@alwaysmeticulous/cli 2.326.0 → 2.327.0

package/dist/commands/onboard/safe-repo-fs.js

@@ -0,0 +1,266 @@
+"use strict";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="96da1693-9282-57e0-8720-eb64652df868")}catch(e){}}();
+
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertNoSymlinksUnderSkillsTrees = exports.assertSafeSkillsInstallTargets = exports.prepareSafeSkillsInstallTargets = exports.SKILLS_INSTALL_FILE_TARGETS = exports.SKILLS_INSTALL_DIR_ROOTS = exports.isRealDirectoryInsideProject = exports.isPathInsideRoot = exports.normalizeRelativeRepoPath = exports.assertWorkspaceInsideProject = exports.copyFileSafeSync = exports.writeFileSafeSync = exports.mkdirSafeSync = exports.resolveSafeWritePath = exports.resolveRealProjectRoot = void 0;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const cli_user_error_1 = require("../../utils/cli-user-error");
+/**
+ * Resolves `projectRoot` to its real path. Call once at the start of onboard
+ * writes so subsequent checks share the same root.
+ */
+const resolveRealProjectRoot = (projectRoot) => {
+    const absolute = (0, path_1.resolve)(projectRoot);
+    if (!(0, fs_1.existsSync)(absolute)) {
+        throw new cli_user_error_1.CliUserError(`Project root does not exist: ${absolute}`);
+    }
+    const stat = (0, fs_1.lstatSync)(absolute);
+    if (stat.isSymbolicLink()) {
+        // Allow the root itself to be reached via a symlink (e.g. worktrees), but
+        // still pin writes to the real directory.
+    }
+    return (0, fs_1.realpathSync)(absolute);
+};
+exports.resolveRealProjectRoot = resolveRealProjectRoot;
+/**
+ * Resolves a repo-relative path for writing under `projectRoot`.
+ *
+ * Rejects absolute paths, `..` escapes, and any existing symlink on the path
+ * from the project root to the target (inclusive). That stops a
+ * repository-seeded symlink such as `.meticulous-onboard` → `~/.ssh` from
+ * redirecting onboard writes outside the repo.
+ */
+const resolveSafeWritePath = (projectRoot, relativePath) => {
+    const realRoot = (0, exports.resolveRealProjectRoot)(projectRoot);
+    const normalizedRelative = (0, exports.normalizeRelativeRepoPath)(relativePath);
+    const parts = normalizedRelative
+        .split("/")
+        .filter((part) => part.length > 0 && part !== ".");
+    let current = realRoot;
+    for (let index = 0; index < parts.length; index++) {
+        const next = (0, path_1.join)(current, parts[index]);
+        const stat = tryLstat(next);
+        if (!stat) {
+            current = (0, path_1.join)(current, ...parts.slice(index));
+            break;
+        }
+        // Use lstat (not existsSync) so broken symlinks are still rejected.
+        if (stat.isSymbolicLink()) {
+            const display = parts.slice(0, index + 1).join("/");
+            throw new cli_user_error_1.CliUserError(`Refusing to write through symlink at '${display}'. ` +
+                `Remove or replace it, then re-run \`meticulous onboard\`.`);
+        }
+        if (stat.isDirectory()) {
+            current = (0, fs_1.realpathSync)(next);
+            if (!(0, exports.isPathInsideRoot)(realRoot, current)) {
+                throw new cli_user_error_1.CliUserError(`Refusing to write outside the project root via '${parts.slice(0, index + 1).join("/")}'.`);
+            }
+            continue;
+        }
+        // Existing non-directory leaf (regular file, etc.): must be the final part.
+        if (index !== parts.length - 1) {
+            throw new cli_user_error_1.CliUserError(`Refusing to write under non-directory path '${parts.slice(0, index + 1).join("/")}'.`);
+        }
+        current = next;
+    }
+    if (!(0, exports.isPathInsideRoot)(realRoot, current)) {
+        throw new cli_user_error_1.CliUserError(`Refusing to write outside the project root: ${relativePath}`);
+    }
+    return current;
+};
+exports.resolveSafeWritePath = resolveSafeWritePath;
+const mkdirSafeSync = (projectRoot, relativePath) => {
+    const absolute = (0, exports.resolveSafeWritePath)(projectRoot, relativePath);
+    (0, fs_1.mkdirSync)(absolute, { recursive: true });
+    // Re-check after create: a race could theoretically replace a component, but
+    // more importantly ensure we didn't land on a symlink somehow.
+    assertNoSymlinkAt(projectRoot, relativePath);
+    return absolute;
+};
+exports.mkdirSafeSync = mkdirSafeSync;
+const writeFileSafeSync = (projectRoot, relativePath, data) => {
+    (0, exports.resolveSafeWritePath)(projectRoot, relativePath);
+    const parentRelative = (0, path_1.dirname)((0, exports.normalizeRelativeRepoPath)(relativePath));
+    if (parentRelative !== "." && parentRelative !== "") {
+        (0, exports.mkdirSafeSync)(projectRoot, parentRelative);
+    }
+    // Re-resolve after parents exist so a symlink planted on a parent is caught.
+    const target = (0, exports.resolveSafeWritePath)(projectRoot, relativePath);
+    (0, fs_1.writeFileSync)(target, data);
+    return target;
+};
+exports.writeFileSafeSync = writeFileSafeSync;
+const copyFileSafeSync = (projectRoot, relativePath, sourceAbsolutePath) => {
+    const parentRelative = (0, path_1.dirname)((0, exports.normalizeRelativeRepoPath)(relativePath));
+    if (parentRelative !== "." && parentRelative !== "") {
+        (0, exports.mkdirSafeSync)(projectRoot, parentRelative);
+    }
+    const target = (0, exports.resolveSafeWritePath)(projectRoot, relativePath);
+    (0, fs_1.copyFileSync)(sourceAbsolutePath, target);
+    return target;
+};
+exports.copyFileSafeSync = copyFileSafeSync;
+/**
+ * Asserts that `workspaceDir` is the onboard workspace under `projectRoot`
+ * (or a realpath-equivalent path inside it), not an escaped location.
+ */
+const assertWorkspaceInsideProject = (projectRoot, workspaceDir) => {
+    const realRoot = (0, exports.resolveRealProjectRoot)(projectRoot);
+    if (!(0, fs_1.existsSync)(workspaceDir)) {
+        throw new cli_user_error_1.CliUserError(`Onboard workspace does not exist: ${workspaceDir}`);
+    }
+    if ((0, fs_1.lstatSync)(workspaceDir).isSymbolicLink()) {
+        throw new cli_user_error_1.CliUserError(`Refusing to use symlink onboard workspace at '${workspaceDir}'.`);
+    }
+    const realWorkspace = (0, fs_1.realpathSync)(workspaceDir);
+    if (!(0, exports.isPathInsideRoot)(realRoot, realWorkspace)) {
+        throw new cli_user_error_1.CliUserError(`Onboard workspace escapes the project root: ${workspaceDir}`);
+    }
+    return realWorkspace;
+};
+exports.assertWorkspaceInsideProject = assertWorkspaceInsideProject;
+const assertNoSymlinkAt = (projectRoot, relativePath) => {
+    (0, exports.resolveSafeWritePath)(projectRoot, relativePath);
+};
+const normalizeRelativeRepoPath = (relativePath) => {
+    if (relativePath.length === 0 || relativePath === ".") {
+        throw new cli_user_error_1.CliUserError("Refusing empty write path under the project root.");
+    }
+    if ((0, path_1.isAbsolute)(relativePath)) {
+        throw new cli_user_error_1.CliUserError(`Refusing absolute write path: ${relativePath}`);
+    }
+    const normalized = (0, path_1.normalize)(relativePath).replace(/\\/g, "/");
+    if (normalized === ".." ||
+        normalized.startsWith("../") ||
+        normalized.split("/").includes("..")) {
+        throw new cli_user_error_1.CliUserError(`Refusing path escape: ${relativePath}`);
+    }
+    return normalized.replace(/^\.\//u, "");
+};
+exports.normalizeRelativeRepoPath = normalizeRelativeRepoPath;
+const isPathInsideRoot = (root, candidate) => {
+    const relativeToRoot = (0, path_1.relative)(root, candidate);
+    return (relativeToRoot === "" ||
+        (!relativeToRoot.startsWith(`..${path_1.sep}`) &&
+            relativeToRoot !== ".." &&
+            !(0, path_1.isAbsolute)(relativeToRoot)));
+};
+exports.isPathInsideRoot = isPathInsideRoot;
+const tryLstat = (path) => {
+    try {
+        return (0, fs_1.lstatSync)(path);
+    }
+    catch {
+        return null;
+    }
+};
+/**
+ * True when `absolutePath` is a real (non-symlink) directory whose realpath
+ * stays inside the project root. Used by app discovery so a repo-seeded
+ * symlink cannot be selected as an onboard target.
+ */
+const isRealDirectoryInsideProject = (projectRoot, absolutePath) => {
+    const realRoot = (0, exports.resolveRealProjectRoot)(projectRoot);
+    const stat = tryLstat(absolutePath);
+    if (!stat || stat.isSymbolicLink() || !stat.isDirectory()) {
+        return false;
+    }
+    let realCandidate;
+    try {
+        realCandidate = (0, fs_1.realpathSync)(absolutePath);
+    }
+    catch {
+        return false;
+    }
+    return (0, exports.isPathInsideRoot)(realRoot, realCandidate);
+};
+exports.isRealDirectoryInsideProject = isRealDirectoryInsideProject;
+/**
+ * Paths the skills installer may create or write under. We must reject
+ * repo-seeded symlinks here *before* handing control to the external
+ * installer — validating only `.claude` is not enough.
+ */
+exports.SKILLS_INSTALL_DIR_ROOTS = [
+    ".claude",
+    ".agents",
+    ".cursor",
+];
+exports.SKILLS_INSTALL_FILE_TARGETS = ["skills-lock.json"];
+/**
+ * Rejects symlinks on every path the skills installer may write through, then
+ * creates the destination directory roots as real directories inside the repo.
+ * Also walks any pre-existing nested entries under each agent's skills tree —
+ * a real `skills` dir with a last-component symlink like
+ * `.claude/skills/<name> -> ~/.ssh` would otherwise let the installer write
+ * outside the project while the shallow check still passes.
+ */
+const prepareSafeSkillsInstallTargets = (projectRoot) => {
+    for (const file of exports.SKILLS_INSTALL_FILE_TARGETS) {
+        // Throws if the path (or any parent component) is a symlink.
+        (0, exports.resolveSafeWritePath)(projectRoot, file);
+    }
+    for (const dir of exports.SKILLS_INSTALL_DIR_ROOTS) {
+        (0, exports.mkdirSafeSync)(projectRoot, dir);
+        (0, exports.mkdirSafeSync)(projectRoot, (0, path_1.join)(dir, "skills"));
+    }
+    (0, exports.assertNoSymlinksUnderSkillsTrees)(projectRoot);
+};
+exports.prepareSafeSkillsInstallTargets = prepareSafeSkillsInstallTargets;
+/**
+ * Re-checks skills install destinations after an external installer runs, so a
+ * TOCTOU symlink plant during the install cannot go unnoticed — including
+ * nested last-component symlinks under each agent's skills tree.
+ */
+const assertSafeSkillsInstallTargets = (projectRoot) => {
+    for (const file of exports.SKILLS_INSTALL_FILE_TARGETS) {
+        (0, exports.resolveSafeWritePath)(projectRoot, file);
+    }
+    for (const dir of exports.SKILLS_INSTALL_DIR_ROOTS) {
+        (0, exports.resolveSafeWritePath)(projectRoot, dir);
+        (0, exports.resolveSafeWritePath)(projectRoot, (0, path_1.join)(dir, "skills"));
+    }
+    (0, exports.assertNoSymlinksUnderSkillsTrees)(projectRoot);
+};
+exports.assertSafeSkillsInstallTargets = assertSafeSkillsInstallTargets;
+/**
+ * Recursively rejects any symlink under `.claude/skills`, `.agents/skills`,
+ * and `.cursor/skills`. Matches `resolveSafeWritePath`: any symlink is refused,
+ * not only ones that currently resolve outside the repo.
+ */
+const assertNoSymlinksUnderSkillsTrees = (projectRoot) => {
+    const realRoot = (0, exports.resolveRealProjectRoot)(projectRoot);
+    for (const dir of exports.SKILLS_INSTALL_DIR_ROOTS) {
+        const relativeSkills = (0, path_1.join)(dir, "skills").replace(/\\/g, "/");
+        const absoluteSkills = (0, path_1.join)(realRoot, dir, "skills");
+        assertNoSymlinksUnderDirectory(absoluteSkills, relativeSkills);
+    }
+};
+exports.assertNoSymlinksUnderSkillsTrees = assertNoSymlinksUnderSkillsTrees;
+const assertNoSymlinksUnderDirectory = (absoluteDir, relativeDisplay) => {
+    const dirStat = tryLstat(absoluteDir);
+    if (!dirStat) {
+        return;
+    }
+    if (dirStat.isSymbolicLink()) {
+        throw new cli_user_error_1.CliUserError(`Refusing to write through symlink at '${relativeDisplay}'. ` +
+            `Remove or replace it, then re-run \`meticulous onboard\`.`);
+    }
+    if (!dirStat.isDirectory()) {
+        return;
+    }
+    for (const entry of (0, fs_1.readdirSync)(absoluteDir, { withFileTypes: true })) {
+        const childRelative = `${relativeDisplay}/${entry.name}`;
+        // Check symlink before isDirectory(): a symlink-to-dir can report as both
+        // depending on platform / Node version.
+        if (entry.isSymbolicLink()) {
+            throw new cli_user_error_1.CliUserError(`Refusing to write through symlink at '${childRelative}'. ` +
+                `Remove or replace it, then re-run \`meticulous onboard\`.`);
+        }
+        if (entry.isDirectory()) {
+            assertNoSymlinksUnderDirectory((0, path_1.join)(absoluteDir, entry.name), childRelative);
+        }
+    }
+};
+//# sourceMappingURL=safe-repo-fs.js.map
+//# debugId=96da1693-9282-57e0-8720-eb64652df868

package/dist/commands/onboard/safe-repo-fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-repo-fs.js","sources":["../../../src/commands/onboard/safe-repo-fs.ts"],"sourceRoot":"","names":[],"mappings":";;;;;AAAA,2BAQY;AACZ,+BAQc;AACd,+DAA0D;AAE1D;;;GAGG;AACI,MAAM,sBAAsB,GAAG,CAAC,WAAmB,EAAU,EAAE;IACpE,MAAM,QAAQ,GAAG,IAAA,cAAO,EAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,6BAAY,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,cAAS,EAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,0EAA0E;QAC1E,0CAA0C;IAC5C,CAAC;IACD,OAAO,IAAA,iBAAY,EAAC,QAAQ,CAAC,CAAC;AAChC,CAAC,CAAC;AAXW,QAAA,sBAAsB,0BAWjC;AAEF;;;;;;;GAOG;AACI,MAAM,oBAAoB,GAAG,CAClC,WAAmB,EACnB,YAAoB,EACZ,EAAE;IACV,MAAM,QAAQ,GAAG,IAAA,8BAAsB,EAAC,WAAW,CAAC,CAAC;IACrD,MAAM,kBAAkB,GAAG,IAAA,iCAAyB,EAAC,YAAY,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,kBAAkB;SAC7B,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;IAErD,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,GAAG,IAAA,WAAI,EAAC,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/C,MAAM;QACR,CAAC;QAED,oEAAoE;QACpE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpD,MAAM,IAAI,6BAAY,CACpB,yCAAyC,OAAO,KAAK;gBACnD,2DAA2D,CAC9D,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,OAAO,GAAG,IAAA,iBAAY,EAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAA,wBAAgB,EAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,6BAAY,CACpB,mDAAmD,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAC3F,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;QAED,4EAA4E;QAC5E,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,6BAAY,CACpB,+CAA+C,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CACvF,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,IAAI,CAAC,IAAA,wBAAgB,EAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,6BAAY,CACpB,+CAA+C,YAAY,EAAE,CAC9D,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAtDW,QAAA,oBAAoB,wBAsD/B;AAEK,MAAM,aAAa,GAAG,CAC3B,WAAmB,EACnB,YAAoB,EACZ,EAAE;IACV,MAAM,QAAQ,GAAG,IAAA,4BAAoB,EAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACjE,IAAA,cAAS,EAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,6EAA6E;IAC7E,+DAA+D;IAC/D,iBAAiB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC7C,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAVW,QAAA,aAAa,iBAUxB;AAEK,MAAM,iBAAiB,GAAG,CAC/B,WAAmB,EACnB,YAAoB,EACpB,IAAqC,EAC7B,EAAE;IACV,IAAA,4BAAoB,EAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,IAAA,cAAO,EAAC,IAAA,iCAAyB,EAAC,YAAY,CAAC,CAAC,CAAC;IACxE,IAAI,cAAc,KAAK,GAAG,IAAI,cAAc,KAAK,EAAE,EAAE,CAAC;QACpD,IAAA,qBAAa,EAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC7C,CAAC;IACD,6EAA6E;IAC7E,MAAM,MAAM,GAAG,IAAA,4BAAoB,EAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC/D,IAAA,kBAAa,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAdW,QAAA,iBAAiB,qBAc5B;AAEK,MAAM,gBAAgB,GAAG,CAC9B,WAAmB,EACnB,YAAoB,EACpB,kBAA0B,EAClB,EAAE;IACV,MAAM,cAAc,GAAG,IAAA,cAAO,EAAC,IAAA,iCAAyB,EAAC,YAAY,CAAC,CAAC,CAAC;IACxE,IAAI,cAAc,KAAK,GAAG,IAAI,cAAc,KAAK,EAAE,EAAE,CAAC;QACpD,IAAA,qBAAa,EAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,4BAAoB,EAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC/D,IAAA,iBAAY,EAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAZW,QAAA,gBAAgB,oBAY3B;AAEF;;;GAGG;AACI,MAAM,4BAA4B,GAAG,CAC1C,WAAmB,EACnB,YAAoB,EACZ,EAAE;IACV,MAAM,QAAQ,GAAG,IAAA,8BAAsB,EAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,IAAA,eAAU,EAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,6BAAY,CAAC,qCAAqC,YAAY,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,IAAA,cAAS,EAAC,YAAY,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,6BAAY,CACpB,iDAAiD,YAAY,IAAI,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,IAAA,iBAAY,EAAC,YAAY,CAAC,CAAC;IACjD,IAAI,CAAC,IAAA,wBAAgB,EAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,6BAAY,CACpB,+CAA+C,YAAY,EAAE,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC,CAAC;AApBW,QAAA,4BAA4B,gCAoBvC;AAEF,MAAM,iBAAiB,GAAG,CAAC,WAAmB,EAAE,YAAoB,EAAQ,EAAE;IAC5E,IAAA,4BAAoB,EAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AAClD,CAAC,CAAC;AAEK,MAAM,yBAAyB,GAAG,CAAC,YAAoB,EAAU,EAAE;IACxE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,KAAK,GAAG,EAAE,CAAC;QACtD,MAAM,IAAI,6BAAY,CAAC,mDAAmD,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,IAAA,iBAAU,EAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,6BAAY,CAAC,iCAAiC,YAAY,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,UAAU,GAAG,IAAA,gBAAS,EAAC,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC/D,IACE,UAAU,KAAK,IAAI;QACnB,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;QAC5B,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EACpC,CAAC;QACD,MAAM,IAAI,6BAAY,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC,CAAC;AAhBW,QAAA,yBAAyB,6BAgBpC;AAEK,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,SAAiB,EAAW,EAAE;IAC3E,MAAM,cAAc,GAAG,IAAA,eAAQ,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACjD,OAAO,CACL,cAAc,KAAK,EAAE;QACrB,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,UAAG,EAAE,CAAC;YACrC,cAAc,KAAK,IAAI;YACvB,CAAC,IAAA,iBAAU,EAAC,cAAc,CAAC,CAAC,CAC/B,CAAC;AACJ,CAAC,CAAC;AARW,QAAA,gBAAgB,oBAQ3B;AAEF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE;IAChC,IAAI,CAAC;QACH,OAAO,IAAA,cAAS,EAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF;;;;GAIG;AACI,MAAM,4BAA4B,GAAG,CAC1C,WAAmB,EACnB,YAAoB,EACX,EAAE;IACX,MAAM,QAAQ,GAAG,IAAA,8BAAsB,EAAC,WAAW,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,IAAA,iBAAY,EAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAA,wBAAgB,EAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AACnD,CAAC,CAAC;AAhBW,QAAA,4BAA4B,gCAgBvC;AAEF;;;;GAIG;AACU,QAAA,wBAAwB,GAAG;IACtC,SAAS;IACT,SAAS;IACT,SAAS;CACD,CAAC;AAEE,QAAA,2BAA2B,GAAG,CAAC,kBAAkB,CAAU,CAAC;AAEzE;;;;;;;GAOG;AACI,MAAM,+BAA+B,GAAG,CAAC,WAAmB,EAAQ,EAAE;IAC3E,KAAK,MAAM,IAAI,IAAI,mCAA2B,EAAE,CAAC;QAC/C,6DAA6D;QAC7D,IAAA,4BAAoB,EAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,gCAAwB,EAAE,CAAC;QAC3C,IAAA,qBAAa,EAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAChC,IAAA,qBAAa,EAAC,WAAW,EAAE,IAAA,WAAI,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,IAAA,wCAAgC,EAAC,WAAW,CAAC,CAAC;AAChD,CAAC,CAAC;AAZW,QAAA,+BAA+B,mCAY1C;AAEF;;;;GAIG;AACI,MAAM,8BAA8B,GAAG,CAAC,WAAmB,EAAQ,EAAE;IAC1E,KAAK,MAAM,IAAI,IAAI,mCAA2B,EAAE,CAAC;QAC/C,IAAA,4BAAoB,EAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,gCAAwB,EAAE,CAAC;QAC3C,IAAA,4BAAoB,EAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACvC,IAAA,4BAAoB,EAAC,WAAW,EAAE,IAAA,WAAI,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,IAAA,wCAAgC,EAAC,WAAW,CAAC,CAAC;AAChD,CAAC,CAAC;AATW,QAAA,8BAA8B,kCASzC;AAEF;;;;GAIG;AACI,MAAM,gCAAgC,GAAG,CAAC,WAAmB,EAAQ,EAAE;IAC5E,MAAM,QAAQ,GAAG,IAAA,8BAAsB,EAAC,WAAW,CAAC,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,gCAAwB,EAAE,CAAC;QAC3C,MAAM,cAAc,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,IAAA,WAAI,EAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrD,8BAA8B,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC;AAPW,QAAA,gCAAgC,oCAO3C;AAEF,MAAM,8BAA8B,GAAG,CACrC,WAAmB,EACnB,eAAuB,EACjB,EAAE;IACR,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,6BAAY,CACpB,yCAAyC,eAAe,KAAK;YAC3D,2DAA2D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,IAAA,gBAAW,EAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,MAAM,aAAa,GAAG,GAAG,eAAe,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACzD,0EAA0E;QAC1E,wCAAwC;QACxC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,6BAAY,CACpB,yCAAyC,aAAa,KAAK;gBACzD,2DAA2D,CAC9D,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,8BAA8B,CAC5B,IAAA,WAAI,EAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,EAC7B,aAAa,CACd,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC","debugId":"96da1693-9282-57e0-8720-eb64652df868"}

package/dist/commands/onboard/setup-agent-integrations.d.ts

@@ -0,0 +1,43 @@
+export declare const METICULOUS_MCP_URL = "https://app.meticulous.ai/api/mcp";
+/**
+ * Registry package + pinned version for the `skills` CLI. Must never be
+ * resolved from the customer repo's node_modules (see installSkills).
+ */
+export declare const SKILLS_CLI_PACKAGE_SPEC = "skills@1.5.22";
+/** Args after the skills CLI entry — shared with the retry hint. */
+export declare const SKILLS_ADD_ARGS: readonly ["add", "alwaysmeticulous/skills", "--skill", "*", "--agent", "claude-code", "--agent", "codex", "--agent", "cursor", "--copy", "-y"];
+/** Paths the CLI may create for agent integrations — include these in the PR. */
+export declare const AGENT_INTEGRATION_PATHS: readonly [".claude/skills/", ".agents/skills/", ".cursor/skills/", "skills-lock.json", ".mcp.json", ".cursor/mcp.json", ".codex/config.toml"];
+export declare const setupAgentIntegrations: (options: {
+    projectRoot: string;
+}) => string[];
+export declare const installSkills: (projectRoot: string) => boolean;
+/**
+ * Drops env vars that can redirect Node/npm resolution or inject code into
+ * the child. The customer repo stays as cwd for install destinations, so we
+ * must not inherit hooks that run before the trusted CLI entry.
+ *
+ * Installing from a temp cwd is not enough on its own: running onboard through
+ * `npm run` / `pnpm exec` exports the repo's `.npmrc` as `npm_config_*`, which
+ * takes precedence over cwd, and prepends `node_modules/.bin` to PATH so even
+ * `npm` itself could be repo-controlled. Dropping both falls back to the
+ * developer's own user and global npm config, which is trusted.
+ */
+export declare const sanitizeSkillsInstallEnv: (env: NodeJS.ProcessEnv) => NodeJS.ProcessEnv;
+/**
+ * Installs the pinned registry `skills` package into a fresh temp prefix and
+ * returns the absolute path to its CLI entry. Callers must invoke `cleanup`
+ * (including on failure after a successful materialize).
+ */
+export declare const materializeTrustedSkillsCli: () => {
+    cliEntry: string;
+    cleanup: () => void;
+};
+/** Writes the canonical Meticulous MCP config into Claude/Cursor/Codex files. */
+export declare const ensureProjectMcp: (projectRoot: string) => void;
+/**
+ * True only when `existing` is a plain object with exactly the same keys and
+ * primitive values as `expected` (no extras, no nesting surprises).
+ */
+export declare const isExactJsonServerConfig: (existing: unknown, expected: Record<string, unknown>) => boolean;
+//# sourceMappingURL=setup-agent-integrations.d.ts.map

package/dist/commands/onboard/setup-agent-integrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-agent-integrations.d.ts","sourceRoot":"","sources":["../../../src/commands/onboard/setup-agent-integrations.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,kBAAkB,sCAAsC,CAAC;AAEtE;;;GAGG;AACH,eAAO,MAAM,uBAAuB,kBAAkB,CAAC;AAEvD,oEAAoE;AACpE,eAAO,MAAM,eAAe,gJAalB,CAAC;AAEX,iFAAiF;AACjF,eAAO,MAAM,uBAAuB,+IAQ1B,CAAC;AAEX,eAAO,MAAM,sBAAsB,YAAa;IAC9C,WAAW,EAAE,MAAM,CAAC;CACrB,KAAG,MAAM,EAuBT,CAAC;AAEF,eAAO,MAAM,aAAa,gBAAiB,MAAM,KAAG,OAwDnD,CAAC;AAMF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,QAC9B,MAAM,CAAC,UAAU,KACrB,MAAM,CAAC,UAyBT,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,QAAO;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,IAAI,CAAC;CA6CrB,CAAC;AA+BF,iFAAiF;AACjF,eAAO,MAAM,gBAAgB,gBAAiB,MAAM,KAAG,IAkDtD,CAAC;AAuFF;;;GAGG;AACH,eAAO,MAAM,uBAAuB,aACxB,OAAO,YACP,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAChC,OAcF,CAAC"}

package/dist/commands/onboard/setup-agent-integrations.js

@@ -0,0 +1,324 @@
+"use strict";
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d86e4f01-f4b3-5d15-b551-8b7f879cf289")}catch(e){}}();
+
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isExactJsonServerConfig = exports.ensureProjectMcp = exports.materializeTrustedSkillsCli = exports.sanitizeSkillsInstallEnv = exports.installSkills = exports.setupAgentIntegrations = exports.AGENT_INTEGRATION_PATHS = exports.SKILLS_ADD_ARGS = exports.SKILLS_CLI_PACKAGE_SPEC = exports.METICULOUS_MCP_URL = void 0;
+const child_process_1 = require("child_process");
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+const chalk_1 = __importDefault(require("chalk"));
+const cli_user_error_1 = require("../../utils/cli-user-error");
+const codex_mcp_1 = require("./codex-mcp");
+const safe_repo_fs_1 = require("./safe-repo-fs");
+exports.METICULOUS_MCP_URL = "https://app.meticulous.ai/api/mcp";
+/**
+ * Registry package + pinned version for the `skills` CLI. Must never be
+ * resolved from the customer repo's node_modules (see installSkills).
+ */
+exports.SKILLS_CLI_PACKAGE_SPEC = "skills@1.5.22";
+/** Args after the skills CLI entry — shared with the retry hint. */
+exports.SKILLS_ADD_ARGS = [
+    "add",
+    "alwaysmeticulous/skills",
+    "--skill",
+    "*",
+    "--agent",
+    "claude-code",
+    "--agent",
+    "codex",
+    "--agent",
+    "cursor",
+    "--copy",
+    "-y",
+];
+/** Paths the CLI may create for agent integrations — include these in the PR. */
+exports.AGENT_INTEGRATION_PATHS = [
+    ".claude/skills/",
+    ".agents/skills/",
+    ".cursor/skills/",
+    "skills-lock.json",
+    ".mcp.json",
+    ".cursor/mcp.json",
+    ".codex/config.toml",
+];
+const setupAgentIntegrations = (options) => {
+    console.log(chalk_1.default.bold("Setting up Meticulous agent integrations…"));
+    // Install skills for all supported agents so the onboarding PR is useful
+    // regardless of which tool teammates use later.
+    const skillsInstalled = (0, exports.installSkills)(options.projectRoot);
+    installProjectMcp(options.projectRoot);
+    const created = listExistingIntegrationPaths(options.projectRoot, skillsInstalled);
+    if (created.length > 0) {
+        console.log(chalk_1.default.dim(`  These files should be included in the onboarding PR:\n${created
+            .map((p) => `    - ${p}`)
+            .join("\n")}`));
+    }
+    console.log("");
+    return created;
+};
+exports.setupAgentIntegrations = setupAgentIntegrations;
+const installSkills = (projectRoot) => {
+    // Reject repo-seeded symlinks on every path the skills installer may write
+    // (`.claude`, `.agents`, `.cursor`, `skills-lock.json`), then create those
+    // directory roots as real dirs before handing control to the installer.
+    (0, safe_repo_fs_1.prepareSafeSkillsInstallTargets)(projectRoot);
+    // Never `npx skills` with cwd=projectRoot: npx prefers a repo-local
+    // `node_modules/.bin/skills` (or a `file:` dependency) over the registry,
+    // so an untrusted repo could run arbitrary code before any agent sandbox.
+    // Materialize the registry CLI into a throwaway prefix, then invoke it by
+    // absolute path via `node`.
+    let trustedCli = null;
+    let result;
+    try {
+        trustedCli = (0, exports.materializeTrustedSkillsCli)();
+        result = (0, child_process_1.spawnSync)(process.execPath, [trustedCli.cliEntry, ...exports.SKILLS_ADD_ARGS], {
+            cwd: projectRoot,
+            stdio: "inherit",
+            env: (0, exports.sanitizeSkillsInstallEnv)(process.env),
+        });
+    }
+    catch (error) {
+        const detail = error instanceof Error ? `: ${error.message}` : `: ${String(error)}`;
+        console.log(chalk_1.default.yellow(`  Could not install Meticulous skills${detail}. Continuing without them.`));
+        console.log(chalk_1.default.dim(`  Retry: ${skillsInstallRetryHint(projectRoot)}`));
+        (0, safe_repo_fs_1.assertSafeSkillsInstallTargets)(projectRoot);
+        return false;
+    }
+    finally {
+        trustedCli?.cleanup();
+    }
+    // Always re-check after the installer — a failed or partial install can
+    // still plant a symlink escape on a destination we pre-created.
+    (0, safe_repo_fs_1.assertSafeSkillsInstallTargets)(projectRoot);
+    if (result.error || result.status !== 0) {
+        const detail = result.error ? `: ${result.error.message}` : "";
+        console.log(chalk_1.default.yellow(`  Could not install Meticulous skills${detail}. Continuing without them.`));
+        console.log(chalk_1.default.dim(`  Retry: ${skillsInstallRetryHint(projectRoot)}`));
+        return false;
+    }
+    console.log(chalk_1.default.green("  ✓ Installed Meticulous skills"));
+    return true;
+};
+exports.installSkills = installSkills;
+/** Matches a `node_modules/.bin` PATH entry, on either path separator. */
+const isPackageBinPathEntry = (entry) => /(?:^|[\\/])node_modules[\\/]\.bin[\\/]?$/u.test(entry.trim());
+/**
+ * Drops env vars that can redirect Node/npm resolution or inject code into
+ * the child. The customer repo stays as cwd for install destinations, so we
+ * must not inherit hooks that run before the trusted CLI entry.
+ *
+ * Installing from a temp cwd is not enough on its own: running onboard through
+ * `npm run` / `pnpm exec` exports the repo's `.npmrc` as `npm_config_*`, which
+ * takes precedence over cwd, and prepends `node_modules/.bin` to PATH so even
+ * `npm` itself could be repo-controlled. Dropping both falls back to the
+ * developer's own user and global npm config, which is trusted.
+ */
+const sanitizeSkillsInstallEnv = (env) => {
+    const next = { ...env };
+    delete next.NODE_OPTIONS;
+    delete next.NODE_PATH;
+    for (const key of Object.keys(next)) {
+        if (/^npm_config_/iu.test(key)) {
+            delete next[key];
+            continue;
+        }
+        // Windows spells it `Path`, so match case-insensitively.
+        if (key.toUpperCase() !== "PATH") {
+            continue;
+        }
+        const value = next[key];
+        if (typeof value !== "string") {
+            continue;
+        }
+        next[key] = value
+            .split(path_1.delimiter)
+            .filter((entry) => entry.length > 0 && !isPackageBinPathEntry(entry))
+            .join(path_1.delimiter);
+    }
+    return next;
+};
+exports.sanitizeSkillsInstallEnv = sanitizeSkillsInstallEnv;
+/**
+ * Installs the pinned registry `skills` package into a fresh temp prefix and
+ * returns the absolute path to its CLI entry. Callers must invoke `cleanup`
+ * (including on failure after a successful materialize).
+ */
+const materializeTrustedSkillsCli = () => {
+    const tempDir = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), "meticulous-skills-cli-"));
+    const cleanup = () => {
+        (0, fs_1.rmSync)(tempDir, { recursive: true, force: true });
+    };
+    const install = (0, child_process_1.spawnSync)("npm", [
+        "install",
+        "--ignore-scripts",
+        "--no-save",
+        "--prefix",
+        tempDir,
+        exports.SKILLS_CLI_PACKAGE_SPEC,
+    ], {
+        // Install outside the customer repo so a local `skills` package cannot
+        // satisfy the request.
+        cwd: tempDir,
+        encoding: "utf8",
+        env: (0, exports.sanitizeSkillsInstallEnv)(process.env),
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    if (install.error || install.status !== 0) {
+        cleanup();
+        const stderr = (install.stderr ?? "").toString().trim();
+        const detail = install.error?.message ??
+            (stderr.length > 0 ? stderr : `npm exited ${install.status}`);
+        throw new Error(`failed to download ${exports.SKILLS_CLI_PACKAGE_SPEC}: ${detail}`);
+    }
+    const cliEntry = (0, path_1.join)(tempDir, "node_modules", "skills", "bin", "cli.mjs");
+    if (!(0, fs_1.existsSync)(cliEntry)) {
+        cleanup();
+        throw new Error(`${exports.SKILLS_CLI_PACKAGE_SPEC} installed without bin/cli.mjs at ${cliEntry}`);
+    }
+    return { cliEntry, cleanup };
+};
+exports.materializeTrustedSkillsCli = materializeTrustedSkillsCli;
+const shellQuote = (value) => `'${value.replace(/'/g, `'\\''`)}'`;
+/**
+ * Paste-able equivalent of the install above. The download must run from the
+ * temp prefix, never the repo: npm reads `.npmrc` from its cwd, so a repo one
+ * could point `skills` at a customer-controlled registry. Only the CLI entry
+ * runs from the repo, since that is where skills get written.
+ */
+const skillsInstallRetryHint = (projectRoot) => {
+    const prefix = '"$prefix"';
+    const addArgs = exports.SKILLS_ADD_ARGS.map(shellQuote).join(" ");
+    return (`prefix="${"${TMPDIR:-/tmp}"}/meticulous-skills-cli" && mkdir -p ${prefix} && ` +
+        `(cd ${prefix} && npm install --ignore-scripts --no-save --prefix ${prefix} ${exports.SKILLS_CLI_PACKAGE_SPEC}) && ` +
+        `(cd ${shellQuote(projectRoot)} && node ${prefix}/node_modules/skills/bin/cli.mjs ${addArgs})`);
+};
+const installProjectMcp = (projectRoot) => {
+    // Always attempt every MCP config file. A parse/shape failure on one must
+    // not skip the others — otherwise a poisoned `.mcp.json` can leave an
+    // attacker-controlled `command`/`args` Meticulous server in Cursor/Codex.
+    // Any failure aborts onboard (via CliUserError); silently continuing would
+    // leave unsanitized MCP config under the official name.
+    (0, exports.ensureProjectMcp)(projectRoot);
+    console.log(chalk_1.default.green("  ✓ Added project-scoped Meticulous MCP"));
+};
+/** Writes the canonical Meticulous MCP config into Claude/Cursor/Codex files. */
+const ensureProjectMcp = (projectRoot) => {
+    const failures = [];
+    const attempts = [
+        {
+            label: ".mcp.json",
+            run: () => mergeJsonMcp(projectRoot, ".mcp.json", {
+                type: "http",
+                url: exports.METICULOUS_MCP_URL,
+            }),
+        },
+        {
+            label: ".cursor/mcp.json",
+            run: () => mergeJsonMcp(projectRoot, (0, path_1.join)(".cursor", "mcp.json"), {
+                url: exports.METICULOUS_MCP_URL,
+            }),
+        },
+        {
+            label: ".codex/config.toml",
+            run: () => (0, codex_mcp_1.mergeCodexMcp)(projectRoot, (0, path_1.join)(".codex", "config.toml"), exports.METICULOUS_MCP_URL),
+        },
+    ];
+    for (const attempt of attempts) {
+        try {
+            attempt.run();
+        }
+        catch (error) {
+            failures.push(error instanceof Error
+                ? error.message
+                : `${attempt.label}: ${String(error)}`);
+        }
+    }
+    if (failures.length > 0) {
+        throw new cli_user_error_1.CliUserError([
+            "Could not safely configure the Meticulous MCP server in every agent config.",
+            "Fix or remove the failing file(s), then re-run `meticulous onboard`:",
+            ...failures.map((message) => `  - ${message}`),
+        ].join("\n"));
+    }
+};
+exports.ensureProjectMcp = ensureProjectMcp;
+const listExistingIntegrationPaths = (projectRoot, skillsInstalled) => {
+    const found = [];
+    for (const path of exports.AGENT_INTEGRATION_PATHS) {
+        if (!skillsInstalled && isPrecreatedSkillsDirPath(path)) {
+            continue;
+        }
+        const absolute = (0, path_1.join)(projectRoot, path);
+        if ((0, fs_1.existsSync)(absolute)) {
+            found.push(path);
+        }
+    }
+    return found;
+};
+const isPrecreatedSkillsDirPath = (path) => path === ".claude/skills/" ||
+    path === ".agents/skills/" ||
+    path === ".cursor/skills/";
+const mergeJsonMcp = (projectRoot, relativePath, serverConfig) => {
+    const absolutePath = (0, safe_repo_fs_1.resolveSafeWritePath)(projectRoot, relativePath);
+    let config = {};
+    if ((0, fs_1.existsSync)(absolutePath)) {
+        let parsed;
+        try {
+            parsed = JSON.parse((0, fs_1.readFileSync)(absolutePath, "utf8"));
+        }
+        catch {
+            throw new cli_user_error_1.CliUserError(`Refusing to update '${relativePath}': file is not valid JSON. ` +
+                `Fix or remove it, then re-run \`meticulous onboard\`.`);
+        }
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+            throw new cli_user_error_1.CliUserError(`Refusing to update '${relativePath}': top-level value must be a JSON object.`);
+        }
+        config = parsed;
+    }
+    const existingServers = config["mcpServers"];
+    if (existingServers !== undefined &&
+        (!existingServers ||
+            typeof existingServers !== "object" ||
+            Array.isArray(existingServers))) {
+        throw new cli_user_error_1.CliUserError(`Refusing to update '${relativePath}': mcpServers must be a JSON object.`);
+    }
+    const mcpServers = (existingServers ?? {});
+    // Only trust a pre-existing entry when it is an exact match of the
+    // canonical config. A matching `url` alone is not enough — extra fields
+    // like `command` / `args` / `env` would keep an attacker-controlled local
+    // MCP server under the official "Meticulous" name.
+    if ((0, exports.isExactJsonServerConfig)(mcpServers["Meticulous"], serverConfig)) {
+        return;
+    }
+    (0, safe_repo_fs_1.writeFileSafeSync)(projectRoot, relativePath, JSON.stringify({
+        ...config,
+        mcpServers: {
+            ...mcpServers,
+            Meticulous: serverConfig,
+        },
+    }, null, 2) + "\n");
+};
+/**
+ * True only when `existing` is a plain object with exactly the same keys and
+ * primitive values as `expected` (no extras, no nesting surprises).
+ */
+const isExactJsonServerConfig = (existing, expected) => {
+    if (!existing || typeof existing !== "object" || Array.isArray(existing)) {
+        return false;
+    }
+    const record = existing;
+    const existingKeys = Object.keys(record).sort();
+    const expectedKeys = Object.keys(expected).sort();
+    if (existingKeys.length !== expectedKeys.length ||
+        existingKeys.some((key, index) => key !== expectedKeys[index])) {
+        return false;
+    }
+    return expectedKeys.every((key) => record[key] === expected[key]);
+};
+exports.isExactJsonServerConfig = isExactJsonServerConfig;
+//# sourceMappingURL=setup-agent-integrations.js.map
+//# debugId=d86e4f01-f4b3-5d15-b551-8b7f879cf289