feat: implement v2 3-tier architecture (mcpctl → mcplocal → mcpd)

- Rename local-proxy to mcplocal with HTTP server, LLM pipeline, mcpd discovery
- Add LLM pre-processing: token estimation, filter cache, metrics, Gemini CLI + DeepSeek providers
- Add mcpd auth (login/logout) and MCP proxy endpoints
- Update CLI: dual URLs (mcplocalUrl/mcpdUrl), auth commands, --direct flag
- Add tiered health monitoring, shell completions, e2e integration tests
- 57 test files, 597 tests passing

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/cli/src/index.ts

@@ -11,8 +11,10 @@ import { createSetupCommand } from './commands/setup.js';
 import { createClaudeCommand } from './commands/claude.js';
 import { createProjectCommand } from './commands/project.js';
 import { createBackupCommand, createRestoreCommand } from './commands/backup.js';
+import { createLoginCommand, createLogoutCommand } from './commands/auth.js';
 import { ApiClient } from './api-client.js';
 import { loadConfig } from './config/index.js';
+import { loadCredentials } from './auth/index.js';
 
 export function createProgram(): Command {
   const program = new Command()
@@ -20,15 +22,28 @@ export function createProgram(): Command {
     .description('Manage MCP servers like kubectl manages containers')
     .version(APP_VERSION, '-v, --version')
     .option('-o, --output <format>', 'output format (table, json, yaml)', 'table')
-    .option('--daemon-url <url>', 'mcpd daemon URL');
+    .option('--daemon-url <url>', 'mcplocal daemon URL')
+    .option('--direct', 'bypass mcplocal and connect directly to mcpd');
 
   program.addCommand(createConfigCommand());
   program.addCommand(createStatusCommand());
+  program.addCommand(createLoginCommand());
+  program.addCommand(createLogoutCommand());
 
-  // Create API-backed commands
+  // Resolve target URL: --direct goes to mcpd, default goes to mcplocal
   const config = loadConfig();
-  const daemonUrl = program.opts().daemonUrl ?? config.daemonUrl;
-  const client = new ApiClient({ baseUrl: daemonUrl });
+  const creds = loadCredentials();
+  const opts = program.opts();
+  let baseUrl: string;
+  if (opts.daemonUrl) {
+    baseUrl = opts.daemonUrl as string;
+  } else if (opts.direct) {
+    baseUrl = config.mcpdUrl;
+  } else {
+    baseUrl = config.mcplocalUrl;
+  }
+
+  const client = new ApiClient({ baseUrl, token: creds?.token ?? undefined });
 
   const fetchResource = async (resource: string, id?: string): Promise<unknown[]> => {
     if (id) {