@aperant/framework 0.9.0 → 0.11.0

package/dist/cli/install/mcp-provision.mjs

@@ -0,0 +1,281 @@
+/**
+ * install/mcp-provision.mjs — TOFU install-time MCP-server + skill provisioner.
+ *
+ * Called from cmdInit (the only call site — the QUICK fast-path never invokes
+ * init, so the Fast Path Guarantee is structurally untouched). Detects the
+ * project's runtime, then for each selected host CLI that supports the action:
+ *
+ *   - kind 'mcp-server' (electron/tauri) → write the server into the host's
+ *     MCP config (claude → .mcp.json JSON merge; codex → .codex/config.toml
+ *     TOML upsert).
+ *   - kind 'skill' (agent-browser) → copy the vendored SKILL.md into the
+ *     host's skill dir (claude → .claude/skills/; codex → .agents/skills/).
+ *
+ * Every write is TOFU/idempotent (ID-05): if the target server id / table /
+ * skill file already exists, SKIP (never diff/merge/overwrite) — this is the
+ * must-not-clobber invariant for a hand-authored electron
+ * SCREENSHOT_ENCRYPTION_KEY (US-3) and a user-edited agent-browser skill
+ * (US-6). Each action appends one audit line to .aperant/events/{date}.jsonl.
+ *
+ * Gated behind config.verification.provision_mcp (default true) so users can
+ * opt out. Never throws — wraps the body in try/catch → {status:'error'}.
+ */
+import { copyFileSync, existsSync, mkdirSync, readFileSync } from 'node:fs';
+import { basename, dirname, join, resolve } from 'node:path';
+import { appendJsonl, atomicWriteJson, atomicWriteText } from '../util/atomic-write.mjs';
+import { dailyEventsPath } from '../util/events-path.mjs';
+import { capabilityToProvisionIds, PROVISION_SPECS } from './mcp-server-specs.mjs';
+import { loadRuntimeCapabilities } from './runtime-detect.mjs';
+import { upsertMcpServerToml } from './toml-merge.mjs';
+/**
+ * Per-host writer registry (ID-07, ID-08). v1 = claude + codex. The MCP
+ * config path AND skill dir are EXPLICIT per host — neither is derived from
+ * the runtime's installRoot (Codex's MCP path .codex/config.toml diverges
+ * from its skill dir .agents/skills/). Adding gemini/opencode later = one
+ * entry each.
+ *
+ * @type {Record<string, {mcpFormat: 'json'|'toml', mcpConfigPath: string, skillDir: string}>}
+ */
+const HOST_PROVISION_WRITERS = {
+    claude: { mcpFormat: 'json', mcpConfigPath: '.mcp.json', skillDir: '.claude/skills' },
+    codex: { mcpFormat: 'toml', mcpConfigPath: '.codex/config.toml', skillDir: '.agents/skills' },
+};
+/**
+ * Substitute the per-project socket basename into the tauri launcher
+ * template, deriving uniqueness from the project dir basename.
+ *
+ * @param {string} template
+ * @param {string} targetDir
+ * @returns {string}
+ */
+function renderTauriLauncher(template, targetDir) {
+    const slug = basename(resolve(targetDir))
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '') || 'tauri';
+    return template.replaceAll('{{PROJECT_SOCKET}}', slug);
+}
+/**
+ * Write the electron/tauri MCP server into a Claude `.mcp.json`. JSON merge:
+ * read-or-{}, ensure mcpServers, SKIP if the server id already exists, else
+ * insert {type:'stdio', command, args, env?} preserving all sibling keys.
+ *
+ * TOFU non-clobber (ID-05): if the existing file fails to parse OR parses to
+ * a non-plain-object root (array / null / primitive), do NOT overwrite it —
+ * return `skipped_unsafe` with a reason so the caller can audit it and leave
+ * the file byte-identical. (`typeof [] === 'object'` is why arrays must be
+ * excluded explicitly: a `.mcp.json` containing `[]` would otherwise pass the
+ * object guard, drop the user's content on stringify, and report `written`.)
+ *
+ * @param {string} configPath — absolute path to .mcp.json
+ * @param {string} serverId
+ * @param {import('./mcp-server-specs.mjs').McpServerSpec} spec
+ * @returns {{action: 'written'|'skipped'|'skipped_unsafe', reason?: string}}
+ */
+function writeClaudeMcpServer(configPath, serverId, spec) {
+    let config = {};
+    if (existsSync(configPath)) {
+        try {
+            config = JSON.parse(readFileSync(configPath, 'utf-8'));
+        }
+        catch {
+            // Malformed JSON: overwriting would erase every hand-authored MCP
+            // server. Leave the file untouched and surface it.
+            return { action: 'skipped_unsafe', reason: 'malformed_json' };
+        }
+        if (config === null || typeof config !== 'object' || Array.isArray(config)) {
+            // Non-plain-object root (array / null / primitive): same non-clobber
+            // rule — never overwrite content we cannot safely merge into.
+            return { action: 'skipped_unsafe', reason: 'non_object_root' };
+        }
+    }
+    if (config.mcpServers === null || typeof config.mcpServers !== 'object') {
+        config.mcpServers = {};
+    }
+    // TOFU: never clobber a hand-authored server id.
+    if (Object.hasOwn(config.mcpServers, serverId))
+        return { action: 'skipped' };
+    const entry = { type: 'stdio', command: spec.command, args: spec.args ?? [] };
+    if (spec.env && Object.keys(spec.env).length > 0)
+        entry.env = spec.env;
+    config.mcpServers[serverId] = entry;
+    atomicWriteJson(configPath, config);
+    return { action: 'written' };
+}
+/**
+ * Write the electron/tauri MCP server into a Codex `.codex/config.toml`.
+ *
+ * @param {string} configPath — absolute path to .codex/config.toml
+ * @param {string} serverId
+ * @param {import('./mcp-server-specs.mjs').McpServerSpec} spec
+ * @returns {{action: 'written'|'skipped'}}
+ */
+function writeCodexMcpServer(configPath, serverId, spec) {
+    const existing = existsSync(configPath) ? readFileSync(configPath, 'utf-8') : '';
+    const { content, action } = upsertMcpServerToml(existing, serverId, {
+        command: spec.command,
+        args: spec.args ?? [],
+        ...(spec.env && Object.keys(spec.env).length > 0 ? { env: spec.env } : {}),
+    });
+    if (action === 'written')
+        atomicWriteText(configPath, content);
+    return { action };
+}
+/**
+ * Copy the vendored skill into a host skill dir. TOFU: never overwrite an
+ * existing agent-browser/SKILL.md (a user may have edited it).
+ *
+ * @param {string} skillDestPath — absolute <skillDir>/<skillId>/SKILL.md
+ * @param {string} vendoredSkillPath — absolute source path
+ * @returns {'written'|'skipped'}
+ */
+function copySkill(skillDestPath, vendoredSkillPath) {
+    if (existsSync(skillDestPath))
+        return 'skipped';
+    mkdirSync(dirname(skillDestPath), { recursive: true });
+    // copyFileSync is fine here — atomicWriteText would re-read; the dest is
+    // guaranteed absent (TOFU check above) so there is no clobber risk.
+    copyFileSync(vendoredSkillPath, skillDestPath);
+    return 'written';
+}
+/**
+ * Provision MCP servers + skills for the selected host CLIs.
+ *
+ * @param {Object} opts
+ * @param {string} opts.targetDir — project root being installed into
+ * @param {string[]} opts.selectedRuntimes — the runtimes the user selected
+ * @param {object} opts.config — the effective merged project config
+ * @param {string} opts.frameworkRoot — absolute path to packages/framework (for vendored skill resolution)
+ * @returns {{status: 'ok'|'disabled'|'error', writes?: Array<{host:string, spec_id:string, kind:string, action:string}>, reason?: string}}
+ */
+export function provisionMcpConfig(opts) {
+    const targetDir = resolve(opts.targetDir);
+    const config = opts.config ?? {};
+    const selected = Array.isArray(opts.selectedRuntimes) ? opts.selectedRuntimes : [];
+    const frameworkRoot = opts.frameworkRoot;
+    try {
+        // (1) Opt-out gate (default true).
+        if (config?.verification?.provision_mcp === false) {
+            appendEvent(targetDir, 'mcp-provision.disabled', {
+                reason: 'verification.provision_mcp=false',
+            });
+            return { status: 'disabled' };
+        }
+        // (2) Detect runtime → derive spec ids.
+        const runtimeCaps = loadRuntimeCapabilities(targetDir);
+        const specIds = capabilityToProvisionIds(runtimeCaps);
+        /** @type {Array<{host:string, spec_id:string, kind:string, action:string}>} */
+        const writes = [];
+        // Iterate every (selected host, spec) pair.
+        for (const host of selected) {
+            const writer = HOST_PROVISION_WRITERS[host];
+            if (!writer) {
+                // Selected host with no writer (gemini/opencode/... in v1) — record
+                // once as unsupported_host, no write.
+                writes.push({ host, spec_id: '*', kind: '*', action: 'unsupported_host' });
+                appendEvent(targetDir, 'mcp-provision.unsupported_host', { host });
+                continue;
+            }
+            for (const specId of specIds) {
+                const spec = PROVISION_SPECS[specId];
+                if (!spec)
+                    continue;
+                if (spec.kind === 'mcp-server') {
+                    const configPath = join(targetDir, writer.mcpConfigPath);
+                    const { action, reason } = writer.mcpFormat === 'json'
+                        ? writeClaudeMcpServer(configPath, specId, spec)
+                        : writeCodexMcpServer(configPath, specId, spec);
+                    writes.push({ host, spec_id: specId, kind: 'mcp-server', action });
+                    appendEvent(targetDir, `mcp-provision.${action}`, {
+                        host,
+                        spec_id: specId,
+                        config_path: writer.mcpConfigPath,
+                        ...(reason ? { reason } : {}),
+                    });
+                    // (5) tauri needs its launcher script — only provision it once the
+                    // MCP config entry is actually written, so a TOFU-skipped or
+                    // skipped_unsafe config never leaves an orphan launcher + a
+                    // misleading audit line.
+                    if (spec.requiresLauncherScript && frameworkRoot && action === 'written') {
+                        provisionTauriLauncher(targetDir, frameworkRoot, writes);
+                    }
+                }
+                else if (spec.kind === 'skill') {
+                    if (!frameworkRoot)
+                        continue;
+                    const vendoredSkillPath = resolve(frameworkRoot, spec.vendoredSkillRelPath);
+                    const skillDestPath = join(targetDir, writer.skillDir, spec.skillId, 'SKILL.md');
+                    const action = copySkill(skillDestPath, vendoredSkillPath);
+                    writes.push({ host, spec_id: specId, kind: 'skill', action });
+                    appendEvent(targetDir, `skill-provision.${action}`, {
+                        host,
+                        spec_id: specId,
+                        skill_dir: writer.skillDir,
+                    }, 'skill_provision');
+                }
+            }
+        }
+        return { status: 'ok', writes };
+    }
+    catch (e) {
+        return { status: 'error', reason: e instanceof Error ? e.message : String(e) };
+    }
+}
+/**
+ * Copy the tauri launcher template into the project's scripts/ dir (TOFU).
+ * Records its own audit line; appends to `writes` with a synthetic host.
+ *
+ * @param {string} targetDir
+ * @param {string} frameworkRoot
+ * @param {Array<{host:string, spec_id:string, kind:string, action:string}>} writes
+ */
+function provisionTauriLauncher(targetDir, frameworkRoot, writes) {
+    const destPath = join(targetDir, 'scripts', 'tauri-mcp.sh');
+    // Already recorded a launcher write/skip for this run? Only provision once.
+    if (writes.some((w) => w.kind === 'launcher'))
+        return;
+    if (existsSync(destPath)) {
+        writes.push({ host: '-', spec_id: 'tauri', kind: 'launcher', action: 'skipped' });
+        appendEvent(targetDir, 'mcp-provision.skipped', {
+            host: '-',
+            spec_id: 'tauri',
+            launcher: 'scripts/tauri-mcp.sh',
+        });
+        return;
+    }
+    const templatePath = resolve(frameworkRoot, 'drivers/tauri/scripts/tauri-mcp.sh');
+    const template = readFileSync(templatePath, 'utf-8');
+    atomicWriteText(destPath, renderTauriLauncher(template, targetDir));
+    writes.push({ host: '-', spec_id: 'tauri', kind: 'launcher', action: 'written' });
+    appendEvent(targetDir, 'mcp-provision.written', {
+        host: '-',
+        spec_id: 'tauri',
+        launcher: 'scripts/tauri-mcp.sh',
+    });
+}
+/**
+ * Append one audit line to .aperant/events/{date}.jsonl, mirroring the
+ * daily-events shape. `kind` discriminates the provisioning channel:
+ * `mcp_provision` for MCP-server + launcher events, `skill_provision` for
+ * skill-copy events.
+ *
+ * @param {string} targetDir
+ * @param {string} op — e.g. mcp-provision.written, skill-provision.skipped
+ * @param {Record<string, unknown>} [extra]
+ * @param {string} [kind] — audit channel (default `mcp_provision`)
+ */
+function appendEvent(targetDir, op, extra = {}, kind = 'mcp_provision') {
+    try {
+        const path = dailyEventsPath(targetDir);
+        appendJsonl(path, {
+            ts: new Date().toISOString(),
+            kind,
+            op,
+            ...extra,
+        });
+    }
+    catch {
+        // Audit is best-effort — never fail provisioning on a log write error.
+    }
+}
+//# sourceMappingURL=mcp-provision.mjs.map

package/dist/cli/install/mcp-provision.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-provision.mjs","sourceRoot":"","sources":["../../../src/cli/install/mcp-provision.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC3E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5D,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACzD,OAAO,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAClF,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAEtD;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAAG;IAC9B,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,gBAAgB,EAAE;IACrF,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,oBAAoB,EAAE,QAAQ,EAAE,gBAAgB,EAAE;CAC7F,CAAA;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,QAAQ,EAAE,SAAS;IAC/C,MAAM,IAAI,GACT,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;SAC1B,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAA;IACrC,OAAO,QAAQ,CAAC,UAAU,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAA;AACvD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,oBAAoB,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI;IACvD,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;QACvD,CAAC;QAAC,MAAM,CAAC;YACR,kEAAkE;YAClE,mDAAmD;YACnD,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;QAC9D,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,qEAAqE;YACrE,8DAA8D;YAC9D,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;QAC/D,CAAC;IACF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACzE,MAAM,CAAC,UAAU,GAAG,EAAE,CAAA;IACvB,CAAC;IACD,iDAAiD;IACjD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAE5E,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAA;IAC7E,IAAI,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;IACtE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAA;IACnC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IACnC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI;IACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAChF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE;QACnE,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;QACrB,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC,CAAA;IACF,IAAI,MAAM,KAAK,SAAS;QAAE,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAC9D,OAAO,EAAE,MAAM,EAAE,CAAA;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,aAAa,EAAE,iBAAiB;IAClD,IAAI,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAA;IAC/C,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACtD,yEAAyE;IACzE,oEAAoE;IACpE,YAAY,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAA;IAC9C,OAAO,SAAS,CAAA;AACjB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAI;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAA;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAA;IAClF,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAA;IAExC,IAAI,CAAC;QACJ,mCAAmC;QACnC,IAAI,MAAM,EAAE,YAAY,EAAE,aAAa,KAAK,KAAK,EAAE,CAAC;YACnD,WAAW,CAAC,SAAS,EAAE,wBAAwB,EAAE;gBAChD,MAAM,EAAE,kCAAkC;aAC1C,CAAC,CAAA;YACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;QAC9B,CAAC;QAED,wCAAwC;QACxC,MAAM,WAAW,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAA;QACtD,MAAM,OAAO,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAA;QAErD,+EAA+E;QAC/E,MAAM,MAAM,GAAG,EAAE,CAAA;QAEjB,4CAA4C;QAC5C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;YAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,oEAAoE;gBACpE,sCAAsC;gBACtC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;gBAC1E,WAAW,CAAC,SAAS,EAAE,gCAAgC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;gBAClE,SAAQ;YACT,CAAC;YAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;gBACpC,IAAI,CAAC,IAAI;oBAAE,SAAQ;gBAEnB,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAChC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,CAAA;oBACxD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GACvB,MAAM,CAAC,SAAS,KAAK,MAAM;wBAC1B,CAAC,CAAC,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC;wBAChD,CAAC,CAAC,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;oBACjD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAA;oBAClE,WAAW,CAAC,SAAS,EAAE,iBAAiB,MAAM,EAAE,EAAE;wBACjD,IAAI;wBACJ,OAAO,EAAE,MAAM;wBACf,WAAW,EAAE,MAAM,CAAC,aAAa;wBACjC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC7B,CAAC,CAAA;oBACF,mEAAmE;oBACnE,6DAA6D;oBAC7D,4DAA4D;oBAC5D,yBAAyB;oBACzB,IAAI,IAAI,CAAC,sBAAsB,IAAI,aAAa,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBAC1E,sBAAsB,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,CAAA;oBACzD,CAAC;gBACF,CAAC;qBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAClC,IAAI,CAAC,aAAa;wBAAE,SAAQ;oBAC5B,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAA;oBAC3E,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;oBAChF,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAA;oBAC1D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;oBAC7D,WAAW,CACV,SAAS,EACT,mBAAmB,MAAM,EAAE,EAC3B;wBACC,IAAI;wBACJ,OAAO,EAAE,MAAM;wBACf,SAAS,EAAE,MAAM,CAAC,QAAQ;qBAC1B,EACD,iBAAiB,CACjB,CAAA;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IAChC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IAC/E,CAAC;AACF,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAA;IAC3D,4EAA4E;IAC5E,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;QAAE,OAAM;IACrD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;QACjF,WAAW,CAAC,SAAS,EAAE,uBAAuB,EAAE;YAC/C,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,OAAO;YAChB,QAAQ,EAAE,sBAAsB;SAChC,CAAC,CAAA;QACF,OAAM;IACP,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAA;IACjF,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;IACpD,eAAe,CAAC,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;IACnE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;IACjF,WAAW,CAAC,SAAS,EAAE,uBAAuB,EAAE;QAC/C,IAAI,EAAE,GAAG;QACT,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,sBAAsB;KAChC,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,WAAW,CAAC,SAAS,EAAE,EAAE,EAAE,KAAK,GAAG,EAAE,EAAE,IAAI,GAAG,eAAe;IACrE,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC,CAAA;QACvC,WAAW,CAAC,IAAI,EAAE;YACjB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI;YACJ,EAAE;YACF,GAAG,KAAK;SACR,CAAC,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACR,uEAAuE;IACxE,CAAC;AACF,CAAC"}

package/dist/cli/install/mcp-server-specs.d.mts

@@ -0,0 +1,80 @@
+/**
+ * Map a project's runtime capabilities to the provision spec ids it
+ * triggers. A multi-surface monorepo (e.g. electron + nextjs) returns
+ * multiple ids.
+ *
+ *   is_electron                          → ['electron']
+ *   is_tauri                             → ['tauri']
+ *   is_web_frontend|is_nextjs|is_nuxt    → ['agent-browser']
+ *
+ * Accepts a partial capability record — only the flags it reads need be
+ * present (the rest default to absent/false).
+ *
+ * @param {Partial<import('../util/runtime-capabilities.mjs').RuntimeCapabilities>} runtimeCaps
+ * @returns {string[]}
+ */
+export function capabilityToProvisionIds(runtimeCaps: Partial<import("../util/runtime-capabilities.mjs").RuntimeCapabilities>): string[];
+/**
+ * install/mcp-server-specs.mjs — single-sourced install-time provision specs.
+ *
+ * One registry, two kinds (ID-03):
+ *   - kind 'mcp-server' (electron, tauri): the {command, args, env?} the
+ *     installer writes into each host CLI's MCP config. Keyed by the SAME
+ *     `transport.mcp_server_id` string the driver manifests carry.
+ *   - kind 'skill' (agent-browser): the vendored SKILL.md the installer
+ *     copies into each host CLI's skill dir. Keyed by the SAME
+ *     `transport.skill_id` the browser driver manifest carries.
+ *
+ * We do NOT derive commands from the driver manifests — manifests are
+ * transport-agnostic by design (ID-01 keeps the verb→tool mapping in the
+ * driver; this is a separate install-only transport/skill concern). We do
+ * NOT add a per-driver mcp-server.json (over-engineering for 3 specs —
+ * CLAUDE.md Simplicity First).
+ *
+ * Pure module — no fs, no exec.
+ */
+/**
+ * @typedef {Object} McpServerSpec
+ * @property {'mcp-server'} kind
+ * @property {string} command
+ * @property {string[]} args
+ * @property {Record<string, string>} [env]
+ * @property {boolean} [requiresLauncherScript] — tauri: copy scripts/tauri-mcp.sh first
+ *
+ * @typedef {Object} SkillSpec
+ * @property {'skill'} kind
+ * @property {string} skillId
+ * @property {string} vendoredSkillRelPath — relative to the framework root
+ *
+ * @typedef {McpServerSpec | SkillSpec} ProvisionSpec
+ */
+/**
+ * The install-time provision specs, keyed by spec id.
+ *
+ * `electron` / `tauri` ids match each driver manifest's
+ * `transport.mcp_server_id`; `agent-browser` matches the browser driver
+ * manifest's `transport.skill_id`.
+ *
+ * @type {Record<string, ProvisionSpec>}
+ */
+export const PROVISION_SPECS: Record<string, ProvisionSpec>;
+export type McpServerSpec = {
+    kind: "mcp-server";
+    command: string;
+    args: string[];
+    env?: Record<string, string> | undefined;
+    /**
+     * — tauri: copy scripts/tauri-mcp.sh first
+     */
+    requiresLauncherScript?: boolean | undefined;
+};
+export type SkillSpec = {
+    kind: "skill";
+    skillId: string;
+    /**
+     * — relative to the framework root
+     */
+    vendoredSkillRelPath: string;
+};
+export type ProvisionSpec = McpServerSpec | SkillSpec;
+//# sourceMappingURL=mcp-server-specs.d.mts.map

package/dist/cli/install/mcp-server-specs.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server-specs.d.mts","sourceRoot":"","sources":["../../../src/cli/install/mcp-server-specs.mjs"],"names":[],"mappings":"AA4EA;;;;;;;;;;;;;;GAcG;AACH,sDAHW,OAAO,CAAC,OAAO,kCAAkC,EAAE,mBAAmB,CAAC,GACrE,MAAM,EAAE,CAWpB;AApGD;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;GAQG;AACH,8BAFU,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CA+BtC;;UApDa,YAAY;aACZ,MAAM;UACN,MAAM,EAAE;;;;;;;;UAKR,OAAO;aACP,MAAM;;;;0BACN,MAAM;;4BAEP,aAAa,GAAG,SAAS"}

package/dist/cli/install/mcp-server-specs.mjs

@@ -0,0 +1,102 @@
+/**
+ * install/mcp-server-specs.mjs — single-sourced install-time provision specs.
+ *
+ * One registry, two kinds (ID-03):
+ *   - kind 'mcp-server' (electron, tauri): the {command, args, env?} the
+ *     installer writes into each host CLI's MCP config. Keyed by the SAME
+ *     `transport.mcp_server_id` string the driver manifests carry.
+ *   - kind 'skill' (agent-browser): the vendored SKILL.md the installer
+ *     copies into each host CLI's skill dir. Keyed by the SAME
+ *     `transport.skill_id` the browser driver manifest carries.
+ *
+ * We do NOT derive commands from the driver manifests — manifests are
+ * transport-agnostic by design (ID-01 keeps the verb→tool mapping in the
+ * driver; this is a separate install-only transport/skill concern). We do
+ * NOT add a per-driver mcp-server.json (over-engineering for 3 specs —
+ * CLAUDE.md Simplicity First).
+ *
+ * Pure module — no fs, no exec.
+ */
+/**
+ * @typedef {Object} McpServerSpec
+ * @property {'mcp-server'} kind
+ * @property {string} command
+ * @property {string[]} args
+ * @property {Record<string, string>} [env]
+ * @property {boolean} [requiresLauncherScript] — tauri: copy scripts/tauri-mcp.sh first
+ *
+ * @typedef {Object} SkillSpec
+ * @property {'skill'} kind
+ * @property {string} skillId
+ * @property {string} vendoredSkillRelPath — relative to the framework root
+ *
+ * @typedef {McpServerSpec | SkillSpec} ProvisionSpec
+ */
+/**
+ * The install-time provision specs, keyed by spec id.
+ *
+ * `electron` / `tauri` ids match each driver manifest's
+ * `transport.mcp_server_id`; `agent-browser` matches the browser driver
+ * manifest's `transport.skill_id`.
+ *
+ * @type {Record<string, ProvisionSpec>}
+ */
+export const PROVISION_SPECS = {
+    // kind 'mcp-server'
+    electron: {
+        kind: 'mcp-server',
+        command: 'npx',
+        args: ['-y', 'electron-mcp-server'],
+        // No SCREENSHOT_ENCRYPTION_KEY — left for the user to add per ID-09.
+        env: {},
+    },
+    tauri: {
+        kind: 'mcp-server',
+        // The tauri-plugin-mcp-server npm bin ships without a shebang, so it
+        // cannot be invoked via `npx -y`. We launch it through a generated
+        // scripts/tauri-mcp.sh (ID-04) — the proven racing-ai shape.
+        command: 'bash',
+        args: ['./scripts/tauri-mcp.sh'],
+        requiresLauncherScript: true,
+    },
+    // kind 'skill'
+    'agent-browser': {
+        kind: 'skill',
+        skillId: 'agent-browser',
+        // Vendored UNDER the browser driver (NOT skills/agent-browser/) so the
+        // install pipeline's discoverCanonicalFiles does not auto-install it
+        // into every project unconditionally — that would break the
+        // verification.provision_mcp opt-out (AC7) and the web-frontend runtime
+        // gate. The provisioner (mcp-provision.mjs) is the sole installer.
+        vendoredSkillRelPath: 'drivers/browser/skill/agent-browser/SKILL.md',
+    },
+};
+/**
+ * Map a project's runtime capabilities to the provision spec ids it
+ * triggers. A multi-surface monorepo (e.g. electron + nextjs) returns
+ * multiple ids.
+ *
+ *   is_electron                          → ['electron']
+ *   is_tauri                             → ['tauri']
+ *   is_web_frontend|is_nextjs|is_nuxt    → ['agent-browser']
+ *
+ * Accepts a partial capability record — only the flags it reads need be
+ * present (the rest default to absent/false).
+ *
+ * @param {Partial<import('../util/runtime-capabilities.mjs').RuntimeCapabilities>} runtimeCaps
+ * @returns {string[]}
+ */
+export function capabilityToProvisionIds(runtimeCaps) {
+    const ids = [];
+    if (!runtimeCaps || typeof runtimeCaps !== 'object')
+        return ids;
+    if (runtimeCaps.is_electron)
+        ids.push('electron');
+    if (runtimeCaps.is_tauri)
+        ids.push('tauri');
+    if (runtimeCaps.is_web_frontend || runtimeCaps.is_nextjs || runtimeCaps.is_nuxt) {
+        ids.push('agent-browser');
+    }
+    return ids;
+}
+//# sourceMappingURL=mcp-server-specs.mjs.map

package/dist/cli/install/mcp-server-specs.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server-specs.mjs","sourceRoot":"","sources":["../../../src/cli/install/mcp-server-specs.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC9B,oBAAoB;IACpB,QAAQ,EAAE;QACT,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,qBAAqB,CAAC;QACnC,qEAAqE;QACrE,GAAG,EAAE,EAAE;KACP;IACD,KAAK,EAAE;QACN,IAAI,EAAE,YAAY;QAClB,qEAAqE;QACrE,mEAAmE;QACnE,6DAA6D;QAC7D,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,wBAAwB,CAAC;QAChC,sBAAsB,EAAE,IAAI;KAC5B;IACD,eAAe;IACf,eAAe,EAAE;QAChB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,eAAe;QACxB,uEAAuE;QACvE,qEAAqE;QACrE,4DAA4D;QAC5D,wEAAwE;QACxE,mEAAmE;QACnE,oBAAoB,EAAE,8CAA8C;KACpE;CACD,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAW;IACnD,MAAM,GAAG,GAAG,EAAE,CAAA;IACd,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAA;IAC/D,IAAI,WAAW,CAAC,WAAW;QAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACjD,IAAI,WAAW,CAAC,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC3C,IAAI,WAAW,CAAC,eAAe,IAAI,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;QACjF,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC"}

package/dist/cli/install/runtime-detect.d.mts

@@ -109,4 +109,5 @@ export type RuntimeDescriptor = {
      */
     nativeInstructionFile: string | null;
 };
+export { detectFromPackageJson, loadRuntimeCapabilities } from "../util/runtime-capabilities.mjs";
 //# sourceMappingURL=runtime-detect.d.mts.map

package/dist/cli/install/runtime-detect.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-detect.d.mts","sourceRoot":"","sources":["../../../src/cli/install/runtime-detect.mjs"],"names":[],"mappings":"AAuLA;;;;;GAKG;AACH,+BAHW,MAAM,GACJ,iBAAiB,GAAC,IAAI,CAIlC;AAED;;;;;;;;;GASG;AACH,2CAHW,MAAM,GACJ,MAAM,EAAE,CAcpB;AAED;;;;;;GAMG;AACH,mDAHW,MAAM,GACJ,iBAAiB,EAAE,CAc/B;AAxND;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,kCAAkC;AAClC,uBADW,iBAAiB,EAAE,CA8H5B;AAEF,0BAA0B;AAC1B,0BADW,GAAG,CAAC,MAAM,CAAC,CACuC;;;;;QA/J/C,MAAM;;;;UACN,MAAM;;;;;iBACN,MAAM;;;;;;aAEN,MAAM,EAAE;;;;;;;WAGR,MAAM,GAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;2BASX,MAAM,GAAC,IAAI"}
+{"version":3,"file":"runtime-detect.d.mts","sourceRoot":"","sources":["../../../src/cli/install/runtime-detect.mjs"],"names":[],"mappings":"AAgMA;;;;;GAKG;AACH,+BAHW,MAAM,GACJ,iBAAiB,GAAC,IAAI,CAIlC;AAED;;;;;;;;;GASG;AACH,2CAHW,MAAM,GACJ,MAAM,EAAE,CAcpB;AAED;;;;;;GAMG;AACH,mDAHW,MAAM,GACJ,iBAAiB,EAAE,CAc/B;AAxND;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,kCAAkC;AAClC,uBADW,iBAAiB,EAAE,CA8H5B;AAEF,0BAA0B;AAC1B,0BADW,GAAG,CAAC,MAAM,CAAC,CACuC;;;;;QA/J/C,MAAM;;;;UACN,MAAM;;;;;iBACN,MAAM;;;;;;aAEN,MAAM,EAAE;;;;;;;WAGR,MAAM,GAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;2BASX,MAAM,GAAC,IAAI"}

package/dist/cli/install/runtime-detect.mjs

@@ -16,6 +16,11 @@
 import { existsSync, statSync } from 'node:fs';
 import { join } from 'node:path';
 import { MANIFEST_FILENAME } from './manifest.mjs';
+// Package.json-shape capability detection lives in util/ (shared with
+// verify-proof/runtime-detect.mjs). Re-exported here so install-layer callers
+// (e.g. install/mcp-provision.mjs) consume it from their OWN layer instead of
+// reaching across into verify-proof/.
+export { detectFromPackageJson, loadRuntimeCapabilities, } from '../util/runtime-capabilities.mjs';
 /**
  * @typedef {Object} RuntimeDescriptor
  * @property {string} id            Stable identifier (`claude`, `cursor`, …).

package/dist/cli/install/runtime-detect.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-detect.mjs","sourceRoot":"","sources":["../../../src/cli/install/runtime-detect.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAElD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,kCAAkC;AAClC,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC;QACC,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,CAAC,uBAAuB,EAAE,6BAA6B,CAAC;QACjE,KAAK,EAAE,aAAa;QACpB,qBAAqB,EAAE,WAAW;KAClC;IACD;QACC,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,CAAC,oBAAoB,CAAC;QAC/B,KAAK,EAAE,OAAO;QACd,qBAAqB,EAAE,WAAW;KAClC;IACD;QACC,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,CAAC,uBAAuB,CAAC;QAClC,KAAK,EAAE,QAAQ;QACf,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,CAAC,uBAAuB,CAAC;QAClC,KAAK,EAAE,YAAY;QACnB,qBAAqB,EAAE,WAAW;KAClC;IACD;QACC,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,CAAC,uBAAuB,CAAC;QAClC,KAAK,EAAE,UAAU;QACjB,qBAAqB,EAAE,WAAW;KAClC;IACD;QACC,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,aAAa,CAAC;QAC3D,KAAK,EAAE,IAAI;QACX,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,CAAC,mBAAmB,CAAC;QAC9B,KAAK,EAAE,MAAM;QACb,kEAAkE;QAClE,gEAAgE;QAChE,6DAA6D;QAC7D,YAAY,EAAE,WAAW;QACzB,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,iBAAiB;QAC9B,OAAO,EAAE,CAAC,iCAAiC,CAAC;QAC5C,KAAK,EAAE,SAAS;QAChB,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,CAAC,0BAA0B,CAAC;QACrC,KAAK,EAAE,aAAa;QACpB,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,CAAC,gBAAgB,CAAC;QAC3B,KAAK,EAAE,UAAU;QACjB,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,UAAU;QACvB,OAAO,EAAE,CAAC,sBAAsB,CAAC;QACjC,KAAK,EAAE,SAAS;QAChB,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,CAAC,mBAAmB,CAAC;QAC9B,KAAK,EAAE,MAAM;QACb,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,CAAC,mBAAmB,CAAC;QAC9B,KAAK,EAAE,MAAM;QACb,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,CAAC,oBAAoB,CAAC;QAC/B,KAAK,EAAE,OAAO;QACd,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,CAAC,wBAAwB,CAAC;QACnC,KAAK,EAAE,WAAW;QAClB,qBAAqB,EAAE,IAAI;KAC3B;CACD,CAAC,CAAA;AAEF,0BAA0B;AAC1B,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAE7D;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,EAAE;IAC5B,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAA;AACjD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,SAAS;IACxC,MAAM,GAAG,GAAG,EAAE,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACd,SAAQ;QACT,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACf,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAS;IAChD,MAAM,GAAG,GAAG,EAAE,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAA;QACtE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAQ;QACvC,IAAI,CAAC;YACJ,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjD,CAAC;QAAC,MAAM,CAAC;YACR,0DAA0D;QAC3D,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC"}
+{"version":3,"file":"runtime-detect.mjs","sourceRoot":"","sources":["../../../src/cli/install/runtime-detect.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAElD,sEAAsE;AACtE,8EAA8E;AAC9E,8EAA8E;AAC9E,sCAAsC;AACtC,OAAO,EACN,qBAAqB,EACrB,uBAAuB,GACvB,MAAM,kCAAkC,CAAA;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,kCAAkC;AAClC,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC;QACC,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,CAAC,uBAAuB,EAAE,6BAA6B,CAAC;QACjE,KAAK,EAAE,aAAa;QACpB,qBAAqB,EAAE,WAAW;KAClC;IACD;QACC,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,CAAC,oBAAoB,CAAC;QAC/B,KAAK,EAAE,OAAO;QACd,qBAAqB,EAAE,WAAW;KAClC;IACD;QACC,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,CAAC,uBAAuB,CAAC;QAClC,KAAK,EAAE,QAAQ;QACf,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,CAAC,uBAAuB,CAAC;QAClC,KAAK,EAAE,YAAY;QACnB,qBAAqB,EAAE,WAAW;KAClC;IACD;QACC,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,CAAC,uBAAuB,CAAC;QAClC,KAAK,EAAE,UAAU;QACjB,qBAAqB,EAAE,WAAW;KAClC;IACD;QACC,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,KAAK;QAClB,OAAO,EAAE,CAAC,mBAAmB,EAAE,YAAY,EAAE,aAAa,CAAC;QAC3D,KAAK,EAAE,IAAI;QACX,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,CAAC,mBAAmB,CAAC;QAC9B,KAAK,EAAE,MAAM;QACb,kEAAkE;QAClE,gEAAgE;QAChE,6DAA6D;QAC7D,YAAY,EAAE,WAAW;QACzB,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,iBAAiB;QAC9B,OAAO,EAAE,CAAC,iCAAiC,CAAC;QAC5C,KAAK,EAAE,SAAS;QAChB,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,CAAC,0BAA0B,CAAC;QACrC,KAAK,EAAE,aAAa;QACpB,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,CAAC,gBAAgB,CAAC;QAC3B,KAAK,EAAE,UAAU;QACjB,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,UAAU;QACvB,OAAO,EAAE,CAAC,sBAAsB,CAAC;QACjC,KAAK,EAAE,SAAS;QAChB,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,CAAC,mBAAmB,CAAC;QAC9B,KAAK,EAAE,MAAM;QACb,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,CAAC,mBAAmB,CAAC;QAC9B,KAAK,EAAE,MAAM;QACb,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,CAAC,oBAAoB,CAAC;QAC/B,KAAK,EAAE,OAAO;QACd,qBAAqB,EAAE,IAAI;KAC3B;IACD;QACC,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,CAAC,wBAAwB,CAAC;QACnC,KAAK,EAAE,WAAW;QAClB,qBAAqB,EAAE,IAAI;KAC3B;CACD,CAAC,CAAA;AAEF,0BAA0B;AAC1B,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAE7D;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,EAAE;IAC5B,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAA;AACjD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,SAAS;IACxC,MAAM,GAAG,GAAG,EAAE,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACd,SAAQ;QACT,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACf,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAS;IAChD,MAAM,GAAG,GAAG,EAAE,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAA;QACtE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAQ;QACvC,IAAI,CAAC;YACJ,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjD,CAAC;QAAC,MAAM,CAAC;YACR,0DAA0D;QAC3D,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC"}

package/dist/cli/install/toml-merge.d.mts

@@ -0,0 +1,40 @@
+/**
+ * Whether `existingToml` already declares a `[mcp_servers.<id>]` table.
+ * Matches the header at the start of a line (ignoring leading whitespace),
+ * permitting an optional TOML trailing comment (` # …`) after the header —
+ * a hand-authored `[mcp_servers.tauri] # my server` must still count as
+ * present, otherwise the upsert would append a DUPLICATE table and produce
+ * an unparseable config (two same-named tables). The id is taken literally
+ * (dotted-key TOML ids do not occur for our server ids — electron/tauri are
+ * bare) and regex-escaped defensively. A `#`-prefixed comment LINE that
+ * merely mentions the header is NOT a match (the header must be the first
+ * non-whitespace token).
+ *
+ * @param {string} existingToml
+ * @param {string} serverId
+ * @returns {boolean}
+ */
+export function hasMcpServerTable(existingToml: string, serverId: string): boolean;
+/**
+ * Upsert a `[mcp_servers.<id>]` table into a Codex config.toml string.
+ *
+ * TOFU (ID-05): if a `[mcp_servers.<id>]` table already exists, returns the
+ * input unchanged with `action: 'skipped'`. Otherwise appends the new table
+ * (and a nested `[mcp_servers.<id>.env]` table when `env` is non-empty) at
+ * EOF, preserving all existing content verbatim, and returns the new
+ * content with `action: 'written'`.
+ *
+ * @param {string} existingToml — current file contents ('' when the file is absent)
+ * @param {string} serverId
+ * @param {{command: string, args: string[], env?: Record<string, string>}} spec
+ * @returns {{content: string, action: 'written'|'skipped'}}
+ */
+export function upsertMcpServerToml(existingToml: string, serverId: string, spec: {
+    command: string;
+    args: string[];
+    env?: Record<string, string>;
+}): {
+    content: string;
+    action: "written" | "skipped";
+};
+//# sourceMappingURL=toml-merge.d.mts.map

package/dist/cli/install/toml-merge.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toml-merge.d.mts","sourceRoot":"","sources":["../../../src/cli/install/toml-merge.mjs"],"names":[],"mappings":"AA2DA;;;;;;;;;;;;;;;GAeG;AACH,gDAJW,MAAM,YACN,MAAM,GACJ,OAAO,CAanB;AAED;;;;;;;;;;;;;GAaG;AACH,kDALW,MAAM,YACN,MAAM,QACN;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAC,GAC7D;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,GAAC,SAAS,CAAA;CAAC,CAsC1D"}