@akon-labs/nexus-cli 0.1.8 → 0.1.10

package/dist/extensions/mcp/utils.js

@@ -0,0 +1,336 @@
+import { spawnSync } from "node:child_process";
+import { homedir, platform } from "node:os";
+import { extname, isAbsolute, join } from "node:path";
+async function execOpen(nexus, target, browser, signal) {
+    const os = platform();
+    if (os === "darwin") {
+        if (browser) {
+            // An absolute executable path (e.g. from $BROWSER) names a launcher
+            // binary. App bundles still go through `open -a`, which handles them.
+            return isAbsolute(browser) && extname(browser).toLowerCase() !== ".app"
+                ? nexus.exec(browser, [target], signal ? { signal } : {})
+                : nexus.exec("open", ["-a", browser, target], signal ? { signal } : {});
+        }
+        return nexus.exec("open", [target], signal ? { signal } : {});
+    }
+    if (os === "win32") {
+        return browser
+            ? nexus.exec("cmd", ["/c", "start", "", browser, target], signal ? { signal } : {})
+            : nexus.exec("cmd", ["/c", "start", "", target], signal ? { signal } : {});
+    }
+    return browser
+        ? nexus.exec(browser, [target], signal ? { signal } : {})
+        : nexus.exec("xdg-open", [target], signal ? { signal } : {});
+}
+export async function openUrl(nexus, url, browser, signal) {
+    const result = await execOpen(nexus, url, browser, signal);
+    if (result.code !== 0) {
+        throw new Error(result.stderr || `Failed to open browser (exit code ${result.code})`);
+    }
+}
+export async function openPath(nexus, targetPath) {
+    const result = await execOpen(nexus, targetPath);
+    if (result.code !== 0) {
+        throw new Error(result.stderr || `Failed to open path (exit code ${result.code})`);
+    }
+}
+export async function parallelLimit(items, limit, fn) {
+    const results = [];
+    const iterator = items.entries();
+    async function worker() {
+        while (true) {
+            const next = iterator.next();
+            if (next.done)
+                return;
+            const [index, item] = next.value;
+            results[index] = await fn(item);
+        }
+    }
+    const workers = Array(Math.min(limit, items.length))
+        .fill(null)
+        .map(() => worker());
+    await Promise.all(workers);
+    return results;
+}
+export function getConfigPathFromArgv() {
+    const idx = process.argv.indexOf("--mcp-config");
+    if (idx >= 0 && idx + 1 < process.argv.length) {
+        return process.argv[idx + 1];
+    }
+    return undefined;
+}
+export function interpolateEnvVars(value) {
+    return value
+        .replace(/\$\{(\w+)\}/g, (_, name) => process.env[name] ?? "")
+        .replace(/\$env:(\w+)/g, (_, name) => process.env[name] ?? "")
+        .replace(/\{env:(\w+)\}/g, (_, name) => process.env[name] ?? "");
+}
+function getMissingEnvVars(value) {
+    const missing = new Set();
+    for (const match of value.matchAll(/\$\{(\w+)\}|\$env:(\w+)|\{env:(\w+)\}/g)) {
+        const name = match[1] ?? match[2] ?? match[3];
+        if (name && process.env[name] === undefined) {
+            missing.add(name);
+        }
+    }
+    return [...missing];
+}
+export function toStringRecord(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return undefined;
+    const result = {};
+    for (const [key, entry] of Object.entries(value)) {
+        if (typeof entry === "string")
+            result[key] = entry;
+    }
+    return Object.keys(result).length > 0 ? result : undefined;
+}
+function interpolateSecretExpression(value) {
+    if (value.startsWith("!!"))
+        return interpolateEnvVars(value.slice(1));
+    return value.startsWith("!") ? value : interpolateEnvVars(value);
+}
+export function interpolateEnvRecord(values) {
+    if (!values)
+        return undefined;
+    return Object.fromEntries(Object.entries(values).map(([key, value]) => [key, interpolateSecretExpression(value)]));
+}
+const COMMAND_SECRET_TIMEOUT_MS = 10_000;
+const COMMAND_SECRET_MAX_OUTPUT_BYTES = 1024 * 1024;
+export function resolveCommandSecret(value, context) {
+    if (value === undefined)
+        return undefined;
+    if (value.startsWith("!!"))
+        return interpolateEnvVars(value.slice(1));
+    if (!value.startsWith("!"))
+        return interpolateEnvVars(value);
+    const result = spawnSync(value.slice(1), {
+        shell: true,
+        encoding: "utf8",
+        timeout: COMMAND_SECRET_TIMEOUT_MS,
+        maxBuffer: COMMAND_SECRET_MAX_OUTPUT_BYTES,
+        stdio: ["ignore", "pipe", "ignore"],
+        windowsHide: true,
+    });
+    if (result.error) {
+        const code = result.error.code;
+        const reason = code === "ETIMEDOUT"
+            ? "command timed out after 10 seconds"
+            : code === "ENOBUFS"
+                ? "command output exceeded 1 MiB"
+                : "command failed to start";
+        throw new Error(`Failed to resolve ${context}: ${reason}`);
+    }
+    if (result.status !== 0) {
+        throw new Error(`Failed to resolve ${context}: command exited with code ${result.status ?? "unknown"}`);
+    }
+    const resolved = result.stdout.trim();
+    if (!resolved)
+        throw new Error(`Failed to resolve ${context}: command returned empty output`);
+    return resolved;
+}
+/** Resolve command markers in a configured record without mutating the input. */
+export function resolveCommandSecretsRecord(values, context) {
+    if (!values)
+        return undefined;
+    return Object.fromEntries(Object.entries(values).map(([key, value]) => [key, resolveCommandSecret(value, context(key))]));
+}
+export function resolveServerUrl(definition) {
+    if (definition.url == null)
+        return undefined;
+    if (typeof definition.url !== "string") {
+        throw new Error("MCP server URL must be a string");
+    }
+    const missing = getMissingEnvVars(definition.url);
+    if (missing.length > 0) {
+        throw new Error(`Missing environment variable${missing.length === 1 ? "" : "s"} in MCP server URL: ${missing.join(", ")}`);
+    }
+    const resolved = interpolateEnvVars(definition.url);
+    try {
+        new URL(resolved);
+    }
+    catch (error) {
+        throw new Error(`Invalid MCP server URL after environment interpolation: ${resolved}`, { cause: error });
+    }
+    return resolved;
+}
+export function resolveConfigPath(value) {
+    if (value === undefined)
+        return undefined;
+    const resolved = interpolateEnvVars(value);
+    if (resolved === "~")
+        return homedir();
+    if (resolved.startsWith("~/") || resolved.startsWith("~\\")) {
+        return join(homedir(), resolved.slice(2));
+    }
+    return resolved;
+}
+export function resolveBearerToken(definition) {
+    if (definition.bearerToken !== undefined) {
+        return interpolateSecretExpression(definition.bearerToken);
+    }
+    return definition.bearerTokenEnv ? process.env[definition.bearerTokenEnv] : undefined;
+}
+/** Remove OSC control strings, including payloads that have no terminator. */
+export function stripOscSequences(text) {
+    let result = "";
+    let index = 0;
+    while (index < text.length) {
+        const isEscOsc = text.charCodeAt(index) === 0x1b && text[index + 1] === "]";
+        const isC1Osc = text.charCodeAt(index) === 0x9d;
+        if (!isEscOsc && !isC1Osc) {
+            result += text[index++];
+            continue;
+        }
+        index += isEscOsc ? 2 : 1;
+        while (index < text.length) {
+            const code = text.charCodeAt(index++);
+            if (code === 0x07 || code === 0x9c)
+                break;
+            if (code === 0x1b && text[index] === "\\") {
+                index++;
+                break;
+            }
+        }
+    }
+    return result;
+}
+export function sanitizeTerminalText(text) {
+    return stripOscSequences(text)
+        .replace(/(?:\x1b\[[0-?]*[ -/]*[@-~]|\x1b[@-Z\\-_])/g, "")
+        .replace(/[\u0000-\u001f\u007f-\u009f]+/g, " ")
+        .replace(/\s+/g, " ")
+        .trim();
+}
+export function formatTerminalError(error) {
+    const messages = [];
+    const seen = new Set();
+    const collect = (value) => {
+        if (seen.has(value))
+            return;
+        if ((typeof value === "object" && value !== null) || typeof value === "function")
+            seen.add(value);
+        if (value instanceof AggregateError) {
+            const countBefore = messages.length;
+            for (const nested of value.errors)
+                collect(nested);
+            if (value.cause !== undefined)
+                collect(value.cause);
+            if (messages.length === countBefore && value.message)
+                messages.push(value.message);
+            return;
+        }
+        if (value instanceof Error) {
+            if (value.message)
+                messages.push(value.message);
+            if (value.cause !== undefined)
+                collect(value.cause);
+            return;
+        }
+        messages.push(String(value));
+    };
+    collect(error);
+    return sanitizeTerminalText([...new Set(messages)].join(": "));
+}
+export function truncateAtWord(text, target) {
+    if (!text || text.length <= target)
+        return text;
+    const truncated = text.slice(0, target);
+    const lastSpace = truncated.lastIndexOf(" ");
+    if (lastSpace > target * 0.6) {
+        return `${truncated.slice(0, lastSpace)}...`;
+    }
+    return `${truncated}...`;
+}
+export function normalizeDirectToolInputSchema(schema) {
+    const inputSchema = schema && typeof schema === "object" && !Array.isArray(schema)
+        ? schema
+        : { type: "object", properties: {} };
+    const normalized = { ...inputSchema };
+    delete normalized.$schema;
+    delete normalized.additionalProperties;
+    return normalized;
+}
+export function normalizeToolArguments(value, context = "tool arguments") {
+    if (value === undefined || value === null || value === "")
+        return {};
+    if (typeof value === "string") {
+        const trimmed = value.trim();
+        if (trimmed === "")
+            return {};
+        let parsed;
+        try {
+            parsed = JSON.parse(trimmed);
+        }
+        catch (error) {
+            throw new Error(`${context}: invalid args JSON (${error instanceof SyntaxError ? error.message : String(error)}); ` +
+                `pass args as a JSON object, or as a valid JSON string encoding one`, { cause: error });
+        }
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+            throw new Error(`${context}: expected a JSON object, got ${Array.isArray(parsed) ? "array" : typeof parsed}`);
+        }
+        return parsed;
+    }
+    if (typeof value !== "object" || Array.isArray(value)) {
+        throw new Error(`${context}: expected a JSON object, got ${Array.isArray(value) ? "array" : typeof value}`);
+    }
+    assertJsonSerializable(value, context);
+    try {
+        return JSON.parse(JSON.stringify(value));
+    }
+    catch (error) {
+        throw new Error(`${context}: value is not JSON-serializable: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+    }
+}
+function assertJsonSerializable(value, context, path = "") {
+    if (value === null)
+        return;
+    if (typeof value === "string" || typeof value === "boolean")
+        return;
+    if (typeof value === "number") {
+        if (!Number.isFinite(value))
+            throw new Error(`${context}: value at ${path || "root"} is not a finite number`);
+        return;
+    }
+    if (Array.isArray(value)) {
+        for (const [index, item] of value.entries())
+            assertJsonSerializable(item, context, `${path}[${index}]`);
+        return;
+    }
+    if (typeof value === "object") {
+        if (Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null) {
+            throw new Error(`${context}: value at ${path || "root"} is not a plain JSON object`);
+        }
+        if (Object.getOwnPropertySymbols(value).length > 0) {
+            throw new Error(`${context}: value at ${path || "root"} has symbol keys`);
+        }
+        for (const [key, item] of Object.entries(value)) {
+            assertJsonSerializable(item, context, path ? `${path}.${key}` : key);
+        }
+        return;
+    }
+    throw new Error(`${context}: value at ${path || "root"} is not JSON-serializable`);
+}
+export function formatAuthRequiredMessage(config, serverName, defaultMessage) {
+    const template = config.settings?.authRequiredMessage;
+    return template ? template.replaceAll(`\${server}`, serverName) : defaultMessage;
+}
+export function formatMcpStatus(config, message) {
+    if (config.settings?.mcpFooterStatus === "off")
+        return undefined;
+    return `${config.settings?.showStatusIcon === false ? "MCP: " : "🔌 MCP: "}${message}`;
+}
+/**
+ * Extract the adapter-owned UI stream mode from tool metadata.
+ */
+export function extractToolUiStreamMode(toolMeta) {
+    const uiMeta = toolMeta?.ui;
+    if (!uiMeta || typeof uiMeta !== "object")
+        return undefined;
+    const streamMode = uiMeta["nexus-mcp.streamMode"];
+    if (streamMode === "eager" || streamMode === "stream-first") {
+        return streamMode;
+    }
+    return undefined;
+}
+//# sourceMappingURL=utils.js.map

package/dist/extensions/mcp/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/extensions/mcp/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAItD,KAAK,UAAU,QAAQ,CAAC,KAAmB,EAAE,MAAc,EAAE,OAAgB,EAAE,MAAoB,EAAE;IACpG,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IAEtB,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QACrB,IAAI,OAAO,EAAE,CAAC;YACb,oEAAoE;YACpE,sEAAsE;YACtE,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;gBACtE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO,OAAO;YACb,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,OAAO;QACb,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAAA,CAC9D;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAmB,EAAE,GAAW,EAAE,OAAgB,EAAE,MAAoB,EAAiB;IACtH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,qCAAqC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IACvF,CAAC;AAAA,CACD;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAmB,EAAE,UAAkB,EAAiB;IACtF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,kCAAkC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IACpF,CAAC;AAAA,CACD;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAO,KAAU,EAAE,KAAa,EAAE,EAA2B,EAAgB;IAC/G,MAAM,OAAO,GAAQ,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;IAEjC,KAAK,UAAU,MAAM,GAAG;QACvB,OAAO,IAAI,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO;YACtB,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;IAAA,CACD;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;SAClD,IAAI,CAAC,IAAI,CAAC;SACV,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IACtB,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC;AAAA,CACf;AAED,MAAM,UAAU,qBAAqB,GAAuB;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACjD,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/C,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAU;IACzD,OAAO,KAAK;SACV,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC7D,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC7D,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAAA,CAClE;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAY;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AAAA,CACpB;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAsC;IAClF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAElF,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CAC3D;AAED,SAAS,2BAA2B,CAAC,KAAa,EAAU;IAC3D,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAAA,CACjE;AAED,MAAM,UAAU,oBAAoB,CAAC,MAA0C,EAAsC;IACpH,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAAA,CACnH;AAED,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,+BAA+B,GAAG,IAAI,GAAG,IAAI,CAAC;AAMpD,MAAM,UAAU,oBAAoB,CAAC,KAAyB,EAAE,OAAe,EAAsB;IACpG,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACxC,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,yBAAyB;QAClC,SAAS,EAAE,+BAA+B;QAC1C,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;QACnC,WAAW,EAAE,IAAI;KACjB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,GAAI,MAAM,CAAC,KAA+B,CAAC,IAAI,CAAC;QAC1D,MAAM,MAAM,GACX,IAAI,KAAK,WAAW;YACnB,CAAC,CAAC,oCAAoC;YACtC,CAAC,CAAC,IAAI,KAAK,SAAS;gBACnB,CAAC,CAAC,+BAA+B;gBACjC,CAAC,CAAC,yBAAyB,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,KAAK,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,8BAA8B,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,iCAAiC,CAAC,CAAC;IAC9F,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,iFAAiF;AACjF,MAAM,UAAU,2BAA2B,CAC1C,MAA0C,EAC1C,OAAgC,EACK;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,OAAO,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC9F,CAAC;AAAA,CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAoC,EAAsB;IAC1F,IAAI,UAAU,CAAC,GAAG,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACd,+BAA+B,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,uBAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzG,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,2DAA2D,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAyB,EAAsB;IAChF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAE1C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACvC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,MAAM,UAAU,kBAAkB,CACjC,UAA+D,EAC1C;IACrB,IAAI,UAAU,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,2BAA2B,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CACtF;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAU;IACvD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;QAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;QAChD,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACxB,SAAS;QACV,CAAC;QAED,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAM;YAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3C,KAAK,EAAE,CAAC;gBACR,MAAM;YACP,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAU;IAC1D,OAAO,iBAAiB,CAAC,IAAI,CAAC;SAC5B,OAAO,CAAC,4CAA4C,EAAE,EAAE,CAAC;SACzD,OAAO,CAAC,gCAAgC,EAAE,GAAG,CAAC;SAC9C,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AAAA,CACT;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAU;IAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;IAChC,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QAC5B,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,UAAU;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAElG,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC;YACpC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM;gBAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACnD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnF,OAAO;QACR,CAAC;QACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpD,OAAO;QACR,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAAA,CAC7B,CAAC;IAEF,OAAO,CAAC,KAAK,CAAC,CAAC;IACf,OAAO,oBAAoB,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAAA,CAC/D;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,MAAc,EAAU;IACpE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC;IAEhD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAE7C,IAAI,SAAS,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC;QAC9B,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC;IAC9C,CAAC;IAED,OAAO,GAAG,SAAS,KAAK,CAAC;AAAA,CACzB;AAED,MAAM,UAAU,8BAA8B,CAAC,MAAe,EAA2B;IACxF,MAAM,WAAW,GAChB,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC7D,CAAC,CAAE,MAAkC;QACrC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;IACtC,OAAO,UAAU,CAAC,OAAO,CAAC;IAC1B,OAAO,UAAU,CAAC,oBAAoB,CAAC;IACvC,OAAO,UAAU,CAAC;AAAA,CAClB;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,OAAO,GAAG,gBAAgB,EAA2B;IAC3G,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAErE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC9B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACd,GAAG,OAAO,wBAAwB,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK;gBAClG,oEAAoE,EACrE,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,iCAAiC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;QAC/G,CAAC;QACD,OAAO,MAAiC,CAAC;IAC1C,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,iCAAiC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAA4B,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,GAAG,OAAO,qCAAqC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACvG,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;IACH,CAAC;AAAA,CACD;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,OAAe,EAAE,IAAI,GAAG,EAAE,EAAQ;IACjF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO;IACpE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,cAAc,IAAI,IAAI,MAAM,yBAAyB,CAAC,CAAC;QAC9G,OAAO;IACR,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE;YAAE,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;QACxG,OAAO;IACR,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,cAAc,IAAI,IAAI,MAAM,6BAA6B,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,cAAc,IAAI,IAAI,MAAM,kBAAkB,CAAC,CAAC;QAC3E,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,sBAAsB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,OAAO;IACR,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,cAAc,IAAI,IAAI,MAAM,2BAA2B,CAAC,CAAC;AAAA,CACnF;AAED,MAAM,UAAU,yBAAyB,CACxC,MAAmC,EACnC,UAAkB,EAClB,cAAsB,EACb;IACT,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACtD,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;AAAA,CACjF;AAED,MAAM,UAAU,eAAe,CAAC,MAAmC,EAAE,OAAe,EAAsB;IACzG,IAAI,MAAM,CAAC,QAAQ,EAAE,eAAe,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IACjE,OAAO,GAAG,MAAM,CAAC,QAAQ,EAAE,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAS,GAAG,OAAO,EAAE,CAAC;AAAA,CACtF;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACtC,QAA6C,EACN;IACvC,MAAM,MAAM,GAAG,QAAQ,EAAE,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,UAAU,GAAI,MAAkC,CAAC,sBAAsB,CAAC,CAAC;IAC/E,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;QAC7D,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB","sourcesContent":["import { spawnSync } from \"node:child_process\";\nimport { homedir, platform } from \"node:os\";\nimport { extname, isAbsolute, join } from \"node:path\";\nimport type { ExtensionAPI } from \"../../core/extensions/types.ts\";\nimport type { McpConfig, ServerEntry } from \"./types.ts\";\n\nasync function execOpen(nexus: ExtensionAPI, target: string, browser?: string, signal?: AbortSignal) {\n\tconst os = platform();\n\n\tif (os === \"darwin\") {\n\t\tif (browser) {\n\t\t\t// An absolute executable path (e.g. from $BROWSER) names a launcher\n\t\t\t// binary. App bundles still go through `open -a`, which handles them.\n\t\t\treturn isAbsolute(browser) && extname(browser).toLowerCase() !== \".app\"\n\t\t\t\t? nexus.exec(browser, [target], signal ? { signal } : {})\n\t\t\t\t: nexus.exec(\"open\", [\"-a\", browser, target], signal ? { signal } : {});\n\t\t}\n\t\treturn nexus.exec(\"open\", [target], signal ? { signal } : {});\n\t}\n\tif (os === \"win32\") {\n\t\treturn browser\n\t\t\t? nexus.exec(\"cmd\", [\"/c\", \"start\", \"\", browser, target], signal ? { signal } : {})\n\t\t\t: nexus.exec(\"cmd\", [\"/c\", \"start\", \"\", target], signal ? { signal } : {});\n\t}\n\treturn browser\n\t\t? nexus.exec(browser, [target], signal ? { signal } : {})\n\t\t: nexus.exec(\"xdg-open\", [target], signal ? { signal } : {});\n}\n\nexport async function openUrl(nexus: ExtensionAPI, url: string, browser?: string, signal?: AbortSignal): Promise<void> {\n\tconst result = await execOpen(nexus, url, browser, signal);\n\tif (result.code !== 0) {\n\t\tthrow new Error(result.stderr || `Failed to open browser (exit code ${result.code})`);\n\t}\n}\n\nexport async function openPath(nexus: ExtensionAPI, targetPath: string): Promise<void> {\n\tconst result = await execOpen(nexus, targetPath);\n\tif (result.code !== 0) {\n\t\tthrow new Error(result.stderr || `Failed to open path (exit code ${result.code})`);\n\t}\n}\n\nexport async function parallelLimit<T, R>(items: T[], limit: number, fn: (item: T) => Promise<R>): Promise<R[]> {\n\tconst results: R[] = [];\n\tconst iterator = items.entries();\n\n\tasync function worker() {\n\t\twhile (true) {\n\t\t\tconst next = iterator.next();\n\t\t\tif (next.done) return;\n\t\t\tconst [index, item] = next.value;\n\t\t\tresults[index] = await fn(item);\n\t\t}\n\t}\n\n\tconst workers = Array(Math.min(limit, items.length))\n\t\t.fill(null)\n\t\t.map(() => worker());\n\tawait Promise.all(workers);\n\treturn results;\n}\n\nexport function getConfigPathFromArgv(): string | undefined {\n\tconst idx = process.argv.indexOf(\"--mcp-config\");\n\tif (idx >= 0 && idx + 1 < process.argv.length) {\n\t\treturn process.argv[idx + 1];\n\t}\n\treturn undefined;\n}\n\nexport function interpolateEnvVars(value: string): string {\n\treturn value\n\t\t.replace(/\\$\\{(\\w+)\\}/g, (_, name) => process.env[name] ?? \"\")\n\t\t.replace(/\\$env:(\\w+)/g, (_, name) => process.env[name] ?? \"\")\n\t\t.replace(/\\{env:(\\w+)\\}/g, (_, name) => process.env[name] ?? \"\");\n}\n\nfunction getMissingEnvVars(value: string): string[] {\n\tconst missing = new Set<string>();\n\tfor (const match of value.matchAll(/\\$\\{(\\w+)\\}|\\$env:(\\w+)|\\{env:(\\w+)\\}/g)) {\n\t\tconst name = match[1] ?? match[2] ?? match[3];\n\t\tif (name && process.env[name] === undefined) {\n\t\t\tmissing.add(name);\n\t\t}\n\t}\n\treturn [...missing];\n}\n\nexport function toStringRecord(value: unknown): Record<string, string> | undefined {\n\tif (!value || typeof value !== \"object\" || Array.isArray(value)) return undefined;\n\n\tconst result: Record<string, string> = {};\n\tfor (const [key, entry] of Object.entries(value)) {\n\t\tif (typeof entry === \"string\") result[key] = entry;\n\t}\n\treturn Object.keys(result).length > 0 ? result : undefined;\n}\n\nfunction interpolateSecretExpression(value: string): string {\n\tif (value.startsWith(\"!!\")) return interpolateEnvVars(value.slice(1));\n\treturn value.startsWith(\"!\") ? value : interpolateEnvVars(value);\n}\n\nexport function interpolateEnvRecord(values: Record<string, string> | undefined): Record<string, string> | undefined {\n\tif (!values) return undefined;\n\n\treturn Object.fromEntries(Object.entries(values).map(([key, value]) => [key, interpolateSecretExpression(value)]));\n}\n\nconst COMMAND_SECRET_TIMEOUT_MS = 10_000;\nconst COMMAND_SECRET_MAX_OUTPUT_BYTES = 1024 * 1024;\n\n/** Resolve a secret value, executing only a single leading `!` command marker. */\nexport function resolveCommandSecret(value: string, context: string): string;\nexport function resolveCommandSecret(value: undefined, context: string): undefined;\nexport function resolveCommandSecret(value: string | undefined, context: string): string | undefined;\nexport function resolveCommandSecret(value: string | undefined, context: string): string | undefined {\n\tif (value === undefined) return undefined;\n\tif (value.startsWith(\"!!\")) return interpolateEnvVars(value.slice(1));\n\tif (!value.startsWith(\"!\")) return interpolateEnvVars(value);\n\n\tconst result = spawnSync(value.slice(1), {\n\t\tshell: true,\n\t\tencoding: \"utf8\",\n\t\ttimeout: COMMAND_SECRET_TIMEOUT_MS,\n\t\tmaxBuffer: COMMAND_SECRET_MAX_OUTPUT_BYTES,\n\t\tstdio: [\"ignore\", \"pipe\", \"ignore\"],\n\t\twindowsHide: true,\n\t});\n\tif (result.error) {\n\t\tconst code = (result.error as NodeJS.ErrnoException).code;\n\t\tconst reason =\n\t\t\tcode === \"ETIMEDOUT\"\n\t\t\t\t? \"command timed out after 10 seconds\"\n\t\t\t\t: code === \"ENOBUFS\"\n\t\t\t\t\t? \"command output exceeded 1 MiB\"\n\t\t\t\t\t: \"command failed to start\";\n\t\tthrow new Error(`Failed to resolve ${context}: ${reason}`);\n\t}\n\tif (result.status !== 0) {\n\t\tthrow new Error(`Failed to resolve ${context}: command exited with code ${result.status ?? \"unknown\"}`);\n\t}\n\n\tconst resolved = result.stdout.trim();\n\tif (!resolved) throw new Error(`Failed to resolve ${context}: command returned empty output`);\n\treturn resolved;\n}\n\n/** Resolve command markers in a configured record without mutating the input. */\nexport function resolveCommandSecretsRecord(\n\tvalues: Record<string, string> | undefined,\n\tcontext: (key: string) => string,\n): Record<string, string> | undefined {\n\tif (!values) return undefined;\n\n\treturn Object.fromEntries(\n\t\tObject.entries(values).map(([key, value]) => [key, resolveCommandSecret(value, context(key))]),\n\t);\n}\n\nexport function resolveServerUrl(definition: Pick<ServerEntry, \"url\">): string | undefined {\n\tif (definition.url == null) return undefined;\n\tif (typeof definition.url !== \"string\") {\n\t\tthrow new Error(\"MCP server URL must be a string\");\n\t}\n\n\tconst missing = getMissingEnvVars(definition.url);\n\tif (missing.length > 0) {\n\t\tthrow new Error(\n\t\t\t`Missing environment variable${missing.length === 1 ? \"\" : \"s\"} in MCP server URL: ${missing.join(\", \")}`,\n\t\t);\n\t}\n\n\tconst resolved = interpolateEnvVars(definition.url);\n\ttry {\n\t\tnew URL(resolved);\n\t} catch (error) {\n\t\tthrow new Error(`Invalid MCP server URL after environment interpolation: ${resolved}`, { cause: error });\n\t}\n\treturn resolved;\n}\n\nexport function resolveConfigPath(value: string | undefined): string | undefined {\n\tif (value === undefined) return undefined;\n\n\tconst resolved = interpolateEnvVars(value);\n\tif (resolved === \"~\") return homedir();\n\tif (resolved.startsWith(\"~/\") || resolved.startsWith(\"~\\\\\")) {\n\t\treturn join(homedir(), resolved.slice(2));\n\t}\n\treturn resolved;\n}\n\nexport function resolveBearerToken(\n\tdefinition: Pick<ServerEntry, \"bearerToken\" | \"bearerTokenEnv\">,\n): string | undefined {\n\tif (definition.bearerToken !== undefined) {\n\t\treturn interpolateSecretExpression(definition.bearerToken);\n\t}\n\treturn definition.bearerTokenEnv ? process.env[definition.bearerTokenEnv] : undefined;\n}\n\n/** Remove OSC control strings, including payloads that have no terminator. */\nexport function stripOscSequences(text: string): string {\n\tlet result = \"\";\n\tlet index = 0;\n\twhile (index < text.length) {\n\t\tconst isEscOsc = text.charCodeAt(index) === 0x1b && text[index + 1] === \"]\";\n\t\tconst isC1Osc = text.charCodeAt(index) === 0x9d;\n\t\tif (!isEscOsc && !isC1Osc) {\n\t\t\tresult += text[index++];\n\t\t\tcontinue;\n\t\t}\n\n\t\tindex += isEscOsc ? 2 : 1;\n\t\twhile (index < text.length) {\n\t\t\tconst code = text.charCodeAt(index++);\n\t\t\tif (code === 0x07 || code === 0x9c) break;\n\t\t\tif (code === 0x1b && text[index] === \"\\\\\") {\n\t\t\t\tindex++;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t}\n\t}\n\treturn result;\n}\n\nexport function sanitizeTerminalText(text: string): string {\n\treturn stripOscSequences(text)\n\t\t.replace(/(?:\\x1b\\[[0-?]*[ -/]*[@-~]|\\x1b[@-Z\\\\-_])/g, \"\")\n\t\t.replace(/[\\u0000-\\u001f\\u007f-\\u009f]+/g, \" \")\n\t\t.replace(/\\s+/g, \" \")\n\t\t.trim();\n}\n\nexport function formatTerminalError(error: unknown): string {\n\tconst messages: string[] = [];\n\tconst seen = new Set<unknown>();\n\tconst collect = (value: unknown) => {\n\t\tif (seen.has(value)) return;\n\t\tif ((typeof value === \"object\" && value !== null) || typeof value === \"function\") seen.add(value);\n\n\t\tif (value instanceof AggregateError) {\n\t\t\tconst countBefore = messages.length;\n\t\t\tfor (const nested of value.errors) collect(nested);\n\t\t\tif (value.cause !== undefined) collect(value.cause);\n\t\t\tif (messages.length === countBefore && value.message) messages.push(value.message);\n\t\t\treturn;\n\t\t}\n\t\tif (value instanceof Error) {\n\t\t\tif (value.message) messages.push(value.message);\n\t\t\tif (value.cause !== undefined) collect(value.cause);\n\t\t\treturn;\n\t\t}\n\t\tmessages.push(String(value));\n\t};\n\n\tcollect(error);\n\treturn sanitizeTerminalText([...new Set(messages)].join(\": \"));\n}\n\nexport function truncateAtWord(text: string, target: number): string {\n\tif (!text || text.length <= target) return text;\n\n\tconst truncated = text.slice(0, target);\n\tconst lastSpace = truncated.lastIndexOf(\" \");\n\n\tif (lastSpace > target * 0.6) {\n\t\treturn `${truncated.slice(0, lastSpace)}...`;\n\t}\n\n\treturn `${truncated}...`;\n}\n\nexport function normalizeDirectToolInputSchema(schema: unknown): Record<string, unknown> {\n\tconst inputSchema =\n\t\tschema && typeof schema === \"object\" && !Array.isArray(schema)\n\t\t\t? (schema as Record<string, unknown>)\n\t\t\t: { type: \"object\", properties: {} };\n\tconst normalized = { ...inputSchema };\n\tdelete normalized.$schema;\n\tdelete normalized.additionalProperties;\n\treturn normalized;\n}\n\nexport function normalizeToolArguments(value: unknown, context = \"tool arguments\"): Record<string, unknown> {\n\tif (value === undefined || value === null || value === \"\") return {};\n\n\tif (typeof value === \"string\") {\n\t\tconst trimmed = value.trim();\n\t\tif (trimmed === \"\") return {};\n\t\tlet parsed: unknown;\n\t\ttry {\n\t\t\tparsed = JSON.parse(trimmed);\n\t\t} catch (error) {\n\t\t\tthrow new Error(\n\t\t\t\t`${context}: invalid args JSON (${error instanceof SyntaxError ? error.message : String(error)}); ` +\n\t\t\t\t\t`pass args as a JSON object, or as a valid JSON string encoding one`,\n\t\t\t\t{ cause: error },\n\t\t\t);\n\t\t}\n\t\tif (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n\t\t\tthrow new Error(`${context}: expected a JSON object, got ${Array.isArray(parsed) ? \"array\" : typeof parsed}`);\n\t\t}\n\t\treturn parsed as Record<string, unknown>;\n\t}\n\n\tif (typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow new Error(`${context}: expected a JSON object, got ${Array.isArray(value) ? \"array\" : typeof value}`);\n\t}\n\n\tassertJsonSerializable(value, context);\n\ttry {\n\t\treturn JSON.parse(JSON.stringify(value)) as Record<string, unknown>;\n\t} catch (error) {\n\t\tthrow new Error(\n\t\t\t`${context}: value is not JSON-serializable: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t{ cause: error },\n\t\t);\n\t}\n}\n\nfunction assertJsonSerializable(value: unknown, context: string, path = \"\"): void {\n\tif (value === null) return;\n\tif (typeof value === \"string\" || typeof value === \"boolean\") return;\n\tif (typeof value === \"number\") {\n\t\tif (!Number.isFinite(value)) throw new Error(`${context}: value at ${path || \"root\"} is not a finite number`);\n\t\treturn;\n\t}\n\tif (Array.isArray(value)) {\n\t\tfor (const [index, item] of value.entries()) assertJsonSerializable(item, context, `${path}[${index}]`);\n\t\treturn;\n\t}\n\tif (typeof value === \"object\") {\n\t\tif (Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null) {\n\t\t\tthrow new Error(`${context}: value at ${path || \"root\"} is not a plain JSON object`);\n\t\t}\n\t\tif (Object.getOwnPropertySymbols(value).length > 0) {\n\t\t\tthrow new Error(`${context}: value at ${path || \"root\"} has symbol keys`);\n\t\t}\n\t\tfor (const [key, item] of Object.entries(value)) {\n\t\t\tassertJsonSerializable(item, context, path ? `${path}.${key}` : key);\n\t\t}\n\t\treturn;\n\t}\n\tthrow new Error(`${context}: value at ${path || \"root\"} is not JSON-serializable`);\n}\n\nexport function formatAuthRequiredMessage(\n\tconfig: Pick<McpConfig, \"settings\">,\n\tserverName: string,\n\tdefaultMessage: string,\n): string {\n\tconst template = config.settings?.authRequiredMessage;\n\treturn template ? template.replaceAll(`\\${server}`, serverName) : defaultMessage;\n}\n\nexport function formatMcpStatus(config: Pick<McpConfig, \"settings\">, message: string): string | undefined {\n\tif (config.settings?.mcpFooterStatus === \"off\") return undefined;\n\treturn `${config.settings?.showStatusIcon === false ? \"MCP: \" : \"🔌 MCP: \"}${message}`;\n}\n\n/**\n * Extract the adapter-owned UI stream mode from tool metadata.\n */\nexport function extractToolUiStreamMode(\n\ttoolMeta: Record<string, unknown> | undefined,\n): \"eager\" | \"stream-first\" | undefined {\n\tconst uiMeta = toolMeta?.ui;\n\tif (!uiMeta || typeof uiMeta !== \"object\") return undefined;\n\tconst streamMode = (uiMeta as Record<string, unknown>)[\"nexus-mcp.streamMode\"];\n\tif (streamMode === \"eager\" || streamMode === \"stream-first\") {\n\t\treturn streamMode;\n\t}\n\treturn undefined;\n}\n"]}

package/dist/extensions/subagent/index.d.ts

@@ -6,6 +6,7 @@
  * extension calls registerDelegateTaskTool(). The CLI owns process isolation
  * and streaming UX; the Hub owns one-time worker authorization and routing.
  */
+import * as fs from "node:fs";
 import type { AgentToolResult } from "@earendil-works/pi-agent-core";
 import type { ExtensionAPI } from "../../core/extensions/types.ts";
 import type { GitNexusConfig } from "../gitnexus/config.ts";
@@ -25,13 +26,12 @@ export declare const ROOT_REQUEST_ID_HEADER = "x-nexus-root-request-id";
 export declare const PARENT_REQUEST_ID_HEADER = "x-nexus-parent-request-id";
 export declare const DELEGATION_ID_HEADER = "x-nexus-delegation-id";
 export declare const REQUEST_SCOPE_HEADER = "x-nexus-request-scope";
-export declare const MAX_DELEGATED_TURNS = 12;
-export declare const MAX_DELEGATIONS_PER_RUN = 3;
+export declare const MAX_DELEGATED_TURNS = 50;
 export declare const DELEGATED_WORKER_TIMEOUT_MS: number;
 export declare const DELEGATED_OUTPUT_CAP_BYTES: number;
 export declare const DELEGATED_EVENT_CAP_BYTES: number;
 export declare const MAX_DELEGATED_TASK_BYTES: number;
-export declare const DELEGATED_WORKER_TOOLS: readonly ["read", "grep", "find", "ls", "bash", "write", "edit", "gitnexus_query", "gitnexus_context", "gitnexus_impact", "gitnexus_detect_changes", "gitnexus_cypher", "gitnexus_list_repos"];
+export declare const DELEGATED_WORKER_TOOLS: readonly ["read", "grep", "find", "ls", "bash", "write", "edit", "web_search", "gitnexus_query", "gitnexus_context", "gitnexus_impact", "gitnexus_detect_changes", "gitnexus_cypher", "gitnexus_list_repos"];
 export type DelegationStatus = "running" | "completed" | "failed" | "aborted" | "timeout" | "turn_limit" | "event_limit";
 export interface DelegationDetails {
     status: DelegationStatus;
@@ -96,6 +96,65 @@ export declare function createHubDelegationController(config: GitNexusConfig, op
     timeoutMs?: number;
 }): DelegationController;
 export declare function isDelegatedWorkerProcess(env?: NodeJS.ProcessEnv): boolean;
+export declare const DELEGATION_MODE_ENV = "NEXUS_DELEGATION_MODE";
+/**
+ * `NEXUS_DELEGATION_MODE=external` hands delegation to an external
+ * orchestrator (e.g. the pi-subagents package): delegate_task is not
+ * registered, so the model sees exactly one delegation surface. Worker-scope
+ * billing still works — children marked via the nexus-subagent-worker wrapper
+ * self-mint grants exactly like delegate_task workers do.
+ */
+export declare const BIG_MODEL_AGENTS_ENV = "NEXUS_BIG_MODEL_AGENTS";
+export declare const WORKER_SCOPE_ENV = "NEXUS_WORKER_SCOPE";
+export declare const PARENT_POLICY_ENV = "NEXUS_PARENT_POLICY";
+export declare const BUNDLED_SUBAGENTS_ENV = "NEXUS_BUNDLED_SUBAGENTS";
+export declare const BUNDLED_PACKAGES_ENV = "NEXUS_BUNDLED_PACKAGES";
+export declare const PI_SUBAGENT_CHILD_AGENT_ENV = "PI_SUBAGENT_CHILD_AGENT";
+export declare const PI_SUBAGENT_BINARY_ENV = "PI_SUBAGENT_PI_BINARY";
+export declare const DEFAULT_BIG_MODEL_AGENTS: readonly ["oracle"];
+/** pi-subagents ships inside the CLI unless bundled packages are switched off. */
+export declare function bundledSubagentsAvailable(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Delegation runs through the bundled pi-subagents tool by default; the
+ * legacy delegate_task worker is opt-in via NEXUS_DELEGATION_MODE=internal.
+ */
+export declare function isExternalDelegationMode(env?: NodeJS.ProcessEnv): boolean;
+/** Agents that keep billing the orchestrator deployment (big model). */
+export declare function bigModelAgents(env?: NodeJS.ProcessEnv): Set<string>;
+/**
+ * A process spawned by pi-subagents announces its agent in PI_SUBAGENT_CHILD_AGENT.
+ * Mark it as a delegated worker so every model turn self-mints a worker grant
+ * and bills the worker deployment. Big-model agents are explicitly unmarked,
+ * even when a marker was inherited from a worker parent (nested fan-out).
+ * Context is always regenerated: a worker deletes its own context before
+ * spawning tools, so nothing inherited is trustworthy.
+ */
+export declare function applyPiSubagentChildWorkerScope(env?: NodeJS.ProcessEnv, uuid?: () => string): boolean;
+/**
+ * The executable pi-subagents should spawn for children: this CLI itself.
+ * A compiled standalone binary is its own executable; under node/bun the
+ * built cli.js carries a shebang and the executable bit from the build.
+ */
+export declare function resolveBundledChildBinary(argv1?: string | undefined, execPath?: string, fsImpl?: Pick<typeof fs, "realpathSync" | "accessSync" | "constants">): string | undefined;
+export declare function applyBundledChildBinaryDefault(env?: NodeJS.ProcessEnv, resolved?: string | undefined): void;
+export declare const BLOCKED_ORCHESTRATOR_TOOLS: Set<string>;
+export declare const ORCHESTRATOR_GUIDANCE: string;
+export declare function isOrchestratorPolicyDisabled(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Orchestrator-side policy for bundled subagents: hard-block mutating tools
+ * (the cost guarantee — implementation always bills the worker deployment)
+ * and steer everything else by prompt. No read budget: reads and graph calls
+ * are cheap on cached input and capping them measurably hurt output quality.
+ */
+export declare function registerOrchestratorPolicy(pi: ExtensionAPI, env?: NodeJS.ProcessEnv): void;
+/**
+ * Nexus-branded aliases for the upstream pi-subagents env knobs: users set
+ * NEXUS_SUBAGENT_*, we copy onto the PI_SUBAGENT_* names the package reads.
+ * NEXUS_SUBAGENT_BINARY maps to PI_SUBAGENT_PI_BINARY (the child-spawn
+ * wrapper hook); every other NEXUS_SUBAGENT_X maps to PI_SUBAGENT_X.
+ * Explicit PI_* values always win — aliases never overwrite them.
+ */
+export declare function applyNexusSubagentEnvAliases(env?: NodeJS.ProcessEnv): void;
 /** Capture task routing once, then remove it before worker tools can inherit it. */
 export declare function consumeWorkerContext(env?: NodeJS.ProcessEnv): WorkerContext | undefined;
 export declare function runDelegatedWorker(options: DelegatedWorkerOptions): Promise<DelegatedWorkerResult>;