@agents-dev/cli 0.7.7

package/dist/core/mcpSecrets.js

@@ -0,0 +1,144 @@
+const PLACEHOLDER_PATTERN = /^\$\{[A-Z0-9_]+\}$/;
+const SECRET_KEY_PATTERN = /(secret|token|api[_-]?key|password|passphrase|authorization|auth|bearer)/i;
+const SECRET_VALUE_PATTERN = /^(sk-[A-Za-z0-9_-]{12,}|ghp_[A-Za-z0-9]{20,}|AIza[0-9A-Za-z_-]{20,}|eyJ[A-Za-z0-9_-]{10,})/;
+const SECRET_TEMPLATE_PATTERN = /(^\$\{[A-Z0-9_]+\}$|^ghp_x+$|^x{3,}$|token[_-]?here|your[_-]?(token|api[_-]?key|secret)|replace[_-]?me|changeme|example|placeholder|dummy|sample|<[^>]*(token|api[_-]?key|secret)[^>]*>$)/i;
+const SECRET_ARG_FLAG_PATTERN = /^--?(api[-_]?key|token|secret|password|passphrase|auth|authorization)$/i;
+export function isPlaceholderValue(value) {
+    return PLACEHOLDER_PATTERN.test(value);
+}
+export function isSecretLikeKey(key) {
+    return SECRET_KEY_PATTERN.test(key);
+}
+export function isSecretLikeLiteral(value) {
+    if (!value || isPlaceholderValue(value))
+        return false;
+    if (value.length >= 24 && !value.includes(' '))
+        return true;
+    return SECRET_VALUE_PATTERN.test(value);
+}
+export function isLikelyTemplateSecretValue(value) {
+    if (!value)
+        return true;
+    return SECRET_TEMPLATE_PATTERN.test(value);
+}
+export function isSecretArgFlag(flag) {
+    return SECRET_ARG_FLAG_PATTERN.test(flag);
+}
+export function inferSecretArgs(args) {
+    const secretIndexes = [];
+    for (let i = 0; i < args.length - 1; i += 1) {
+        if (!SECRET_ARG_FLAG_PATTERN.test(args[i]))
+            continue;
+        const value = args[i + 1];
+        if (value.startsWith('-'))
+            continue;
+        if (isPlaceholderValue(value))
+            continue;
+        secretIndexes.push(i + 1);
+    }
+    return [...new Set(secretIndexes)].sort((a, b) => a - b);
+}
+export function inferSecretKeyValues(values) {
+    const out = {};
+    for (const [key, value] of Object.entries(values ?? {})) {
+        if (!isSecretLikeKey(key))
+            continue;
+        if (isPlaceholderValue(value))
+            continue;
+        out[key] = value;
+    }
+    return out;
+}
+export function splitServerSecrets(input) {
+    const publicServer = JSON.parse(JSON.stringify(input.server));
+    const localOverride = {};
+    const secretEnv = input.secretEnv ?? {};
+    const secretEnvKeys = new Set([...Object.keys(secretEnv), ...(input.secretEnvKeys ?? [])]);
+    if (secretEnvKeys.size > 0) {
+        publicServer.env = { ...(publicServer.env ?? {}) };
+        const localEnv = {};
+        for (const key of [...secretEnvKeys].sort((a, b) => a.localeCompare(b))) {
+            publicServer.env[key] = toPlaceholder(input.name, `env_${key}`, key);
+            if (Object.prototype.hasOwnProperty.call(secretEnv, key)) {
+                localEnv[key] = secretEnv[key];
+            }
+        }
+        if (Object.keys(localEnv).length > 0) {
+            localOverride.env = localEnv;
+        }
+    }
+    const secretHeaders = input.secretHeaders ?? {};
+    const secretHeaderKeys = new Set([...Object.keys(secretHeaders), ...(input.secretHeaderKeys ?? [])]);
+    if (secretHeaderKeys.size > 0) {
+        publicServer.headers = { ...(publicServer.headers ?? {}) };
+        const localHeaders = {};
+        for (const key of [...secretHeaderKeys].sort((a, b) => a.localeCompare(b))) {
+            publicServer.headers[key] = toPlaceholder(input.name, `header_${key}`);
+            if (Object.prototype.hasOwnProperty.call(secretHeaders, key)) {
+                localHeaders[key] = secretHeaders[key];
+            }
+        }
+        if (Object.keys(localHeaders).length > 0) {
+            localOverride.headers = localHeaders;
+        }
+    }
+    const secretArgValues = new Map();
+    for (const entry of input.secretArgs ?? []) {
+        secretArgValues.set(entry.index, entry.value);
+    }
+    const secretArgIndexes = new Set([
+        ...secretArgValues.keys(),
+        ...(input.secretArgIndexes ?? [])
+    ]);
+    if (secretArgIndexes.size > 0) {
+        if (!publicServer.args || publicServer.args.length === 0) {
+            throw new Error('Cannot apply secret args to a server without args.');
+        }
+        const secretIndexesSorted = [...secretArgIndexes].sort((a, b) => a - b);
+        const localArgs = [...publicServer.args];
+        let hasLocalArgValues = false;
+        for (const index of secretIndexesSorted) {
+            if (index < 0 || index >= publicServer.args.length) {
+                throw new Error(`Secret arg index ${String(index)} is out of bounds for server "${input.name}".`);
+            }
+            publicServer.args[index] = toPlaceholder(input.name, `arg_${String(index)}`);
+            localArgs[index] = publicServer.args[index];
+            if (secretArgValues.has(index)) {
+                localArgs[index] = secretArgValues.get(index);
+                hasLocalArgValues = true;
+            }
+        }
+        if (hasLocalArgValues) {
+            localOverride.args = localArgs;
+        }
+    }
+    return {
+        publicServer,
+        localOverride: cleanupEmptyOverride(localOverride)
+    };
+}
+function cleanupEmptyOverride(override) {
+    const out = { ...override };
+    if (out.env && Object.keys(out.env).length === 0)
+        delete out.env;
+    if (out.headers && Object.keys(out.headers).length === 0)
+        delete out.headers;
+    if (out.args && out.args.length === 0)
+        delete out.args;
+    return out;
+}
+function toPlaceholder(serverName, suffix, preferredName) {
+    if (preferredName && /^[A-Z_][A-Z0-9_]*$/.test(preferredName)) {
+        return `\${${preferredName}}`;
+    }
+    const variable = `MCP_${sanitizeToken(serverName)}_${sanitizeToken(suffix)}`;
+    return `\${${variable}}`;
+}
+function sanitizeToken(value) {
+    return value
+        .toUpperCase()
+        .replace(/[^A-Z0-9]+/g, '_')
+        .replace(/^_+|_+$/g, '')
+        .replace(/_+/g, '_');
+}
+//# sourceMappingURL=mcpSecrets.js.map

package/dist/core/mcpSecrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpSecrets.js","sourceRoot":"","sources":["../../src/core/mcpSecrets.ts"],"names":[],"mappings":"AAEA,MAAM,mBAAmB,GAAG,oBAAoB,CAAA;AAChD,MAAM,kBAAkB,GAAG,2EAA2E,CAAA;AACtG,MAAM,oBAAoB,GAAG,4FAA4F,CAAA;AACzH,MAAM,uBAAuB,GAC3B,4LAA4L,CAAA;AAC9L,MAAM,uBAAuB,GAAG,yEAAyE,CAAA;AAYzG,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACxC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACrC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,CAAC,KAAK,IAAI,kBAAkB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrD,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3D,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC5C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC3C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,MAAM,aAAa,GAAa,EAAE,CAAA;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,SAAQ;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACzB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QACnC,IAAI,kBAAkB,CAAC,KAAK,CAAC;YAAE,SAAQ;QACvC,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAC3B,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;AAC1D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAA0C;IAC7E,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;YAAE,SAAQ;QACnC,IAAI,kBAAkB,CAAC,KAAK,CAAC;YAAE,SAAQ;QACvC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IAClB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KASlC;IACC,MAAM,YAAY,GAAwB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAwB,CAAA;IACzG,MAAM,aAAa,GAAiC,EAAE,CAAA;IAEtD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAA;IACvC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IAClG,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC3B,YAAY,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAA;QAClD,MAAM,QAAQ,GAA2B,EAAE,CAAA;QAC3C,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,CAAC,CAAA;YACpE,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;gBACzD,QAAQ,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;YAChC,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,aAAa,CAAC,GAAG,GAAG,QAAQ,CAAA;QAC9B,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,EAAE,CAAA;IAC/C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IAC5G,IAAI,gBAAgB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC9B,YAAY,CAAC,OAAO,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAA;QAC1D,MAAM,YAAY,GAA2B,EAAE,CAAA;QAC/C,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,EAAE,CAAC,CAAA;YACtE,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC7D,YAAY,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;YACxC,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,aAAa,CAAC,OAAO,GAAG,YAAY,CAAA;QACtC,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAA;IACjD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAC3C,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAC/C,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;QACvC,GAAG,eAAe,CAAC,IAAI,EAAE;QACzB,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC;KAClC,CAAC,CAAA;IACF,IAAI,gBAAgB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACvE,CAAC;QACD,MAAM,mBAAmB,GAAG,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACvE,MAAM,SAAS,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,iBAAiB,GAAG,KAAK,CAAA;QAC7B,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACxC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,iCAAiC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAA;YACnG,CAAC;YACD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC5E,SAAS,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC3C,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/B,SAAS,CAAC,KAAK,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAW,CAAA;gBACvD,iBAAiB,GAAG,IAAI,CAAA;YAC1B,CAAC;QACH,CAAC;QACD,IAAI,iBAAiB,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,GAAG,SAAS,CAAA;QAChC,CAAC;IACH,CAAC;IAED,OAAO;QACL,YAAY;QACZ,aAAa,EAAE,oBAAoB,CAAC,aAAa,CAAC;KACnD,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAsC;IAClE,MAAM,GAAG,GAAiC,EAAE,GAAG,QAAQ,EAAE,CAAA;IACzD,IAAI,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAA;IAChE,IAAI,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,OAAO,CAAA;IAC5E,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAA;IACtD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,UAAkB,EAAE,MAAc,EAAE,aAAsB;IAC/E,IAAI,aAAa,IAAI,oBAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9D,OAAO,MAAM,aAAa,GAAG,CAAA;IAC/B,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,aAAa,CAAC,UAAU,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAA;IAC5E,OAAO,MAAM,QAAQ,GAAG,CAAA;AAC1B,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;AACxB,CAAC"}

package/dist/core/mcpValidation.d.ts

@@ -0,0 +1,19 @@
+import type { AgentsConfig, IntegrationName, McpTransportType } from '../types.js';
+export declare function validateServerName(name: string): void;
+export declare function validateTransport(transport: string): McpTransportType;
+export declare function parseKeyValue(input: string, label: string): {
+    key: string;
+    value: string;
+};
+export declare function validateEnvKey(key: string, context?: string): void;
+export declare function validateHeaderKey(key: string, context?: string): void;
+export declare function parseSecretArg(input: string): {
+    index: number;
+    value: string;
+};
+export declare function parseTargetOptions(values: string[] | undefined): IntegrationName[];
+export declare function resolveDefaultTargets(config: AgentsConfig): {
+    targets: IntegrationName[];
+    warning?: string;
+};
+export declare function validateEnvValueForShell(key: string, value: string, context: string): void;

package/dist/core/mcpValidation.js

@@ -0,0 +1,78 @@
+import { INTEGRATION_IDS, parseIntegrationList } from '../integrations/registry.js';
+const SERVER_NAME_PATTERN = /^[a-zA-Z0-9_\-:.]+$/;
+const TRANSPORTS = ['stdio', 'http', 'sse'];
+const ENV_KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const HEADER_KEY_PATTERN = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
+export function validateServerName(name) {
+    if (!name.trim()) {
+        throw new Error('MCP server name cannot be empty.');
+    }
+    if (!SERVER_NAME_PATTERN.test(name)) {
+        throw new Error(`Invalid server name "${name}": must contain only alphanumeric characters, hyphens, underscores, colons, and dots`);
+    }
+    if (name.includes('..')) {
+        throw new Error(`Invalid server name "${name}": cannot contain ".."`);
+    }
+}
+export function validateTransport(transport) {
+    if (!TRANSPORTS.includes(transport)) {
+        throw new Error(`Unsupported MCP transport "${transport}". Allowed: ${TRANSPORTS.join(', ')}`);
+    }
+    return transport;
+}
+export function parseKeyValue(input, label) {
+    const idx = input.indexOf('=');
+    if (idx <= 0) {
+        throw new Error(`Invalid ${label} "${input}". Expected KEY=VALUE.`);
+    }
+    const key = input.slice(0, idx).trim();
+    const value = input.slice(idx + 1);
+    if (!key) {
+        throw new Error(`Invalid ${label} "${input}". Key cannot be empty.`);
+    }
+    return { key, value };
+}
+export function validateEnvKey(key, context = 'environment variable') {
+    if (!ENV_KEY_PATTERN.test(key)) {
+        throw new Error(`Invalid ${context} key "${key}": must match ${ENV_KEY_PATTERN.toString()}`);
+    }
+}
+export function validateHeaderKey(key, context = 'header') {
+    if (!HEADER_KEY_PATTERN.test(key)) {
+        throw new Error(`Invalid ${context} key "${key}": must match ${HEADER_KEY_PATTERN.toString()}`);
+    }
+}
+export function parseSecretArg(input) {
+    const parsed = parseKeyValue(input, 'secret arg');
+    const index = Number.parseInt(parsed.key, 10);
+    if (!Number.isInteger(index) || index < 0) {
+        throw new Error(`Invalid secret arg "${input}". Index must be a non-negative integer.`);
+    }
+    return { index, value: parsed.value };
+}
+export function parseTargetOptions(values) {
+    const flattened = (values ?? [])
+        .flatMap((value) => value.split(','))
+        .map((value) => value.trim())
+        .filter(Boolean);
+    if (flattened.length === 0)
+        return [];
+    return parseIntegrationList(flattened.join(','));
+}
+export function resolveDefaultTargets(config) {
+    if (config.integrations.enabled.length > 0) {
+        return { targets: [...new Set(config.integrations.enabled)] };
+    }
+    return {
+        targets: [...INTEGRATION_IDS],
+        warning: 'No integrations are enabled; defaulting MCP targets to all integrations.'
+    };
+}
+export function validateEnvValueForShell(key, value, context) {
+    // Arguments are passed via spawnSync without a shell, so punctuation is safe.
+    // We only reject control bytes that can break transport/CLI parsing.
+    if (/[\x00-\x1F\x7F]/.test(value)) {
+        throw new Error(`Invalid ${context} value for "${key}": contains control characters`);
+    }
+}
+//# sourceMappingURL=mcpValidation.js.map

package/dist/core/mcpValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpValidation.js","sourceRoot":"","sources":["../../src/core/mcpValidation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAEnF,MAAM,mBAAmB,GAAG,qBAAqB,CAAA;AACjD,MAAM,UAAU,GAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;AAC/D,MAAM,eAAe,GAAG,0BAA0B,CAAA;AAClD,MAAM,kBAAkB,GAAG,+BAA+B,CAAA;AAE1D,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,sFAAsF,CACnH,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,wBAAwB,CAAC,CAAA;IACvE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAA6B,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,eAAe,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,SAA6B,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,KAAa;IACxD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,KAAK,wBAAwB,CAAC,CAAA;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;IAClC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,KAAK,yBAAyB,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,OAAO,GAAG,sBAAsB;IAC1E,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,WAAW,OAAO,SAAS,GAAG,iBAAiB,eAAe,CAAC,QAAQ,EAAE,EAAE,CAC5E,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,OAAO,GAAG,QAAQ;IAC/D,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,WAAW,OAAO,SAAS,GAAG,iBAAiB,kBAAkB,CAAC,QAAQ,EAAE,EAAE,CAC/E,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,0CAA0C,CAAC,CAAA;IACzF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAA;AACvC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAA4B;IAC7D,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;SAC7B,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAA;IAClB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACrC,OAAO,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAClD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAoB;IAIxD,IAAI,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,CAAA;IAC/D,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,eAAe,CAAC;QAC7B,OAAO,EAAE,0EAA0E;KACpF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAW,EAAE,KAAa,EAAE,OAAe;IAClF,8EAA8E;IAC9E,qEAAqE;IACrE,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,WAAW,OAAO,eAAe,GAAG,gCAAgC,CAAC,CAAA;IACvF,CAAC;AACH,CAAC"}

package/dist/core/paths.d.ts

@@ -0,0 +1,37 @@
+export interface ProjectPaths {
+    root: string;
+    agentsDir: string;
+    agentsConfig: string;
+    agentsLocal: string;
+    rootAgentsMd: string;
+    agentsReadme: string;
+    agentsSkillsDir: string;
+    generatedDir: string;
+    generatedCodex: string;
+    generatedGemini: string;
+    generatedCopilot: string;
+    generatedCursor: string;
+    generatedAntigravity: string;
+    generatedClaude: string;
+    generatedClaudeState: string;
+    generatedCursorState: string;
+    generatedSkillsState: string;
+    generatedVscodeSettingsState: string;
+    generatedSyncLock: string;
+    codexConfig: string;
+    geminiSettings: string;
+    vscodeMcp: string;
+    vscodeSettings: string;
+    cursorMcp: string;
+    antigravityProjectMcp: string;
+    codexDir: string;
+    geminiDir: string;
+    vscodeDir: string;
+    cursorDir: string;
+    antigravityDir: string;
+    claudeDir: string;
+    geminiSkillsBridge: string;
+    claudeSkillsBridge: string;
+    cursorSkillsBridge: string;
+}
+export declare function getProjectPaths(projectRoot: string): ProjectPaths;

package/dist/core/paths.js

@@ -0,0 +1,43 @@
+import path from 'node:path';
+export function getProjectPaths(projectRoot) {
+    const root = path.resolve(projectRoot);
+    const agentsDir = path.join(root, '.agents');
+    const generatedDir = path.join(agentsDir, 'generated');
+    return {
+        root,
+        agentsDir,
+        agentsConfig: path.join(agentsDir, 'agents.json'),
+        agentsLocal: path.join(agentsDir, 'local.json'),
+        rootAgentsMd: path.join(root, 'AGENTS.md'),
+        agentsReadme: path.join(agentsDir, 'README.md'),
+        agentsSkillsDir: path.join(agentsDir, 'skills'),
+        generatedDir,
+        generatedCodex: path.join(generatedDir, 'codex.config.toml'),
+        generatedGemini: path.join(generatedDir, 'gemini.settings.json'),
+        generatedCopilot: path.join(generatedDir, 'copilot.vscode.mcp.json'),
+        generatedCursor: path.join(generatedDir, 'cursor.mcp.json'),
+        generatedAntigravity: path.join(generatedDir, 'antigravity.mcp.json'),
+        generatedClaude: path.join(generatedDir, 'claude.mcp.json'),
+        generatedClaudeState: path.join(generatedDir, 'claude.state.json'),
+        generatedCursorState: path.join(generatedDir, 'cursor.state.json'),
+        generatedSkillsState: path.join(generatedDir, 'skills.state.json'),
+        generatedVscodeSettingsState: path.join(generatedDir, 'vscode.settings.state.json'),
+        generatedSyncLock: path.join(generatedDir, 'sync.lock'),
+        codexConfig: path.join(root, '.codex', 'config.toml'),
+        geminiSettings: path.join(root, '.gemini', 'settings.json'),
+        vscodeMcp: path.join(root, '.vscode', 'mcp.json'),
+        vscodeSettings: path.join(root, '.vscode', 'settings.json'),
+        cursorMcp: path.join(root, '.cursor', 'mcp.json'),
+        antigravityProjectMcp: path.join(root, '.antigravity', 'mcp.json'),
+        codexDir: path.join(root, '.codex'),
+        geminiDir: path.join(root, '.gemini'),
+        vscodeDir: path.join(root, '.vscode'),
+        cursorDir: path.join(root, '.cursor'),
+        antigravityDir: path.join(root, '.antigravity'),
+        claudeDir: path.join(root, '.claude'),
+        geminiSkillsBridge: path.join(root, '.gemini', 'skills'),
+        claudeSkillsBridge: path.join(root, '.claude', 'skills'),
+        cursorSkillsBridge: path.join(root, '.cursor', 'skills')
+    };
+}
+//# sourceMappingURL=paths.js.map

package/dist/core/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/core/paths.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAuC5B,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IAEtD,OAAO;QACL,IAAI;QACJ,SAAS;QACT,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;QACjD,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;QAC/C,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC1C,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC;QAC/C,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC/C,YAAY;QACZ,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC;QAC5D,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC;QAChE,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,yBAAyB,CAAC;QACpE,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC;QAC3D,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC;QACrE,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC;QAC3D,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC;QAClE,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC;QAClE,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC;QAClE,4BAA4B,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,4BAA4B,CAAC;QACnF,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC;QACvD,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC;QACrD,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;QAC3D,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;QACjD,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;QAC3D,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;QACjD,qBAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,UAAU,CAAC;QAClE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QACnC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QACrC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QACrC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QACrC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;QAC/C,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QACrC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC;QACxD,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC;QACxD,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC;KACzD,CAAA;AACH,CAAC"}

package/dist/core/project.d.ts

@@ -0,0 +1,16 @@
+import type { AgentsConfig, IntegrationName, SyncMode } from '../types.js';
+export declare function initializeProjectSkeleton(args: {
+    projectRoot: string;
+    force: boolean;
+    integrations: IntegrationName[];
+    integrationOptions: AgentsConfig['integrations']['options'];
+    syncMode: SyncMode;
+    hideGeneratedInVscode: boolean;
+}): Promise<{
+    changed: string[];
+}>;
+export declare function updateProjectState(args: {
+    projectRoot: string;
+    config: AgentsConfig;
+}): Promise<void>;
+export declare function projectInitialized(projectRoot: string): Promise<boolean>;

package/dist/core/project.js

@@ -0,0 +1,34 @@
+import path from 'node:path';
+import { ensureDir, pathExists } from './fs.js';
+import { createDefaultAgentsConfig, saveAgentsConfig } from './config.js';
+import { getProjectPaths } from './paths.js';
+import { scaffoldBaseTemplates } from './templates.js';
+export async function initializeProjectSkeleton(args) {
+    const { projectRoot, force, integrations, integrationOptions, syncMode, hideGeneratedInVscode } = args;
+    const paths = getProjectPaths(projectRoot);
+    await ensureDir(paths.agentsDir);
+    await ensureDir(paths.generatedDir);
+    await ensureDir(paths.agentsSkillsDir);
+    const changed = [];
+    changed.push(...(await scaffoldBaseTemplates(projectRoot, force)));
+    const config = createDefaultAgentsConfig({
+        enabledIntegrations: integrations,
+        integrationOptions,
+        syncMode,
+        hideGenerated: hideGeneratedInVscode
+    });
+    if (force || !(await pathExists(paths.agentsConfig))) {
+        await saveAgentsConfig(projectRoot, config);
+        changed.push(path.relative(projectRoot, paths.agentsConfig) || paths.agentsConfig);
+    }
+    return { changed };
+}
+export async function updateProjectState(args) {
+    const { projectRoot, config } = args;
+    await saveAgentsConfig(projectRoot, config);
+}
+export async function projectInitialized(projectRoot) {
+    const paths = getProjectPaths(projectRoot);
+    return pathExists(paths.agentsConfig);
+}
+//# sourceMappingURL=project.js.map

package/dist/core/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/core/project.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAE5B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAC/C,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AAEtD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAO/C;IACC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAA;IAEtG,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAA;IAC1C,MAAM,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAChC,MAAM,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACnC,MAAM,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;IAEtC,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,qBAAqB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IAElE,MAAM,MAAM,GAAG,yBAAyB,CAAC;QACvC,mBAAmB,EAAE,YAAY;QACjC,kBAAkB;QAClB,QAAQ;QACR,aAAa,EAAE,qBAAqB;KACrC,CAAC,CAAA;IAEF,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,gBAAgB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;QAC3C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAA;IACpF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAA;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAGxC;IACC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IACpC,MAAM,gBAAgB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IAC1D,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,CAAA;IAC1C,OAAO,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;AACvC,CAAC"}

package/dist/core/renderers.d.ts

@@ -0,0 +1,14 @@
+import type { ResolvedMcpServer } from '../types.js';
+export interface RenderResult {
+    content: string;
+    warnings: string[];
+}
+export declare function renderCodexToml(servers: ResolvedMcpServer[]): RenderResult;
+export declare function renderGeminiServers(servers: ResolvedMcpServer[]): {
+    mcpServers: Record<string, unknown>;
+    warnings: string[];
+};
+export declare function renderVscodeMcp(servers: ResolvedMcpServer[]): {
+    servers: Record<string, unknown>;
+    warnings: string[];
+};

package/dist/core/renderers.js

@@ -0,0 +1,113 @@
+function escapeToml(value) {
+    return value.replaceAll('\\', '\\\\').replaceAll('"', '\\"');
+}
+function quoteTomlKey(key) {
+    return `"${escapeToml(key)}"`;
+}
+export function renderCodexToml(servers) {
+    const warnings = [];
+    const lines = ['# Generated by agents sync. Do not edit manually.', ''];
+    for (const server of servers) {
+        lines.push(`[mcp_servers.${quoteTomlKey(server.name)}]`);
+        if (server.transport === 'stdio') {
+            if (!server.command) {
+                warnings.push(`Server "${server.name}" has no command; skipped in Codex output.`);
+                lines.pop();
+                continue;
+            }
+            lines.push(`command = "${escapeToml(server.command)}"`);
+            lines.push(`args = [${(server.args ?? []).map((arg) => `"${escapeToml(arg)}"`).join(', ')}]`);
+        }
+        else {
+            if (!server.url) {
+                warnings.push(`Server "${server.name}" has no url; skipped in Codex output.`);
+                lines.pop();
+                continue;
+            }
+            if (server.transport === 'sse') {
+                warnings.push(`Server "${server.name}" uses legacy sse transport; rendering as URL for Codex compatibility.`);
+            }
+            lines.push(`url = "${escapeToml(server.url)}"`);
+        }
+        lines.push('enabled = true');
+        lines.push('autoApprove = []');
+        lines.push('');
+        if (server.env && Object.keys(server.env).length > 0) {
+            lines.push(`[mcp_servers.${quoteTomlKey(server.name)}.env]`);
+            for (const key of Object.keys(server.env).sort()) {
+                lines.push(`${quoteTomlKey(key)} = "${escapeToml(server.env[key])}"`);
+            }
+            lines.push('');
+        }
+        if (server.headers && Object.keys(server.headers).length > 0) {
+            lines.push(`[mcp_servers.${quoteTomlKey(server.name)}.http_headers]`);
+            for (const key of Object.keys(server.headers).sort()) {
+                lines.push(`${quoteTomlKey(key)} = "${escapeToml(server.headers[key])}"`);
+            }
+            lines.push('');
+        }
+    }
+    return {
+        content: `${lines.join('\n')}\n`,
+        warnings
+    };
+}
+export function renderGeminiServers(servers) {
+    const warnings = [];
+    const out = {};
+    for (const server of servers) {
+        if (server.transport === 'stdio') {
+            if (!server.command) {
+                warnings.push(`Server "${server.name}" has no command; skipped in Gemini output.`);
+                continue;
+            }
+            out[server.name] = {
+                type: 'stdio',
+                command: server.command,
+                args: server.args ?? [],
+                ...(server.env ? { env: server.env } : {})
+            };
+            continue;
+        }
+        if (!server.url) {
+            warnings.push(`Server "${server.name}" has no url; skipped in Gemini output.`);
+            continue;
+        }
+        out[server.name] = {
+            type: server.transport,
+            url: server.url,
+            ...(server.headers ? { headers: server.headers } : {})
+        };
+    }
+    return { mcpServers: out, warnings };
+}
+export function renderVscodeMcp(servers) {
+    const warnings = [];
+    const out = {};
+    for (const server of servers) {
+        if (server.transport === 'stdio') {
+            if (!server.command) {
+                warnings.push(`Server "${server.name}" has no command; skipped in VS Code MCP output.`);
+                continue;
+            }
+            out[server.name] = {
+                type: 'stdio',
+                command: server.command,
+                args: server.args ?? [],
+                ...(server.env ? { env: server.env } : {})
+            };
+            continue;
+        }
+        if (!server.url) {
+            warnings.push(`Server "${server.name}" has no url; skipped in VS Code MCP output.`);
+            continue;
+        }
+        out[server.name] = {
+            type: server.transport,
+            url: server.url,
+            ...(server.headers ? { headers: server.headers } : {})
+        };
+    }
+    return { servers: out, warnings };
+}
+//# sourceMappingURL=renderers.js.map

package/dist/core/renderers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderers.js","sourceRoot":"","sources":["../../src/core/renderers.ts"],"names":[],"mappings":"AAEA,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;AAC9D,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAA;AAC/B,CAAC;AAOD,MAAM,UAAU,eAAe,CAAC,OAA4B;IAC1D,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,KAAK,GAAa,CAAC,mDAAmD,EAAE,EAAE,CAAC,CAAA;IAEjF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,gBAAgB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAExD,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,4CAA4C,CAAC,CAAA;gBACjF,KAAK,CAAC,GAAG,EAAE,CAAA;gBACX,SAAQ;YACV,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,cAAc,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YACvD,KAAK,CAAC,IAAI,CACR,WAAW,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAClF,CAAA;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,wCAAwC,CAAC,CAAA;gBAC7E,KAAK,CAAC,GAAG,EAAE,CAAA;gBACX,SAAQ;YACV,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;gBAC/B,QAAQ,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,wEAAwE,CAAC,CAAA;YAC/G,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,UAAU,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACjD,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAC5B,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAEd,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,gBAAgB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjD,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;YACvE,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAChB,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,gBAAgB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;YACrE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;YAC3E,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QAChC,QAAQ;KACT,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA4B;IAI9D,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,GAAG,GAA4B,EAAE,CAAA;IAEvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,6CAA6C,CAAC,CAAA;gBAClF,SAAQ;YACV,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;gBACjB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;gBACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3C,CAAA;YACD,SAAQ;QACV,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,yCAAyC,CAAC,CAAA;YAC9E,SAAQ;QACV,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;YACjB,IAAI,EAAE,MAAM,CAAC,SAAS;YACtB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAA;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAA4B;IAI1D,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,GAAG,GAA4B,EAAE,CAAA;IAEvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,kDAAkD,CAAC,CAAA;gBACvF,SAAQ;YACV,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;gBACjB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;gBACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3C,CAAA;YACD,SAAQ;QACV,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,8CAA8C,CAAC,CAAA;YACnF,SAAQ;QACV,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;YACjB,IAAI,EAAE,MAAM,CAAC,SAAS;YACtB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAA;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAA;AACnC,CAAC"}

package/dist/core/shell.d.ts

@@ -0,0 +1,8 @@
+export interface ShellResult {
+    ok: boolean;
+    code: number;
+    stdout: string;
+    stderr: string;
+}
+export declare function runCommand(cmd: string, args: string[], cwd: string, timeoutMs?: number): ShellResult;
+export declare function commandExists(command: string): boolean;

package/dist/core/shell.js

@@ -0,0 +1,21 @@
+import { spawnSync } from 'node:child_process';
+export function runCommand(cmd, args, cwd, timeoutMs) {
+    const result = spawnSync(cmd, args, {
+        cwd,
+        encoding: 'utf8',
+        ...(timeoutMs !== undefined ? { timeout: timeoutMs } : {})
+    });
+    const stderr = result.stderr ?? (result.error ? String(result.error.message ?? result.error) : '');
+    return {
+        ok: (result.status ?? 1) === 0,
+        code: result.status ?? 1,
+        stdout: result.stdout ?? '',
+        stderr
+    };
+}
+export function commandExists(command) {
+    const probe = process.platform === 'win32' ? 'where' : 'which';
+    const result = spawnSync(probe, [command], { stdio: 'ignore' });
+    return (result.status ?? 1) === 0;
+}
+//# sourceMappingURL=shell.js.map

package/dist/core/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/core/shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAS9C,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,IAAc,EAAE,GAAW,EAAE,SAAkB;IACrF,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE;QAClC,GAAG;QACH,QAAQ,EAAE,MAAM;QAChB,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAElG,OAAO;QACL,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC;QAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,MAAM;KACP,CAAA;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAA;IAC9D,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC/D,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAA;AACnC,CAAC"}

package/dist/core/shellWords.d.ts

@@ -0,0 +1 @@
+export declare function parseShellWords(input: string): string[];