@cybedefend/vibedefend 1.4.7 → 1.6.0

package/dist/mcp/config/cybedefend-servers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cybedefend-servers.js","sourceRoot":"","sources":["../../../src/mcp/config/cybedefend-servers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAc,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAEtD,CAAC;IACT,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,IAAI,CAAC,IAAI,CAAE,MAA+B,CAAC,MAAM,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,MAAyB,OAAO,CAAC,GAAG;IAClF,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC"}

package/dist/mcp/config/discover.js

@@ -0,0 +1,114 @@
+/**
+ * Reading every MCP server a user has configured, across clients.
+ *
+ * Nothing here writes. Discovery is used by `sync` (what changed?), by `scan`
+ * (what is out there?) and by `install` (what should be wrapped?), and all
+ * three want the same answer, so it is computed once and in one shape.
+ *
+ * It never throws. A client whose config is a JSON fragment mid-edit, or a
+ * file the user cannot read, is reported as a problem on that one file — the
+ * measured worst outcome of the previous generation was a single malformed
+ * server blinding the verification of the whole park.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { MCP_CLIENT_ADAPTERS, mcpAdapterFor } from './clients.js';
+import { readJsonDocument } from './jsonEdit.js';
+import { wrappedUpstreamName, } from './types.js';
+export function discoverMcpConfigs(options = {}) {
+    const env = options.env ?? process.env;
+    const platform = options.platform ?? process.platform;
+    const readFileFn = options.readFileFn ?? ((path) => readFileSync(path, 'utf8'));
+    const existsFn = options.existsFn ?? existsSync;
+    const adapters = options.clients && options.clients.length > 0
+        ? options.clients.map((id) => mcpAdapterFor(id))
+        : MCP_CLIENT_ADAPTERS;
+    const entries = [];
+    const problems = [];
+    const files = [];
+    for (const adapter of adapters) {
+        for (const location of adapter.locations(env, platform)) {
+            if (!existsFn(location.file))
+                continue;
+            let text;
+            try {
+                text = readFileFn(location.file);
+            }
+            catch {
+                problems.push({ location, problem: 'unreadable' });
+                continue;
+            }
+            const parsed = readJsonDocument(text);
+            if (!parsed.ok) {
+                problems.push({ location, problem: parsed.problem });
+                continue;
+            }
+            files.push(location);
+            entries.push(...entriesIn(adapter, location, parsed.document));
+        }
+    }
+    return { entries, problems, files };
+}
+/** Every server in one document, from every map the client uses. */
+export function entriesIn(adapter, location, document) {
+    const entries = [];
+    for (const map of adapter.serverMaps(document, location)) {
+        const servers = readPath(document.value, map.keys);
+        if (typeof servers !== 'object' || servers === null || Array.isArray(servers))
+            continue;
+        // A `projects.<path>.mcpServers` section lives in the user's own file, so
+        // it is discovered AND rewritten. `projectPath` is what tells the writer
+        // where to put the wrapped entry back.
+        const projectPath = map.keys[0] === 'projects' ? map.keys[1] : undefined;
+        const entryLocation = projectPath
+            ? { ...location, scope: 'project-in-user-file', projectPath }
+            : location;
+        for (const [name, raw] of Object.entries(servers)) {
+            if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
+                continue;
+            const typed = raw;
+            const upstreamName = wrappedUpstreamName(typed);
+            const parsed = adapter.parse(name, typed);
+            entries.push({
+                location: entryLocation,
+                name,
+                raw: typed,
+                kind: parsed.kind,
+                wrapped: upstreamName !== null,
+                wrappedName: upstreamName ?? undefined,
+                spec: parsed.spec,
+            });
+        }
+    }
+    return entries;
+}
+/** `readPath(doc, ['projects', '/a/b', 'mcpServers'])`. */
+export function readPath(value, keys) {
+    let current = value;
+    for (const key of keys) {
+        if (typeof current !== 'object' || current === null || Array.isArray(current))
+            return undefined;
+        if (!Object.hasOwn(current, key))
+            return undefined;
+        current = Object.getOwnPropertyDescriptor(current, key)?.value;
+    }
+    return current;
+}
+/**
+ * Every entry the proxy could actually be put in front of.
+ *
+ * Excluded: entries already wrapped (nothing to do) and entries whose
+ * transport we could not read — wrapping one of those would replace a working
+ * server with a proxy that cannot reach it.
+ *
+ * ⚠️ NOT excluded any more: `projects.<path>.mcpServers`. Section 0 was
+ * amended on 2026-09-09 to "everything that lives in the user's home, never a
+ * versioned project file". Those sections live in the user's own
+ * `~/.claude.json`, and they are where `claude mcp add` writes by default —
+ * filtering them out meant the most common way of adding a server produced
+ * one that was never protected. A project's `.mcp.json` is still out of
+ * bounds, and it is excluded earlier: no adapter ever looks at one.
+ */
+export function wrappableEntries(entries) {
+    return entries.filter((entry) => !entry.wrapped && entry.kind !== 'unknown');
+}
+//# sourceMappingURL=discover.js.map

package/dist/mcp/config/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../../src/mcp/config/discover.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAA+C,MAAM,eAAe,CAAC;AAC9F,OAAO,EACL,mBAAmB,GAKpB,MAAM,YAAY,CAAC;AAyBpB,MAAM,UAAU,kBAAkB,CAAC,UAA2B,EAAE;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,CAAC;IAEhD,MAAM,QAAQ,GACZ,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAC3C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,mBAAmB,CAAC;IAE1B,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAwB,EAAE,CAAC;IAEtC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEvC,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;gBACnD,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBACrD,SAAS;YACX,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,SAAS,CACvB,OAAyB,EACzB,QAA2B,EAC3B,QAAsB;IAEtB,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QAExF,0EAA0E;QAC1E,yEAAyE;QACzE,uCAAuC;QACvC,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,MAAM,aAAa,GAAsB,WAAW;YAClD,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE;YAC7D,CAAC,CAAC,QAAQ,CAAC;QAEb,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAkC,CAAC,EAAE,CAAC;YAC7E,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5E,MAAM,KAAK,GAAG,GAA8B,CAAC;YAC7C,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,aAAa;gBACvB,IAAI;gBACJ,GAAG,EAAE,KAAK;gBACV,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,YAAY,KAAK,IAAI;gBAC9B,WAAW,EAAE,YAAY,IAAI,SAAS;gBACtC,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,QAAQ,CAAC,KAAc,EAAE,IAAuB;IAC9D,IAAI,OAAO,GAAY,KAAK,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAChG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QACnD,OAAO,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAmC;IAClE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;AAC/E,CAAC"}

package/dist/mcp/config/hook.js

@@ -0,0 +1,123 @@
+/**
+ * The Claude Code `SessionStart` hook that keeps the park wrapped.
+ *
+ * A user who runs `claude mcp add` after installing VibeDefend has just added
+ * a server the proxy knows nothing about. The plan's answer is not to ask them
+ * to remember `vibedefend sync`: the hook runs it at the start of every
+ * session, quietly.
+ *
+ * What a `SessionStart` hook writes on stdout is APPENDED TO THE AGENT'S
+ * CONTEXT. That is why `sync --quiet` prints nothing at all when everything
+ * is in order: a line of reassurance on every session start is a line the
+ * model reads, pays for, and may act on. One sentence, in English, only when
+ * there is something to say.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { clientConfigRoot } from '../proxy/paths.js';
+import { writeFileAtomic } from './atomicWrite.js';
+import { readJsonDocument, renderJson, DEFAULT_FORMAT } from './jsonEdit.js';
+/** The command the hook runs. Matched to recognise our own entry again. */
+export const SYNC_HOOK_COMMAND = 'vibedefend sync --quiet';
+/** Under the home directory, or under `VIBEDEFEND_MCP_DIR` when it stands in for it. */
+export function claudeCodeSettingsPath(env = process.env) {
+    return join(clientConfigRoot(env), '.claude', 'settings.json');
+}
+/**
+ * Adds the hook, or reports that it is already there.
+ *
+ * Idempotent by matching on the command rather than on deep equality: a user
+ * who added a `matcher` to our entry keeps it, and we do not add a second
+ * one beside it.
+ */
+export function installSyncHook(deps = {}) {
+    const env = deps.env ?? process.env;
+    const file = claudeCodeSettingsPath(env);
+    const readFileFn = deps.readFileFn ?? ((path) => readFileSync(path, 'utf8'));
+    const writeFileFn = deps.writeFileFn ?? defaultWrite;
+    const existsFn = deps.existsFn ?? existsSync;
+    let value = {};
+    let format = DEFAULT_FORMAT;
+    if (existsFn(file)) {
+        let text;
+        try {
+            text = readFileFn(file);
+        }
+        catch {
+            return { outcome: 'unreadable', file };
+        }
+        const parsed = readJsonDocument(text);
+        // Claude Code's settings file is the user's, and it may well have comments
+        // in it. Refusing is better than rewriting it without them.
+        if (!parsed.ok)
+            return { outcome: 'unreadable', file };
+        value = parsed.document.value;
+        format = parsed.document.format;
+    }
+    const hooks = asObject(value.hooks) ?? {};
+    const sessionStart = Array.isArray(hooks.SessionStart) ? [...hooks.SessionStart] : [];
+    if (sessionStart.some((entry) => mentionsSyncHook(entry))) {
+        return { outcome: 'already-installed', file };
+    }
+    sessionStart.push({ hooks: [{ type: 'command', command: SYNC_HOOK_COMMAND }] });
+    hooks.SessionStart = sessionStart;
+    value.hooks = hooks;
+    writeFileFn(file, renderJson(value, format));
+    return { outcome: 'installed', file };
+}
+/** Removes our entry, leaving every other hook alone. */
+export function removeSyncHook(deps = {}) {
+    const env = deps.env ?? process.env;
+    const file = claudeCodeSettingsPath(env);
+    const readFileFn = deps.readFileFn ?? ((path) => readFileSync(path, 'utf8'));
+    const writeFileFn = deps.writeFileFn ?? defaultWrite;
+    const existsFn = deps.existsFn ?? existsSync;
+    if (!existsFn(file))
+        return { outcome: 'already-installed', file };
+    let text;
+    try {
+        text = readFileFn(file);
+    }
+    catch {
+        return { outcome: 'unreadable', file };
+    }
+    const parsed = readJsonDocument(text);
+    if (!parsed.ok)
+        return { outcome: 'unreadable', file };
+    const value = parsed.document.value;
+    const hooks = asObject(value.hooks);
+    if (!hooks || !Array.isArray(hooks.SessionStart))
+        return { outcome: 'already-installed', file };
+    const kept = hooks.SessionStart.filter((entry) => !mentionsSyncHook(entry));
+    if (kept.length === hooks.SessionStart.length)
+        return { outcome: 'already-installed', file };
+    // An empty array left behind is noise in a file the user reads.
+    if (kept.length === 0)
+        delete hooks.SessionStart;
+    else
+        hooks.SessionStart = kept;
+    if (Object.keys(hooks).length === 0)
+        delete value.hooks;
+    writeFileFn(file, renderJson(value, parsed.document.format));
+    return { outcome: 'installed', file };
+}
+/** Does this `SessionStart` entry run our sync? */
+export function mentionsSyncHook(entry) {
+    const group = asObject(entry);
+    if (!group || !Array.isArray(group.hooks))
+        return false;
+    return group.hooks.some((hook) => {
+        const typed = asObject(hook);
+        const command = typed && typeof typed.command === 'string' ? typed.command : '';
+        return /\bvibedefend\b.*\bsync\b/.test(command);
+    });
+}
+function asObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value)
+        ? value
+        : null;
+}
+function defaultWrite(path, content) {
+    writeFileAtomic(path, content, { mode: 0o644, directoryMode: 0o755 });
+}
+//# sourceMappingURL=hook.js.map

package/dist/mcp/config/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../../src/mcp/config/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE7E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAE3D,wFAAwF;AACxF,MAAM,UAAU,sBAAsB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACzE,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AACjE,CAAC;AAgBD;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,OAAiB,EAAE;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC;IAE7C,IAAI,KAAK,GAA4B,EAAE,CAAC;IACxC,IAAI,MAAM,GAAG,cAAc,CAAC;IAE5B,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,2EAA2E;QAC3E,4DAA4D;QAC5D,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACvD,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC9B,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IAClC,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtF,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAChD,CAAC;IAED,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC;IAChF,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC;IAClC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAEpB,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AACxC,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,cAAc,CAAC,OAAiB,EAAE;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC;IAE7C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;IACnE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAEvD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;IACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAEhG,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,YAAY,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAE7F,gEAAgE;IAChE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC;;QAC5C,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;IAC/B,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC;IAExD,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AACxC,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,OAAO,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe;IACjD,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;AACxE,CAAC"}

package/dist/mcp/config/index.js

@@ -0,0 +1,11 @@
+/**
+ * The client-config layer: discover what a user has, wrap it behind the
+ * proxy, and put it back.
+ */
+export * from './clients.js';
+export * from './discover.js';
+export * from './hook.js';
+export * from './jsonEdit.js';
+export * from './rewrite.js';
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/mcp/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp/config/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/mcp/config/install.js

@@ -0,0 +1,132 @@
+import { installedMarkerPath, isProxyInstalled, removeInstalledMarker, writeInstalledMarker, } from './installed.js';
+import { checkProxyBinary, proxyBinaryKnowsMcp, } from './proxyBinary.js';
+import { applySyncPlan, planSync, planUninstall } from './rewrite.js';
+/** Why an install may not proceed, or `null` when it may. */
+export function installRefusal(check, deps) {
+    if (!check.onPath)
+        return { reason: 'not-on-path', path: null };
+    if (!proxyBinaryKnowsMcp(check, { execFileFn: deps.execFileFn })) {
+        return { reason: 'no-mcp-subcommand', path: check.onPath };
+    }
+    return null;
+}
+export function installProxy(deps) {
+    const check = checkProxyBinary({ env: deps.env, argv1: deps.argv1, platform: deps.platform });
+    const refused = installRefusal(check, deps);
+    if (refused)
+        return { refused, check };
+    const plan = planSync({ env: deps.env, clients: deps.clients, platform: deps.platform });
+    const result = applySyncPlan(plan, {
+        env: deps.env,
+        dryRun: deps.dryRun,
+        backup: deps.backup,
+        now: deps.now,
+    });
+    if (!deps.dryRun) {
+        writeInstalledMarker({ env: deps.env, binary: check.running, now: deps.now });
+    }
+    return { check, plan, result };
+}
+/**
+ * Taking the proxy out needs no PATH check: restoring an original entry is
+ * right whatever the PATH holds. The marker goes with the last client — a
+ * partial `--client` uninstall leaves the others wrapped, and their proxies
+ * still need their permission to sync.
+ */
+export function uninstallProxy(deps) {
+    const plan = planUninstall({ env: deps.env, clients: deps.clients, platform: deps.platform });
+    const result = applySyncPlan(plan, {
+        env: deps.env,
+        dryRun: deps.dryRun,
+        backup: deps.backup,
+        now: deps.now,
+    });
+    if (!deps.dryRun && !(deps.clients && deps.clients.length > 0) && isProxyInstalled(deps.env)) {
+        removeInstalledMarker(deps.env);
+    }
+    return { plan, result };
+}
+const INSTALL_HINT = 'npm install -g @cybedefend/vibedefend';
+/** The sentence a human gets. `command` is what they typed. */
+export function installRefusalMessage(refusal, command = 'vibedefend sync') {
+    if (refusal.reason === 'not-on-path') {
+        return (`${command}: no \`vibedefend\` on the PATH. The proxy entries it writes ` +
+            '(`vibedefend mcp --name <server>`) would point at a command your MCP clients cannot find. ' +
+            `Install it with \`${INSTALL_HINT}\`, then run \`vibedefend sync\` again.`);
+    }
+    return (`${command}: the \`vibedefend\` on your PATH (${refusal.path}) does not know the \`mcp\` subcommand, ` +
+        'so the proxy entries it writes would not start. ' +
+        `Upgrade it with \`${INSTALL_HINT}@latest\`, then run \`vibedefend sync\` again.`);
+}
+/** The one sentence the `SessionStart` hook may add to the agent's context. */
+export function installRefusalSentence(refusal) {
+    const cause = refusal.reason === 'not-on-path'
+        ? 'there is no `vibedefend` on the PATH'
+        : `the \`vibedefend\` on the PATH (${refusal.path}) does not know \`mcp\``;
+    return `VibeDefend left the MCP servers unwrapped: ${cause}; run \`${INSTALL_HINT}@latest\` and then \`vibedefend sync\`.`;
+}
+/**
+ * The three facts a wrapped entry depends on, and that nothing in a client
+ * surfaces when one of them is false: every wrapped server just fails to
+ * start. The typical way to get there is nvm — each Node version has its own
+ * global install, and switching versions changes which `vibedefend` the PATH
+ * resolves to, possibly a release without `mcp`. This diagnoses; it never
+ * repairs.
+ */
+export function diagnoseProxyInstall(deps) {
+    const check = checkProxyBinary({ env: deps.env, argv1: deps.argv1, platform: deps.platform });
+    const knowsMcp = check.onPath ? proxyBinaryKnowsMcp(check, { execFileFn: deps.execFileFn }) : null;
+    return {
+        installed: isProxyInstalled(deps.env),
+        marker: installedMarkerPath(deps.env),
+        running: check.running,
+        onPath: check.onPath,
+        matches: check.matches,
+        knowsMcp,
+    };
+}
+/** Three lines, one per fact, in the order a reader needs them. */
+export function describeProxyInstall(diagnosis) {
+    const running = diagnosis.running ?? 'unknown';
+    const lines = [];
+    lines.push(diagnosis.installed
+        ? { level: 'ok', text: `Proxy install: installed (marker at ${diagnosis.marker})` }
+        : {
+            level: 'warn',
+            text: 'Proxy install: not installed — wrapped entries are left alone until you run `vibedefend sync`',
+        });
+    if (!diagnosis.onPath) {
+        lines.push({
+            level: 'err',
+            text: `Running binary: ${running} — no \`vibedefend\` on the PATH, so a wrapped entry has nothing to start`,
+        });
+    }
+    else if (diagnosis.matches) {
+        lines.push({
+            level: 'ok',
+            text: `Running binary: ${running} — is the \`vibedefend\` on the PATH (${diagnosis.onPath})`,
+        });
+    }
+    else {
+        lines.push({
+            level: 'warn',
+            text: `Running binary: ${running} — NOT the \`vibedefend\` on the PATH (${diagnosis.onPath}); wrapped entries start that one`,
+        });
+    }
+    if (diagnosis.knowsMcp === null) {
+        lines.push({ level: 'warn', text: 'PATH vibedefend knows `mcp`: unknown (nothing on the PATH)' });
+    }
+    else if (diagnosis.knowsMcp) {
+        lines.push({ level: 'ok', text: 'PATH vibedefend knows `mcp`: yes' });
+    }
+    else {
+        lines.push({
+            level: 'err',
+            text: 'PATH vibedefend knows `mcp`: no — every wrapped entry starts a release without the proxy. ' +
+                'Switched Node versions with nvm? Each version has its own global install; run ' +
+                '`npm install -g @cybedefend/vibedefend@latest` under the version in use, then `vibedefend sync`.',
+        });
+    }
+    return lines;
+}
+//# sourceMappingURL=install.js.map

package/dist/mcp/config/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../../src/mcp/config/install.ts"],"names":[],"mappings":"AAoBA,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GAGpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAmC,MAAM,cAAc,CAAC;AA0BvG,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAAC,KAAuB,EAAE,IAA0C;IAChG,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChE,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAsB;IACjD,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEvC,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE;QACjC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,oBAAoB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC;AAWD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,MAAM,IAAI,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9F,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE;QACjC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7F,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,YAAY,GAAG,uCAAuC,CAAC;AAE7D,+DAA+D;AAC/D,MAAM,UAAU,qBAAqB,CAAC,OAAuB,EAAE,OAAO,GAAG,iBAAiB;IACxF,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACrC,OAAO,CACL,GAAG,OAAO,+DAA+D;YACzE,4FAA4F;YAC5F,qBAAqB,YAAY,yCAAyC,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,CACL,GAAG,OAAO,sCAAsC,OAAO,CAAC,IAAI,0CAA0C;QACtG,kDAAkD;QAClD,qBAAqB,YAAY,gDAAgD,CAClF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,OAAuB;IAC5D,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,KAAK,aAAa;QAC9B,CAAC,CAAC,sCAAsC;QACxC,CAAC,CAAC,mCAAmC,OAAO,CAAC,IAAI,yBAAyB,CAAC;IAC/E,OAAO,8CAA8C,KAAK,WAAW,YAAY,yCAAyC,CAAC;AAC7H,CAAC;AAwBD;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA8B;IACjE,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9F,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnG,OAAO;QACL,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QACrC,MAAM,EAAE,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QACrC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ;KACT,CAAC;AACJ,CAAC;AAOD,mEAAmE;AACnE,MAAM,UAAU,oBAAoB,CAAC,SAAgC;IACnE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC;IAC/C,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,KAAK,CAAC,IAAI,CACR,SAAS,CAAC,SAAS;QACjB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,uCAAuC,SAAS,CAAC,MAAM,GAAG,EAAE;QACnF,CAAC,CAAC;YACE,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,+FAA+F;SACtG,CACN,CAAC;IAEF,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,mBAAmB,OAAO,2EAA2E;SAC5G,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,mBAAmB,OAAO,yCAAyC,SAAS,CAAC,MAAM,GAAG;SAC7F,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,mBAAmB,OAAO,0CAA0C,SAAS,CAAC,MAAM,mCAAmC;SAC9H,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,4DAA4D,EAAE,CAAC,CAAC;IACpG,CAAC;SAAM,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,kCAAkC,EAAE,CAAC,CAAC;IACxE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,KAAK;YACZ,IAAI,EACF,4FAA4F;gBAC5F,gFAAgF;gBAChF,kGAAkG;SACrG,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/mcp/config/installed.js

@@ -0,0 +1,37 @@
+/**
+ * The `installed` marker.
+ *
+ * Written by an explicit install (`vibedefend install`, `vibedefend sync`),
+ * removed by `vibedefend unwrap`, and the first thing the proxy's
+ * background sync checks: with no marker, the proxy never writes into a
+ * client's config. A user who has not asked for the park to be wrapped does
+ * not get it wrapped because one proxy happened to start.
+ */
+import { existsSync, unlinkSync } from 'node:fs';
+import { join } from 'node:path';
+import { mcpHomeDir } from '../proxy/paths.js';
+import { writeFileAtomic } from './atomicWrite.js';
+export function installedMarkerPath(env = process.env) {
+    return join(mcpHomeDir(env), 'installed');
+}
+export function isProxyInstalled(env = process.env) {
+    return existsSync(installedMarkerPath(env));
+}
+export function writeInstalledMarker(deps) {
+    const now = deps.now ?? (() => new Date());
+    const content = `${JSON.stringify({ installedAt: now().toISOString(), binary: deps.binary }, null, 2)}\n`;
+    writeFileAtomic(installedMarkerPath(deps.env ?? process.env), content, {
+        mode: 0o600,
+        directoryMode: 0o700,
+    });
+}
+export function removeInstalledMarker(env = process.env) {
+    try {
+        unlinkSync(installedMarkerPath(env));
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+}
+//# sourceMappingURL=installed.js.map

package/dist/mcp/config/installed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installed.js","sourceRoot":"","sources":["../../../src/mcp/config/installed.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,OAAO,UAAU,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9C,CAAC;AASD,MAAM,UAAU,oBAAoB,CAAC,IAAyB;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC1G,eAAe,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE;QACrE,IAAI,EAAE,KAAK;QACX,aAAa,EAAE,KAAK;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,IAAI,CAAC;QACH,UAAU,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;AACH,CAAC"}

package/dist/mcp/config/jsonEdit.js

@@ -0,0 +1,119 @@
+/**
+ * Editing a client's JSON config without rewriting the parts we did not come
+ * for.
+ *
+ * The Phase 5 acceptance criterion is that `install` followed by `uninstall`
+ * leaves the file byte for byte as it was. That rules out
+ * `JSON.stringify(value, null, 2)`: it would reindent a four-space file,
+ * strip a trailing newline, turn CRLF into LF, and rewrite every line of a
+ * document the user has been editing by hand for a year. A diff like that is
+ * unreviewable, and it is the kind of thing that makes people uninstall a
+ * tool.
+ *
+ * So the shape is measured on the way in and reproduced on the way out. Key
+ * ORDER comes for free: `JSON.parse` preserves insertion order for
+ * non-numeric keys, and so does `JSON.stringify`, so an untouched object
+ * round-trips unchanged.
+ *
+ * What is NOT preserved, and cannot be without a full CST: comments (JSONC,
+ * which VS Code accepts) and trailing commas. `readJsonDocument` reports
+ * whether it saw either, and the callers refuse to write such a file rather
+ * than silently dropping a comment the user wrote.
+ */
+export const DEFAULT_FORMAT = {
+    indent: '  ',
+    newline: '\n',
+    trailingNewline: true,
+};
+/** Measures the shape of an existing document. */
+export function detectFormat(text) {
+    return {
+        indent: detectIndent(text),
+        newline: text.includes('\r\n') ? '\r\n' : '\n',
+        trailingNewline: /\n$/.test(text),
+    };
+}
+function detectIndent(text) {
+    // The first line that is more indented than its predecessor tells us the
+    // unit. A file with no nesting keeps the default, which it will never use.
+    for (const line of text.split(/\r?\n/)) {
+        const match = /^([ \t]+)\S/.exec(line);
+        if (match)
+            return match[1];
+    }
+    return DEFAULT_FORMAT.indent;
+}
+/** Renders a value in the measured shape. */
+export function renderJson(value, format) {
+    const body = JSON.stringify(value, null, format.indent);
+    const withNewlines = format.newline === '\r\n' ? body.replace(/\n/g, '\r\n') : body;
+    return format.trailingNewline ? `${withNewlines}${format.newline}` : withNewlines;
+}
+/**
+ * Parses a config document, refusing the shapes we cannot write back.
+ *
+ * JSONC is refused rather than accepted-and-flattened. VS Code's `mcp.json`
+ * legitimately contains comments, and a user who wrote
+ * `// disabled for now, see JIRA-4021` above a server would find it gone
+ * after an install that never said it touched it.
+ */
+export function readJsonDocument(text) {
+    if (hasCommentsOrTrailingCommas(text))
+        return { ok: false, problem: 'jsonc' };
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        return { ok: false, problem: 'unparseable' };
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        return { ok: false, problem: 'not-an-object' };
+    }
+    return {
+        ok: true,
+        document: {
+            value: parsed,
+            format: detectFormat(text),
+            original: text,
+        },
+    };
+}
+/**
+ * Whether the text contains a comment or a trailing comma OUTSIDE a string.
+ *
+ * A scanner rather than a regular expression: `"url": "https://x/#anchor"`
+ * and `{"note": "a, b,}"}` are perfectly ordinary values, and a regex that
+ * did not track string state would refuse to touch half the real configs out
+ * there.
+ */
+export function hasCommentsOrTrailingCommas(text) {
+    let inString = false;
+    let escaped = false;
+    let lastMeaningful = '';
+    for (let index = 0; index < text.length; index += 1) {
+        const char = text[index];
+        if (inString) {
+            if (escaped)
+                escaped = false;
+            else if (char === '\\')
+                escaped = true;
+            else if (char === '"')
+                inString = false;
+            continue;
+        }
+        if (char === '"') {
+            inString = true;
+            lastMeaningful = '"';
+            continue;
+        }
+        if (char === '/' && (text[index + 1] === '/' || text[index + 1] === '*'))
+            return true;
+        if ((char === '}' || char === ']') && lastMeaningful === ',')
+            return true;
+        if (!/\s/.test(char))
+            lastMeaningful = char;
+    }
+    return false;
+}
+//# sourceMappingURL=jsonEdit.js.map

package/dist/mcp/config/jsonEdit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonEdit.js","sourceRoot":"","sources":["../../../src/mcp/config/jsonEdit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AASH,MAAM,CAAC,MAAM,cAAc,GAAe;IACxC,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,IAAI;IACb,eAAe,EAAE,IAAI;CACtB,CAAC;AAEF,kDAAkD;AAClD,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO;QACL,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC;QAC1B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAC9C,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,yEAAyE;IACzE,2EAA2E;IAC3E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,cAAc,CAAC,MAAM,CAAC;AAC/B,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,UAAU,CAAC,KAAc,EAAE,MAAkB;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpF,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,YAAY,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;AACpF,CAAC;AAqBD;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,2BAA2B,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9E,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACjD,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE;YACR,KAAK,EAAE,MAAiC;YACxC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC;YAC1B,QAAQ,EAAE,IAAI;SACf;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAY;IACtD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,cAAc,GAAG,EAAE,CAAC;IAExB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAEzB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,OAAO;gBAAE,OAAO,GAAG,KAAK,CAAC;iBACxB,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;iBAClC,IAAI,IAAI,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;YACxC,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,QAAQ,GAAG,IAAI,CAAC;YAChB,cAAc,GAAG,GAAG,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACtF,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI,cAAc,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC1E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,cAAc,GAAG,IAAI,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}