Toolport

Security and reliability release.

The headline is a scope fix. A client scoped to a profile that has since been deleted or
renamed used to fall back to your active profile and quietly expose that set of servers.
It now fails closed to an empty set instead. Clients that aren't scoped still follow the
active profile, unchanged.

Alongside that, a batch of reliability and quality-of-life work.

Per-server working directory. Pin a stdio server (filesystem or grep tools) to a
project directory instead of inheriting Toolport's. Paths support ~ and ${VAR}.

Live profile scoping. Re-scope a client from the app and it applies on the next
reload, with no client restart. The app also flags a server that's connected but exposing
zero tools, the usual sign it still needs to authenticate.

Incremental server grid. One cold npx or uvx install no longer freezes the whole
grid on "checking". Each row resolves as its own check finishes.

Readable error rows. A failed server leads with a one-line summary instead of a stack
trace and a giant login URL, with a Copy button for the full output.

Registry hardening. A rolling journal of recent backups so recovery isn't stuck on one
stale file, plus unknown per-server fields that survive a re-save by an older build.

Cleaner import naming. A pasted npx or uvx package-runner server is named after its
package (like automem) instead of npx, so runner servers stop colliding on one id.

Upgrade

In the app, click the version in the sidebar footer, which shows an update button when a
release is available. Or grab an installer from
Releases.

Full changelog:
1.7.0.