proofscan 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,295 @@
+# proofscan
+
+MCP Server scanner - eliminate black boxes by capturing JSON-RPC from connection to tools/list.
+
+## Overview
+
+proofscan provides visibility into MCP (Model Context Protocol) server communication. It:
+
+- Connects to MCP servers via stdio transport
+- Captures all JSON-RPC messages (requests, responses, notifications)
+- Stores events in JSONL format for later analysis
+- Supports importing server configurations from mcp.so / Claude Desktop format
+
+## Installation
+
+```bash
+npm install
+npm run build
+npm link  # Makes 'proofscan' available globally
+```
+
+Or run directly:
+
+```bash
+node dist/cli.js --help
+```
+
+## Quickstart
+
+### 1. Initialize Configuration
+
+```bash
+# Create config in OS-standard location
+proofscan config init
+
+# Check where config is stored
+proofscan config path
+```
+
+### 2. Import MCP Server from mcp.so / Claude Desktop
+
+Copy the `mcpServers` JSON from mcp.so or Claude Desktop settings and import via stdin:
+
+```bash
+# Full mcpServers format
+echo '{ "mcpServers": { "time": { "command": "uvx", "args": ["mcp-server-time"] } } }' | proofscan connectors import --from mcpServers --stdin
+
+# Or just the server definition (requires --name)
+echo '{ "command": "uvx", "args": ["mcp-server-time"] }' | proofscan connectors import --from mcpServers --stdin --name time
+
+# Import from file
+proofscan connectors import --from mcpServers --file ./servers.json
+```
+
+### 3. List Connectors
+
+```bash
+proofscan connectors list
+```
+
+### 4. Scan a Connector
+
+```bash
+proofscan scan start --id time
+```
+
+### 5. View Events
+
+```bash
+proofscan monitor tail --id time --last 20
+```
+
+## Commands
+
+### Global Options
+
+```
+-c, --config <path>  Path to config file
+--json               Output in JSON format
+-v, --verbose        Verbose output
+```
+
+### Config
+
+```bash
+proofscan config path                    # Show config file path
+proofscan config init [--force]          # Initialize config
+proofscan config show                    # Show config (secrets masked)
+proofscan config validate                # Validate config
+```
+
+### Connectors
+
+```bash
+proofscan connectors list                        # List all connectors
+proofscan connectors show --id <id>              # Show connector details
+proofscan connectors add --id <id> --stdio "cmd" # Add stdio connector
+proofscan connectors enable --id <id>            # Enable connector
+proofscan connectors disable --id <id>           # Disable connector
+proofscan connectors remove --id <id>            # Remove connector
+
+# Import from mcpServers format
+proofscan connectors import --from mcpServers --stdin
+proofscan connectors import --from mcpServers --file <path> [--name <id>]
+```
+
+### Scan
+
+```bash
+proofscan scan start --id <id> [--timeout <sec>]
+```
+
+### Monitor
+
+```bash
+proofscan monitor tail --id <id> [--last <N>]
+```
+
+## Config File Format
+
+Config is stored in the OS-standard location:
+
+- **Windows**: `%APPDATA%\proofscan\config.json`
+- **macOS**: `~/Library/Application Support/proofscan/config.json`
+- **Linux**: `~/.config/proofscan/config.json`
+
+```json
+{
+  "version": 1,
+  "connectors": [
+    {
+      "id": "time",
+      "enabled": true,
+      "transport": {
+        "type": "stdio",
+        "command": "uvx",
+        "args": ["mcp-server-time", "--local-timezone=America/New_York"]
+      }
+    }
+  ]
+}
+```
+
+## Event Storage
+
+Events are stored in JSONL format:
+
+```
+~/.config/proofscan/events/<connector_id>/<YYYYMMDD>.jsonl
+```
+
+Each event contains:
+
+```json
+{
+  "event_id": "uuid",
+  "ts": "2024-01-15T10:30:00.000Z",
+  "connector_id": "time",
+  "direction": "client_to_server",
+  "kind": "request",
+  "method": "tools/list",
+  "rpc_id": 1,
+  "ok": true,
+  "raw": "{...}"
+}
+```
+
+## Example Session
+
+```bash
+# Initialize
+$ proofscan config init
+✓ Config created at: /home/user/.config/proofscan/config.json
+
+# Import a server
+$ echo '{"mcpServers":{"time":{"command":"uvx","args":["mcp-server-time"]}}}' \
+  | proofscan connectors import --from mcpServers --stdin
+✓ Imported 1 connector(s): time
+
+# List connectors
+$ proofscan connectors list
+ID    Enabled  Type   Command/URL
+-----------------------------------
+time  yes      stdio  uvx mcp-server-time
+
+# Scan the server
+$ proofscan scan start --id time
+Scanning connector: time...
+✓ Scan successful!
+  Connector: time
+  Tools found: 1
+  Tool names: get_current_time
+  Events recorded: 8
+
+# View events
+$ proofscan monitor tail --id time --last 5
+Recent events for 'time' (last 5):
+
+Time     Dir Status Kind         Summary
+----------------------------------------------------------------------
+10:30:01 → ✓ request      initialize
+10:30:01 ←   response
+10:30:01 →   notification  notifications/initialized
+10:30:01 → ✓ request      tools/list
+10:30:01 ←   response
+```
+
+## JSON Output
+
+Add `--json` for machine-readable output:
+
+```bash
+$ proofscan connectors list --json
+[
+  {
+    "ID": "time",
+    "Enabled": "yes",
+    "Type": "stdio",
+    "Command/URL": "uvx mcp-server-time"
+  }
+]
+
+$ proofscan scan start --id time --json
+{
+  "success": true,
+  "connector_id": "time",
+  "tools_count": 1,
+  "tools": ["get_current_time"],
+  "event_count": 8
+}
+```
+
+## Supported mcpServers Input Formats
+
+proofscan accepts several JSON formats for import:
+
+### A) Full wrapper
+
+```json
+{
+  "mcpServers": {
+    "time": { "command": "uvx", "args": ["mcp-server-time"] }
+  }
+}
+```
+
+### B) Direct mcpServers object
+
+```json
+{
+  "time": { "command": "uvx", "args": ["mcp-server-time"] }
+}
+```
+
+### C) Single server definition (requires `--name`)
+
+```json
+{
+  "command": "uvx",
+  "args": ["mcp-server-time"]
+}
+```
+
+## Failure Handling
+
+Failures are always recorded as events. Even if a scan fails, you can inspect what happened:
+
+```bash
+$ proofscan scan start --id broken-server
+Scanning connector: broken-server...
+✗ Scan failed!
+  Connector: broken-server
+  Error: Initialize failed: Request timeout for method: initialize
+  Events recorded: 3
+
+$ proofscan monitor tail --id broken-server --last 5
+Time     Dir Status Kind         Summary
+----------------------------------------------------------------------
+10:35:01 →   transport    [connect_attempt]
+10:35:01 ←   transport    [connected]
+10:35:31 →   transport    [initialize_failed] Initialize failed: Request timeout...
+```
+
+## Development
+
+```bash
+npm install         # Install dependencies
+npm run build       # Build TypeScript
+npm run dev         # Watch mode
+npm test            # Run tests
+```
+
+## License
+
+MIT

package/dist/cli.d.ts

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+/**
+ * proofscan CLI
+ * MCP Server scanner - eliminate black boxes
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;GAGG"}

package/dist/cli.js

@@ -0,0 +1,38 @@
+#!/usr/bin/env node
+/**
+ * proofscan CLI
+ * MCP Server scanner - eliminate black boxes
+ */
+import { Command } from 'commander';
+import { resolveConfigPath } from './utils/config-path.js';
+import { setOutputOptions } from './utils/output.js';
+import { createConfigCommand, createConnectorsCommand, createScanCommand, createMonitorCommand, } from './commands/index.js';
+const program = new Command();
+// Global state for config path
+let globalConfigPath;
+function getConfigPath() {
+    return resolveConfigPath({ configPath: globalConfigPath });
+}
+program
+    .name('proofscan')
+    .description('MCP Server scanner - eliminate black boxes by capturing JSON-RPC from connection to tools/list')
+    .version('0.1.0')
+    .option('-c, --config <path>', 'Path to config file')
+    .option('--json', 'Output in JSON format')
+    .option('-v, --verbose', 'Verbose output')
+    .hook('preAction', (thisCommand) => {
+    const opts = thisCommand.opts();
+    globalConfigPath = opts.config;
+    setOutputOptions({
+        json: opts.json,
+        verbose: opts.verbose,
+    });
+});
+// Add subcommands
+program.addCommand(createConfigCommand(getConfigPath));
+program.addCommand(createConnectorsCommand(getConfigPath));
+program.addCommand(createScanCommand(getConfigPath));
+program.addCommand(createMonitorCommand(getConfigPath));
+// Parse and run
+program.parse();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,+BAA+B;AAC/B,IAAI,gBAAoC,CAAC;AAEzC,SAAS,aAAa;IACpB,OAAO,iBAAiB,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,OAAO;KACJ,IAAI,CAAC,WAAW,CAAC;KACjB,WAAW,CAAC,gGAAgG,CAAC;KAC7G,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;KACpD,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;KACzC,MAAM,CAAC,eAAe,EAAE,gBAAgB,CAAC;KACzC,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE;IACjC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IAChC,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC;IAC/B,gBAAgB,CAAC;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,kBAAkB;AAClB,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC;AACvD,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC,CAAC;AAC3D,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;AACrD,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC,CAAC;AAExD,gBAAgB;AAChB,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/commands/config.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Config commands
+ */
+import { Command } from 'commander';
+export declare function createConfigCommand(getConfigPath: () => string): Command;
+//# sourceMappingURL=config.d.ts.map

package/dist/commands/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,MAAM,MAAM,GAAG,OAAO,CAiFxE"}

package/dist/commands/config.js

@@ -0,0 +1,81 @@
+/**
+ * Config commands
+ */
+import { Command } from 'commander';
+import { ConfigManager } from '../config/index.js';
+import { output, outputSuccess, outputError, maskSecretsInObject, getOutputOptions } from '../utils/output.js';
+export function createConfigCommand(getConfigPath) {
+    const cmd = new Command('config')
+        .description('Manage proofscan configuration');
+    cmd
+        .command('path')
+        .description('Show the config file path')
+        .action(() => {
+        const configPath = getConfigPath();
+        output({ path: configPath }, configPath);
+    });
+    cmd
+        .command('init')
+        .description('Initialize a new config file')
+        .option('-f, --force', 'Overwrite existing config')
+        .option('-p, --path <path>', 'Custom config path')
+        .action(async (options) => {
+        try {
+            const configPath = options.path || getConfigPath();
+            const manager = new ConfigManager(configPath);
+            const result = await manager.init(options.force);
+            if (result.created) {
+                outputSuccess(`Config created at: ${result.path}`);
+            }
+            else {
+                output({ exists: true, path: result.path }, `Config already exists at: ${result.path}\nUse --force to overwrite.`);
+            }
+        }
+        catch (error) {
+            outputError('Failed to initialize config', error instanceof Error ? error : undefined);
+            process.exit(1);
+        }
+    });
+    cmd
+        .command('show')
+        .description('Show current config (secrets masked)')
+        .action(async () => {
+        try {
+            const manager = new ConfigManager(getConfigPath());
+            const config = await manager.load();
+            const masked = maskSecretsInObject(config);
+            if (getOutputOptions().json) {
+                output(masked);
+            }
+            else {
+                console.log(JSON.stringify(masked, null, 2));
+            }
+        }
+        catch (error) {
+            outputError('Failed to load config', error instanceof Error ? error : undefined);
+            process.exit(1);
+        }
+    });
+    cmd
+        .command('validate')
+        .description('Validate the config file')
+        .action(async () => {
+        try {
+            const manager = new ConfigManager(getConfigPath());
+            const result = await manager.validate();
+            if (result.valid) {
+                outputSuccess('Config is valid');
+            }
+            else {
+                output({ valid: false, errors: result.errors }, `Config validation failed:\n${result.errors.map(e => `  - ${e.path}: ${e.message}`).join('\n')}`);
+                process.exit(1);
+            }
+        }
+        catch (error) {
+            outputError('Failed to validate config', error instanceof Error ? error : undefined);
+            process.exit(1);
+        }
+    });
+    return cmd;
+}
+//# sourceMappingURL=config.js.map

package/dist/commands/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE/G,MAAM,UAAU,mBAAmB,CAAC,aAA2B;IAC7D,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC;SAC9B,WAAW,CAAC,gCAAgC,CAAC,CAAC;IAEjD,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,2BAA2B,CAAC;SACxC,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,8BAA8B,CAAC;SAC3C,MAAM,CAAC,aAAa,EAAE,2BAA2B,CAAC;SAClD,MAAM,CAAC,mBAAmB,EAAE,oBAAoB,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAEjD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,aAAa,CAAC,sBAAsB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,MAAM,CACJ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EACnC,6BAA6B,MAAM,CAAC,IAAI,6BAA6B,CACtE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,6BAA6B,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACvF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,sCAAsC,CAAC;SACnD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,aAAa,EAAE,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAE3C,IAAI,gBAAgB,EAAE,CAAC,IAAI,EAAE,CAAC;gBAC5B,MAAM,CAAC,MAAM,CAAC,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,uBAAuB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,0BAA0B,CAAC;SACvC,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,aAAa,EAAE,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YAExC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,aAAa,CAAC,iBAAiB,CAAC,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,MAAM,CACJ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EACvC,8BAA8B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjG,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,2BAA2B,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/commands/connectors.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Connectors commands
+ */
+import { Command } from 'commander';
+export declare function createConnectorsCommand(getConfigPath: () => string): Command;
+//# sourceMappingURL=connectors.d.ts.map

package/dist/commands/connectors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectors.d.ts","sourceRoot":"","sources":["../../src/commands/connectors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,MAAM,MAAM,GAAG,OAAO,CAoN5E"}

package/dist/commands/connectors.js

@@ -0,0 +1,205 @@
+/**
+ * Connectors commands
+ */
+import { Command } from 'commander';
+import { promises as fs } from 'fs';
+import { ConfigManager, parseMcpServers, readStdin } from '../config/index.js';
+import { output, outputSuccess, outputError, outputTable, maskSecretsInObject } from '../utils/output.js';
+export function createConnectorsCommand(getConfigPath) {
+    const cmd = new Command('connectors')
+        .description('Manage MCP server connectors');
+    cmd
+        .command('list')
+        .description('List all connectors')
+        .action(async () => {
+        try {
+            const manager = new ConfigManager(getConfigPath());
+            const connectors = await manager.getConnectors();
+            if (connectors.length === 0) {
+                output({ connectors: [] }, 'No connectors configured.');
+                return;
+            }
+            const headers = ['ID', 'Enabled', 'Type', 'Command/URL'];
+            const rows = connectors.map(c => {
+                let target = '';
+                if (c.transport.type === 'stdio') {
+                    const t = c.transport;
+                    target = t.command + (t.args?.length ? ` ${t.args.join(' ')}` : '');
+                    if (target.length > 50)
+                        target = target.slice(0, 47) + '...';
+                }
+                else if ('url' in c.transport) {
+                    target = c.transport.url;
+                }
+                return [c.id, c.enabled ? 'yes' : 'no', c.transport.type, target];
+            });
+            outputTable(headers, rows);
+        }
+        catch (error) {
+            outputError('Failed to list connectors', error instanceof Error ? error : undefined);
+            process.exit(1);
+        }
+    });
+    cmd
+        .command('show')
+        .description('Show connector details')
+        .requiredOption('--id <id>', 'Connector ID')
+        .action(async (options) => {
+        try {
+            const manager = new ConfigManager(getConfigPath());
+            const connector = await manager.getConnector(options.id);
+            if (!connector) {
+                outputError(`Connector not found: ${options.id}`);
+                process.exit(1);
+            }
+            const masked = maskSecretsInObject(connector);
+            output(masked, JSON.stringify(masked, null, 2));
+        }
+        catch (error) {
+            outputError('Failed to show connector', error instanceof Error ? error : undefined);
+            process.exit(1);
+        }
+    });
+    cmd
+        .command('add')
+        .description('Add a new stdio connector')
+        .requiredOption('--id <id>', 'Connector ID')
+        .requiredOption('--stdio <cmdline>', 'Command line (command and args as single string)')
+        .action(async (options) => {
+        try {
+            const manager = new ConfigManager(getConfigPath());
+            // Parse command line
+            const parts = options.stdio.trim().split(/\s+/);
+            const command = parts[0];
+            const args = parts.slice(1);
+            const connector = {
+                id: options.id,
+                enabled: true,
+                transport: {
+                    type: 'stdio',
+                    command,
+                    ...(args.length > 0 && { args }),
+                },
+            };
+            await manager.addConnector(connector);
+            outputSuccess(`Connector '${options.id}' added`);
+        }
+        catch (error) {
+            outputError('Failed to add connector', error instanceof Error ? error : undefined);
+            process.exit(1);
+        }
+    });
+    cmd
+        .command('enable')
+        .description('Enable a connector')
+        .requiredOption('--id <id>', 'Connector ID')
+        .action(async (options) => {
+        try {
+            const manager = new ConfigManager(getConfigPath());
+            await manager.enableConnector(options.id);
+            outputSuccess(`Connector '${options.id}' enabled`);
+        }
+        catch (error) {
+            outputError('Failed to enable connector', error instanceof Error ? error : undefined);
+            process.exit(1);
+        }
+    });
+    cmd
+        .command('disable')
+        .description('Disable a connector')
+        .requiredOption('--id <id>', 'Connector ID')
+        .action(async (options) => {
+        try {
+            const manager = new ConfigManager(getConfigPath());
+            await manager.disableConnector(options.id);
+            outputSuccess(`Connector '${options.id}' disabled`);
+        }
+        catch (error) {
+            outputError('Failed to disable connector', error instanceof Error ? error : undefined);
+            process.exit(1);
+        }
+    });
+    cmd
+        .command('remove')
+        .description('Remove a connector')
+        .requiredOption('--id <id>', 'Connector ID')
+        .action(async (options) => {
+        try {
+            const manager = new ConfigManager(getConfigPath());
+            await manager.removeConnector(options.id);
+            outputSuccess(`Connector '${options.id}' removed`);
+        }
+        catch (error) {
+            outputError('Failed to remove connector', error instanceof Error ? error : undefined);
+            process.exit(1);
+        }
+    });
+    cmd
+        .command('import')
+        .description('Import connectors from mcpServers format')
+        .requiredOption('--from <format>', 'Import format (mcpServers)')
+        .option('--file <path>', 'Read from file')
+        .option('--stdin', 'Read from stdin')
+        .option('--name <id>', 'Connector ID (required for single server definition)')
+        .action(async (options) => {
+        try {
+            if (options.from !== 'mcpServers') {
+                outputError(`Unsupported format: ${options.from}. Only 'mcpServers' is supported.`);
+                process.exit(1);
+            }
+            if (!options.file && !options.stdin) {
+                outputError('Either --file or --stdin is required');
+                process.exit(1);
+            }
+            let jsonContent;
+            if (options.stdin) {
+                jsonContent = await readStdin();
+            }
+            else {
+                jsonContent = await fs.readFile(options.file, 'utf-8');
+            }
+            const result = parseMcpServers(jsonContent, options.name);
+            if (result.errors.length > 0) {
+                outputError(`Import errors:\n${result.errors.map(e => `  - ${e}`).join('\n')}`);
+                process.exit(1);
+            }
+            if (result.connectors.length === 0) {
+                output({ imported: 0 }, 'No connectors found in input.');
+                return;
+            }
+            const manager = new ConfigManager(getConfigPath());
+            // Ensure config exists
+            await manager.init(false);
+            // Add each connector
+            const added = [];
+            const errors = [];
+            for (const connector of result.connectors) {
+                try {
+                    await manager.addConnector(connector);
+                    added.push(connector.id);
+                }
+                catch (error) {
+                    errors.push(`${connector.id}: ${error instanceof Error ? error.message : String(error)}`);
+                }
+            }
+            if (added.length > 0) {
+                outputSuccess(`Imported ${added.length} connector(s): ${added.join(', ')}`);
+            }
+            if (errors.length > 0) {
+                console.error(`Errors:\n${errors.map(e => `  - ${e}`).join('\n')}`);
+            }
+            // Validate after import
+            const validation = await manager.validate();
+            if (!validation.valid) {
+                console.error('Warning: Config validation failed after import');
+                process.exit(1);
+            }
+        }
+        catch (error) {
+            outputError('Failed to import connectors', error instanceof Error ? error : undefined);
+            process.exit(1);
+        }
+    });
+    return cmd;
+}
+//# sourceMappingURL=connectors.js.map