toolstile 0.3.0 → 0.4.0

package/README.md

@@ -165,7 +165,7 @@ values) and prints a ready-to-post link. To post the text report instead, add
 
 ## Connect your agents to Toolstile
 
-If you use [Toolstile](https://toolstile.com), the CLI can also sign in and set
+If you use [Toolstile](https://www.toolstile.com), the CLI can also sign in and set
 up the agents on a machine for you:
 
 ```sh
@@ -211,7 +211,7 @@ dashboard.
 
 | Option | Command | Meaning |
 | --- | --- | --- |
-| `--server <url>` | `auth login` | Toolstile address (default `https://toolstile.com`, or `TOOLSTILE_URL`) |
+| `--server <url>` | `auth login` | Toolstile address (default `https://app.toolstile.com`, or `TOOLSTILE_URL`) |
 | `--no-browser` | `auth login` | Do not try to open a browser on this machine |
 | `--enable <agents>` | `mcp setup` | Turn these on without prompting (comma-separated) |
 | `--disable <agents>` | `mcp setup` | Turn these off without prompting |
@@ -229,7 +229,7 @@ const { grade, findings } = audit();
 ## About
 
 Built by [Akshit Kr Nagpal](https://akshit.io) as part of
-[Toolstile](https://toolstile.com), an MCP gateway that keeps upstream
+[Toolstile](https://www.toolstile.com), an MCP gateway that keeps upstream
 credentials off your machines and lets you choose which tools each agent can use.
 The audit works on its own and does not require a Toolstile account.
 

package/dist/api.d.ts

@@ -20,6 +20,8 @@ export interface Account {
         id: string;
         label: string;
     } | null;
+    /** The gateway URL agents use; it can be on another host than this API. */
+    mcpUrl?: string;
 }
 export interface DeviceCode {
     device_code: string;

package/dist/cli.js

@@ -68,7 +68,7 @@ login prints a link and a code. Open the link on any device with a browser
 reach this machine, so it works over SSH and on servers without a browser.
 
 Options
-  --server <url>      Toolstile address (default https://toolstile.com, or TOOLSTILE_URL)
+  --server <url>      Toolstile address (default https://app.toolstile.com, or TOOLSTILE_URL)
   --no-browser        Do not try to open a browser on this machine
 `;
 const MCP_HELP = `toolstile mcp: connect the agents on this machine to Toolstile

package/dist/commands.d.ts

@@ -23,6 +23,8 @@ export declare class UserError extends Error {
 }
 /** HTTPS, except a loopback server for local development. */
 export declare function normalizeServer(value: string): string;
+/** A gateway URL the server reported: HTTPS (or loopback HTTP) with no credentials, else undefined. */
+export declare function gatewayUrl(value: unknown): string | undefined;
 export declare function login(ctx: Context, options: {
     server?: string;
     browser: boolean;

package/dist/commands.js

@@ -20,13 +20,31 @@ export function normalizeServer(value) {
         url = new URL(value);
     }
     catch {
-        throw new UserError(`--server must be a URL, for example https://toolstile.com`);
+        throw new UserError(`--server must be a URL, for example https://app.toolstile.com`);
     }
     const loopback = /^(localhost|127\.\d+\.\d+\.\d+|\[::1\])$/.test(url.hostname);
     if (url.protocol !== "https:" && !(loopback && url.protocol === "http:"))
         throw new UserError("--server must use https://");
     return url.origin;
 }
+/** A gateway URL the server reported: HTTPS (or loopback HTTP) with no credentials, else undefined. */
+export function gatewayUrl(value) {
+    if (typeof value !== "string")
+        return undefined;
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return undefined;
+    }
+    const loopback = /^(localhost|127\.\d+\.\d+\.\d+|\[::1\])$/.test(url.hostname);
+    if (url.username || url.password || url.search || url.hash)
+        return undefined;
+    if (url.protocol !== "https:" && !(loopback && url.protocol === "http:"))
+        return undefined;
+    return url.href;
+}
 function defaultOpenBrowser(ctx) {
     return (url) => {
         // Over SSH or without a display the URL and code are enough; nothing to open.
@@ -180,6 +198,8 @@ export async function setup(ctx, options) {
     const both = enable.find((c) => disable.includes(c));
     if (both)
         throw new UserError(`${CLIENT_NAMES[both]} is in both --enable and --disable.`);
+    // The gateway can be on another host; only an HTTPS URL from this server is used.
+    const endpoint = gatewayUrl(account.mcpUrl) ?? `${state.server}/mcp`;
     const workspace = await chooseWorkspace(ctx, state, account.workspaces, options.workspace);
     state.workspace = { id: workspace.id, slug: workspace.slug, name: workspace.name };
     saveState(state, stateEnv(ctx));
@@ -254,6 +274,10 @@ export async function setup(ctx, options) {
         const want = wanted.has(target.client);
         const link = state.agents[target.client];
         if (want) {
+            if (live(target.client) && link && link.endpoint !== endpoint) {
+                link.endpoint = endpoint;
+                saveState(state, stateEnv(ctx));
+            }
             if (!live(target.client)) {
                 if (link)
                     await removeRemote(link).catch(() => undefined);
@@ -263,6 +287,7 @@ export async function setup(ctx, options) {
                     id: created.id,
                     workspaceId: workspace.id,
                     server: state.server,
+                    endpoint,
                     label: created.label,
                     token: created.token,
                 };
@@ -324,7 +349,7 @@ export async function setup(ctx, options) {
     }
     if ([...wanted].length) {
         print(ctx);
-        print(ctx, `Choose which MCP servers they can use: ${state.server}/app/${workspace.slug}/access`);
+        print(ctx, `Choose which MCP servers they can use: ${state.server}/${workspace.slug}/access`);
     }
     return manual.length ? 1 : 0;
 }
@@ -338,7 +363,7 @@ export async function proxy(ctx, agent) {
         throw new UserError(`${CLIENT_NAMES[client]} is not enabled on this machine. Run toolstile mcp setup.`);
     await runProxy({
         // The token goes only to the server that issued it, whatever the environment says.
-        endpoint: `${link.server}/mcp`,
+        endpoint: link.endpoint ?? `${link.server}/mcp`,
         token: link.token,
         input: ctx.stdin,
         output: ctx.stdout,

package/dist/report.js

@@ -179,7 +179,7 @@ export function renderReport(r, home, s, redacted = false, columns = 80) {
         lines.push(s.dim(wrap("Posting this? Run with --redact to hide your paths, or --card for an image with only the grade.", width)));
     else
         lines.push(s.dim("Share an image with only the grade: npx toolstile audit --card"));
-    lines.push(s.dim(wrap("Keep credentials off your machines and control each agent's tools: https://toolstile.com/?ref=cli", width)), "");
+    lines.push(s.dim(wrap("Keep credentials off your machines and control each agent's tools: https://www.toolstile.com/?ref=cli", width)), "");
     return lines.join("\n");
 }
 /** JSON output for scripts. Paths are included unless redacted; secret values never are. */

package/dist/state.d.ts

@@ -1,11 +1,15 @@
 import type { ClientId } from "./types.js";
-export declare const DEFAULT_SERVER = "https://toolstile.com";
+export declare const DEFAULT_SERVER = "https://app.toolstile.com";
+/** Toolstile's gateway, on its own host since the app moved off the bare domain. */
+export declare const DEFAULT_MCP_URL = "https://mcp.toolstile.com/mcp";
 export interface AgentLink {
     /** The agent's authorization ID in Toolstile, valid in one workspace. */
     id: string;
     workspaceId: string;
     /** The Toolstile origin that issued the token; the proxy sends it nowhere else. */
     server: string;
+    /** That server's gateway URL, as it reported it; `${server}/mcp` when absent. */
+    endpoint?: string;
     label: string;
     /** The agent's own gateway token; only `toolstile mcp proxy` reads it. */
     token: string;

package/dist/state.js

@@ -1,7 +1,11 @@
 import { chmodSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
-export const DEFAULT_SERVER = "https://toolstile.com";
+export const DEFAULT_SERVER = "https://app.toolstile.com";
+/** Toolstile's gateway, on its own host since the app moved off the bare domain. */
+export const DEFAULT_MCP_URL = "https://mcp.toolstile.com/mcp";
+/** Where Toolstile served the app and gateway before; it now only redirects. */
+const LEGACY_SERVER = "https://toolstile.com";
 /** `TOOLSTILE_CONFIG_DIR`, else the platform's per-user config folder. */
 export function stateDir({ home = homedir(), env = process.env, platform = process.platform } = {}) {
     if (env.TOOLSTILE_CONFIG_DIR)
@@ -28,7 +32,7 @@ export function loadState(opts) {
     }
     try {
         const data = JSON.parse(text);
-        return { ...fallback, ...data, agents: data.agents ?? {} };
+        return moveLegacyServer({ ...fallback, ...data, agents: data.agents ?? {} });
     }
     catch {
         throw new Error(`${statePath(opts)} is not valid JSON. Delete it and run toolstile auth login again.`);
@@ -49,3 +53,16 @@ export function saveState(state, opts) {
         rmSync(temp, { force: true });
     }
 }
+/** Sign-ins and agents saved for the old bare-domain address keep working on the new hosts. */
+function moveLegacyServer(state) {
+    if (state.server === LEGACY_SERVER)
+        state.server = DEFAULT_SERVER;
+    if (state.session?.server === LEGACY_SERVER)
+        state.session.server = DEFAULT_SERVER;
+    for (const link of Object.values(state.agents))
+        if (link?.server === LEGACY_SERVER) {
+            link.server = DEFAULT_SERVER;
+            link.endpoint ??= DEFAULT_MCP_URL;
+        }
+    return state;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolstile",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Audit the MCP server configs your AI agents use for plaintext secrets, unpinned packages, auto-approved tools and duplicated setups, and connect those agents to Toolstile without putting tokens in their configs.",
   "keywords": [
     "mcp",