mcpman 0.7.0 → 0.8.0

package/dist/index.js

@@ -4,19 +4,27 @@ import {
   addEntry,
   createEmptyLockfile,
   findLockfile,
+  listSnapshots,
   readLockfile,
+  readSnapshot,
   resolveLockfilePath,
+  restoreSnapshot,
   writeLockfile
-} from "./chunk-YZNTMR6O.js";
+} from "./chunk-DZ3D5RZQ.js";
 import {
   computeTrustScore
 } from "./chunk-RGKHLY5G.js";
+import {
+  getInstalledClients
+} from "./chunk-XPYCEHZZ.js";
 import {
   getConfigPath,
-  getInstalledClients,
+  getEnvDir,
+  getGroupsFile,
+  getPinsFile,
   getPluginDir,
   getProfilesDir
-} from "./chunk-NS6HV723.js";
+} from "./chunk-AOCGFOA6.js";
 import {
   getMasterPassword,
   getSecretsForServer,
@@ -29,7 +37,7 @@ import {
 } from "./chunk-6X6Q6UZC.js";
 
 // src/index.ts
-import { defineCommand as defineCommand27, runMain } from "citty";
+import { defineCommand as defineCommand33, runMain } from "citty";
 
 // src/commands/audit.ts
 import * as p from "@clack/prompts";
@@ -167,11 +175,11 @@ async function scanAllServers(servers, concurrency = 3) {
   const results = [];
   const executing = /* @__PURE__ */ new Set();
   for (const [name, entry] of entries) {
-    const p12 = scanServer(name, entry).then((r) => {
+    const p13 = scanServer(name, entry).then((r) => {
       results.push(r);
-      executing.delete(p12);
+      executing.delete(p13);
     });
-    executing.add(p12);
+    executing.add(p13);
     if (executing.size >= concurrency) await Promise.race(executing);
   }
   await Promise.all(executing);
@@ -336,8 +344,8 @@ function setConfigValue(key, value, configPath = getConfigPath()) {
 // src/core/plugin-loader.ts
 function isValidPlugin(obj) {
   if (typeof obj !== "object" || obj === null) return false;
-  const p12 = obj;
-  return typeof p12.name === "string" && typeof p12.prefix === "string" && typeof p12.resolve === "function";
+  const p13 = obj;
+  return typeof p13.name === "string" && typeof p13.prefix === "string" && typeof p13.resolve === "function";
 }
 function loadPlugin(pkg, pluginDir = getPluginDir()) {
   try {
@@ -391,7 +399,7 @@ function removePluginPackage(name, pluginDir = getPluginDir()) {
   }
   const config = readConfig();
   const plugins = config.plugins ?? [];
-  config.plugins = plugins.filter((p12) => p12 !== name);
+  config.plugins = plugins.filter((p13) => p13 !== name);
   writeConfig(config);
 }
 function listPluginPackages() {
@@ -440,7 +448,7 @@ async function resolveServer(input) {
       if (source.type.startsWith("plugin:")) {
         const pluginName = source.type.slice(7);
         const plugins = loadAllPlugins();
-        const plugin = plugins.find((p12) => p12.name === pluginName);
+        const plugin = plugins.find((p13) => p13.name === pluginName);
         if (plugin) {
           const resolved = await plugin.resolve(source.input);
           return resolved;
@@ -494,6 +502,47 @@ async function applyServerUpdate(serverName, lockEntry, clients) {
   }
 }
 
+// src/core/pin-service.ts
+import fs4 from "fs";
+function readPins(file) {
+  const target = file ?? getPinsFile();
+  if (!fs4.existsSync(target)) return {};
+  try {
+    return JSON.parse(fs4.readFileSync(target, "utf-8"));
+  } catch {
+    return {};
+  }
+}
+function writePins(store, file) {
+  const target = file ?? getPinsFile();
+  const dir = target.slice(0, target.lastIndexOf("/"));
+  if (dir && !fs4.existsSync(dir)) {
+    fs4.mkdirSync(dir, { recursive: true });
+  }
+  fs4.writeFileSync(target, JSON.stringify(store, null, 2), "utf-8");
+}
+function pinServer(server, version, file) {
+  const store = readPins(file);
+  store[server] = version;
+  writePins(store, file);
+}
+function unpinServer(server, file) {
+  const store = readPins(file);
+  if (!(server in store)) return;
+  delete store[server];
+  writePins(store, file);
+}
+function getPinnedVersion(server, file) {
+  return readPins(file)[server] ?? null;
+}
+function isPinned(server, file) {
+  return server in readPins(file);
+}
+function listPins(file) {
+  const store = readPins(file);
+  return Object.entries(store).sort(([a], [b]) => a.localeCompare(b)).map(([server, version]) => ({ server, version }));
+}
+
 // src/core/version-checker.ts
 function compareVersions(a, b) {
   const aParts = a.replace(/^v/, "").split(".").map(Number);
@@ -595,11 +644,12 @@ async function checkAllVersions(lockfile) {
   const results = [];
   const executing = /* @__PURE__ */ new Set();
   for (const [name, entry] of entries) {
-    const p12 = checkVersion(name, entry).then((r) => {
+    if (isPinned(name)) continue;
+    const p13 = checkVersion(name, entry).then((r) => {
       results.push(r);
-      executing.delete(p12);
+      executing.delete(p13);
     });
-    executing.add(p12);
+    executing.add(p13);
     if (executing.size >= 5) {
       await Promise.race(executing);
     }
@@ -750,7 +800,7 @@ var audit_default = defineCommand({
 });
 async function loadClients() {
   try {
-    const mod = await import("./client-detector-CY7WPF3K.js");
+    const mod = await import("./client-detector-NHXBDNMY.js");
     return mod.getInstalledClients();
   } catch {
     return [];
@@ -853,12 +903,204 @@ async function runAuditFix(reports, servers, skipConfirm) {
 `);
 }
 
+// src/commands/bench.ts
+import { defineCommand as defineCommand2 } from "citty";
+import pc2 from "picocolors";
+
+// src/core/bench-service.ts
+import { spawn } from "child_process";
+var DEFAULT_TIMEOUT_MS = 1e4;
+function measureOneRun(command, args, env, timeoutMs) {
+  return new Promise((resolve, reject) => {
+    const start = Date.now();
+    let settled = false;
+    let stdout = "";
+    const child = spawn(command, args, {
+      env: { ...process.env, ...env },
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    const finish = (err) => {
+      if (settled) return;
+      settled = true;
+      try {
+        child.kill("SIGTERM");
+      } catch {
+      }
+      if (err) reject(err);
+      else resolve(Date.now() - start);
+    };
+    const timer = setTimeout(() => {
+      finish(new Error("Timeout waiting for initialize response"));
+    }, timeoutMs);
+    child.on("error", (err) => {
+      clearTimeout(timer);
+      finish(err);
+    });
+    child.on("exit", (code) => {
+      clearTimeout(timer);
+      if (!settled) finish(new Error(`Process exited with code ${code}`));
+    });
+    child.stdout?.on("data", (chunk) => {
+      stdout += chunk.toString();
+      for (const line of stdout.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed) continue;
+        try {
+          const msg = JSON.parse(trimmed);
+          if (msg.jsonrpc === "2.0" && msg.id === 1) {
+            clearTimeout(timer);
+            finish();
+          }
+        } catch {
+        }
+      }
+    });
+    const initReq = JSON.stringify({
+      jsonrpc: "2.0",
+      id: 1,
+      method: "initialize",
+      params: {
+        protocolVersion: "2024-11-05",
+        capabilities: {},
+        clientInfo: { name: "mcpman-bench", version: "0.8.0" }
+      }
+    });
+    child.stdin?.write(`${initReq}
+`);
+  });
+}
+function percentile(sorted, p13) {
+  if (sorted.length === 0) return 0;
+  const idx = Math.ceil(p13 / 100 * sorted.length) - 1;
+  return sorted[Math.max(0, idx)];
+}
+async function benchServer(command, args, env, runs = 5, timeoutMs = DEFAULT_TIMEOUT_MS) {
+  const allTimes = [];
+  for (let i = 0; i < runs; i++) {
+    try {
+      const ms = await measureOneRun(command, args, env, timeoutMs);
+      allTimes.push(ms);
+    } catch (err) {
+      return {
+        runs,
+        min: 0,
+        max: 0,
+        avg: 0,
+        p50: 0,
+        p95: 0,
+        allTimes,
+        error: String(err instanceof Error ? err.message : err)
+      };
+    }
+  }
+  const sorted = [...allTimes].sort((a, b) => a - b);
+  const sum = allTimes.reduce((a, b) => a + b, 0);
+  return {
+    runs,
+    min: sorted[0] ?? 0,
+    max: sorted[sorted.length - 1] ?? 0,
+    avg: Math.round(sum / allTimes.length),
+    p50: percentile(sorted, 50),
+    p95: percentile(sorted, 95),
+    allTimes
+  };
+}
+
+// src/commands/bench.ts
+var bench_default = defineCommand2({
+  meta: {
+    name: "bench",
+    description: "Benchmark MCP server latency (JSON-RPC initialize)"
+  },
+  args: {
+    server: {
+      type: "positional",
+      description: "Server name as stored in lockfile",
+      required: true
+    },
+    runs: {
+      type: "string",
+      description: "Number of benchmark runs (default: 5)",
+      default: "5"
+    },
+    timeout: {
+      type: "string",
+      description: "Per-run timeout in ms (default: 10000)",
+      default: "10000"
+    },
+    json: {
+      type: "boolean",
+      description: "Output results as JSON",
+      default: false
+    }
+  },
+  async run({ args }) {
+    const lockfile = readLockfile();
+    const entry = lockfile.servers[args.server];
+    if (!entry) {
+      console.error(`${pc2.red("\u2717")} Server "${args.server}" not found in lockfile.`);
+      console.error(pc2.dim("Run `mcpman list` to see installed servers."));
+      process.exit(1);
+    }
+    const runs = Math.max(1, Number.parseInt(args.runs, 10) || 5);
+    const timeoutMs = Math.max(1e3, Number.parseInt(args.timeout, 10) || 1e4);
+    if (!args.json) {
+      console.log(`
+${pc2.cyan("mcpman bench")} \u2014 ${pc2.bold(args.server)}`);
+      console.log(pc2.dim(`  Command: ${entry.command} ${(entry.args ?? []).join(" ")}`));
+      console.log(pc2.dim(`  Runs: ${runs}  Timeout: ${timeoutMs}ms
+`));
+      process.stdout.write(pc2.dim("  Running"));
+    }
+    const env = {};
+    for (const ev of entry.envVars ?? []) {
+      const idx = ev.indexOf("=");
+      if (idx > 0) env[ev.slice(0, idx)] = ev.slice(idx + 1);
+    }
+    const result = await benchServer(entry.command, entry.args ?? [], env, runs, timeoutMs);
+    if (!args.json) process.stdout.write("\n");
+    if (result.error) {
+      if (args.json) {
+        console.log(JSON.stringify({ server: args.server, error: result.error }));
+      } else {
+        console.error(`
+${pc2.red("\u2717")} Benchmark failed: ${result.error}`);
+      }
+      process.exit(1);
+    }
+    if (args.json) {
+      console.log(JSON.stringify({ server: args.server, ...result }, null, 2));
+      if (result.p95 > timeoutMs) process.exit(1);
+      return;
+    }
+    const pad4 = (s, w) => s.padEnd(w);
+    const ms = (n) => `${n}ms`;
+    console.log(`
+  ${pc2.bold("Latency statistics")} for ${pc2.cyan(args.server)}`);
+    console.log(pc2.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+    console.log(`  ${pad4("min", 8)} ${pc2.green(ms(result.min))}`);
+    console.log(`  ${pad4("avg", 8)} ${ms(result.avg)}`);
+    console.log(`  ${pad4("p50", 8)} ${ms(result.p50)}`);
+    console.log(
+      `  ${pad4("p95", 8)} ${result.p95 > timeoutMs ? pc2.red(ms(result.p95)) : pc2.yellow(ms(result.p95))}`
+    );
+    console.log(`  ${pad4("max", 8)} ${ms(result.max)}`);
+    console.log(`  ${pad4("runs", 8)} ${result.runs}`);
+    console.log("");
+    if (result.p95 > timeoutMs) {
+      console.error(pc2.red(`  \u2717 p95 (${result.p95}ms) exceeds timeout (${timeoutMs}ms)`));
+      process.exit(1);
+    }
+    console.log(pc2.green("  \u2713 Benchmark complete"));
+  }
+});
+
 // src/commands/completions.ts
-import fs4 from "fs";
+import fs5 from "fs";
 import os2 from "os";
 import path4 from "path";
-import { defineCommand as defineCommand2 } from "citty";
-import pc2 from "picocolors";
+import { defineCommand as defineCommand3 } from "citty";
+import pc3 from "picocolors";
 
 // src/core/completion-generator.ts
 function getCommandList() {
@@ -888,7 +1130,13 @@ function getCommandList() {
     "watch",
     "registry",
     "completions",
-    "why"
+    "why",
+    "env",
+    "bench",
+    "diff",
+    "group",
+    "pin",
+    "rollback"
   ];
 }
 var SERVER_ARG_COMMANDS = [
@@ -1013,7 +1261,7 @@ complete -c mcpman -l runtime -s r \\
 }
 
 // src/commands/completions.ts
-var completions_default = defineCommand2({
+var completions_default = defineCommand3({
   meta: {
     name: "completions",
     description: "Generate shell completion scripts (bash, zsh, fish)"
@@ -1063,24 +1311,24 @@ var completions_default = defineCommand2({
         await installCompletion();
         break;
       default:
-        console.error(pc2.red(`  Error: Unknown shell '${shell}'. Use: bash, zsh, or fish.`));
+        console.error(pc3.red(`  Error: Unknown shell '${shell}'. Use: bash, zsh, or fish.`));
         process.exit(1);
     }
   }
 });
 function printUsage() {
-  console.log(pc2.bold("\n  mcpman completions \u2014 Shell completion setup\n"));
+  console.log(pc3.bold("\n  mcpman completions \u2014 Shell completion setup\n"));
   console.log("  Usage:");
-  console.log(`    ${pc2.cyan("mcpman completions bash")}    Output bash completion script`);
-  console.log(`    ${pc2.cyan("mcpman completions zsh")}     Output zsh completion script`);
-  console.log(`    ${pc2.cyan("mcpman completions fish")}    Output fish completion script`);
-  console.log(`    ${pc2.cyan("mcpman completions install")} Auto-detect shell and install
+  console.log(`    ${pc3.cyan("mcpman completions bash")}    Output bash completion script`);
+  console.log(`    ${pc3.cyan("mcpman completions zsh")}     Output zsh completion script`);
+  console.log(`    ${pc3.cyan("mcpman completions fish")}    Output fish completion script`);
+  console.log(`    ${pc3.cyan("mcpman completions install")} Auto-detect shell and install
 `);
   console.log("  Quick setup:");
-  console.log(`    ${pc2.dim("# bash")}`);
-  console.log(`    ${pc2.cyan("source <(mcpman completions bash)")}`);
-  console.log(`    ${pc2.dim("# zsh")}`);
-  console.log(`    ${pc2.cyan("source <(mcpman completions zsh)")}
+  console.log(`    ${pc3.dim("# bash")}`);
+  console.log(`    ${pc3.cyan("source <(mcpman completions bash)")}`);
+  console.log(`    ${pc3.dim("# zsh")}`);
+  console.log(`    ${pc3.cyan("source <(mcpman completions zsh)")}
 `);
 }
 async function installCompletion() {
@@ -1090,8 +1338,8 @@ async function installCompletion() {
   else if (shellBin.includes("fish")) detectedShell = "fish";
   else if (shellBin.includes("bash")) detectedShell = "bash";
   if (!detectedShell) {
-    console.error(pc2.red("  Could not detect shell from $SHELL. Run manually:"));
-    console.error(pc2.dim("    source <(mcpman completions bash|zsh|fish)"));
+    console.error(pc3.red("  Could not detect shell from $SHELL. Run manually:"));
+    console.error(pc3.dim("    source <(mcpman completions bash|zsh|fish)"));
     process.exit(1);
   }
   const home = os2.homedir();
@@ -1102,10 +1350,10 @@ async function installCompletion() {
     script = generateZshCompletion();
   } else if (detectedShell === "fish") {
     const fishDir = path4.join(home, ".config", "fish", "completions");
-    fs4.mkdirSync(fishDir, { recursive: true });
+    fs5.mkdirSync(fishDir, { recursive: true });
     rcFile = path4.join(fishDir, "mcpman.fish");
-    fs4.writeFileSync(rcFile, generateFishCompletion(), "utf-8");
-    console.log(pc2.green(`  Installed fish completions to ${rcFile}`));
+    fs5.writeFileSync(rcFile, generateFishCompletion(), "utf-8");
+    console.log(pc3.green(`  Installed fish completions to ${rcFile}`));
     return;
   } else {
     rcFile = path4.join(home, ".bashrc");
@@ -1114,25 +1362,25 @@ async function installCompletion() {
   const marker = "# mcpman completions";
   let existing = "";
   try {
-    existing = fs4.readFileSync(rcFile, "utf-8");
+    existing = fs5.readFileSync(rcFile, "utf-8");
   } catch {
   }
   if (existing.includes(marker)) {
-    console.log(pc2.yellow(`  Completions already installed in ${rcFile}. Skipping.`));
+    console.log(pc3.yellow(`  Completions already installed in ${rcFile}. Skipping.`));
     return;
   }
-  fs4.appendFileSync(rcFile, `
+  fs5.appendFileSync(rcFile, `
 ${marker}
 source <(mcpman completions ${detectedShell})
 `);
-  console.log(pc2.green(`  Installed ${detectedShell} completions in ${rcFile}`));
-  console.log(pc2.dim(`  Restart your shell or run: source ${rcFile}`));
+  console.log(pc3.green(`  Installed ${detectedShell} completions in ${rcFile}`));
+  console.log(pc3.dim(`  Restart your shell or run: source ${rcFile}`));
 }
 
 // src/commands/config.ts
 import * as p2 from "@clack/prompts";
-import { defineCommand as defineCommand3 } from "citty";
-import pc3 from "picocolors";
+import { defineCommand as defineCommand4 } from "citty";
+import pc4 from "picocolors";
 function coerceValue(raw) {
   if (raw === "true") return true;
   if (raw === "false") return false;
@@ -1140,7 +1388,7 @@ function coerceValue(raw) {
   if (!Number.isNaN(num) && raw.trim() !== "") return num;
   return raw;
 }
-var setCommand = defineCommand3({
+var setCommand = defineCommand4({
   meta: { name: "set", description: "Set a config value" },
   args: {
     key: {
@@ -1158,14 +1406,14 @@ var setCommand = defineCommand3({
     try {
       const coerced = coerceValue(args.value);
       setConfigValue(args.key, coerced);
-      console.log(`${pc3.green("\u2713")} Set ${pc3.bold(args.key)} = ${pc3.cyan(String(coerced))}`);
+      console.log(`${pc4.green("\u2713")} Set ${pc4.bold(args.key)} = ${pc4.cyan(String(coerced))}`);
     } catch (err) {
-      console.error(`${pc3.red("\u2717")} ${String(err)}`);
+      console.error(`${pc4.red("\u2717")} ${String(err)}`);
       process.exit(1);
     }
   }
 });
-var getCommand = defineCommand3({
+var getCommand = defineCommand4({
   meta: { name: "get", description: "Get a config value" },
   args: {
     key: {
@@ -1177,32 +1425,32 @@ var getCommand = defineCommand3({
   run({ args }) {
     const val = getConfigValue(args.key);
     if (val === void 0) {
-      console.log(pc3.dim(`${args.key}: (not set)`));
+      console.log(pc4.dim(`${args.key}: (not set)`));
     } else {
-      console.log(`${pc3.bold(args.key)}: ${pc3.cyan(String(val))}`);
+      console.log(`${pc4.bold(args.key)}: ${pc4.cyan(String(val))}`);
     }
   }
 });
-var listCommand = defineCommand3({
+var listCommand = defineCommand4({
   meta: { name: "list", description: "List all config values" },
   run() {
     const data = readConfig();
     const entries = Object.entries(data);
     if (entries.length === 0) {
-      console.log(pc3.dim("No config values set. Use `mcpman config set <key> <value>`."));
+      console.log(pc4.dim("No config values set. Use `mcpman config set <key> <value>`."));
       return;
     }
     console.log("");
-    console.log(pc3.bold("mcpman config:"));
+    console.log(pc4.bold("mcpman config:"));
     console.log("");
     for (const [key, val] of entries) {
-      console.log(`  ${pc3.green("\u25CF")} ${pc3.bold(key)}  ${pc3.cyan(String(val))}`);
+      console.log(`  ${pc4.green("\u25CF")} ${pc4.bold(key)}  ${pc4.cyan(String(val))}`);
     }
     console.log("");
-    console.log(pc3.dim(`  ${entries.length} key${entries.length !== 1 ? "s" : ""} configured`));
+    console.log(pc4.dim(`  ${entries.length} key${entries.length !== 1 ? "s" : ""} configured`));
   }
 });
-var resetCommand = defineCommand3({
+var resetCommand = defineCommand4({
   meta: { name: "reset", description: "Reset config to defaults (removes config file)" },
   async run() {
     const confirmed = await p2.confirm({
@@ -1214,10 +1462,10 @@ var resetCommand = defineCommand3({
       return;
     }
     writeConfig({});
-    console.log(`${pc3.green("\u2713")} Config reset to defaults.`);
+    console.log(`${pc4.green("\u2713")} Config reset to defaults.`);
   }
 });
-var config_default = defineCommand3({
+var config_default = defineCommand4({
   meta: {
     name: "config",
     description: "Manage mcpman CLI configuration"
@@ -1232,11 +1480,11 @@ var config_default = defineCommand3({
 
 // src/commands/create.ts
 import path6 from "path";
-import { defineCommand as defineCommand4 } from "citty";
-import pc4 from "picocolors";
+import { defineCommand as defineCommand5 } from "citty";
+import pc5 from "picocolors";
 
 // src/core/scaffold-service.ts
-import fs5 from "fs";
+import fs6 from "fs";
 import path5 from "path";
 function sanitizeName(name) {
   return name.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
@@ -1389,8 +1637,8 @@ if __name__ == "__main__":
   };
 }
 function writeScaffold(dir, files) {
-  if (fs5.existsSync(dir)) {
-    const existing = fs5.readdirSync(dir);
+  if (fs6.existsSync(dir)) {
+    const existing = fs6.readdirSync(dir);
     if (existing.length > 0) {
       throw new Error(`Directory '${dir}' already exists and is not empty.`);
     }
@@ -1398,13 +1646,13 @@ function writeScaffold(dir, files) {
   for (const [relativePath, content] of Object.entries(files)) {
     const fullPath = path5.join(dir, relativePath);
     const parentDir = path5.dirname(fullPath);
-    fs5.mkdirSync(parentDir, { recursive: true });
-    fs5.writeFileSync(fullPath, content, "utf-8");
+    fs6.mkdirSync(parentDir, { recursive: true });
+    fs6.writeFileSync(fullPath, content, "utf-8");
   }
 }
 
 // src/commands/create.ts
-var create_default = defineCommand4({
+var create_default = defineCommand5({
   meta: {
     name: "create",
     description: "Scaffold a new MCP server project"
@@ -1442,7 +1690,7 @@ var create_default = defineCommand4({
         const readline = await import("readline");
         const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
         projectName = await new Promise((resolve) => {
-          rl.question(pc4.cyan("  Project name: "), (answer) => {
+          rl.question(pc5.cyan("  Project name: "), (answer) => {
             rl.close();
             resolve(answer.trim());
           });
@@ -1452,7 +1700,7 @@ var create_default = defineCommand4({
         const readline = await import("readline");
         const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
         projectDescription = await new Promise((resolve) => {
-          rl.question(pc4.cyan("  Description (optional): "), (answer) => {
+          rl.question(pc5.cyan("  Description (optional): "), (answer) => {
             rl.close();
             resolve(answer.trim());
           });
@@ -1462,7 +1710,7 @@ var create_default = defineCommand4({
         const readline = await import("readline");
         const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
         const answer = await new Promise((resolve) => {
-          rl.question(pc4.cyan("  Runtime [node/python] (default: node): "), (a) => {
+          rl.question(pc5.cyan("  Runtime [node/python] (default: node): "), (a) => {
             rl.close();
             resolve(a.trim() || "node");
           });
@@ -1471,16 +1719,16 @@ var create_default = defineCommand4({
       }
     }
     if (!projectName) {
-      console.error(pc4.red("  Error: Project name is required."));
+      console.error(pc5.red("  Error: Project name is required."));
       process.exit(1);
     }
     const sanitized = sanitizeName(projectName);
     if (!sanitized) {
-      console.error(pc4.red(`  Error: Invalid project name '${projectName}'.`));
+      console.error(pc5.red(`  Error: Invalid project name '${projectName}'.`));
       process.exit(1);
     }
     if (runtime !== "node" && runtime !== "python") {
-      console.error(pc4.red(`  Error: Unknown runtime '${runtime}'. Use node or python.`));
+      console.error(pc5.red(`  Error: Unknown runtime '${runtime}'. Use node or python.`));
       process.exit(1);
     }
     const options = {
@@ -1494,44 +1742,206 @@ var create_default = defineCommand4({
     try {
       writeScaffold(targetDir, files);
     } catch (err) {
-      console.error(pc4.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+      console.error(pc5.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
       process.exit(1);
     }
-    console.log(pc4.green(`
-  Created ${pc4.bold(sanitized)}/
+    console.log(pc5.green(`
+  Created ${pc5.bold(sanitized)}/
 `));
-    console.log(pc4.dim("  Files generated:"));
+    console.log(pc5.dim("  Files generated:"));
     for (const file of Object.keys(files)) {
-      console.log(`    ${pc4.cyan(file)}`);
+      console.log(`    ${pc5.cyan(file)}`);
     }
     console.log("\n  Next steps:");
     if (runtime === "node") {
-      console.log(`    ${pc4.bold(`cd ${sanitized}`)}`);
-      console.log(`    ${pc4.bold("npm install")}`);
-      console.log(`    ${pc4.bold("mcpman link .")}`);
+      console.log(`    ${pc5.bold(`cd ${sanitized}`)}`);
+      console.log(`    ${pc5.bold("npm install")}`);
+      console.log(`    ${pc5.bold("mcpman link .")}`);
     } else {
-      console.log(`    ${pc4.bold(`cd ${sanitized}`)}`);
-      console.log(`    ${pc4.bold("pip install -e .")}`);
-      console.log(`    ${pc4.bold("mcpman link .")}`);
+      console.log(`    ${pc5.bold(`cd ${sanitized}`)}`);
+      console.log(`    ${pc5.bold("pip install -e .")}`);
+      console.log(`    ${pc5.bold("mcpman link .")}`);
     }
     console.log();
   }
 });
 
+// src/commands/diff.ts
+import { defineCommand as defineCommand6 } from "citty";
+import pc6 from "picocolors";
+
+// src/core/config-differ.ts
+function entryDiffs(a, b) {
+  const diffs = [];
+  if (a.command !== b.command) {
+    diffs.push(`command: ${a.command} \u2192 ${b.command}`);
+  }
+  const aArgs = JSON.stringify(a.args ?? []);
+  const bArgs = JSON.stringify(b.args ?? []);
+  if (aArgs !== bArgs) {
+    diffs.push(`args: ${aArgs} \u2192 ${bArgs}`);
+  }
+  const aEnv = JSON.stringify(a.env ?? {});
+  const bEnv = JSON.stringify(b.env ?? {});
+  if (aEnv !== bEnv) {
+    diffs.push(`env: ${aEnv} \u2192 ${bEnv}`);
+  }
+  return diffs;
+}
+function diffClientConfigs(configA, configB) {
+  const results = [];
+  const serversA = configA.servers;
+  const serversB = configB.servers;
+  for (const name of Object.keys(serversB)) {
+    if (!(name in serversA)) {
+      results.push({ server: name, change: "added" });
+    }
+  }
+  for (const name of Object.keys(serversA)) {
+    if (!(name in serversB)) {
+      results.push({ server: name, change: "removed" });
+    }
+  }
+  for (const name of Object.keys(serversA)) {
+    if (name in serversB) {
+      const details = entryDiffs(serversA[name], serversB[name]);
+      if (details.length > 0) {
+        results.push({ server: name, change: "changed", details });
+      }
+    }
+  }
+  const order = { removed: 0, added: 1, changed: 2 };
+  results.sort((a, b) => {
+    const orderDiff = order[a.change] - order[b.change];
+    return orderDiff !== 0 ? orderDiff : a.server.localeCompare(b.server);
+  });
+  return results;
+}
+async function loadClientConfig(type) {
+  try {
+    const { getClient } = await import("./client-detector-NHXBDNMY.js");
+    const handler = getClient(type);
+    return await handler.readConfig();
+  } catch {
+    return null;
+  }
+}
+
+// src/commands/diff.ts
+var VALID_CLIENTS = ["claude-desktop", "cursor", "vscode", "windsurf"];
+var CLIENT_DISPLAY = {
+  "claude-desktop": "Claude Desktop",
+  cursor: "Cursor",
+  vscode: "VS Code",
+  windsurf: "Windsurf"
+};
+var diff_default = defineCommand6({
+  meta: {
+    name: "diff",
+    description: "Show config diff between two AI clients"
+  },
+  args: {
+    clientA: {
+      type: "positional",
+      description: `Source client (${VALID_CLIENTS.join("|")})`,
+      required: true
+    },
+    clientB: {
+      type: "positional",
+      description: `Target client (${VALID_CLIENTS.join("|")})`,
+      required: true
+    },
+    json: {
+      type: "boolean",
+      description: "Output results as JSON",
+      default: false
+    }
+  },
+  async run({ args }) {
+    const clientA = args.clientA;
+    const clientB = args.clientB;
+    if (!VALID_CLIENTS.includes(clientA)) {
+      console.error(
+        `${pc6.red("\u2717")} Unknown client "${clientA}". Valid: ${VALID_CLIENTS.join(", ")}`
+      );
+      process.exit(1);
+    }
+    if (!VALID_CLIENTS.includes(clientB)) {
+      console.error(
+        `${pc6.red("\u2717")} Unknown client "${clientB}". Valid: ${VALID_CLIENTS.join(", ")}`
+      );
+      process.exit(1);
+    }
+    if (clientA === clientB) {
+      console.error(`${pc6.red("\u2717")} clientA and clientB must be different.`);
+      process.exit(1);
+    }
+    const [configA, configB] = await Promise.all([
+      loadClientConfig(clientA),
+      loadClientConfig(clientB)
+    ]);
+    if (!configA) {
+      console.error(`${pc6.red("\u2717")} Could not read config for ${CLIENT_DISPLAY[clientA]}.`);
+      process.exit(1);
+    }
+    if (!configB) {
+      console.error(`${pc6.red("\u2717")} Could not read config for ${CLIENT_DISPLAY[clientB]}.`);
+      process.exit(1);
+    }
+    const diffs = diffClientConfigs(configA, configB);
+    if (args.json) {
+      console.log(JSON.stringify({ clientA, clientB, diffs }, null, 2));
+      return;
+    }
+    const labelA = CLIENT_DISPLAY[clientA];
+    const labelB = CLIENT_DISPLAY[clientB];
+    console.log(`
+${pc6.bold("mcpman diff")}  ${pc6.cyan(labelA)} \u2192 ${pc6.cyan(labelB)}
+`);
+    if (diffs.length === 0) {
+      console.log(pc6.green("  \u2713 No differences \u2014 configs are identical."));
+      console.log("");
+      return;
+    }
+    for (const d of diffs) {
+      if (d.change === "added") {
+        console.log(`  ${pc6.green("+")} ${pc6.bold(d.server)}  ${pc6.dim(`(only in ${labelB})`)}`);
+      } else if (d.change === "removed") {
+        console.log(`  ${pc6.red("-")} ${pc6.bold(d.server)}  ${pc6.dim(`(only in ${labelA})`)}`);
+      } else {
+        console.log(`  ${pc6.yellow("~")} ${pc6.bold(d.server)}  ${pc6.dim("(changed)")}`);
+        for (const detail of d.details ?? []) {
+          console.log(`      ${pc6.dim(detail)}`);
+        }
+      }
+    }
+    const added = diffs.filter((d) => d.change === "added").length;
+    const removed = diffs.filter((d) => d.change === "removed").length;
+    const changed = diffs.filter((d) => d.change === "changed").length;
+    const parts = [];
+    if (added > 0) parts.push(pc6.green(`+${added} added`));
+    if (removed > 0) parts.push(pc6.red(`-${removed} removed`));
+    if (changed > 0) parts.push(pc6.yellow(`~${changed} changed`));
+    console.log(`
+  ${parts.join("  ")}
+`);
+  }
+});
+
 // src/commands/doctor.ts
-import { defineCommand as defineCommand5 } from "citty";
-import pc5 from "picocolors";
+import { defineCommand as defineCommand7 } from "citty";
+import pc7 from "picocolors";
 
 // src/core/diagnostics.ts
 import { exec } from "child_process";
 import { promisify } from "util";
 
 // src/core/mcp-process-checks.ts
-import { spawn } from "child_process";
+import { spawn as spawn2 } from "child_process";
 async function checkProcessSpawn(command, args, env, timeoutMs = 3e3) {
   return new Promise((resolve) => {
     let settled = false;
-    const child = spawn(command, args, {
+    const child = spawn2(command, args, {
       env: { ...process.env, ...env },
       stdio: ["pipe", "pipe", "pipe"]
     });
@@ -1577,7 +1987,7 @@ async function checkMcpHandshake(command, args, env, timeoutMs = 5e3) {
     let settled = false;
     const start = Date.now();
     let stdout = "";
-    const child = spawn(command, args, {
+    const child = spawn2(command, args, {
       env: { ...process.env, ...env },
       stdio: ["pipe", "pipe", "pipe"]
     });
@@ -1865,12 +2275,12 @@ async function getInstalledServers(clientFilter) {
 
 // src/commands/doctor.ts
 var CHECK_ICON = {
-  pass: pc5.green("\u2713"),
-  fail: pc5.red("\u2717"),
-  skip: pc5.dim("-"),
-  warn: pc5.yellow("\u26A0")
+  pass: pc7.green("\u2713"),
+  fail: pc7.red("\u2717"),
+  skip: pc7.dim("-"),
+  warn: pc7.yellow("\u26A0")
 };
-var doctor_default = defineCommand5({
+var doctor_default = defineCommand7({
   meta: {
     name: "doctor",
     description: "Check MCP server health and configuration"
@@ -1883,11 +2293,11 @@ var doctor_default = defineCommand5({
     }
   },
   async run({ args }) {
-    console.log(pc5.bold("\n  mcpman doctor\n"));
+    console.log(pc7.bold("\n  mcpman doctor\n"));
     const servers = await getInstalledServers();
     if (servers.length === 0) {
       console.log(
-        pc5.dim("  No MCP servers installed. Run mcpman install <server> to get started.")
+        pc7.dim("  No MCP servers installed. Run mcpman install <server> to get started.")
       );
       return;
     }
@@ -1904,20 +2314,20 @@ var doctor_default = defineCommand5({
     if (pluginSummary.total > 0) {
       printPluginSection(pluginSummary);
     }
-    console.log(pc5.dim(`  ${"\u2500".repeat(50)}`));
+    console.log(pc7.dim(`  ${"\u2500".repeat(50)}`));
     const parts = [];
-    if (passed > 0) parts.push(pc5.green(`${passed} healthy`));
-    if (failed > 0) parts.push(pc5.red(`${failed} unhealthy`));
+    if (passed > 0) parts.push(pc7.green(`${passed} healthy`));
+    if (failed > 0) parts.push(pc7.red(`${failed} unhealthy`));
     console.log(`  Summary: ${parts.join(", ")}`);
     if (pluginSummary.total > 0) {
       const pParts = [];
-      if (pluginSummary.healthy > 0) pParts.push(pc5.green(`${pluginSummary.healthy} ok`));
-      if (pluginSummary.unhealthy > 0) pParts.push(pc5.red(`${pluginSummary.unhealthy} broken`));
+      if (pluginSummary.healthy > 0) pParts.push(pc7.green(`${pluginSummary.healthy} ok`));
+      if (pluginSummary.unhealthy > 0) pParts.push(pc7.red(`${pluginSummary.unhealthy} broken`));
       console.log(`  Plugins: ${pParts.join(", ")}`);
     }
     if (failed > 0 || pluginSummary.unhealthy > 0) {
       if (!args.fix) {
-        console.log(pc5.dim(`  Run ${pc5.cyan("mcpman doctor --fix")} for fix suggestions.
+        console.log(pc7.dim(`  Run ${pc7.cyan("mcpman doctor --fix")} for fix suggestions.
 `));
       }
       process.exit(1);
@@ -1926,26 +2336,26 @@ var doctor_default = defineCommand5({
   }
 });
 function printPluginSection(summary) {
-  console.log(pc5.bold(`  Plugins (${summary.total})`));
+  console.log(pc7.bold(`  Plugins (${summary.total})`));
   for (const r of summary.results) {
-    const icon = r.loadable && r.prefixUnique && r.resolvable ? pc5.green("\u2713") : pc5.red("\u2717");
+    const icon = r.loadable && r.prefixUnique && r.resolvable ? pc7.green("\u2713") : pc7.red("\u2717");
     const label = r.pluginName ? `${r.packageName} (${r.pluginName})` : r.packageName;
-    const prefix = r.prefix ? pc5.dim(` [${r.prefix}]`) : "";
+    const prefix = r.prefix ? pc7.dim(` [${r.prefix}]`) : "";
     console.log(`    ${icon} ${label}${prefix}`);
     if (r.error) {
-      console.log(`      ${pc5.yellow("\u2192")} ${r.error}`);
+      console.log(`      ${pc7.yellow("\u2192")} ${r.error}`);
     }
   }
   console.log();
 }
 function printServerResult(result, showFix) {
-  const icon = result.status === "healthy" ? pc5.green("\u25CF") : pc5.red("\u25CF");
-  console.log(`  ${icon} ${pc5.bold(result.serverName)}`);
+  const icon = result.status === "healthy" ? pc7.green("\u25CF") : pc7.red("\u25CF");
+  console.log(`  ${icon} ${pc7.bold(result.serverName)}`);
   for (const check of result.checks) {
     const checkIcon = check.skipped ? CHECK_ICON.skip : check.passed ? CHECK_ICON.pass : CHECK_ICON.fail;
     console.log(`    ${checkIcon} ${check.name}: ${check.message}`);
     if (showFix && !check.passed && !check.skipped && check.fix) {
-      console.log(`      ${pc5.yellow("\u2192")} Fix: ${pc5.cyan(check.fix)}`);
+      console.log(`      ${pc7.yellow("\u2192")} Fix: ${pc7.cyan(check.fix)}`);
     }
   }
   console.log();
@@ -1954,11 +2364,11 @@ async function runParallel(tasks, concurrency) {
   const results = [];
   const executing = /* @__PURE__ */ new Set();
   for (const task of tasks) {
-    const p12 = task().then((r) => {
+    const p13 = task().then((r) => {
       results.push(r);
-      executing.delete(p12);
+      executing.delete(p13);
     });
-    executing.add(p12);
+    executing.add(p13);
     if (executing.size >= concurrency) {
       await Promise.race(executing);
     }
@@ -1967,18 +2377,188 @@ async function runParallel(tasks, concurrency) {
   return results;
 }
 
-// src/commands/export-command.ts
+// src/commands/env.ts
+import { defineCommand as defineCommand8 } from "citty";
+import pc8 from "picocolors";
+
+// src/core/env-manager.ts
 import fs7 from "fs";
 import path7 from "path";
-import { defineCommand as defineCommand6 } from "citty";
-import pc6 from "picocolors";
+function envFilePath(server, dir) {
+  const base = dir ?? getEnvDir();
+  const safe = server.replace(/[/@]/g, "_");
+  return path7.join(base, `${safe}.json`);
+}
+function readStore(server, dir) {
+  const file = envFilePath(server, dir);
+  if (!fs7.existsSync(file)) return {};
+  try {
+    return JSON.parse(fs7.readFileSync(file, "utf-8"));
+  } catch {
+    return {};
+  }
+}
+function writeStore(server, store, dir) {
+  const base = dir ?? getEnvDir();
+  if (!fs7.existsSync(base)) {
+    fs7.mkdirSync(base, { recursive: true });
+  }
+  const file = envFilePath(server, dir);
+  fs7.writeFileSync(file, JSON.stringify(store, null, 2), "utf-8");
+}
+function setEnv(server, key, value, dir) {
+  const store = readStore(server, dir);
+  store[key] = value;
+  writeStore(server, store, dir);
+}
+function getEnv(server, key, dir) {
+  const store = readStore(server, dir);
+  return key in store ? store[key] : null;
+}
+function listEnv(server, dir) {
+  return readStore(server, dir);
+}
+function deleteEnv(server, key, dir) {
+  const store = readStore(server, dir);
+  if (!(key in store)) return;
+  delete store[key];
+  writeStore(server, store, dir);
+}
+function clearEnv(server, dir) {
+  const file = envFilePath(server, dir);
+  if (fs7.existsSync(file)) {
+    fs7.unlinkSync(file);
+  }
+}
+function listEnvServers(dir) {
+  const base = dir ?? getEnvDir();
+  if (!fs7.existsSync(base)) return [];
+  return fs7.readdirSync(base).filter((f) => f.endsWith(".json")).map((f) => f.slice(0, -5));
+}
+
+// src/commands/env.ts
+var setCmd = defineCommand8({
+  meta: { name: "set", description: "Set env var(s) for a server" },
+  args: {
+    server: { type: "positional", description: "Server name", required: true },
+    pairs: { type: "positional", description: "KEY=VALUE pair(s)", required: true }
+  },
+  run({ args }) {
+    const pairs = Array.isArray(args.pairs) ? args.pairs : [args.pairs];
+    for (const pair of pairs) {
+      const idx = pair.indexOf("=");
+      if (idx <= 0) {
+        console.error(`${pc8.red("\u2717")} Invalid format: "${pair}". Expected KEY=VALUE`);
+        process.exit(1);
+      }
+      const key = pair.slice(0, idx);
+      const value = pair.slice(idx + 1);
+      setEnv(args.server, key, value);
+      console.log(
+        `${pc8.green("\u2713")} Set ${pc8.bold(key)}=${pc8.dim(value)} for ${pc8.cyan(args.server)}`
+      );
+    }
+  }
+});
+var getCmd = defineCommand8({
+  meta: { name: "get", description: "Get an env var for a server" },
+  args: {
+    server: { type: "positional", description: "Server name", required: true },
+    key: { type: "positional", description: "Variable name", required: true }
+  },
+  run({ args }) {
+    const value = getEnv(args.server, args.key);
+    if (value === null) {
+      console.error(`${pc8.red("\u2717")} No env var "${args.key}" for ${pc8.cyan(args.server)}`);
+      process.exit(1);
+    }
+    console.log(value);
+  }
+});
+var listCmd = defineCommand8({
+  meta: { name: "list", description: "List env vars for a server (or all servers)" },
+  args: {
+    server: { type: "positional", description: "Server name (optional)", required: false }
+  },
+  run({ args }) {
+    if (args.server) {
+      const store = listEnv(args.server);
+      const keys = Object.keys(store);
+      if (keys.length === 0) {
+        console.log(pc8.dim(`No env vars for ${pc8.cyan(args.server)}.`));
+        return;
+      }
+      console.log(`
+${pc8.bold(pc8.cyan(args.server))}`);
+      for (const [k, v] of Object.entries(store)) {
+        console.log(`  ${pc8.green("\u25CF")} ${pc8.bold(k)}=${pc8.dim(v)}`);
+      }
+      console.log("");
+    } else {
+      const servers = listEnvServers();
+      if (servers.length === 0) {
+        console.log(pc8.dim("No env vars stored."));
+        return;
+      }
+      for (const srv of servers) {
+        const store = listEnv(srv);
+        console.log(`
+${pc8.bold(pc8.cyan(srv))}`);
+        for (const [k, v] of Object.entries(store)) {
+          console.log(`  ${pc8.green("\u25CF")} ${pc8.bold(k)}=${pc8.dim(v)}`);
+        }
+      }
+      console.log("");
+    }
+  }
+});
+var delCmd = defineCommand8({
+  meta: { name: "del", description: "Delete an env var for a server" },
+  args: {
+    server: { type: "positional", description: "Server name", required: true },
+    key: { type: "positional", description: "Variable name to delete", required: true }
+  },
+  run({ args }) {
+    deleteEnv(args.server, args.key);
+    console.log(`${pc8.green("\u2713")} Deleted ${pc8.bold(args.key)} from ${pc8.cyan(args.server)}`);
+  }
+});
+var clearCmd = defineCommand8({
+  meta: { name: "clear", description: "Clear all env vars for a server" },
+  args: {
+    server: { type: "positional", description: "Server name", required: true }
+  },
+  run({ args }) {
+    clearEnv(args.server);
+    console.log(`${pc8.green("\u2713")} Cleared all env vars for ${pc8.cyan(args.server)}`);
+  }
+});
+var env_default = defineCommand8({
+  meta: {
+    name: "env",
+    description: "Manage per-server environment variables (non-sensitive)"
+  },
+  subCommands: {
+    set: setCmd,
+    get: getCmd,
+    list: listCmd,
+    del: delCmd,
+    clear: clearCmd
+  }
+});
+
+// src/commands/export-command.ts
+import fs9 from "fs";
+import path8 from "path";
+import { defineCommand as defineCommand9 } from "citty";
+import pc9 from "picocolors";
 
 // src/core/export-import-service.ts
-import fs6 from "fs";
+import fs8 from "fs";
 
 // src/utils/constants.ts
 var APP_NAME = "mcpman";
-var APP_VERSION = "0.7.0";
+var APP_VERSION = "0.8.0";
 var APP_DESCRIPTION = "The package manager for MCP servers";
 
 // src/core/export-import-service.ts
@@ -1994,7 +2574,7 @@ function createExportBundle(opts = {}) {
   };
   if (includeVault) {
     const vaultPath = getVaultPath();
-    if (fs6.existsSync(vaultPath)) {
+    if (fs8.existsSync(vaultPath)) {
       bundle.vault = readVault();
     }
   }
@@ -2055,58 +2635,268 @@ function importBundle(bundle, opts = {}) {
       }
     }
   }
-  return summary;
+  return summary;
+}
+
+// src/commands/export-command.ts
+var DEFAULT_OUTPUT = "mcpman-export.json";
+var export_command_default = defineCommand9({
+  meta: {
+    name: "export",
+    description: "Export mcpman config, lockfile, vault, and plugins to a portable JSON file"
+  },
+  args: {
+    output: {
+      type: "positional",
+      description: `Output file path (default: ${DEFAULT_OUTPUT})`,
+      required: false
+    },
+    "no-vault": {
+      type: "boolean",
+      description: "Exclude encrypted vault from export",
+      default: false
+    },
+    "no-plugins": {
+      type: "boolean",
+      description: "Exclude plugin list from export",
+      default: false
+    }
+  },
+  run({ args }) {
+    const outputFile = args.output || DEFAULT_OUTPUT;
+    const outputPath = path8.resolve(outputFile);
+    const bundle = createExportBundle({
+      includeVault: !args["no-vault"],
+      includePlugins: !args["no-plugins"]
+    });
+    const serverCount = Object.keys(bundle.lockfile.servers).length;
+    const configKeys = Object.keys(bundle.config).length;
+    fs9.writeFileSync(outputPath, JSON.stringify(bundle, null, 2), "utf-8");
+    console.log(`${pc9.green("\u2713")} Exported to ${pc9.bold(outputFile)}`);
+    console.log(pc9.dim(`  Config keys: ${configKeys}`));
+    console.log(pc9.dim(`  Servers: ${serverCount}`));
+    console.log(pc9.dim(`  Vault: ${bundle.vault ? "included" : "excluded"}`));
+    console.log(pc9.dim(`  Plugins: ${bundle.plugins?.length ?? 0}`));
+  }
+});
+
+// src/commands/group.ts
+import { spawn as spawn3 } from "child_process";
+import { defineCommand as defineCommand10 } from "citty";
+import pc10 from "picocolors";
+
+// src/core/group-manager.ts
+import fs10 from "fs";
+function readGroups(file) {
+  const target = file ?? getGroupsFile();
+  if (!fs10.existsSync(target)) return {};
+  try {
+    return JSON.parse(fs10.readFileSync(target, "utf-8"));
+  } catch {
+    return {};
+  }
+}
+function writeGroups(store, file) {
+  const target = file ?? getGroupsFile();
+  const dir = target.slice(0, target.lastIndexOf("/"));
+  if (dir && !fs10.existsSync(dir)) {
+    fs10.mkdirSync(dir, { recursive: true });
+  }
+  fs10.writeFileSync(target, JSON.stringify(store, null, 2), "utf-8");
+}
+function addToGroup(group, servers, file) {
+  const store = readGroups(file);
+  const existing = new Set(store[group] ?? []);
+  for (const s of servers) existing.add(s);
+  store[group] = [...existing].sort();
+  writeGroups(store, file);
+}
+function removeFromGroup(group, servers, file) {
+  const store = readGroups(file);
+  if (!store[group]) return;
+  const toRemove = new Set(servers);
+  store[group] = store[group].filter((s) => !toRemove.has(s));
+  if (store[group].length === 0) delete store[group];
+  writeGroups(store, file);
+}
+function getGroup(group, file) {
+  return readGroups(file)[group] ?? [];
+}
+function listGroups(file) {
+  return Object.keys(readGroups(file)).sort();
+}
+function deleteGroup(group, file) {
+  const store = readGroups(file);
+  if (!(group in store)) return;
+  delete store[group];
+  writeGroups(store, file);
+}
+function groupExists(group, file) {
+  return group in readGroups(file);
+}
+
+// src/commands/group.ts
+var addCmd = defineCommand10({
+  meta: { name: "add", description: "Add servers to a group" },
+  args: {
+    name: { type: "positional", description: "Group name", required: true },
+    servers: { type: "positional", description: "Server name(s)", required: true }
+  },
+  run({ args }) {
+    const servers = Array.isArray(args.servers) ? args.servers : [args.servers];
+    addToGroup(args.name, servers);
+    console.log(`${pc10.green("\u2713")} Added ${servers.join(", ")} to group ${pc10.cyan(args.name)}`);
+  }
+});
+var rmCmd = defineCommand10({
+  meta: { name: "rm", description: "Remove servers from a group" },
+  args: {
+    name: { type: "positional", description: "Group name", required: true },
+    servers: { type: "positional", description: "Server name(s)", required: true }
+  },
+  run({ args }) {
+    const servers = Array.isArray(args.servers) ? args.servers : [args.servers];
+    removeFromGroup(args.name, servers);
+    console.log(`${pc10.green("\u2713")} Removed ${servers.join(", ")} from group ${pc10.cyan(args.name)}`);
+  }
+});
+var listCmd2 = defineCommand10({
+  meta: { name: "list", description: "List all groups (or members of a group)" },
+  args: {
+    name: { type: "positional", description: "Group name (optional)", required: false }
+  },
+  run({ args }) {
+    if (args.name) {
+      const members = getGroup(args.name);
+      if (members.length === 0) {
+        console.log(pc10.dim(`Group "${args.name}" is empty or does not exist.`));
+        return;
+      }
+      console.log(`
+${pc10.bold(pc10.cyan(args.name))}`);
+      for (const s of members) console.log(`  ${pc10.green("\u25CF")} ${s}`);
+      console.log("");
+    } else {
+      const groups = listGroups();
+      if (groups.length === 0) {
+        console.log(pc10.dim("No groups defined. Use `mcpman group add <name> <server>`."));
+        return;
+      }
+      console.log("");
+      for (const g of groups) {
+        const members = getGroup(g);
+        console.log(
+          `  ${pc10.cyan(pc10.bold(g))}  ${pc10.dim(`(${members.length} server${members.length !== 1 ? "s" : ""})`)}`
+        );
+        for (const s of members) console.log(`    ${pc10.dim("\xB7")} ${s}`);
+      }
+      console.log("");
+    }
+  }
+});
+var deleteCmd = defineCommand10({
+  meta: { name: "delete", description: "Delete an entire group" },
+  args: {
+    name: { type: "positional", description: "Group name", required: true }
+  },
+  run({ args }) {
+    if (!groupExists(args.name)) {
+      console.error(`${pc10.red("\u2717")} Group "${args.name}" does not exist.`);
+      process.exit(1);
+    }
+    deleteGroup(args.name);
+    console.log(`${pc10.green("\u2713")} Deleted group ${pc10.cyan(args.name)}`);
+  }
+});
+var installCmd = defineCommand10({
+  meta: { name: "install", description: "Install all servers in a group" },
+  args: {
+    name: { type: "positional", description: "Group name", required: true }
+  },
+  async run({ args }) {
+    const members = getGroup(args.name);
+    if (members.length === 0) {
+      console.error(`${pc10.red("\u2717")} Group "${args.name}" is empty or does not exist.`);
+      process.exit(1);
+    }
+    console.log(
+      `${pc10.cyan("Installing")} group ${pc10.bold(args.name)} (${members.length} servers)...`
+    );
+    for (const server of members) {
+      console.log(`
+  ${pc10.dim("\u2192")} Installing ${pc10.bold(server)}...`);
+      await runInstall(server);
+    }
+    console.log(`
+${pc10.green("\u2713")} Group install complete.`);
+  }
+});
+var runCmd = defineCommand10({
+  meta: { name: "run", description: "Run all servers in a group concurrently" },
+  args: {
+    name: { type: "positional", description: "Group name", required: true }
+  },
+  run({ args }) {
+    const members = getGroup(args.name);
+    if (members.length === 0) {
+      console.error(`${pc10.red("\u2717")} Group "${args.name}" is empty or does not exist.`);
+      process.exit(1);
+    }
+    const lockfile = readLockfile();
+    console.log(
+      `${pc10.cyan("Spawning")} group ${pc10.bold(args.name)} (${members.length} servers)...
+`
+    );
+    for (const server of members) {
+      const entry = lockfile.servers[server];
+      if (!entry) {
+        console.warn(`  ${pc10.yellow("!")} ${server} not in lockfile \u2014 skipping`);
+        continue;
+      }
+      const child = spawn3(entry.command, entry.args ?? [], {
+        env: process.env,
+        stdio: "inherit",
+        detached: false
+      });
+      child.on("error", (err) => {
+        console.error(`  ${pc10.red("\u2717")} ${server}: ${err.message}`);
+      });
+      console.log(`  ${pc10.green("\u2713")} Spawned ${pc10.bold(server)} (pid ${child.pid ?? "?"})`);
+    }
+  }
+});
+function runInstall(server) {
+  return new Promise((resolve, reject) => {
+    const child = spawn3("mcpman", ["install", server], { stdio: "inherit" });
+    child.on("close", (code) => {
+      if (code === 0) resolve();
+      else reject(new Error(`install exited with code ${code}`));
+    });
+    child.on("error", reject);
+  });
 }
-
-// src/commands/export-command.ts
-var DEFAULT_OUTPUT = "mcpman-export.json";
-var export_command_default = defineCommand6({
+var group_default = defineCommand10({
   meta: {
-    name: "export",
-    description: "Export mcpman config, lockfile, vault, and plugins to a portable JSON file"
-  },
-  args: {
-    output: {
-      type: "positional",
-      description: `Output file path (default: ${DEFAULT_OUTPUT})`,
-      required: false
-    },
-    "no-vault": {
-      type: "boolean",
-      description: "Exclude encrypted vault from export",
-      default: false
-    },
-    "no-plugins": {
-      type: "boolean",
-      description: "Exclude plugin list from export",
-      default: false
-    }
+    name: "group",
+    description: "Manage named server groups"
   },
-  run({ args }) {
-    const outputFile = args.output || DEFAULT_OUTPUT;
-    const outputPath = path7.resolve(outputFile);
-    const bundle = createExportBundle({
-      includeVault: !args["no-vault"],
-      includePlugins: !args["no-plugins"]
-    });
-    const serverCount = Object.keys(bundle.lockfile.servers).length;
-    const configKeys = Object.keys(bundle.config).length;
-    fs7.writeFileSync(outputPath, JSON.stringify(bundle, null, 2), "utf-8");
-    console.log(`${pc6.green("\u2713")} Exported to ${pc6.bold(outputFile)}`);
-    console.log(pc6.dim(`  Config keys: ${configKeys}`));
-    console.log(pc6.dim(`  Servers: ${serverCount}`));
-    console.log(pc6.dim(`  Vault: ${bundle.vault ? "included" : "excluded"}`));
-    console.log(pc6.dim(`  Plugins: ${bundle.plugins?.length ?? 0}`));
+  subCommands: {
+    add: addCmd,
+    rm: rmCmd,
+    list: listCmd2,
+    delete: deleteCmd,
+    install: installCmd,
+    run: runCmd
   }
 });
 
 // src/commands/import-command.ts
-import fs8 from "fs";
-import path8 from "path";
+import fs11 from "fs";
+import path9 from "path";
 import * as p3 from "@clack/prompts";
-import { defineCommand as defineCommand7 } from "citty";
-import pc7 from "picocolors";
-var import_command_default = defineCommand7({
+import { defineCommand as defineCommand11 } from "citty";
+import pc11 from "picocolors";
+var import_command_default = defineCommand11({
   meta: {
     name: "import",
     description: "Import mcpman config, lockfile, vault, and plugins from an export file"
@@ -2129,21 +2919,21 @@ var import_command_default = defineCommand7({
     }
   },
   async run({ args }) {
-    const filePath = path8.resolve(args.file);
-    if (!fs8.existsSync(filePath)) {
-      console.error(`${pc7.red("\u2717")} File not found: ${filePath}`);
+    const filePath = path9.resolve(args.file);
+    if (!fs11.existsSync(filePath)) {
+      console.error(`${pc11.red("\u2717")} File not found: ${filePath}`);
       process.exit(1);
     }
     let raw;
     try {
-      raw = JSON.parse(fs8.readFileSync(filePath, "utf-8"));
+      raw = JSON.parse(fs11.readFileSync(filePath, "utf-8"));
     } catch {
-      console.error(`${pc7.red("\u2717")} Invalid JSON in ${filePath}`);
+      console.error(`${pc11.red("\u2717")} Invalid JSON in ${filePath}`);
       process.exit(1);
     }
     const error2 = validateBundle(raw);
     if (error2) {
-      console.error(`${pc7.red("\u2717")} Invalid export bundle: ${error2}`);
+      console.error(`${pc11.red("\u2717")} Invalid export bundle: ${error2}`);
       process.exit(1);
     }
     const bundle = raw;
@@ -2153,16 +2943,16 @@ var import_command_default = defineCommand7({
     const hasVault = !!bundle.vault;
     const isDryRun = !!args["dry-run"];
     console.log("");
-    console.log(pc7.bold("Import summary:"));
-    console.log(pc7.dim(`  Source version: mcpman ${bundle.mcpmanVersion}`));
-    console.log(pc7.dim(`  Exported at: ${bundle.exportedAt}`));
-    console.log(`  Config keys: ${pc7.cyan(String(configKeys))}`);
-    console.log(`  Servers: ${pc7.cyan(String(serverCount))}`);
-    console.log(`  Vault: ${hasVault ? pc7.green("included") : pc7.dim("not included")}`);
-    console.log(`  Plugins: ${pc7.cyan(String(pluginCount))}`);
+    console.log(pc11.bold("Import summary:"));
+    console.log(pc11.dim(`  Source version: mcpman ${bundle.mcpmanVersion}`));
+    console.log(pc11.dim(`  Exported at: ${bundle.exportedAt}`));
+    console.log(`  Config keys: ${pc11.cyan(String(configKeys))}`);
+    console.log(`  Servers: ${pc11.cyan(String(serverCount))}`);
+    console.log(`  Vault: ${hasVault ? pc11.green("included") : pc11.dim("not included")}`);
+    console.log(`  Plugins: ${pc11.cyan(String(pluginCount))}`);
     console.log("");
     if (isDryRun) {
-      console.log(pc7.yellow("  [dry-run] No changes applied."));
+      console.log(pc11.yellow("  [dry-run] No changes applied."));
       return;
     }
     if (!args.yes) {
@@ -2176,18 +2966,18 @@ var import_command_default = defineCommand7({
       }
     }
     const summary = importBundle(bundle, { dryRun: false });
-    console.log(`${pc7.green("\u2713")} Import complete`);
-    console.log(pc7.dim(`  Config keys restored: ${summary.configKeys}`));
-    console.log(pc7.dim(`  Servers restored: ${summary.servers}`));
-    console.log(pc7.dim(`  Vault: ${summary.vaultImported ? "restored" : "skipped"}`));
-    console.log(pc7.dim(`  Plugins installed: ${summary.pluginsInstalled}`));
+    console.log(`${pc11.green("\u2713")} Import complete`);
+    console.log(pc11.dim(`  Config keys restored: ${summary.configKeys}`));
+    console.log(pc11.dim(`  Servers restored: ${summary.servers}`));
+    console.log(pc11.dim(`  Vault: ${summary.vaultImported ? "restored" : "skipped"}`));
+    console.log(pc11.dim(`  Plugins installed: ${summary.pluginsInstalled}`));
   }
 });
 
 // src/commands/info.ts
-import { defineCommand as defineCommand8 } from "citty";
+import { defineCommand as defineCommand12 } from "citty";
 import { createSpinner as createSpinner2 } from "nanospinner";
-import pc8 from "picocolors";
+import pc12 from "picocolors";
 
 // src/core/package-info.ts
 async function buildInfo(name, entry, source = "npm") {
@@ -2242,11 +3032,11 @@ async function getPackageInfo(serverName) {
 // src/commands/info.ts
 function colorRisk2(score, riskLevel) {
   const label = score !== null ? `${score}/100 (${riskLevel})` : riskLevel;
-  if (riskLevel === "LOW") return pc8.green(label);
-  if (riskLevel === "MEDIUM") return pc8.yellow(label);
-  if (riskLevel === "HIGH") return pc8.red(label);
-  if (riskLevel === "CRITICAL") return pc8.bold(pc8.red(label));
-  return pc8.dim(label);
+  if (riskLevel === "LOW") return pc12.green(label);
+  if (riskLevel === "MEDIUM") return pc12.yellow(label);
+  if (riskLevel === "HIGH") return pc12.red(label);
+  if (riskLevel === "CRITICAL") return pc12.bold(pc12.red(label));
+  return pc12.dim(label);
 }
 function formatDaysAgo(isoDate) {
   if (!isoDate) return "unknown";
@@ -2256,54 +3046,54 @@ function formatDaysAgo(isoDate) {
   return `${days} days ago`;
 }
 function printInfo(info2) {
-  const installedBadge = info2.isInstalled ? pc8.green(" [installed]") : pc8.dim(" [not installed]");
+  const installedBadge = info2.isInstalled ? pc12.green(" [installed]") : pc12.dim(" [not installed]");
   console.log();
-  console.log(pc8.bold(`  ${info2.name}@${info2.version}`) + installedBadge);
-  console.log(pc8.dim(`  ${"\u2500".repeat(60)}`));
-  console.log(`  ${pc8.dim("Source:")}   ${info2.source}`);
-  console.log(`  ${pc8.dim("Runtime:")}  ${info2.runtime}`);
+  console.log(pc12.bold(`  ${info2.name}@${info2.version}`) + installedBadge);
+  console.log(pc12.dim(`  ${"\u2500".repeat(60)}`));
+  console.log(`  ${pc12.dim("Source:")}   ${info2.source}`);
+  console.log(`  ${pc12.dim("Runtime:")}  ${info2.runtime}`);
   if (info2.description) {
-    console.log(`  ${pc8.dim("Description:")} ${info2.description}`);
+    console.log(`  ${pc12.dim("Description:")} ${info2.description}`);
   }
   if (info2.deprecated) {
-    console.log(`  ${pc8.red("[DEPRECATED]")} This package is deprecated`);
+    console.log(`  ${pc12.red("[DEPRECATED]")} This package is deprecated`);
   }
   console.log();
-  console.log(`  ${pc8.bold("Trust & Security")}`);
-  console.log(`  ${pc8.dim("Trust score:")}   ${colorRisk2(info2.trustScore, info2.riskLevel)}`);
+  console.log(`  ${pc12.bold("Trust & Security")}`);
+  console.log(`  ${pc12.dim("Trust score:")}   ${colorRisk2(info2.trustScore, info2.riskLevel)}`);
   if (info2.source === "npm") {
     console.log(
-      `  ${pc8.dim("Downloads:")}    ${info2.weeklyDownloads.toLocaleString()}/week  ${pc8.dim("|")}  ${pc8.dim("Age:")} ${info2.packageAge}d  ${pc8.dim("|")}  ${pc8.dim("Maintainers:")} ${info2.maintainerCount}`
+      `  ${pc12.dim("Downloads:")}    ${info2.weeklyDownloads.toLocaleString()}/week  ${pc12.dim("|")}  ${pc12.dim("Age:")} ${info2.packageAge}d  ${pc12.dim("|")}  ${pc12.dim("Maintainers:")} ${info2.maintainerCount}`
     );
     if (info2.lastPublish) {
-      console.log(`  ${pc8.dim("Last publish:")} ${formatDaysAgo(info2.lastPublish)}`);
+      console.log(`  ${pc12.dim("Last publish:")} ${formatDaysAgo(info2.lastPublish)}`);
     }
   } else {
-    console.log(pc8.dim("  (Trust data available for npm packages only)"));
+    console.log(pc12.dim("  (Trust data available for npm packages only)"));
   }
   console.log();
-  console.log(`  ${pc8.bold("Environment Variables")}`);
+  console.log(`  ${pc12.bold("Environment Variables")}`);
   if (info2.envVars.length > 0) {
     for (const env of info2.envVars) {
-      console.log(`    ${pc8.cyan("\u2022")} ${env}`);
+      console.log(`    ${pc12.cyan("\u2022")} ${env}`);
     }
   } else {
-    console.log(pc8.dim("    none required"));
+    console.log(pc12.dim("    none required"));
   }
   console.log();
-  console.log(`  ${pc8.bold("Installed Clients")}`);
+  console.log(`  ${pc12.bold("Installed Clients")}`);
   if (info2.installedClients.length > 0) {
     for (const client of info2.installedClients) {
-      console.log(`    ${pc8.green("\u2713")} ${client}`);
+      console.log(`    ${pc12.green("\u2713")} ${client}`);
     }
   } else {
-    console.log(pc8.dim("    Not installed in any client"));
+    console.log(pc12.dim("    Not installed in any client"));
   }
   console.log();
-  console.log(pc8.dim(`  ${"\u2500".repeat(60)}`));
+  console.log(pc12.dim(`  ${"\u2500".repeat(60)}`));
   console.log();
 }
-var info_default = defineCommand8({
+var info_default = defineCommand12({
   meta: {
     name: "info",
     description: "Show detailed metadata for an MCP server (installed or from registry)"
@@ -2327,13 +3117,13 @@ var info_default = defineCommand8({
       info2 = await getPackageInfo(args.server);
     } catch (err) {
       spinner5.error({ text: "Failed to fetch package info" });
-      console.error(pc8.red(String(err)));
+      console.error(pc12.red(String(err)));
       process.exit(1);
     }
     if (!info2) {
       spinner5.error({ text: `Package not found: ${args.server}` });
       console.log(
-        pc8.dim(`
+        pc12.dim(`
   "${args.server}" was not found in the npm registry or your lockfile.
 `)
       );
@@ -2349,10 +3139,10 @@ var info_default = defineCommand8({
 });
 
 // src/commands/init.ts
-import path9 from "path";
+import path10 from "path";
 import * as p4 from "@clack/prompts";
-import { defineCommand as defineCommand9 } from "citty";
-var init_default = defineCommand9({
+import { defineCommand as defineCommand13 } from "citty";
+var init_default = defineCommand13({
   meta: {
     name: "init",
     description: "Initialize mcpman.lock in the current project"
@@ -2368,7 +3158,7 @@ var init_default = defineCommand9({
   async run({ args }) {
     const nonInteractive = args.yes || !process.stdout.isTTY;
     p4.intro("mcpman init");
-    const targetPath = path9.join(process.cwd(), LOCKFILE_NAME);
+    const targetPath = path10.join(process.cwd(), LOCKFILE_NAME);
     const existing = findLockfile();
     if (existing) {
       if (nonInteractive) {
@@ -2384,7 +3174,7 @@ var init_default = defineCommand9({
     }
     let clients = [];
     try {
-      const mod = await import("./client-detector-CY7WPF3K.js");
+      const mod = await import("./client-detector-NHXBDNMY.js");
       clients = await mod.getInstalledClients();
     } catch {
       p4.log.warn("Could not detect AI clients \u2014 creating empty lockfile.");
@@ -2452,7 +3242,7 @@ var init_default = defineCommand9({
 
 // src/commands/install.ts
 import * as p7 from "@clack/prompts";
-import { defineCommand as defineCommand10 } from "citty";
+import { defineCommand as defineCommand14 } from "citty";
 
 // src/core/installer.ts
 import * as p6 from "@clack/prompts";
@@ -2492,7 +3282,7 @@ async function offerVaultSave(serverName, newVars, yes) {
 // src/core/installer.ts
 async function loadClients2() {
   try {
-    const mod = await import("./client-detector-CY7WPF3K.js");
+    const mod = await import("./client-detector-NHXBDNMY.js");
     return mod.getInstalledClients();
   } catch {
     return [];
@@ -2604,7 +3394,7 @@ async function installServer(input, options = {}) {
 }
 
 // src/utils/logger.ts
-import pc9 from "picocolors";
+import pc13 from "picocolors";
 var noColor = process.env.NO_COLOR !== void 0 || process.argv.includes("--no-color");
 var isVerbose = process.argv.includes("--verbose");
 var isJson = process.argv.includes("--json");
@@ -2613,18 +3403,18 @@ function colorize(fn, text2) {
 }
 function info(message) {
   if (isJson) return;
-  console.log(`${colorize(pc9.cyan, "i")} ${message}`);
+  console.log(`${colorize(pc13.cyan, "i")} ${message}`);
 }
 function error(message) {
   if (isJson) return;
-  console.error(`${colorize(pc9.red, "\u2717")} ${message}`);
+  console.error(`${colorize(pc13.red, "\u2717")} ${message}`);
 }
 function json(data) {
   console.log(JSON.stringify(data, null, 2));
 }
 
 // src/commands/install.ts
-var install_default = defineCommand10({
+var install_default = defineCommand14({
   meta: {
     name: "install",
     description: "Install an MCP server into one or more AI clients"
@@ -2686,23 +3476,23 @@ async function restoreFromLockfile() {
 }
 
 // src/commands/link.ts
-import path11 from "path";
-import { defineCommand as defineCommand11 } from "citty";
-import pc10 from "picocolors";
+import path12 from "path";
+import { defineCommand as defineCommand15 } from "citty";
+import pc14 from "picocolors";
 
 // src/core/link-service.ts
-import fs9 from "fs";
-import path10 from "path";
+import fs12 from "fs";
+import path11 from "path";
 function detectLocalServer(dir) {
-  if (!fs9.existsSync(dir)) {
+  if (!fs12.existsSync(dir)) {
     throw new Error(`Directory does not exist: ${dir}`);
   }
-  const pkgPath = path10.join(dir, "package.json");
-  if (fs9.existsSync(pkgPath)) {
+  const pkgPath = path11.join(dir, "package.json");
+  if (fs12.existsSync(pkgPath)) {
     return detectNodeServer(dir, pkgPath);
   }
-  const pyprojectPath = path10.join(dir, "pyproject.toml");
-  if (fs9.existsSync(pyprojectPath)) {
+  const pyprojectPath = path11.join(dir, "pyproject.toml");
+  if (fs12.existsSync(pyprojectPath)) {
     return detectPythonServer(dir, pyprojectPath);
   }
   throw new Error(
@@ -2710,28 +3500,28 @@ function detectLocalServer(dir) {
   );
 }
 function detectNodeServer(dir, pkgPath) {
-  const raw = fs9.readFileSync(pkgPath, "utf-8");
+  const raw = fs12.readFileSync(pkgPath, "utf-8");
   const pkg = JSON.parse(raw);
-  const name = String(pkg.name ?? path10.basename(dir));
+  const name = String(pkg.name ?? path11.basename(dir));
   const version = String(pkg.version ?? "0.0.0");
   let entryPoint = null;
   if (pkg.bin) {
     if (typeof pkg.bin === "string") {
-      entryPoint = path10.resolve(dir, pkg.bin);
+      entryPoint = path11.resolve(dir, pkg.bin);
     } else if (typeof pkg.bin === "object" && pkg.bin !== null) {
       const binObj = pkg.bin;
       const firstBin = Object.values(binObj)[0];
-      if (firstBin) entryPoint = path10.resolve(dir, firstBin);
+      if (firstBin) entryPoint = path11.resolve(dir, firstBin);
     }
   }
   if (!entryPoint && pkg.main) {
-    entryPoint = path10.resolve(dir, String(pkg.main));
+    entryPoint = path11.resolve(dir, String(pkg.main));
   }
   if (!entryPoint) {
     const candidates = ["src/index.ts", "src/index.js", "index.ts", "index.js"];
     for (const c of candidates) {
-      const candidate = path10.join(dir, c);
-      if (fs9.existsSync(candidate)) {
+      const candidate = path11.join(dir, c);
+      if (fs12.existsSync(candidate)) {
         entryPoint = candidate;
         break;
       }
@@ -2756,20 +3546,20 @@ function detectNodeServer(dir, pkgPath) {
   return { name, version, command, args, envVars, absolutePath: dir, runtime: "node" };
 }
 function detectPythonServer(dir, pyprojectPath) {
-  const raw = fs9.readFileSync(pyprojectPath, "utf-8");
-  const name = extractTomlValue(raw, "name") ?? path10.basename(dir);
+  const raw = fs12.readFileSync(pyprojectPath, "utf-8");
+  const name = extractTomlValue(raw, "name") ?? path11.basename(dir);
   const version = extractTomlValue(raw, "version") ?? "0.0.0";
   let pythonCmd = "python3";
-  const venvPython = path10.join(dir, ".venv", "bin", "python");
-  if (fs9.existsSync(venvPython)) {
+  const venvPython = path11.join(dir, ".venv", "bin", "python");
+  if (fs12.existsSync(venvPython)) {
     pythonCmd = venvPython;
   }
   const entryCandidate = [
-    path10.join(dir, "main.py"),
-    path10.join(dir, name.replace(/-/g, "_"), "main.py"),
-    path10.join(dir, "__main__.py")
-  ].find((p12) => fs9.existsSync(p12));
-  const entryPoint = entryCandidate ?? path10.join(dir, "main.py");
+    path11.join(dir, "main.py"),
+    path11.join(dir, name.replace(/-/g, "_"), "main.py"),
+    path11.join(dir, "__main__.py")
+  ].find((p13) => fs12.existsSync(p13));
+  const entryPoint = entryCandidate ?? path11.join(dir, "main.py");
   return {
     name,
     version,
@@ -2811,13 +3601,13 @@ async function registerLinkedServer(linkResult, clients, lockfilePath, nameOverr
   };
   const existing = readLockfile(lockfilePath);
   existing.servers[serverName] = lockEntry;
-  const { writeLockfile: writeLockfile2 } = await import("./lockfile-RBA7HB24.js");
+  const { writeLockfile: writeLockfile2 } = await import("./lockfile-5XXA26FM.js");
   writeLockfile2(existing, lockfilePath);
   return registered;
 }
 
 // src/commands/link.ts
-var link_default = defineCommand11({
+var link_default = defineCommand15({
   meta: {
     name: "link",
     description: "Register a local MCP server directory with AI clients"
@@ -2843,42 +3633,42 @@ var link_default = defineCommand11({
     const dirArg = args.dir ?? ".";
     const clientFilter = args.client;
     const nameOverride = args.name;
-    const absoluteDir = path11.resolve(dirArg);
+    const absoluteDir = path12.resolve(dirArg);
     let linkResult;
     try {
       linkResult = detectLocalServer(absoluteDir);
     } catch (err) {
-      console.error(pc10.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+      console.error(pc14.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
       process.exit(1);
     }
     const serverName = nameOverride ?? linkResult.name;
-    console.log(pc10.dim(`
-  Detected: ${pc10.cyan(serverName)} (${linkResult.runtime})`));
-    console.log(pc10.dim(`  Path: ${absoluteDir}`));
-    console.log(pc10.dim(`  Command: ${linkResult.command} ${linkResult.args.join(" ")}`));
+    console.log(pc14.dim(`
+  Detected: ${pc14.cyan(serverName)} (${linkResult.runtime})`));
+    console.log(pc14.dim(`  Path: ${absoluteDir}`));
+    console.log(pc14.dim(`  Command: ${linkResult.command} ${linkResult.args.join(" ")}`));
     const allClients = await getInstalledClients();
     const clients = clientFilter ? allClients.filter((c) => c.type === clientFilter) : allClients;
     if (clientFilter && clients.length === 0) {
-      console.error(pc10.red(`  Error: Unknown client '${clientFilter}'.`));
+      console.error(pc14.red(`  Error: Unknown client '${clientFilter}'.`));
       process.exit(1);
     }
     let registered;
     try {
       registered = await registerLinkedServer(linkResult, clients, void 0, nameOverride);
     } catch (err) {
-      console.error(pc10.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+      console.error(pc14.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
       process.exit(1);
     }
     if (registered.length === 0) {
-      console.log(pc10.yellow("  Warning: No clients registered. Are any AI clients installed?"));
-      console.log(pc10.dim(`  Server saved to lockfile with source "local".`));
+      console.log(pc14.yellow("  Warning: No clients registered. Are any AI clients installed?"));
+      console.log(pc14.dim(`  Server saved to lockfile with source "local".`));
     } else {
-      console.log(pc10.green(`
-  Linked ${pc10.bold(serverName)} to: ${registered.join(", ")}
+      console.log(pc14.green(`
+  Linked ${pc14.bold(serverName)} to: ${registered.join(", ")}
 `));
-      console.log(pc10.dim(`  Run ${pc10.cyan("mcpman list")} to verify.`));
+      console.log(pc14.dim(`  Run ${pc14.cyan("mcpman list")} to verify.`));
       console.log(
-        pc10.dim(`  Run ${pc10.cyan(`mcpman watch ${serverName}`)} to start with auto-restart.`)
+        pc14.dim(`  Run ${pc14.cyan(`mcpman watch ${serverName}`)} to start with auto-restart.`)
       );
     }
     console.log();
@@ -2886,14 +3676,14 @@ var link_default = defineCommand11({
 });
 
 // src/commands/list.ts
-import { defineCommand as defineCommand12 } from "citty";
-import pc11 from "picocolors";
+import { defineCommand as defineCommand16 } from "citty";
+import pc15 from "picocolors";
 var STATUS_ICON = {
-  healthy: pc11.green("\u25CF"),
-  unhealthy: pc11.red("\u25CF"),
-  unknown: pc11.dim("\u25CB")
+  healthy: pc15.green("\u25CF"),
+  unhealthy: pc15.red("\u25CF"),
+  unknown: pc15.dim("\u25CB")
 };
-var list_default = defineCommand12({
+var list_default = defineCommand16({
   meta: {
     name: "list",
     description: "List installed MCP servers"
@@ -2914,8 +3704,8 @@ var list_default = defineCommand12({
     if (servers.length === 0) {
       const filter = args.client ? ` for client "${args.client}"` : "";
       console.log(
-        pc11.dim(
-          `No MCP servers installed${filter}. Run ${pc11.cyan("mcpman install <server>")} to get started.`
+        pc15.dim(
+          `No MCP servers installed${filter}. Run ${pc15.cyan("mcpman install <server>")} to get started.`
         )
       );
       return;
@@ -2941,9 +3731,9 @@ var list_default = defineCommand12({
     const nameWidth = Math.max(4, ...withStatus.map((s) => s.name.length));
     const clientsWidth = Math.max(7, ...withStatus.map((s) => formatClients(s.clients).length));
     const header = `  ${pad("NAME", nameWidth)}  ${pad("CLIENT(S)", clientsWidth)}  ${pad("COMMAND", 20)}  STATUS`;
-    console.log(pc11.dim(header));
+    console.log(pc15.dim(header));
     console.log(
-      pc11.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(clientsWidth)}  ${"-".repeat(20)}  ------`)
+      pc15.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(clientsWidth)}  ${"-".repeat(20)}  ------`)
     );
     for (const s of withStatus) {
       const icon = STATUS_ICON[s.status];
@@ -2958,7 +3748,7 @@ var list_default = defineCommand12({
     }
     const clientSet = new Set(withStatus.flatMap((s) => s.clients));
     console.log(
-      pc11.dim(
+      pc15.dim(
         `
   ${withStatus.length} server${withStatus.length !== 1 ? "s" : ""} \xB7 ${clientSet.size} client${clientSet.size !== 1 ? "s" : ""}`
       )
@@ -2971,21 +3761,21 @@ function pad(s, width) {
 function truncate(s, max) {
   return s.length > max ? `${s.slice(0, max - 1)}\u2026` : s;
 }
-var CLIENT_DISPLAY = {
+var CLIENT_DISPLAY2 = {
   "claude-desktop": "Claude",
   cursor: "Cursor",
   vscode: "VS Code",
   windsurf: "Windsurf"
 };
 function formatClients(clients) {
-  return clients.map((c) => CLIENT_DISPLAY[c] ?? c).join(", ");
+  return clients.map((c) => CLIENT_DISPLAY2[c] ?? c).join(", ");
 }
 
 // src/commands/logs.ts
-import { spawn as spawn2 } from "child_process";
-import { defineCommand as defineCommand13 } from "citty";
-import pc12 from "picocolors";
-var logs_default = defineCommand13({
+import { spawn as spawn4 } from "child_process";
+import { defineCommand as defineCommand17 } from "citty";
+import pc16 from "picocolors";
+var logs_default = defineCommand17({
   meta: {
     name: "logs",
     description: "Stream stdout/stderr from an MCP server"
@@ -3008,7 +3798,7 @@ var logs_default = defineCommand13({
     const lockfile = readLockfile();
     const entry = lockfile.servers[serverName];
     if (!entry) {
-      console.error(pc12.red(`  Error: Server '${serverName}' is not installed.`));
+      console.error(pc16.red(`  Error: Server '${serverName}' is not installed.`));
       process.exit(1);
     }
     const lockfileEnv = parseEnvFlags(entry.envVars);
@@ -3018,24 +3808,24 @@ var logs_default = defineCommand13({
       ...lockfileEnv,
       ...vaultEnv
     };
-    console.log(pc12.dim(`  Streaming logs for ${pc12.cyan(serverName)}... (Ctrl+C to stop)
+    console.log(pc16.dim(`  Streaming logs for ${pc16.cyan(serverName)}... (Ctrl+C to stop)
 `));
-    const child = spawn2(entry.command, entry.args, {
+    const child = spawn4(entry.command, entry.args, {
       env: finalEnv,
       stdio: ["pipe", "pipe", "pipe"]
     });
     child.stdout?.on("data", (chunk) => {
-      process.stdout.write(pc12.dim("[stdout] ") + chunk.toString());
+      process.stdout.write(pc16.dim("[stdout] ") + chunk.toString());
     });
     child.stderr?.on("data", (chunk) => {
-      process.stderr.write(pc12.yellow("[stderr] ") + chunk.toString());
+      process.stderr.write(pc16.yellow("[stderr] ") + chunk.toString());
     });
     child.on("error", (err) => {
-      console.error(pc12.red(`  Failed to start '${serverName}': ${err.message}`));
+      console.error(pc16.red(`  Failed to start '${serverName}': ${err.message}`));
       process.exit(1);
     });
     child.on("close", (code) => {
-      console.log(pc12.dim(`
+      console.log(pc16.dim(`
   Process exited with code ${code ?? 0}`));
       process.exit(code ?? 0);
     });
@@ -3059,11 +3849,98 @@ async function loadVaultSecrets(serverName) {
   }
 }
 
+// src/commands/pin.ts
+import { defineCommand as defineCommand18 } from "citty";
+import pc17 from "picocolors";
+var pin_default = defineCommand18({
+  meta: {
+    name: "pin",
+    description: "Pin a server to a specific version"
+  },
+  args: {
+    server: {
+      type: "positional",
+      description: "Server name to pin/unpin",
+      required: false
+    },
+    version: {
+      type: "positional",
+      description: "Version to pin to (defaults to currently installed version)",
+      required: false
+    },
+    unpin: {
+      type: "boolean",
+      description: "Remove the pin for a server",
+      default: false
+    },
+    list: {
+      type: "boolean",
+      description: "List all pinned servers",
+      default: false
+    }
+  },
+  run({ args }) {
+    if (args.list) {
+      const pins = listPins();
+      if (pins.length === 0) {
+        console.log(pc17.dim("No servers are pinned."));
+        return;
+      }
+      console.log(`
+  ${pc17.bold("Pinned servers")}
+`);
+      for (const { server, version: version2 } of pins) {
+        console.log(`  ${pc17.cyan(pc17.bold(server))}  ${pc17.dim("@")}${pc17.green(version2)}`);
+      }
+      console.log("");
+      return;
+    }
+    if (args.unpin) {
+      if (!args.server) {
+        console.error(`${pc17.red("\u2717")} Specify a server name to unpin.`);
+        process.exit(1);
+      }
+      if (!isPinned(args.server)) {
+        console.log(pc17.dim(`"${args.server}" is not pinned.`));
+        return;
+      }
+      unpinServer(args.server);
+      console.log(`${pc17.green("\u2713")} Unpinned ${pc17.cyan(args.server)}`);
+      return;
+    }
+    if (!args.server) {
+      console.error(`${pc17.red("\u2717")} Specify a server name to pin. Use --list to see pins.`);
+      process.exit(1);
+    }
+    let version = args.version;
+    if (!version) {
+      const lockfile = readLockfile();
+      version = lockfile.servers[args.server]?.version;
+      if (!version) {
+        console.error(
+          `${pc17.red("\u2717")} "${args.server}" not found in lockfile. Specify a version explicitly.`
+        );
+        process.exit(1);
+      }
+    }
+    pinServer(args.server, version);
+    const prev = getPinnedVersion(args.server);
+    if (prev && prev !== version) {
+      console.log(
+        `${pc17.green("\u2713")} Re-pinned ${pc17.cyan(args.server)} ${pc17.dim(prev)} \u2192 ${pc17.green(version)}`
+      );
+    } else {
+      console.log(`${pc17.green("\u2713")} Pinned ${pc17.cyan(args.server)} @ ${pc17.green(version)}`);
+    }
+    console.log(pc17.dim("  Update notifications will be suppressed for this server."));
+  }
+});
+
 // src/commands/plugin.ts
-import { defineCommand as defineCommand14 } from "citty";
+import { defineCommand as defineCommand19 } from "citty";
 import { createSpinner as createSpinner3 } from "nanospinner";
-import pc13 from "picocolors";
-var addCommand = defineCommand14({
+import pc18 from "picocolors";
+var addCommand = defineCommand19({
   meta: { name: "add", description: "Install a plugin package" },
   args: {
     package: {
@@ -3081,23 +3958,23 @@ var addCommand = defineCommand14({
       spinner5.stop();
       if (loaded) {
         console.log(
-          `${pc13.green("\u2713")} Plugin ${pc13.bold(loaded.name)} installed (prefix: ${pc13.cyan(loaded.prefix)})`
+          `${pc18.green("\u2713")} Plugin ${pc18.bold(loaded.name)} installed (prefix: ${pc18.cyan(loaded.prefix)})`
         );
       } else {
         console.log(
-          `${pc13.yellow("\u26A0")} Package ${pc13.bold(pkg)} installed but does not export a valid mcpman plugin.`
+          `${pc18.yellow("\u26A0")} Package ${pc18.bold(pkg)} installed but does not export a valid mcpman plugin.`
         );
       }
     } catch (err) {
       spinner5.stop();
       console.error(
-        `${pc13.red("\u2717")} Failed to install plugin: ${err instanceof Error ? err.message : String(err)}`
+        `${pc18.red("\u2717")} Failed to install plugin: ${err instanceof Error ? err.message : String(err)}`
       );
       process.exit(1);
     }
   }
 });
-var removeCommand = defineCommand14({
+var removeCommand = defineCommand19({
   meta: { name: "remove", description: "Uninstall a plugin package" },
   args: {
     package: {
@@ -3110,46 +3987,46 @@ var removeCommand = defineCommand14({
     const pkg = args.package;
     const installed = listPluginPackages();
     if (!installed.includes(pkg)) {
-      console.log(pc13.dim(`Plugin "${pkg}" is not installed.`));
+      console.log(pc18.dim(`Plugin "${pkg}" is not installed.`));
       return;
     }
     try {
       removePluginPackage(pkg);
-      console.log(`${pc13.green("\u2713")} Plugin ${pc13.bold(pkg)} removed.`);
+      console.log(`${pc18.green("\u2713")} Plugin ${pc18.bold(pkg)} removed.`);
     } catch (err) {
       console.error(
-        `${pc13.red("\u2717")} Failed to remove plugin: ${err instanceof Error ? err.message : String(err)}`
+        `${pc18.red("\u2717")} Failed to remove plugin: ${err instanceof Error ? err.message : String(err)}`
       );
       process.exit(1);
     }
   }
 });
-var listCommand2 = defineCommand14({
+var listCommand2 = defineCommand19({
   meta: { name: "list", description: "List installed plugins" },
   run() {
     const packages = listPluginPackages();
     if (packages.length === 0) {
-      console.log(pc13.dim("No plugins installed. Use `mcpman plugin add <package>`."));
+      console.log(pc18.dim("No plugins installed. Use `mcpman plugin add <package>`."));
       return;
     }
     console.log("");
-    console.log(pc13.bold("Installed plugins:"));
+    console.log(pc18.bold("Installed plugins:"));
     console.log("");
     for (const pkg of packages) {
       const loaded = loadPlugin(pkg);
       if (loaded) {
         console.log(
-          `  ${pc13.green("\u25CF")} ${pc13.bold(loaded.name)}  prefix: ${pc13.cyan(loaded.prefix)}  pkg: ${pc13.dim(pkg)}`
+          `  ${pc18.green("\u25CF")} ${pc18.bold(loaded.name)}  prefix: ${pc18.cyan(loaded.prefix)}  pkg: ${pc18.dim(pkg)}`
         );
       } else {
-        console.log(`  ${pc13.yellow("\u25CF")} ${pc13.dim(pkg)}  ${pc13.yellow("(failed to load)")}`);
+        console.log(`  ${pc18.yellow("\u25CF")} ${pc18.dim(pkg)}  ${pc18.yellow("(failed to load)")}`);
       }
     }
     console.log("");
-    console.log(pc13.dim(`  ${packages.length} plugin${packages.length !== 1 ? "s" : ""} installed`));
+    console.log(pc18.dim(`  ${packages.length} plugin${packages.length !== 1 ? "s" : ""} installed`));
   }
 });
-var plugin_default = defineCommand14({
+var plugin_default = defineCommand19({
   meta: {
     name: "plugin",
     description: "Manage mcpman plugins for custom registries"
@@ -3162,22 +4039,22 @@ var plugin_default = defineCommand14({
 });
 
 // src/commands/profiles.ts
-import { defineCommand as defineCommand15 } from "citty";
-import pc14 from "picocolors";
+import { defineCommand as defineCommand20 } from "citty";
+import pc19 from "picocolors";
 
 // src/core/profile-service.ts
-import fs10 from "fs";
-import path12 from "path";
+import fs13 from "fs";
+import path13 from "path";
 function ensureDir(dir = getProfilesDir()) {
-  fs10.mkdirSync(dir, { recursive: true });
+  fs13.mkdirSync(dir, { recursive: true });
 }
 function profilePath(name, dir = getProfilesDir()) {
-  return path12.join(dir, `${name}.json`);
+  return path13.join(dir, `${name}.json`);
 }
 function createProfile(name, description = "", dir = getProfilesDir()) {
   ensureDir(dir);
   const filePath = profilePath(name, dir);
-  if (fs10.existsSync(filePath)) {
+  if (fs13.existsSync(filePath)) {
     throw new Error(`Profile '${name}' already exists. Delete it first or use a different name.`);
   }
   const lockfile = readLockfile();
@@ -3187,16 +4064,16 @@ function createProfile(name, description = "", dir = getProfilesDir()) {
     createdAt: (/* @__PURE__ */ new Date()).toISOString(),
     servers: lockfile.servers
   };
-  fs10.writeFileSync(filePath, JSON.stringify(profile, null, 2), "utf-8");
+  fs13.writeFileSync(filePath, JSON.stringify(profile, null, 2), "utf-8");
   return profile;
 }
 function listProfiles(dir = getProfilesDir()) {
   ensureDir(dir);
-  const files = fs10.readdirSync(dir).filter((f) => f.endsWith(".json"));
+  const files = fs13.readdirSync(dir).filter((f) => f.endsWith(".json"));
   const profiles = [];
   for (const file of files) {
     try {
-      const raw = fs10.readFileSync(path12.join(dir, file), "utf-8");
+      const raw = fs13.readFileSync(path13.join(dir, file), "utf-8");
       const data = JSON.parse(raw);
       profiles.push(data);
     } catch {
@@ -3206,9 +4083,9 @@ function listProfiles(dir = getProfilesDir()) {
 }
 function loadProfile(name, dir = getProfilesDir()) {
   const filePath = profilePath(name, dir);
-  if (!fs10.existsSync(filePath)) return null;
+  if (!fs13.existsSync(filePath)) return null;
   try {
-    const raw = fs10.readFileSync(filePath, "utf-8");
+    const raw = fs13.readFileSync(filePath, "utf-8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -3216,13 +4093,13 @@ function loadProfile(name, dir = getProfilesDir()) {
 }
 function deleteProfile(name, dir = getProfilesDir()) {
   const filePath = profilePath(name, dir);
-  if (!fs10.existsSync(filePath)) return false;
-  fs10.unlinkSync(filePath);
+  if (!fs13.existsSync(filePath)) return false;
+  fs13.unlinkSync(filePath);
   return true;
 }
 
 // src/commands/profiles.ts
-var profiles_default = defineCommand15({
+var profiles_default = defineCommand20({
   meta: {
     name: "profiles",
     description: "Manage named server configuration profiles"
@@ -3251,16 +4128,16 @@ var profiles_default = defineCommand15({
       case "create": {
         if (!name) {
           console.error(
-            pc14.red("  Error: Profile name required. Usage: mcpman profiles create <name>")
+            pc19.red("  Error: Profile name required. Usage: mcpman profiles create <name>")
           );
           process.exit(1);
         }
         try {
           const profile = createProfile(name, args.description ?? "");
           const count = Object.keys(profile.servers).length;
-          console.log(pc14.green(`  \u2713 Profile '${name}' created with ${count} server(s).`));
+          console.log(pc19.green(`  \u2713 Profile '${name}' created with ${count} server(s).`));
         } catch (err) {
-          console.error(pc14.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+          console.error(pc19.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
           process.exit(1);
         }
         break;
@@ -3268,38 +4145,38 @@ var profiles_default = defineCommand15({
       case "switch": {
         if (!name) {
           console.error(
-            pc14.red("  Error: Profile name required. Usage: mcpman profiles switch <name>")
+            pc19.red("  Error: Profile name required. Usage: mcpman profiles switch <name>")
           );
           process.exit(1);
         }
         const profile = loadProfile(name);
         if (!profile) {
-          console.error(pc14.red(`  Error: Profile '${name}' not found.`));
+          console.error(pc19.red(`  Error: Profile '${name}' not found.`));
           process.exit(1);
         }
         const lockData = { lockfileVersion: 1, servers: profile.servers };
         writeLockfile(lockData);
         const count = Object.keys(profile.servers).length;
-        console.log(pc14.green(`  \u2713 Switched to profile '${name}' (${count} servers).`));
-        console.log(pc14.dim("  Run mcpman sync to apply to all clients."));
+        console.log(pc19.green(`  \u2713 Switched to profile '${name}' (${count} servers).`));
+        console.log(pc19.dim("  Run mcpman sync to apply to all clients."));
         break;
       }
       case "list": {
         const profiles = listProfiles();
         if (profiles.length === 0) {
           console.log(
-            pc14.dim("  No profiles saved. Create one with: mcpman profiles create <name>")
+            pc19.dim("  No profiles saved. Create one with: mcpman profiles create <name>")
           );
           return;
         }
-        console.log(pc14.bold(`
+        console.log(pc19.bold(`
   Profiles (${profiles.length})
 `));
-        for (const p12 of profiles) {
-          const count = Object.keys(p12.servers).length;
-          const desc = p12.description ? pc14.dim(` \u2014 ${p12.description}`) : "";
+        for (const p13 of profiles) {
+          const count = Object.keys(p13.servers).length;
+          const desc = p13.description ? pc19.dim(` \u2014 ${p13.description}`) : "";
           console.log(
-            `  ${pc14.cyan("\u25CF")} ${pc14.bold(p12.name)}  ${pc14.dim(`${count} server(s)`)}${desc}`
+            `  ${pc19.cyan("\u25CF")} ${pc19.bold(p13.name)}  ${pc19.dim(`${count} server(s)`)}${desc}`
           );
         }
         console.log();
@@ -3308,22 +4185,22 @@ var profiles_default = defineCommand15({
       case "delete": {
         if (!name) {
           console.error(
-            pc14.red("  Error: Profile name required. Usage: mcpman profiles delete <name>")
+            pc19.red("  Error: Profile name required. Usage: mcpman profiles delete <name>")
           );
           process.exit(1);
         }
         const deleted = deleteProfile(name);
         if (deleted) {
-          console.log(pc14.green(`  \u2713 Profile '${name}' deleted.`));
+          console.log(pc19.green(`  \u2713 Profile '${name}' deleted.`));
         } else {
-          console.error(pc14.red(`  Error: Profile '${name}' not found.`));
+          console.error(pc19.red(`  Error: Profile '${name}' not found.`));
           process.exit(1);
         }
         break;
       }
       default:
         console.error(
-          pc14.red(`  Unknown action '${action}'. Use: create, switch, list, or delete.`)
+          pc19.red(`  Unknown action '${action}'. Use: create, switch, list, or delete.`)
         );
         process.exit(1);
     }
@@ -3331,8 +4208,8 @@ var profiles_default = defineCommand15({
 });
 
 // src/commands/registry.ts
-import { defineCommand as defineCommand16 } from "citty";
-import pc15 from "picocolors";
+import { defineCommand as defineCommand21 } from "citty";
+import pc20 from "picocolors";
 
 // src/core/registry-manager.ts
 var BUILTIN_REGISTRIES = [
@@ -3402,7 +4279,7 @@ function getDefaultRegistry(configPath) {
 }
 
 // src/commands/registry.ts
-var registry_default = defineCommand16({
+var registry_default = defineCommand21({
   meta: {
     name: "registry",
     description: "Manage custom registry URLs"
@@ -3432,67 +4309,67 @@ var registry_default = defineCommand16({
       case "list": {
         const registries = getRegistries();
         const defaultName = getDefaultRegistry();
-        console.log(pc15.bold("\n  Registries\n"));
+        console.log(pc20.bold("\n  Registries\n"));
         for (const r of registries) {
           const isDefault = r.name === defaultName;
-          const defaultTag = isDefault ? pc15.green(" (default)") : "";
-          const builtinTag = r.builtin ? pc15.dim(" [builtin]") : "";
+          const defaultTag = isDefault ? pc20.green(" (default)") : "";
+          const builtinTag = r.builtin ? pc20.dim(" [builtin]") : "";
           console.log(
-            `  ${isDefault ? pc15.green("\u25CF") : pc15.dim("\u25CB")} ${pc15.bold(r.name)}${defaultTag}${builtinTag}`
+            `  ${isDefault ? pc20.green("\u25CF") : pc20.dim("\u25CB")} ${pc20.bold(r.name)}${defaultTag}${builtinTag}`
           );
-          console.log(`    ${pc15.dim(r.url)}`);
+          console.log(`    ${pc20.dim(r.url)}`);
         }
         console.log();
         break;
       }
       case "add": {
         if (!name) {
-          console.error(pc15.red("  Error: Usage: mcpman registry add <name> <url>"));
+          console.error(pc20.red("  Error: Usage: mcpman registry add <name> <url>"));
           process.exit(1);
         }
         if (!url) {
-          console.error(pc15.red("  Error: Usage: mcpman registry add <name> <url>"));
+          console.error(pc20.red("  Error: Usage: mcpman registry add <name> <url>"));
           process.exit(1);
         }
         try {
           addRegistry(name, url);
-          console.log(pc15.green(`  Added registry '${name}' \u2192 ${url}`));
+          console.log(pc20.green(`  Added registry '${name}' \u2192 ${url}`));
         } catch (err) {
-          console.error(pc15.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+          console.error(pc20.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
           process.exit(1);
         }
         break;
       }
       case "remove": {
         if (!name) {
-          console.error(pc15.red("  Error: Usage: mcpman registry remove <name>"));
+          console.error(pc20.red("  Error: Usage: mcpman registry remove <name>"));
           process.exit(1);
         }
         try {
           removeRegistry(name);
-          console.log(pc15.green(`  Removed registry '${name}'.`));
+          console.log(pc20.green(`  Removed registry '${name}'.`));
         } catch (err) {
-          console.error(pc15.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+          console.error(pc20.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
           process.exit(1);
         }
         break;
       }
       case "set-default": {
         if (!name) {
-          console.error(pc15.red("  Error: Usage: mcpman registry set-default <name>"));
+          console.error(pc20.red("  Error: Usage: mcpman registry set-default <name>"));
           process.exit(1);
         }
         try {
           setDefaultRegistry(name);
-          console.log(pc15.green(`  Default registry set to '${name}'.`));
+          console.log(pc20.green(`  Default registry set to '${name}'.`));
         } catch (err) {
-          console.error(pc15.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
+          console.error(pc20.red(`  Error: ${err instanceof Error ? err.message : String(err)}`));
           process.exit(1);
         }
         break;
       }
       default:
-        console.error(pc15.red(`  Unknown action '${action}'. Use: list, add, remove, set-default.`));
+        console.error(pc20.red(`  Unknown action '${action}'. Use: list, add, remove, set-default.`));
         process.exit(1);
     }
   }
@@ -3500,18 +4377,18 @@ var registry_default = defineCommand16({
 
 // src/commands/remove.ts
 import * as p8 from "@clack/prompts";
-import { defineCommand as defineCommand17 } from "citty";
-import pc16 from "picocolors";
-var CLIENT_DISPLAY2 = {
+import { defineCommand as defineCommand22 } from "citty";
+import pc21 from "picocolors";
+var CLIENT_DISPLAY3 = {
   "claude-desktop": "Claude",
   cursor: "Cursor",
   vscode: "VS Code",
   windsurf: "Windsurf"
 };
 function clientDisplayName(type) {
-  return CLIENT_DISPLAY2[type] ?? type;
+  return CLIENT_DISPLAY3[type] ?? type;
 }
-var remove_default = defineCommand17({
+var remove_default = defineCommand22({
   meta: {
     name: "remove",
     description: "Remove an MCP server from one or more AI clients"
@@ -3538,7 +4415,7 @@ var remove_default = defineCommand17({
     }
   },
   async run({ args }) {
-    p8.intro(pc16.bold("mcpman remove"));
+    p8.intro(pc21.bold("mcpman remove"));
     const serverName = args.server;
     const servers = await getInstalledServers();
     const match = servers.find((s) => s.name === serverName);
@@ -3548,7 +4425,7 @@ var remove_default = defineCommand17({
         (s) => s.name.includes(serverName) || serverName.includes(s.name)
       );
       if (similar.length > 0) {
-        p8.log.info(`Did you mean: ${similar.map((s) => pc16.cyan(s.name)).join(", ")}?`);
+        p8.log.info(`Did you mean: ${similar.map((s) => pc21.cyan(s.name)).join(", ")}?`);
       }
       p8.outro("Nothing to remove.");
       return;
@@ -3583,7 +4460,7 @@ var remove_default = defineCommand17({
     if (!args.yes) {
       const clientNames = targetClients.map(clientDisplayName).join(", ");
       const confirmed = await p8.confirm({
-        message: `Remove ${pc16.cyan(serverName)} from ${pc16.yellow(clientNames)}?`
+        message: `Remove ${pc21.cyan(serverName)} from ${pc21.yellow(clientNames)}?`
       });
       if (p8.isCancel(confirmed) || !confirmed) {
         p8.outro("Cancelled.");
@@ -3608,18 +4485,118 @@ var remove_default = defineCommand17({
     }
     if (errors.length > 0) {
       for (const e of errors) p8.log.error(e);
-      p8.outro(pc16.red("Completed with errors."));
+      p8.outro(pc21.red("Completed with errors."));
+      process.exit(1);
+    }
+    p8.outro(pc21.green(`Removed "${serverName}" successfully.`));
+  }
+});
+
+// src/commands/rollback.ts
+import * as p9 from "@clack/prompts";
+import { defineCommand as defineCommand23 } from "citty";
+import pc22 from "picocolors";
+var rollback_default = defineCommand23({
+  meta: {
+    name: "rollback",
+    description: "Restore a previous lockfile snapshot"
+  },
+  args: {
+    index: {
+      type: "positional",
+      description: "Snapshot index to restore (0 = most recent). Omit to use --list.",
+      required: false
+    },
+    list: {
+      type: "boolean",
+      description: "List available snapshots",
+      default: false
+    },
+    yes: {
+      type: "boolean",
+      description: "Skip confirmation prompt",
+      default: false
+    }
+  },
+  async run({ args }) {
+    const snapshots = listSnapshots();
+    if (args.list || args.index === void 0) {
+      if (snapshots.length === 0) {
+        console.log(
+          pc22.dim("No snapshots available. Snapshots are created on each lockfile write.")
+        );
+        return;
+      }
+      console.log(
+        `
+  ${pc22.bold("Lockfile snapshots")}  ${pc22.dim(`(${snapshots.length} available, 0 = most recent)`)}
+`
+      );
+      for (const snap2 of snapshots) {
+        const size = `${Math.ceil(snap2.sizeBytes / 1024)}KB`;
+        const date2 = snap2.createdAt ? new Date(snap2.createdAt).toLocaleString() : "unknown";
+        console.log(`  ${pc22.cyan(`[${snap2.index}]`)}  ${pc22.dim(date2)}  ${pc22.dim(size)}`);
+      }
+      console.log("");
+      if (args.index === void 0) return;
+    }
+    const idx = Number.parseInt(String(args.index), 10);
+    if (Number.isNaN(idx) || idx < 0) {
+      console.error(
+        `${pc22.red("\u2717")} Invalid index "${args.index}". Must be a non-negative integer.`
+      );
+      process.exit(1);
+    }
+    const snap = snapshots[idx];
+    if (!snap) {
+      console.error(
+        `${pc22.red("\u2717")} Snapshot [${idx}] does not exist. Use --list to see available snapshots.`
+      );
+      process.exit(1);
+    }
+    const content = readSnapshot(idx);
+    if (!content) {
+      console.error(`${pc22.red("\u2717")} Could not read snapshot [${idx}].`);
       process.exit(1);
     }
-    p8.outro(pc16.green(`Removed "${serverName}" successfully.`));
+    const date = snap.createdAt ? new Date(snap.createdAt).toLocaleString() : "unknown";
+    console.log(`
+  ${pc22.bold("Restoring snapshot")} ${pc22.cyan(`[${idx}]`)}  ${pc22.dim(date)}
+`);
+    try {
+      const parsed = JSON.parse(content);
+      const count = Object.keys(parsed.servers ?? {}).length;
+      console.log(`  ${pc22.dim(`Preview: ${count} server(s) in snapshot`)}
+`);
+    } catch {
+    }
+    const lockfilePath = resolveLockfilePath();
+    if (!args.yes) {
+      const confirmed = await p9.confirm({
+        message: `Restore snapshot [${idx}] to ${lockfilePath}?`,
+        initialValue: false
+      });
+      if (p9.isCancel(confirmed) || !confirmed) {
+        p9.cancel("Cancelled.");
+        return;
+      }
+    }
+    const restored = restoreSnapshot(idx, lockfilePath);
+    if (!restored) {
+      console.error(`${pc22.red("\u2717")} Restore failed.`);
+      process.exit(1);
+    }
+    console.log(`
+${pc22.green("\u2713")} Lockfile restored from snapshot [${idx}].`);
+    console.log(pc22.dim(`  Written to: ${lockfilePath}`));
   }
 });
 
 // src/commands/run.ts
-import { spawn as spawn3 } from "child_process";
-import { defineCommand as defineCommand18 } from "citty";
-import pc17 from "picocolors";
-var run_default = defineCommand18({
+import { spawn as spawn5 } from "child_process";
+import { defineCommand as defineCommand24 } from "citty";
+import pc23 from "picocolors";
+var run_default = defineCommand24({
   meta: {
     name: "run",
     description: "Run an installed MCP server with vault secrets injected"
@@ -3641,8 +4618,8 @@ var run_default = defineCommand18({
     const lockfile = readLockfile();
     const entry = lockfile.servers[serverName];
     if (!entry) {
-      console.error(pc17.red(`  Error: Server '${serverName}' is not installed.`));
-      console.error(pc17.dim(`  Run ${pc17.cyan("mcpman install <server>")} to install it first.`));
+      console.error(pc23.red(`  Error: Server '${serverName}' is not installed.`));
+      console.error(pc23.dim(`  Run ${pc23.cyan("mcpman install <server>")} to install it first.`));
       process.exit(1);
     }
     const lockfileEnv = parseEnvFlags(entry.envVars);
@@ -3654,8 +4631,8 @@ var run_default = defineCommand18({
       ...vaultEnv,
       ...cliEnv
     };
-    console.log(pc17.dim(`  Running ${pc17.cyan(serverName)}...`));
-    const child = spawn3(entry.command, entry.args, {
+    console.log(pc23.dim(`  Running ${pc23.cyan(serverName)}...`));
+    const child = spawn5(entry.command, entry.args, {
       env: finalEnv,
       stdio: "inherit"
     });
@@ -3672,7 +4649,7 @@ var run_default = defineCommand18({
         resolve();
       });
       child.on("error", (err) => {
-        console.error(pc17.red(`  Failed to start '${serverName}': ${err.message}`));
+        console.error(pc23.red(`  Failed to start '${serverName}': ${err.message}`));
         process.exit(1);
         resolve();
       });
@@ -3688,15 +4665,15 @@ async function loadVaultSecrets2(serverName) {
     const password = await getMasterPassword();
     return getSecretsForServer(serverName, password);
   } catch {
-    console.warn(pc17.yellow("  Warning: Could not load vault secrets, continuing without them."));
+    console.warn(pc23.yellow("  Warning: Could not load vault secrets, continuing without them."));
     return {};
   }
 }
 
 // src/commands/search.ts
-import { defineCommand as defineCommand19 } from "citty";
+import { defineCommand as defineCommand25 } from "citty";
 import { createSpinner as createSpinner4 } from "nanospinner";
-import pc18 from "picocolors";
+import pc24 from "picocolors";
 
 // src/core/registry-search.ts
 var SEARCH_TIMEOUT_MS = 1e4;
@@ -3769,10 +4746,10 @@ function pad2(s, width) {
 function highlightMatch(name, query) {
   const idx = name.toLowerCase().indexOf(query.toLowerCase());
   if (idx === -1) return name;
-  return name.slice(0, idx) + pc18.yellow(name.slice(idx, idx + query.length)) + name.slice(idx + query.length);
+  return name.slice(0, idx) + pc24.yellow(name.slice(idx, idx + query.length)) + name.slice(idx + query.length);
 }
 function formatDownloads(n) {
-  if (!n) return pc18.dim("\u2014");
+  if (!n) return pc24.dim("\u2014");
   if (n >= 1e6) return `${(n / 1e6).toFixed(1)}M`;
   if (n >= 1e3) return `${(n / 1e3).toFixed(1)}k`;
   return String(n);
@@ -3783,9 +4760,9 @@ function printNpmResults(results, query) {
   const dlWidth = 9;
   const descMax = 50;
   const header = `  ${pad2("NAME", nameWidth)}  ${pad2("VERSION", verWidth)}  ${pad2("DOWNLOADS", dlWidth)}  DESCRIPTION`;
-  console.log(pc18.dim(header));
+  console.log(pc24.dim(header));
   console.log(
-    pc18.dim(
+    pc24.dim(
       `  ${"-".repeat(nameWidth)}  ${"-".repeat(verWidth)}  ${"-".repeat(dlWidth)}  ${"-".repeat(descMax)}`
     )
   );
@@ -3793,8 +4770,8 @@ function printNpmResults(results, query) {
     const name = highlightMatch(pad2(r.name, nameWidth), query);
     const ver = pad2(r.version, verWidth);
     const dl = pad2(formatDownloads(r.downloads), dlWidth);
-    const desc = truncate2(r.description || pc18.dim("(no description)"), descMax);
-    console.log(`  ${name}  ${pc18.dim(ver)}  ${dl}  ${desc}`);
+    const desc = truncate2(r.description || pc24.dim("(no description)"), descMax);
+    console.log(`  ${name}  ${pc24.dim(ver)}  ${dl}  ${desc}`);
   }
 }
 function printSmitheryResults(results, query) {
@@ -3802,19 +4779,19 @@ function printSmitheryResults(results, query) {
   const usesWidth = 8;
   const descMax = 50;
   const header = `  ${pad2("NAME", nameWidth)}  ${pad2("USES", usesWidth)}  DESCRIPTION`;
-  console.log(pc18.dim(header));
+  console.log(pc24.dim(header));
   console.log(
-    pc18.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(usesWidth)}  ${"-".repeat(descMax)}`)
+    pc24.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(usesWidth)}  ${"-".repeat(descMax)}`)
   );
   for (const r of results) {
     const name = highlightMatch(pad2(r.name, nameWidth), query);
     const uses = pad2(formatDownloads(r.useCount), usesWidth);
-    const badge = r.verified ? pc18.green(" \u2713") : "";
-    const desc = truncate2(r.description || pc18.dim("(no description)"), descMax);
+    const badge = r.verified ? pc24.green(" \u2713") : "";
+    const desc = truncate2(r.description || pc24.dim("(no description)"), descMax);
     console.log(`  ${name}${badge}  ${uses}  ${desc}`);
   }
 }
-var search_default = defineCommand19({
+var search_default = defineCommand25({
   meta: {
     name: "search",
     description: "Search for MCP servers on npm or Smithery registry"
@@ -3846,7 +4823,7 @@ var search_default = defineCommand19({
     const registry = args.registry.toLowerCase();
     const limit = Math.min(Math.max(1, Number.parseInt(args.limit, 10) || 20), 100);
     if (registry !== "npm" && registry !== "smithery") {
-      console.error(pc18.red(`  Unknown registry "${registry}". Use "npm" or "smithery".`));
+      console.error(pc24.red(`  Unknown registry "${registry}". Use "npm" or "smithery".`));
       process.exit(1);
     }
     const spinner5 = createSpinner4(`Searching ${registry} for "${query}"...`).start();
@@ -3854,20 +4831,20 @@ var search_default = defineCommand19({
       const results2 = await searchNpm(query, limit);
       spinner5.stop();
       if (results2.length === 0) {
-        console.log(pc18.dim(`
+        console.log(pc24.dim(`
   No results found for "${query}" on npm.
 `));
         return;
       }
       console.log(
-        pc18.bold(
+        pc24.bold(
           `
   mcpman search \u2014 npm (${results2.length} result${results2.length !== 1 ? "s" : ""})
 `
         )
       );
       printNpmResults(results2, query);
-      console.log(pc18.dim("\n  Install with: mcpman install <name>\n"));
+      console.log(pc24.dim("\n  Install with: mcpman install <name>\n"));
       if (args.all) {
         await printPluginResults(query, limit);
       }
@@ -3876,20 +4853,20 @@ var search_default = defineCommand19({
     const results = await searchSmithery(query, limit);
     spinner5.stop();
     if (results.length === 0) {
-      console.log(pc18.dim(`
+      console.log(pc24.dim(`
   No results found for "${query}" on Smithery.
 `));
       return;
     }
     console.log(
-      pc18.bold(
+      pc24.bold(
         `
   mcpman search \u2014 Smithery (${results.length} result${results.length !== 1 ? "s" : ""})
 `
       )
     );
     printSmitheryResults(results, query);
-    console.log(pc18.dim("\n  Install with: mcpman install <name>\n"));
+    console.log(pc24.dim("\n  Install with: mcpman install <name>\n"));
     if (args.all) {
       await printPluginResults(query, limit);
     }
@@ -3899,7 +4876,7 @@ async function printPluginResults(query, limit) {
   const pluginResults = await searchPlugins(query, limit);
   if (pluginResults.length === 0) return;
   console.log(
-    pc18.bold(
+    pc24.bold(
       `
   Plugins (${pluginResults.length} result${pluginResults.length !== 1 ? "s" : ""})
 `
@@ -3909,22 +4886,22 @@ async function printPluginResults(query, limit) {
   const srcWidth = Math.max(6, ...pluginResults.map((r) => r.source.length));
   const descMax = 50;
   const header = `  ${pad2("NAME", nameWidth)}  ${pad2("SOURCE", srcWidth)}  DESCRIPTION`;
-  console.log(pc18.dim(header));
+  console.log(pc24.dim(header));
   console.log(
-    pc18.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(srcWidth)}  ${"-".repeat(descMax)}`)
+    pc24.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(srcWidth)}  ${"-".repeat(descMax)}`)
   );
   for (const r of pluginResults) {
     const name = highlightMatch(pad2(r.name, nameWidth), query);
     const src = pad2(r.source, srcWidth);
-    const desc = truncate2(r.description || pc18.dim("(no description)"), descMax);
-    console.log(`  ${name}  ${pc18.dim(src)}  ${desc}`);
+    const desc = truncate2(r.description || pc24.dim("(no description)"), descMax);
+    console.log(`  ${name}  ${pc24.dim(src)}  ${desc}`);
   }
 }
 
 // src/commands/secrets.ts
-import * as p9 from "@clack/prompts";
-import { defineCommand as defineCommand20 } from "citty";
-import pc19 from "picocolors";
+import * as p10 from "@clack/prompts";
+import { defineCommand as defineCommand26 } from "citty";
+import pc25 from "picocolors";
 function maskValue(value) {
   if (value.length <= 8) return "***";
   return `${value.slice(0, 4)}***${value.slice(-3)}`;
@@ -3934,7 +4911,7 @@ function parseKeyValue(input) {
   if (idx <= 0) return null;
   return { key: input.slice(0, idx), value: input.slice(idx + 1) };
 }
-var setCommand2 = defineCommand20({
+var setCommand2 = defineCommand26({
   meta: { name: "set", description: "Store an encrypted secret for a server" },
   args: {
     server: {
@@ -3951,28 +4928,28 @@ var setCommand2 = defineCommand20({
   async run({ args }) {
     const parsed = parseKeyValue(args.keyvalue);
     if (!parsed) {
-      console.error(`${pc19.red("\u2717")} Invalid format. Expected KEY=VALUE`);
+      console.error(`${pc25.red("\u2717")} Invalid format. Expected KEY=VALUE`);
       process.exit(1);
     }
-    p9.intro(pc19.cyan("mcpman secrets set"));
+    p10.intro(pc25.cyan("mcpman secrets set"));
     const isNew = listSecrets(args.server).length === 0 || !listSecrets(args.server)[0]?.keys.includes(parsed.key);
     const vaultPath = (await import("./vault-service-UTZAV6N6.js")).getVaultPath();
     const vaultExists = (await import("fs")).existsSync(vaultPath);
     const password = await getMasterPassword(!vaultExists && isNew);
-    const spin = p9.spinner();
+    const spin = p10.spinner();
     spin.start("Encrypting secret...");
     try {
       setSecret(args.server, parsed.key, parsed.value, password);
-      spin.stop(`${pc19.green("\u2713")} Stored ${pc19.bold(parsed.key)} for ${pc19.cyan(args.server)}`);
+      spin.stop(`${pc25.green("\u2713")} Stored ${pc25.bold(parsed.key)} for ${pc25.cyan(args.server)}`);
     } catch (err) {
-      spin.stop(`${pc19.red("\u2717")} Failed to store secret`);
-      console.error(pc19.dim(String(err)));
+      spin.stop(`${pc25.red("\u2717")} Failed to store secret`);
+      console.error(pc25.dim(String(err)));
       process.exit(1);
     }
-    p9.outro(pc19.dim("Secret encrypted and saved to vault."));
+    p10.outro(pc25.dim("Secret encrypted and saved to vault."));
   }
 });
-var listCommand3 = defineCommand20({
+var listCommand3 = defineCommand26({
   meta: { name: "list", description: "List secret keys stored in the vault" },
   args: {
     server: {
@@ -3984,27 +4961,27 @@ var listCommand3 = defineCommand20({
   async run({ args }) {
     const results = listSecrets(args.server || void 0);
     if (results.length === 0) {
-      const filter = args.server ? ` for ${pc19.cyan(args.server)}` : "";
-      console.log(pc19.dim(`No secrets stored${filter}.`));
+      const filter = args.server ? ` for ${pc25.cyan(args.server)}` : "";
+      console.log(pc25.dim(`No secrets stored${filter}.`));
       return;
     }
     console.log("");
     for (const { server, keys } of results) {
-      console.log(pc19.bold(pc19.cyan(server)));
+      console.log(pc25.bold(pc25.cyan(server)));
       for (const key of keys) {
-        console.log(`  ${pc19.green("\u25CF")} ${pc19.bold(key)}  ${pc19.dim(maskValue("\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022"))}`);
+        console.log(`  ${pc25.green("\u25CF")} ${pc25.bold(key)}  ${pc25.dim(maskValue("\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022\u2022"))}`);
       }
       console.log("");
     }
     const total = results.reduce((n, r) => n + r.keys.length, 0);
     console.log(
-      pc19.dim(
+      pc25.dim(
         `  ${total} secret${total !== 1 ? "s" : ""} in ${results.length} server${results.length !== 1 ? "s" : ""}`
       )
     );
   }
 });
-var removeCommand2 = defineCommand20({
+var removeCommand2 = defineCommand26({
   meta: { name: "remove", description: "Delete a secret from the vault" },
   args: {
     server: {
@@ -4019,25 +4996,25 @@ var removeCommand2 = defineCommand20({
     }
   },
   async run({ args }) {
-    const confirmed = await p9.confirm({
-      message: `Remove ${pc19.bold(args.key)} from ${pc19.cyan(args.server)}?`,
+    const confirmed = await p10.confirm({
+      message: `Remove ${pc25.bold(args.key)} from ${pc25.cyan(args.server)}?`,
       initialValue: false
     });
-    if (p9.isCancel(confirmed) || !confirmed) {
-      p9.cancel("Cancelled.");
+    if (p10.isCancel(confirmed) || !confirmed) {
+      p10.cancel("Cancelled.");
       return;
     }
     try {
       removeSecret(args.server, args.key);
-      console.log(`${pc19.green("\u2713")} Removed ${pc19.bold(args.key)} from ${pc19.cyan(args.server)}`);
+      console.log(`${pc25.green("\u2713")} Removed ${pc25.bold(args.key)} from ${pc25.cyan(args.server)}`);
     } catch (err) {
-      console.error(`${pc19.red("\u2717")} Failed to remove secret`);
-      console.error(pc19.dim(String(err)));
+      console.error(`${pc25.red("\u2717")} Failed to remove secret`);
+      console.error(pc25.dim(String(err)));
       process.exit(1);
     }
   }
 });
-var secrets_default = defineCommand20({
+var secrets_default = defineCommand26({
   meta: {
     name: "secrets",
     description: "Manage encrypted secrets for MCP servers"
@@ -4050,9 +5027,9 @@ var secrets_default = defineCommand20({
 });
 
 // src/commands/sync.ts
-import * as p10 from "@clack/prompts";
-import { defineCommand as defineCommand21 } from "citty";
-import pc20 from "picocolors";
+import * as p11 from "@clack/prompts";
+import { defineCommand as defineCommand27 } from "citty";
+import pc26 from "picocolors";
 
 // src/core/config-diff.ts
 function reconstructServerEntry(lockEntry) {
@@ -4197,14 +5174,14 @@ async function getClientConfigs() {
 }
 
 // src/commands/sync.ts
-var VALID_CLIENTS = ["claude-desktop", "cursor", "vscode", "windsurf"];
-var CLIENT_DISPLAY3 = {
+var VALID_CLIENTS2 = ["claude-desktop", "cursor", "vscode", "windsurf"];
+var CLIENT_DISPLAY4 = {
   "claude-desktop": "Claude Desktop",
   cursor: "Cursor",
   vscode: "VS Code",
   windsurf: "Windsurf"
 };
-var sync_default = defineCommand21({
+var sync_default = defineCommand27({
   meta: {
     name: "sync",
     description: "Sync MCP server configs across all detected AI clients"
@@ -4231,20 +5208,20 @@ var sync_default = defineCommand21({
     }
   },
   async run({ args }) {
-    p10.intro(`${pc20.cyan("mcpman sync")}`);
+    p11.intro(`${pc26.cyan("mcpman sync")}`);
     const sourceClient = args.source;
-    if (sourceClient && !VALID_CLIENTS.includes(sourceClient)) {
-      p10.log.error(
-        `Invalid --source "${sourceClient}". Must be one of: ${VALID_CLIENTS.join(", ")}`
+    if (sourceClient && !VALID_CLIENTS2.includes(sourceClient)) {
+      p11.log.error(
+        `Invalid --source "${sourceClient}". Must be one of: ${VALID_CLIENTS2.join(", ")}`
       );
       process.exit(1);
     }
-    const spinner5 = p10.spinner();
+    const spinner5 = p11.spinner();
     spinner5.start("Detecting clients and reading configs...");
     const { configs, handlers } = await getClientConfigs();
     spinner5.stop(`Found ${configs.size} client(s)`);
     if (configs.size === 0) {
-      p10.log.warn(
+      p11.log.warn(
         "No AI clients detected. Install Claude Desktop, Cursor, VS Code, or Windsurf first."
       );
       process.exit(0);
@@ -4253,10 +5230,10 @@ var sync_default = defineCommand21({
     let actions;
     if (sourceClient) {
       if (!configs.has(sourceClient)) {
-        p10.log.error(`Source client "${sourceClient}" is not detected or its config is unreadable.`);
+        p11.log.error(`Source client "${sourceClient}" is not detected or its config is unreadable.`);
         process.exit(1);
       }
-      p10.log.info(`Using ${CLIENT_DISPLAY3[sourceClient]} as source of truth`);
+      p11.log.info(`Using ${CLIENT_DISPLAY4[sourceClient]} as source of truth`);
       actions = computeDiffFromClient(sourceClient, configs, diffOptions);
     } else {
       const lockfile = readLockfile();
@@ -4267,32 +5244,32 @@ var sync_default = defineCommand21({
     const extraCount = actions.filter((a) => a.action === "extra").length;
     const removeCount = actions.filter((a) => a.action === "remove").length;
     if (addCount === 0 && removeCount === 0 && extraCount === 0) {
-      p10.outro(pc20.green("All clients are in sync."));
+      p11.outro(pc26.green("All clients are in sync."));
       process.exit(0);
     }
     const parts = [];
-    if (addCount > 0) parts.push(pc20.green(`${addCount} to add`));
-    if (removeCount > 0) parts.push(pc20.red(`${removeCount} to remove`));
-    if (extraCount > 0) parts.push(pc20.yellow(`${extraCount} extra (informational)`));
-    p10.log.info(parts.join("  \xB7  "));
+    if (addCount > 0) parts.push(pc26.green(`${addCount} to add`));
+    if (removeCount > 0) parts.push(pc26.red(`${removeCount} to remove`));
+    if (extraCount > 0) parts.push(pc26.yellow(`${extraCount} extra (informational)`));
+    p11.log.info(parts.join("  \xB7  "));
     if (args["dry-run"]) {
-      p10.outro(pc20.dim("Dry run \u2014 no changes applied."));
+      p11.outro(pc26.dim("Dry run \u2014 no changes applied."));
       process.exit(1);
     }
     if (addCount === 0 && removeCount === 0) {
-      p10.outro(pc20.dim("No additions needed. Extra servers left untouched."));
+      p11.outro(pc26.dim("No additions needed. Extra servers left untouched."));
       process.exit(1);
     }
     if (!args.yes) {
       const actionParts = [];
       if (addCount > 0) actionParts.push(`${addCount} addition(s)`);
       if (removeCount > 0) actionParts.push(`${removeCount} removal(s)`);
-      const confirmed = await p10.confirm({
+      const confirmed = await p11.confirm({
         message: `Apply ${actionParts.join(" and ")} to client configs?`,
         initialValue: true
       });
-      if (p10.isCancel(confirmed) || !confirmed) {
-        p10.outro(pc20.dim("Cancelled \u2014 no changes applied."));
+      if (p11.isCancel(confirmed) || !confirmed) {
+        p11.outro(pc26.dim("Cancelled \u2014 no changes applied."));
         process.exit(0);
       }
     }
@@ -4300,37 +5277,37 @@ var sync_default = defineCommand21({
     const result = await applySyncActions(actions, handlers);
     spinner5.stop("Done");
     if (result.applied > 0) {
-      p10.log.success(`Added ${result.applied} server(s) to client configs.`);
+      p11.log.success(`Added ${result.applied} server(s) to client configs.`);
     }
     if (result.removed > 0) {
-      p10.log.success(`Removed ${result.removed} server(s) from client configs.`);
+      p11.log.success(`Removed ${result.removed} server(s) from client configs.`);
     }
     if (result.failed > 0) {
       for (const e of result.errors) {
-        p10.log.error(`Failed to sync "${e.server}" on ${e.client}: ${e.error}`);
+        p11.log.error(`Failed to sync "${e.server}" on ${e.client}: ${e.error}`);
       }
     }
-    p10.outro(
-      result.failed === 0 ? pc20.green("Sync complete.") : pc20.yellow("Sync complete with errors.")
+    p11.outro(
+      result.failed === 0 ? pc26.green("Sync complete.") : pc26.yellow("Sync complete with errors.")
     );
     process.exit(result.failed > 0 ? 1 : 0);
   }
 });
 function printDiffTable(actions) {
   if (actions.length === 0) {
-    p10.log.info("No actions to display.");
+    p11.log.info("No actions to display.");
     return;
   }
   const nameWidth = Math.max(6, ...actions.map((a) => a.server.length));
   const clientWidth = Math.max(
     6,
-    ...actions.map((a) => CLIENT_DISPLAY3[a.client]?.length ?? a.client.length)
+    ...actions.map((a) => CLIENT_DISPLAY4[a.client]?.length ?? a.client.length)
   );
   const header = `  ${pad3("SERVER", nameWidth)}  ${pad3("CLIENT", clientWidth)}  STATUS`;
-  console.log(pc20.dim(header));
-  console.log(pc20.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(clientWidth)}  ------`));
+  console.log(pc26.dim(header));
+  console.log(pc26.dim(`  ${"-".repeat(nameWidth)}  ${"-".repeat(clientWidth)}  ------`));
   for (const action of actions) {
-    const clientDisplay = CLIENT_DISPLAY3[action.client] ?? action.client;
+    const clientDisplay = CLIENT_DISPLAY4[action.client] ?? action.client;
     const [icon, statusText] = formatAction(action.action);
     console.log(
       `  ${pad3(action.server, nameWidth)}  ${pad3(clientDisplay, clientWidth)}  ${icon} ${statusText}`
@@ -4341,13 +5318,13 @@ function printDiffTable(actions) {
 function formatAction(action) {
   switch (action) {
     case "add":
-      return [pc20.green("+"), pc20.green("missing \u2014 will add")];
+      return [pc26.green("+"), pc26.green("missing \u2014 will add")];
     case "extra":
-      return [pc20.yellow("?"), pc20.yellow("extra (not in lockfile)")];
+      return [pc26.yellow("?"), pc26.yellow("extra (not in lockfile)")];
     case "remove":
-      return [pc20.red("\u2013"), pc20.red("extra \u2014 will remove")];
+      return [pc26.red("\u2013"), pc26.red("extra \u2014 will remove")];
     case "ok":
-      return [pc20.dim("\xB7"), pc20.dim("in sync")];
+      return [pc26.dim("\xB7"), pc26.dim("in sync")];
   }
 }
 function pad3(s, width) {
@@ -4355,11 +5332,11 @@ function pad3(s, width) {
 }
 
 // src/commands/test-command.ts
-import { defineCommand as defineCommand22 } from "citty";
-import pc21 from "picocolors";
+import { defineCommand as defineCommand28 } from "citty";
+import pc27 from "picocolors";
 
 // src/core/mcp-tester.ts
-import { spawn as spawn4 } from "child_process";
+import { spawn as spawn6 } from "child_process";
 var TIMEOUT_MS = 1e4;
 async function testMcpServer(serverName, command, args, env) {
   const start = Date.now();
@@ -4369,7 +5346,7 @@ async function testMcpServer(serverName, command, args, env) {
     let initOk = false;
     let toolsOk = false;
     let tools = [];
-    const child = spawn4(command, args, {
+    const child = spawn6(command, args, {
       env: { ...process.env, ...env },
       stdio: ["pipe", "pipe", "pipe"]
     });
@@ -4454,7 +5431,7 @@ async function testMcpServer(serverName, command, args, env) {
 }
 
 // src/commands/test-command.ts
-var test_command_default = defineCommand22({
+var test_command_default = defineCommand28({
   meta: {
     name: "test",
     description: "Test MCP server connectivity and capabilities"
@@ -4475,10 +5452,10 @@ var test_command_default = defineCommand22({
     const lockfile = readLockfile();
     const serverNames = args.all ? Object.keys(lockfile.servers) : args.server ? [args.server] : [];
     if (serverNames.length === 0) {
-      console.error(pc21.red("  Error: Specify a server name or use --all."));
+      console.error(pc27.red("  Error: Specify a server name or use --all."));
       process.exit(1);
     }
-    console.log(pc21.bold(`
+    console.log(pc27.bold(`
   mcpman test \u2014 ${serverNames.length} server(s)
 `));
     let passed = 0;
@@ -4486,7 +5463,7 @@ var test_command_default = defineCommand22({
     for (const name of serverNames) {
       const entry = lockfile.servers[name];
       if (!entry) {
-        console.log(`  ${pc21.red("\u2717")} ${pc21.bold(name)} \u2014 not installed`);
+        console.log(`  ${pc27.red("\u2717")} ${pc27.bold(name)} \u2014 not installed`);
         failed++;
         continue;
       }
@@ -4497,27 +5474,27 @@ var test_command_default = defineCommand22({
       if (result.passed) {
         passed++;
         console.log(
-          `  ${pc21.green("\u2713")} ${pc21.bold(name)} ${pc21.dim(`(${result.responseTimeMs}ms)`)}`
+          `  ${pc27.green("\u2713")} ${pc27.bold(name)} ${pc27.dim(`(${result.responseTimeMs}ms)`)}`
         );
         if (result.tools.length > 0) {
-          console.log(pc21.dim(`    Tools: ${result.tools.join(", ")}`));
+          console.log(pc27.dim(`    Tools: ${result.tools.join(", ")}`));
         }
       } else {
         failed++;
-        console.log(`  ${pc21.red("\u2717")} ${pc21.bold(name)} ${pc21.dim(`(${result.responseTimeMs}ms)`)}`);
+        console.log(`  ${pc27.red("\u2717")} ${pc27.bold(name)} ${pc27.dim(`(${result.responseTimeMs}ms)`)}`);
         if (result.error) {
-          console.log(`    ${pc21.red(result.error)}`);
+          console.log(`    ${pc27.red(result.error)}`);
         }
         console.log(
-          `    ${pc21.dim("initialize:")} ${result.initializeOk ? pc21.green("ok") : pc21.red("fail")}  ${pc21.dim("tools/list:")} ${result.toolsListOk ? pc21.green("ok") : pc21.red("fail")}`
+          `    ${pc27.dim("initialize:")} ${result.initializeOk ? pc27.green("ok") : pc27.red("fail")}  ${pc27.dim("tools/list:")} ${result.toolsListOk ? pc27.green("ok") : pc27.red("fail")}`
         );
       }
     }
-    console.log(pc21.dim(`
+    console.log(pc27.dim(`
   ${"\u2500".repeat(40)}`));
     const parts = [];
-    if (passed > 0) parts.push(pc21.green(`${passed} passed`));
-    if (failed > 0) parts.push(pc21.red(`${failed} failed`));
+    if (passed > 0) parts.push(pc27.green(`${passed} passed`));
+    if (failed > 0) parts.push(pc27.red(`${failed} failed`));
     console.log(`  ${parts.join(", ")}
 `);
     if (failed > 0) process.exit(1);
@@ -4535,24 +5512,24 @@ async function loadVaultSecrets3(serverName) {
 }
 
 // src/commands/update.ts
-import * as p11 from "@clack/prompts";
-import { defineCommand as defineCommand23 } from "citty";
-import pc23 from "picocolors";
+import * as p12 from "@clack/prompts";
+import { defineCommand as defineCommand29 } from "citty";
+import pc29 from "picocolors";
 
 // src/core/update-notifier.ts
-import fs11 from "fs";
+import fs14 from "fs";
 import os3 from "os";
-import path13 from "path";
-import pc22 from "picocolors";
-var CACHE_FILE = path13.join(os3.homedir(), ".mcpman", ".update-check");
+import path14 from "path";
+import pc28 from "picocolors";
+var CACHE_FILE = path14.join(os3.homedir(), ".mcpman", ".update-check");
 var TTL_MS = 24 * 60 * 60 * 1e3;
 function writeUpdateCache(data) {
   try {
-    const dir = path13.dirname(CACHE_FILE);
-    if (!fs11.existsSync(dir)) fs11.mkdirSync(dir, { recursive: true });
+    const dir = path14.dirname(CACHE_FILE);
+    if (!fs14.existsSync(dir)) fs14.mkdirSync(dir, { recursive: true });
     const tmp = `${CACHE_FILE}.tmp`;
-    fs11.writeFileSync(tmp, JSON.stringify(data, null, 2), "utf-8");
-    fs11.renameSync(tmp, CACHE_FILE);
+    fs14.writeFileSync(tmp, JSON.stringify(data, null, 2), "utf-8");
+    fs14.renameSync(tmp, CACHE_FILE);
   } catch {
   }
 }
@@ -4560,7 +5537,7 @@ function writeUpdateCache(data) {
 // src/commands/update.ts
 async function loadClients3() {
   try {
-    const mod = await import("./client-detector-CY7WPF3K.js");
+    const mod = await import("./client-detector-NHXBDNMY.js");
     return mod.getInstalledClients();
   } catch {
     return [];
@@ -4575,19 +5552,19 @@ function printTable(updates) {
     "LATEST".padEnd(VER_W),
     "STATUS"
   ].join("  ");
-  console.log(pc23.bold(`
+  console.log(pc29.bold(`
   ${header}`));
-  console.log(pc23.dim(`  ${"\u2500".repeat(NAME_W + VER_W * 2 + 20)}`));
+  console.log(pc29.dim(`  ${"\u2500".repeat(NAME_W + VER_W * 2 + 20)}`));
   for (const u of updates) {
     const nameCol = u.server.slice(0, NAME_W).padEnd(NAME_W);
     const curCol = u.currentVersion.padEnd(VER_W);
     const latCol = u.latestVersion.padEnd(VER_W);
-    const statusCol = u.hasUpdate ? pc23.yellow(`Update available${u.updateType ? ` [${u.updateType}]` : ""}`) : pc23.green("Up to date");
+    const statusCol = u.hasUpdate ? pc29.yellow(`Update available${u.updateType ? ` [${u.updateType}]` : ""}`) : pc29.green("Up to date");
     console.log(`  ${nameCol}  ${curCol}  ${latCol}  ${statusCol}`);
   }
   console.log();
 }
-var update_default = defineCommand23({
+var update_default = defineCommand29({
   meta: {
     name: "update",
     description: "Check for and apply updates to installed MCP servers"
@@ -4626,7 +5603,7 @@ var update_default = defineCommand23({
       }
       process.exit(1);
     }
-    const spinner5 = p11.spinner();
+    const spinner5 = p12.spinner();
     spinner5.start("Checking versions...");
     let updates;
     try {
@@ -4648,50 +5625,50 @@ var update_default = defineCommand23({
     printTable(updates);
     const outdated = updates.filter((u) => u.hasUpdate);
     if (outdated.length === 0) {
-      console.log(pc23.green("  All servers are up to date."));
+      console.log(pc29.green("  All servers are up to date."));
       return;
     }
     if (args.check) {
       console.log(
-        pc23.yellow(`  ${outdated.length} update(s) available. Run mcpman update to apply.`)
+        pc29.yellow(`  ${outdated.length} update(s) available. Run mcpman update to apply.`)
       );
       return;
     }
     if (!args.yes) {
-      const confirmed = await p11.confirm({
+      const confirmed = await p12.confirm({
         message: `Apply ${outdated.length} update(s)?`,
         initialValue: true
       });
-      if (p11.isCancel(confirmed) || !confirmed) {
-        p11.outro("Cancelled.");
+      if (p12.isCancel(confirmed) || !confirmed) {
+        p12.outro("Cancelled.");
         return;
       }
     }
     const clients = await loadClients3();
     let successCount = 0;
     for (const update of outdated) {
-      const s = p11.spinner();
+      const s = p12.spinner();
       s.start(`Updating ${update.server}...`);
       const result = await applyServerUpdate(update.server, servers[update.server], clients);
       if (result.success) {
-        s.stop(`${pc23.green("\u2713")} ${update.server}: ${result.fromVersion} \u2192 ${result.toVersion}`);
+        s.stop(`${pc29.green("\u2713")} ${update.server}: ${result.fromVersion} \u2192 ${result.toVersion}`);
         successCount++;
       } else {
-        s.stop(`${pc23.red("\u2717")} ${update.server}: ${result.error}`);
+        s.stop(`${pc29.red("\u2717")} ${update.server}: ${result.error}`);
       }
     }
     const freshLockfile = readLockfile(resolveLockfilePath());
     const freshUpdates = await checkAllVersions(freshLockfile);
     writeUpdateCache({ lastCheck: (/* @__PURE__ */ new Date()).toISOString(), updates: freshUpdates });
-    p11.outro(`${successCount} of ${outdated.length} server(s) updated.`);
+    p12.outro(`${successCount} of ${outdated.length} server(s) updated.`);
   }
 });
 
 // src/commands/upgrade.ts
 import { execSync as execSync2 } from "child_process";
-import { defineCommand as defineCommand24 } from "citty";
-import pc24 from "picocolors";
-var upgrade_default = defineCommand24({
+import { defineCommand as defineCommand30 } from "citty";
+import pc30 from "picocolors";
+var upgrade_default = defineCommand30({
   meta: {
     name: "upgrade",
     description: "Upgrade mcpman to the latest version"
@@ -4704,42 +5681,42 @@ var upgrade_default = defineCommand24({
     }
   },
   async run({ args }) {
-    console.log(pc24.dim(`  Current version: ${APP_VERSION}`));
+    console.log(pc30.dim(`  Current version: ${APP_VERSION}`));
     let latest;
     try {
       latest = execSync2("npm view mcpman version", { encoding: "utf-8", timeout: 15e3 }).trim();
     } catch {
-      console.error(pc24.red("  Error: Could not check latest version from npm."));
+      console.error(pc30.red("  Error: Could not check latest version from npm."));
       process.exit(1);
     }
     if (latest === APP_VERSION) {
-      console.log(pc24.green("  \u2713 Already on the latest version."));
+      console.log(pc30.green("  \u2713 Already on the latest version."));
       return;
     }
-    console.log(pc24.yellow(`  Update available: ${APP_VERSION} \u2192 ${latest}`));
+    console.log(pc30.yellow(`  Update available: ${APP_VERSION} \u2192 ${latest}`));
     if (args.check) {
-      console.log(pc24.dim("  Run mcpman upgrade to install."));
+      console.log(pc30.dim("  Run mcpman upgrade to install."));
       return;
     }
-    console.log(pc24.dim("  Installing..."));
+    console.log(pc30.dim("  Installing..."));
     try {
       execSync2(`npm install -g mcpman@${latest}`, { stdio: "inherit", timeout: 6e4 });
-      console.log(pc24.green(`
+      console.log(pc30.green(`
   \u2713 Upgraded to mcpman@${latest}`));
     } catch {
-      console.error(pc24.red("  Error: Upgrade failed. Try manually: npm install -g mcpman@latest"));
+      console.error(pc30.red("  Error: Upgrade failed. Try manually: npm install -g mcpman@latest"));
       process.exit(1);
     }
   }
 });
 
 // src/commands/watch.ts
-import { defineCommand as defineCommand25 } from "citty";
-import pc25 from "picocolors";
+import { defineCommand as defineCommand31 } from "citty";
+import pc31 from "picocolors";
 
 // src/core/file-watcher-service.ts
-import { spawn as spawn5 } from "child_process";
-import fs12 from "fs";
+import { spawn as spawn7 } from "child_process";
+import fs15 from "fs";
 var IGNORE_PATTERNS = [
   "node_modules",
   ".git",
@@ -4751,7 +5728,7 @@ var IGNORE_PATTERNS = [
   ".tox"
 ];
 function shouldIgnore(filename) {
-  return IGNORE_PATTERNS.some((p12) => filename.includes(p12));
+  return IGNORE_PATTERNS.some((p13) => filename.includes(p13));
 }
 function hasWatchedExtension(filename, extensions) {
   return extensions.some((ext) => filename.endsWith(`.${ext}`));
@@ -4777,7 +5754,7 @@ var ServerWatcher = class {
 `);
     this.spawnChild();
     try {
-      this.watcher = fs12.watch(options.watchDir, { recursive: true }, (_event, filename) => {
+      this.watcher = fs15.watch(options.watchDir, { recursive: true }, (_event, filename) => {
         if (!filename) return;
         this.onFileChange(filename);
       });
@@ -4812,7 +5789,7 @@ var ServerWatcher = class {
       process.stdout.write("\x1Bc");
     }
     console.log(`  [${timestamp()}] Starting ${serverName}...`);
-    this.child = spawn5(command, args, { env, stdio: ["pipe", "pipe", "pipe"] });
+    this.child = spawn7(command, args, { env, stdio: ["pipe", "pipe", "pipe"] });
     this.child.stdout?.on("data", (data) => {
       process.stdout.write(`  [stdout] ${data.toString().trimEnd()}
 `);
@@ -4876,7 +5853,7 @@ var ServerWatcher = class {
 // src/commands/watch.ts
 var DEFAULT_EXTENSIONS = ["ts", "js", "json", "py", "mjs", "cjs"];
 var DEFAULT_DEBOUNCE_MS = 300;
-var watch_default = defineCommand25({
+var watch_default = defineCommand31({
   meta: {
     name: "watch",
     description: "Watch a local MCP server for file changes and auto-restart"
@@ -4915,8 +5892,8 @@ var watch_default = defineCommand25({
     const lockfile = readLockfile();
     const entry = lockfile.servers[serverName];
     if (!entry) {
-      console.error(pc25.red(`  Error: Server '${serverName}' not found in lockfile.`));
-      console.error(pc25.dim(`  Run ${pc25.cyan("mcpman link .")} to register a local server.`));
+      console.error(pc31.red(`  Error: Server '${serverName}' not found in lockfile.`));
+      console.error(pc31.dim(`  Run ${pc31.cyan("mcpman link .")} to register a local server.`));
       process.exit(1);
     }
     let watchDir = args.dir;
@@ -4924,8 +5901,8 @@ var watch_default = defineCommand25({
       if (entry.source === "local" && entry.resolved) {
         watchDir = entry.resolved;
       } else {
-        console.error(pc25.red(`  Error: Cannot determine watch directory for '${serverName}'.`));
-        console.error(pc25.dim("  Use --dir to specify the directory to watch."));
+        console.error(pc31.red(`  Error: Cannot determine watch directory for '${serverName}'.`));
+        console.error(pc31.dim("  Use --dir to specify the directory to watch."));
         process.exit(1);
       }
     }
@@ -4971,12 +5948,12 @@ async function loadVaultSecrets4(serverName) {
 }
 
 // src/commands/why.ts
-import { defineCommand as defineCommand26 } from "citty";
-import pc26 from "picocolors";
+import { defineCommand as defineCommand32 } from "citty";
+import pc32 from "picocolors";
 
 // src/core/why-service.ts
-import fs13 from "fs";
-import path14 from "path";
+import fs16 from "fs";
+import path15 from "path";
 var ALL_CLIENT_TYPES = ["claude-desktop", "cursor", "vscode", "windsurf"];
 async function getServerProvenance(serverName, lockfilePath, profilesDir) {
   const lockfile = readLockfile(lockfilePath);
@@ -5020,7 +5997,7 @@ async function buildClientStatuses(serverName, lockfileClients) {
   }));
 }
 async function findOrphanedClients(serverName) {
-  const { getInstalledClients: getInstalledClients2 } = await import("./client-detector-CY7WPF3K.js");
+  const { getInstalledClients: getInstalledClients2 } = await import("./client-detector-NHXBDNMY.js");
   const handlers = await getInstalledClients2();
   const results = [];
   for (const handler of handlers) {
@@ -5036,16 +6013,16 @@ async function findOrphanedClients(serverName) {
 }
 function scanProfiles(serverName, profilesDir) {
   const found = [];
-  if (!fs13.existsSync(profilesDir)) return found;
+  if (!fs16.existsSync(profilesDir)) return found;
   let files;
   try {
-    files = fs13.readdirSync(profilesDir).filter((f) => f.endsWith(".json"));
+    files = fs16.readdirSync(profilesDir).filter((f) => f.endsWith(".json"));
   } catch {
     return found;
   }
   for (const file of files) {
     try {
-      const raw = fs13.readFileSync(path14.join(profilesDir, file), "utf-8");
+      const raw = fs16.readFileSync(path15.join(profilesDir, file), "utf-8");
       const profile = JSON.parse(raw);
       if (serverName in (profile.servers ?? {})) {
         found.push(profile.name ?? file.replace(".json", ""));
@@ -5074,8 +6051,8 @@ function formatWhyOutput(result) {
   if (result.profiles.length > 0) {
     lines.push("");
     lines.push("  Profiles:");
-    for (const p12 of result.profiles) {
-      lines.push(`    ${p12}`);
+    for (const p13 of result.profiles) {
+      lines.push(`    ${p13}`);
     }
   }
   if (result.envVars.length > 0) {
@@ -5089,7 +6066,7 @@ function formatWhyOutput(result) {
 }
 
 // src/commands/why.ts
-var why_default = defineCommand26({
+var why_default = defineCommand32({
   meta: {
     name: "why",
     description: "Show why a server is installed (provenance, clients, profiles)"
@@ -5111,15 +6088,15 @@ var why_default = defineCommand26({
     const asJson = args.json;
     const result = await getServerProvenance(serverName);
     if (!result) {
-      console.error(pc26.red(`  Server '${serverName}' not found in lockfile or any client config.`));
-      console.error(pc26.dim(`  Run ${pc26.cyan("mcpman list")} to see installed servers.`));
+      console.error(pc32.red(`  Server '${serverName}' not found in lockfile or any client config.`));
+      console.error(pc32.dim(`  Run ${pc32.cyan("mcpman list")} to see installed servers.`));
       process.exit(1);
     }
     if (result.orphaned) {
-      console.log(pc26.yellow(`
+      console.log(pc32.yellow(`
   Server '${serverName}' is orphaned:`));
-      console.log(pc26.dim("  Found in client config(s) but not in lockfile."));
-      console.log(pc26.dim(`  Run ${pc26.cyan("mcpman sync --remove")} to clean up.
+      console.log(pc32.dim("  Found in client config(s) but not in lockfile."));
+      console.log(pc32.dim(`  Run ${pc32.cyan("mcpman sync --remove")} to clean up.
 `));
       const registeredClients = result.clients.filter((c) => c.registered).map((c) => c.type);
       if (registeredClients.length > 0) {
@@ -5142,7 +6119,7 @@ process.on("SIGINT", () => {
   console.log("\nAborted.");
   process.exit(130);
 });
-var main = defineCommand27({
+var main = defineCommand33({
   meta: {
     name: APP_NAME,
     version: APP_VERSION,
@@ -5174,7 +6151,13 @@ var main = defineCommand27({
     watch: watch_default,
     registry: registry_default,
     completions: completions_default,
-    why: why_default
+    why: why_default,
+    env: env_default,
+    bench: bench_default,
+    diff: diff_default,
+    group: group_default,
+    pin: pin_default,
+    rollback: rollback_default
   }
 });
 runMain(main);