onlymcp 0.16.4 → 0.19.0

package/dist/bin/cli.js

@@ -1,565 +1,47 @@
 #!/usr/bin/env node
-import { cancel, confirm, intro, isCancel, log, multiselect, outro, spinner } from '@clack/prompts';
-import { Command } from 'commander';
-import open from 'open';
-import QRCode from 'qrcode';
-import { createRequire } from 'node:module';
-import { homedir } from 'node:os';
-import { createWriteStream, existsSync, mkdirSync } from 'node:fs';
-import { pipeline } from 'node:stream/promises';
-import { Readable } from 'node:stream';
-import { dirname, join } from 'node:path';
-import { ApiClient, ApiError } from '../apiClient.js';
-import { Keyring } from '../auth/keyring.js';
-import { pollForToken } from '../auth/deviceLogin.js';
-import { TtlCache } from '../cache.js';
-import { CLAUDE_CODE_NOTE, planInstall, writeInstallTarget } from '../install.js';
-import { stubDirs } from '../paths.js';
-import { writeStubs } from '../stubs.js';
-import { collect } from '../import/collect.js';
-import { buildImportPlan } from '../import/plan.js';
-import { countPlan, runUpload } from '../import/upload.js';
-import { countTargets, isEmpty, planPrune, runPrune } from '../import/prune.js';
-import { syncMemoryToDisk } from '../memorySync.js';
-import { unpackArchive } from '../export/unpack.js';
-import { deviceLabel } from '../identity.js';
-const baseUrl = process.env.ONLYMCP_API_URL ?? 'https://only-mcp.com';
-// Die Version kommt aus der package.json und steht nicht ein zweites Mal hier
-// als Literal: sonst meldet `onlymcp --version` nach der ersten
-// Veroeffentlichung einen Stand, den niemand mehr nachfuehrt. Der Pfad stimmt
-// aus beiden Lagen, src/bin/ wie dist/bin/.
-const { version } = createRequire(import.meta.url)('../../package.json');
-const program = new Command().name('onlymcp').version(version);
-// Der Server liefert verification_uri im Antwortkoerper mit. Ein Aufruf von
-// open() nimmt jede Zeichenkette entgegen, auch file:// oder ein voellig
-// anderes Ziel. Geoeffnet wird deshalb nur, wenn Schema und Ursprung exakt zu
-// der konfigurierten API passen, die der Nutzer selbst als ONLYMCP_API_URL
-// gesetzt hat. Alles andere wird stillschweigend uebersprungen, Code und QR
-// stehen bereits vorher im Terminal und bleiben der zuverlaessige Weg.
-function safeOpenUrl(url, expectedOrigin) {
-    try {
-        const u = new URL(url);
-        return (u.protocol === 'https:' || u.protocol === 'http:') && u.origin === expectedOrigin;
-    }
-    catch {
-        return false;
-    }
-}
-program
-    .command('login')
-    .description('Connect this device to OnlyMCP')
-    .action(async () => {
-    intro('OnlyMCP');
-    // Einmal ehrlich sagen, was mitgeht, BEVOR es mitgeht. Die beiden Werte
-    // stehen nachher in der Geraeteliste dieses Kontos, sonst nirgends - aber
-    // wer sie nicht schicken will, soll das erfahren, solange er noch abbrechen
-    // kann.
-    log.info(`This device will register itself as: ${await deviceLabel()}`);
-    const res = await fetch(`${baseUrl}/api/auth/device/code`, {
-        method: 'POST',
-        headers: { 'content-type': 'application/json' },
-        body: JSON.stringify({ client_id: 'onlymcp-cli' }),
-    });
-    const d = await res.json();
-    log.info(`Code: ${d.user_code}`);
-    log.info(d.verification_uri);
-    console.log(await QRCode.toString(d.verification_uri_complete, { type: 'terminal', small: true }));
-    // Geoeffnet wird die vollstaendige Adresse, nicht die kurze: sie traegt den
-    // Code mit, die Seite fuellt ihn dann selbst ein. Abgetippt und im QR-Code
-    // steht weiterhin beides, fuer den Fall, dass kein Browser aufgeht.
-    if (safeOpenUrl(d.verification_uri_complete, new URL(baseUrl).origin)) {
-        await open(d.verification_uri_complete).catch(() => { });
-    }
-    const s = spinner();
-    s.start('Waiting for confirmation');
-    const token = await pollForToken(baseUrl, d.device_code, d.interval ?? 5);
-    Keyring.save(token);
-    s.stop('Connected');
-    const api = new ApiClient(baseUrl, () => Keyring.read());
-    const counts = await writeStubsEverywhere(api);
-    outro(`${counts.skills} skills, ${counts.agents} agents, ${counts.files} files ready`);
-});
-/**
- * Stubs in jeden Ordner, den ein Client auf diesem Geraet liest.
- *
- * Gezaehlt wird ueber alle Ordner zusammen, nicht der letzte: bis Aufgabe 12
- * ueberschrieb die Schleife ihr Ergebnis bei jedem Durchlauf und meldete
- * deshalb die Zahlen des zuletzt beschriebenen Ordners als Gesamtzahl.
- */
-async function writeStubsEverywhere(api) {
-    const total = { skills: 0, agents: 0, files: 0, kept: [] };
-    for (const dir of stubDirs()) {
-        const c = await writeStubs(api, dir);
-        total.skills += c.skills;
-        total.agents += c.agents;
-        total.files += c.files;
-        for (const k of c.kept)
-            total.kept.push(`${dir}/${k}`);
-    }
-    return total;
-}
-/**
- * Reports a finished import or sync, for the "last import / last sync" line on the devices page.
- * A report that fails (an older server answering 404, no network, a timeout) prints nothing and
- * changes nothing: the command already succeeded.
- */
-async function reportRun(api, kind, files) {
-    try {
-        await api.reportRun(kind, files);
-    }
-    catch {
-        /* deliberately silent, see above */
-    }
-}
-/**
- * Ends this device's session on the server (next round A6). Clearing only the keyring left the
- * session alive there, where it kept counting as a device until it expired. Best effort: null when
- * the session ended, else what went wrong, and the logout goes on on this machine either way.
- */
-async function endServerSession(token) {
-    try {
-        await new ApiClient(baseUrl, () => token).signOut();
-        return null;
-    }
-    catch (e) {
-        if (e instanceof ApiError && e.status > 0)
-            return `HTTP ${e.status}`;
-        return e instanceof Error ? e.message : String(e);
-    }
-}
-program
-    .command('logout')
-    .description("End this device's session, then remove its login and cache")
-    .action(async () => {
-    // The server first, while the token is still here to name the session by.
-    const token = Keyring.read();
-    const failure = token ? await endServerSession(token) : null;
-    Keyring.clear();
-    await new TtlCache().clear();
-    if (failure) {
-        log.warn(`The session on the server could not be ended (${failure}). It counts as a device until it ` +
-            'expires, or until you remove it in the dashboard under Sessions and devices.');
-        log.success('Logged out on this device');
-        return;
-    }
-    log.success('Logged out');
-});
-program
-    .command('status')
-    .description('Show whether this device is logged in')
-    .action(() => {
-    log.info(Keyring.read() ? 'logged in' : 'not logged in');
-});
-program
-    .command('sync')
-    .description('Rewrite the stub files')
-    .option('--memory <dir>', 'Also write memory as files into this folder')
-    .action(async (opts) => {
-    const api = new ApiClient(baseUrl, () => Keyring.read());
-    const counts = await writeStubsEverywhere(api);
-    log.success(`${counts.skills} skills, ${counts.agents} agents, ${counts.files} files`);
-    if (counts.kept.length > 0) {
-        // Stubs liegen in denselben Ordnern, aus denen importiert wird. Was
-        // dort schon stand und kein Stub war, bleibt stehen - aber nicht
-        // stillschweigend, sonst sucht jemand einen Stub, der nie geschrieben
-        // wurde. Gekuerzt, weil ein Geraet mit 270 eigenen Agent-Dateien sonst
-        // 270 Zeilen bekaeme und die Erfolgsmeldung aus dem Bild schoebe.
-        log.warn([
-            `Left untouched, because something of your own is already there (${counts.kept.length})`,
-            ...counts.kept.slice(0, 10).map((k) => `  ${k}`),
-            ...(counts.kept.length > 10 ? [`  ... and ${counts.kept.length - 10} more`] : []),
-        ].join('\n'));
-    }
-    // Every file this run wrote: the stubs, the skills' companion files, and (below) memory.
-    const stubFiles = counts.skills + counts.agents + counts.files;
-    if (!opts.memory) {
-        await reportRun(api, 'sync', stubFiles);
-        return;
-    }
-    const m = await syncMemoryToDisk(api, opts.memory);
-    log.success(`${m.written} memory files to ${opts.memory}`);
-    if (m.collisions.length > 0) {
-        log.warn([
-            'Team files with a path an existing file of yours already has',
-            ...m.collisions.map((p) => `  ${p}`),
-        ].join('\n'));
-    }
-    if (m.refused.length > 0) {
-        log.warn(['Paths refused', ...m.refused.map((p) => `  ${p}`)].join('\n'));
-    }
-    if (m.failures.length > 0) {
-        log.error([`${m.failures.length} failed`, ...m.failures.map((f) => `  ${f.what}   ${f.code}`)].join('\n'));
-        process.exitCode = 1;
-    }
-    // A sync with failures is not a successful one: nothing is reported for it.
-    if (m.failures.length === 0)
-        await reportRun(api, 'sync', stubFiles + m.written);
-});
-program
-    .command('install')
-    .description('Register OnlyMCP in an MCP client')
-    .option('--client <id>', 'claude-code, codex or antigravity (aliases: claude, gemini, gemini-cli)')
-    .option('--all', 'Write every config file that already exists on this machine')
-    .option('--print', 'Only print, write nothing')
-    .action((opts) => {
-    // ONLYMCP_HOME ist dieselbe Testschleuse wie in paths.ts: damit trifft
-    // kein Testlauf jemals den echten ~/.codex- oder ~/.claude-Ordner.
-    const home = process.env.ONLYMCP_HOME ?? homedir();
-    const outcome = planInstall(home, opts);
-    /** Writes one target, or only prints it with --print. Shared by --client and --all. */
-    function apply(t) {
-        if (opts.print) {
-            log.info(`${t.name} -> ${t.configPath}`);
-            console.log(t.snippet);
-            // Bewusst keine zweite Zeile mit ONLYMCP_STUB_DIRS: die Variable steht
-            // seit install.ts im Schnipsel selbst. Zwei Wege, dasselbe zu setzen,
-            // laden dazu ein, beide zu gehen.
-            return;
-        }
-        try {
-            const result = writeInstallTarget(t);
-            if (result === 'already-present') {
-                log.info(`${t.name} is already set up: ${t.configPath}`);
-            }
-            else {
-                log.success(`${t.name} set up: ${t.configPath}`);
-            }
-            if (t.id === 'claude-code')
-                log.info(CLAUDE_CODE_NOTE);
-        }
-        catch (e) {
-            log.error(e instanceof Error ? e.message : String(e));
-            process.exitCode = 1;
-        }
-    }
-    switch (outcome.kind) {
-        case 'conflicting-options':
-            log.error('Pass either --client <id> or --all, not both.');
-            process.exitCode = 2;
-            return;
-        case 'missing-client':
-            log.info(`Known clients: ${outcome.targets.map((t) => t.id).join(', ')}`);
-            log.info('Pass --client <id>, or --all.');
-            process.exitCode = 2;
-            return;
-        case 'unknown-client':
-            // Kein Raten. Ein falsch geratener Pfad ueberschreibt sonst eine
-            // fremde Konfigurationsdatei.
-            log.error(`Unknown client. Known: ${outcome.targets.map((t) => t.id).join(', ')}`);
-            process.exitCode = 1;
-            return;
-        case 'none-present-for-all':
-            log.error('No known client is set up on this machine yet.');
-            log.info(`Pass --client <id> to write its config anyway. Known: ${outcome.targets.map((t) => t.id).join(', ')}.`);
-            process.exitCode = 2;
-            return;
-        case 'single':
-            apply(outcome.target);
-            return;
-        case 'all':
-            for (const t of outcome.present)
-                apply(t);
-            if (outcome.skipped.length > 0) {
-                log.info(`Skipped, not set up on this machine: ${outcome.skipped.map((t) => t.id).join(', ')}`);
-            }
-            return;
-    }
-});
-function formatBytes(bytes) {
-    if (bytes < 1024)
-        return `${bytes} B`;
-    if (bytes < 1024 * 1024)
-        return `${Math.round(bytes / 1024)} KB`;
-    return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
-}
-function sumBytes(items) {
-    return items.reduce((total, x) => total + x.bytes, 0);
-}
-/** Der Plan, ausgeschrieben. Steht immer, auch bei --yes: wer zuschaut, soll sehen. */
-function printPlan(plan, roots) {
-    const files = plan.skills.reduce((n, s) => n + s.files.length, 0);
-    const withFiles = plan.skills.filter((s) => s.files.length > 0).length;
-    const fileBytes = plan.skills.reduce((n, s) => n + sumBytes(s.files), 0);
-    if (roots.skills) {
-        log.message(`Skills   ${String(plan.skills.length).padStart(4)} from ${roots.skills}\n` +
-            `         ${String(files).padStart(4)} more files across ${withFiles} skills   ` +
-            `${formatBytes(sumBytes(plan.skills) + fileBytes)}`);
-    }
-    if (roots.agents) {
-        log.message(`Agents   ${String(plan.agents.length).padStart(4)} from ${roots.agents}   ${formatBytes(sumBytes(plan.agents))}`);
-    }
-    if (roots.memory) {
-        log.message(`Memory   ${String(plan.memory.length).padStart(4)} from ${roots.memory}   ${formatBytes(sumBytes(plan.memory))}`);
-    }
-    if (plan.skipped.length > 0) {
-        const byReason = new Map();
-        for (const s of plan.skipped)
-            byReason.set(s.reason, (byReason.get(s.reason) ?? 0) + 1);
-        log.message(['Skipped', ...[...byReason].map(([reason, n]) => `  ${String(n).padStart(4)}  ${reason}`)].join('\n'));
-    }
-    if (plan.noDescription.length > 0) {
-        // Geht trotzdem hoch. Gemeldet, weil die Liste im Dashboard und die
-        // Stubs auf jedem Geraet von der Beschreibung leben und ein Skill ohne
-        // sie dort als blosser Name steht.
-        log.warn(['Missing a description in the SKILL.md header', ...plan.noDescription.map((n) => `  ${n}`)].join('\n'));
-    }
-    if (plan.flagged.length > 0) {
-        log.warn([
-            'Held back over possible credentials (none of it left this machine)',
-            ...plan.flagged.flatMap((f) => [
-                `  ${f.relative}`,
-                ...f.hits.map((h) => `      line ${h.line}   rule ${h.rule}   ${h.excerpt}`),
-            ]),
-        ].join('\n'));
-    }
-}
-program
-    .command('import')
-    .description('Bring existing local skills, agents and memory into OnlyMCP')
-    .option('--skills <dir>', 'Folder with skill subfolders, or a plugin cache')
-    .option('--agents <dir>', 'Folder with agent files')
-    // --memory hat mit Absicht keine Vorgabe. Skills und Agents liegen an einem
-    // bekannten Pfad, an dem nur Skills und Agents liegen. Ein Memory-Ordner
-    // nicht: eine Vorgabe auf irgendjemandes Notizen zu richten und die
-    // hochzuladen waere das Schlimmste, was dieser Befehl tun koennte.
-    .option('--memory <dir>', 'Folder with memory files (no default)')
-    .option('--dry-run', 'Only show what would be uploaded, then stop')
-    .option('--yes', 'Upload without asking first')
-    // --prune loescht im Konto. Es hat deshalb bewusst KEINE Abkuerzung ueber
-    // --yes: die Liste wird immer gezeigt und immer einzeln bestaetigt, auch
-    // wenn der Upload selbst unbeaufsichtigt laeuft.
-    .option('--prune', 'Delete, after confirmation, what the account holds and the source no longer has')
-    .action(async (opts) => {
-    // Dieselbe Testschleuse wie in install.ts und paths.ts.
-    const home = process.env.ONLYMCP_HOME ?? homedir();
-    const roots = {
-        skills: opts.skills ?? join(home, '.claude', 'skills'),
-        agents: opts.agents ?? join(home, '.claude', 'agents'),
-        memory: opts.memory,
-    };
-    intro('OnlyMCP Import');
-    const s = spinner();
-    s.start('Reading the folders');
-    let plan;
-    try {
-        const [skills, agents, memory] = await Promise.all([
-            existsSync(roots.skills) ? collect(roots.skills) : Promise.resolve([]),
-            existsSync(roots.agents) ? collect(roots.agents) : Promise.resolve([]),
-            roots.memory && existsSync(roots.memory) ? collect(roots.memory) : Promise.resolve([]),
-        ]);
-        plan = buildImportPlan({ skills, agents, memory }, { skillsRoot: roots.skills });
-    }
-    catch (e) {
-        s.stop('Aborted');
-        log.error(e instanceof Error ? e.message : String(e));
-        process.exitCode = 1;
-        return;
-    }
-    s.stop('Read');
-    printPlan(plan, {
-        skills: existsSync(roots.skills) ? roots.skills : undefined,
-        agents: existsSync(roots.agents) ? roots.agents : undefined,
-        memory: roots.memory && existsSync(roots.memory) ? roots.memory : undefined,
-    });
-    const total = countPlan(plan);
-    // Mit --prune gibt es auch dann etwas zu tun, wenn nichts hochgeht: genau
-    // ein leerer Quellordner ist der Fall, in dem am meisten geloescht wuerde.
-    if (total === 0 && !opts.prune) {
-        outro('Nothing to do.');
-        return;
-    }
-    if (opts.dryRun && !opts.prune) {
-        outro('Nothing uploaded (--dry-run).');
-        return;
-    }
-    const api = new ApiClient(baseUrl, () => Keyring.read());
-    // Ins falsche Konto zu laden ist ein leicht gemachter und unangenehm zu
-    // behebender Fehler. Die Gegenmassnahme ist eine Zeile Ausgabe.
-    try {
-        const me = await api.getMe();
-        log.info(`Target   ${baseUrl}   as ${me.email}   plan ${me.plan.name}`);
-    }
-    catch (e) {
-        log.error(`Not logged in, or the server is unreachable (${e instanceof Error ? e.message : String(e)}).`);
-        log.info('First: npx onlymcp login');
-        process.exitCode = 1;
-        return;
-    }
-    if (total > 0 && !opts.yes && !opts.dryRun) {
-        if (!process.stdin.isTTY) {
-            // Ohne Terminal gibt es keine Rueckfrage, also auch keinen Upload.
-            // Wer das automatisieren will, sagt --yes und hat den Plan vorher mit
-            // --dry-run gesehen.
-            log.error('No terminal for the prompt. Run --dry-run first, then --yes.');
-            process.exitCode = 1;
-            return;
-        }
-        const go = await confirm({ message: `Upload ${total} entries?`, initialValue: false });
-        if (isCancel(go) || !go) {
-            cancel('Cancelled. Nothing uploaded.');
-            return;
-        }
-        if (plan.flagged.length > 0) {
-            const release = await multiselect({
-                message: 'Send the held-back files anyway?',
-                options: plan.flagged.map((f) => ({ value: f.relative, label: f.relative })),
-                required: false,
-                initialValues: [],
-            });
-            if (isCancel(release)) {
-                cancel('Cancelled. Nothing uploaded.');
-                return;
-            }
-            if (release.length > 0) {
-                // Freigeben heisst: die Datei noch einmal einsammeln, diesmal ohne
-                // ihre Funde, und den Plan daraus neu bauen. Kein zweiter Weg in den
-                // Upload, der die Pruefung umgehen koennte.
-                const freed = new Set(release);
-                const clear = (items) => items.map((c) => (freed.has(c.relative) ? { ...c, hits: [] } : c));
-                const [skills, agents, memory] = await Promise.all([
-                    existsSync(roots.skills) ? collect(roots.skills) : Promise.resolve([]),
-                    existsSync(roots.agents) ? collect(roots.agents) : Promise.resolve([]),
-                    roots.memory && existsSync(roots.memory) ? collect(roots.memory) : Promise.resolve([]),
-                ]);
-                plan = buildImportPlan({
-                    skills: clear(skills),
-                    agents: clear(agents),
-                    memory: clear(memory),
-                }, { skillsRoot: roots.skills });
-            }
-        }
-    }
-    if (total > 0 && !opts.dryRun) {
-        const up = spinner();
-        up.start('Uploading');
-        const result = await runUpload(api, plan, (done, all, label) => {
-            up.message(`${done}/${all}  ${label}`);
-        });
-        up.stop('Done');
-        log.success(`${result.skills} skills, ${result.skillFiles} skill files, ` +
-            `${result.agents} agents, ${result.memory} memory files`);
-        if (result.failures.length > 0) {
-            log.error([`${result.failures.length} failed`, ...result.failures.map((f) => `  ${f.what}   ${f.code}`)].join('\n'));
-            process.exitCode = 1;
-        }
-        else {
-            await reportRun(api, 'import', result.skills + result.skillFiles + result.agents + result.memory);
-        }
-    }
-    if (opts.prune) {
-        // Verglichen wird nur, was auch gelesen wurde. Ohne --memory sagt ein
-        // Import gar nichts ueber Memory aus, und "steht im Konto, fehlt in der
-        // Quelle" waere dort keine Aussage, sondern ein Unfall.
-        const covered = {
-            skills: existsSync(roots.skills),
-            agents: existsSync(roots.agents),
-            memory: Boolean(roots.memory && existsSync(roots.memory)),
-        };
-        const targets = await planPrune(api, plan, covered);
-        if (isEmpty(targets)) {
-            log.info('Nothing to delete: the account holds nothing the source does not know.');
-        }
-        else {
-            // Vollstaendig aufgezaehlt, nicht gezaehlt. Eine Zahl zu bestaetigen
-            // heisst, etwas zu bestaetigen, das man nicht gesehen hat.
-            log.warn([
-                'Would delete (only your own, nothing from a team, nothing archived)',
-                ...targets.skills.map((n) => `  Skill    ${n}`),
-                ...targets.agents.map((n) => `  Agent    ${n}`),
-                ...targets.memory.map((p) => `  Memory   ${p}`),
-            ].join('\n'));
-            if (opts.dryRun) {
-                log.info('Nothing deleted (--dry-run).');
-            }
-            else if (!process.stdin.isTTY) {
-                // Kein --yes-Durchgriff: geloescht wird nur von Hand.
-                log.error('No terminal for the prompt. Nothing deleted.');
-                process.exitCode = 1;
-            }
-            else {
-                const go = await confirm({
-                    message: `Delete ${countTargets(targets)} entries in the account?`,
-                    initialValue: false,
-                });
-                if (isCancel(go) || !go) {
-                    log.info('Nothing deleted.');
-                }
-                else {
-                    const pruned = await runPrune(api, targets);
-                    log.success(`${pruned.deleted} deleted`);
-                    if (pruned.failures.length > 0) {
-                        log.error([
-                            `${pruned.failures.length} failed`,
-                            ...pruned.failures.map((f) => `  ${f.what}   ${f.code}`),
-                        ].join('\n'));
-                        process.exitCode = 1;
-                    }
-                }
-            }
-        }
-    }
-    outro(opts.dryRun ? 'Nothing changed (--dry-run).' : 'Then: npx onlymcp sync on every device.');
-});
-program
-    .command('export')
-    .description('Get everything out of the account: memory, skills, agents, connections')
-    .option('--out <dir>', 'Unpack the archive into this folder')
-    .option('--zip <file>', 'Keep the archive as a file')
-    .option('--scope <scope>', 'personal, all or team:<id>', 'all')
-    .option('--types <list>', 'memory,skills,agents,connections')
-    .action(async (opts) => {
-    // Genau eines von beiden. Beides hiesse zweimal herunterladen, keines
-    // hiesse, die teuerste Leseoperation des Produkts ins Nichts zu schicken.
-    if ((opts.out ? 1 : 0) + (opts.zip ? 1 : 0) !== 1) {
-        log.error('Either --out <folder> or --zip <file>, not both and not neither.');
-        process.exitCode = 1;
-        return;
-    }
-    intro('OnlyMCP Export');
-    const api = new ApiClient(baseUrl, () => Keyring.read());
-    const s = spinner();
-    s.start('Fetching the archive');
-    let res;
-    try {
-        res = await api.exportArchive({
-            scope: opts.scope,
-            types: opts.types?.split(',').map((t) => t.trim()).filter((t) => t !== ''),
-        });
-    }
-    catch (e) {
-        s.stop('Aborted');
-        log.error(e instanceof Error ? e.message : String(e));
-        log.info('Not logged in? First: npx onlymcp login');
-        process.exitCode = 1;
-        return;
-    }
-    if (opts.zip) {
-        // In die Datei geschrieben, waehrend es ankommt. Ein Konto mit zwei
-        // Gigabyte soll nicht erst zwei Gigabyte Arbeitsspeicher kosten.
-        mkdirSync(dirname(opts.zip), { recursive: true });
-        await pipeline(Readable.fromWeb(res.body), createWriteStream(opts.zip));
-        s.stop('Done');
-        outro(`Archive: ${opts.zip}`);
-        return;
-    }
-    const bytes = new Uint8Array(await res.arrayBuffer());
-    const result = await unpackArchive(bytes, opts.out);
-    s.stop('Done');
-    log.success(`${result.written} files in ${opts.out}`);
-    if (result.refused.length > 0) {
-        log.warn(['Not written, path in the archive is not allowed', ...result.refused.map((p) => `  ${p}`)].join('\n'));
-    }
-    if (result.failed.length > 0) {
-        // Auf Windows der Normalfall fuer einen Skill mit Namensraum: der
-        // Doppelpunkt ist dort kein zulaessiges Zeichen in einem Ordnernamen.
-        log.warn([
-            "Not written, the filename doesn't work on this system",
-            ...result.failed.map((f) => `  ${f.path}   ${f.reason}`),
-            'With --zip <file> the archive stays unchanged.',
-        ].join('\n'));
-        process.exitCode = 1;
-    }
-    outro(`Restore: npx onlymcp import --skills ${opts.out}/skills --agents ${opts.out}/agents --memory ${opts.out}/memory`);
-});
-await program.parseAsync();
-//# sourceMappingURL=cli.js.map
+import{cancel as dt,confirm as ut,intro as he,isCancel as me,log as d,multiselect as Qn,outro as I,spinner as Z}from"@clack/prompts";import{Command as ei}from"commander";import ti from"open";import ni from"qrcode";import{homedir as mt}from"node:os";import{createWriteStream as ii,existsSync as k,mkdirSync as ri}from"node:fs";import{pipeline as oi}from"node:stream/promises";import{Readable as si}from"node:stream";import{dirname as ai,join as pt}from"node:path";import{hostname as Lt}from"node:os";import{execFile as At}from"node:child_process";import{hostname as Ot}from"node:os";import{readFile as It}from"node:fs/promises";import{promisify as _t}from"node:util";import{randomUUID as Se}from"node:crypto";import{link as yt,mkdir as bt,readFile as vt,rename as wt,rm as kt,writeFile as Ce}from"node:fs/promises";import{basename as St,dirname as Pe,join as Ct}from"node:path";import{existsSync as ht}from"node:fs";import{homedir as be}from"node:os";import{join as A}from"node:path";function N(){return process.env.ONLYMCP_HOME??A(be(),".claude","onlymcp")}function ye(){return process.env.ONLYMCP_HOME??be()}function ve(){return A(N(),"device-id")}function we(){return A(N(),"cache")}function L(){return A(N(),"stub-ignore")}function ke(){let e=[];process.env.CLAUDE_PLUGIN_ROOT&&e.push(process.env.CLAUDE_PLUGIN_ROOT);for(let t of(process.env.ONLYMCP_STUB_DIRS??"").split(":"))t&&e.push(t);for(let t of[A(ye(),".claude"),A(ye(),".codex")])ht(t)&&!e.includes(t)&&e.push(t);return e.length>0?e:[A(N(),"plugin")]}var xt=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/,xe;function $e(){return xe??=Pt(),xe}async function ee(e){try{let t=(await vt(e,"utf8")).trim().toLowerCase();return xt.test(t)?t:null}catch{return null}}async function Pt(){let e=ve(),t=await ee(e);if(t)return t;try{return await bt(Pe(e),{recursive:!0}),await Et(e)}catch{return null}}var $t=new Set(["EPERM","ENOTSUP","EOPNOTSUPP","ENOSYS","EXDEV"]);async function Et(e){let t=Se(),n=Ct(Pe(e),`.${St(e)}.${process.pid}.${Se()}.tmp`);try{await Ce(n,`${t}
+`,{flag:"wx",mode:384});try{return await yt(n,e),t}catch(r){let o=r.code;if(o!=="EEXIST"&&!$t.has(o??""))throw r;if(o!=="EEXIST")try{return await Ce(e,`${t}
+`,{flag:"wx",mode:384}),t}catch(s){if(s.code!=="EEXIST")throw s}}let i=await ee(e);return i||(await wt(n,e),await ee(e)??t)}finally{await kt(n,{force:!0}).catch(()=>{})}}var U="0.19.0";var Rt=_t(At),Tt=`onlymcp-cli/${U} (${process.platform} ${process.arch}; node ${process.versions.node})`,Ee=200;async function Ae(e,t){let n;try{return await Promise.race([e,new Promise(i=>{n=setTimeout(()=>i(null),t),n.unref?.()})])}catch{return null}finally{n&&clearTimeout(n)}}async function Nt(){try{if(process.platform==="linux"){let e=It("/sys/class/dmi/id/product_version","utf8"),n=(await Ae(e,Ee))?.trim();return!n||/^(to be filled|default string|system version|none|n\/a)/i.test(n)?null:n}if(process.platform==="darwin"){let e=Rt("sysctl",["-n","hw.model"]);return(await Ae(e,Ee))?.stdout.trim()||null}}catch{}return null}async function te(){let e="unknown";try{e=Ot()||"unknown"}catch{}let t=await Nt();return(t&&t!==e?`${e} (${t})`:e).slice(0,60)}var Oe=null;async function _(){Oe??=await te();let e=await $e();return{"user-agent":Tt,"x-onlymcp-device":Oe,...e?{"x-onlymcp-device-id":e}:{}}}var h=class extends Error{constructor(n,i={},r=0){super(n);this.code=n;this.params=i;this.status=r;this.name="ApiError"}code;params;status},x=class{constructor(t,n){this.baseUrl=t;this.token=n}baseUrl;token;async call(t,n={}){let i=this.token();if(!i)throw new h("errors.NOT_LOGGED_IN");let r=await fetch(`${this.baseUrl}${t}`,{...n,headers:{...await _(),...n.headers??{},authorization:`Bearer ${i}`,"content-type":"application/json"}});if(r.status===204)return;let o=await r.json().catch(()=>({}));if(!r.ok)throw new h(o.code??"errors.UNKNOWN",o.params??{},r.status);return o}getMe(){return this.call("/api/me")}reportRun(t,n){return this.call("/api/devices/current/run",{method:"POST",body:JSON.stringify({kind:t,files:n}),signal:AbortSignal.timeout(5e3)})}signOut(){return this.call("/api/auth/sign-out",{method:"POST",body:"{}",signal:AbortSignal.timeout(5e3)})}listSkills(){return this.call("/api/skills")}getSkill(t){return this.call(`/api/skills/${encodeURIComponent(t)}`)}putSkill(t,n,i={}){return this.call(`/api/skills/${encodeURIComponent(t)}`,{method:"PUT",body:JSON.stringify({body:n,...i})})}skillFileUrl(t,n){let i=n.split("/").map(encodeURIComponent).join("/");return`/api/skills/${encodeURIComponent(t)}/files/${i}`}getSkillFile(t,n){return this.call(this.skillFileUrl(t,n))}putSkillFile(t,n,i,r="utf8"){return this.call(this.skillFileUrl(t,n),{method:"PUT",body:JSON.stringify({content:i,encoding:r})})}listAgents(){return this.call("/api/agents")}putAgent(t,n){return this.call(`/api/agents/${encodeURIComponent(t)}`,{method:"PUT",body:JSON.stringify(n)})}getAgent(t,{use:n=!1}={}){return this.call(`/api/agents/${encodeURIComponent(t)}${n?"?use=1":""}`)}readMemory(t){return this.call(this.memoryUrl(t))}writeMemory(t,n,i){return this.call(this.memoryUrl(t),{method:"PUT",body:JSON.stringify({content:n,deviceLabel:i})})}memoryUrl(t){return`/api/memory/${t.split("/").map(encodeURIComponent).join("/")}`}listMemory(){return this.call("/api/memory")}searchContent(t,n={}){let i=new URLSearchParams({q:t});return n.types?.length&&i.set("types",n.types.join(",")),n.limit&&i.set("limit",String(n.limit)),this.call(`/api/search?${i.toString()}`)}memoryTree(t="all"){return this.call(`/api/memory/tree?scope=${encodeURIComponent(t)}`)}moveMemory(t,n,i=!0,r=Lt()){return this.call("/api/memory/move",{method:"POST",body:JSON.stringify({from:t,to:n,updateLinks:i,deviceLabel:r})})}async exportArchive(t={}){let n=this.token();if(!n)throw new h("errors.NOT_LOGGED_IN");let i=new URLSearchParams;t.scope&&i.set("scope",t.scope),t.types?.length&&i.set("types",t.types.join(","));let r=i.size>0?`?${i.toString()}`:"",o=await fetch(`${this.baseUrl}/api/export${r}`,{headers:{...await _(),authorization:`Bearer ${n}`}});if(!o.ok){let s=await o.json().catch(()=>({}));throw new h(s.code??"errors.UNKNOWN",s.params??{},o.status)}return o}deleteMemory(t){return this.call(this.memoryUrl(t),{method:"DELETE"})}deleteSkill(t){return this.call(`/api/skills/${encodeURIComponent(t)}`,{method:"DELETE"})}deleteSkillFile(t,n){return this.call(this.skillFileUrl(t,n),{method:"DELETE"})}deleteAgent(t){return this.call(`/api/agents/${encodeURIComponent(t)}`,{method:"DELETE"})}listConnections(){return this.call("/api/mcp-connections")}createConnection(t){return this.call("/api/mcp-connections",{method:"POST",body:JSON.stringify(t)})}updateConnection(t,n){return this.call(`/api/mcp-connections/${t}`,{method:"PATCH",body:JSON.stringify(n)})}deleteConnection(t){return this.call(`/api/mcp-connections/${t}`,{method:"DELETE"})}listCapabilities(t){return this.call(`/api/mcp-connections/${t}/capabilities`)}toggleCapability(t,n,i){return this.call(`/api/mcp-connections/${t}/capabilities/${n}`,{method:"PATCH",body:JSON.stringify({enabled:i})})}};import{Entry as Ut}from"@napi-rs/keyring";function Mt(e,t){let n=()=>new Ut(e,t);return{save(i){n().setPassword(i)},read(){try{return n().getPassword()}catch{return null}},clear(){try{n().deletePassword()}catch{}}}}var S=Mt("onlymcp","session-token");var Dt={sleep:e=>new Promise(t=>setTimeout(t,e))};async function Ie(e,t,n,i=Dt){let r=n;for(;;){await i.sleep(r*1e3);let s=await(await fetch(`${e}/api/auth/device/token`,{method:"POST",headers:{...await _(),"content-type":"application/json"},body:JSON.stringify({grant_type:"urn:ietf:params:oauth:grant-type:device_code",device_code:t,client_id:"onlymcp-cli"})})).json().catch(()=>({}));if(s.access_token)return s.access_token;switch(s.error){case"authorization_pending":break;case"slow_down":r+=5;break;case"access_denied":throw new h("errors.DEVICE_ACCESS_DENIED");case"expired_token":throw new h("errors.DEVICE_CODE_EXPIRED");default:throw new h("errors.DEVICE_LOGIN_FAILED",{error:s.error})}}}import M from"cacache";var zt=Number(process.env.ONLYMCP_TTL_SECONDS??360*60),D=class{constructor(t=we()){this.dir=t}dir;async get(t){try{let n=await M.get(this.dir,t),i=n.metadata;return!i||i.expiresAt<=Date.now()?(await M.rm.entry(this.dir,t),null):n.data.toString("utf8")}catch{return null}}async set(t,n,i=zt){await M.put(this.dir,t,n,{metadata:{expiresAt:Date.now()+i*1e3}})}async clear(){await M.rm.all(this.dir)}};import{appendFileSync as nn,existsSync as j,mkdirSync as Re,readFileSync as Ne,writeFileSync as rn}from"node:fs";import{dirname as Le,join as on}from"node:path";function _e(e){return{language:"bash",text:e}}function P(e,t){return{language:"json",text:JSON.stringify(e,null,2),path:t}}var jt={id:"claude-code",name:"Claude Code",category:"coding",brand:"claudecode",methods:["remote-header","remote-oauth","stdio"],docsUrl:"https://code.claude.com/docs/en/mcp-quickstart",verifiedOn:"2026-09-25",caveats:["clients.caveat.claudeCodeConnectorSynced"],install:{configPath:"~/.claude.json",format:"json",stubDir:null},remote:e=>[_e(`claude mcp add --transport http --scope user onlymcp ${e.endpoint} --header "Authorization: Bearer ${e.token}"`)]},Ft={id:"claude-app",name:"Claude",category:"chat",brand:"claude",methods:["remote-oauth"],docsUrl:"https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp",verifiedOn:"2026-09-25",caveats:["clients.caveat.claudeHeaderBeta"],install:null,oauthRedirectHosts:["claude.ai","claude.com"],remote:()=>null},Bt={id:"chatgpt",name:"ChatGPT",category:"chat",brand:"openai",methods:["remote-oauth"],docsUrl:"https://help.openai.com/en/articles/12584461-developer-mode-and-mcp-apps-in-chatgpt",verifiedOn:"2026-09-25",caveats:["clients.caveat.chatgptDeveloperMode"],install:null,oauthRedirectHosts:["chatgpt.com"],remote:()=>null},Ht={id:"codex",name:"Codex",category:"coding",brand:"openai",methods:["remote-header","remote-oauth","stdio"],docsUrl:"https://learn.chatgpt.com/docs/extend/mcp?surface=cli",verifiedOn:"2026-09-25",caveats:["clients.caveat.codexTokenEnv"],install:{configPath:"~/.codex/config.toml",format:"toml",stubDir:"~/.codex/skills"},remote:e=>[_e([`export ONLYMCP_TOKEN=${e.token}`,`codex mcp add onlymcp --url ${e.endpoint} --bearer-token-env-var ONLYMCP_TOKEN`].join(`
+`))]},Gt={id:"antigravity",aliases:["gemini-cli"],name:"Antigravity",category:"coding",brand:"antigravity",methods:["remote-oauth","remote-header","stdio"],docsUrl:"https://antigravity.google/docs/mcp",verifiedOn:"2026-10-17",caveats:[],install:{configPath:"~/.gemini/config/mcp_config.json",format:"json",stubDir:null},oauthRedirectHosts:["antigravity.google"],remote:e=>[P({mcpServers:{onlymcp:{serverUrl:e.endpoint,headers:{Authorization:`Bearer ${e.token}`}}}},"~/.gemini/config/mcp_config.json")]},Wt={id:"gemini-app",name:"Gemini",category:"chat",brand:"googlegemini",methods:["remote-oauth"],docsUrl:"https://support.google.com/gemini/answer/17209137",verifiedOn:"2026-10-10",caveats:["clients.caveat.geminiAppSpark"],install:null,remote:()=>null},Jt={id:"grok",name:"Grok",category:"chat",brand:"grok",methods:["remote-oauth"],docsUrl:"https://docs.x.ai/grok/connectors",verifiedOn:"2026-10-17",caveats:["clients.caveat.grokConnectors","clients.caveat.grokBusinessAdmin"],install:null,oauthRedirectHosts:["grok.com"],remote:()=>null},Vt={id:"copilot-vscode",name:"GitHub Copilot (VS Code)",category:"ide",brand:"githubcopilot",methods:["remote-header","remote-oauth","stdio"],docsUrl:"https://code.visualstudio.com/docs/agents/reference/mcp-configuration",verifiedOn:"2026-09-25",caveats:["clients.caveat.copilotPolicy"],install:null,remote:e=>[P({servers:{onlymcp:{type:"http",url:e.endpoint,headers:{Authorization:`Bearer ${e.token}`}}}},".vscode/mcp.json")]},Kt={id:"cursor",name:"Cursor",category:"ide",brand:"cursor",methods:["remote-header","remote-oauth","stdio"],docsUrl:"https://cursor.com/docs/mcp",verifiedOn:"2026-09-25",caveats:[],install:null,remote:e=>[P({mcpServers:{onlymcp:{url:e.endpoint,headers:{Authorization:`Bearer ${e.token}`}}}},"~/.cursor/mcp.json")]},Yt={id:"windsurf",name:"Windsurf",category:"ide",brand:"windsurf",methods:["remote-header","stdio"],docsUrl:"https://docs.windsurf.com/windsurf/cascade/mcp",verifiedOn:"2026-09-25",caveats:["clients.caveat.windsurfAllowlist"],install:null,remote:e=>[P({mcpServers:{onlymcp:{serverUrl:e.endpoint,headers:{Authorization:`Bearer ${e.token}`}}}},"~/.codeium/windsurf/mcp_config.json")]},qt={id:"cline",name:"Cline",category:"ide",brand:"cline",methods:["remote-header","stdio"],docsUrl:"https://docs.cline.bot/mcp/mcp-overview",verifiedOn:"2026-09-25",caveats:[],install:null,remote:e=>[P({mcpServers:{onlymcp:{type:"streamableHttp",url:e.endpoint,headers:{Authorization:`Bearer ${e.token}`}}}},"~/.cline/mcp.json")]},Zt={id:"zed",name:"Zed",category:"ide",brand:"zedindustries",methods:["remote-header","remote-oauth","stdio"],docsUrl:"https://zed.dev/docs/assistant/model-context-protocol",verifiedOn:"2026-09-25",caveats:[],install:null,remote:e=>[P({context_servers:{onlymcp:{url:e.endpoint,headers:{Authorization:`Bearer ${e.token}`}}}},"settings.json")]},Xt={id:"continue",name:"Continue",category:"ide",brand:null,methods:["remote-header","stdio"],docsUrl:"https://docs.continue.dev/customize/deep-dives/mcp",verifiedOn:"2026-09-25",caveats:[],install:null,remote:e=>[{language:"yaml",path:"config.yaml",text:["mcpServers:","  - name: onlymcp","    type: streamable-http",`    url: ${e.endpoint}`,"    requestOptions:","      headers:",`        Authorization: Bearer ${e.token}`].join(`
+`)}]},Qt={id:"opencode",name:"opencode",category:"coding",brand:"opencode",methods:["remote-header","remote-oauth","stdio"],docsUrl:"https://opencode.ai/docs/mcp-servers/",verifiedOn:"2026-09-25",caveats:[],install:null,remote:e=>[P({mcp:{onlymcp:{type:"remote",url:e.endpoint,headers:{Authorization:`Bearer ${e.token}`}}}},"opencode.json")]},en={id:"gitlab-duo",name:"GitLab Duo",category:"ide",brand:"gitlab",methods:["remote-oauth"],docsUrl:"https://docs.gitlab.com/user/gitlab_duo/model_context_protocol/mcp_clients",verifiedOn:"2026-10-18",caveats:["clients.caveat.gitlabDuoUserFile"],install:null,remote:e=>[P({mcpServers:{onlymcp:{type:"http",url:e.endpoint}}},"~/.gitlab/duo/mcp.json")]},z=[Ft,Bt,Wt,Jt,jt,Ht,Gt,Qt,Vt,Kt,Yt,qt,Zt,Xt,en];function ne(e){return z.find(t=>t.id===e||t.aliases?.includes(e))}var v=e=>({title:e,annotations:{readOnlyHint:!0,openWorldHint:!1}}),w=(e,t)=>({title:e,annotations:{readOnlyHint:!1,destructiveHint:t.destructive,idempotentHint:t.idempotent,openWorldHint:t.openWorld??!1}}),tn={list_memory:v("List memory files"),memory_read:v("Read a memory file"),memory_write:w("Write a memory file",{destructive:!0,idempotent:!0}),memory_delete:w("Delete a memory file",{destructive:!0,idempotent:!1}),memory_search:v("Search memory"),memory_tree:v("Show the memory tree"),memory_move:w("Move a memory file or folder",{destructive:!1,idempotent:!1}),memory_links:v("Show memory links"),list_skills:v("List skills"),get_skill:v("Load a skill"),skill_write:w("Write a skill",{destructive:!0,idempotent:!0}),skill_delete:w("Delete a skill",{destructive:!0,idempotent:!1}),list_skill_files:v("List skill files"),get_skill_file:v("Read a skill file"),skill_file_write:w("Write a skill file",{destructive:!0,idempotent:!0}),skill_file_delete:w("Delete a skill file",{destructive:!0,idempotent:!1}),list_agents:v("List agents"),get_agent_definition:v("Load an agent definition"),agent_write:w("Write an agent",{destructive:!0,idempotent:!0}),agent_delete:w("Delete an agent",{destructive:!0,idempotent:!1}),list_connections:v("List connections"),connection_create:w("Add a connection",{destructive:!1,idempotent:!1,openWorld:!0}),connection_update:w("Update a connection",{destructive:!1,idempotent:!0}),connection_delete:w("Delete a connection",{destructive:!0,idempotent:!1}),connection_tools:v("List a connection's tools"),connection_tool_toggle:w("Switch a connection tool on or off",{destructive:!1,idempotent:!0}),connection_tool_schema:v("Show a connection tool's schema"),connection_call:w("Call a connection tool",{destructive:!0,idempotent:!1,openWorld:!0})};var sn="onlymcp",re="npx",oe=["-y","-p",sn,"onlymcp-mcp"],Ue='With the claude.ai connector synced into Claude Code, or the OnlyMCP plugin installed, you need nothing else. This local process is only for skill files on disk: it replaces the remote "onlymcp" entry in ~/.claude.json, and next to the connector or the plugin it would list every tool twice.';function ie(e){return`"${e.replace(/\\/g,"\\\\").replace(/"/g,'\\"')}"`}function an(e){return JSON.stringify({mcpServers:{onlymcp:e?{command:re,args:oe,env:e}:{command:re,args:oe}}},null,2)}function ln(e){let t=["[mcp_servers.onlymcp]",`command = ${ie(re)}`,`args = [${oe.map(ie).join(", ")}]`];for(let[n,i]of Object.entries(e??{}))t.push(`env = { ${n} = ${ie(i)} }`);return`${t.join(`
+`)}
+`}var cn={claude:"claude-code",gemini:"antigravity"};function Me(){return z.filter(e=>e.install!==null)}var dn=new Set(Me().map(e=>e.id));function un(e){let t=cn[e]??ne(e)?.id;return t&&dn.has(t)?t:void 0}function Te(e,t){return e.startsWith("~/")?on(t,e.slice(2)):e}function pn(e){return Me().map(t=>{let n=Te(t.install.configPath,e),i=t.install.stubDir?Te(t.install.stubDir,e):null,r=i?Le(i):null,o=t.install.format==="toml"?ln(r?{ONLYMCP_STUB_DIRS:r}:void 0):an();return{id:t.id,name:t.name,configPath:n,format:t.install.format,stubDir:i,stubRoot:r,snippet:o}})}function mn(e,t,n){let i={};if(j(e)){let o=Ne(e,"utf8").trim();if(o)try{i=JSON.parse(o)}catch{throw new Error(`${e} contains invalid JSON. Nothing written.`)}}let r=i.mcpServers??{};i.mcpServers={...r,[t]:n},rn(e,`${JSON.stringify(i,null,2)}
+`,"utf8")}function gn(e,t){return j(e)&&Ne(e,"utf8").includes("[mcp_servers.onlymcp]")?"already-present":(nn(e,`
+${t}`),"written")}function De(e,t){let n=pn(e);if(t.all){if(t.client)return{kind:"conflicting-options"};let o=n.filter(p=>j(p.configPath)),s=n.filter(p=>!j(p.configPath));return o.length===0?{kind:"none-present-for-all",targets:n}:{kind:"all",present:o,skipped:s}}if(!t.client)return{kind:"missing-client",targets:n};let i=un(t.client),r=i?n.find(o=>o.id===i):void 0;return r?{kind:"single",target:r}:{kind:"unknown-client",targets:n}}function ze(e){Re(Le(e.configPath),{recursive:!0});let t=e.format==="toml"?gn(e.configPath,e.snippet):(()=>{let n=JSON.parse(e.snippet),i=Object.entries(n.mcpServers)[0];if(!i)throw new Error(`${e.name}: empty mcpServers snippet.`);return mn(e.configPath,i[0],i[1]),"written"})();return e.stubDir&&Re(e.stubDir,{recursive:!0}),t}import{access as vn,mkdir as ae,readFile as wn,rm as We,writeFile as B}from"node:fs/promises";import{dirname as kn,join as T}from"node:path";function R(e){if(!e.startsWith(`---
+`))return null;let t=e.indexOf(`
+---`,3);return t<0?null:e.slice(4,t)}function $(e,t){if(!/^[a-zA-Z0-9_-]+$/.test(t))return;let n=new RegExp(`^${t}:[ \\t]*(.*)$`,"m").exec(e);if(!n)return;let r=n[1].trim().replace(/^(['"])(.*)\1$/,"$2").trim();return r.length>0?r:void 0}function je(e){let t=R(e);if(t===null)return null;let n=$(t,"description");if(!n)return null;let i=$(t,"tools"),r=i?i.replace(/^\[(.*)\]$/,"$1").split(",").map(s=>s.trim()).filter(s=>s.length>0):[],o=$(t,"model");return o?{description:n,model:o,tools:r}:{description:n,tools:r}}function Fe(e){let t=R(e);return(t===null?void 0:$(t,"description"))??""}function Be(e){let t=R(e);return t===null?!1:$(t,"x-onlymcp-stub")==="true"}function He(e){if(!e.startsWith(`---
+`))return e;let t=e.indexOf(`
+---`,3);if(t<0)return e;let n=e.indexOf(`
+`,t+4);return n<0?"":e.slice(n+1)}import{readFile as fn}from"node:fs/promises";var se=()=>!1;function hn(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function yn(e){let t=e.split(/\r?\n/).map(n=>n.trim()).filter(n=>n!==""&&!n.startsWith("#")).map(n=>new RegExp(`^${n.split("*").map(hn).join(".*")}$`));return n=>t.some(i=>i.test(n))}async function Ge(e=L()){try{return yn(await fn(e,"utf8"))}catch(t){if(t.code==="ENOENT")return se;throw t}}var bn=/^[A-Za-z0-9][A-Za-z0-9._-]*$/;function F(e){if(e.length===0||e.length>200||e==="SKILL.md")return!1;let t=e.split("/");return t.length>8?!1:t.every(n=>bn.test(n)&&n!==".."&&n!==".")}var Sn=/^[a-z0-9]+(-[a-z0-9]+)*$/,Cn=/^[a-z0-9]+(-[a-z0-9]+)*(:[a-z0-9]+(-[a-z0-9]+)*)?$/,le="x-onlymcp-stub";function H(e){return e.replace(/:/g,"-")}function G(e){return(e??"").replace(/[\r\n]+/g," ").trim()}async function ce(e,t){let n;try{n=await wn(e,"utf8")}catch{return!0}let i=R(n);if(i===null||$(i,le)!=="true")return!1;let r=$(i,"x-onlymcp-name");return r===void 0||r===t}async function Je(e,t){return await vn(e).then(()=>!0,()=>!1)&&await ce(e,t)}async function Ve(e,t,n={}){let i=n.ignore??se,[{skills:r},{agents:o}]=await Promise.all([e.listSkills(),e.listAgents()]),s=0,p=0,a=[],l=[],c=0;for(let u of r){if(!Cn.test(u.name))continue;let f=T(t,"skills",H(u.name)),y=T(f,"SKILL.md");if(i(u.name)||i(H(u.name))){l.push(u.name),await Je(y,u.name)&&(await We(f,{recursive:!0,force:!0}),c+=1);continue}if(!await ce(y,u.name)){a.push(`skills/${H(u.name)}`);continue}await ae(f,{recursive:!0}),await B(y,`---
+name: ${H(u.name)}
+description: ${G(u.description)||"Synchronisiert ueber OnlyMCP. Inhalt wird bei Bedarf geladen."}
+${le}: true
+x-onlymcp-name: ${u.name}
+---
+
+Call \`get_skill({ name: "${u.name}" })\` on the OnlyMCP server and follow whatever comes back.
+`,"utf8"),p+=1;try{let m=await e.getSkill(u.name);for(let b of m.files??[]){if(!F(b.path))continue;let X=await e.getSkillFile(u.name,b.path),Q=T(f,...b.path.split("/"));await ae(kn(Q),{recursive:!0}),X.encoding==="base64"?await B(Q,Buffer.from(X.content,"base64")):await B(Q,X.content,"utf8"),s+=1}}catch{}}await ae(T(t,"agents"),{recursive:!0});let g=0;for(let u of o){if(!Sn.test(u.name))continue;let f=T(t,"agents",`${u.name}.md`);if(i(u.name)){l.push(u.name),await Je(f,u.name)&&(await We(f),c+=1);continue}if(!await ce(f,u.name)){a.push(`agents/${u.name}.md`);continue}let y=G(u.description),m=u.model?G(u.model):"",b=u.tools.map(G).join(", ");await B(f,`---
+name: ${u.name}
+description: ${y}
+${m?`model: ${m}
+`:""}tools: ${b}
+${le}: true
+x-onlymcp-name: ${u.name}
+---
+
+Call \`get_agent_definition({ name: "${u.name}" })\` on the OnlyMCP server and follow whatever comes back.
+`,"utf8"),g+=1}return{skills:p,agents:g,files:s,kept:a,ignored:l,removed:c}}import{readdir as En,readFile as An,realpath as qe,stat as On}from"node:fs/promises";import{join as In,relative as _n,resolve as Rn,sep as Ze}from"node:path";var xn=[/^\.env(\..+)?$/i,/^\.credentials\.json$/i,/^id_(rsa|dsa|ecdsa|ed25519)(\.pub)?$/i,/\.(pem|key|p12|pfx|jks|keystore)$/i,/^\.(npmrc|netrc|pgpass|htpasswd)$/i,/^\.git-credentials$/i];function Ke(e){return xn.some(t=>t.test(e))}var Pn=[{rule:"anthropic",re:/\bsk-ant-[A-Za-z0-9_-]{20,}/},{rule:"openai",re:/\bsk-(?!ant-)[A-Za-z0-9_-]{20,}/},{rule:"github",re:/\bgh[pousr]_[A-Za-z0-9]{36,}/},{rule:"aws",re:/\bAKIA[0-9A-Z]{16}\b/},{rule:"slack",re:/\bxox[baprs]-[A-Za-z0-9-]{10,}/},{rule:"google",re:/\bAIza[0-9A-Za-z_-]{35}\b/},{rule:"jwt",re:/\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\./},{rule:"private-key",re:/-----BEGIN [A-Z ]*PRIVATE KEY-----/},{rule:"url-credentials",re:/\b[a-z][a-z0-9+.-]*:\/\/[^\s:/@]+:[^\s:/@]{6,}@/i},{rule:"assignment",re:/\b(api[_-]?key|secret|passwd|password|token|credential)\b\s*[:=]\s*['"][^'"\s]{16,}['"]/i}];function $n(e,t){let n=e.indexOf(t);return`${e.slice(Math.max(0,n-24),n)}\u2026${t.slice(0,4)}\u2026 (${t.length} characters)`}function Ye(e){let t=[],n=e.split(`
+`);for(let i=0;i<n.length;i+=1){let r=n[i];for(let{rule:o,re:s}of Pn){let p=s.exec(r);if(p){t.push({rule:o,line:i+1,excerpt:$n(r,p[0])});break}}}return t}var Tn=new Set([".git","node_modules","__pycache__",".venv","venv",".pytest_cache",".mypy_cache","dist","build",".next",".cache"]),Nn=2*1024*1024;function Ln(e){return e.subarray(0,8192).includes(0)}async function O(e,t={}){let n=t.maxBytes??Nn,i=await qe(Rn(e)),r=[];async function o(s){let p=await En(s,{withFileTypes:!0});for(let a of p){let l=In(s,a.name);if(a.isDirectory()){if(Tn.has(a.name))continue;await o(l);continue}let c;try{c=await qe(l)}catch{continue}if(c!==i&&!c.startsWith(i+Ze))continue;let g=_n(i,c).split(Ze).join("/");if(Ke(a.name)){r.push({absolute:c,relative:g,bytes:0,binary:!1,hits:[],skip:"denied-name",description:null});continue}let u=await On(c);if(!u.isFile())continue;if(u.size>n){r.push({absolute:c,relative:g,bytes:u.size,binary:!1,hits:[],skip:"too-large",description:null});continue}let f=await An(c),y=Ln(f),m=!y&&g.toLowerCase().endsWith(".md")?f.toString("utf8"):null;r.push({absolute:c,relative:g,bytes:u.size,binary:y,hits:y?[]:Ye(f.toString("utf8")),skip:m!==null&&Be(m)?"stub":null,description:m===null?null:Fe(m)||null})}}return await o(i),r.sort((s,p)=>s.relative.localeCompare(p.relative)),r}import{basename as Mn}from"node:path";var Un=/^[a-z0-9][a-z0-9._-]*(\/[a-z0-9][a-z0-9._-]*)*\.md$/i;function W(e){return Un.test(e)&&!e.split("/").includes("..")}var Dn=/^[a-z0-9]+(-[a-z0-9]+)*$/,zn=/^[a-z0-9]+(-[a-z0-9]+)*(:[a-z0-9]+(-[a-z0-9]+)*)?$/,Xe=/^[a-z0-9][a-z0-9._-]*$/i;function jn(e){let t=e.split("/"),n=t.indexOf("skills");return n>=4&&t[n-4]==="cache"&&n+1<t.length-1?{prefix:t.slice(0,n+2).join("/"),name:`${t[n-2]}:${t[n+1]}`,plugin:t[n-2],path:t.slice(n+2).join("/")}:t.length<2?null:{prefix:t[0],name:t[0],plugin:null,path:t.slice(1).join("/")}}function J(e){return e.skip===null&&e.hits.length===0}function V(e){return e.skip??(e.hits.length>0?"flagged":"unusable")}function Fn(e,t={}){let n=[],i=[],r=[],o=new Map,s=t.root?Mn(t.root.replace(/[/\\]+$/,"")):"",p=Xe.test(s)?{key:s,kind:"directory",label:s}:null;for(let a of e){let l=jn(a.relative);if(!l){i.push({relative:a.relative,reason:"not-in-a-skill-folder"});continue}let c=o.get(l.prefix);c?c.entries.push(a):o.set(l.prefix,{at:l,entries:[a]})}for(let[a,{at:l,entries:c}]of o){let g=l.name;if(!zn.test(g)){i.push({relative:a,reason:"invalid-name"});continue}let u=c.find(m=>m.relative===`${a}/SKILL.md`);if(!u){i.push({relative:a,reason:"no-skill-md"});continue}if(!J(u)){i.push({relative:`${a}/SKILL.md`,reason:V(u)});continue}let f=[];for(let m of c){if(m===u)continue;if(!J(m)){i.push({relative:m.relative,reason:V(m)});continue}let b=m.relative.slice(a.length+1);if(!F(b)){i.push({relative:m.relative,reason:"invalid-path"});continue}f.push({path:b,absolute:m.absolute,bytes:m.bytes,binary:m.binary})}f.sort((m,b)=>m.path.localeCompare(b.path));let y=u.description??"";y||r.push(g),n.push({name:g,source:u.absolute,sourcePath:u.relative,description:y,collection:l.plugin?Xe.test(l.plugin)?{key:l.plugin,kind:"plugin",label:l.plugin}:null:p,bytes:u.bytes,files:f})}return n.sort((a,l)=>a.name.localeCompare(l.name)),r.sort(),{plans:n,skipped:i,noDescription:r}}function Bn(e){let t=[],n=[];for(let i of e){if(i.relative.includes("/")){n.push({relative:i.relative,reason:"not-at-top-level"});continue}if(!i.relative.endsWith(".md")){n.push({relative:i.relative,reason:"not-markdown"});continue}let r=i.relative.slice(0,-3);if(!Dn.test(r)){n.push({relative:i.relative,reason:"invalid-name"});continue}if(!J(i)){n.push({relative:i.relative,reason:V(i)});continue}t.push({name:r,source:i.absolute,bytes:i.bytes})}return t.sort((i,r)=>i.name.localeCompare(r.name)),{plans:t,skipped:n}}function Hn(e){let t=[],n=[];for(let i of e){if(!W(i.relative)){n.push({relative:i.relative,reason:"invalid-path"});continue}if(!J(i)){n.push({relative:i.relative,reason:V(i)});continue}t.push({path:i.relative,source:i.absolute,bytes:i.bytes})}return t.sort((i,r)=>i.path.localeCompare(r.path)),{plans:t,skipped:n}}function de(e,t={}){let n=Fn(e.skills??[],{root:t.skillsRoot}),i=Bn(e.agents??[]),r=Hn(e.memory??[]),o=[...e.skills??[],...e.agents??[],...e.memory??[]];return{skills:n.plans,agents:i.plans,memory:r.plans,flagged:o.filter(s=>s.skip===null&&s.hits.length>0),skipped:[...n.skipped,...i.skipped,...r.skipped],noDescription:n.noDescription}}import{readFile as K}from"node:fs/promises";import{hostname as Gn}from"node:os";function Y(e){return e instanceof h?e.code:e instanceof Error?e.message:String(e)}function ue(e){return e.skills.length+e.skills.reduce((t,n)=>t+n.files.length,0)+e.agents.length+e.memory.length}async function Qe(e,t,n){let i={skills:0,skillFiles:0,agents:0,memory:0,failures:[]},r=ue(t),o=0,s=a=>n(o+=1,r,a);for(let a of t.skills){try{await e.putSkill(a.name,await K(a.source,"utf8"),{...a.description?{description:a.description}:{},sourcePath:a.sourcePath,...a.collection?{collection:a.collection}:{}}),i.skills+=1}catch(l){i.failures.push({what:`skill ${a.name}`,code:Y(l)}),o+=a.files.length,s(a.name);continue}s(a.name);for(let l of a.files){try{let c=await K(l.absolute);await e.putSkillFile(a.name,l.path,l.binary?c.toString("base64"):c.toString("utf8"),l.binary?"base64":"utf8"),i.skillFiles+=1}catch(c){i.failures.push({what:`${a.name}/${l.path}`,code:Y(c)})}s(`${a.name}/${l.path}`)}}for(let a of t.agents){try{let l=await K(a.source,"utf8"),c=je(l);if(!c){i.failures.push({what:`agent ${a.name}`,code:"no-frontmatter"}),s(a.name);continue}await e.putAgent(a.name,{...c,body:He(l)}),i.agents+=1}catch(l){i.failures.push({what:`agent ${a.name}`,code:Y(l)})}s(a.name)}let p=Gn();for(let a of t.memory){try{await e.writeMemory(a.path,await K(a.source,"utf8"),p),i.memory+=1}catch(l){i.failures.push({what:a.path,code:Y(l)})}s(a.path)}return i}function et(e){return e.skills.length===0&&e.agents.length===0&&e.memory.length===0}function tt(e){return e.skills.length+e.agents.length+e.memory.length}function pe(e){return e.scope==="personal"&&e.isOwn&&e.archivedAt===null}async function nt(e,t,n){let i={skills:[],agents:[],memory:[]};if(n.skills){let r=new Set(t.skills.map(s=>s.name)),{skills:o}=await e.listSkills();i.skills=o.filter(s=>pe(s)&&!r.has(s.name)).map(s=>s.name)}if(n.agents){let r=new Set(t.agents.map(s=>s.name)),{agents:o}=await e.listAgents();i.agents=o.filter(s=>pe(s)&&!r.has(s.name)).map(s=>s.name)}if(n.memory){let r=new Set(t.memory.map(s=>s.path)),{files:o}=await e.listMemory();i.memory=o.filter(s=>pe(s)&&!r.has(s.path)).map(s=>s.path)}return i.skills.sort(),i.agents.sort(),i.memory.sort(),i}function Wn(e){return e instanceof h?e.code:e instanceof Error?e.message:String(e)}async function it(e,t){let n={deleted:0,failures:[]},i=async(r,o,s)=>{for(let p of r)try{await s(p),n.deleted+=1}catch(a){n.failures.push({what:o(p),code:Wn(a)})}};return await i(t.skills,r=>`skill ${r}`,r=>e.deleteSkill(r)),await i(t.agents,r=>`agent ${r}`,r=>e.deleteAgent(r)),await i(t.memory,r=>r,r=>e.deleteMemory(r)),n}import{mkdir as rt,writeFile as Jn}from"node:fs/promises";import{dirname as Vn,resolve as ot,sep as Kn}from"node:path";async function st(e,t){let n=ot(t);await rt(n,{recursive:!0});let i={written:0,refused:[],collisions:[],failures:[]},{files:r}=await e.listMemory(),o=[...r].sort((p,a)=>p.scope===a.scope?p.path.localeCompare(a.path):p.scope==="personal"?-1:1),s=new Set;for(let p of o){if(!W(p.path)){i.refused.push(p.path);continue}let a=ot(n,...p.path.split("/"));if(!a.startsWith(n+Kn)){i.refused.push(p.path);continue}if(s.has(a)){i.collisions.push(p.path);continue}try{let l=await e.readMemory(p.path);await rt(Vn(a),{recursive:!0}),await Jn(a,l.content,"utf8"),s.add(a),i.written+=1}catch(l){i.failures.push({what:p.path,code:l instanceof Error?l.message:String(l)})}}return i}import{mkdir as at,writeFile as Yn}from"node:fs/promises";import{dirname as qn,resolve as lt,sep as Zn}from"node:path";import{unzipSync as Xn}from"fflate";async function ct(e,t){let n=lt(t);await at(n,{recursive:!0});let i={written:0,refused:[],failed:[]},r=Xn(e);for(let[o,s]of Object.entries(r)){if(o.endsWith("/"))continue;let p=o.split("/");if(o.startsWith("/")||/^[a-zA-Z]:/.test(o)||o.includes("\\")||p.some(c=>c===""||c==="."||c==="..")){i.refused.push(o);continue}let l=lt(n,...p);if(!l.startsWith(n+Zn)){i.refused.push(o);continue}try{await at(qn(l),{recursive:!0}),await Yn(l,s),i.written+=1}catch(c){i.failed.push({path:o,reason:c instanceof Error?c.message:String(c)})}}return i}var C=process.env.ONLYMCP_API_URL??"https://only-mcp.com",E=new ei().name("onlymcp").version(U);function li(e,t){try{let n=new URL(e);return(n.protocol==="https:"||n.protocol==="http:")&&n.origin===t}catch{return!1}}E.command("login").description("Connect this device to OnlyMCP").action(async()=>{he("OnlyMCP"),d.info(`This device will register itself as: ${await te()}`);let t=await(await fetch(`${C}/api/auth/device/code`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({client_id:"onlymcp-cli"})})).json();d.info(`Code: ${t.user_code}`),d.info(t.verification_uri),console.log(await ni.toString(t.verification_uri_complete,{type:"terminal",small:!0})),li(t.verification_uri_complete,new URL(C).origin)&&await ti(t.verification_uri_complete).catch(()=>{});let n=Z();n.start("Waiting for confirmation");let i=await Ie(C,t.device_code,t.interval??5);S.save(i),n.stop("Connected");let r=new x(C,()=>S.read()),o=await gt(r),s=ft(o);s&&d.info(s),I(`${o.skills} skills, ${o.agents} agents, ${o.files} files ready`)});async function gt(e){let t=await Ge(),n={skills:0,agents:0,files:0,kept:[],ignored:new Set,removed:0};for(let i of ke()){let r=await Ve(e,i,{ignore:t});n.skills+=r.skills,n.agents+=r.agents,n.files+=r.files;for(let o of r.kept)n.kept.push(`${i}/${o}`);for(let o of r.ignored)n.ignored.add(o);n.removed+=r.removed}return n}function ft(e){if(e.ignored.size===0)return null;let t=e.removed>0?`, ${e.removed} earlier stubs removed`:"";return`${e.ignored.size} left out by ${L()}${t}`}async function fe(e,t,n){try{await e.reportRun(t,n)}catch{}}async function ci(e){try{return await new x(C,()=>e).signOut(),null}catch(t){return t instanceof h&&t.status>0?`HTTP ${t.status}`:t instanceof Error?t.message:String(t)}}E.command("logout").description("End this device's session, then remove its login and cache").action(async()=>{let e=S.read(),t=e?await ci(e):null;if(S.clear(),await new D().clear(),t){d.warn(`The session on the server could not be ended (${t}). It counts as a device until it expires, or until you remove it in the dashboard under Sessions and devices.`),d.success("Logged out on this device");return}d.success("Logged out")});E.command("status").description("Show whether this device is logged in").action(()=>{d.info(S.read()?"logged in":"not logged in")});E.command("sync").description("Rewrite the stub files").option("--memory <dir>","Also write memory as files into this folder").action(async e=>{let t=new x(C,()=>S.read()),n=await gt(t);d.success(`${n.skills} skills, ${n.agents} agents, ${n.files} files`);let i=ft(n);i&&d.info(i),n.kept.length>0&&d.warn([`Left untouched, because something of your own is already there (${n.kept.length})`,...n.kept.slice(0,10).map(s=>`  ${s}`),...n.kept.length>10?[`  ... and ${n.kept.length-10} more`]:[]].join(`
+`));let r=n.skills+n.agents+n.files;if(!e.memory){await fe(t,"sync",r);return}let o=await st(t,e.memory);d.success(`${o.written} memory files to ${e.memory}`),o.collisions.length>0&&d.warn(["Team files with a path an existing file of yours already has",...o.collisions.map(s=>`  ${s}`)].join(`
+`)),o.refused.length>0&&d.warn(["Paths refused",...o.refused.map(s=>`  ${s}`)].join(`
+`)),o.failures.length>0&&(d.error([`${o.failures.length} failed`,...o.failures.map(s=>`  ${s.what}   ${s.code}`)].join(`
+`)),process.exitCode=1),o.failures.length===0&&await fe(t,"sync",r+o.written)});E.command("install").description("Register OnlyMCP in an MCP client").option("--client <id>","claude-code, codex or antigravity (aliases: claude, gemini, gemini-cli)").option("--all","Write every config file that already exists on this machine").option("--print","Only print, write nothing").action(e=>{let t=process.env.ONLYMCP_HOME??mt(),n=De(t,e);function i(r){if(e.print){d.info(`${r.name} -> ${r.configPath}`),console.log(r.snippet);return}try{ze(r)==="already-present"?d.info(`${r.name} is already set up: ${r.configPath}`):d.success(`${r.name} set up: ${r.configPath}`),r.id==="claude-code"&&d.info(Ue)}catch(o){d.error(o instanceof Error?o.message:String(o)),process.exitCode=1}}switch(n.kind){case"conflicting-options":d.error("Pass either --client <id> or --all, not both."),process.exitCode=2;return;case"missing-client":d.info(`Known clients: ${n.targets.map(r=>r.id).join(", ")}`),d.info("Pass --client <id>, or --all."),process.exitCode=2;return;case"unknown-client":d.error(`Unknown client. Known: ${n.targets.map(r=>r.id).join(", ")}`),process.exitCode=1;return;case"none-present-for-all":d.error("No known client is set up on this machine yet."),d.info(`Pass --client <id> to write its config anyway. Known: ${n.targets.map(r=>r.id).join(", ")}.`),process.exitCode=2;return;case"single":i(n.target);return;case"all":for(let r of n.present)i(r);n.skipped.length>0&&d.info(`Skipped, not set up on this machine: ${n.skipped.map(r=>r.id).join(", ")}`);return}});function ge(e){return e<1024?`${e} B`:e<1024*1024?`${Math.round(e/1024)} KB`:`${(e/(1024*1024)).toFixed(1)} MB`}function q(e){return e.reduce((t,n)=>t+n.bytes,0)}function di(e,t){let n=e.skills.reduce((o,s)=>o+s.files.length,0),i=e.skills.filter(o=>o.files.length>0).length,r=e.skills.reduce((o,s)=>o+q(s.files),0);if(t.skills&&d.message(`Skills   ${String(e.skills.length).padStart(4)} from ${t.skills}
+         ${String(n).padStart(4)} more files across ${i} skills   ${ge(q(e.skills)+r)}`),t.agents&&d.message(`Agents   ${String(e.agents.length).padStart(4)} from ${t.agents}   ${ge(q(e.agents))}`),t.memory&&d.message(`Memory   ${String(e.memory.length).padStart(4)} from ${t.memory}   ${ge(q(e.memory))}`),e.skipped.length>0){let o=new Map;for(let s of e.skipped)o.set(s.reason,(o.get(s.reason)??0)+1);d.message(["Skipped",...[...o].map(([s,p])=>`  ${String(p).padStart(4)}  ${s}`)].join(`
+`))}e.noDescription.length>0&&d.warn(["Missing a description in the SKILL.md header",...e.noDescription.map(o=>`  ${o}`)].join(`
+`)),e.flagged.length>0&&d.warn(["Held back over possible credentials (none of it left this machine)",...e.flagged.flatMap(o=>[`  ${o.relative}`,...o.hits.map(s=>`      line ${s.line}   rule ${s.rule}   ${s.excerpt}`)])].join(`
+`))}E.command("import").description("Bring existing local skills, agents and memory into OnlyMCP").option("--skills <dir>","Folder with skill subfolders, or a plugin cache (~/.claude/skills when no folder is named)").option("--agents <dir>","Folder with agent files (~/.claude/agents when no folder is named)").option("--memory <dir>","Folder with memory files (no default)").option("--dry-run","Only show what would be uploaded, then stop").option("--yes","Upload without asking first").option("--prune","Delete, after confirmation, what the account holds and the source no longer has").action(async e=>{let t=process.env.ONLYMCP_HOME??mt(),n=!!(e.skills||e.agents||e.memory),i={skills:n?e.skills:pt(t,".claude","skills"),agents:n?e.agents:pt(t,".claude","agents"),memory:e.memory};he("OnlyMCP Import");let r=Z();r.start("Reading the folders");let o;try{let[a,l,c]=await Promise.all([i.skills&&k(i.skills)?O(i.skills):Promise.resolve([]),i.agents&&k(i.agents)?O(i.agents):Promise.resolve([]),i.memory&&k(i.memory)?O(i.memory):Promise.resolve([])]);o=de({skills:a,agents:l,memory:c},{skillsRoot:i.skills})}catch(a){r.stop("Aborted"),d.error(a instanceof Error?a.message:String(a)),process.exitCode=1;return}r.stop("Read"),di(o,{skills:i.skills&&k(i.skills)?i.skills:void 0,agents:i.agents&&k(i.agents)?i.agents:void 0,memory:i.memory&&k(i.memory)?i.memory:void 0});let s=ue(o);if(s===0&&!e.prune){I("Nothing to do.");return}if(e.dryRun&&!e.prune){I("Nothing uploaded (--dry-run).");return}let p=new x(C,()=>S.read());try{let a=await p.getMe();d.info(`Target   ${C}   as ${a.email}   plan ${a.plan.name}`)}catch(a){d.error(`Not logged in, or the server is unreachable (${a instanceof Error?a.message:String(a)}).`),d.info("First: npx onlymcp login"),process.exitCode=1;return}if(s>0&&!e.yes&&!e.dryRun){if(!process.stdin.isTTY){d.error("No terminal for the prompt. Run --dry-run first, then --yes."),process.exitCode=1;return}let a=await ut({message:`Upload ${s} entries?`,initialValue:!1});if(me(a)||!a){dt("Cancelled. Nothing uploaded.");return}if(o.flagged.length>0){let l=await Qn({message:"Send the held-back files anyway?",options:o.flagged.map(c=>({value:c.relative,label:c.relative})),required:!1,initialValues:[]});if(me(l)){dt("Cancelled. Nothing uploaded.");return}if(l.length>0){let c=new Set(l),g=m=>m.map(b=>c.has(b.relative)?{...b,hits:[]}:b),[u,f,y]=await Promise.all([i.skills&&k(i.skills)?O(i.skills):Promise.resolve([]),i.agents&&k(i.agents)?O(i.agents):Promise.resolve([]),i.memory&&k(i.memory)?O(i.memory):Promise.resolve([])]);o=de({skills:g(u),agents:g(f),memory:g(y)},{skillsRoot:i.skills})}}}if(s>0&&!e.dryRun){let a=Z();a.start("Uploading");let l=await Qe(p,o,(c,g,u)=>{a.message(`${c}/${g}  ${u}`)});a.stop("Done"),d.success(`${l.skills} skills, ${l.skillFiles} skill files, ${l.agents} agents, ${l.memory} memory files`),l.failures.length>0?(d.error([`${l.failures.length} failed`,...l.failures.map(c=>`  ${c.what}   ${c.code}`)].join(`
+`)),process.exitCode=1):await fe(p,"import",l.skills+l.skillFiles+l.agents+l.memory)}if(e.prune){let a={skills:!!(i.skills&&k(i.skills)),agents:!!(i.agents&&k(i.agents)),memory:!!(i.memory&&k(i.memory))},l=await nt(p,o,a);if(et(l))d.info("Nothing to delete: the account holds nothing the source does not know.");else if(d.warn(["Would delete (only your own, nothing from a team, nothing archived)",...l.skills.map(c=>`  Skill    ${c}`),...l.agents.map(c=>`  Agent    ${c}`),...l.memory.map(c=>`  Memory   ${c}`)].join(`
+`)),e.dryRun)d.info("Nothing deleted (--dry-run).");else if(!process.stdin.isTTY)d.error("No terminal for the prompt. Nothing deleted."),process.exitCode=1;else{let c=await ut({message:`Delete ${tt(l)} entries in the account?`,initialValue:!1});if(me(c)||!c)d.info("Nothing deleted.");else{let g=await it(p,l);d.success(`${g.deleted} deleted`),g.failures.length>0&&(d.error([`${g.failures.length} failed`,...g.failures.map(u=>`  ${u.what}   ${u.code}`)].join(`
+`)),process.exitCode=1)}}}I(e.dryRun?"Nothing changed (--dry-run).":"Then: npx onlymcp sync on every device.")});E.command("export").description("Get everything out of the account: memory, skills, agents, connections").option("--out <dir>","Unpack the archive into this folder").option("--zip <file>","Keep the archive as a file").option("--scope <scope>","personal, all or team:<id>","all").option("--types <list>","memory,skills,agents,connections").action(async e=>{if((e.out?1:0)+(e.zip?1:0)!=1){d.error("Either --out <folder> or --zip <file>, not both and not neither."),process.exitCode=1;return}he("OnlyMCP Export");let t=new x(C,()=>S.read()),n=Z();n.start("Fetching the archive");let i;try{i=await t.exportArchive({scope:e.scope,types:e.types?.split(",").map(s=>s.trim()).filter(s=>s!=="")})}catch(s){n.stop("Aborted"),d.error(s instanceof Error?s.message:String(s)),d.info("Not logged in? First: npx onlymcp login"),process.exitCode=1;return}if(e.zip){ri(ai(e.zip),{recursive:!0}),await oi(si.fromWeb(i.body),ii(e.zip)),n.stop("Done"),I(`Archive: ${e.zip}`);return}let r=new Uint8Array(await i.arrayBuffer()),o=await ct(r,e.out);n.stop("Done"),d.success(`${o.written} files in ${e.out}`),o.refused.length>0&&d.warn(["Not written, path in the archive is not allowed",...o.refused.map(s=>`  ${s}`)].join(`
+`)),o.failed.length>0&&(d.warn(["Not written, the filename doesn't work on this system",...o.failed.map(s=>`  ${s.path}   ${s.reason}`),"With --zip <file> the archive stays unchanged."].join(`
+`)),process.exitCode=1),I(`Restore: npx onlymcp import --skills ${e.out}/skills --agents ${e.out}/agents --memory ${e.out}/memory`)});await E.parseAsync();