toolstile 0.1.2 → 0.2.0

package/dist/state.d.ts

@@ -0,0 +1,48 @@
+import type { ClientId } from "./types.js";
+export declare const DEFAULT_SERVER = "https://toolstile.com";
+export interface AgentLink {
+    /** The agent's authorization ID in Toolstile, valid in one workspace. */
+    id: string;
+    workspaceId: string;
+    /** The Toolstile origin that issued the token; the proxy sends it nowhere else. */
+    server: string;
+    label: string;
+    /** The agent's own gateway token; only `toolstile mcp proxy` reads it. */
+    token: string;
+}
+/** Everything `auth` and `mcp` keep on this machine, in one owner-only file. */
+export interface State {
+    /** The origin `auth login` last signed in to. */
+    server: string;
+    session?: {
+        token: string;
+        email: string;
+        expiresAt: string;
+        server: string;
+    };
+    workspace?: {
+        id: string;
+        slug: string;
+        name: string;
+    };
+    device?: {
+        id: string;
+        label: string;
+    };
+    agents: Partial<Record<ClientId, AgentLink>>;
+}
+export interface StateEnv {
+    home?: string;
+    env?: Record<string, string | undefined>;
+    platform?: NodeJS.Platform;
+}
+/** `TOOLSTILE_CONFIG_DIR`, else the platform's per-user config folder. */
+export declare function stateDir({ home, env, platform }?: StateEnv): string;
+export declare const statePath: (opts?: StateEnv) => string;
+/**
+ * The saved server always wins over `TOOLSTILE_URL`, which only picks the server for a new
+ * `auth login`: an environment variable set by a project must not redirect saved tokens.
+ */
+export declare function loadState(opts?: StateEnv): State;
+/** Written to a temporary file and renamed, so a crash never leaves half a file. */
+export declare function saveState(state: State, opts?: StateEnv): void;

package/dist/state.js

@@ -0,0 +1,51 @@
+import { chmodSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+export const DEFAULT_SERVER = "https://toolstile.com";
+/** `TOOLSTILE_CONFIG_DIR`, else the platform's per-user config folder. */
+export function stateDir({ home = homedir(), env = process.env, platform = process.platform } = {}) {
+    if (env.TOOLSTILE_CONFIG_DIR)
+        return env.TOOLSTILE_CONFIG_DIR;
+    if (platform === "win32")
+        return join(env.APPDATA ?? join(home, "AppData", "Roaming"), "toolstile");
+    return join(env.XDG_CONFIG_HOME ?? join(home, ".config"), "toolstile");
+}
+export const statePath = (opts) => join(stateDir(opts), "credentials.json");
+/**
+ * The saved server always wins over `TOOLSTILE_URL`, which only picks the server for a new
+ * `auth login`: an environment variable set by a project must not redirect saved tokens.
+ */
+export function loadState(opts) {
+    const fallback = { server: DEFAULT_SERVER, agents: {} };
+    let text;
+    try {
+        text = readFileSync(statePath(opts), "utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return fallback;
+        throw error;
+    }
+    try {
+        const data = JSON.parse(text);
+        return { ...fallback, ...data, agents: data.agents ?? {} };
+    }
+    catch {
+        throw new Error(`${statePath(opts)} is not valid JSON. Delete it and run toolstile auth login again.`);
+    }
+}
+/** Written to a temporary file and renamed, so a crash never leaves half a file. */
+export function saveState(state, opts) {
+    const dir = stateDir(opts);
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const path = statePath(opts);
+    const temp = `${path}.${process.pid}.tmp`;
+    try {
+        writeFileSync(temp, `${JSON.stringify(state, null, 2)}\n`, { mode: 0o600 });
+        chmodSync(temp, 0o600);
+        renameSync(temp, path);
+    }
+    finally {
+        rmSync(temp, { force: true });
+    }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "toolstile",
-  "version": "0.1.2",
-  "description": "Audit the MCP server configs your AI agents use for plaintext secrets, unpinned packages, auto-approved tools and duplicated setups. Local and read-only.",
+  "version": "0.2.0",
+  "description": "Audit the MCP server configs your AI agents use for plaintext secrets, unpinned packages, auto-approved tools and duplicated setups, and connect those agents to Toolstile without putting tokens in their configs.",
   "keywords": [
     "mcp",
     "model-context-protocol",
@@ -10,7 +10,9 @@
     "claude",
     "cursor",
     "codex",
-    "secrets"
+    "secrets",
+    "mcp-proxy",
+    "device-login"
   ],
   "homepage": "https://github.com/toolstile/cli#readme",
   "repository": {