src/commands/completions.ts
+var completions_default = defineCommand2({
+  meta: {
+    name: "completions",
+    description: "Generate shell completion scripts (bash, zsh, fish)"
+  },
+  args: {
+    shell: {
+      type: "positional",
+      description: "Shell: bash, zsh, fish, or install",
+      required: false
+    },
+    "list-commands": {
+      type: "boolean",
+      description: "Output all command names (used by completion scripts)",
+      default: false
+    },
+    "list-servers": {
+      type: "boolean",
+      description: "Output server names from lockfile (used by completion scripts)",
+      default: false
+    }
+  },
+  async run({ args }) {
+    if (args["list-commands"]) {
+      console.log(getCommandList().join("\n"));
+      return;
+    }
+    if (args["list-servers"]) {
+      console.log(getServerNames().join("\n"));
+      return;
+    }
+    const shell = args.shell;
+    if (!shell) {
+      printUsage();
+      return;
+    }
+    switch (shell.toLowerCase()) {
+      case "bash":
+        process.stdout.write(generateBashCompletion());
+        break;
+      case "zsh":
+        process.stdout.write(generateZshCompletion());
+        break;
+      case "fish":
+        process.stdout.write(generateFishCompletion());
+        break;
+      case "install":
+        await installCompletion();
+        break;
+      default:
+        console.error(pc2.red(`  Error: Unknown shell '${shell}'. Use: bash, zsh, or fish.`));
+        process.exit(1);
+    }
+  }
+});
+function printUsage() {
+  console.log(pc2.bold("\n  mcpman completions \u2014 Shell completion setup\n"));
+  console.log("  Usage:");
+  console.log(`    ${pc2.cyan("mcpman completions bash")}    Output bash completion script`);
+  console.log(`    ${pc2.cyan("mcpman completions zsh")}     Output zsh completion script`);
+  console.log(`    ${pc2.cyan("mcpman completions fish")}    Output fish completion script`);
+  console.log(`    ${pc2.cyan("mcpman completions install")} Auto-detect shell and install
+`);
+  console.log("  Quick setup:");
+  console.log(`    ${pc2.dim("# bash")}`);
+  console.log(`    ${pc2.cyan("source <(mcpman completions bash)")}`);
+  console.log(`    ${pc2.dim("# zsh")}`);
+  console.log(`    ${pc2.cyan("source <(mcpman completions zsh)")}
+`);
+}
+async function installCompletion() {
+  const shellBin = process.env.SHELL ?? "";
+  let detectedShell = "";
+  if (shellBin.includes("zsh")) detectedShell = "zsh";
+  else if (shellBin.includes("fish")) detectedShell = "fish";
+  else if (shellBin.includes("bash")) detectedShell = "bash";
+  if (!detectedShell) {
+    console.error(pc2.red("  Could not detect shell from $SHELL. Run manually:"));
+    console.error(pc2.dim("    source <(mcpman completions bash|zsh|fish)"));
+    process.exit(1);
+  }
+  const home = os2.homedir();
+  let rcFile;
+  let script;
+  if (detectedShell === "zsh") {
+    rcFile = path4.join(home, ".zshrc");
+    script = generateZshCompletion();
+  } else if (detectedShell === "fish") {
+    const fishDir = path4.join(home, ".config", "fish", "completions");
+    fs4.mkdirSync(fishDir, { recursive: true });
+    rcFile = path4.join(fishDir, "mcpman.fish");
+    fs4.writeFileSync(rcFile, generateFishCompletion(), "utf-8");
+    console.log(pc2.green(`  Installed fish completions to ${rcFile}`));
+    return;
+  } else {
+    rcFile = path4.join(home, ".bashrc");
+    script = generateBashCompletion();
+  }
+  const marker = "# mcpman completions";
+  let existing = "";
+  try {
+    existing = fs4.readFileSync(rcFile, "utf-8");
+  } catch {
+  }
+  if (existing.includes(marker)) {
+    console.log(pc2.yellow(`  Completions already installed in ${rcFile}. Skipping.`));
+    return;
+  }
+  fs4.appendFileSync(rcFile, `
+${marker}
+source <(mcpman completions ${detectedShell})
+`);
+  console.log(pc2.green(`  Installed ${detectedShell} completions in ${rcFile}`));
+  console.log(pc2.dim(`  Restart your shell or run: source ${rcFile}`));
+}
+
+// src/commands/config.ts
+import * as p2 from "@clack/prompts";
+import { defineCommand as defineCommand3 } from "citty";
+import pc3 from "picocolors";
 function coerceValue(raw) {
   if (raw === "true") return true;
   if (raw === "false") return false;
@@ -918,7 +1140,7 @@ function coerceValue(raw) {
   if (!Number.isNaN(num) && raw.trim() !== "") return num;
   return raw;
 }
-var setCommand = defineCommand2({
+var setCommand = defineCommand3({
   meta: { name: "set", description: "Set a config value" },
   args: {
     key: {
@@ -936,14 +1158,14 @@ var setCommand = defineCommand2({
     try {
       const coerced = coerceValue(args.value);
       setConfigValue(args.key, coerced);
-      console.log(`${pc2.green("\u2713")} Set ${pc2.bold(args.key)} = ${pc2.cyan(String(coerced))}`);
+      console.log(`${pc3.green("\u2713")} Set ${pc3.bold(args.key)} = ${pc3.cyan(String(coerced))}`);
     } catch (err) {
-      console.error(`${pc2.red("\u2717")} ${String(err)}`);
+      console.error(`${pc3.red("\u2717")} ${String(err)}`);
       process.exit(1);
     }
   }
 });
-var getCommand = defineCommand2({
+var getCommand = defineCommand3({
   meta: { name: "get", description: "Get a config value" },
   args: {
     key: {
@@ -955,32 +1177,32 @@ var getCommand = defineCommand2({
   run({ args }) {
     const val = getConfigValue(args.key);
     if (val === void 0) {
-      console.log(pc2.dim(`${args.key}: (not set)`));
+      console.log(pc3.dim(`${args.key}: (not set)`));
     } else {
-      console.log(`${pc2.bold(args.key)}: ${pc2.cyan(String(val))}`);
+      console.log(`${pc3.bold(args.key)}: ${pc3.cyan(String(val))}`);
     }
   }
 });
-var listCommand = defineCommand2({
+var listCommand = defineCommand3({
   meta: { name: "list", description: "List all config values" },
   run() {
     const data = readConfig();
     const entries = Object.entries(data);
     if (entries.length === 0) {
-      console.log(pc2.dim("No config values set. Use `mcpman config set <key> <value>`."));
+      console.log(pc3.dim("No config values set. Use `mcpman config set <key> <value>`."));
       return;
     }
     console.log("");
-    console.log(pc2.bold("mcpman config:"));
+    console.log(pc3.bold("mcpman config:"));
     console.log("");
     for (const [key, val] of entries) {
-      console.log(`  ${pc2.green("\u25CF")} ${pc2.bold(key)}  ${pc2.cyan(String(val))}`);
+      console.log(`  ${pc3.green("\u25CF")} ${pc3.bold(key)}  ${pc3.cyan(String(val))}`);
     }
     console.log("");
-    console.log(pc2.dim(`  ${entries.length} key${entries.length !== 1 ? "s" : ""} configured`));
+    console.log(pc3.dim(`  ${entries.length} key${entries.length !== 1 ? "s" : ""} configured`));
   }
 });
-var resetCommand = defineCommand2({
+var resetCommand = defineCommand3({
   meta: { name: "reset", description: "Reset config to defaults (removes config file)" },
   async run() {
     const confirmed = await p2.confirm({
@@ -992,10 +1214,10 @@ var resetCommand = defineCommand2({
       return;
     }
     writeConfig({});
-    console.log(`${pc2.green("\u2713")} Config reset to defaults.`);
+    console.log(`${pc3.green("\u2713")} Config reset to defaults.`);
   }
 });
-var config_default = defineCommand2({
+var config_default = defineCommand3({
   meta: {
     name: "config",
     description: "Manage mcpman CLI configuration"
@@ -1008,9 +1230,297 @@ var config_default = defineCommand2({
   }
 });
 
+// src/commands/create.ts
+import path6 from "path";
+import { defineCommand as defineCommand4 } from "citty";
+import pc4 from "picocolors";
+
+// src/core/scaffold-service.ts
+import fs5 from "fs";
+import path5 from "path";
+function sanitizeName(name) {
+  return name.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
+}
+function generateNodeProject(options) {
+  const { name, description } = options;
+  const packageJson = JSON.stringify(
+    {
+      name,
+      version: "0.1.0",
+      description,
+      type: "module",
+      bin: { [name]: "./dist/index.js" },
+      main: "./dist/index.js",
+      scripts: {
+        build: "tsc",
+        start: "node dist/index.js",
+        dev: "tsx src/index.ts"
+      },
+      mcp: {
+        name,
+        description,
+        transport: "stdio",
+        env: []
+      },
+      dependencies: {
+        "@modelcontextprotocol/sdk": "^1.0.0"
+      },
+      devDependencies: {
+        typescript: "^5.0.0",
+        tsx: "^4.0.0",
+        "@types/node": "^20.0.0"
+      }
+    },
+    null,
+    2
+  );
+  const tsconfig = JSON.stringify(
+    {
+      compilerOptions: {
+        target: "ES2022",
+        module: "NodeNext",
+        moduleResolution: "NodeNext",
+        outDir: "./dist",
+        rootDir: "./src",
+        strict: true,
+        esModuleInterop: true,
+        skipLibCheck: true
+      },
+      include: ["src"]
+    },
+    null,
+    2
+  );
+  const indexTs = `#!/usr/bin/env node
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+
+const server = new Server(
+  { name: "${name}", version: "0.1.0" },
+  { capabilities: { tools: {} } }
+);
+
+server.setRequestHandler("tools/list", async () => ({
+  tools: [
+    {
+      name: "hello",
+      description: "Say hello",
+      inputSchema: { type: "object", properties: { name: { type: "string" } } },
+    },
+  ],
+}));
+
+server.setRequestHandler("tools/call", async (request) => {
+  if (request.params.name === "hello") {
+    const who = request.params.arguments?.name ?? "world";
+    return { content: [{ type: "text", text: \`Hello, \${who}!\` }] };
+  }
+  throw new Error(\`Unknown tool: \${request.params.name}\`);
+});
+
+const transport = new StdioServerTransport();
+await server.connect(transport);
+`;
+  return {
+    "package.json": packageJson,
+    "tsconfig.json": tsconfig,
+    "src/index.ts": indexTs
+  };
+}
+function generatePythonProject(options) {
+  const { name, description } = options;
+  const pyprojectToml = `[build-system]
+requires = ["setuptools>=68"]
+build-backend = "setuptools.backends.legacy:build"
+
+[project]
+name = "${name}"
+version = "0.1.0"
+description = "${description}"
+requires-python = ">=3.10"
+dependencies = ["mcp>=1.0.0"]
+
+[project.scripts]
+${name} = "${name.replace(/-/g, "_")}:main"
+
+[tool.mcp]
+name = "${name}"
+description = "${description}"
+transport = "stdio"
+`;
+  const mainPy = `#!/usr/bin/env python3
+"""${description}"""
+from mcp.server import Server
+from mcp.server.stdio import stdio_server
+
+app = Server("${name}")
+
+@app.list_tools()
+async def list_tools():
+    return [
+        {
+            "name": "hello",
+            "description": "Say hello",
+            "inputSchema": {
+                "type": "object",
+                "properties": {"name": {"type": "string"}},
+            },
+        }
+    ]
+
+@app.call_tool()
+async def call_tool(name: str, arguments: dict):
+    if name == "hello":
+        who = arguments.get("name", "world")
+        return [{"type": "text", "text": f"Hello, {who}!"}]
+    raise ValueError(f"Unknown tool: {name}")
+
+async def main():
+    async with stdio_server() as (read, write):
+        await app.run(read, write)
+
+if __name__ == "__main__":
+    import asyncio
+    asyncio.run(main())
+`;
+  return {
+    "pyproject.toml": pyprojectToml,
+    "main.py": mainPy
+  };
+}
+function writeScaffold(dir, files) {
+  if (fs5.existsSync(dir)) {
+    const existing = fs5.readdirSync(dir);
+    if (existing.length > 0) {
+      throw new Error(`Directory '${dir}' already exists and is not empty.`);
+    }
+  }
+  for (const [relativePath, content] of Object.entries(files)) {
+    const fullPath = path5.join(dir, relativePath);
+    const parentDir = path5.dirname(fullPath);
+    fs5.mkdirSync(parentDir, { recursive: true });
+    fs5.writeFileSync(fullPath, content, "utf-8");
+  }
+}
+
+// src/commands/create.ts
+var create_default = defineCommand4({
+  meta: {
+    name: "create",
+    description: "Scaffold a new MCP server project"
+  },
+  args: {
+    name: {
+      type: "positional",
+      description: "Project name",
+      required: false
+    },
+    runtime: {
+      type: "string",
+      description: "Runtime: node or python (default: node)",
+      alias: "r"
+    },
+    description: {
+      type: "string",
+      description: "Project description",
+      alias: "d"
+    },
+    yes: {
+      type: "boolean",
+      description: "Accept all defaults, skip prompts",
+      alias: "y",
+      default: false
+    }
+  },
+  async run({ args }) {
+    let projectName = args.name ?? "";
+    let projectDescription = args.description ?? "";
+    let runtime = args.runtime ?? "node";
+    const acceptDefaults = args.yes;
+    if (!acceptDefaults) {
+      if (!projectName) {
+        const readline = await import("readline");
+        const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+        projectName = await new Promise((resolve) => {
+          rl.question(pc4.cyan("  Project name: "), (answer) => {
+            rl.close();
+            resolve(answer.trim());
+          });
+        });
+      }
+      if (!projectDescription) {
+        const readline = await import("readline");
+        const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+        projectDescription = await new Promise((resolve) => {
+          rl.question(pc4.cyan("  Description (optional): "), (answer) => {
+            rl.close();
+            resolve(answer.trim());
+          });
+        });
+      }
+      if (!args.runtime) {
+        const readline = await import("readline");
+        const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+        const answer = await new Promise((resolve) => {
+          rl.question(pc4.cyan("  Runtime [node/python] (default: node): "), (a) => {
+            rl.close();
+            resolve(a.trim() || "node");
+          });
+        });
+        runtime = answer;
+      }
+    }
+    if (!projectName) {
+      console.error(pc4.red("  Error: Project name is required."));
+      process.exit(1);
+    }
+    const sanitized = sanitizeName(projectName);
+    if (!sanitized) {
+      console.error(pc4.red(`  Error: Invalid project name '${projectName}'.`));
+      process.exit(1);
+    }
+    if (runtime !== "node" && runtime !== "python") {
+      console.error(pc4.red(`  Error: Unknown runtime '${runtime}'. Use node or python.`));
+      process.exit(1);
+    }
+    const options = {
+      name: sanitized,
+      description: projectDescription || `${sanitized} MCP server`,
+      runtime,
+      transport: "stdio"
+    };
+    const files = runtime === "python" ? generatePythonProject(options) : generateNodeProject(options);
+    const targetDir = path6.resolve(sanitized);
+    try {
+      writeScaffold(targetDir, files);
+    } catch (err) {
+      console.error(pc4.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+      process.exit(1);
+    }
+    console.log(pc4.green(`
+  Created ${pc4.bold(sanitized)}/
+`));
+    console.log(pc4.dim("  Files generated:"));
+    for (const file of Object.keys(files)) {
+      console.log(`    ${pc4.cyan(file)}`);
+    }
+    console.log("\n  Next steps:");
+    if (runtime === "node") {
+      console.log(`    ${pc4.bold(`cd ${sanitized}`)}`);
+      console.log(`    ${pc4.bold("npm install")}`);
+      console.log(`    ${pc4.bold("mcpman link .")}`);
+    } else {
+      console.log(`    ${pc4.bold(`cd ${sanitized}`)}`);
+      console.log(`    ${pc4.bold("pip install -e .")}`);
+      console.log(`    ${pc4.bold("mcpman link .")}`);
+    }
+    console.log();
+  }
+});
+
 // src/commands/doctor.ts
-import { defineCommand as defineCommand3 } from "citty";
-import pc3 from "picocolors";
+import { defineCommand as defineCommand5 } from "citty";
+import pc5 from "picocolors";
 
 // src/core/diagnostics.ts
 import { exec } from "child_process";
@@ -1355,12 +1865,12 @@ async function getInstalledServers(clientFilter) {
 
 // src/commands/doctor.ts
 var CHECK_ICON = {
-  pass: pc3.green("\u2713"),
-  fail: pc3.red("\u2717"),
-  skip: pc3.dim("-"),
-  warn: pc3.yellow("\u26A0")
+  pass: pc5.green("\u2713"),
+  fail: pc5.red("\u2717"),
+  skip: pc5.dim("-"),
+  warn: pc5.yellow("\u26A0")
 };
-var doctor_default = defineCommand3({
+var doctor_default = defineCommand5({
   meta: {
     name: "doctor",
     description: "Check MCP server health and configuration"
@@ -1373,11 +1883,11 @@ var doctor_default = defineCommand3({
     }
   },
   async run({ args }) {
-    console.log(pc3.bold("\n  mcpman doctor\n"));
+    console.log(pc5.bold("\n  mcpman doctor\n"));
     const servers = await getInstalledServers();
     if (servers.length === 0) {
       console.log(
-        pc3.dim("  No MCP servers installed. Run mcpman install <server> to get started.")
+        pc5.dim("  No MCP servers installed. Run mcpman install <server> to get started.")
       );
       return;
     }
@@ -1394,20 +1904,20 @@ var doctor_default = defineCommand3({
     if (pluginSummary.total > 0) {
       printPluginSection(pluginSummary);
     }
-    console.log(pc3.dim(`  ${"\u2500".repeat(50)}`));
+    console.log(pc5.dim(`  ${"\u2500".repeat(50)}`));
     const parts = [];
-    if (passed > 0) parts.push(pc3.green(`${passed} healthy`));
-    if (failed > 0) parts.push(pc3.red(`${failed} unhealthy`));
+    if (passed > 0) parts.push(pc5.green(`${passed} healthy`));
+    if (failed > 0) parts.push(pc5.red(`${failed} unhealthy`));
     console.log(`  Summary: ${parts.join(", ")}`);
     if (pluginSummary.total > 0) {
       const pParts = [];
-      if (pluginSummary.healthy > 0) pParts.push(pc3.green(`${pluginSummary.healthy} ok`));
-      if (pluginSummary.unhealthy > 0) pParts.push(pc3.red(`${pluginSummary.unhealthy} broken`));
+      if (pluginSummary.healthy > 0) pParts.push(pc5.green(`${pluginSummary.healthy} ok`));
+      if (pluginSummary.unhealthy > 0) pParts.push(pc5.red(`${pluginSummary.unhealthy} broken`));
       console.log(`  Plugins: ${pParts.join(", ")}`);
     }
     if (failed > 0 || pluginSummary.unhealthy > 0) {
       if (!args.fix) {
-        console.log(pc3.dim(`  Run ${pc3.cyan("mcpman doctor --fix")} for fix suggestions.
+        console.log(pc5.dim(`  Run ${pc5.cyan("mcpman doctor --fix")} for fix suggestions.
 `));
       }
       process.exit(1);
@@ -1416,26 +1926,26 @@ var doctor_default = defineCommand3({
   }
 });
 function printPluginSection(summary) {
-  console.log(pc3.bold(`  Plugins (${summary.total})`));
+  console.log(pc5.bold(`  Plugins (${summary.total})`));
   for (const r of summary.results) {
-    const icon = r.loadable && r.prefixUnique && r.resolvable ? pc3.green("\u2713") : pc3.red("\u2717");
+    const icon = r.loadable && r.prefixUnique && r.resolvable ? pc5.green("\u2713") : pc5.red("\u2717");
     const label = r.pluginName ? `${r.packageName} (${r.pluginName})` : r.packageName;
-    const prefix = r.prefix ? pc3.dim(` [${r.prefix}]`) : "";
+    const prefix = r.prefix ? pc5.dim(` [${r.prefix}]`) : "";
     console.log(`    ${icon} ${label}${prefix}`);
     if (r.error) {
-      console.log(`      ${pc3.yellow("\u2192")} ${r.error}`);
+      console.log(`      ${pc5.yellow("\u2192")} ${r.error}`);
     }
   }
   console.log();
 }
 function printServerResult(result, showFix) {
-  const icon = result.status === "healthy" ? pc3.green("\u25CF") : pc3.red("\u25CF");
-  console.log(`  ${icon} ${pc3.bold(result.serverName)}`);
+  const icon = result.status === "healthy" ? pc5.green("\u25CF") : pc5.red("\u25CF");
+  console.log(`  ${icon} ${pc5.bold(result.serverName)}`);
   for (const check of result.checks) {
     const checkIcon = check.skipped ? CHECK_ICON.skip : check.passed ? CHECK_ICON.pass : CHECK_ICON.fail;
     console.log(`    ${checkIcon} ${check.name}: ${check.message}`);
     if (showFix && !check.passed && !check.skipped && check.fix) {
-      console.log(`      ${pc3.yellow("\u2192")} Fix: ${pc3.cyan(check.fix)}`);
+      console.log(`      ${pc5.yellow("\u2192")} Fix: ${pc5.cyan(check.fix)}`);
     }
   }
   console.log();
@@ -1458,17 +1968,17 @@ async function runParallel(tasks, concurrency) {
 }
 
 // src/commands/export-command.ts
-import fs6 from "fs";
-import path5 from "path";
-import { defineCommand as defineCommand4 } from "citty";
-import pc4 from "picocolors";
+import fs7 from "fs";
+import path7 from "path";
+import { defineCommand as defineCommand6 } from "citty";
+import pc6 from "picocolors";
 
 // src/core/export-import-service.ts
-import fs5 from "fs";
+import fs6 from "fs";
 
 // src/utils/constants.ts
 var APP_NAME = "mcpman";
-var APP_VERSION = "0.6.0";
+var APP_VERSION = "0.7.0";
 var APP_DESCRIPTION = "The package manager for MCP servers";
 
 // src/core/export-import-service.ts
@@ -1484,7 +1994,7 @@ function createExportBundle(opts = {}) {
   };
   if (includeVault) {
     const vaultPath = getVaultPath();
-    if (fs5.existsSync(vaultPath)) {
+    if (fs6.existsSync(vaultPath)) {
       bundle.vault = readVault();
     }
   }
@@ -1550,7 +2060,7 @@ function importBundle(bundle, opts = {}) {
 
 // src/commands/export-command.ts
 var DEFAULT_OUTPUT = "mcpman-export.json";
-var export_command_default = defineCommand4({
+var export_command_default = defineCommand6({
   meta: {
     name: "export",
     description: "Export mcpman config, lockfile, vault, and plugins to a portable JSON file"
@@ -1574,29 +2084,29 @@ var export_command_default = defineCommand4({
   },
   run({ args }) {
     const outputFile = args.output || DEFAULT_OUTPUT;
-    const outputPath = path5.resolve(outputFile);
+    const outputPath = path7.resolve(outputFile);
     const bundle = createExportBundle({
       includeVault: !args["no-vault"],
       includePlugins: !args["no-plugins"]
     });
     const serverCount = Object.keys(bundle.lockfile.servers).length;
     const configKeys = Object.keys(bundle.config).length;
-    fs6.writeFileSync(outputPath, JSON.stringify(bundle, null, 2), "utf-8");
-    console.log(`${pc4.green("\u2713")} Exported to ${pc4.bold(outputFile)}`);
-    console.log(pc4.dim(`  Config keys: ${configKeys}`));
-    console.log(pc4.dim(`  Servers: ${serverCount}`));
-    console.log(pc4.dim(`  Vault: ${bundle.vault ? "included" : "excluded"}`));
-    console.log(pc4.dim(`  Plugins: ${bundle.plugins?.length ?? 0}`));
+    fs7.writeFileSync(outputPath, JSON.stringify(bundle, null, 2), "utf-8");
+    console.log(`${pc6.green("\u2713")} Exported to ${pc6.bold(outputFile)}`);
+    console.log(pc6.dim(`  Config keys: ${configKeys}`));
+    console.log(pc6.dim(`  Servers: ${serverCount}`));
+    console.log(pc6.dim(`  Vault: ${bundle.vault ? "included" : "excluded"}`));
+    console.log(pc6.dim(`  Plugins: ${bundle.plugins?.length ?? 0}`));
   }
 });
 
 // src/commands/import-command.ts
-import fs7 from "fs";
-import path6 from "path";
+import fs8 from "fs";
+import path8 from "path";
 import * as p3 from "@clack/prompts";
-import { defineCommand as defineCommand5 } from "citty";
-import pc5 from "picocolors";
-var import_command_default = defineCommand5({
+import { defineCommand as defineCommand7 } from "citty";
+import pc7 from "picocolors";
+var import_command_default = defineCommand7({
   meta: {
     name: "import",
     description: "Import mcpman config, lockfile, vault, and plugins from an export file"
@@ -1619,21 +2129,21 @@ var import_command_default = defineCommand5({
     }
   },
   async run({ args }) {
-    const filePath = path6.resolve(args.file);
-    if (!fs7.existsSync(filePath)) {
-      console.error(`${pc5.red("\u2717")} File not found: ${filePath}`);
+    const filePath = path8.resolve(args.file);
+    if (!fs8.existsSync(filePath)) {
+      console.error(`${pc7.red("\u2717")} File not found: ${filePath}`);
       process.exit(1);
     }
     let raw;
     try {
-      raw = JSON.parse(fs7.readFileSync(filePath, "utf-8"));
+      raw = JSON.parse(fs8.readFileSync(filePath, "utf-8"));
     } catch {
-      console.error(`${pc5.red("\u2717")} Invalid JSON in ${filePath}`);
+      console.error(`${pc7.red("\u2717")} Invalid JSON in ${filePath}`);
       process.exit(1);
     }
     const error2 = validateBundle(raw);
     if (error2) {
-      console.error(`${pc5.red("\u2717")} Invalid export bundle: ${error2}`);
+      console.error(`${pc7.red("\u2717")} Invalid export bundle: ${error2}`);
       process.exit(1);
     }
     const bundle = raw;
@@ -1643,16 +2153,16 @@ var import_command_default = defineCommand5({
     const hasVault = !!bundle.vault;
     const isDryRun = !!args["dry-run"];
     console.log("");
-    console.log(pc5.bold("Import summary:"));
-    console.log(pc5.dim(`  Source version: mcpman ${bundle.mcpmanVersion}`));
-    console.log(pc5.dim(`  Exported at: ${bundle.exportedAt}`));
-    console.log(`  Config keys: ${pc5.cyan(String(configKeys))}`);
-    console.log(`  Servers: ${pc5.cyan(String(serverCount))}`);
-    console.log(`  Vault: ${hasVault ? pc5.green("included") : pc5.dim("not included")}`);
-    console.log(`  Plugins: ${pc5.cyan(String(pluginCount))}`);
+    console.log(pc7.bold("Import summary:"));
+    console.log(pc7.dim(`  Source version: mcpman ${bundle.mcpmanVersion}`));
+    console.log(pc7.dim(`  Exported at: ${bundle.exportedAt}`));
+    console.log(`  Config keys: ${pc7.cyan(String(configKeys))}`);
+    console.log(`  Servers: ${pc7.cyan(String(serverCount))}`);
+    console.log(`  Vault: ${hasVault ? pc7.green("included") : pc7.dim("not included")}`);
+    console.log(`  Plugins: ${pc7.cyan(String(pluginCount))}`);
     console.log("");
     if (isDryRun) {
-      console.log(pc5.yellow("  [dry-run] No changes applied."));
+      console.log(pc7.yellow("  [dry-run] No changes applied."));
       return;
     }
     if (!args.yes) {
@@ -1666,18 +2176,18 @@ var import_command_default = defineCommand5({
       }
     }
     const summary = importBundle(bundle, { dryRun: false });
-    console.log(`${pc5.green("\u2713")} Import complete`);
-    console.log(pc5.dim(`  Config keys restored: ${summary.configKeys}`));
-    console.log(pc5.dim(`  Servers restored: ${summary.servers}`));
-    console.log(pc5.dim(`  Vault: ${summary.vaultImported ? "restored" : "skipped"}`));
-    console.log(pc5.dim(`  Plugins installed: ${summary.pluginsInstalled}`));
+    console.log(`${pc7.green("\u2713")} Import complete`);
+    console.log(pc7.dim(`  Config keys restored: ${summary.configKeys}`));
+    console.log(pc7.dim(`  Servers restored: ${summary.servers}`));
+    console.log(pc7.dim(`  Vault: ${summary.vaultImported ? "restored" : "skipped"}`));
+    console.log(pc7.dim(`  Plugins installed: ${summary.pluginsInstalled}`));
   }
 });
 
 // src/commands/info.ts
-import { defineCommand as defineCommand6 } from "citty";
+import { defineCommand as defineCommand8 } from "citty";
 import { createSpinner as createSpinner2 } from "nanospinner";
-import pc6 from "picocolors";
+import pc8 from "picocolors";
 
 // src/core/package-info.ts
 async function buildInfo(name, entry, source = "npm") {
@@ -1732,11 +2242,11 @@ async function getPackageInfo(serverName) {
 // src/commands/info.ts
 function colorRisk2(score, riskLevel) {
   const label = score !== null ? `${score}/100 (${riskLevel})` : riskLevel;
-  if (riskLevel === "LOW") return pc6.green(label);
-  if (riskLevel === "MEDIUM") return pc6.yellow(label);
-  if (riskLevel === "HIGH") return pc6.red(label);
-  if (riskLevel === "CRITICAL") return pc6.bold(pc6.red(label));
-  return pc6.dim(label);
+  if (riskLevel === "LOW") return pc8.green(label);
+  if (riskLevel === "MEDIUM") return pc8.yellow(label);
+  if (riskLevel === "HIGH") return pc8.red(label);
+  if (riskLevel === "CRITICAL") return pc8.bold(pc8.red(label));
+  return pc8.dim(label);
 }
 function formatDaysAgo(isoDate) {
   if (!isoDate) return "unknown";
@@ -1746,54 +2256,54 @@ function formatDaysAgo(isoDate) {
   return `${days} days ago`;
 }
 function printInfo(info2) {
-  const installedBadge = info2.isInstalled ? pc6.green(" [installed]") : pc6.dim(" [not installed]");
+  const installedBadge = info2.isInstalled ? pc8.green(" [installed]") : pc8.dim(" [not installed]");
   console.log();
-  console.log(pc6.bold(`  ${info2.name}@${info2.version}`) + installedBadge);
-  console.log(pc6.dim(`  ${"\u2500".repeat(60)}`));
-  console.log(`  ${pc6.dim("Source:")}   ${info2.source}`);
-  console.log(`  ${pc6.dim("Runtime:")}  ${info2.runtime}`);
+  console.log(pc8.bold(`  ${info2.name}@${info2.version}`) + installedBadge);
+  console.log(pc8.dim(`  ${"\u2500".repeat(60)}`));
+  console.log(`  ${pc8.dim("Source:")}   ${info2.source}`);
+  console.log(`  ${pc8.dim("Runtime:")}  ${info2.runtime}`);
   if (info2.description) {
-    console.log(`  ${pc6.dim("Description:")} ${info2.description}`);
+    console.log(`  ${pc8.dim("Description:")} ${info2.description}`);
   }
   if (info2.deprecated) {
-    console.log(`  ${pc6.red("[DEPRECATED]")} This package is deprecated`);
+    console.log(`  ${pc8.red("[DEPRECATED]")} This package is deprecated`);
   }
   console.log();
-  console.log(`  ${pc6.bold("Trust & Security")}`);
-  console.log(`  ${pc6.dim("Trust score:")}   ${colorRisk2(info2.trustScore, info2.riskLevel)}`);
+  console.log(`  ${pc8.bold("Trust & Security")}`);
+  console.log(`  ${pc8.dim("Trust score:")}   ${colorRisk2(info2.trustScore, info2.riskLevel)}`);
   if (info2.source === "npm") {
     console.log(
-      `  ${pc6.dim("Downloads:")}    ${info2.weeklyDownloads.toLocaleString()}/week  ${pc6.dim("|")}  ${pc6.dim("Age:")} ${info2.packageAge}d  ${pc6.dim("|")}  ${pc6.dim("Maintainers:")} ${info2.maintainerCount}`
+      `  ${pc8.dim("Downloads:")}    ${info2.weeklyDownloads.toLocaleString()}/week  ${pc8.dim("|")}  ${pc8.dim("Age:")} ${info2.packageAge}d  ${pc8.dim("|")}  ${pc8.dim("Maintainers:")} ${info2.maintainerCount}`
     );
     if (info2.lastPublish) {
-      console.log(`  ${pc6.dim("Last publish:")} ${formatDaysAgo(info2.lastPublish)}`);
+      console.log(`  ${pc8.dim("Last publish:")} ${formatDaysAgo(info2.lastPublish)}`);
     }
   } else {
-    console.log(pc6.dim("  (Trust data available for npm packages only)"));
+    console.log(pc8.dim("  (Trust data available for npm packages only)"));
   }
   console.log();
-  console.log(`  ${pc6.bold("Environment Variables")}`);
+  console.log(`  ${pc8.bold("Environment Variables")}`);
   if (info2.envVars.length > 0) {
     for (const env of info2.envVars) {
-      console.log(`    ${pc6.cyan("\u2022")} ${env}`);
+      console.log(`    ${pc8.cyan("\u2022")} ${env}`);
     }
   } else {
-    console.log(pc6.dim("    none required"));
+    console.log(pc8.dim("    none required"));
   }
   console.log();
-  console.log(`  ${pc6.bold("Installed Clients")}`);
+  console.log(`  ${pc8.bold("Installed Clients")}`);
   if (info2.installedClients.length > 0) {
     for (const client of info2.installedClients) {
-      console.log(`    ${pc6.green("\u2713")} ${client}`);
+      console.log(`    ${pc8.green("\u2713")} ${client}`);
     }
   } else {
-    console.log(pc6.dim("    Not installed in any client"));
+    console.log(pc8.dim("    Not installed in any client"));
   }
   console.log();
-  console.log(pc6.dim(`  ${"\u2500".repeat(60)}`));
+  console.log(pc8.dim(`  ${"\u2500".repeat(60)}`));
   console.log();
 }
-var info_default = defineCommand6({
+var info_default = defineCommand8({
   meta: {
     name: "info",
     description: "Show detailed metadata for an MCP server (installed or from registry)"
@@ -1817,13 +2327,13 @@ var info_default = defineCommand6({
       info2 = await getPackageInfo(args.server);
     } catch (err) {
       spinner5.error({ text: "Failed to fetch package info" });
-      console.error(pc6.red(String(err)));
+      console.error(pc8.red(String(err)));
       process.exit(1);
     }
     if (!info2) {
       spinner5.error({ text: `Package not found: ${args.server}` });
       console.log(
-        pc6.dim(`
+        pc8.dim(`
   "${args.server}" was not found in the npm registry or your lockfile.
 `)
       );
@@ -1839,10 +2349,10 @@ var info_default = defineCommand6({
 });
 
 // src/commands/init.ts
-import path7 from "path";
+import path9 from "path";
 import * as p4 from "@clack/prompts";
-import { defineCommand as defineCommand7 } from "citty";
-var init_default = defineCommand7({
+import { defineCommand as defineCommand9 } from "citty";
+var init_default = defineCommand9({
   meta: {
     name: "init",
     description: "Initialize mcpman.lock in the current project"
@@ -1858,7 +2368,7 @@ var init_default = defineCommand7({
   async run({ args }) {
     const nonInteractive = args.yes || !process.stdout.isTTY;
     p4.intro("mcpman init");
-    const targetPath = path7.join(process.cwd(), LOCKFILE_NAME);
+    const targetPath = path9.join(process.cwd(), LOCKFILE_NAME);
     const existing = findLockfile();
     if (existing) {
       if (nonInteractive) {
@@ -1942,7 +2452,7 @@ var init_default = defineCommand7({
 
 // src/commands/install.ts
 import * as p7 from "@clack/prompts";
-import { defineCommand as defineCommand8 } from "citty";
+import { defineCommand as defineCommand10 } from "citty";
 
 // src/core/installer.ts
 import * as p6 from "@clack/prompts";
@@ -2094,7 +2604,7 @@ async function installServer(input, options = {}) {
 }
 
 // src/utils/logger.ts
-import pc7 from "picocolors";
+import pc9 from "picocolors";
 var noColor = process.env.NO_COLOR !== void 0 || process.argv.includes("--no-color");
 var isVerbose = process.argv.includes("--verbose");
 var isJson = process.argv.includes("--json");
@@ -2103,18 +2613,18 @@ function colorize(fn, text2) {
 }
 function info(message) {
   if (isJson) return;
-  console.log(`${colorize(pc7.cyan, "i")} ${message}`);
+  console.log(`${colorize(pc9.cyan, "i")} ${message}`);
 }
 function error(message) {
   if (isJson) return;
-  console.error(`${colorize(pc7.red, "\u2717")} ${message}`);
+  console.error(`${colorize(pc9.red, "\u2717")} ${message}`);
 }
 function json(data) {
   console.log(JSON.stringify(data, null, 2));
 }
 
 // src/commands/install.ts
-var install_default = defineCommand8({
+var install_default = defineCommand10({
   meta: {
     name: "install",
     description: "Install an MCP server into one or more AI clients"
@@ -2175,28 +2685,228 @@ async function restoreFromLockfile() {
   p7.outro("Restore complete.");
 }
 
-// src/commands/list.ts
-import { defineCommand as defineCommand9 } from "citty";
-import pc8 from "picocolors";
-var STATUS_ICON = {
-  healthy: pc8.green("\u25CF"),
-  unhealthy: pc8.red("\u25CF"),
-  unknown: pc8.dim("\u25CB")
-};
-var list_default = defineCommand9({
-  meta: {
-    name: "list",
-    description: "List installed MCP servers"
-  },
-  args: {
-    client: {
-      type: "string",
-      description: "Filter by client (claude, cursor, vscode, windsurf)"
-    },
-    json: {
-      type: "boolean",
-      description: "Output as JSON",
-      default: false
+// src/commands/link.ts
+import path11 from "path";
+import { defineCommand as defineCommand11 } from "citty";
+import pc10 from "picocolors";
+
+// src/core/link-service.ts
+import fs9 from "fs";
+import path10 from "path";
+function detectLocalServer(dir) {
+  if (!fs9.existsSync(dir)) {
+    throw new Error(`Directory does not exist: ${dir}`);
+  }
+  const pkgPath = path10.join(dir, "package.json");
+  if (fs9.existsSync(pkgPath)) {
+    return detectNodeServer(dir, pkgPath);
+  }
+  const pyprojectPath = path10.join(dir, "pyproject.toml");
+  if (fs9.existsSync(pyprojectPath)) {
+    return detectPythonServer(dir, pyprojectPath);
+  }
+  throw new Error(
+    `No package.json or pyproject.toml found in '${dir}'. Is this an MCP server project?`
+  );
+}
+function detectNodeServer(dir, pkgPath) {
+  const raw = fs9.readFileSync(pkgPath, "utf-8");
+  const pkg = JSON.parse(raw);
+  const name = String(pkg.name ?? path10.basename(dir));
+  const version = String(pkg.version ?? "0.0.0");
+  let entryPoint = null;
+  if (pkg.bin) {
+    if (typeof pkg.bin === "string") {
+      entryPoint = path10.resolve(dir, pkg.bin);
+    } else if (typeof pkg.bin === "object" && pkg.bin !== null) {
+      const binObj = pkg.bin;
+      const firstBin = Object.values(binObj)[0];
+      if (firstBin) entryPoint = path10.resolve(dir, firstBin);
+    }
+  }
+  if (!entryPoint && pkg.main) {
+    entryPoint = path10.resolve(dir, String(pkg.main));
+  }
+  if (!entryPoint) {
+    const candidates = ["src/index.ts", "src/index.js", "index.ts", "index.js"];
+    for (const c of candidates) {
+      const candidate = path10.join(dir, c);
+      if (fs9.existsSync(candidate)) {
+        entryPoint = candidate;
+        break;
+      }
+    }
+  }
+  if (!entryPoint) {
+    throw new Error(`Cannot determine entry point for Node server in '${dir}'.`);
+  }
+  const isTs = entryPoint.endsWith(".ts");
+  const command = isTs ? "npx" : "node";
+  const args = isTs ? ["tsx", entryPoint] : [entryPoint];
+  const mcpField = pkg.mcp;
+  const envVars = [];
+  if (mcpField?.env && Array.isArray(mcpField.env)) {
+    for (const e of mcpField.env) {
+      if (typeof e === "string") envVars.push(e);
+      else if (typeof e === "object" && e !== null && "name" in e) {
+        envVars.push(String(e.name));
+      }
+    }
+  }
+  return { name, version, command, args, envVars, absolutePath: dir, runtime: "node" };
+}
+function detectPythonServer(dir, pyprojectPath) {
+  const raw = fs9.readFileSync(pyprojectPath, "utf-8");
+  const name = extractTomlValue(raw, "name") ?? path10.basename(dir);
+  const version = extractTomlValue(raw, "version") ?? "0.0.0";
+  let pythonCmd = "python3";
+  const venvPython = path10.join(dir, ".venv", "bin", "python");
+  if (fs9.existsSync(venvPython)) {
+    pythonCmd = venvPython;
+  }
+  const entryCandidate = [
+    path10.join(dir, "main.py"),
+    path10.join(dir, name.replace(/-/g, "_"), "main.py"),
+    path10.join(dir, "__main__.py")
+  ].find((p12) => fs9.existsSync(p12));
+  const entryPoint = entryCandidate ?? path10.join(dir, "main.py");
+  return {
+    name,
+    version,
+    command: pythonCmd,
+    args: [entryPoint],
+    envVars: [],
+    absolutePath: dir,
+    runtime: "python"
+  };
+}
+function extractTomlValue(content, key) {
+  const match = content.match(new RegExp(`^${key}\\s*=\\s*"([^"]+)"`, "m"));
+  return match ? match[1] : null;
+}
+async function registerLinkedServer(linkResult, clients, lockfilePath, nameOverride) {
+  const serverName = nameOverride ?? linkResult.name;
+  const registered = [];
+  for (const client of clients) {
+    try {
+      await client.addServer(serverName, {
+        command: linkResult.command,
+        args: linkResult.args
+      });
+      registered.push(client.type);
+    } catch {
+    }
+  }
+  const lockEntry = {
+    version: linkResult.version,
+    source: "local",
+    resolved: linkResult.absolutePath,
+    integrity: "local",
+    runtime: linkResult.runtime,
+    command: linkResult.command,
+    args: linkResult.args,
+    envVars: linkResult.envVars,
+    installedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    clients: registered
+  };
+  const existing = readLockfile(lockfilePath);
+  existing.servers[serverName] = lockEntry;
+  const { writeLockfile: writeLockfile2 } = await import("./lockfile-RBA7HB24.js");
+  writeLockfile2(existing, lockfilePath);
+  return registered;
+}
+
+// src/commands/link.ts
+var link_default = defineCommand11({
+  meta: {
+    name: "link",
+    description: "Register a local MCP server directory with AI clients"
+  },
+  args: {
+    dir: {
+      type: "positional",
+      description: "Path to local MCP server directory (default: .)",
+      required: false
+    },
+    client: {
+      type: "string",
+      description: "Register with specific client only (claude-desktop, cursor, vscode, windsurf)",
+      alias: "c"
+    },
+    name: {
+      type: "string",
+      description: "Override the detected server name",
+      alias: "n"
+    }
+  },
+  async run({ args }) {
+    const dirArg = args.dir ?? ".";
+    const clientFilter = args.client;
+    const nameOverride = args.name;
+    const absoluteDir = path11.resolve(dirArg);
+    let linkResult;
+    try {
+      linkResult = detectLocalServer(absoluteDir);
+    } catch (err) {
+      console.error(pc10.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+      process.exit(1);
+    }
+    const serverName = nameOverride ?? linkResult.name;
+    console.log(pc10.dim(`
+  Detected: ${pc10.cyan(serverName)} (${linkResult.runtime})`));
+    console.log(pc10.dim(`  Path: ${absoluteDir}`));
+    console.log(pc10.dim(`  Command: ${linkResult.command} ${linkResult.args.join(" ")}`));
+    const allClients = await getInstalledClients();
+    const clients = clientFilter ? allClients.filter((c) => c.type === clientFilter) : allClients;
+    if (clientFilter && clients.length === 0) {
+      console.error(pc10.red(`  Error: Unknown client '${clientFilter}'.`));
+      process.exit(1);
+    }
+    let registered;
+    try {
+      registered = await registerLinkedServer(linkResult, clients, void 0, nameOverride);
+    } catch (err) {
+      console.error(pc10.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+      process.exit(1);
+    }
+    if (registered.length === 0) {
+      console.log(pc10.yellow("  Warning: No clients registered. Are any AI clients installed?"));
+      console.log(pc10.dim(`  Server saved to lockfile with source "local".`));
+    } else {
+      console.log(pc10.green(`
+  Linked ${pc10.bold(serverName)} to: ${registered.join(", ")}
+`));
+      console.log(pc10.dim(`  Run ${pc10.cyan("mcpman list")} to verify.`));
+      console.log(
+        pc10.dim(`  Run ${pc10.cyan(`mcpman watch ${serverName}`)} to start with auto-restart.`)
+      );
+    }
+    console.log();
+  }
+});
+
+// src/commands/list.ts
+import { defineCommand as defineCommand12 } from "citty";
+import pc11 from "picocolors";
+var STATUS_ICON = {
+  healthy: pc11.green("\u25CF"),
+  unhealthy: pc11.red("\u25CF"),
+  unknown: pc11.dim("\u25CB")
+};
+var list_default = defineCommand12({
+  meta: {
+    name: "list",
+    description: "List installed MCP servers"
+  },
+  args: {
+    client: {
+      type: "string",
+      description: "Filter by client (claude, cursor, vscode, windsurf)"
+    },
+    json: {
+      type: "boolean",
+      description: "Output as JSON",
+      default: false
     }
   },
   async run({ args }) {
@@ -2204,8 +2914,8 @@ var list_default = defineCommand9({
     if (servers.length === 0) {
       const filter = args.client ? ` for client "${args.client}"` : "";
       console.log(
-        pc8.dim(
-          `No MCP servers installed${filter}. Run ${pc8.cyan("mcpman install <server>")} to get started.`
+        pc11.dim(
+          `No MCP servers installed${filter}. Run ${pc11.cyan("mcpman install <server>")} to get started.`
         )
       );
       return;
@@ -2231,9 +2941,9 @@ var list_default = defineCommand9({
     const nameWidth = Math.max(4, ...withStatus.map((s) => s.name.length));
     const clientsWidth = Math.max(7, ...withStatus.map((s) => formatClients(s.clients).length));
     const header = `  ${pad("NAME", nameWidth)}  ${pad("CLIENT(S)", clientsWidth)}  ${pad("COMMAND", 20)}  STATUS`;
-    console.log(pc8.dim(header));
+    console.log(pc11.dim(header));
     console.log(
-      pc8.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(clientsWidth)}  ${"-".repeat(20)}  ------`)
+      pc11.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(clientsWidth)}  ${"-".repeat(20)}  ------`)
     );
     for (const s of withStatus) {
       const icon = STATUS_ICON[s.status];
@@ -2248,7 +2958,7 @@ var list_default = defineCommand9({
     }
     const clientSet = new Set(withStatus.flatMap((s) => s.clients));
     console.log(
-      pc8.dim(
+      pc11.dim(
         `
   ${withStatus.length} server${withStatus.length !== 1 ? "s" : ""} \xB7 ${clientSet.size} client${clientSet.size !== 1 ? "s" : ""}`
       )
@@ -2273,9 +2983,9 @@ function formatClients(clients) {
 
 // src/commands/logs.ts
 import { spawn as spawn2 } from "child_process";
-import { defineCommand as defineCommand10 } from "citty";
-import pc9 from "picocolors";
-var logs_default = defineCommand10({
+import { defineCommand as defineCommand13 } from "citty";
+import pc12 from "picocolors";
+var logs_default = defineCommand13({
   meta: {
     name: "logs",
     description: "Stream stdout/stderr from an MCP server"
@@ -2298,7 +3008,7 @@ var logs_default = defineCommand10({
     const lockfile = readLockfile();
     const entry = lockfile.servers[serverName];
     if (!entry) {
-      console.error(pc9.red(`  Error: Server '${serverName}' is not installed.`));
+      console.error(pc12.red(`  Error: Server '${serverName}' is not installed.`));
       process.exit(1);
     }
     const lockfileEnv = parseEnvFlags(entry.envVars);
@@ -2308,24 +3018,24 @@ var logs_default = defineCommand10({
       ...lockfileEnv,
       ...vaultEnv
     };
-    console.log(pc9.dim(`  Streaming logs for ${pc9.cyan(serverName)}... (Ctrl+C to stop)
+    console.log(pc12.dim(`  Streaming logs for ${pc12.cyan(serverName)}... (Ctrl+C to stop)
 `));
     const child = spawn2(entry.command, entry.args, {
       env: finalEnv,
       stdio: ["pipe", "pipe", "pipe"]
     });
     child.stdout?.on("data", (chunk) => {
-      process.stdout.write(pc9.dim("[stdout] ") + chunk.toString());
+      process.stdout.write(pc12.dim("[stdout] ") + chunk.toString());
     });
     child.stderr?.on("data", (chunk) => {
-      process.stderr.write(pc9.yellow("[stderr] ") + chunk.toString());
+      process.stderr.write(pc12.yellow("[stderr] ") + chunk.toString());
     });
     child.on("error", (err) => {
-      console.error(pc9.red(`  Failed to start '${serverName}': ${err.message}`));
+      console.error(pc12.red(`  Failed to start '${serverName}': ${err.message}`));
       process.exit(1);
     });
     child.on("close", (code) => {
-      console.log(pc9.dim(`
+      console.log(pc12.dim(`
   Process exited with code ${code ?? 0}`));
       process.exit(code ?? 0);
     });
@@ -2350,10 +3060,10 @@ async function loadVaultSecrets(serverName) {
 }
 
 // src/commands/plugin.ts
-import { defineCommand as defineCommand11 } from "citty";
+import { defineCommand as defineCommand14 } from "citty";
 import { createSpinner as createSpinner3 } from "nanospinner";
-import pc10 from "picocolors";
-var addCommand = defineCommand11({
+import pc13 from "picocolors";
+var addCommand = defineCommand14({
   meta: { name: "add", description: "Install a plugin package" },
   args: {
     package: {
@@ -2371,23 +3081,23 @@ var addCommand = defineCommand11({
       spinner5.stop();
       if (loaded) {
         console.log(
-          `${pc10.green("\u2713")} Plugin ${pc10.bold(loaded.name)} installed (prefix: ${pc10.cyan(loaded.prefix)})`
+          `${pc13.green("\u2713")} Plugin ${pc13.bold(loaded.name)} installed (prefix: ${pc13.cyan(loaded.prefix)})`
         );
       } else {
         console.log(
-          `${pc10.yellow("\u26A0")} Package ${pc10.bold(pkg)} installed but does not export a valid mcpman plugin.`
+          `${pc13.yellow("\u26A0")} Package ${pc13.bold(pkg)} installed but does not export a valid mcpman plugin.`
         );
       }
     } catch (err) {
       spinner5.stop();
       console.error(
-        `${pc10.red("\u2717")} Failed to install plugin: ${err instanceof Error ? err.message : String(err)}`
+        `${pc13.red("\u2717")} Failed to install plugin: ${err instanceof Error ? err.message : String(err)}`
       );
       process.exit(1);
     }
   }
 });
-var removeCommand = defineCommand11({
+var removeCommand = defineCommand14({
   meta: { name: "remove", description: "Uninstall a plugin package" },
   args: {
     package: {
@@ -2400,46 +3110,46 @@ var removeCommand = defineCommand11({
     const pkg = args.package;
     const installed = listPluginPackages();
     if (!installed.includes(pkg)) {
-      console.log(pc10.dim(`Plugin "${pkg}" is not installed.`));
+      console.log(pc13.dim(`Plugin "${pkg}" is not installed.`));
       return;
     }
     try {
       removePluginPackage(pkg);
-      console.log(`${pc10.green("\u2713")} Plugin ${pc10.bold(pkg)} removed.`);
+      console.log(`${pc13.green("\u2713")} Plugin ${pc13.bold(pkg)} removed.`);
     } catch (err) {
       console.error(
-        `${pc10.red("\u2717")} Failed to remove plugin: ${err instanceof Error ? err.message : String(err)}`
+        `${pc13.red("\u2717")} Failed to remove plugin: ${err instanceof Error ? err.message : String(err)}`
       );
       process.exit(1);
     }
   }
 });
-var listCommand2 = defineCommand11({
+var listCommand2 = defineCommand14({
   meta: { name: "list", description: "List installed plugins" },
   run() {
     const packages = listPluginPackages();
     if (packages.length === 0) {
-      console.log(pc10.dim("No plugins installed. Use `mcpman plugin add <package>`."));
+      console.log(pc13.dim("No plugins installed. Use `mcpman plugin add <package>`."));
       return;
     }
     console.log("");
-    console.log(pc10.bold("Installed plugins:"));
+    console.log(pc13.bold("Installed plugins:"));
     console.log("");
     for (const pkg of packages) {
       const loaded = loadPlugin(pkg);
       if (loaded) {
         console.log(
-          `  ${pc10.green("\u25CF")} ${pc10.bold(loaded.name)}  prefix: ${pc10.cyan(loaded.prefix)}  pkg: ${pc10.dim(pkg)}`
+          `  ${pc13.green("\u25CF")} ${pc13.bold(loaded.name)}  prefix: ${pc13.cyan(loaded.prefix)}  pkg: ${pc13.dim(pkg)}`
         );
       } else {
-        console.log(`  ${pc10.yellow("\u25CF")} ${pc10.dim(pkg)}  ${pc10.yellow("(failed to load)")}`);
+        console.log(`  ${pc13.yellow("\u25CF")} ${pc13.dim(pkg)}  ${pc13.yellow("(failed to load)")}`);
       }
     }
     console.log("");
-    console.log(pc10.dim(`  ${packages.length} plugin${packages.length !== 1 ? "s" : ""} installed`));
+    console.log(pc13.dim(`  ${packages.length} plugin${packages.length !== 1 ? "s" : ""} installed`));
   }
 });
-var plugin_default = defineCommand11({
+var plugin_default = defineCommand14({
   meta: {
     name: "plugin",
     description: "Manage mcpman plugins for custom registries"
@@ -2452,22 +3162,22 @@ var plugin_default = defineCommand11({
 });
 
 // src/commands/profiles.ts
-import { defineCommand as defineCommand12 } from "citty";
-import pc11 from "picocolors";
+import { defineCommand as defineCommand15 } from "citty";
+import pc14 from "picocolors";
 
 // src/core/profile-service.ts
-import fs8 from "fs";
-import path8 from "path";
+import fs10 from "fs";
+import path12 from "path";
 function ensureDir(dir = getProfilesDir()) {
-  fs8.mkdirSync(dir, { recursive: true });
+  fs10.mkdirSync(dir, { recursive: true });
 }
 function profilePath(name, dir = getProfilesDir()) {
-  return path8.join(dir, `${name}.json`);
+  return path12.join(dir, `${name}.json`);
 }
 function createProfile(name, description = "", dir = getProfilesDir()) {
   ensureDir(dir);
   const filePath = profilePath(name, dir);
-  if (fs8.existsSync(filePath)) {
+  if (fs10.existsSync(filePath)) {
     throw new Error(`Profile '${name}' already exists. Delete it first or use a different name.`);
   }
   const lockfile = readLockfile();
@@ -2477,16 +3187,16 @@ function createProfile(name, description = "", dir = getProfilesDir()) {
     createdAt: (/* @__PURE__ */ new Date()).toISOString(),
     servers: lockfile.servers
   };
-  fs8.writeFileSync(filePath, JSON.stringify(profile, null, 2), "utf-8");
+  fs10.writeFileSync(filePath, JSON.stringify(profile, null, 2), "utf-8");
   return profile;
 }
 function listProfiles(dir = getProfilesDir()) {
   ensureDir(dir);
-  const files = fs8.readdirSync(dir).filter((f) => f.endsWith(".json"));
+  const files = fs10.readdirSync(dir).filter((f) => f.endsWith(".json"));
   const profiles = [];
   for (const file of files) {
     try {
-      const raw = fs8.readFileSync(path8.join(dir, file), "utf-8");
+      const raw = fs10.readFileSync(path12.join(dir, file), "utf-8");
       const data = JSON.parse(raw);
       profiles.push(data);
     } catch {
@@ -2496,9 +3206,9 @@ function listProfiles(dir = getProfilesDir()) {
 }
 function loadProfile(name, dir = getProfilesDir()) {
   const filePath = profilePath(name, dir);
-  if (!fs8.existsSync(filePath)) return null;
+  if (!fs10.existsSync(filePath)) return null;
   try {
-    const raw = fs8.readFileSync(filePath, "utf-8");
+    const raw = fs10.readFileSync(filePath, "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -2506,13 +3216,13 @@ function loadProfile(name, dir = getProfilesDir()) {
 }
 function deleteProfile(name, dir = getProfilesDir()) {
   const filePath = profilePath(name, dir);
-  if (!fs8.existsSync(filePath)) return false;
-  fs8.unlinkSync(filePath);
+  if (!fs10.existsSync(filePath)) return false;
+  fs10.unlinkSync(filePath);
   return true;
 }
 
 // src/commands/profiles.ts
-var profiles_default = defineCommand12({
+var profiles_default = defineCommand15({
   meta: {
     name: "profiles",
     description: "Manage named server configuration profiles"
@@ -2541,16 +3251,16 @@ var profiles_default = defineCommand12({
       case "create": {
         if (!name) {
           console.error(
-            pc11.red("  Error: Profile name required. Usage: mcpman profiles create <name>")
+            pc14.red("  Error: Profile name required. Usage: mcpman profiles create <name>")
           );
           process.exit(1);
         }
         try {
           const profile = createProfile(name, args.description ?? "");
           const count = Object.keys(profile.servers).length;
-          console.log(pc11.green(`  \u2713 Profile '${name}' created with ${count} server(s).`));
+          console.log(pc14.green(`  \u2713 Profile '${name}' created with ${count} server(s).`));
         } catch (err) {
-          console.error(pc11.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+          console.error(pc14.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
           process.exit(1);
         }
         break;
@@ -2558,38 +3268,38 @@ var profiles_default = defineCommand12({
       case "switch": {
         if (!name) {
           console.error(
-            pc11.red("  Error: Profile name required. Usage: mcpman profiles switch <name>")
+            pc14.red("  Error: Profile name required. Usage: mcpman profiles switch <name>")
           );
           process.exit(1);
         }
         const profile = loadProfile(name);
         if (!profile) {
-          console.error(pc11.red(`  Error: Profile '${name}' not found.`));
+          console.error(pc14.red(`  Error: Profile '${name}' not found.`));
           process.exit(1);
         }
         const lockData = { lockfileVersion: 1, servers: profile.servers };
         writeLockfile(lockData);
         const count = Object.keys(profile.servers).length;
-        console.log(pc11.green(`  \u2713 Switched to profile '${name}' (${count} servers).`));
-        console.log(pc11.dim("  Run mcpman sync to apply to all clients."));
+        console.log(pc14.green(`  \u2713 Switched to profile '${name}' (${count} servers).`));
+        console.log(pc14.dim("  Run mcpman sync to apply to all clients."));
         break;
       }
       case "list": {
         const profiles = listProfiles();
         if (profiles.length === 0) {
           console.log(
-            pc11.dim("  No profiles saved. Create one with: mcpman profiles create <name>")
+            pc14.dim("  No profiles saved. Create one with: mcpman profiles create <name>")
           );
           return;
         }
-        console.log(pc11.bold(`
+        console.log(pc14.bold(`
   Profiles (${profiles.length})
 `));
         for (const p12 of profiles) {
           const count = Object.keys(p12.servers).length;
-          const desc = p12.description ? pc11.dim(` \u2014 ${p12.description}`) : "";
+          const desc = p12.description ? pc14.dim(` \u2014 ${p12.description}`) : "";
           console.log(
-            `  ${pc11.cyan("\u25CF")} ${pc11.bold(p12.name)}  ${pc11.dim(`${count} server(s)`)}${desc}`
+            `  ${pc14.cyan("\u25CF")} ${pc14.bold(p12.name)}  ${pc14.dim(`${count} server(s)`)}${desc}`
           );
         }
         console.log();
@@ -2598,32 +3308,200 @@ var profiles_default = defineCommand12({
       case "delete": {
         if (!name) {
           console.error(
-            pc11.red("  Error: Profile name required. Usage: mcpman profiles delete <name>")
+            pc14.red("  Error: Profile name required. Usage: mcpman profiles delete <name>")
           );
           process.exit(1);
         }
         const deleted = deleteProfile(name);
         if (deleted) {
-          console.log(pc11.green(`  \u2713 Profile '${name}' deleted.`));
+          console.log(pc14.green(`  \u2713 Profile '${name}' deleted.`));
         } else {
-          console.error(pc11.red(`  Error: Profile '${name}' not found.`));
+          console.error(pc14.red(`  Error: Profile '${name}' not found.`));
           process.exit(1);
         }
         break;
       }
       default:
         console.error(
-          pc11.red(`  Unknown action '${action}'. Use: create, switch, list, or delete.`)
+          pc14.red(`  Unknown action '${action}'. Use: create, switch, list, or delete.`)
         );
         process.exit(1);
     }
   }
 });
 
+// src/commands/registry.ts
+import { defineCommand as defineCommand16 } from "citty";
+import pc15 from "picocolors";
+
+// src/core/registry-manager.ts
+var BUILTIN_REGISTRIES = [
+  { name: "npm", url: "https://registry.npmjs.org", builtin: true },
+  { name: "smithery", url: "https://registry.smithery.ai", builtin: true }
+];
+function validateUrl(url) {
+  try {
+    new URL(url);
+  } catch {
+    throw new Error(
+      `Invalid URL: "${url}". Must be a valid URL (e.g. https://registry.example.com)`
+    );
+  }
+}
+function readCustomRegistries(configPath) {
+  const config = readConfig(configPath);
+  const raw = config.registries;
+  if (!Array.isArray(raw)) return [];
+  return raw.filter((r) => !r.builtin);
+}
+function writeCustomRegistries(entries, configPath) {
+  const config = readConfig(configPath);
+  config.registries = entries;
+  writeConfig(config, configPath);
+}
+function getRegistries(configPath) {
+  const custom = readCustomRegistries(configPath);
+  return [...BUILTIN_REGISTRIES, ...custom];
+}
+function addRegistry(name, url, configPath) {
+  validateUrl(url);
+  const all = getRegistries(configPath);
+  if (all.some((r) => r.name === name)) {
+    throw new Error(`Registry '${name}' already exists. Use a different name or remove it first.`);
+  }
+  const custom = readCustomRegistries(configPath);
+  custom.push({ name, url, builtin: false });
+  writeCustomRegistries(custom, configPath);
+}
+function removeRegistry(name, configPath) {
+  if (BUILTIN_REGISTRIES.some((r) => r.name === name)) {
+    throw new Error(`Cannot remove built-in registry '${name}'.`);
+  }
+  const custom = readCustomRegistries(configPath);
+  const idx = custom.findIndex((r) => r.name === name);
+  if (idx === -1) {
+    throw new Error(`Registry '${name}' not found.`);
+  }
+  custom.splice(idx, 1);
+  writeCustomRegistries(custom, configPath);
+}
+function setDefaultRegistry(name, configPath) {
+  const all = getRegistries(configPath);
+  if (!all.some((r) => r.name === name)) {
+    throw new Error(
+      `Registry '${name}' not found. Add it first with: mcpman registry add ${name} <url>`
+    );
+  }
+  const config = readConfig(configPath);
+  config.defaultRegistry = name;
+  writeConfig(config, configPath);
+}
+function getDefaultRegistry(configPath) {
+  const config = readConfig(configPath);
+  return String(config.defaultRegistry ?? "npm");
+}
+
+// src/commands/registry.ts
+var registry_default = defineCommand16({
+  meta: {
+    name: "registry",
+    description: "Manage custom registry URLs"
+  },
+  args: {
+    action: {
+      type: "positional",
+      description: "Action: list, add, remove, set-default",
+      required: true
+    },
+    name: {
+      type: "positional",
+      description: "Registry name (for add/remove/set-default)",
+      required: false
+    },
+    url: {
+      type: "positional",
+      description: "Registry URL (for add)",
+      required: false
+    }
+  },
+  async run({ args }) {
+    const action = args.action.toLowerCase();
+    const name = args.name;
+    const url = args.url;
+    switch (action) {
+      case "list": {
+        const registries = getRegistries();
+        const defaultName = getDefaultRegistry();
+        console.log(pc15.bold("\n  Registries\n"));
+        for (const r of registries) {
+          const isDefault = r.name === defaultName;
+          const defaultTag = isDefault ? pc15.green(" (default)") : "";
+          const builtinTag = r.builtin ? pc15.dim(" [builtin]") : "";
+          console.log(
+            `  ${isDefault ? pc15.green("\u25CF") : pc15.dim("\u25CB")} ${pc15.bold(r.name)}${defaultTag}${builtinTag}`
+          );
+          console.log(`    ${pc15.dim(r.url)}`);
+        }
+        console.log();
+        break;
+      }
+      case "add": {
+        if (!name) {
+          console.error(pc15.red("  Error: Usage: mcpman registry add <name> <url>"));
+          process.exit(1);
+        }
+        if (!url) {
+          console.error(pc15.red("  Error: Usage: mcpman registry add <name> <url>"));
+          process.exit(1);
+        }
+        try {
+          addRegistry(name, url);
+          console.log(pc15.green(`  Added registry '${name}' \u2192 ${url}`));
+        } catch (err) {
+          console.error(pc15.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+          process.exit(1);
+        }
+        break;
+      }
+      case "remove": {
+        if (!name) {
+          console.error(pc15.red("  Error: Usage: mcpman registry remove <name>"));
+          process.exit(1);
+        }
+        try {
+          removeRegistry(name);
+          console.log(pc15.green(`  Removed registry '${name}'.`));
+        } catch (err) {
+          console.error(pc15.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+          process.exit(1);
+        }
+        break;
+      }
+      case "set-default": {
+        if (!name) {
+          console.error(pc15.red("  Error: Usage: mcpman registry set-default <name>"));
+          process.exit(1);
+        }
+        try {
+          setDefaultRegistry(name);
+          console.log(pc15.green(`  Default registry set to '${name}'.`));
+        } catch (err) {
+          console.error(pc15.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+          process.exit(1);
+        }
+        break;
+      }
+      default:
+        console.error(pc15.red(`  Unknown action '${action}'. Use: list, add, remove, set-default.`));
+        process.exit(1);
+    }
+  }
+});
+
 // src/commands/remove.ts
 import * as p8 from "@clack/prompts";
-import { defineCommand as defineCommand13 } from "citty";
-import pc12 from "picocolors";
+import { defineCommand as defineCommand17 } from "citty";
+import pc16 from "picocolors";
 var CLIENT_DISPLAY2 = {
   "claude-desktop": "Claude",
   cursor: "Cursor",
@@ -2633,7 +3511,7 @@ var CLIENT_DISPLAY2 = {
 function clientDisplayName(type) {
   return CLIENT_DISPLAY2[type] ?? type;
 }
-var remove_default = defineCommand13({
+var remove_default = defineCommand17({
   meta: {
     name: "remove",
     description: "Remove an MCP server from one or more AI clients"
@@ -2660,7 +3538,7 @@ var remove_default = defineCommand13({
     }
   },
   async run({ args }) {
-    p8.intro(pc12.bold("mcpman remove"));
+    p8.intro(pc16.bold("mcpman remove"));
     const serverName = args.server;
     const servers = await getInstalledServers();
     const match = servers.find((s) => s.name === serverName);
@@ -2670,7 +3548,7 @@ var remove_default = defineCommand13({
         (s) => s.name.includes(serverName) || serverName.includes(s.name)
       );
       if (similar.length > 0) {
-        p8.log.info(`Did you mean: ${similar.map((s) => pc12.cyan(s.name)).join(", ")}?`);
+        p8.log.info(`Did you mean: ${similar.map((s) => pc16.cyan(s.name)).join(", ")}?`);
       }
       p8.outro("Nothing to remove.");
       return;
@@ -2705,7 +3583,7 @@ var remove_default = defineCommand13({
     if (!args.yes) {
       const clientNames = targetClients.map(clientDisplayName).join(", ");
       const confirmed = await p8.confirm({
-        message: `Remove ${pc12.cyan(serverName)} from ${pc12.yellow(clientNames)}?`
+        message: `Remove ${pc16.cyan(serverName)} from ${pc16.yellow(clientNames)}?`
       });
       if (p8.isCancel(confirmed) || !confirmed) {
         p8.outro("Cancelled.");
@@ -2730,18 +3608,18 @@ var remove_default = defineCommand13({
     }
     if (errors.length > 0) {
       for (const e of errors) p8.log.error(e);
-      p8.outro(pc12.red("Completed with errors."));
+      p8.outro(pc16.red("Completed with errors."));
       process.exit(1);
     }
-    p8.outro(pc12.green(`Removed "${serverName}" successfully.`));
+    p8.outro(pc16.green(`Removed "${serverName}" successfully.`));
   }
 });
 
 // src/commands/run.ts
 import { spawn as spawn3 } from "child_process";
-import { defineCommand as defineCommand14 } from "citty";
-import pc13 from "picocolors";
-var run_default = defineCommand14({
+import { defineCommand as defineCommand18 } from "citty";
+import pc17 from "picocolors";
+var run_default = defineCommand18({
   meta: {
     name: "run",
     description: "Run an installed MCP server with vault secrets injected"
@@ -2763,8 +3641,8 @@ var run_default = defineCommand14({
     const lockfile = readLockfile();
     const entry = lockfile.servers[serverName];
     if (!entry) {
-      console.error(pc13.red(`  Error: Server '${serverName}' is not installed.`));
-      console.error(pc13.dim(`  Run ${pc13.cyan("mcpman install <server>")} to install it first.`));
+      console.error(pc17.red(`  Error: Server '${serverName}' is not installed.`));
+      console.error(pc17.dim(`  Run ${pc17.cyan("mcpman install <server>")} to install it first.`));
       process.exit(1);
     }
     const lockfileEnv = parseEnvFlags(entry.envVars);
@@ -2776,7 +3654,7 @@ var run_default = defineCommand14({
       ...vaultEnv,
       ...cliEnv
     };
-    console.log(pc13.dim(`  Running ${pc13.cyan(serverName)}...`));
+    console.log(pc17.dim(`  Running ${pc17.cyan(serverName)}...`));
     const child = spawn3(entry.command, entry.args, {
       env: finalEnv,
       stdio: "inherit"
@@ -2794,7 +3672,7 @@ var run_default = defineCommand14({
         resolve();
       });
       child.on("error", (err) => {
-        console.error(pc13.red(`  Failed to start '${serverName}': ${err.message}`));
+        console.error(pc17.red(`  Failed to start '${serverName}': ${err.message}`));
         process.exit(1);
         resolve();
       });
@@ -2810,15 +3688,15 @@ async function loadVaultSecrets2(serverName) {
     const password = await getMasterPassword();
     return getSecretsForServer(serverName, password);
   } catch {
-    console.warn(pc13.yellow("  Warning: Could not load vault secrets, continuing without them."));
+    console.warn(pc17.yellow("  Warning: Could not load vault secrets, continuing without them."));
     return {};
   }
 }
 
 // src/commands/search.ts
-import { defineCommand as defineCommand15 } from "citty";
+import { defineCommand as defineCommand19 } from "citty";
 import { createSpinner as createSpinner4 } from "nanospinner";
-import pc14 from "picocolors";
+import pc18 from "picocolors";
 
 // src/core/registry-search.ts
 var SEARCH_TIMEOUT_MS = 1e4;
@@ -2891,10 +3769,10 @@ function pad2(s, width) {
 function highlightMatch(name, query) {
   const idx = name.toLowerCase().indexOf(query.toLowerCase());
   if (idx === -1) return name;
-  return name.slice(0, idx) + pc14.yellow(name.slice(idx, idx + query.length)) + name.slice(idx + query.length);
+  return name.slice(0, idx) + pc18.yellow(name.slice(idx, idx + query.length)) + name.slice(idx + query.length);
 }
 function formatDownloads(n) {
-  if (!n) return pc14.dim("\u2014");
+  if (!n) return pc18.dim("\u2014");
   if (n >= 1e6) return `${(n / 1e6).toFixed(1)}M`;
   if (n >= 1e3) return `${(n / 1e3).toFixed(1)}k`;
   return String(n);
@@ -2905,9 +3783,9 @@ function printNpmResults(results, query) {
   const dlWidth = 9;
   const descMax = 50;
   const header = `  ${pad2("NAME", nameWidth)}  ${pad2("VERSION", verWidth)}  ${pad2("DOWNLOADS", dlWidth)}  DESCRIPTION`;
-  console.log(pc14.dim(header));
+  console.log(pc18.dim(header));
   console.log(
-    pc14.dim(
+    pc18.dim(
       `  ${"-".repeat(nameWidth)}  ${"-".repeat(verWidth)}  ${"-".repeat(dlWidth)}  ${"-".repeat(descMax)}`
     )
   );
@@ -2915,8 +3793,8 @@ function printNpmResults(results, query) {
     const name = highlightMatch(pad2(r.name, nameWidth), query);
     const ver = pad2(r.version, verWidth);
     const dl = pad2(formatDownloads(r.downloads), dlWidth);
-    const desc = truncate2(r.description || pc14.dim("(no description)"), descMax);
-    console.log(`  ${name}  ${pc14.dim(ver)}  ${dl}  ${desc}`);
+    const desc = truncate2(r.description || pc18.dim("(no description)"), descMax);
+    console.log(`  ${name}  ${pc18.dim(ver)}  ${dl}  ${desc}`);
   }
 }
 function printSmitheryResults(results, query) {
@@ -2924,19 +3802,19 @@ function printSmitheryResults(results, query) {
   const usesWidth = 8;
   const descMax = 50;
   const header = `  ${pad2("NAME", nameWidth)}  ${pad2("USES", usesWidth)}  DESCRIPTION`;
-  console.log(pc14.dim(header));
+  console.log(pc18.dim(header));
   console.log(
-    pc14.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(usesWidth)}  ${"-".repeat(descMax)}`)
+    pc18.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(usesWidth)}  ${"-".repeat(descMax)}`)
   );
   for (const r of results) {
     const name = highlightMatch(pad2(r.name, nameWidth), query);
     const uses = pad2(formatDownloads(r.useCount), usesWidth);
-    const badge = r.verified ? pc14.green(" \u2713") : "";
-    const desc = truncate2(r.description || pc14.dim("(no description)"), descMax);
+    const badge = r.verified ? pc18.green(" \u2713") : "";
+    const desc = truncate2(r.description || pc18.dim("(no description)"), descMax);
     console.log(`  ${name}${badge}  ${uses}  ${desc}`);
   }
 }
-var search_default = defineCommand15({
+var search_default = defineCommand19({
   meta: {
     name: "search",
     description: "Search for MCP servers on npm or Smithery registry"
@@ -2968,7 +3846,7 @@ var search_default = defineCommand15({
     const registry = args.registry.toLowerCase();
     const limit = Math.min(Math.max(1, Number.parseInt(args.limit, 10) || 20), 100);
     if (registry !== "npm" && registry !== "smithery") {
-      console.error(pc14.red(`  Unknown registry "${registry}". Use "npm" or "smithery".`));
+      console.error(pc18.red(`  Unknown registry "${registry}". Use "npm" or "smithery".`));
       process.exit(1);
     }
     const spinner5 = createSpinner4(`Searching ${registry} for "${query}"...`).start();
@@ -2976,20 +3854,20 @@ var search_default = defineCommand15({
       const results2 = await searchNpm(query, limit);
       spinner5.stop();
       if (results2.length === 0) {
-        console.log(pc14.dim(`
+        console.log(pc18.dim(`
   No results found for "${query}" on npm.
 `));
         return;
       }
       console.log(
-        pc14.bold(
+        pc18.bold(
           `
   mcpman search \u2014 npm (${results2.length} result${results2.length !== 1 ? "s" : ""})
 `
         )
       );
       printNpmResults(results2, query);
-      console.log(pc14.dim("\n  Install with: mcpman install <name>\n"));
+      console.log(pc18.dim("\n  Install with: mcpman install <name>\n"));
       if (args.all) {
         await printPluginResults(query, limit);
       }
@@ -2998,20 +3876,20 @@ var search_default = defineCommand15({
     const results = await searchSmithery(query, limit);
     spinner5.stop();
     if (results.length === 0) {
-      console.log(pc14.dim(`
+      console.log(pc18.dim(`
   No results found for "${query}" on Smithery.
 `));
       return;
     }
     console.log(
-      pc14.bold(
+      pc18.bold(
         `
   mcpman search \u2014 Smithery (${results.length} result${results.length !== 1 ? "s" : ""})
 `
       )
     );
     printSmitheryResults(results, query);
-    console.log(pc14.dim("\n  Install with: mcpman install <name>\n"));
+    console.log(pc18.dim("\n  Install with: mcpman install <name>\n"));
     if (args.all) {
       await printPluginResults(query, limit);
     }
@@ -3021,7 +3899,7 @@ async function printPluginResults(query, limit) {
   const pluginResults = await searchPlugins(query, limit);
   if (pluginResults.length === 0) return;
   console.log(
-    pc14.bold(
+    pc18.bold(
       `
   Plugins (${pluginResults.length} result${pluginResults.length !== 1 ? "s" : ""})
 `
@@ -3031,22 +3909,22 @@ async function printPluginResults(query, limit) {
   const srcWidth = Math.max(6, ...pluginResults.map((r) => r.source.length));
   const descMax = 50;
   const header = `  ${pad2("NAME", nameWidth)}  ${pad2("SOURCE", srcWidth)}  DESCRIPTION`;
-  console.log(pc14.dim(header));
+  console.log(pc18.dim(header));
   console.log(
-    pc14.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(srcWidth)}  ${"-".repeat(descMax)}`)
+    pc18.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(srcWidth)}  ${"-".repeat(descMax)}`)
   );
   for (const r of pluginResults) {
     const name = highlightMatch(pad2(r.name, nameWidth), query);
     const src = pad2(r.source, srcWidth);
-    const desc = truncate2(r.description || pc14.dim("(no description)"), descMax);
-    console.log(`  ${name}  ${pc14.dim(src)}  ${desc}`);
+    const desc = truncate2(r.description || pc18.dim("(no description)"), descMax);
+    console.log(`  ${name}  ${pc18.dim(src)}  ${desc}`);
   }
 }
 
 // src/commands/secrets.ts
 import * as p9 from "@clack/prompts";
-import { defineCommand as defineCommand16 } from "citty";
-import pc15 from "picocolors";
+import { defineCommand as defineCommand20 } from "citty";
+import pc19 from "picocolors";
 function maskValue(value) {
   if (value.length <= 8) return "***";
   return `${value.slice(0, 4)}***${value.slice(-3)}`;
@@ -3056,7 +3934,7 @@ function parseKeyValue(input) {
   if (idx <= 0) return null;
   return { key: input.slice(0, idx), value: input.slice(idx + 1) };
 }
-var setCommand2 = defineCommand16({
+var setCommand2 = defineCommand20({
   meta: { name: "set", description: "Store an encrypted secret for a server" },
   args: {
     server: {
@@ -3073,10 +3951,10 @@ var setCommand2 = defineCommand16({
   async run({ args }) {
     const parsed = parseKeyValue(args.keyvalue);
     if (!parsed) {
-      console.error(`${pc15.red("\u2717")} Invalid format. Expected KEY=VALUE`);
+      console.error(`${pc19.red("\u2717")} Invalid format. Expected KEY=VALUE`);
       process.exit(1);
     }
-    p9.intro(pc15.cyan("mcpman secrets set"));
+    p9.intro(pc19.cyan("mcpman secrets set"));
     const isNew = listSecrets(args.server).length === 0 || !listSecrets(args.server)[0]?.keys.includes(parsed.key);
     const vaultPath = (await import("./vault-service-UTZAV6N6.js")).getVaultPath();
     const vaultExists = (await import("fs")).existsSync(vaultPath);
@@ -3085,16 +3963,16 @@ var setCommand2 = defineCommand16({
     spin.start("Encrypting secret...");
     try {
       setSecret(args.server, parsed.key, parsed.value, password);
-      spin.stop(`${pc15.green("\u2713")} Stored ${pc15.bold(parsed.key)} for ${pc15.cyan(args.server)}`);
+      spin.stop(`${pc19.green("\u2713")} Stored ${pc19.bold(parsed.key)} for ${pc19.cyan(args.server)}`);
     } catch (err) {
-      spin.stop(`${pc15.red("\u2717")} Failed to store secret`);
-      console.error(pc15.dim(String(err)));
+      spin.stop(`${pc19.red("\u2717")} Failed to store secret`);
+      console.error(pc19.dim(String(err)));
       process.exit(1);
     }
-    p9.outro(pc15.dim("Secret encrypted and saved to vault."));
+    p9.outro(pc19.dim("Secret encrypted and saved to vault."));
   }
 });
-var listCommand3 = defineCommand16({
+var listCommand3 = defineCommand20({
   meta: { name: "list", description: "List secret keys stored in the vault" },
   args: {
     server: {
@@ -3106,27 +3984,27 @@ var listCommand3 = defineCommand16({
   async run({ args }) {
     const results = listSecrets(args.server || void 0);
     if (results.length === 0) {
-      const filter = args.server ? ` for ${pc15.cyan(args.server)}` : "";
-      console.log(pc15.dim(`No secrets stored${filter}.`));
+      const filter = args.server ? ` for ${pc19.cyan(args.server)}` : "";
+      console.log(pc19.dim(`No secrets stored${filter}.`));
       return;
     }
     console.log("");
     for (const { server, keys } of results) {
-      console.log(pc15.bold(pc15.cyan(server)));
+      console.log(pc19.bold(pc19.cyan(server)));
       for (const key of keys) {
-        console.log(`  ${pc15.green("\u25CF")} ${pc15.bold(key)}  ${pc15.dim(maskValue("\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022"))}`);
+        console.log(`  ${pc19.green("\u25CF")} ${pc19.bold(key)}  ${pc19.dim(maskValue("\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022"))}`);
       }
       console.log("");
     }
     const total = results.reduce((n, r) => n + r.keys.length, 0);
     console.log(
-      pc15.dim(
+      pc19.dim(
         `  ${total} secret${total !== 1 ? "s" : ""} in ${results.length} server${results.length !== 1 ? "s" : ""}`
       )
     );
   }
 });
-var removeCommand2 = defineCommand16({
+var removeCommand2 = defineCommand20({
   meta: { name: "remove", description: "Delete a secret from the vault" },
   args: {
     server: {
@@ -3142,7 +4020,7 @@ var removeCommand2 = defineCommand16({
   },
   async run({ args }) {
     const confirmed = await p9.confirm({
-      message: `Remove ${pc15.bold(args.key)} from ${pc15.cyan(args.server)}?`,
+      message: `Remove ${pc19.bold(args.key)} from ${pc19.cyan(args.server)}?`,
       initialValue: false
     });
     if (p9.isCancel(confirmed) || !confirmed) {
@@ -3151,15 +4029,15 @@ var removeCommand2 = defineCommand16({
     }
     try {
       removeSecret(args.server, args.key);
-      console.log(`${pc15.green("\u2713")} Removed ${pc15.bold(args.key)} from ${pc15.cyan(args.server)}`);
+      console.log(`${pc19.green("\u2713")} Removed ${pc19.bold(args.key)} from ${pc19.cyan(args.server)}`);
     } catch (err) {
-      console.error(`${pc15.red("\u2717")} Failed to remove secret`);
-      console.error(pc15.dim(String(err)));
+      console.error(`${pc19.red("\u2717")} Failed to remove secret`);
+      console.error(pc19.dim(String(err)));
       process.exit(1);
     }
   }
 });
-var secrets_default = defineCommand16({
+var secrets_default = defineCommand20({
   meta: {
     name: "secrets",
     description: "Manage encrypted secrets for MCP servers"
@@ -3173,8 +4051,8 @@ var secrets_default = defineCommand16({
 
 // src/commands/sync.ts
 import * as p10 from "@clack/prompts";
-import { defineCommand as defineCommand17 } from "citty";
-import pc16 from "picocolors";
+import { defineCommand as defineCommand21 } from "citty";
+import pc20 from "picocolors";
 
 // src/core/config-diff.ts
 function reconstructServerEntry(lockEntry) {
@@ -3326,7 +4204,7 @@ var CLIENT_DISPLAY3 = {
   vscode: "VS Code",
   windsurf: "Windsurf"
 };
-var sync_default = defineCommand17({
+var sync_default = defineCommand21({
   meta: {
     name: "sync",
     description: "Sync MCP server configs across all detected AI clients"
@@ -3353,7 +4231,7 @@ var sync_default = defineCommand17({
     }
   },
   async run({ args }) {
-    p10.intro(`${pc16.cyan("mcpman sync")}`);
+    p10.intro(`${pc20.cyan("mcpman sync")}`);
     const sourceClient = args.source;
     if (sourceClient && !VALID_CLIENTS.includes(sourceClient)) {
       p10.log.error(
@@ -3389,20 +4267,20 @@ var sync_default = defineCommand17({
     const extraCount = actions.filter((a) => a.action === "extra").length;
     const removeCount = actions.filter((a) => a.action === "remove").length;
     if (addCount === 0 && removeCount === 0 && extraCount === 0) {
-      p10.outro(pc16.green("All clients are in sync."));
+      p10.outro(pc20.green("All clients are in sync."));
       process.exit(0);
     }
     const parts = [];
-    if (addCount > 0) parts.push(pc16.green(`${addCount} to add`));
-    if (removeCount > 0) parts.push(pc16.red(`${removeCount} to remove`));
-    if (extraCount > 0) parts.push(pc16.yellow(`${extraCount} extra (informational)`));
+    if (addCount > 0) parts.push(pc20.green(`${addCount} to add`));
+    if (removeCount > 0) parts.push(pc20.red(`${removeCount} to remove`));
+    if (extraCount > 0) parts.push(pc20.yellow(`${extraCount} extra (informational)`));
     p10.log.info(parts.join("  \xB7  "));
     if (args["dry-run"]) {
-      p10.outro(pc16.dim("Dry run \u2014 no changes applied."));
+      p10.outro(pc20.dim("Dry run \u2014 no changes applied."));
       process.exit(1);
     }
     if (addCount === 0 && removeCount === 0) {
-      p10.outro(pc16.dim("No additions needed. Extra servers left untouched."));
+      p10.outro(pc20.dim("No additions needed. Extra servers left untouched."));
       process.exit(1);
     }
     if (!args.yes) {
@@ -3414,7 +4292,7 @@ var sync_default = defineCommand17({
         initialValue: true
       });
       if (p10.isCancel(confirmed) || !confirmed) {
-        p10.outro(pc16.dim("Cancelled \u2014 no changes applied."));
+        p10.outro(pc20.dim("Cancelled \u2014 no changes applied."));
         process.exit(0);
       }
     }
@@ -3433,7 +4311,7 @@ var sync_default = defineCommand17({
       }
     }
     p10.outro(
-      result.failed === 0 ? pc16.green("Sync complete.") : pc16.yellow("Sync complete with errors.")
+      result.failed === 0 ? pc20.green("Sync complete.") : pc20.yellow("Sync complete with errors.")
     );
     process.exit(result.failed > 0 ? 1 : 0);
   }
@@ -3449,8 +4327,8 @@ function printDiffTable(actions) {
     ...actions.map((a) => CLIENT_DISPLAY3[a.client]?.length ?? a.client.length)
   );
   const header = `  ${pad3("SERVER", nameWidth)}  ${pad3("CLIENT", clientWidth)}  STATUS`;
-  console.log(pc16.dim(header));
-  console.log(pc16.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(clientWidth)}  ------`));
+  console.log(pc20.dim(header));
+  console.log(pc20.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(clientWidth)}  ------`));
   for (const action of actions) {
     const clientDisplay = CLIENT_DISPLAY3[action.client] ?? action.client;
     const [icon, statusText] = formatAction(action.action);
@@ -3463,13 +4341,13 @@ function printDiffTable(actions) {
 function formatAction(action) {
   switch (action) {
     case "add":
-      return [pc16.green("+"), pc16.green("missing \u2014 will add")];
+      return [pc20.green("+"), pc20.green("missing \u2014 will add")];
     case "extra":
-      return [pc16.yellow("?"), pc16.yellow("extra (not in lockfile)")];
+      return [pc20.yellow("?"), pc20.yellow("extra (not in lockfile)")];
     case "remove":
-      return [pc16.red("\u2013"), pc16.red("extra \u2014 will remove")];
+      return [pc20.red("\u2013"), pc20.red("extra \u2014 will remove")];
     case "ok":
-      return [pc16.dim("\xB7"), pc16.dim("in sync")];
+      return [pc20.dim("\xB7"), pc20.dim("in sync")];
   }
 }
 function pad3(s, width) {
@@ -3477,8 +4355,8 @@ function pad3(s, width) {
 }
 
 // src/commands/test-command.ts
-import { defineCommand as defineCommand18 } from "citty";
-import pc17 from "picocolors";
+import { defineCommand as defineCommand22 } from "citty";
+import pc21 from "picocolors";
 
 // src/core/mcp-tester.ts
 import { spawn as spawn4 } from "child_process";
@@ -3576,7 +4454,7 @@ async function testMcpServer(serverName, command, args, env) {
 }
 
 // src/commands/test-command.ts
-var test_command_default = defineCommand18({
+var test_command_default = defineCommand22({
   meta: {
     name: "test",
     description: "Test MCP server connectivity and capabilities"
@@ -3597,10 +4475,10 @@ var test_command_default = defineCommand18({
     const lockfile = readLockfile();
     const serverNames = args.all ? Object.keys(lockfile.servers) : args.server ? [args.server] : [];
     if (serverNames.length === 0) {
-      console.error(pc17.red("  Error: Specify a server name or use --all."));
+      console.error(pc21.red("  Error: Specify a server name or use --all."));
       process.exit(1);
     }
-    console.log(pc17.bold(`
+    console.log(pc21.bold(`
   mcpman test \u2014 ${serverNames.length} server(s)
 `));
     let passed = 0;
@@ -3608,7 +4486,7 @@ var test_command_default = defineCommand18({
     for (const name of serverNames) {
       const entry = lockfile.servers[name];
       if (!entry) {
-        console.log(`  ${pc17.red("\u2717")} ${pc17.bold(name)} \u2014 not installed`);
+        console.log(`  ${pc21.red("\u2717")} ${pc21.bold(name)} \u2014 not installed`);
         failed++;
         continue;
       }
@@ -3619,27 +4497,27 @@ var test_command_default = defineCommand18({
       if (result.passed) {
         passed++;
         console.log(
-          `  ${pc17.green("\u2713")} ${pc17.bold(name)} ${pc17.dim(`(${result.responseTimeMs}ms)`)}`
+          `  ${pc21.green("\u2713")} ${pc21.bold(name)} ${pc21.dim(`(${result.responseTimeMs}ms)`)}`
         );
         if (result.tools.length > 0) {
-          console.log(pc17.dim(`    Tools: ${result.tools.join(", ")}`));
+          console.log(pc21.dim(`    Tools: ${result.tools.join(", ")}`));
         }
       } else {
         failed++;
-        console.log(`  ${pc17.red("\u2717")} ${pc17.bold(name)} ${pc17.dim(`(${result.responseTimeMs}ms)`)}`);
+        console.log(`  ${pc21.red("\u2717")} ${pc21.bold(name)} ${pc21.dim(`(${result.responseTimeMs}ms)`)}`);
         if (result.error) {
-          console.log(`    ${pc17.red(result.error)}`);
+          console.log(`    ${pc21.red(result.error)}`);
         }
         console.log(
-          `    ${pc17.dim("initialize:")} ${result.initializeOk ? pc17.green("ok") : pc17.red("fail")}  ${pc17.dim("tools/list:")} ${result.toolsListOk ? pc17.green("ok") : pc17.red("fail")}`
+          `    ${pc21.dim("initialize:")} ${result.initializeOk ? pc21.green("ok") : pc21.red("fail")}  ${pc21.dim("tools/list:")} ${result.toolsListOk ? pc21.green("ok") : pc21.red("fail")}`
         );
       }
     }
-    console.log(pc17.dim(`
+    console.log(pc21.dim(`
   ${"\u2500".repeat(40)}`));
     const parts = [];
-    if (passed > 0) parts.push(pc17.green(`${passed} passed`));
-    if (failed > 0) parts.push(pc17.red(`${failed} failed`));
+    if (passed > 0) parts.push(pc21.green(`${passed} passed`));
+    if (failed > 0) parts.push(pc21.red(`${failed} failed`));
     console.log(`  ${parts.join(", ")}
 `);
     if (failed > 0) process.exit(1);
@@ -3658,23 +4536,23 @@ async function loadVaultSecrets3(serverName) {
 
 // src/commands/update.ts
 import * as p11 from "@clack/prompts";
-import { defineCommand as defineCommand19 } from "citty";
-import pc19 from "picocolors";
+import { defineCommand as defineCommand23 } from "citty";
+import pc23 from "picocolors";
 
 // src/core/update-notifier.ts
-import fs9 from "fs";
+import fs11 from "fs";
 import os3 from "os";
-import path9 from "path";
-import pc18 from "picocolors";
-var CACHE_FILE = path9.join(os3.homedir(), ".mcpman", ".update-check");
+import path13 from "path";
+import pc22 from "picocolors";
+var CACHE_FILE = path13.join(os3.homedir(), ".mcpman", ".update-check");
 var TTL_MS = 24 * 60 * 60 * 1e3;
 function writeUpdateCache(data) {
   try {
-    const dir = path9.dirname(CACHE_FILE);
-    if (!fs9.existsSync(dir)) fs9.mkdirSync(dir, { recursive: true });
+    const dir = path13.dirname(CACHE_FILE);
+    if (!fs11.existsSync(dir)) fs11.mkdirSync(dir, { recursive: true });
     const tmp = `${CACHE_FILE}.tmp`;
-    fs9.writeFileSync(tmp, JSON.stringify(data, null, 2), "utf-8");
-    fs9.renameSync(tmp, CACHE_FILE);
+    fs11.writeFileSync(tmp, JSON.stringify(data, null, 2), "utf-8");
+    fs11.renameSync(tmp, CACHE_FILE);
   } catch {
   }
 }
@@ -3697,19 +4575,19 @@ function printTable(updates) {
     "LATEST".padEnd(VER_W),
     "STATUS"
   ].join("  ");
-  console.log(pc19.bold(`
+  console.log(pc23.bold(`
   ${header}`));
-  console.log(pc19.dim(`  ${"\u2500".repeat(NAME_W + VER_W * 2 + 20)}`));
+  console.log(pc23.dim(`  ${"\u2500".repeat(NAME_W + VER_W * 2 + 20)}`));
   for (const u of updates) {
     const nameCol = u.server.slice(0, NAME_W).padEnd(NAME_W);
     const curCol = u.currentVersion.padEnd(VER_W);
     const latCol = u.latestVersion.padEnd(VER_W);
-    const statusCol = u.hasUpdate ? pc19.yellow(`Update available${u.updateType ? ` [${u.updateType}]` : ""}`) : pc19.green("Up to date");
+    const statusCol = u.hasUpdate ? pc23.yellow(`Update available${u.updateType ? ` [${u.updateType}]` : ""}`) : pc23.green("Up to date");
     console.log(`  ${nameCol}  ${curCol}  ${latCol}  ${statusCol}`);
   }
   console.log();
 }
-var update_default = defineCommand19({
+var update_default = defineCommand23({
   meta: {
     name: "update",
     description: "Check for and apply updates to installed MCP servers"
@@ -3770,12 +4648,12 @@ var update_default = defineCommand19({
     printTable(updates);
     const outdated = updates.filter((u) => u.hasUpdate);
     if (outdated.length === 0) {
-      console.log(pc19.green("  All servers are up to date."));
+      console.log(pc23.green("  All servers are up to date."));
       return;
     }
     if (args.check) {
       console.log(
-        pc19.yellow(`  ${outdated.length} update(s) available. Run mcpman update to apply.`)
+        pc23.yellow(`  ${outdated.length} update(s) available. Run mcpman update to apply.`)
       );
       return;
     }
@@ -3796,10 +4674,10 @@ var update_default = defineCommand19({
       s.start(`Updating ${update.server}...`);
       const result = await applyServerUpdate(update.server, servers[update.server], clients);
       if (result.success) {
-        s.stop(`${pc19.green("\u2713")} ${update.server}: ${result.fromVersion} \u2192 ${result.toVersion}`);
+        s.stop(`${pc23.green("\u2713")} ${update.server}: ${result.fromVersion} \u2192 ${result.toVersion}`);
         successCount++;
       } else {
-        s.stop(`${pc19.red("\u2717")} ${update.server}: ${result.error}`);
+        s.stop(`${pc23.red("\u2717")} ${update.server}: ${result.error}`);
       }
     }
     const freshLockfile = readLockfile(resolveLockfilePath());
@@ -3811,9 +4689,9 @@ var update_default = defineCommand19({
 
 // src/commands/upgrade.ts
 import { execSync as execSync2 } from "child_process";
-import { defineCommand as defineCommand20 } from "citty";
-import pc20 from "picocolors";
-var upgrade_default = defineCommand20({
+import { defineCommand as defineCommand24 } from "citty";
+import pc24 from "picocolors";
+var upgrade_default = defineCommand24({
   meta: {
     name: "upgrade",
     description: "Upgrade mcpman to the latest version"
@@ -3826,41 +4704,445 @@ var upgrade_default = defineCommand20({
     }
   },
   async run({ args }) {
-    console.log(pc20.dim(`  Current version: ${APP_VERSION}`));
+    console.log(pc24.dim(`  Current version: ${APP_VERSION}`));
     let latest;
     try {
       latest = execSync2("npm view mcpman version", { encoding: "utf-8", timeout: 15e3 }).trim();
     } catch {
-      console.error(pc20.red("  Error: Could not check latest version from npm."));
+      console.error(pc24.red("  Error: Could not check latest version from npm."));
       process.exit(1);
     }
     if (latest === APP_VERSION) {
-      console.log(pc20.green("  \u2713 Already on the latest version."));
+      console.log(pc24.green("  \u2713 Already on the latest version."));
       return;
     }
-    console.log(pc20.yellow(`  Update available: ${APP_VERSION} \u2192 ${latest}`));
+    console.log(pc24.yellow(`  Update available: ${APP_VERSION} \u2192 ${latest}`));
     if (args.check) {
-      console.log(pc20.dim("  Run mcpman upgrade to install."));
+      console.log(pc24.dim("  Run mcpman upgrade to install."));
       return;
     }
-    console.log(pc20.dim("  Installing..."));
+    console.log(pc24.dim("  Installing..."));
     try {
       execSync2(`npm install -g mcpman@${latest}`, { stdio: "inherit", timeout: 6e4 });
-      console.log(pc20.green(`
+      console.log(pc24.green(`
   \u2713 Upgraded to mcpman@${latest}`));
     } catch {
-      console.error(pc20.red("  Error: Upgrade failed. Try manually: npm install -g mcpman@latest"));
+      console.error(pc24.red("  Error: Upgrade failed. Try manually: npm install -g mcpman@latest"));
       process.exit(1);
     }
   }
 });
 
+// src/commands/watch.ts
+import { defineCommand as defineCommand25 } from "citty";
+import pc25 from "picocolors";
+
+// src/core/file-watcher-service.ts
+import { spawn as spawn5 } from "child_process";
+import fs12 from "fs";
+var IGNORE_PATTERNS = [
+  "node_modules",
+  ".git",
+  "dist",
+  "build",
+  "__pycache__",
+  ".pyc",
+  ".egg-info",
+  ".tox"
+];
+function shouldIgnore(filename) {
+  return IGNORE_PATTERNS.some((p12) => filename.includes(p12));
+}
+function hasWatchedExtension(filename, extensions) {
+  return extensions.some((ext) => filename.endsWith(`.${ext}`));
+}
+function timestamp() {
+  return (/* @__PURE__ */ new Date()).toLocaleTimeString("en-US", { hour12: false });
+}
+var ServerWatcher = class {
+  child = null;
+  watcher = null;
+  restartCount = 0;
+  debounceTimer = null;
+  options = null;
+  stopping = false;
+  /** Start watching and spawn the initial server process */
+  start(options) {
+    this.options = options;
+    this.stopping = false;
+    console.log(`
+  Watching ${options.serverName} (${options.watchDir})...`);
+    console.log(`  Extensions: ${options.extensions.join(", ")}`);
+    console.log(`  Debounce: ${options.debounceMs}ms
+`);
+    this.spawnChild();
+    try {
+      this.watcher = fs12.watch(options.watchDir, { recursive: true }, (_event, filename) => {
+        if (!filename) return;
+        this.onFileChange(filename);
+      });
+    } catch (err) {
+      console.error(
+        `  Warning: Could not watch directory: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
+  /** Gracefully stop watcher and child process */
+  stop() {
+    this.stopping = true;
+    if (this.debounceTimer) {
+      clearTimeout(this.debounceTimer);
+      this.debounceTimer = null;
+    }
+    if (this.watcher) {
+      this.watcher.close();
+      this.watcher = null;
+    }
+    if (this.child && !this.child.killed) {
+      this.child.kill("SIGTERM");
+    }
+    console.log(`
+  Stopped. (${this.restartCount} restart${this.restartCount !== 1 ? "s" : ""})`);
+  }
+  /** Spawn the server child process, piping its stdio to parent */
+  spawnChild() {
+    if (!this.options) return;
+    const { command, args, env, serverName, clearOnRestart } = this.options;
+    if (clearOnRestart && this.restartCount > 0) {
+      process.stdout.write("\x1Bc");
+    }
+    console.log(`  [${timestamp()}] Starting ${serverName}...`);
+    this.child = spawn5(command, args, { env, stdio: ["pipe", "pipe", "pipe"] });
+    this.child.stdout?.on("data", (data) => {
+      process.stdout.write(`  [stdout] ${data.toString().trimEnd()}
+`);
+    });
+    this.child.stderr?.on("data", (data) => {
+      process.stderr.write(`  [stderr] ${data.toString().trimEnd()}
+`);
+    });
+    this.child.on("error", (err) => {
+      console.error(`  [${timestamp()}] Error: ${err.message}`);
+    });
+    this.child.on("close", (code) => {
+      if (!this.stopping) {
+        console.log(`  [${timestamp()}] Process exited (code ${code ?? "?"})`);
+      }
+    });
+  }
+  /** Kill child process: SIGTERM first, then SIGKILL after 2s */
+  async killChild() {
+    if (!this.child || this.child.killed) return;
+    const childRef = this.child;
+    return new Promise((resolve) => {
+      const child = childRef;
+      const killTimer = setTimeout(() => {
+        if (!child.killed) {
+          child.kill("SIGKILL");
+        }
+        resolve();
+      }, 2e3);
+      child.on("close", () => {
+        clearTimeout(killTimer);
+        resolve();
+      });
+      child.kill("SIGTERM");
+    });
+  }
+  /** Debounced file change handler */
+  onFileChange(filename) {
+    if (!this.options) return;
+    if (shouldIgnore(filename)) return;
+    if (!hasWatchedExtension(filename, this.options.extensions)) return;
+    if (this.debounceTimer) {
+      clearTimeout(this.debounceTimer);
+    }
+    this.debounceTimer = setTimeout(async () => {
+      this.debounceTimer = null;
+      this.restartCount++;
+      console.log(`  [${timestamp()}] File changed: ${filename}`);
+      console.log(
+        `  [${timestamp()}] Restarting ${this.options?.serverName}... (restart #${this.restartCount})`
+      );
+      await this.killChild();
+      this.spawnChild();
+    }, this.options.debounceMs);
+  }
+  getRestartCount() {
+    return this.restartCount;
+  }
+};
+
+// src/commands/watch.ts
+var DEFAULT_EXTENSIONS = ["ts", "js", "json", "py", "mjs", "cjs"];
+var DEFAULT_DEBOUNCE_MS = 300;
+var watch_default = defineCommand25({
+  meta: {
+    name: "watch",
+    description: "Watch a local MCP server for file changes and auto-restart"
+  },
+  args: {
+    server: {
+      type: "positional",
+      description: "Server name (must be in lockfile)",
+      required: true
+    },
+    dir: {
+      type: "string",
+      description: "Directory to watch (default: resolved path from lockfile)"
+    },
+    ext: {
+      type: "string",
+      description: `File extensions to watch, comma-separated (default: ${DEFAULT_EXTENSIONS.join(",")})`
+    },
+    delay: {
+      type: "string",
+      description: `Debounce delay in ms (default: ${DEFAULT_DEBOUNCE_MS})`
+    },
+    clear: {
+      type: "boolean",
+      description: "Clear terminal on each restart",
+      default: false
+    },
+    env: {
+      type: "string",
+      description: "Override env var KEY=VAL (repeatable)",
+      alias: "e"
+    }
+  },
+  async run({ args }) {
+    const serverName = args.server;
+    const lockfile = readLockfile();
+    const entry = lockfile.servers[serverName];
+    if (!entry) {
+      console.error(pc25.red(`  Error: Server '${serverName}' not found in lockfile.`));
+      console.error(pc25.dim(`  Run ${pc25.cyan("mcpman link .")} to register a local server.`));
+      process.exit(1);
+    }
+    let watchDir = args.dir;
+    if (!watchDir) {
+      if (entry.source === "local" && entry.resolved) {
+        watchDir = entry.resolved;
+      } else {
+        console.error(pc25.red(`  Error: Cannot determine watch directory for '${serverName}'.`));
+        console.error(pc25.dim("  Use --dir to specify the directory to watch."));
+        process.exit(1);
+      }
+    }
+    const extensions = args.ext ? args.ext.split(",").map((e) => e.trim().replace(/^\./, "")) : DEFAULT_EXTENSIONS;
+    const debounceMs = args.delay ? Number.parseInt(args.delay, 10) || DEFAULT_DEBOUNCE_MS : DEFAULT_DEBOUNCE_MS;
+    const lockfileEnv = parseEnvFlags(entry.envVars);
+    const vaultEnv = await loadVaultSecrets4(serverName);
+    const cliEnv = parseEnvFlags(args.env);
+    const finalEnv = {
+      ...process.env,
+      ...lockfileEnv,
+      ...vaultEnv,
+      ...cliEnv
+    };
+    const watcher = new ServerWatcher();
+    const handleStop = () => {
+      watcher.stop();
+      process.exit(0);
+    };
+    process.on("SIGINT", handleStop);
+    process.on("SIGTERM", handleStop);
+    watcher.start({
+      command: entry.command,
+      args: entry.args,
+      env: finalEnv,
+      watchDir,
+      extensions,
+      debounceMs,
+      clearOnRestart: args.clear,
+      serverName
+    });
+  }
+});
+async function loadVaultSecrets4(serverName) {
+  try {
+    const entries = listSecrets(serverName);
+    if (entries.length === 0 || entries[0].keys.length === 0) return {};
+    const password = await getMasterPassword();
+    return getSecretsForServer(serverName, password);
+  } catch {
+    return {};
+  }
+}
+
+// src/commands/why.ts
+import { defineCommand as defineCommand26 } from "citty";
+import pc26 from "picocolors";
+
+// src/core/why-service.ts
+import fs13 from "fs";
+import path14 from "path";
+var ALL_CLIENT_TYPES = ["claude-desktop", "cursor", "vscode", "windsurf"];
+async function getServerProvenance(serverName, lockfilePath, profilesDir) {
+  const lockfile = readLockfile(lockfilePath);
+  const entry = lockfile.servers[serverName];
+  if (!entry) {
+    const orphanedClients = await findOrphanedClients(serverName);
+    const anyRegistered = orphanedClients.some((c) => c.registered);
+    if (!anyRegistered) return null;
+    return {
+      name: serverName,
+      version: "unknown",
+      source: "unknown",
+      resolved: "",
+      integrity: "",
+      installedAt: "",
+      clients: orphanedClients,
+      profiles: [],
+      envVars: [],
+      orphaned: true
+    };
+  }
+  const clientStatuses = await buildClientStatuses(serverName, entry.clients);
+  const profiles = scanProfiles(serverName, profilesDir ?? getProfilesDir());
+  return {
+    name: serverName,
+    version: entry.version,
+    source: entry.source,
+    resolved: entry.resolved,
+    integrity: entry.integrity,
+    installedAt: entry.installedAt,
+    clients: clientStatuses,
+    profiles,
+    envVars: entry.envVars ?? [],
+    orphaned: false
+  };
+}
+async function buildClientStatuses(serverName, lockfileClients) {
+  return ALL_CLIENT_TYPES.map((type) => ({
+    type,
+    registered: lockfileClients.includes(type)
+  }));
+}
+async function findOrphanedClients(serverName) {
+  const { getInstalledClients: getInstalledClients2 } = await import("./client-detector-CY7WPF3K.js");
+  const handlers = await getInstalledClients2();
+  const results = [];
+  for (const handler of handlers) {
+    try {
+      const config = await handler.readConfig();
+      const registered = serverName in (config.servers ?? {});
+      results.push({ type: handler.type, registered });
+    } catch {
+      results.push({ type: handler.type, registered: false });
+    }
+  }
+  return results;
+}
+function scanProfiles(serverName, profilesDir) {
+  const found = [];
+  if (!fs13.existsSync(profilesDir)) return found;
+  let files;
+  try {
+    files = fs13.readdirSync(profilesDir).filter((f) => f.endsWith(".json"));
+  } catch {
+    return found;
+  }
+  for (const file of files) {
+    try {
+      const raw = fs13.readFileSync(path14.join(profilesDir, file), "utf-8");
+      const profile = JSON.parse(raw);
+      if (serverName in (profile.servers ?? {})) {
+        found.push(profile.name ?? file.replace(".json", ""));
+      }
+    } catch {
+    }
+  }
+  return found.sort();
+}
+function formatWhyOutput(result) {
+  const lines = [];
+  lines.push(`  Server: ${result.name}`);
+  lines.push(`  Version: ${result.version}`);
+  lines.push(`  Source: ${result.source}`);
+  if (result.resolved) lines.push(`  Resolved: ${result.resolved}`);
+  if (result.integrity && result.integrity !== "local") {
+    lines.push(`  Integrity: ${result.integrity}`);
+  }
+  if (result.installedAt) lines.push(`  Installed: ${result.installedAt}`);
+  lines.push("");
+  lines.push("  Clients:");
+  for (const c of result.clients) {
+    const status = c.registered ? "registered" : "not registered";
+    lines.push(`    ${c.type.padEnd(20)} ${status}`);
+  }
+  if (result.profiles.length > 0) {
+    lines.push("");
+    lines.push("  Profiles:");
+    for (const p12 of result.profiles) {
+      lines.push(`    ${p12}`);
+    }
+  }
+  if (result.envVars.length > 0) {
+    lines.push("");
+    lines.push("  Env Vars:");
+    for (const v of result.envVars) {
+      lines.push(`    ${v}`);
+    }
+  }
+  return lines.join("\n");
+}
+
+// src/commands/why.ts
+var why_default = defineCommand26({
+  meta: {
+    name: "why",
+    description: "Show why a server is installed (provenance, clients, profiles)"
+  },
+  args: {
+    server: {
+      type: "positional",
+      description: "Server name to inspect",
+      required: true
+    },
+    json: {
+      type: "boolean",
+      description: "Output as JSON for scripting",
+      default: false
+    }
+  },
+  async run({ args }) {
+    const serverName = args.server;
+    const asJson = args.json;
+    const result = await getServerProvenance(serverName);
+    if (!result) {
+      console.error(pc26.red(`  Server '${serverName}' not found in lockfile or any client config.`));
+      console.error(pc26.dim(`  Run ${pc26.cyan("mcpman list")} to see installed servers.`));
+      process.exit(1);
+    }
+    if (result.orphaned) {
+      console.log(pc26.yellow(`
+  Server '${serverName}' is orphaned:`));
+      console.log(pc26.dim("  Found in client config(s) but not in lockfile."));
+      console.log(pc26.dim(`  Run ${pc26.cyan("mcpman sync --remove")} to clean up.
+`));
+      const registeredClients = result.clients.filter((c) => c.registered).map((c) => c.type);
+      if (registeredClients.length > 0) {
+        console.log(`  Registered in: ${registeredClients.join(", ")}`);
+      }
+      return;
+    }
+    if (asJson) {
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+    console.log();
+    console.log(formatWhyOutput(result));
+    console.log();
+  }
+});
+
 // src/index.ts
 process.on("SIGINT", () => {
   console.log("\nAborted.");
   process.exit(130);
 });
-var main = defineCommand21({
+var main = defineCommand27({
   meta: {
     name: APP_NAME,
     version: APP_VERSION,
@@ -3886,7 +5168,13 @@ var main = defineCommand21({
     profiles: profiles_default,
     plugin: plugin_default,
     export: export_command_default,
-    import: import_command_default
+    import: import_command_default,
+    create: create_default,
+    link: link_default,
+    watch: watch_default,
+    registry: registry_default,
+    completions: completions_default,
+    why: why_default
   }
 });
 runMain(main);