@agent-native/skills 0.2.309 → 0.2.311

package/dist/built-in-apps.js

@@ -29,7 +29,7 @@ export const BUILT_IN_APP_MCP = [
         serverName: "plan",
         aliases: ["agent-native-plans"],
         // core skills.ts:1828 (hosted.mcpUrl)
-        mcpUrl: "https://plan.agent-native.com/_agent-native/mcp",
+        mcpUrl: "https://plan.agent-native.com/mcp",
         // core skills.ts:1827 (hosted.url)
         hostedUrl: "https://plan.agent-native.com",
         // core skills.ts:1832 (auth.mode)
@@ -46,7 +46,7 @@ export const BUILT_IN_APP_MCP = [
         // core skills.ts:1724 (mcp.serverName)
         serverName: "agent-native-assets",
         // core skills.ts:1722 (hosted.mcpUrl)
-        mcpUrl: "https://assets.agent-native.com/_agent-native/mcp",
+        mcpUrl: "https://assets.agent-native.com/mcp",
         // core skills.ts:1721 (hosted.url)
         hostedUrl: "https://assets.agent-native.com",
         // core skills.ts:1726 (auth.mode)
@@ -57,7 +57,7 @@ export const BUILT_IN_APP_MCP = [
         displayName: "Content",
         skillNames: ["content"],
         serverName: "agent-native-content",
-        mcpUrl: "https://content.agent-native.com/_agent-native/mcp",
+        mcpUrl: "https://content.agent-native.com/mcp",
         hostedUrl: "https://content.agent-native.com",
         authMode: "oauth",
     },
@@ -70,7 +70,7 @@ export const BUILT_IN_APP_MCP = [
         // core skills.ts:1770 (mcp.serverName)
         serverName: "agent-native-design",
         // core skills.ts:1768 (hosted.mcpUrl)
-        mcpUrl: "https://design.agent-native.com/_agent-native/mcp",
+        mcpUrl: "https://design.agent-native.com/mcp",
         // core skills.ts:1767 (hosted.url)
         hostedUrl: "https://design.agent-native.com",
         // core skills.ts:1772 (auth.mode)
@@ -85,7 +85,7 @@ export const BUILT_IN_APP_MCP = [
         // core skills.ts:1889 (mcp.serverName)
         serverName: "agent-native-context-xray",
         // core skills.ts:1887 (hosted.mcpUrl)
-        mcpUrl: "https://context-xray.agent-native.com/_agent-native/mcp",
+        mcpUrl: "https://context-xray.agent-native.com/mcp",
         // core skills.ts:1886 (hosted.url)
         hostedUrl: "https://context-xray.agent-native.com",
         // core skills.ts:1890 (auth.mode)

package/dist/built-in-apps.js.map

@@ -1 +1 @@
-{"version":3,"file":"built-in-apps.js","sourceRoot":"","sources":["../src/built-in-apps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAgCH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C;QACE,gDAAgD;QAChD,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,mBAAmB;QAChC,8DAA8D;QAC9D,UAAU,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC;QAC7D,qDAAqD;QACrD,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,CAAC,oBAAoB,CAAC;QAC/B,sCAAsC;QACtC,MAAM,EAAE,iDAAiD;QACzD,mCAAmC;QACnC,SAAS,EAAE,+BAA+B;QAC1C,kCAAkC;QAClC,QAAQ,EAAE,OAAO;QACjB,sFAAsF;QACtF,eAAe,EAAE,IAAI;KACtB;IACD;QACE,gDAAgD;QAChD,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,QAAQ;QACrB,kCAAkC;QAClC,UAAU,EAAE,CAAC,QAAQ,CAAC;QACtB,uCAAuC;QACvC,UAAU,EAAE,qBAAqB;QACjC,sCAAsC;QACtC,MAAM,EAAE,mDAAmD;QAC3D,mCAAmC;QACnC,SAAS,EAAE,iCAAiC;QAC5C,kCAAkC;QAClC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,SAAS;QACtB,UAAU,EAAE,CAAC,SAAS,CAAC;QACvB,UAAU,EAAE,sBAAsB;QAClC,MAAM,EAAE,oDAAoD;QAC5D,SAAS,EAAE,kCAAkC;QAC7C,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,gDAAgD;QAChD,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,QAAQ;QACrB,uDAAuD;QACvD,UAAU,EAAE,CAAC,oBAAoB,EAAE,aAAa,CAAC;QACjD,uCAAuC;QACvC,UAAU,EAAE,qBAAqB;QACjC,sCAAsC;QACtC,MAAM,EAAE,mDAAmD;QAC3D,mCAAmC;QACnC,SAAS,EAAE,iCAAiC;QAC5C,kCAAkC;QAClC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,gDAAgD;QAChD,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,eAAe;QAC5B,kCAAkC;QAClC,UAAU,EAAE,CAAC,cAAc,CAAC;QAC5B,uCAAuC;QACvC,UAAU,EAAE,2BAA2B;QACvC,sCAAsC;QACtC,MAAM,EAAE,yDAAyD;QACjE,mCAAmC;QACnC,SAAS,EAAE,uCAAuC;QAClD,kCAAkC;QAClC,QAAQ,EAAE,MAAM;QAChB,wCAAwC;QACxC,SAAS,EAAE,IAAI;KAChB;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB;IAEjB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACnC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,SAAiB;IACzC,OAAO,kBAAkB,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC;AACrD,CAAC","sourcesContent":["/**\n * Canonical \"built-in agent-native app -> MCP server\" descriptor registry.\n *\n * This is a dependency-free mirror of the manifest data encoded in\n * `@agent-native/core`'s `BUILT_IN_APP_SKILLS` object\n * (`packages/core/src/cli/skills.ts`, around line 1711+). The standalone\n * `@agent-native/skills` installer uses this to know which skill name maps to\n * which hosted MCP server without importing the (much heavier) core CLI module.\n *\n * IMPORTANT: every URL / serverName / alias / authMode below MUST stay byte-for-byte\n * identical to core's `BUILT_IN_APP_SKILLS`. The provenance of each value is noted\n * inline as `packages/core/src/cli/skills.ts:<line>`. If core changes, update here too\n * (a future sync guard test should compare the two).\n */\n\n/** Auth modes mirrored from core's `auth.mode` on each app-skill manifest. */\nexport type BuiltInAppAuthMode = \"oauth\" | \"device\" | \"none\";\n\n/**\n * Descriptor for a single built-in agent-native app and the hosted MCP server\n * its skills connect to.\n */\nexport interface BuiltInAppMcp {\n  /** Stable app id (matches the manifest `id` in core). */\n  appId: string;\n  /** Human-facing display name. */\n  displayName: string;\n  /** Skill names this app exports (a skill name resolves back to this app). */\n  skillNames: string[];\n  /** MCP server name used when registering the connector. */\n  serverName: string;\n  /** Hosted MCP endpoint URL (`hosted.mcpUrl`). */\n  mcpUrl: string;\n  /** Hosted app base URL (`hosted.url`). */\n  hostedUrl: string;\n  /** Alternate server names accepted for this app (`mcp.aliases`). */\n  aliases?: string[];\n  /** Auth mode for connecting the MCP server (`auth.mode`). */\n  authMode: BuiltInAppAuthMode;\n  /** True when the app ships only as a local command (no remote refresh). */\n  localOnly?: boolean;\n  /** True when the app provides a PR Visual Recap GitHub Action workflow. */\n  hasGithubAction?: boolean;\n}\n\n/**\n * The built-in app -> MCP registry.\n *\n * Each entry's values are copied verbatim from core. Provenance per field is\n * cited inline using the `packages/core/src/cli/skills.ts` line numbers.\n */\nexport const BUILT_IN_APP_MCP: BuiltInAppMcp[] = [\n  {\n    // core skills.ts:1822 (id), :1823 (displayName)\n    appId: \"visual-plans\",\n    displayName: \"Agent-Native Plan\",\n    // core skills.ts:2867 (skillName \"visual-plan\") + extraSkills\n    skillNames: [\"visual-plan\", \"visual-recap\", \"visualize-repo\"],\n    // core skills.ts:1830 (mcp.serverName + mcp.aliases)\n    serverName: \"plan\",\n    aliases: [\"agent-native-plans\"],\n    // core skills.ts:1828 (hosted.mcpUrl)\n    mcpUrl: \"https://plan.agent-native.com/_agent-native/mcp\",\n    // core skills.ts:1827 (hosted.url)\n    hostedUrl: \"https://plan.agent-native.com\",\n    // core skills.ts:1832 (auth.mode)\n    authMode: \"oauth\",\n    // core skills.ts:3321-3322 (githubActionPath gated on knownTarget === \"visual-plans\")\n    hasGithubAction: true,\n  },\n  {\n    // core skills.ts:1716 (id), :1717 (displayName)\n    appId: \"assets\",\n    displayName: \"Assets\",\n    // core skills.ts:1713 (skillName)\n    skillNames: [\"assets\"],\n    // core skills.ts:1724 (mcp.serverName)\n    serverName: \"agent-native-assets\",\n    // core skills.ts:1722 (hosted.mcpUrl)\n    mcpUrl: \"https://assets.agent-native.com/_agent-native/mcp\",\n    // core skills.ts:1721 (hosted.url)\n    hostedUrl: \"https://assets.agent-native.com\",\n    // core skills.ts:1726 (auth.mode)\n    authMode: \"oauth\",\n  },\n  {\n    appId: \"content\",\n    displayName: \"Content\",\n    skillNames: [\"content\"],\n    serverName: \"agent-native-content\",\n    mcpUrl: \"https://content.agent-native.com/_agent-native/mcp\",\n    hostedUrl: \"https://content.agent-native.com\",\n    authMode: \"oauth\",\n  },\n  {\n    // core skills.ts:1762 (id), :1763 (displayName)\n    appId: \"design\",\n    displayName: \"Design\",\n    // core skills.ts:1759 (skillName) + Design extraSkills\n    skillNames: [\"design-exploration\", \"visual-edit\"],\n    // core skills.ts:1770 (mcp.serverName)\n    serverName: \"agent-native-design\",\n    // core skills.ts:1768 (hosted.mcpUrl)\n    mcpUrl: \"https://design.agent-native.com/_agent-native/mcp\",\n    // core skills.ts:1767 (hosted.url)\n    hostedUrl: \"https://design.agent-native.com\",\n    // core skills.ts:1772 (auth.mode)\n    authMode: \"oauth\",\n  },\n  {\n    // core skills.ts:1881 (id), :1882 (displayName)\n    appId: \"context-xray\",\n    displayName: \"Context X-Ray\",\n    // core skills.ts:1877 (skillName)\n    skillNames: [\"context-xray\"],\n    // core skills.ts:1889 (mcp.serverName)\n    serverName: \"agent-native-context-xray\",\n    // core skills.ts:1887 (hosted.mcpUrl)\n    mcpUrl: \"https://context-xray.agent-native.com/_agent-native/mcp\",\n    // core skills.ts:1886 (hosted.url)\n    hostedUrl: \"https://context-xray.agent-native.com\",\n    // core skills.ts:1890 (auth.mode)\n    authMode: \"none\",\n    // core skills.ts:1878 (localOnly: true)\n    localOnly: true,\n  },\n];\n\n/**\n * Resolve the built-in app whose `skillNames` contains `skillName`\n * (case-insensitive). Returns `undefined` when no built-in app exports it.\n */\nexport function resolveAppForSkill(\n  skillName: string,\n): BuiltInAppMcp | undefined {\n  const needle = skillName.trim().toLowerCase();\n  if (!needle) return undefined;\n  return BUILT_IN_APP_MCP.find((app) =>\n    app.skillNames.some((name) => name.toLowerCase() === needle),\n  );\n}\n\n/**\n * True when the given skill name maps to a built-in app with a hosted MCP\n * server.\n */\nexport function appHasMcp(skillName: string): boolean {\n  return resolveAppForSkill(skillName) !== undefined;\n}\n"]}
+{"version":3,"file":"built-in-apps.js","sourceRoot":"","sources":["../src/built-in-apps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAgCH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C;QACE,gDAAgD;QAChD,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,mBAAmB;QAChC,8DAA8D;QAC9D,UAAU,EAAE,CAAC,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC;QAC7D,qDAAqD;QACrD,UAAU,EAAE,MAAM;QAClB,OAAO,EAAE,CAAC,oBAAoB,CAAC;QAC/B,sCAAsC;QACtC,MAAM,EAAE,mCAAmC;QAC3C,mCAAmC;QACnC,SAAS,EAAE,+BAA+B;QAC1C,kCAAkC;QAClC,QAAQ,EAAE,OAAO;QACjB,sFAAsF;QACtF,eAAe,EAAE,IAAI;KACtB;IACD;QACE,gDAAgD;QAChD,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,QAAQ;QACrB,kCAAkC;QAClC,UAAU,EAAE,CAAC,QAAQ,CAAC;QACtB,uCAAuC;QACvC,UAAU,EAAE,qBAAqB;QACjC,sCAAsC;QACtC,MAAM,EAAE,qCAAqC;QAC7C,mCAAmC;QACnC,SAAS,EAAE,iCAAiC;QAC5C,kCAAkC;QAClC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,SAAS;QACtB,UAAU,EAAE,CAAC,SAAS,CAAC;QACvB,UAAU,EAAE,sBAAsB;QAClC,MAAM,EAAE,sCAAsC;QAC9C,SAAS,EAAE,kCAAkC;QAC7C,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,gDAAgD;QAChD,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,QAAQ;QACrB,uDAAuD;QACvD,UAAU,EAAE,CAAC,oBAAoB,EAAE,aAAa,CAAC;QACjD,uCAAuC;QACvC,UAAU,EAAE,qBAAqB;QACjC,sCAAsC;QACtC,MAAM,EAAE,qCAAqC;QAC7C,mCAAmC;QACnC,SAAS,EAAE,iCAAiC;QAC5C,kCAAkC;QAClC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,gDAAgD;QAChD,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,eAAe;QAC5B,kCAAkC;QAClC,UAAU,EAAE,CAAC,cAAc,CAAC;QAC5B,uCAAuC;QACvC,UAAU,EAAE,2BAA2B;QACvC,sCAAsC;QACtC,MAAM,EAAE,2CAA2C;QACnD,mCAAmC;QACnC,SAAS,EAAE,uCAAuC;QAClD,kCAAkC;QAClC,QAAQ,EAAE,MAAM;QAChB,wCAAwC;QACxC,SAAS,EAAE,IAAI;KAChB;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB;IAEjB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACnC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,SAAiB;IACzC,OAAO,kBAAkB,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC;AACrD,CAAC","sourcesContent":["/**\n * Canonical \"built-in agent-native app -> MCP server\" descriptor registry.\n *\n * This is a dependency-free mirror of the manifest data encoded in\n * `@agent-native/core`'s `BUILT_IN_APP_SKILLS` object\n * (`packages/core/src/cli/skills.ts`, around line 1711+). The standalone\n * `@agent-native/skills` installer uses this to know which skill name maps to\n * which hosted MCP server without importing the (much heavier) core CLI module.\n *\n * IMPORTANT: every URL / serverName / alias / authMode below MUST stay byte-for-byte\n * identical to core's `BUILT_IN_APP_SKILLS`. The provenance of each value is noted\n * inline as `packages/core/src/cli/skills.ts:<line>`. If core changes, update here too\n * (a future sync guard test should compare the two).\n */\n\n/** Auth modes mirrored from core's `auth.mode` on each app-skill manifest. */\nexport type BuiltInAppAuthMode = \"oauth\" | \"device\" | \"none\";\n\n/**\n * Descriptor for a single built-in agent-native app and the hosted MCP server\n * its skills connect to.\n */\nexport interface BuiltInAppMcp {\n  /** Stable app id (matches the manifest `id` in core). */\n  appId: string;\n  /** Human-facing display name. */\n  displayName: string;\n  /** Skill names this app exports (a skill name resolves back to this app). */\n  skillNames: string[];\n  /** MCP server name used when registering the connector. */\n  serverName: string;\n  /** Hosted MCP endpoint URL (`hosted.mcpUrl`). */\n  mcpUrl: string;\n  /** Hosted app base URL (`hosted.url`). */\n  hostedUrl: string;\n  /** Alternate server names accepted for this app (`mcp.aliases`). */\n  aliases?: string[];\n  /** Auth mode for connecting the MCP server (`auth.mode`). */\n  authMode: BuiltInAppAuthMode;\n  /** True when the app ships only as a local command (no remote refresh). */\n  localOnly?: boolean;\n  /** True when the app provides a PR Visual Recap GitHub Action workflow. */\n  hasGithubAction?: boolean;\n}\n\n/**\n * The built-in app -> MCP registry.\n *\n * Each entry's values are copied verbatim from core. Provenance per field is\n * cited inline using the `packages/core/src/cli/skills.ts` line numbers.\n */\nexport const BUILT_IN_APP_MCP: BuiltInAppMcp[] = [\n  {\n    // core skills.ts:1822 (id), :1823 (displayName)\n    appId: \"visual-plans\",\n    displayName: \"Agent-Native Plan\",\n    // core skills.ts:2867 (skillName \"visual-plan\") + extraSkills\n    skillNames: [\"visual-plan\", \"visual-recap\", \"visualize-repo\"],\n    // core skills.ts:1830 (mcp.serverName + mcp.aliases)\n    serverName: \"plan\",\n    aliases: [\"agent-native-plans\"],\n    // core skills.ts:1828 (hosted.mcpUrl)\n    mcpUrl: \"https://plan.agent-native.com/mcp\",\n    // core skills.ts:1827 (hosted.url)\n    hostedUrl: \"https://plan.agent-native.com\",\n    // core skills.ts:1832 (auth.mode)\n    authMode: \"oauth\",\n    // core skills.ts:3321-3322 (githubActionPath gated on knownTarget === \"visual-plans\")\n    hasGithubAction: true,\n  },\n  {\n    // core skills.ts:1716 (id), :1717 (displayName)\n    appId: \"assets\",\n    displayName: \"Assets\",\n    // core skills.ts:1713 (skillName)\n    skillNames: [\"assets\"],\n    // core skills.ts:1724 (mcp.serverName)\n    serverName: \"agent-native-assets\",\n    // core skills.ts:1722 (hosted.mcpUrl)\n    mcpUrl: \"https://assets.agent-native.com/mcp\",\n    // core skills.ts:1721 (hosted.url)\n    hostedUrl: \"https://assets.agent-native.com\",\n    // core skills.ts:1726 (auth.mode)\n    authMode: \"oauth\",\n  },\n  {\n    appId: \"content\",\n    displayName: \"Content\",\n    skillNames: [\"content\"],\n    serverName: \"agent-native-content\",\n    mcpUrl: \"https://content.agent-native.com/mcp\",\n    hostedUrl: \"https://content.agent-native.com\",\n    authMode: \"oauth\",\n  },\n  {\n    // core skills.ts:1762 (id), :1763 (displayName)\n    appId: \"design\",\n    displayName: \"Design\",\n    // core skills.ts:1759 (skillName) + Design extraSkills\n    skillNames: [\"design-exploration\", \"visual-edit\"],\n    // core skills.ts:1770 (mcp.serverName)\n    serverName: \"agent-native-design\",\n    // core skills.ts:1768 (hosted.mcpUrl)\n    mcpUrl: \"https://design.agent-native.com/mcp\",\n    // core skills.ts:1767 (hosted.url)\n    hostedUrl: \"https://design.agent-native.com\",\n    // core skills.ts:1772 (auth.mode)\n    authMode: \"oauth\",\n  },\n  {\n    // core skills.ts:1881 (id), :1882 (displayName)\n    appId: \"context-xray\",\n    displayName: \"Context X-Ray\",\n    // core skills.ts:1877 (skillName)\n    skillNames: [\"context-xray\"],\n    // core skills.ts:1889 (mcp.serverName)\n    serverName: \"agent-native-context-xray\",\n    // core skills.ts:1887 (hosted.mcpUrl)\n    mcpUrl: \"https://context-xray.agent-native.com/mcp\",\n    // core skills.ts:1886 (hosted.url)\n    hostedUrl: \"https://context-xray.agent-native.com\",\n    // core skills.ts:1890 (auth.mode)\n    authMode: \"none\",\n    // core skills.ts:1878 (localOnly: true)\n    localOnly: true,\n  },\n];\n\n/**\n * Resolve the built-in app whose `skillNames` contains `skillName`\n * (case-insensitive). Returns `undefined` when no built-in app exports it.\n */\nexport function resolveAppForSkill(\n  skillName: string,\n): BuiltInAppMcp | undefined {\n  const needle = skillName.trim().toLowerCase();\n  if (!needle) return undefined;\n  return BUILT_IN_APP_MCP.find((app) =>\n    app.skillNames.some((name) => name.toLowerCase() === needle),\n  );\n}\n\n/**\n * True when the given skill name maps to a built-in app with a hosted MCP\n * server.\n */\nexport function appHasMcp(skillName: string): boolean {\n  return resolveAppForSkill(skillName) !== undefined;\n}\n"]}

package/dist/connect.d.ts

@@ -18,11 +18,11 @@
  *     surfacing the exact `agent-native connect <url>` fallback command.
  *
  * Server contract (identical paths + JSON field names to core):
- *   POST <hostedUrl>/_agent-native/mcp/connect/device/start  (no auth)
+ *   POST <hostedUrl>/mcp/connect/device/start  (no auth)
  *     body { client?, app? }
  *     → { device_code, user_code, verification_uri,
  *         verification_uri_complete, interval, expires_in }
- *   POST <hostedUrl>/_agent-native/mcp/connect/device/poll   (no auth)
+ *   POST <hostedUrl>/mcp/connect/device/poll   (no auth)
  *     body { device_code }
  *     → { status: "pending" }
  *     | { status: "approved", token, mcpUrl, serverName, mcpServerEntry }
@@ -37,7 +37,7 @@ import { ClientId } from "./mcp-config-writers.js";
  * key; `aliases` are additional config keys that point at the same MCP URL
  * (e.g. `plan` + `agent-native-plans`). `hostedUrl` is the deployed app origin
  * the device-code flow authenticates against; `mcpUrl` is the resolved MCP
- * endpoint written into the config (defaults to `<hostedUrl>/_agent-native/mcp`
+ * endpoint written into the config (defaults to `<hostedUrl>/mcp`
  * when only `hostedUrl` is supplied).
  */
 export interface McpDescriptor {

package/dist/connect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../src/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,QAAQ,EAA2B,MAAM,yBAAyB,CAAC;AA6B5E;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,aAAa,CAAC;IAC1B,OAAO,EAAE,QAAQ,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;QACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KACvC,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE;QAAE,MAAM,EAAE,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC9C,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AA0CD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAEhE;AAiXD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,iBAAiB,CAAC,CAyH5B"}
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../src/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,QAAQ,EAA2B,MAAM,yBAAyB,CAAC;AA8B5E;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,aAAa,CAAC;IAC1B,OAAO,EAAE,QAAQ,EAAE,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;QACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KACvC,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE;QAAE,MAAM,EAAE,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC9C,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AA0CD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAEhE;AA8XD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,iBAAiB,CAAC,CAyH5B"}

package/dist/connect.js

@@ -18,11 +18,11 @@
  *     surfacing the exact `agent-native connect <url>` fallback command.
  *
  * Server contract (identical paths + JSON field names to core):
- *   POST <hostedUrl>/_agent-native/mcp/connect/device/start  (no auth)
+ *   POST <hostedUrl>/mcp/connect/device/start  (no auth)
  *     body { client?, app? }
  *     → { device_code, user_code, verification_uri,
  *         verification_uri_complete, interval, expires_in }
- *   POST <hostedUrl>/_agent-native/mcp/connect/device/poll   (no auth)
+ *   POST <hostedUrl>/mcp/connect/device/poll   (no auth)
  *     body { device_code }
  *     → { status: "pending" }
  *     | { status: "approved", token, mcpUrl, serverName, mcpServerEntry }
@@ -32,9 +32,10 @@
  * Node-only. Node built-ins + global fetch only; no npm deps.
  */
 import { writeHttpEntryForClient } from "./mcp-config-writers.js";
-const DEVICE_START_PATH = "/_agent-native/mcp/connect/device/start";
-const DEVICE_POLL_PATH = "/_agent-native/mcp/connect/device/poll";
-const MCP_PATH = "/_agent-native/mcp";
+const DEVICE_START_PATH = "/mcp/connect/device/start";
+const DEVICE_POLL_PATH = "/mcp/connect/device/poll";
+const MCP_PATH = "/mcp";
+const LEGACY_MCP_PATH = "/_agent-native/mcp";
 /** OAuth-capable clients (in-host remote MCP OAuth, never a local bearer). */
 const REMOTE_MCP_OAUTH_CLIENTS = new Set([
     "claude-code",
@@ -66,14 +67,21 @@ function realSleep(ms) {
 function stripTrailingSlash(url) {
     return url.replace(/\/+$/, "");
 }
+function canonicalAgentNativeMcpUrl(url) {
+    const trimmed = stripTrailingSlash(url);
+    if (trimmed.endsWith(LEGACY_MCP_PATH)) {
+        return `${trimmed.slice(0, -LEGACY_MCP_PATH.length)}${MCP_PATH}`;
+    }
+    return trimmed;
+}
 /**
  * Resolve the MCP endpoint URL for a descriptor. Prefers an explicit `mcpUrl`,
- * otherwise derives `<hostedUrl>/_agent-native/mcp` (mirrors core's
+ * otherwise derives `<hostedUrl>/mcp` (mirrors core's
  * `mcpUrlForBaseUrl`). Returns `undefined` when neither is usable.
  */
 function resolveMcpUrl(descriptor) {
     if (descriptor.mcpUrl && descriptor.mcpUrl.trim()) {
-        return descriptor.mcpUrl.trim();
+        return canonicalAgentNativeMcpUrl(descriptor.mcpUrl.trim());
     }
     if (descriptor.hostedUrl && descriptor.hostedUrl.trim()) {
         const base = stripTrailingSlash(descriptor.hostedUrl.trim());
@@ -89,6 +97,9 @@ function resolveBaseUrl(descriptor) {
     // Fall back to stripping the MCP path off an explicit mcpUrl.
     if (descriptor.mcpUrl && descriptor.mcpUrl.trim()) {
         const trimmed = stripTrailingSlash(descriptor.mcpUrl.trim());
+        if (trimmed.endsWith(LEGACY_MCP_PATH)) {
+            return trimmed.slice(0, -LEGACY_MCP_PATH.length);
+        }
         if (trimmed.endsWith(MCP_PATH)) {
             return trimmed.slice(0, -MCP_PATH.length);
         }
@@ -261,7 +272,7 @@ async function runDeviceFlow(baseUrl, appSlug, clientArg, log, timeoutMs, deps =
         }
         if (poll.status === "approved") {
             const token = poll.token ?? "";
-            const mcpUrl = poll.mcpUrl ?? `${baseUrl}${MCP_PATH}`;
+            const mcpUrl = canonicalAgentNativeMcpUrl(poll.mcpUrl ?? `${baseUrl}${MCP_PATH}`);
             const serverName = poll.serverName ?? appSlug;
             const headers = poll.mcpServerEntry &&
                 typeof poll.mcpServerEntry === "object" &&

package/dist/connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"connect.js","sourceRoot":"","sources":["../src/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAY,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAE5E,MAAM,iBAAiB,GAAG,yCAAyC,CAAC;AACpE,MAAM,gBAAgB,GAAG,wCAAwC,CAAC;AAClE,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AAEtC,8EAA8E;AAC9E,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAW;IACjD,aAAa;IACb,iBAAiB;IACjB,QAAQ;IACR,UAAU;IACV,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,aAAa,GAA6B;IAC9C,aAAa,EAAE,aAAa;IAC5B,iBAAiB,EAAE,iBAAiB;IACpC,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,gBAAgB,EAAE,0BAA0B;CAC7C,CAAC;AA+EF,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,UAAU,sBAAsB,CAAC,MAAgB;IACrD,OAAO,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAE9C,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,gEAAgE;AAChE,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,UAAyB;IAC9C,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,OAAO,GAAG,IAAI,GAAG,QAAQ,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0EAA0E;AAC1E,SAAS,cAAc,CAAC,UAAyB;IAC/C,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,OAAO,kBAAkB,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,8DAA8D;IAC9D,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kFAAkF;AAClF,SAAS,UAAU,CAAC,UAAyB;IAC3C,MAAM,IAAI,GAAa,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,KAAK,IAAI,KAAK,KAAK,UAAU,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,IAAS,EAAE,QAAgB;IAClD,MAAM,OAAO,GACX,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ;QAC/B,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;YAC/B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,EAAE,CAAC;IACX,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,SAAuB,EACvB,GAAW,EACX,IAAa;IAEb,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;YAChC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,IAAI,GAAQ,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,OAAmB;IAC9C,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAe,EACf,OAAmB,EACnB,KAAa;IAEb,OAAO,yCAAyC,OAAO,aAAa,mBAAmB,CACrF,OAAO,CACR,YAAY,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,iFAAiF;AACjF,SAAS,mBAAmB,CAC1B,OAAmB,EACnB,IAAc,EACd,MAAc,EACd,KAAa,EACb,OAAe,EACf,OAA6C,EAC7C,MAAgB;IAEhB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,uBAAuB,CAClC,MAAM,EACN,GAAG,EACH,MAAM,EACN,SAAS,EACT,OAAO,EACP,KAAK,EACL,SAAS,CACV,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CACT,mBAAmB,GAAG,QAAQ,MAAM,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAC/D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAe,EACf,OAAmB,EACnB,KAAa;IAEb,OAAO,CACL,mBAAmB,eAAe,CAAC,OAAO,CAAC,SAAS;QACpD,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAChD,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,OAAmB,EACnB,UAAmB;IAEnB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC3E,KAAK,CAAC,IAAI,CACR,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CACR,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CACR,mCAAmC,UAAU,IAAI,eAAe,gCAAgC,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CACR,sHAAsH,CACvH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0EAA0E;AAC1E,SAAS,kBAAkB,CACzB,OAAmB,EACnB,IAAc,EACd,MAAc,EACd,KAAyB,EACzB,OAA2C,EAC3C,KAAa,EACb,OAAe,EACf,OAA6C,EAC7C,MAAgB;IAEhB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,uBAAuB,CAClC,MAAM,EACN,GAAG,EACH,MAAM,EACN,KAAK,EACL,OAAO,EACP,KAAK,EACL,OAAO,CACR,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CACT,mBAAmB,GAAG,QAAQ,MAAM,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAC/D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAClE,8EAA8E;AAE9E;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAC1B,OAAe,EACf,OAAe,EACf,SAAiB,EACjB,GAAwB,EACxB,SAA6B,EAC7B,IAAI,GAA+B,EAAE;IAErC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAE3C,IAAI,KAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CACrC,SAAS,EACT,GAAG,OAAO,GAAG,iBAAiB,EAAE,EAChC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,CACpC,CAAC;QACF,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;YACxD,GAAG,CACD,yCAAyC,OAAO,UAAU,MAAM,KAAK;gBACnE,mEAAmE;gBACnE,mBAAmB,CACtB,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,GAAG,IAA2B,CAAC;IACtC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,GAAG,CACD,qBAAqB,OAAO,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,KAAK;YACvD,iCAAiC,CACpC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,SAAS,GAAG,IAAI,CAAC;IAC1C,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAClC,CAAC,EACD,SAAS,IAAI,8BAA8B,CAC5C,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,MAAM,GAAG,gBAAgB,CAAC;IAChD,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC;IAEhC,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,iBAAiB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACxC,GAAG,CAAC,iBAAiB,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC;IACxD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAE3C,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QACxB,IAAI,IAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CACrC,SAAS,EACT,GAAG,OAAO,GAAG,gBAAgB,EAAE,EAC/B,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CACnC,CAAC;YACF,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,IAAI,GAAG,IAA0B,CAAC;gBACpC,CAAC;qBAAM,CAAC;oBACN,GAAG,CACD,kCAAkC,MAAM,KAAK;wBAC3C,eAAe,CAAC,IAAI,EAAE,2BAA2B,CAAC,CACrD,CAAC;oBACF,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAuB,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;YAC7D,IAAI,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,OAAO,GAAG,QAAQ,EAAE,CAAC;YACtD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC;YAC9C,MAAM,OAAO,GACX,IAAI,CAAC,cAAc;gBACnB,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;gBACvC,IAAI,CAAC,cAAc,CAAC,OAAO;gBAC3B,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,KAAK,QAAQ;gBAC7C,CAAC,CAAE,IAAI,CAAC,cAAc,CAAC,OAAkC;gBACzD,CAAC,CAAC,SAAS,CAAC;YAChB,GAAG,CAAC,aAAa,CAAC,CAAC;YACnB,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACpE,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,CAAC,uDAAuD,CAAC,CAAC;YAC7D,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,GAAG,CAAC,8DAA8D,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3D,GAAG,CACD,6BAA6B,eAAe,CAC1C,IAAI,EACJ,IAAI,CAAC,MAAM,KAAK,WAAW;gBACzB,CAAC,CAAC,4BAA4B;gBAC9B,CAAC,CAAC,2BAA2B,CAChC,EAAE,CACJ,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,GAAG,GAAG,EAAE,CAAC;QACrC,IAAI,WAAW,IAAI,CAAC;YAAE,MAAM;QAC5B,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,GAAG,CACD,2BAA2B,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,+BAA+B,CACpF,CAAC;QACF,GAAG,CAAC,sDAAsD,CAAC,CAAC;IAC9D,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,mEAAmE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAS;IACnC,OAAO,CACL,IAAI,EAAE,MAAM,KAAK,WAAW;QAC5B,IAAI,EAAE,MAAM,KAAK,OAAO;QACxB,IAAI,EAAE,MAAM,KAAK,SAAS;QAC1B,IAAI,EAAE,MAAM,KAAK,UAAU,CAC5B,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAwB;IAExB,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAE7B,MAAM,OAAO,GAAyC,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,OAAO;YACP,aAAa;YACb,QAAQ,EAAE;gBACR,oBAAoB,UAAU,CAAC,UAAU,qCAAqC;aAC/E;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAEjD,0EAA0E;IAC1E,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,mBAAmB,CACjB,IAAI,CAAC,OAAO,EACZ,IAAI,EACJ,MAAM,EACN,KAAK,EACL,OAAO,EACP,OAAO,EACP,MAAM,CACP,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;IACxE,CAAC;IAED,uEAAuE;IACvE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7E,8EAA8E;IAC9E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,mBAAmB,CACjB,YAAY,EACZ,IAAI,EACJ,MAAM,EACN,KAAK,EACL,OAAO,EACP,OAAO,EACP,MAAM,CACP,CAAC;QACF,QAAQ,CAAC,IAAI,CACX,GAAG,eAAe,CAAC,YAAY,CAAC,kDAAkD,EAClF,GAAG,wBAAwB,CAAC,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC,CACjE,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAE3C,6EAA6E;QAC7E,2EAA2E;QAC3E,uEAAuE;QACvE,4EAA4E;QAC5E,4EAA4E;QAC5E,sEAAsE;QACtE,MAAM,UAAU,GAAG,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC;QAE5C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,OAAO,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,CACX,GAAG,eAAe,CAAC,aAAa,CAAC,gEAAgE,EACjG,qBAAqB,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,CACrD,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CACX,GAAG,eAAe,CAAC,aAAa,CAAC,8EAA8E,CAChH,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,EAAE,OAAQ,CAAC,CAAC;YACjD,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACxE,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,OAAQ,EACR,OAAO,EACP,SAAS,EACT,GAAG,EACH,IAAI,CAAC,mBAAmB,EACxB,IAAI,CACL,CAAC;YAEF,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBACzB,wEAAwE;gBACxE,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC;gBAC3C,kBAAkB,CAChB,aAAa,EACb,IAAI,EACJ,WAAW,EACX,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,EACb,KAAK,EACL,OAAO,EACP,OAAO,EACP,MAAM,CACP,CAAC;gBACF,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,wEAAwE;gBACxE,uEAAuE;gBACvE,QAAQ,CAAC,IAAI,CACX,GAAG,eAAe,CAAC,aAAa,CAAC,4EAA4E,EAC7G,qBAAqB,CAAC,OAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,CACtD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,eAAe,CAAC,OAAmB;IAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,+DAA+D;AAC/D,SAAS,UAAU,CAAC,UAAyB,EAAE,OAAe;IAC5D,uEAAuE;IACvE,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACjE,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,KAAK,IAAI,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["/**\n * MCP-server registration + authentication for `@agent-native/skills`.\n *\n * This is a dependency-free port of the MCP-config-writing + device-code/OAuth\n * flow that lives in `@agent-native/core`'s `cli/connect.ts`. The skills package\n * ships standalone (no `@agent-native/core` dependency), so this module\n * re-implements just the registration surface against the shared on-disk\n * writers in `./mcp-config-writers.js`. It writes the SAME config and speaks the\n * SAME device-code/OAuth protocol as core.\n *\n * Two client families, exactly as in core:\n *   - OAuth-capable (Claude Code, Cursor, OpenCode, GitHub Copilot / VS Code):\n *     get a URL-only HTTP MCP entry (no bearer headers). The user authenticates\n *     in-host via standard remote MCP OAuth.\n *   - Device-code (codex, cowork): run the browser device-code flow against the\n *     descriptor's hosted URL, then write the entry WITH the minted bearer token\n *     + headers. Non-interactive (or no TTY) skips writing device-code configs,\n *     surfacing the exact `agent-native connect <url>` fallback command.\n *\n * Server contract (identical paths + JSON field names to core):\n *   POST <hostedUrl>/_agent-native/mcp/connect/device/start  (no auth)\n *     body { client?, app? }\n *     → { device_code, user_code, verification_uri,\n *         verification_uri_complete, interval, expires_in }\n *   POST <hostedUrl>/_agent-native/mcp/connect/device/poll   (no auth)\n *     body { device_code }\n *     → { status: \"pending\" }\n *     | { status: \"approved\", token, mcpUrl, serverName, mcpServerEntry }\n *     | { status: \"expired\" } | { status: \"consumed\" }\n *     | { status: \"error\" | \"not_found\", message? }\n *\n * Node-only. Node built-ins + global fetch only; no npm deps.\n */\n\nimport { ClientId, writeHttpEntryForClient } from \"./mcp-config-writers.js\";\n\nconst DEVICE_START_PATH = \"/_agent-native/mcp/connect/device/start\";\nconst DEVICE_POLL_PATH = \"/_agent-native/mcp/connect/device/poll\";\nconst MCP_PATH = \"/_agent-native/mcp\";\n\n/** OAuth-capable clients (in-host remote MCP OAuth, never a local bearer). */\nconst REMOTE_MCP_OAUTH_CLIENTS = new Set<ClientId>([\n  \"claude-code\",\n  \"claude-code-cli\",\n  \"cursor\",\n  \"opencode\",\n  \"github-copilot\",\n]);\n\nconst CLIENT_LABELS: Record<ClientId, string> = {\n  \"claude-code\": \"Claude Code\",\n  \"claude-code-cli\": \"Claude Code CLI\",\n  codex: \"Codex\",\n  cowork: \"Claude Cowork\",\n  cursor: \"Cursor\",\n  opencode: \"OpenCode\",\n  \"github-copilot\": \"GitHub Copilot / VS Code\",\n};\n\n// ---------------------------------------------------------------------------\n// Public types\n// ---------------------------------------------------------------------------\n\n/**\n * Describes one MCP server to register. `serverName` is the canonical config\n * key; `aliases` are additional config keys that point at the same MCP URL\n * (e.g. `plan` + `agent-native-plans`). `hostedUrl` is the deployed app origin\n * the device-code flow authenticates against; `mcpUrl` is the resolved MCP\n * endpoint written into the config (defaults to `<hostedUrl>/_agent-native/mcp`\n * when only `hostedUrl` is supplied).\n */\nexport interface McpDescriptor {\n  serverName: string;\n  mcpUrl: string;\n  aliases?: string[];\n  authMode?: \"oauth\" | \"device\" | \"none\";\n  hostedUrl?: string;\n}\n\nexport interface RegisterMcpOptions {\n  descriptor: McpDescriptor;\n  clients: ClientId[];\n  scope: \"user\" | \"project\";\n  baseDir: string;\n  interactive: boolean;\n  log?: (m: string) => void;\n  deviceFlowTimeoutMs?: number;\n  deps?: {\n    fetchImpl?: typeof fetch;\n    now?: () => number;\n    sleep?: (ms: number) => Promise<void>;\n  };\n}\n\nexport interface RegisterMcpResult {\n  written: { client: ClientId; file: string }[];\n  authenticated: boolean;\n  guidance: string[];\n}\n\n// ---------------------------------------------------------------------------\n// Device-code protocol shapes (field names match core EXACTLY).\n// ---------------------------------------------------------------------------\n\ninterface DeviceStartResponse {\n  device_code: string;\n  user_code: string;\n  verification_uri: string;\n  verification_uri_complete: string;\n  interval?: number;\n  expires_in?: number;\n}\n\ninterface DevicePollResponse {\n  status:\n    | \"pending\"\n    | \"approved\"\n    | \"expired\"\n    | \"consumed\"\n    | \"error\"\n    | \"not_found\";\n  token?: string;\n  mcpUrl?: string;\n  serverName?: string;\n  mcpServerEntry?: Record<string, unknown>;\n  message?: string;\n  error?: string;\n}\n\ninterface DeviceGrant {\n  token?: string;\n  mcpUrl: string;\n  serverName: string;\n  headers?: Record<string, string>;\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nexport function supportsRemoteMcpOAuth(client: ClientId): boolean {\n  return REMOTE_MCP_OAUTH_CLIENTS.has(client);\n}\n\nconst DEFAULT_DEVICE_FLOW_TIMEOUT_MS = 90_000;\n\nfunction realSleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** Trailing-slash-stripped origin+path for a hosted app URL. */\nfunction stripTrailingSlash(url: string): string {\n  return url.replace(/\\/+$/, \"\");\n}\n\n/**\n * Resolve the MCP endpoint URL for a descriptor. Prefers an explicit `mcpUrl`,\n * otherwise derives `<hostedUrl>/_agent-native/mcp` (mirrors core's\n * `mcpUrlForBaseUrl`). Returns `undefined` when neither is usable.\n */\nfunction resolveMcpUrl(descriptor: McpDescriptor): string | undefined {\n  if (descriptor.mcpUrl && descriptor.mcpUrl.trim()) {\n    return descriptor.mcpUrl.trim();\n  }\n  if (descriptor.hostedUrl && descriptor.hostedUrl.trim()) {\n    const base = stripTrailingSlash(descriptor.hostedUrl.trim());\n    return `${base}${MCP_PATH}`;\n  }\n  return undefined;\n}\n\n/** Base (origin) URL of the deployed app the device flow runs against. */\nfunction resolveBaseUrl(descriptor: McpDescriptor): string | undefined {\n  if (descriptor.hostedUrl && descriptor.hostedUrl.trim()) {\n    return stripTrailingSlash(descriptor.hostedUrl.trim());\n  }\n  // Fall back to stripping the MCP path off an explicit mcpUrl.\n  if (descriptor.mcpUrl && descriptor.mcpUrl.trim()) {\n    const trimmed = stripTrailingSlash(descriptor.mcpUrl.trim());\n    if (trimmed.endsWith(MCP_PATH)) {\n      return trimmed.slice(0, -MCP_PATH.length);\n    }\n  }\n  return undefined;\n}\n\n/** All config keys to register: the canonical name plus any aliases (deduped). */\nfunction configKeys(descriptor: McpDescriptor): string[] {\n  const keys: string[] = [descriptor.serverName];\n  for (const alias of descriptor.aliases ?? []) {\n    if (alias && alias !== descriptor.serverName && !keys.includes(alias)) {\n      keys.push(alias);\n    }\n  }\n  return keys;\n}\n\nfunction responseMessage(json: any, fallback: string): string {\n  const message =\n    typeof json?.message === \"string\"\n      ? json.message\n      : typeof json?.error === \"string\"\n        ? json.error\n        : \"\";\n  return message.trim() || fallback;\n}\n\nasync function postJson(\n  fetchImpl: typeof fetch,\n  url: string,\n  body: unknown,\n): Promise<{ status: number; json: any }> {\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), 30_000);\n  try {\n    const response = await fetchImpl(url, {\n      method: \"POST\",\n      headers: { \"content-type\": \"application/json\" },\n      body: JSON.stringify(body ?? {}),\n      signal: controller.signal,\n    });\n    let json: any = null;\n    try {\n      json = await response.json();\n    } catch {\n      json = null;\n    }\n    return { status: response.status, json };\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n\n/**\n * The exact no-browser fallback command core prints. Surfaced as guidance when\n * a device-code client is asked to register non-interactively.\n */\nfunction clientArgForClients(clients: ClientId[]): string {\n  return clients.length === 1 ? clients[0] : clients.join(\",\");\n}\n\nfunction fallbackConnectCommand(\n  baseUrl: string,\n  clients: ClientId[],\n  scope: string,\n): string {\n  return `npx @agent-native/core@latest connect ${baseUrl} --client ${clientArgForClients(\n    clients,\n  )} --scope ${scope}`;\n}\n\n/** Write a URL-only entry (no bearer) for every config key, collecting files. */\nfunction writeUrlOnlyEntries(\n  clients: ClientId[],\n  keys: string[],\n  mcpUrl: string,\n  scope: string,\n  baseDir: string,\n  written: { client: ClientId; file: string }[],\n  errors: string[],\n): void {\n  for (const client of clients) {\n    for (const key of keys) {\n      try {\n        const file = writeHttpEntryForClient(\n          client,\n          key,\n          mcpUrl,\n          undefined,\n          baseDir,\n          scope,\n          undefined,\n        );\n        written.push({ client, file });\n      } catch (err: any) {\n        errors.push(\n          `Could not write ${key} for ${client}: ${err?.message ?? err}`,\n        );\n      }\n    }\n  }\n}\n\nfunction manualConnectGuidance(\n  baseUrl: string,\n  clients: ClientId[],\n  scope: string,\n): string {\n  return (\n    `To authenticate ${describeClients(clients)}, run: ` +\n    fallbackConnectCommand(baseUrl, clients, scope)\n  );\n}\n\nfunction oauthNextStepsForClients(\n  clients: ClientId[],\n  serverName?: string,\n): string[] {\n  const lines: string[] = [];\n  if (clients.includes(\"claude-code\") || clients.includes(\"claude-code-cli\")) {\n    lines.push(\n      \"Claude Code: restart Claude Code, run /mcp, and choose Authenticate.\",\n    );\n  }\n  if (clients.includes(\"cursor\")) {\n    lines.push(\n      \"Cursor: restart or reload Cursor, then authenticate the MCP server from Cursor MCP settings if prompted.\",\n    );\n  }\n  if (clients.includes(\"opencode\")) {\n    lines.push(\n      `OpenCode: run opencode mcp auth ${serverName ?? \"<server-name>\"} or authenticate on first use.`,\n    );\n  }\n  if (clients.includes(\"github-copilot\")) {\n    lines.push(\n      \"GitHub Copilot / VS Code: reload VS Code, open the MCP config, and use the Auth action above the server if prompted.\",\n    );\n  }\n  return lines;\n}\n\n/** Write a token+headers entry for every config key, collecting files. */\nfunction writeAuthedEntries(\n  clients: ClientId[],\n  keys: string[],\n  mcpUrl: string,\n  token: string | undefined,\n  headers: Record<string, string> | undefined,\n  scope: string,\n  baseDir: string,\n  written: { client: ClientId; file: string }[],\n  errors: string[],\n): void {\n  for (const client of clients) {\n    for (const key of keys) {\n      try {\n        const file = writeHttpEntryForClient(\n          client,\n          key,\n          mcpUrl,\n          token,\n          baseDir,\n          scope,\n          headers,\n        );\n        written.push({ client, file });\n      } catch (err: any) {\n        errors.push(\n          `Could not write ${key} for ${client}: ${err?.message ?? err}`,\n        );\n      }\n    }\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Device-code flow (dependency-free port of core's runDeviceFlow)\n// ---------------------------------------------------------------------------\n\n/**\n * Run the device-code flow against `baseUrl` and return the approved grant, or\n * `null` (after logging a clear message) on expiry/consumed/error/timeout. Same\n * state machine and field handling as core; the spinner/browser-open are\n * dropped since this runs inside a non-interactive installer context.\n */\nasync function runDeviceFlow(\n  baseUrl: string,\n  appSlug: string,\n  clientArg: string,\n  log: (m: string) => void,\n  timeoutMs: number | undefined,\n  deps: RegisterMcpOptions[\"deps\"] = {},\n): Promise<DeviceGrant | null> {\n  const fetchImpl = deps.fetchImpl ?? fetch;\n  const sleep = deps.sleep ?? realSleep;\n  const now = deps.now ?? (() => Date.now());\n\n  let start: DeviceStartResponse;\n  try {\n    const { status, json } = await postJson(\n      fetchImpl,\n      `${baseUrl}${DEVICE_START_PATH}`,\n      { client: clientArg, app: appSlug },\n    );\n    if (status < 200 || status >= 300 || !json?.device_code) {\n      log(\n        `  Could not start the connect flow on ${baseUrl} (HTTP ${status}). ` +\n          `Is this an agent-native app, and is it deployed with the connect ` +\n          `endpoint enabled?`,\n      );\n      return null;\n    }\n    start = json as DeviceStartResponse;\n  } catch (err: any) {\n    log(\n      `  Could not reach ${baseUrl} (${err?.message ?? err}). ` +\n        `Check the URL and your network.`,\n    );\n    return null;\n  }\n\n  const interval = Math.max(1, Number(start.interval) || 5);\n  const expiresIn = Math.max(interval, Number(start.expires_in) || 600);\n  const serverDeadlineMs = expiresIn * 1000;\n  const installerDeadlineMs = Math.max(\n    0,\n    timeoutMs ?? DEFAULT_DEVICE_FLOW_TIMEOUT_MS,\n  );\n  const waitMs = Math.min(serverDeadlineMs, installerDeadlineMs);\n  const waitWasCapped = waitMs < serverDeadlineMs;\n  const deadline = now() + waitMs;\n\n  log(\"\");\n  log(`  Connecting to ${baseUrl}`);\n  log(\"\");\n  log(`  Your code:  ${start.user_code}`);\n  log(`  Open:       ${start.verification_uri_complete}`);\n  log(\"\");\n  log(\"  Approve in the browser to finish.\");\n\n  while (now() < deadline) {\n    let poll: DevicePollResponse;\n    try {\n      const { status, json } = await postJson(\n        fetchImpl,\n        `${baseUrl}${DEVICE_POLL_PATH}`,\n        { device_code: start.device_code },\n      );\n      if (status < 200 || status >= 300) {\n        if (isTerminalPollBody(json)) {\n          poll = json as DevicePollResponse;\n        } else {\n          log(\n            `  Connect polling failed (HTTP ${status}): ` +\n              responseMessage(json, \"server returned an error.\"),\n          );\n          return null;\n        }\n      } else {\n        poll = (json ?? { status: \"pending\" }) as DevicePollResponse;\n      }\n    } catch {\n      // Transient network error — keep polling until the deadline.\n      poll = { status: \"pending\" };\n    }\n\n    if (poll.status === \"approved\") {\n      const token = poll.token ?? \"\";\n      const mcpUrl = poll.mcpUrl ?? `${baseUrl}${MCP_PATH}`;\n      const serverName = poll.serverName ?? appSlug;\n      const headers =\n        poll.mcpServerEntry &&\n        typeof poll.mcpServerEntry === \"object\" &&\n        poll.mcpServerEntry.headers &&\n        typeof poll.mcpServerEntry.headers === \"object\"\n          ? (poll.mcpServerEntry.headers as Record<string, string>)\n          : undefined;\n      log(\"  Approved.\");\n      return { token: token || undefined, mcpUrl, serverName, headers };\n    }\n    if (poll.status === \"expired\") {\n      log(\"  The connect request expired before it was approved.\");\n      log(\"  Run the command again to retry.\");\n      return null;\n    }\n    if (poll.status === \"consumed\") {\n      log(\"  This connect code was already used. Run the command again.\");\n      return null;\n    }\n    if (poll.status === \"error\" || poll.status === \"not_found\") {\n      log(\n        `  Connect polling failed: ${responseMessage(\n          poll,\n          poll.status === \"not_found\"\n            ? \"device code was not found.\"\n            : \"server returned an error.\",\n        )}`,\n      );\n      return null;\n    }\n\n    const remainingMs = deadline - now();\n    if (remainingMs <= 0) break;\n    await sleep(Math.min(interval * 1000, remainingMs));\n  }\n\n  if (waitWasCapped) {\n    log(\n      `  Stopped waiting after ${Math.round(waitMs / 1000)}s so installation can finish.`,\n    );\n    log(\"  You can authenticate later with the command below.\");\n  } else {\n    log(\"  Timed out waiting for approval. Run the command again to retry.\");\n  }\n  return null;\n}\n\nfunction isTerminalPollBody(json: any): boolean {\n  return (\n    json?.status === \"not_found\" ||\n    json?.status === \"error\" ||\n    json?.status === \"expired\" ||\n    json?.status === \"consumed\"\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Public entry point\n// ---------------------------------------------------------------------------\n\n/**\n * Register an MCP server (plus aliases) into the requested client configs,\n * authenticating device-code clients via the browser flow when interactive.\n *\n * Idempotent: re-running replaces the same named entries. Never throws on a\n * single client/key failing — failures are collected into `guidance`.\n */\nexport async function registerMcpServer(\n  opts: RegisterMcpOptions,\n): Promise<RegisterMcpResult> {\n  const { descriptor, scope, baseDir, interactive } = opts;\n  const log = opts.log ?? (() => {});\n  const deps = opts.deps ?? {};\n\n  const written: { client: ClientId; file: string }[] = [];\n  const guidance: string[] = [];\n  const errors: string[] = [];\n  let authenticated = false;\n\n  const keys = configKeys(descriptor);\n  const mcpUrl = resolveMcpUrl(descriptor);\n  if (!mcpUrl) {\n    return {\n      written,\n      authenticated,\n      guidance: [\n        `Cannot register \"${descriptor.serverName}\": no mcpUrl or hostedUrl supplied.`,\n      ],\n    };\n  }\n\n  const authMode = descriptor.authMode ?? \"device\";\n\n  // authMode \"none\" (e.g. context-xray): URL-only for ALL clients, no auth.\n  if (authMode === \"none\") {\n    writeUrlOnlyEntries(\n      opts.clients,\n      keys,\n      mcpUrl,\n      scope,\n      baseDir,\n      written,\n      errors,\n    );\n    return { written, authenticated, guidance: [...guidance, ...errors] };\n  }\n\n  // Split into OAuth-capable and device-code clients, exactly like core.\n  const oauthClients = opts.clients.filter((c) => supportsRemoteMcpOAuth(c));\n  const deviceClients = opts.clients.filter((c) => !supportsRemoteMcpOAuth(c));\n\n  // OAuth clients always get URL-only entries (in-host OAuth, no local bearer).\n  if (oauthClients.length > 0) {\n    writeUrlOnlyEntries(\n      oauthClients,\n      keys,\n      mcpUrl,\n      scope,\n      baseDir,\n      written,\n      errors,\n    );\n    guidance.push(\n      `${describeClients(oauthClients)}: wrote URL-only MCP config (no bearer headers).`,\n      ...oauthNextStepsForClients(oauthClients, descriptor.serverName),\n    );\n  }\n\n  // Device-code clients.\n  if (deviceClients.length > 0) {\n    const baseUrl = resolveBaseUrl(descriptor);\n\n    // We only reach here for authMode \"oauth\"/\"device\" (authMode \"none\" returned\n    // earlier). Run the flow only when interactive AND we have a hosted URL to\n    // authenticate against. Device-code clients such as Codex cannot use a\n    // URL-only hosted entry: writing one would overwrite a working bearer token\n    // and leave new sessions unauthenticated. If auth cannot complete, keep the\n    // existing config untouched and surface the explicit connect command.\n    const canRunFlow = interactive && !!baseUrl;\n\n    if (!canRunFlow) {\n      if (baseUrl) {\n        guidance.push(\n          `${describeClients(deviceClients)}: skipped MCP config because this client needs a bearer token.`,\n          manualConnectGuidance(baseUrl, deviceClients, scope),\n        );\n      } else {\n        guidance.push(\n          `${describeClients(deviceClients)}: skipped MCP config because no hosted URL was available for authentication.`,\n        );\n      }\n    } else {\n      const appSlug = appSlugFor(descriptor, baseUrl!);\n      const clientArg = deviceClients.length === 1 ? deviceClients[0] : \"all\";\n      const grant = await runDeviceFlow(\n        baseUrl!,\n        appSlug,\n        clientArg,\n        log,\n        opts.deviceFlowTimeoutMs,\n        deps,\n      );\n\n      if (grant && grant.token) {\n        // Write authed entries; honour the server's resolved mcpUrl when given.\n        const resolvedUrl = grant.mcpUrl || mcpUrl;\n        writeAuthedEntries(\n          deviceClients,\n          keys,\n          resolvedUrl,\n          grant.token,\n          grant.headers,\n          scope,\n          baseDir,\n          written,\n          errors,\n        );\n        authenticated = true;\n      } else {\n        // Flow failed (or approved with no token). Do not downgrade device-code\n        // clients to a URL-only hosted entry; keep any existing bearer config.\n        guidance.push(\n          `${describeClients(deviceClients)}: authentication did not complete; existing MCP config was left unchanged.`,\n          manualConnectGuidance(baseUrl!, deviceClients, scope),\n        );\n      }\n    }\n  }\n\n  return { written, authenticated, guidance: [...guidance, ...errors] };\n}\n\nfunction describeClients(clients: ClientId[]): string {\n  return clients.map((client) => CLIENT_LABELS[client]).join(\", \");\n}\n\n/** Derive the `app` slug the device-start endpoint expects. */\nfunction appSlugFor(descriptor: McpDescriptor, baseUrl: string): string {\n  // Prefer the descriptor's server name without the agent-native prefix.\n  const name = descriptor.serverName.replace(/^agent-native-/, \"\");\n  if (name) return name;\n  try {\n    const host = new URL(baseUrl).hostname;\n    const first = host.split(\".\")[0];\n    return first && first !== \"www\" ? first : \"app\";\n  } catch {\n    return \"app\";\n  }\n}\n"]}
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../src/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAY,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAE5E,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AACtD,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AACpD,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAE7C,8EAA8E;AAC9E,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAW;IACjD,aAAa;IACb,iBAAiB;IACjB,QAAQ;IACR,UAAU;IACV,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,aAAa,GAA6B;IAC9C,aAAa,EAAE,aAAa;IAC5B,iBAAiB,EAAE,iBAAiB;IACpC,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,gBAAgB,EAAE,0BAA0B;CAC7C,CAAC;AA+EF,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,UAAU,sBAAsB,CAAC,MAAgB;IACrD,OAAO,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAE9C,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,gEAAgE;AAChE,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAW;IAC7C,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACtC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,UAAyB;IAC9C,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,OAAO,0BAA0B,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,OAAO,GAAG,IAAI,GAAG,QAAQ,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0EAA0E;AAC1E,SAAS,cAAc,CAAC,UAAyB;IAC/C,IAAI,UAAU,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,OAAO,kBAAkB,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,8DAA8D;IAC9D,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACtC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kFAAkF;AAClF,SAAS,UAAU,CAAC,UAAyB;IAC3C,MAAM,IAAI,GAAa,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,KAAK,IAAI,KAAK,KAAK,UAAU,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,IAAS,EAAE,QAAgB;IAClD,MAAM,OAAO,GACX,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ;QAC/B,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;YAC/B,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,EAAE,CAAC;IACX,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,SAAuB,EACvB,GAAW,EACX,IAAa;IAEb,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;YAChC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,IAAI,GAAQ,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,OAAmB;IAC9C,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAe,EACf,OAAmB,EACnB,KAAa;IAEb,OAAO,yCAAyC,OAAO,aAAa,mBAAmB,CACrF,OAAO,CACR,YAAY,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,iFAAiF;AACjF,SAAS,mBAAmB,CAC1B,OAAmB,EACnB,IAAc,EACd,MAAc,EACd,KAAa,EACb,OAAe,EACf,OAA6C,EAC7C,MAAgB;IAEhB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,uBAAuB,CAClC,MAAM,EACN,GAAG,EACH,MAAM,EACN,SAAS,EACT,OAAO,EACP,KAAK,EACL,SAAS,CACV,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CACT,mBAAmB,GAAG,QAAQ,MAAM,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAC/D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAe,EACf,OAAmB,EACnB,KAAa;IAEb,OAAO,CACL,mBAAmB,eAAe,CAAC,OAAO,CAAC,SAAS;QACpD,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAChD,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,OAAmB,EACnB,UAAmB;IAEnB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC3E,KAAK,CAAC,IAAI,CACR,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CACR,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CACR,mCAAmC,UAAU,IAAI,eAAe,gCAAgC,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CACR,sHAAsH,CACvH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0EAA0E;AAC1E,SAAS,kBAAkB,CACzB,OAAmB,EACnB,IAAc,EACd,MAAc,EACd,KAAyB,EACzB,OAA2C,EAC3C,KAAa,EACb,OAAe,EACf,OAA6C,EAC7C,MAAgB;IAEhB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,uBAAuB,CAClC,MAAM,EACN,GAAG,EACH,MAAM,EACN,KAAK,EACL,OAAO,EACP,KAAK,EACL,OAAO,CACR,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CACT,mBAAmB,GAAG,QAAQ,MAAM,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAC/D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,kEAAkE;AAClE,8EAA8E;AAE9E;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAC1B,OAAe,EACf,OAAe,EACf,SAAiB,EACjB,GAAwB,EACxB,SAA6B,EAC7B,IAAI,GAA+B,EAAE;IAErC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAE3C,IAAI,KAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CACrC,SAAS,EACT,GAAG,OAAO,GAAG,iBAAiB,EAAE,EAChC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,CACpC,CAAC;QACF,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;YACxD,GAAG,CACD,yCAAyC,OAAO,UAAU,MAAM,KAAK;gBACnE,mEAAmE;gBACnE,mBAAmB,CACtB,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,GAAG,IAA2B,CAAC;IACtC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,GAAG,CACD,qBAAqB,OAAO,KAAK,GAAG,EAAE,OAAO,IAAI,GAAG,KAAK;YACvD,iCAAiC,CACpC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,SAAS,GAAG,IAAI,CAAC;IAC1C,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAClC,CAAC,EACD,SAAS,IAAI,8BAA8B,CAC5C,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,MAAM,GAAG,gBAAgB,CAAC;IAChD,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC;IAEhC,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,iBAAiB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACxC,GAAG,CAAC,iBAAiB,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC;IACxD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAE3C,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QACxB,IAAI,IAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CACrC,SAAS,EACT,GAAG,OAAO,GAAG,gBAAgB,EAAE,EAC/B,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CACnC,CAAC;YACF,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,IAAI,GAAG,IAA0B,CAAC;gBACpC,CAAC;qBAAM,CAAC;oBACN,GAAG,CACD,kCAAkC,MAAM,KAAK;wBAC3C,eAAe,CAAC,IAAI,EAAE,2BAA2B,CAAC,CACrD,CAAC;oBACF,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAuB,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;YAC7D,IAAI,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,0BAA0B,CACvC,IAAI,CAAC,MAAM,IAAI,GAAG,OAAO,GAAG,QAAQ,EAAE,CACvC,CAAC;YACF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC;YAC9C,MAAM,OAAO,GACX,IAAI,CAAC,cAAc;gBACnB,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;gBACvC,IAAI,CAAC,cAAc,CAAC,OAAO;gBAC3B,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,KAAK,QAAQ;gBAC7C,CAAC,CAAE,IAAI,CAAC,cAAc,CAAC,OAAkC;gBACzD,CAAC,CAAC,SAAS,CAAC;YAChB,GAAG,CAAC,aAAa,CAAC,CAAC;YACnB,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACpE,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,GAAG,CAAC,uDAAuD,CAAC,CAAC;YAC7D,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,GAAG,CAAC,8DAA8D,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3D,GAAG,CACD,6BAA6B,eAAe,CAC1C,IAAI,EACJ,IAAI,CAAC,MAAM,KAAK,WAAW;gBACzB,CAAC,CAAC,4BAA4B;gBAC9B,CAAC,CAAC,2BAA2B,CAChC,EAAE,CACJ,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,QAAQ,GAAG,GAAG,EAAE,CAAC;QACrC,IAAI,WAAW,IAAI,CAAC;YAAE,MAAM;QAC5B,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,GAAG,CACD,2BAA2B,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,+BAA+B,CACpF,CAAC;QACF,GAAG,CAAC,sDAAsD,CAAC,CAAC;IAC9D,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,mEAAmE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAS;IACnC,OAAO,CACL,IAAI,EAAE,MAAM,KAAK,WAAW;QAC5B,IAAI,EAAE,MAAM,KAAK,OAAO;QACxB,IAAI,EAAE,MAAM,KAAK,SAAS;QAC1B,IAAI,EAAE,MAAM,KAAK,UAAU,CAC5B,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAwB;IAExB,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAE7B,MAAM,OAAO,GAAyC,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,OAAO;YACP,aAAa;YACb,QAAQ,EAAE;gBACR,oBAAoB,UAAU,CAAC,UAAU,qCAAqC;aAC/E;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC;IAEjD,0EAA0E;IAC1E,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,mBAAmB,CACjB,IAAI,CAAC,OAAO,EACZ,IAAI,EACJ,MAAM,EACN,KAAK,EACL,OAAO,EACP,OAAO,EACP,MAAM,CACP,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;IACxE,CAAC;IAED,uEAAuE;IACvE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7E,8EAA8E;IAC9E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,mBAAmB,CACjB,YAAY,EACZ,IAAI,EACJ,MAAM,EACN,KAAK,EACL,OAAO,EACP,OAAO,EACP,MAAM,CACP,CAAC;QACF,QAAQ,CAAC,IAAI,CACX,GAAG,eAAe,CAAC,YAAY,CAAC,kDAAkD,EAClF,GAAG,wBAAwB,CAAC,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC,CACjE,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAE3C,6EAA6E;QAC7E,2EAA2E;QAC3E,uEAAuE;QACvE,4EAA4E;QAC5E,4EAA4E;QAC5E,sEAAsE;QACtE,MAAM,UAAU,GAAG,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC;QAE5C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,OAAO,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,CACX,GAAG,eAAe,CAAC,aAAa,CAAC,gEAAgE,EACjG,qBAAqB,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,CACrD,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CACX,GAAG,eAAe,CAAC,aAAa,CAAC,8EAA8E,CAChH,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,EAAE,OAAQ,CAAC,CAAC;YACjD,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACxE,MAAM,KAAK,GAAG,MAAM,aAAa,CAC/B,OAAQ,EACR,OAAO,EACP,SAAS,EACT,GAAG,EACH,IAAI,CAAC,mBAAmB,EACxB,IAAI,CACL,CAAC;YAEF,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBACzB,wEAAwE;gBACxE,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC;gBAC3C,kBAAkB,CAChB,aAAa,EACb,IAAI,EACJ,WAAW,EACX,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,EACb,KAAK,EACL,OAAO,EACP,OAAO,EACP,MAAM,CACP,CAAC;gBACF,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,wEAAwE;gBACxE,uEAAuE;gBACvE,QAAQ,CAAC,IAAI,CACX,GAAG,eAAe,CAAC,aAAa,CAAC,4EAA4E,EAC7G,qBAAqB,CAAC,OAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,CACtD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,eAAe,CAAC,OAAmB;IAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,+DAA+D;AAC/D,SAAS,UAAU,CAAC,UAAyB,EAAE,OAAe;IAC5D,uEAAuE;IACvE,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACjE,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,KAAK,IAAI,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["/**\n * MCP-server registration + authentication for `@agent-native/skills`.\n *\n * This is a dependency-free port of the MCP-config-writing + device-code/OAuth\n * flow that lives in `@agent-native/core`'s `cli/connect.ts`. The skills package\n * ships standalone (no `@agent-native/core` dependency), so this module\n * re-implements just the registration surface against the shared on-disk\n * writers in `./mcp-config-writers.js`. It writes the SAME config and speaks the\n * SAME device-code/OAuth protocol as core.\n *\n * Two client families, exactly as in core:\n *   - OAuth-capable (Claude Code, Cursor, OpenCode, GitHub Copilot / VS Code):\n *     get a URL-only HTTP MCP entry (no bearer headers). The user authenticates\n *     in-host via standard remote MCP OAuth.\n *   - Device-code (codex, cowork): run the browser device-code flow against the\n *     descriptor's hosted URL, then write the entry WITH the minted bearer token\n *     + headers. Non-interactive (or no TTY) skips writing device-code configs,\n *     surfacing the exact `agent-native connect <url>` fallback command.\n *\n * Server contract (identical paths + JSON field names to core):\n *   POST <hostedUrl>/mcp/connect/device/start  (no auth)\n *     body { client?, app? }\n *     → { device_code, user_code, verification_uri,\n *         verification_uri_complete, interval, expires_in }\n *   POST <hostedUrl>/mcp/connect/device/poll   (no auth)\n *     body { device_code }\n *     → { status: \"pending\" }\n *     | { status: \"approved\", token, mcpUrl, serverName, mcpServerEntry }\n *     | { status: \"expired\" } | { status: \"consumed\" }\n *     | { status: \"error\" | \"not_found\", message? }\n *\n * Node-only. Node built-ins + global fetch only; no npm deps.\n */\n\nimport { ClientId, writeHttpEntryForClient } from \"./mcp-config-writers.js\";\n\nconst DEVICE_START_PATH = \"/mcp/connect/device/start\";\nconst DEVICE_POLL_PATH = \"/mcp/connect/device/poll\";\nconst MCP_PATH = \"/mcp\";\nconst LEGACY_MCP_PATH = \"/_agent-native/mcp\";\n\n/** OAuth-capable clients (in-host remote MCP OAuth, never a local bearer). */\nconst REMOTE_MCP_OAUTH_CLIENTS = new Set<ClientId>([\n  \"claude-code\",\n  \"claude-code-cli\",\n  \"cursor\",\n  \"opencode\",\n  \"github-copilot\",\n]);\n\nconst CLIENT_LABELS: Record<ClientId, string> = {\n  \"claude-code\": \"Claude Code\",\n  \"claude-code-cli\": \"Claude Code CLI\",\n  codex: \"Codex\",\n  cowork: \"Claude Cowork\",\n  cursor: \"Cursor\",\n  opencode: \"OpenCode\",\n  \"github-copilot\": \"GitHub Copilot / VS Code\",\n};\n\n// ---------------------------------------------------------------------------\n// Public types\n// ---------------------------------------------------------------------------\n\n/**\n * Describes one MCP server to register. `serverName` is the canonical config\n * key; `aliases` are additional config keys that point at the same MCP URL\n * (e.g. `plan` + `agent-native-plans`). `hostedUrl` is the deployed app origin\n * the device-code flow authenticates against; `mcpUrl` is the resolved MCP\n * endpoint written into the config (defaults to `<hostedUrl>/mcp`\n * when only `hostedUrl` is supplied).\n */\nexport interface McpDescriptor {\n  serverName: string;\n  mcpUrl: string;\n  aliases?: string[];\n  authMode?: \"oauth\" | \"device\" | \"none\";\n  hostedUrl?: string;\n}\n\nexport interface RegisterMcpOptions {\n  descriptor: McpDescriptor;\n  clients: ClientId[];\n  scope: \"user\" | \"project\";\n  baseDir: string;\n  interactive: boolean;\n  log?: (m: string) => void;\n  deviceFlowTimeoutMs?: number;\n  deps?: {\n    fetchImpl?: typeof fetch;\n    now?: () => number;\n    sleep?: (ms: number) => Promise<void>;\n  };\n}\n\nexport interface RegisterMcpResult {\n  written: { client: ClientId; file: string }[];\n  authenticated: boolean;\n  guidance: string[];\n}\n\n// ---------------------------------------------------------------------------\n// Device-code protocol shapes (field names match core EXACTLY).\n// ---------------------------------------------------------------------------\n\ninterface DeviceStartResponse {\n  device_code: string;\n  user_code: string;\n  verification_uri: string;\n  verification_uri_complete: string;\n  interval?: number;\n  expires_in?: number;\n}\n\ninterface DevicePollResponse {\n  status:\n    | \"pending\"\n    | \"approved\"\n    | \"expired\"\n    | \"consumed\"\n    | \"error\"\n    | \"not_found\";\n  token?: string;\n  mcpUrl?: string;\n  serverName?: string;\n  mcpServerEntry?: Record<string, unknown>;\n  message?: string;\n  error?: string;\n}\n\ninterface DeviceGrant {\n  token?: string;\n  mcpUrl: string;\n  serverName: string;\n  headers?: Record<string, string>;\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nexport function supportsRemoteMcpOAuth(client: ClientId): boolean {\n  return REMOTE_MCP_OAUTH_CLIENTS.has(client);\n}\n\nconst DEFAULT_DEVICE_FLOW_TIMEOUT_MS = 90_000;\n\nfunction realSleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** Trailing-slash-stripped origin+path for a hosted app URL. */\nfunction stripTrailingSlash(url: string): string {\n  return url.replace(/\\/+$/, \"\");\n}\n\nfunction canonicalAgentNativeMcpUrl(url: string): string {\n  const trimmed = stripTrailingSlash(url);\n  if (trimmed.endsWith(LEGACY_MCP_PATH)) {\n    return `${trimmed.slice(0, -LEGACY_MCP_PATH.length)}${MCP_PATH}`;\n  }\n  return trimmed;\n}\n\n/**\n * Resolve the MCP endpoint URL for a descriptor. Prefers an explicit `mcpUrl`,\n * otherwise derives `<hostedUrl>/mcp` (mirrors core's\n * `mcpUrlForBaseUrl`). Returns `undefined` when neither is usable.\n */\nfunction resolveMcpUrl(descriptor: McpDescriptor): string | undefined {\n  if (descriptor.mcpUrl && descriptor.mcpUrl.trim()) {\n    return canonicalAgentNativeMcpUrl(descriptor.mcpUrl.trim());\n  }\n  if (descriptor.hostedUrl && descriptor.hostedUrl.trim()) {\n    const base = stripTrailingSlash(descriptor.hostedUrl.trim());\n    return `${base}${MCP_PATH}`;\n  }\n  return undefined;\n}\n\n/** Base (origin) URL of the deployed app the device flow runs against. */\nfunction resolveBaseUrl(descriptor: McpDescriptor): string | undefined {\n  if (descriptor.hostedUrl && descriptor.hostedUrl.trim()) {\n    return stripTrailingSlash(descriptor.hostedUrl.trim());\n  }\n  // Fall back to stripping the MCP path off an explicit mcpUrl.\n  if (descriptor.mcpUrl && descriptor.mcpUrl.trim()) {\n    const trimmed = stripTrailingSlash(descriptor.mcpUrl.trim());\n    if (trimmed.endsWith(LEGACY_MCP_PATH)) {\n      return trimmed.slice(0, -LEGACY_MCP_PATH.length);\n    }\n    if (trimmed.endsWith(MCP_PATH)) {\n      return trimmed.slice(0, -MCP_PATH.length);\n    }\n  }\n  return undefined;\n}\n\n/** All config keys to register: the canonical name plus any aliases (deduped). */\nfunction configKeys(descriptor: McpDescriptor): string[] {\n  const keys: string[] = [descriptor.serverName];\n  for (const alias of descriptor.aliases ?? []) {\n    if (alias && alias !== descriptor.serverName && !keys.includes(alias)) {\n      keys.push(alias);\n    }\n  }\n  return keys;\n}\n\nfunction responseMessage(json: any, fallback: string): string {\n  const message =\n    typeof json?.message === \"string\"\n      ? json.message\n      : typeof json?.error === \"string\"\n        ? json.error\n        : \"\";\n  return message.trim() || fallback;\n}\n\nasync function postJson(\n  fetchImpl: typeof fetch,\n  url: string,\n  body: unknown,\n): Promise<{ status: number; json: any }> {\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), 30_000);\n  try {\n    const response = await fetchImpl(url, {\n      method: \"POST\",\n      headers: { \"content-type\": \"application/json\" },\n      body: JSON.stringify(body ?? {}),\n      signal: controller.signal,\n    });\n    let json: any = null;\n    try {\n      json = await response.json();\n    } catch {\n      json = null;\n    }\n    return { status: response.status, json };\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n\n/**\n * The exact no-browser fallback command core prints. Surfaced as guidance when\n * a device-code client is asked to register non-interactively.\n */\nfunction clientArgForClients(clients: ClientId[]): string {\n  return clients.length === 1 ? clients[0] : clients.join(\",\");\n}\n\nfunction fallbackConnectCommand(\n  baseUrl: string,\n  clients: ClientId[],\n  scope: string,\n): string {\n  return `npx @agent-native/core@latest connect ${baseUrl} --client ${clientArgForClients(\n    clients,\n  )} --scope ${scope}`;\n}\n\n/** Write a URL-only entry (no bearer) for every config key, collecting files. */\nfunction writeUrlOnlyEntries(\n  clients: ClientId[],\n  keys: string[],\n  mcpUrl: string,\n  scope: string,\n  baseDir: string,\n  written: { client: ClientId; file: string }[],\n  errors: string[],\n): void {\n  for (const client of clients) {\n    for (const key of keys) {\n      try {\n        const file = writeHttpEntryForClient(\n          client,\n          key,\n          mcpUrl,\n          undefined,\n          baseDir,\n          scope,\n          undefined,\n        );\n        written.push({ client, file });\n      } catch (err: any) {\n        errors.push(\n          `Could not write ${key} for ${client}: ${err?.message ?? err}`,\n        );\n      }\n    }\n  }\n}\n\nfunction manualConnectGuidance(\n  baseUrl: string,\n  clients: ClientId[],\n  scope: string,\n): string {\n  return (\n    `To authenticate ${describeClients(clients)}, run: ` +\n    fallbackConnectCommand(baseUrl, clients, scope)\n  );\n}\n\nfunction oauthNextStepsForClients(\n  clients: ClientId[],\n  serverName?: string,\n): string[] {\n  const lines: string[] = [];\n  if (clients.includes(\"claude-code\") || clients.includes(\"claude-code-cli\")) {\n    lines.push(\n      \"Claude Code: restart Claude Code, run /mcp, and choose Authenticate.\",\n    );\n  }\n  if (clients.includes(\"cursor\")) {\n    lines.push(\n      \"Cursor: restart or reload Cursor, then authenticate the MCP server from Cursor MCP settings if prompted.\",\n    );\n  }\n  if (clients.includes(\"opencode\")) {\n    lines.push(\n      `OpenCode: run opencode mcp auth ${serverName ?? \"<server-name>\"} or authenticate on first use.`,\n    );\n  }\n  if (clients.includes(\"github-copilot\")) {\n    lines.push(\n      \"GitHub Copilot / VS Code: reload VS Code, open the MCP config, and use the Auth action above the server if prompted.\",\n    );\n  }\n  return lines;\n}\n\n/** Write a token+headers entry for every config key, collecting files. */\nfunction writeAuthedEntries(\n  clients: ClientId[],\n  keys: string[],\n  mcpUrl: string,\n  token: string | undefined,\n  headers: Record<string, string> | undefined,\n  scope: string,\n  baseDir: string,\n  written: { client: ClientId; file: string }[],\n  errors: string[],\n): void {\n  for (const client of clients) {\n    for (const key of keys) {\n      try {\n        const file = writeHttpEntryForClient(\n          client,\n          key,\n          mcpUrl,\n          token,\n          baseDir,\n          scope,\n          headers,\n        );\n        written.push({ client, file });\n      } catch (err: any) {\n        errors.push(\n          `Could not write ${key} for ${client}: ${err?.message ?? err}`,\n        );\n      }\n    }\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Device-code flow (dependency-free port of core's runDeviceFlow)\n// ---------------------------------------------------------------------------\n\n/**\n * Run the device-code flow against `baseUrl` and return the approved grant, or\n * `null` (after logging a clear message) on expiry/consumed/error/timeout. Same\n * state machine and field handling as core; the spinner/browser-open are\n * dropped since this runs inside a non-interactive installer context.\n */\nasync function runDeviceFlow(\n  baseUrl: string,\n  appSlug: string,\n  clientArg: string,\n  log: (m: string) => void,\n  timeoutMs: number | undefined,\n  deps: RegisterMcpOptions[\"deps\"] = {},\n): Promise<DeviceGrant | null> {\n  const fetchImpl = deps.fetchImpl ?? fetch;\n  const sleep = deps.sleep ?? realSleep;\n  const now = deps.now ?? (() => Date.now());\n\n  let start: DeviceStartResponse;\n  try {\n    const { status, json } = await postJson(\n      fetchImpl,\n      `${baseUrl}${DEVICE_START_PATH}`,\n      { client: clientArg, app: appSlug },\n    );\n    if (status < 200 || status >= 300 || !json?.device_code) {\n      log(\n        `  Could not start the connect flow on ${baseUrl} (HTTP ${status}). ` +\n          `Is this an agent-native app, and is it deployed with the connect ` +\n          `endpoint enabled?`,\n      );\n      return null;\n    }\n    start = json as DeviceStartResponse;\n  } catch (err: any) {\n    log(\n      `  Could not reach ${baseUrl} (${err?.message ?? err}). ` +\n        `Check the URL and your network.`,\n    );\n    return null;\n  }\n\n  const interval = Math.max(1, Number(start.interval) || 5);\n  const expiresIn = Math.max(interval, Number(start.expires_in) || 600);\n  const serverDeadlineMs = expiresIn * 1000;\n  const installerDeadlineMs = Math.max(\n    0,\n    timeoutMs ?? DEFAULT_DEVICE_FLOW_TIMEOUT_MS,\n  );\n  const waitMs = Math.min(serverDeadlineMs, installerDeadlineMs);\n  const waitWasCapped = waitMs < serverDeadlineMs;\n  const deadline = now() + waitMs;\n\n  log(\"\");\n  log(`  Connecting to ${baseUrl}`);\n  log(\"\");\n  log(`  Your code:  ${start.user_code}`);\n  log(`  Open:       ${start.verification_uri_complete}`);\n  log(\"\");\n  log(\"  Approve in the browser to finish.\");\n\n  while (now() < deadline) {\n    let poll: DevicePollResponse;\n    try {\n      const { status, json } = await postJson(\n        fetchImpl,\n        `${baseUrl}${DEVICE_POLL_PATH}`,\n        { device_code: start.device_code },\n      );\n      if (status < 200 || status >= 300) {\n        if (isTerminalPollBody(json)) {\n          poll = json as DevicePollResponse;\n        } else {\n          log(\n            `  Connect polling failed (HTTP ${status}): ` +\n              responseMessage(json, \"server returned an error.\"),\n          );\n          return null;\n        }\n      } else {\n        poll = (json ?? { status: \"pending\" }) as DevicePollResponse;\n      }\n    } catch {\n      // Transient network error — keep polling until the deadline.\n      poll = { status: \"pending\" };\n    }\n\n    if (poll.status === \"approved\") {\n      const token = poll.token ?? \"\";\n      const mcpUrl = canonicalAgentNativeMcpUrl(\n        poll.mcpUrl ?? `${baseUrl}${MCP_PATH}`,\n      );\n      const serverName = poll.serverName ?? appSlug;\n      const headers =\n        poll.mcpServerEntry &&\n        typeof poll.mcpServerEntry === \"object\" &&\n        poll.mcpServerEntry.headers &&\n        typeof poll.mcpServerEntry.headers === \"object\"\n          ? (poll.mcpServerEntry.headers as Record<string, string>)\n          : undefined;\n      log(\"  Approved.\");\n      return { token: token || undefined, mcpUrl, serverName, headers };\n    }\n    if (poll.status === \"expired\") {\n      log(\"  The connect request expired before it was approved.\");\n      log(\"  Run the command again to retry.\");\n      return null;\n    }\n    if (poll.status === \"consumed\") {\n      log(\"  This connect code was already used. Run the command again.\");\n      return null;\n    }\n    if (poll.status === \"error\" || poll.status === \"not_found\") {\n      log(\n        `  Connect polling failed: ${responseMessage(\n          poll,\n          poll.status === \"not_found\"\n            ? \"device code was not found.\"\n            : \"server returned an error.\",\n        )}`,\n      );\n      return null;\n    }\n\n    const remainingMs = deadline - now();\n    if (remainingMs <= 0) break;\n    await sleep(Math.min(interval * 1000, remainingMs));\n  }\n\n  if (waitWasCapped) {\n    log(\n      `  Stopped waiting after ${Math.round(waitMs / 1000)}s so installation can finish.`,\n    );\n    log(\"  You can authenticate later with the command below.\");\n  } else {\n    log(\"  Timed out waiting for approval. Run the command again to retry.\");\n  }\n  return null;\n}\n\nfunction isTerminalPollBody(json: any): boolean {\n  return (\n    json?.status === \"not_found\" ||\n    json?.status === \"error\" ||\n    json?.status === \"expired\" ||\n    json?.status === \"consumed\"\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Public entry point\n// ---------------------------------------------------------------------------\n\n/**\n * Register an MCP server (plus aliases) into the requested client configs,\n * authenticating device-code clients via the browser flow when interactive.\n *\n * Idempotent: re-running replaces the same named entries. Never throws on a\n * single client/key failing — failures are collected into `guidance`.\n */\nexport async function registerMcpServer(\n  opts: RegisterMcpOptions,\n): Promise<RegisterMcpResult> {\n  const { descriptor, scope, baseDir, interactive } = opts;\n  const log = opts.log ?? (() => {});\n  const deps = opts.deps ?? {};\n\n  const written: { client: ClientId; file: string }[] = [];\n  const guidance: string[] = [];\n  const errors: string[] = [];\n  let authenticated = false;\n\n  const keys = configKeys(descriptor);\n  const mcpUrl = resolveMcpUrl(descriptor);\n  if (!mcpUrl) {\n    return {\n      written,\n      authenticated,\n      guidance: [\n        `Cannot register \"${descriptor.serverName}\": no mcpUrl or hostedUrl supplied.`,\n      ],\n    };\n  }\n\n  const authMode = descriptor.authMode ?? \"device\";\n\n  // authMode \"none\" (e.g. context-xray): URL-only for ALL clients, no auth.\n  if (authMode === \"none\") {\n    writeUrlOnlyEntries(\n      opts.clients,\n      keys,\n      mcpUrl,\n      scope,\n      baseDir,\n      written,\n      errors,\n    );\n    return { written, authenticated, guidance: [...guidance, ...errors] };\n  }\n\n  // Split into OAuth-capable and device-code clients, exactly like core.\n  const oauthClients = opts.clients.filter((c) => supportsRemoteMcpOAuth(c));\n  const deviceClients = opts.clients.filter((c) => !supportsRemoteMcpOAuth(c));\n\n  // OAuth clients always get URL-only entries (in-host OAuth, no local bearer).\n  if (oauthClients.length > 0) {\n    writeUrlOnlyEntries(\n      oauthClients,\n      keys,\n      mcpUrl,\n      scope,\n      baseDir,\n      written,\n      errors,\n    );\n    guidance.push(\n      `${describeClients(oauthClients)}: wrote URL-only MCP config (no bearer headers).`,\n      ...oauthNextStepsForClients(oauthClients, descriptor.serverName),\n    );\n  }\n\n  // Device-code clients.\n  if (deviceClients.length > 0) {\n    const baseUrl = resolveBaseUrl(descriptor);\n\n    // We only reach here for authMode \"oauth\"/\"device\" (authMode \"none\" returned\n    // earlier). Run the flow only when interactive AND we have a hosted URL to\n    // authenticate against. Device-code clients such as Codex cannot use a\n    // URL-only hosted entry: writing one would overwrite a working bearer token\n    // and leave new sessions unauthenticated. If auth cannot complete, keep the\n    // existing config untouched and surface the explicit connect command.\n    const canRunFlow = interactive && !!baseUrl;\n\n    if (!canRunFlow) {\n      if (baseUrl) {\n        guidance.push(\n          `${describeClients(deviceClients)}: skipped MCP config because this client needs a bearer token.`,\n          manualConnectGuidance(baseUrl, deviceClients, scope),\n        );\n      } else {\n        guidance.push(\n          `${describeClients(deviceClients)}: skipped MCP config because no hosted URL was available for authentication.`,\n        );\n      }\n    } else {\n      const appSlug = appSlugFor(descriptor, baseUrl!);\n      const clientArg = deviceClients.length === 1 ? deviceClients[0] : \"all\";\n      const grant = await runDeviceFlow(\n        baseUrl!,\n        appSlug,\n        clientArg,\n        log,\n        opts.deviceFlowTimeoutMs,\n        deps,\n      );\n\n      if (grant && grant.token) {\n        // Write authed entries; honour the server's resolved mcpUrl when given.\n        const resolvedUrl = grant.mcpUrl || mcpUrl;\n        writeAuthedEntries(\n          deviceClients,\n          keys,\n          resolvedUrl,\n          grant.token,\n          grant.headers,\n          scope,\n          baseDir,\n          written,\n          errors,\n        );\n        authenticated = true;\n      } else {\n        // Flow failed (or approved with no token). Do not downgrade device-code\n        // clients to a URL-only hosted entry; keep any existing bearer config.\n        guidance.push(\n          `${describeClients(deviceClients)}: authentication did not complete; existing MCP config was left unchanged.`,\n          manualConnectGuidance(baseUrl!, deviceClients, scope),\n        );\n      }\n    }\n  }\n\n  return { written, authenticated, guidance: [...guidance, ...errors] };\n}\n\nfunction describeClients(clients: ClientId[]): string {\n  return clients.map((client) => CLIENT_LABELS[client]).join(\", \");\n}\n\n/** Derive the `app` slug the device-start endpoint expects. */\nfunction appSlugFor(descriptor: McpDescriptor, baseUrl: string): string {\n  // Prefer the descriptor's server name without the agent-native prefix.\n  const name = descriptor.serverName.replace(/^agent-native-/, \"\");\n  if (name) return name;\n  try {\n    const host = new URL(baseUrl).hostname;\n    const first = host.split(\".\")[0];\n    return first && first !== \"www\" ? first : \"app\";\n  } catch {\n    return \"app\";\n  }\n}\n"]}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEvE,MAAM,MAAM,WAAW,GACnB,OAAO,GACP,aAAa,GACb,QAAQ,GACR,IAAI,GACJ,QAAQ,GACR,UAAU,GACV,gBAAgB,CAAC;AACrB,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAC5C,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,aAAa,GAAG,aAAa,CAAC;AAEhE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC;IAC9B,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1E,aAAa,CAAC,EAAE,CACd,OAAO,EAAE,oBAAoB,KAC1B,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,kBAAkB,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC1E,wBAAwB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACzD,kBAAkB,CAAC,EAAE,CACnB,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC7B,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAC9E,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAChD;;;;OAIG;IACH,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,iBAAiB,EAAE,WAAW,EAAE,CAAC;IACjC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,UAAU,UAAU;IAClB,OAAO,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,aAAa,EAAE,OAAO,CAAC;IACvB,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,OAAO,CAAC;IACb,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,UAAU,YAAY,CAAC,CAAC,SAAS,MAAM;IACrC,KAAK,EAAE,CAAC,CAAC;IACT,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,WAAW,EAAE,CAAC;IAC9B,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,QAAQ,CAAC;CACvB;AAwDD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAiH7D;AAmGD,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE,IAAI,CACX,oBAAoB,EAClB,KAAK,GACL,eAAe,GACf,SAAS,GACT,cAAc,GACd,eAAe,GACf,aAAa,GACb,0BAA0B,GAC1B,oBAAoB,GACpB,gBAAgB,GAChB,kBAAkB,CAChB,GACL,OAAO,CAAC,IAAI,CAAC,CA4Kf;AAyBD,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAsN9B;AAg0BD,wBAAgB,eAAe,IAAI,MAAM,CAExC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEvE,MAAM,MAAM,WAAW,GACnB,OAAO,GACP,aAAa,GACb,QAAQ,GACR,IAAI,GACJ,QAAQ,GACR,UAAU,GACV,gBAAgB,CAAC;AACrB,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAC5C,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,aAAa,GAAG,aAAa,CAAC;AAEhE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC;IAC9B,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1E,aAAa,CAAC,EAAE,CACd,OAAO,EAAE,oBAAoB,KAC1B,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,kBAAkB,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC1E,wBAAwB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACzD,kBAAkB,CAAC,EAAE,CACnB,OAAO,EAAE,yBAAyB,KAC/B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC7B,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAC9E,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAChD;;;;OAIG;IACH,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,iBAAiB,EAAE,WAAW,EAAE,CAAC;IACjC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,UAAU,UAAU;IAClB,OAAO,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,aAAa,EAAE,OAAO,CAAC;IACvB,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,OAAO,CAAC;IACb,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,UAAU,YAAY,CAAC,CAAC,SAAS,MAAM;IACrC,KAAK,EAAE,CAAC,CAAC;IACT,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,WAAW,EAAE,CAAC;IAC9B,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,QAAQ,CAAC;CACvB;AAwDD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAiH7D;AAmGD,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE,IAAI,CACX,oBAAoB,EAClB,KAAK,GACL,eAAe,GACf,SAAS,GACT,cAAc,GACd,eAAe,GACf,aAAa,GACb,0BAA0B,GAC1B,oBAAoB,GACpB,gBAAgB,GAChB,kBAAkB,CAChB,GACL,OAAO,CAAC,IAAI,CAAC,CA4Kf;AAyBD,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAsN9B;AAo0BD,wBAAgB,eAAe,IAAI,MAAM,CAExC"}

package/dist/index.js

@@ -679,14 +679,18 @@ function resolvePlanMcpUrlOverride(input) {
     if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
         throw new Error("--mcp-url must use http:// or https://.");
     }
-    const mcpSuffix = "/_agent-native/mcp";
+    const publicMcpSuffix = "/mcp";
+    const legacyMcpSuffix = "/_agent-native/mcp";
     const trimmedPath = parsed.pathname.replace(/\/+$/, "");
-    const appPath = trimmedPath.endsWith(mcpSuffix)
+    const mcpSuffix = trimmedPath.endsWith(legacyMcpSuffix)
+        ? legacyMcpSuffix
+        : trimmedPath.endsWith(publicMcpSuffix)
+            ? publicMcpSuffix
+            : undefined;
+    const appPath = mcpSuffix
         ? trimmedPath.slice(0, -mcpSuffix.length)
         : trimmedPath;
-    const mcpPath = trimmedPath.endsWith(mcpSuffix)
-        ? trimmedPath
-        : `${trimmedPath || ""}${mcpSuffix}`;
+    const mcpPath = `${appPath || ""}${publicMcpSuffix}`;
     return {
         hostedUrl: `${parsed.origin}${appPath}`,
         mcpUrl: `${parsed.origin}${mcpPath}`,