@credibledata/cred-cli 0.0.103 → 0.0.105

package/dist/setup-core/liveness.js

@@ -0,0 +1,94 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isPublisherServing = isPublisherServing;
+exports.countServedPackages = countServedPackages;
+const http_1 = __importDefault(require("http"));
+/**
+ * Is a local Publisher answering on this port?
+ *
+ * The question `cred status` answers for an agent that started `cred dev` in
+ * the background and needs to know when to start calling tools. A bound port
+ * is not the signal (see `readylines.ts`): the REST API answering is. One GET
+ * with a short deadline, because the caller is polling.
+ */
+function isPublisherServing(uiPort_1) {
+    return __awaiter(this, arguments, void 0, function* (uiPort, timeoutMs = 1000) {
+        // A JSON array, not just a 200: a dev server with an SPA fallback answers
+        // every path with 200 and would read as a publisher.
+        return Array.isArray(yield getJson(uiPort, "/api/v0/environments", timeoutMs));
+    });
+}
+/**
+ * How many packages the local Publisher is serving, or null when it does not
+ * answer. Distinct from {@link isPublisherServing}: a server whose only package
+ * failed to compile answers every request and serves nothing — the
+ * `PUBLISHER_READY … packages=0 load_errors=1` case — and an agent that starts
+ * calling tools on `running` alone gets "no such package" for every one.
+ */
+function countServedPackages(uiPort_1) {
+    return __awaiter(this, arguments, void 0, function* (uiPort, environment = "default", timeoutMs = 1000) {
+        // Name comes from .credible/config.json: compare it, never put it in the
+        // path (CodeQL js/file-access-to-http). The listing carries each
+        // environment's packages, so one fixed request answers it.
+        const environments = yield getJson(uiPort, "/api/v0/environments", timeoutMs);
+        if (!Array.isArray(environments))
+            return null;
+        const match = environments.find((entry) => (entry === null || entry === void 0 ? void 0 : entry.name) === environment);
+        return Array.isArray(match === null || match === void 0 ? void 0 : match.packages) ? match.packages.length : null;
+    });
+}
+/** GET a path on the local publisher as JSON, or null for any failure. */
+function getJson(uiPort, requestPath, timeoutMs) {
+    return new Promise((resolve) => {
+        let request;
+        try {
+            request = http_1.default.get({
+                host: "127.0.0.1",
+                port: uiPort,
+                path: requestPath,
+                timeout: timeoutMs,
+            }, (response) => {
+                if (response.statusCode !== 200) {
+                    response.resume();
+                    resolve(null);
+                    return;
+                }
+                let body = "";
+                response.setEncoding("utf-8");
+                response.on("data", (chunk) => (body += chunk));
+                response.on("end", () => {
+                    try {
+                        resolve(JSON.parse(body));
+                    }
+                    catch (_a) {
+                        resolve(null);
+                    }
+                });
+            });
+        }
+        catch (_a) {
+            // `http.get` throws synchronously on a path it will not send, such as
+            // one with a space; "null for any failure" covers that too.
+            resolve(null);
+            return;
+        }
+        request.on("timeout", () => {
+            request.destroy();
+            resolve(null);
+        });
+        request.on("error", () => resolve(null));
+    });
+}
+//# sourceMappingURL=liveness.js.map

package/dist/setup-core/liveness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"liveness.js","sourceRoot":"","sources":["../../src/setup-core/liveness.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAUA,gDASC;AASD,kDAgBC;AA5CD,gDAAwB;AAExB;;;;;;;GAOG;AACH,SAAsB,kBAAkB;yDACrC,MAAc,EACd,SAAS,GAAG,IAAI;QAEhB,0EAA0E;QAC1E,qDAAqD;QACrD,OAAO,KAAK,CAAC,OAAO,CACjB,MAAM,OAAO,CAAC,MAAM,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAC1D,CAAC;IACL,CAAC;CAAA;AAED;;;;;;GAMG;AACH,SAAsB,mBAAmB;yDACtC,MAAc,EACd,WAAW,GAAG,SAAS,EACvB,SAAS,GAAG,IAAI;QAEhB,yEAAyE;QACzE,iEAAiE;QACjE,2DAA2D;QAC3D,MAAM,YAAY,GAAG,MAAM,OAAO,CAC/B,MAAM,EACN,sBAAsB,EACtB,SAAS,CACX,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,MAAK,WAAW,CAAC,CAAC;QACxE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,CAAC;CAAA;AAED,0EAA0E;AAC1E,SAAS,OAAO,CACb,MAAc,EACd,WAAmB,EACnB,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC5B,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YACF,OAAO,GAAG,cAAI,CAAC,GAAG,CACf;gBACG,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,SAAS;aACpB,EACD,CAAC,QAAQ,EAAE,EAAE;gBACV,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBAC/B,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAClB,OAAO,CAAC,IAAI,CAAC,CAAC;oBACd,OAAO;gBACV,CAAC;gBACD,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBAC9B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC;gBAChD,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACrB,IAAI,CAAC;wBACF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC7B,CAAC;oBAAC,WAAM,CAAC;wBACN,OAAO,CAAC,IAAI,CAAC,CAAC;oBACjB,CAAC;gBACJ,CAAC,CAAC,CAAC;YACN,CAAC,CACH,CAAC;QACL,CAAC;QAAC,WAAM,CAAC;YACN,sEAAsE;YACtE,4DAA4D;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACV,CAAC;QACD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/setup-core/liveness.spec.js

@@ -0,0 +1,59 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const chai_1 = require("chai");
+const http_1 = __importDefault(require("http"));
+const liveness_1 = require("./liveness");
+describe("countServedPackages", () => {
+    let server;
+    let port;
+    const requested = [];
+    before(() => __awaiter(void 0, void 0, void 0, function* () {
+        server = http_1.default.createServer((request, response) => {
+            requested.push(String(request.url));
+            response.setHeader("content-type", "application/json");
+            if (request.url === "/api/v0/environments") {
+                response.end(JSON.stringify([
+                    {
+                        name: "analytics-local",
+                        resource: "/api/v0/environments/analytics-local",
+                        packages: [{ name: "a" }, { name: "b" }],
+                    },
+                ]));
+            }
+            else if (request.url === "/api/v0/environments/analytics-local/packages") {
+                response.end(JSON.stringify([{ name: "a" }, { name: "b" }]));
+            }
+            else {
+                response.statusCode = 404;
+                response.end("[]");
+            }
+        });
+        yield new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
+        port = server.address().port;
+    }));
+    after(() => server.close());
+    beforeEach(() => (requested.length = 0));
+    it("counts the named environment's packages from the one listing", () => __awaiter(void 0, void 0, void 0, function* () {
+        (0, chai_1.expect)(yield (0, liveness_1.countServedPackages)(port, "analytics-local")).to.equal(2);
+        (0, chai_1.expect)(requested).to.eql(["/api/v0/environments"]);
+    }));
+    // The name is read from `.credible/config.json`. It is only compared with
+    // the server's listing, never spliced into a request path.
+    it("never puts the given name in a request path", () => __awaiter(void 0, void 0, void 0, function* () {
+        (0, chai_1.expect)(yield (0, liveness_1.countServedPackages)(port, "../../etc")).to.equal(null);
+        (0, chai_1.expect)(requested).to.eql(["/api/v0/environments"]);
+    }));
+});
+//# sourceMappingURL=liveness.spec.js.map

package/dist/setup-core/liveness.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"liveness.spec.js","sourceRoot":"","sources":["../../src/setup-core/liveness.spec.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA,+BAA8B;AAC9B,gDAAwB;AAExB,yCAAiD;AAEjD,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IAClC,IAAI,MAAmB,CAAC;IACxB,IAAI,IAAY,CAAC;IACjB,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,MAAM,CAAC,GAAS,EAAE;QACf,MAAM,GAAG,cAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAC9C,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACpC,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,GAAG,KAAK,sBAAsB,EAAE,CAAC;gBAC1C,QAAQ,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;oBACZ;wBACG,IAAI,EAAE,iBAAiB;wBACvB,QAAQ,EAAE,sCAAsC;wBAChD,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;qBAC1C;iBACH,CAAC,CACJ,CAAC;YACL,CAAC;iBAAM,IACJ,OAAO,CAAC,GAAG,KAAK,+CAA+C,EAChE,CAAC;gBACA,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YAChE,CAAC;iBAAM,CAAC;gBACL,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;gBAC1B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CACjC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CACxC,CAAC;QACF,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;IACjD,CAAC,CAAA,CAAC,CAAC;IACH,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5B,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAEzC,EAAE,CAAC,8DAA8D,EAAE,GAAS,EAAE;QAC3E,IAAA,aAAM,EAAC,MAAM,IAAA,8BAAmB,EAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvE,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACtD,CAAC,CAAA,CAAC,CAAC;IAEH,0EAA0E;IAC1E,2DAA2D;IAC3D,EAAE,CAAC,6CAA6C,EAAE,GAAS,EAAE;QAC1D,IAAA,aAAM,EAAC,MAAM,IAAA,8BAAmB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpE,IAAA,aAAM,EAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACtD,CAAC,CAAA,CAAC,CAAC;AACN,CAAC,CAAC,CAAC"}

package/dist/setup-core/localpublisherconfig.js

@@ -0,0 +1,26 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readLocalPublisherConfig = readLocalPublisherConfig;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+/**
+ * The parsed `<directory>/publisher.config.json` the user keeps there, or
+ * undefined when it is absent or not JSON.
+ *
+ * One reader for every place that looks at this file (the connections setup
+ * can import, the packages it lists, the retrieval block `cred dev` carries),
+ * so they agree on what "unreadable" means: nothing to read, and not an error.
+ * A caller that must say why asks for the reason itself.
+ */
+function readLocalPublisherConfig(directory) {
+    try {
+        return JSON.parse(fs_1.default.readFileSync(path_1.default.join(directory, "publisher.config.json"), "utf-8"));
+    }
+    catch (_a) {
+        return undefined;
+    }
+}
+//# sourceMappingURL=localpublisherconfig.js.map

package/dist/setup-core/localpublisherconfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localpublisherconfig.js","sourceRoot":"","sources":["../../src/setup-core/localpublisherconfig.ts"],"names":[],"mappings":";;;;;AAYA,4DAWC;AAvBD,4CAAoB;AACpB,gDAAwB;AAExB;;;;;;;;GAQG;AACH,SAAgB,wBAAwB,CAAC,SAAiB;IACvD,IAAI,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CACd,YAAE,CAAC,YAAY,CACZ,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,EAC7C,OAAO,CACT,CACH,CAAC;IACL,CAAC;IAAC,WAAM,CAAC;QACN,OAAO,SAAS,CAAC;IACpB,CAAC;AACJ,CAAC"}

package/dist/setup-core/localpublisherconfig.spec.js

@@ -0,0 +1,29 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const chai_1 = require("chai");
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const localpublisherconfig_1 = require("./localpublisherconfig");
+describe("readLocalPublisherConfig", () => {
+    let dir;
+    beforeEach(() => {
+        dir = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), "local-config-"));
+    });
+    afterEach(() => {
+        fs_1.default.rmSync(dir, { recursive: true, force: true });
+    });
+    it("returns the parsed file", () => {
+        fs_1.default.writeFileSync(path_1.default.join(dir, "publisher.config.json"), JSON.stringify({ environments: [] }));
+        (0, chai_1.expect)((0, localpublisherconfig_1.readLocalPublisherConfig)(dir)).to.eql({ environments: [] });
+    });
+    it("returns undefined for a missing file and for one that is not JSON", () => {
+        (0, chai_1.expect)((0, localpublisherconfig_1.readLocalPublisherConfig)(dir)).to.equal(undefined);
+        fs_1.default.writeFileSync(path_1.default.join(dir, "publisher.config.json"), "{ nope");
+        (0, chai_1.expect)((0, localpublisherconfig_1.readLocalPublisherConfig)(dir)).to.equal(undefined);
+    });
+});
+//# sourceMappingURL=localpublisherconfig.spec.js.map

package/dist/setup-core/localpublisherconfig.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localpublisherconfig.spec.js","sourceRoot":"","sources":["../../src/setup-core/localpublisherconfig.spec.ts"],"names":[],"mappings":";;;;;AAAA,+BAA8B;AAC9B,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AACxB,iEAAkE;AAElE,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACvC,IAAI,GAAW,CAAC;IAChB,UAAU,CAAC,GAAG,EAAE;QACb,GAAG,GAAG,YAAE,CAAC,WAAW,CAAC,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACZ,YAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QAChC,YAAE,CAAC,aAAa,CACb,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,EACvC,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CACtC,CAAC;QACF,IAAA,aAAM,EAAC,IAAA,+CAAwB,EAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC1E,IAAA,aAAM,EAAC,IAAA,+CAAwB,EAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1D,YAAE,CAAC,aAAa,CAAC,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAA,aAAM,EAAC,IAAA,+CAAwB,EAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACN,CAAC,CAAC,CAAC"}

package/dist/setup-core/mcpconfig.js

@@ -0,0 +1,198 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RETIRED_SERVER_NAMES = exports.OWNED_SERVER_NAMES = exports.REMOTE_SERVER_NAME = exports.LOCAL_SERVER_NAME = exports.MCP_CONFIG_FILENAME = void 0;
+exports.localPublisherUrl = localPublisherUrl;
+exports.remoteCredibleUrl = remoteCredibleUrl;
+exports.writeMcpConfig = writeMcpConfig;
+exports.detectIndent = detectIndent;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const writefile_1 = require("./writefile");
+/**
+ * Writing `.mcp.json` — the file that points an agent at both the local
+ * Publisher and the Credible cloud tools.
+ *
+ * ## Why we write it and the server does not
+ *
+ * The Publisher server writes `.mcp.json` itself on boot, but deliberately skips
+ * when the working directory is inside a git working tree — which describes
+ * essentially every real modeling directory, since model code that matters to
+ * anyone is under version control. So the skip is the normal case, not the edge
+ * case, and setup owns the file.
+ *
+ * ## Why the local URL is an IP literal and the browser URL is not
+ *
+ * `127.0.0.1`, never `localhost`, for the MCP entry. `localhost` resolves to both
+ * loopback families while the server binds only one, so another local process can
+ * hold the same port on the other family and receive the agent's traffic instead.
+ * Upstream reproduced this 3/3 and its own config writer uses the literal.
+ *
+ * The browser URL stays `localhost` because that is what a human recognises,
+ * copies, and bookmarks, and browsers already fall back across families.
+ */
+exports.MCP_CONFIG_FILENAME = ".mcp.json";
+/** The name of the local Publisher entry. Matches what upstream writes. */
+exports.LOCAL_SERVER_NAME = "malloy";
+/** The name of the Credible cloud entry: the analysis tools over the published model. */
+exports.REMOTE_SERVER_NAME = "credible";
+/** Every key this writer owns, and therefore overwrites. */
+exports.OWNED_SERVER_NAMES = [exports.LOCAL_SERVER_NAME, exports.REMOTE_SERVER_NAME];
+/**
+ * Entries setup used to write and now removes.
+ *
+ * `credible-modeling` pointed at `/mcp/modeling` for `search_database_schema`
+ * over the indexed warehouse schema. Two reasons it is gone: the local
+ * publisher serves `search_database_schema` itself, walking the live schema
+ * through the proxy, so a modeling directory already has schema search; and the
+ * other tool on that mount, `search_modeling_suggestions`, has nothing useful
+ * to return today. What it cost was real — a third server whose tool names
+ * collide with both of the others, so every schema lookup became a choice the
+ * agent had to get right.
+ *
+ * Listed rather than simply deleted because a directory wired by an earlier
+ * build already carries the entry, and a name this writer no longer owns would
+ * be *preserved* forever. Removing it here means the next `cred init` or
+ * `cred dev` cleans it up. Only when its URL is the one we wrote (a path
+ * ending `/mcp/modeling`): a server of the user's own under the same name is
+ * theirs, and is kept.
+ */
+exports.RETIRED_SERVER_NAMES = ["credible-modeling"];
+/** Is this entry the one an earlier `cred init` wrote under a retired name? */
+function isRetiredEntry(entry) {
+    const url = entry === null || entry === void 0 ? void 0 : entry.url;
+    if (typeof url !== "string")
+        return false;
+    try {
+        return new URL(url).pathname.replace(/\/$/, "").endsWith("/mcp/modeling");
+    }
+    catch (_a) {
+        return false;
+    }
+}
+/** MCP host per deployment env, for the org-scoped remote endpoint. */
+const MCP_HOSTS = {
+    production: (org) => `https://${org}.mcp.credibledata.com`,
+    // The AWS cell composes every public hostname onto its own delegated domain
+    // (`legacy_domain_base` in `infrastructure/environments/aws/videoamp/prod/
+    // env.hcl`, which `legacy_is_canonical` makes canonical), so this is NOT the
+    // production host with a different org in front. Copying production's line
+    // here is the omission the data-plane map below already carries a warning
+    // about, and it points a videoamp user's `.mcp.json` at the GCP cell.
+    videoamp: (org) => `https://${org}.mcp.videoamp-aws-us-east-1.credibledata.com`,
+    staging: (org) => `https://${org}.staging-mcp.credibledata.com`,
+    dev: (org) => `https://${org}.dev-mcp.credibledata.com`,
+    localhost: (org) => `http://${org}.mcp.credibledata.localhost:8000`,
+    "aws-dev": (org) => `https://${org}.aws-dev-mcp.credibledata.com`,
+    "aws-dev-2": (org) => `https://${org}.aws-dev-2-mcp.credibledata.com`,
+    "aws-affinity": (org) => `https://${org}.aws-affinity-mcp.credibledata.com`,
+    "e2e-test": (org) => `http://${org}.mcp.credibledata.localhost:8000`,
+};
+function localPublisherUrl(mcpPort) {
+    return `http://127.0.0.1:${mcpPort}/mcp`;
+}
+/**
+ * The org-scoped remote MCP URL.
+ *
+ * `docs/mcp-global-endpoint-and-install-design.md` makes
+ * `https://mcp.credibledata.com/mcp` the canonical URL that docs lead with, and
+ * reframes the org-scoped host as a deliberate scope-down. Setup uses the
+ * scoped one *because* it already knows the organization: scoping down here
+ * removes the orientation tax that doc names as problem #1, where the agent
+ * burns two or three discovery calls before its first useful one.
+ */
+function remoteCredibleUrl(deployment, organization) {
+    return `${MCP_HOSTS[deployment](organization)}/mcp`;
+}
+/**
+ * Merge our two entries into `<directory>/.mcp.json`, preserving everything else.
+ *
+ * Merge rather than create-or-replace, for two reasons that pull in opposite
+ * directions and both matter:
+ *
+ *  - a user's own MCP servers in this file must survive `cred init`, so we only
+ *    ever touch the keys we own, plus the ones we used to own and now remove;
+ *  - our own entries must be *overwritten*, not preserved, because the port
+ *    can legitimately change between runs and a stale local URL is the silent
+ *    failure this whole file exists to avoid.
+ *
+ * No token is ever written. The local server needs none, and the remote one is
+ * reached with the client's own OAuth.
+ */
+function writeMcpConfig(options) {
+    var _a;
+    const filePath = path_1.default.join(options.directory, exports.MCP_CONFIG_FILENAME);
+    let existing = {};
+    let existingRaw;
+    let unmergeable = false;
+    try {
+        existingRaw = fs_1.default.readFileSync(filePath, "utf-8");
+        // Strip a leading byte-order mark before parsing. `JSON.parse` rejects
+        // one, but it is what Windows editors and PowerShell's `Out-File` write
+        // by default, and the agents that read this file accept it — so without
+        // this the file is valid to its actual consumer and unparseable to us.
+        const parsed = JSON.parse(existingRaw.replace(/^\uFEFF/, ""));
+        // A file whose top level is not an object (an array, a bare string)
+        // cannot be merged into.
+        if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+            existing = parsed;
+        }
+        else {
+            unmergeable = true;
+        }
+    }
+    catch (_b) {
+        // Missing, or present and unparseable. Only the second is a problem: the
+        // merge below is `{...existing, mcpServers}`, so proceeding with an empty
+        // `existing` does not just skip the file, it overwrites it — dropping
+        // every server the user configured themselves.
+        unmergeable = existingRaw !== undefined && existingRaw.trim() !== "";
+    }
+    // Keep a copy of anything we are about to replace but could not read. The
+    // rewrite still happens — setup's job is to leave a working `.mcp.json`
+    // behind — but the user's own entries remain recoverable, and the caller
+    // says where they went.
+    // A fresh name each time: an earlier run's `.bak` is the only copy of
+    // whatever that run could not read, and overwriting it lost that silently.
+    let displaced;
+    if (unmergeable && existingRaw !== undefined) {
+        displaced = `${filePath}.bak`;
+        for (let n = 1; fs_1.default.existsSync(displaced); n += 1) {
+            displaced = `${filePath}.bak.${n}`;
+        }
+        (0, writefile_1.writeFileAtomic)(displaced, existingRaw);
+    }
+    const servers = Object.assign({}, ((_a = existing.mcpServers) !== null && _a !== void 0 ? _a : {}));
+    // Ours to remove, not to preserve: see RETIRED_SERVER_NAMES.
+    const retired = exports.RETIRED_SERVER_NAMES.filter((name) => name in servers && isRetiredEntry(servers[name]));
+    const preserved = Object.keys(servers).filter((name) => !exports.OWNED_SERVER_NAMES.includes(name) && !retired.includes(name));
+    for (const name of retired) {
+        delete servers[name];
+    }
+    servers[exports.LOCAL_SERVER_NAME] = {
+        type: "http",
+        url: localPublisherUrl(options.mcpPort),
+    };
+    servers[exports.REMOTE_SERVER_NAME] = {
+        type: "http",
+        url: remoteCredibleUrl(options.deployment, options.organization),
+    };
+    const merged = Object.assign(Object.assign({}, existing), { mcpServers: servers });
+    // The file's own indentation, so merging into a committed `.mcp.json`
+    // changes the lines that changed rather than every line. Two spaces for a
+    // new file, as Claude Code writes it.
+    const content = `${JSON.stringify(merged, null, detectIndent(existingRaw))}\n`;
+    if (existingRaw === content) {
+        return { filePath, changed: false, preserved, retired, displaced };
+    }
+    (0, writefile_1.writeFileAtomic)(filePath, content);
+    return { filePath, changed: true, preserved, retired, displaced };
+}
+/** The indentation of the first indented line, or two spaces. */
+function detectIndent(text) {
+    const match = /^([ \t]+)\S/m.exec(text !== null && text !== void 0 ? text : "");
+    return match ? match[1] : "  ";
+}
+//# sourceMappingURL=mcpconfig.js.map

package/dist/setup-core/mcpconfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpconfig.js","sourceRoot":"","sources":["../../src/setup-core/mcpconfig.ts"],"names":[],"mappings":";;;;;;AAmGA,8CAEC;AAYD,8CAKC;AAwCD,wCAkFC;AAGD,oCAGC;AAtPD,4CAAoB;AACpB,gDAAwB;AAExB,2CAA8C;AAE9C;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEU,QAAA,mBAAmB,GAAG,WAAW,CAAC;AAE/C,2EAA2E;AAC9D,QAAA,iBAAiB,GAAG,QAAQ,CAAC;AAC1C,yFAAyF;AAC5E,QAAA,kBAAkB,GAAG,UAAU,CAAC;AAC7C,4DAA4D;AAC/C,QAAA,kBAAkB,GAAG,CAAC,yBAAiB,EAAE,0BAAkB,CAAC,CAAC;AAE1E;;;;;;;;;;;;;;;;;;GAkBG;AACU,QAAA,oBAAoB,GAAG,CAAC,mBAAmB,CAAC,CAAC;AAE1D,+EAA+E;AAC/E,SAAS,cAAc,CAAC,KAAc;IACnC,MAAM,GAAG,GAAI,KAAuC,aAAvC,KAAK,uBAAL,KAAK,CAAoC,GAAG,CAAC;IAC1D,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC;QACF,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC7E,CAAC;IAAC,WAAM,CAAC;QACN,OAAO,KAAK,CAAC;IAChB,CAAC;AACJ,CAAC;AAYD,uEAAuE;AACvE,MAAM,SAAS,GAAiD;IAC7D,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,GAAG,uBAAuB;IAC1D,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,0EAA0E;IAC1E,sEAAsE;IACtE,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CACf,WAAW,GAAG,8CAA8C;IAC/D,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,GAAG,+BAA+B;IAC/D,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,GAAG,2BAA2B;IACvD,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,GAAG,kCAAkC;IACnE,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,GAAG,+BAA+B;IACjE,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,GAAG,iCAAiC;IACrE,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,GAAG,oCAAoC;IAC3E,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,GAAG,kCAAkC;CACtE,CAAC;AAEF,SAAgB,iBAAiB,CAAC,OAAe;IAC9C,OAAO,oBAAoB,OAAO,MAAM,CAAC;AAC5C,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,iBAAiB,CAC9B,UAAuB,EACvB,YAAoB;IAEpB,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;AACvD,CAAC;AAyBD;;;;;;;;;;;;;;GAcG;AACH,SAAgB,cAAc,CAAC,OAK9B;;IACE,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,2BAAmB,CAAC,CAAC;IAEnE,IAAI,QAAQ,GAAkB,EAAE,CAAC;IACjC,IAAI,WAA+B,CAAC;IACpC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC;QACF,WAAW,GAAG,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9D,oEAAoE;QACpE,yBAAyB;QACzB,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,QAAQ,GAAG,MAAM,CAAC;QACrB,CAAC;aAAM,CAAC;YACL,WAAW,GAAG,IAAI,CAAC;QACtB,CAAC;IACJ,CAAC;IAAC,WAAM,CAAC;QACN,yEAAyE;QACzE,0EAA0E;QAC1E,sEAAsE;QACtE,+CAA+C;QAC/C,WAAW,GAAG,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IACxE,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,yEAAyE;IACzE,wBAAwB;IACxB,sEAAsE;IACtE,2EAA2E;IAC3E,IAAI,SAA6B,CAAC;IAClC,IAAI,WAAW,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5C,SAAS,GAAG,GAAG,QAAQ,MAAM,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,YAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,SAAS,GAAG,GAAG,QAAQ,QAAQ,CAAC,EAAE,CAAC;QACtC,CAAC;QACD,IAAA,2BAAe,EAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,OAAO,qBAAQ,CAAC,MAAA,QAAQ,CAAC,UAAU,mCAAI,EAAE,CAAC,CAAE,CAAC;IACnD,6DAA6D;IAC7D,MAAM,OAAO,GAAG,4BAAoB,CAAC,MAAM,CACxC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,OAAO,IAAI,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAC5D,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAC1C,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,0BAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CACzE,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,yBAAiB,CAAC,GAAG;QAC1B,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC;KACzC,CAAC;IACF,OAAO,CAAC,0BAAkB,CAAC,GAAG;QAC3B,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,iBAAiB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC;KAClE,CAAC;IAEF,MAAM,MAAM,mCAAuB,QAAQ,KAAE,UAAU,EAAE,OAAO,GAAE,CAAC;IACnE,sEAAsE;IACtE,0EAA0E;IAC1E,sCAAsC;IACtC,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC;IAE/E,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACtE,CAAC;IAED,IAAA,2BAAe,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACrE,CAAC;AAED,iEAAiE;AACjE,SAAgB,YAAY,CAAC,IAAwB;IAClD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC"}

package/dist/setup-core/mcpconfig.spec.js

@@ -0,0 +1,205 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const chai_1 = require("chai");
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = require("path");
+const mcpconfig_1 = require("./mcpconfig");
+describe("writeMcpConfig", () => {
+    let directory;
+    beforeEach(() => {
+        directory = fs_1.default.mkdtempSync((0, path_1.join)(os_1.default.tmpdir(), "mcpconfig-"));
+    });
+    afterEach(() => {
+        fs_1.default.rmSync(directory, { recursive: true, force: true });
+    });
+    const options = {
+        mcpPort: 4040,
+        deployment: "production",
+        organization: "acme",
+    };
+    function read() {
+        return JSON.parse(fs_1.default.readFileSync((0, path_1.join)(directory, ".mcp.json"), "utf-8"));
+    }
+    // A committed `.mcp.json` re-indented on merge showed every line as
+    // changed in the user's diff.
+    it("keeps the file's own indentation, and uses two spaces for a new file", () => {
+        const file = (0, path_1.join)(directory, ".mcp.json");
+        fs_1.default.writeFileSync(file, '{\n    "mcpServers": {\n        "mine": { "type": "http", "url": "http://x" }\n    }\n}\n');
+        (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        (0, chai_1.expect)(fs_1.default.readFileSync(file, "utf-8")).to.match(/^\{\n {4}"mcpServers"/);
+        fs_1.default.rmSync(file);
+        (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        (0, chai_1.expect)(fs_1.default.readFileSync(file, "utf-8")).to.match(/^\{\n {2}"mcpServers"/);
+    });
+    it("writes the two entries with no token anywhere", () => {
+        const result = (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        (0, chai_1.expect)(result.changed).to.equal(true);
+        const config = read();
+        (0, chai_1.expect)(config.mcpServers).to.eql({
+            malloy: { type: "http", url: "http://127.0.0.1:4040/mcp" },
+            credible: {
+                type: "http",
+                url: "https://acme.mcp.credibledata.com/mcp",
+            },
+        });
+        // The local server needs no auth; the remote one uses the client's own
+        // OAuth. A token in this file would be the invariant this design keeps.
+        (0, chai_1.expect)(fs_1.default.readFileSync((0, path_1.join)(directory, ".mcp.json"), "utf-8")).to.not.match(/token/i);
+    });
+    it("uses the IP literal for the local server, never localhost", () => {
+        // `localhost` resolves to both loopback families while the server binds
+        // one, so another process can hold the same port on the other family and
+        // receive the agent's traffic.
+        (0, chai_1.expect)((0, mcpconfig_1.localPublisherUrl)(4040)).to.equal("http://127.0.0.1:4040/mcp");
+        (0, chai_1.expect)((0, mcpconfig_1.localPublisherUrl)(4040)).to.not.contain("localhost");
+    });
+    // The whole reason `credible-modeling` is listed rather than deleted from
+    // the source: a name this writer no longer owns would otherwise be
+    // *preserved*, so the first users would carry the retired entry forever —
+    // and an agent would keep choosing between two `search_database_schema`s.
+    it("removes the retired credible-modeling entry instead of preserving it", () => {
+        fs_1.default.writeFileSync((0, path_1.join)(directory, ".mcp.json"), JSON.stringify({
+            mcpServers: {
+                "credible-modeling": {
+                    type: "http",
+                    url: "https://acme.mcp.credibledata.com/mcp/modeling",
+                },
+                mine: { type: "http", url: "http://example" },
+            },
+        }));
+        const result = (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        (0, chai_1.expect)(result.retired).to.eql(["credible-modeling"]);
+        (0, chai_1.expect)(result.preserved).to.eql(["mine"]);
+        (0, chai_1.expect)(Object.keys(read().mcpServers).sort()).to.eql([
+            "credible",
+            "malloy",
+            "mine",
+        ]);
+    });
+    // Retired by name alone, a user's own server called credible-modeling was
+    // deleted.
+    it("keeps a credible-modeling entry that is not the one setup wrote", () => {
+        fs_1.default.writeFileSync((0, path_1.join)(directory, ".mcp.json"), JSON.stringify({
+            mcpServers: {
+                "credible-modeling": { type: "http", url: "http://mine/mcp" },
+            },
+        }));
+        const result = (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        (0, chai_1.expect)(result.retired).to.eql([]);
+        (0, chai_1.expect)(result.preserved).to.eql(["credible-modeling"]);
+        (0, chai_1.expect)(read().mcpServers["credible-modeling"].url).to.equal("http://mine/mcp");
+    });
+    it("reports nothing retired when the file never had it", () => {
+        (0, chai_1.expect)((0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options)).retired).to.eql([]);
+    });
+    it("preserves MCP servers it does not own", () => {
+        fs_1.default.writeFileSync((0, path_1.join)(directory, ".mcp.json"), JSON.stringify({
+            mcpServers: {
+                "my-own-thing": { type: "http", url: "http://example.com/mcp" },
+            },
+        }));
+        const result = (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        (0, chai_1.expect)(result.preserved).to.eql(["my-own-thing"]);
+        (0, chai_1.expect)(read().mcpServers["my-own-thing"]).to.eql({
+            type: "http",
+            url: "http://example.com/mcp",
+        });
+    });
+    it("preserves unrelated top-level keys", () => {
+        fs_1.default.writeFileSync((0, path_1.join)(directory, ".mcp.json"), JSON.stringify({ someOtherSetting: true }));
+        (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        (0, chai_1.expect)(read().someOtherSetting).to.equal(true);
+    });
+    it("OVERWRITES its own stale local entry when the port changed", () => {
+        // The opposite of preserving: a stale local URL is the silent failure this
+        // file exists to prevent, so our own entries are always rewritten.
+        fs_1.default.writeFileSync((0, path_1.join)(directory, ".mcp.json"), JSON.stringify({
+            mcpServers: {
+                malloy: { type: "http", url: "http://127.0.0.1:9999/mcp" },
+            },
+        }));
+        (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        (0, chai_1.expect)(read().mcpServers.malloy.url).to.equal("http://127.0.0.1:4040/mcp");
+    });
+    it("reports no change when the file already says exactly this", () => {
+        (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        const second = (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        (0, chai_1.expect)(second.changed).to.equal(false);
+    });
+    it("recovers from an unparseable file rather than failing setup", () => {
+        fs_1.default.writeFileSync((0, path_1.join)(directory, ".mcp.json"), "{ not json");
+        const result = (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        (0, chai_1.expect)(result.changed).to.equal(true);
+        (0, chai_1.expect)(read().mcpServers.malloy).to.exist;
+    });
+    it("treats a top-level array as absent rather than crashing", () => {
+        fs_1.default.writeFileSync((0, path_1.join)(directory, ".mcp.json"), "[1,2,3]");
+        const result = (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        (0, chai_1.expect)(result.changed).to.equal(true);
+        (0, chai_1.expect)(read().mcpServers.credible).to.exist;
+    });
+    // A byte-order mark is what Windows editors and PowerShell's `Out-File`
+    // write, and the agents that read `.mcp.json` accept one. `JSON.parse` does
+    // not — so without stripping it, a file that works perfectly for its actual
+    // consumer parses as absent and the merge below overwrites it.
+    it("merges into a file that carries a byte-order mark", () => {
+        fs_1.default.writeFileSync((0, path_1.join)(directory, ".mcp.json"), `\uFEFF${JSON.stringify({
+            mcpServers: { mine: { type: "http", url: "http://example" } },
+        })}`);
+        const result = (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        (0, chai_1.expect)(result.preserved).to.eql(["mine"]);
+        (0, chai_1.expect)(result.displaced).to.equal(undefined);
+        (0, chai_1.expect)(read().mcpServers.mine.url).to.equal("http://example");
+        (0, chai_1.expect)(read().mcpServers.malloy).to.exist;
+    });
+    // The rewrite still happens — setup's job is to leave a working file — but
+    // the user's own servers have to remain recoverable, and the caller has to
+    // be told. `preserved` cannot carry this: it is empty precisely because
+    // nothing parsed, so on its own the user gets the generic "wrote .mcp.json"
+    // line and no hint that anything was lost.
+    it("keeps a copy of a file it could not read, and says so", () => {
+        const original = '{ "mcpServers": { "mine": {} } ';
+        fs_1.default.writeFileSync((0, path_1.join)(directory, ".mcp.json"), original);
+        const result = (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        (0, chai_1.expect)(result.displaced).to.equal((0, path_1.join)(directory, ".mcp.json.bak"));
+        (0, chai_1.expect)(fs_1.default.readFileSync(result.displaced, "utf-8")).to.equal(original);
+        (0, chai_1.expect)(read().mcpServers.malloy).to.exist;
+    });
+    // An earlier run's `.bak` is the only copy of what that run could not read.
+    it("does not overwrite an earlier copy", () => {
+        fs_1.default.writeFileSync((0, path_1.join)(directory, ".mcp.json.bak"), "earlier");
+        fs_1.default.writeFileSync((0, path_1.join)(directory, ".mcp.json"), "{ broken");
+        const result = (0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options));
+        (0, chai_1.expect)(result.displaced).to.equal((0, path_1.join)(directory, ".mcp.json.bak.1"));
+        (0, chai_1.expect)(fs_1.default.readFileSync((0, path_1.join)(directory, ".mcp.json.bak"), "utf-8")).to.equal("earlier");
+        (0, chai_1.expect)(fs_1.default.readFileSync(result.displaced, "utf-8")).to.equal("{ broken");
+    });
+    it("displaces nothing when there was no file to begin with", () => {
+        (0, chai_1.expect)((0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options)).displaced).to.equal(undefined);
+    });
+    it("displaces nothing for an empty file, which held nothing to lose", () => {
+        fs_1.default.writeFileSync((0, path_1.join)(directory, ".mcp.json"), "  \n");
+        (0, chai_1.expect)((0, mcpconfig_1.writeMcpConfig)(Object.assign({ directory }, options)).displaced).to.equal(undefined);
+        (0, chai_1.expect)(fs_1.default.existsSync((0, path_1.join)(directory, ".mcp.json.bak"))).to.equal(false);
+    });
+    describe("remoteCredibleUrl", () => {
+        it("scopes to the organization on each deployment env", () => {
+            (0, chai_1.expect)((0, mcpconfig_1.remoteCredibleUrl)("production", "acme")).to.equal("https://acme.mcp.credibledata.com/mcp");
+            (0, chai_1.expect)((0, mcpconfig_1.remoteCredibleUrl)("staging", "acme")).to.equal("https://acme.staging-mcp.credibledata.com/mcp");
+            (0, chai_1.expect)((0, mcpconfig_1.remoteCredibleUrl)("dev", "acme")).to.equal("https://acme.dev-mcp.credibledata.com/mcp");
+        });
+        it("puts videoamp on the AWS cell's own domain, not production's", () => {
+            // The cell composes every public hostname onto `videoamp-aws-us-east-1`
+            // (see its env.hcl). A copy of production's line here is legal, plausible
+            // and points a videoamp user's agent at the GCP cell — which is the same
+            // omission `publisherconfig.ts`'s data-plane map already guards against.
+            (0, chai_1.expect)((0, mcpconfig_1.remoteCredibleUrl)("videoamp", "acme")).to.equal("https://acme.mcp.videoamp-aws-us-east-1.credibledata.com/mcp");
+            (0, chai_1.expect)((0, mcpconfig_1.remoteCredibleUrl)("videoamp", "acme")).to.not.equal((0, mcpconfig_1.remoteCredibleUrl)("production", "acme"));
+        });
+    });
+});
+//# sourceMappingURL=mcpconfig.spec.js.map