@darwinium/portal-mcp 0.0.1 → 0.0.2

package/dist/bin/install-BhzwhhI-.js

@@ -0,0 +1,264 @@
+import { a as TOKEN_DIR, i as EXTENSION_DIR, o as TOKEN_PATH } from "./killProcessOnPort-Bt5MA5Dv.js";
+import { t as bundledExtensionZipPath } from "./bundlePaths-CSftU0OK.js";
+import { a as info, c as lockAcl, i as fail, o as ok, s as warn } from "./term-Bg7icwx7.js";
+import { t as generateAndWrite } from "./store-B3e4WCLw.js";
+import { n as maybeMigrate, t as run } from "./oobPair-ybkkqrSh.js";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import AdmZip from "adm-zip";
+
+//#region src/install/extract.ts
+/**
+* Bundled-extension extractor.
+*
+* The npm-published binary ships with a copy of the WXT-built portal-extension
+* zip at `extension-bundle/extension.zip` (placed there by
+* `scripts/bundle-extension.ts` during prebuild). At install time we extract it
+* to `<env-paths data dir>/extension/` so customers can load it via Chrome's
+* "Load Unpacked" path on locked corporate machines that can't use the Web
+* Store.
+*
+* Idempotency: if the target directory already contains a manifest.json
+* with the same version as the bundled zip, we skip extraction so re-running
+* `install` doesn't churn the extracted dir. Drift (different version) is
+* handled by overwriting (with `extractAllTo(dir, true, false)`).
+*
+* Security: adm-zip's `extractAllTo(target, true, false)` does NOT preserve
+* original permissions and resolves entry paths relative to the extraction
+* target — no traversal beyond `targetDir`. A symlink pre-planted at the
+* target is risk-accepted.
+*/
+function readManifestVersion(json, source) {
+	let parsed;
+	try {
+		parsed = JSON.parse(json);
+	} catch {
+		throw new Error(`${source}: manifest.json is not valid JSON`);
+	}
+	if (!parsed || typeof parsed !== "object") throw new Error(`${source}: manifest.json is not a JSON object`);
+	const v = parsed.version;
+	if (typeof v !== "string" || v.length === 0) throw new Error(`${source}: manifest.json missing version string`);
+	return v;
+}
+/**
+* Extract `zipPath` into `targetDir`, skipping when the existing manifest
+* version matches the incoming version.
+*
+* Throws if the bundled zip is missing `manifest.json` or its version field
+* is missing/non-string (catastrophic build-time mistake — caller maps to
+* the `extract failed: ...` line and exits 1).
+*/
+function extractBundledExtension(zipPath, targetDir) {
+	const zip = new AdmZip(zipPath);
+	const manifestEntry = zip.getEntry("manifest.json");
+	if (!manifestEntry) throw new Error(`bundled zip ${zipPath} missing manifest.json`);
+	const incomingVersion = readManifestVersion(manifestEntry.getData().toString("utf8"), `bundled zip ${zipPath}`);
+	const existingManifest = path.join(targetDir, "manifest.json");
+	if (fs.existsSync(existingManifest)) try {
+		if (readManifestVersion(fs.readFileSync(existingManifest, "utf8"), `existing ${existingManifest}`) === incomingVersion) return {
+			extracted: false,
+			version: incomingVersion
+		};
+	} catch {}
+	fs.mkdirSync(targetDir, { recursive: true });
+	zip.extractAllTo(targetDir, true, false);
+	return {
+		extracted: true,
+		version: incomingVersion
+	};
+}
+
+//#endregion
+//#region src/install/configMerge.ts
+/**
+* Returns a merged JSON object with `mcpServers[serverName]` set to `entry`,
+* preserving all other top-level keys and other `mcpServers.*` siblings.
+*
+* `current` semantics:
+*   - `null` → treated as empty starting point (file did not exist on disk).
+*   - non-null non-object (e.g. array, string, number) → throws.
+*
+* Idempotency: if the existing entry is byte-equal (via JSON.stringify of
+* `args` and `env`) to the proposed entry, returns `{changed: false}` so the
+* caller can skip the `.bak` write and the temp-rename.
+*/
+function mergeMcpServersEntry(current, serverName, entry) {
+	if (current !== null && (typeof current !== "object" || Array.isArray(current))) throw new Error("claude_desktop_config.json is not a JSON object");
+	const base = current ?? {};
+	const rawServers = base.mcpServers;
+	if (rawServers !== void 0 && (typeof rawServers !== "object" || rawServers === null || Array.isArray(rawServers))) throw new Error("claude_desktop_config.json has a malformed \"mcpServers\" value");
+	const mcpServers = rawServers ?? {};
+	const existing = mcpServers[serverName];
+	const existed = existing !== void 0;
+	const existingEntry = typeof existing === "object" && existing !== null ? existing : void 0;
+	if (existingEntry !== void 0 && existingEntry.command === entry.command && JSON.stringify(existingEntry.args) === JSON.stringify(entry.args) && JSON.stringify(existingEntry.env ?? {}) === JSON.stringify(entry.env ?? {})) return {
+		merged: base,
+		changed: false,
+		existed: true
+	};
+	return {
+		merged: {
+			...base,
+			mcpServers: {
+				...mcpServers,
+				[serverName]: entry
+			}
+		},
+		changed: true,
+		existed
+	};
+}
+
+//#endregion
+//#region src/install/install.ts
+/**
+* `npx @darwinium/portal-mcp install` — orchestrator.
+*
+* Sequence:
+*   1. migrate.maybeMigrate()       — legacy token-path move
+*   2. token: skip if exists, else generateAndWrite({silent:true})
+*   3. winAcl.lockAcl(TOKEN_PATH) AND winAcl.lockAcl(TOKEN_DIR)
+*   4. extract.extractBundledExtension(zip, EXTENSION_DIR)
+*   5. configMerge → write `.bak` then atomic temp+rename
+*   6. Print Claude Code marketplace + Chrome extension instructions
+*   7. oobPair.run({mode:'install', expectedToken: token})
+*   8. Success summary + process.exit(0)
+*
+* Security:
+*   - Token never echoed — generateAndWrite({silent:true}).
+*   - configMerge entry contains only `npx @darwinium/portal-mcp serve` —
+*     no token, no env.
+*   - `.bak` written via copyFileSync BEFORE temp-write; atomic fs.renameSync
+*     replaces target. Malformed pre-existing JSON → refusal.
+*/
+/** Config entry — never includes the token; only the cli invocation. */
+const MCP_ENTRY = {
+	command: "npx",
+	args: [
+		"-y",
+		"@darwinium/portal-mcp",
+		"serve"
+	]
+};
+const SERVER_NAME = "darwinium-portal-mcp";
+/** Resolve the platform-correct claude_desktop_config.json path. */
+function resolveClaudeDesktopConfigPath() {
+	if (process.platform === "darwin") return path.join(os.homedir(), "Library", "Application Support", "Claude", "claude_desktop_config.json");
+	if (process.platform === "win32") {
+		const appData = process.env.APPDATA ?? path.join(os.homedir(), "AppData", "Roaming");
+		return path.join(appData, "Claude", "claude_desktop_config.json");
+	}
+	return path.join(os.homedir(), ".config", "Claude", "claude_desktop_config.json");
+}
+/** Read + parse claude_desktop_config.json. Returns null on ENOENT. */
+function readConfigJson(configPath) {
+	if (!fs.existsSync(configPath)) return null;
+	const raw = fs.readFileSync(configPath, "utf8");
+	try {
+		return JSON.parse(raw);
+	} catch (err) {
+		throw new Error(`claude_desktop_config.json is not valid JSON: ${err.message}`);
+	}
+}
+/** Atomic write: `.bak` (if pre-existing) → temp → rename. */
+function writeConfigJsonAtomic(configPath, merged, existed) {
+	if (existed) fs.copyFileSync(configPath, `${configPath}.bak`);
+	const tmpPath = `${configPath}.tmp.${process.pid}`;
+	fs.writeFileSync(tmpPath, JSON.stringify(merged, null, 2), { mode: 420 });
+	fs.renameSync(tmpPath, configPath);
+}
+/**
+* Apply the configMerge to claude_desktop_config.json. Emits exactly one
+* summary-line variant for the config row.
+*/
+function applyClaudeDesktopMerge() {
+	const configPath = resolveClaudeDesktopConfigPath();
+	const configDir = path.dirname(configPath);
+	if (!fs.existsSync(configDir)) {
+		warn(`config (Claude Desktop config dir not found at ${configDir} — install Claude Desktop or use the Claude Code marketplace path).`);
+		return;
+	}
+	let current;
+	try {
+		current = readConfigJson(configPath);
+	} catch {
+		fail(`config (refusing to write — ${configPath} is not valid JSON; please fix or delete and re-run)`);
+		process.exit(1);
+	}
+	let result;
+	try {
+		result = mergeMcpServersEntry(current, SERVER_NAME, MCP_ENTRY);
+	} catch (err) {
+		fail(`config (refusing to write — ${configPath} is not a JSON object: ${err.message})`);
+		process.exit(1);
+	}
+	const fileExisted = current !== null;
+	if (!result.changed) {
+		ok("config (existing match)");
+		return;
+	}
+	writeConfigJsonAtomic(configPath, result.merged, fileExisted);
+	if (result.existed) ok(`config (updated darwinium-portal-mcp entry; .bak written)`);
+	else if (fileExisted) ok(`config (added darwinium-portal-mcp entry to ${configPath}; .bak written)`);
+	else ok(`config (added darwinium-portal-mcp entry to ${configPath}; new file)`);
+}
+/** Print the Claude Code + Chrome extension instructions block. */
+function printPostInstallInstructions() {
+	console.error("");
+	info("Claude Code: run `/plugin marketplace add darwinium-com/portal-mcp-marketplace`");
+	console.error("             then `/plugin install portal-mcp` from inside Claude Code.");
+	console.error("");
+	info("Chrome extension — pick one:");
+	console.error("  (a) Web Store:  https://chromewebstore.google.com/detail/<placeholder-listing-url>");
+	console.error("  (b) Unpacked:   chrome://extensions → enable Developer Mode →");
+	console.error(`                  Load Unpacked → point at ${EXTENSION_DIR}`);
+	console.error("");
+}
+/** Public entry point — invoked from the lazy-loaded `install` action in bin. */
+async function runInstall(_opts = {}) {
+	info("install starting...");
+	maybeMigrate(TOKEN_PATH);
+	let token;
+	if (fs.existsSync(TOKEN_PATH)) {
+		token = fs.readFileSync(TOKEN_PATH, "utf8").trim();
+		const aclSuffix = process.platform === "win32" ? ", ACL locked" : "";
+		ok(`token (existing at ${TOKEN_PATH}, mode 0600${aclSuffix})`);
+	} else {
+		token = generateAndWrite({ silent: true });
+		const aclSuffix = process.platform === "win32" ? ", ACL locked" : "";
+		ok(`token (added at ${TOKEN_PATH}, mode 0600${aclSuffix})`);
+	}
+	for (const p of [TOKEN_PATH, TOKEN_DIR]) {
+		const r = lockAcl(p);
+		if (!r.ok) warn(`Could not restrict ACLs on ${p}: ${r.error}. Run \`${r.cmd}\` manually.`);
+	}
+	const extZip = bundledExtensionZipPath();
+	try {
+		const extResult = extractBundledExtension(extZip, EXTENSION_DIR);
+		if (extResult.extracted) ok(`extension (extracted v${extResult.version} to ${EXTENSION_DIR})`);
+		else ok(`extension (existing v${extResult.version})`);
+	} catch (err) {
+		fail(`extension (extract failed: ${err.message}; bundled extension at ${extZip} is intact — re-run install)`);
+		process.exit(1);
+	}
+	applyClaudeDesktopMerge();
+	printPostInstallInstructions();
+	await run({
+		mode: "install",
+		expectedToken: token
+	});
+	let extVersionForSuccess = "";
+	const manifestPath = path.join(EXTENSION_DIR, "manifest.json");
+	if (fs.existsSync(manifestPath)) try {
+		extVersionForSuccess = JSON.parse(fs.readFileSync(manifestPath, "utf8")).version;
+	} catch {}
+	if (extVersionForSuccess) ok(`paired with extension (extension version ${extVersionForSuccess})`);
+	else ok("paired with extension");
+	info("install complete. You can close this terminal.");
+	process.exit(0);
+}
+
+//#endregion
+export { runInstall };
+//# sourceMappingURL=install-BhzwhhI-.js.map

package/dist/bin/install-BhzwhhI-.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-BhzwhhI-.js","names":["winAcl.lockAcl","extract.extractBundledExtension","oobPair.run"],"sources":["../../src/install/extract.ts","../../src/install/configMerge.ts","../../src/install/install.ts"],"sourcesContent":["/**\n * Bundled-extension extractor.\n *\n * The npm-published binary ships with a copy of the WXT-built portal-extension\n * zip at `extension-bundle/extension.zip` (placed there by\n * `scripts/bundle-extension.ts` during prebuild). At install time we extract it\n * to `<env-paths data dir>/extension/` so customers can load it via Chrome's\n * \"Load Unpacked\" path on locked corporate machines that can't use the Web\n * Store.\n *\n * Idempotency: if the target directory already contains a manifest.json\n * with the same version as the bundled zip, we skip extraction so re-running\n * `install` doesn't churn the extracted dir. Drift (different version) is\n * handled by overwriting (with `extractAllTo(dir, true, false)`).\n *\n * Security: adm-zip's `extractAllTo(target, true, false)` does NOT preserve\n * original permissions and resolves entry paths relative to the extraction\n * target — no traversal beyond `targetDir`. A symlink pre-planted at the\n * target is risk-accepted.\n */\nimport AdmZip from 'adm-zip';\nimport * as fs from 'node:fs';\nimport * as path from 'node:path';\n\n/** Outcome of `extractBundledExtension(zip, target)`. */\nexport interface ExtractResult {\n  /** True if the target dir was actually written (false = idempotent skip). */\n  extracted: boolean;\n  /** Manifest version of the bundled extension (always populated). */\n  version: string;\n}\n\n// Validate that `json` parses to an object whose `version` field is a non-empty\n// string. Without this, an `as string` cast lets `version: undefined` flow into\n// the idempotency check, where `undefined === undefined` is true and every\n// re-install silently skips extraction.\nfunction readManifestVersion(json: string, source: string): string {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(json);\n  } catch {\n    throw new Error(`${source}: manifest.json is not valid JSON`);\n  }\n  if (!parsed || typeof parsed !== 'object') {\n    throw new Error(`${source}: manifest.json is not a JSON object`);\n  }\n  const v = (parsed as { version?: unknown }).version;\n  if (typeof v !== 'string' || v.length === 0) {\n    throw new Error(`${source}: manifest.json missing version string`);\n  }\n  return v;\n}\n\n/**\n * Extract `zipPath` into `targetDir`, skipping when the existing manifest\n * version matches the incoming version.\n *\n * Throws if the bundled zip is missing `manifest.json` or its version field\n * is missing/non-string (catastrophic build-time mistake — caller maps to\n * the `extract failed: ...` line and exits 1).\n */\nexport function extractBundledExtension(zipPath: string, targetDir: string): ExtractResult {\n  // Read the incoming zip's version BEFORE deciding to extract, so we can\n  // implement the idempotency check without writing any bytes.\n  const zip = new AdmZip(zipPath);\n  const manifestEntry = zip.getEntry('manifest.json');\n  if (!manifestEntry) {\n    throw new Error(`bundled zip ${zipPath} missing manifest.json`);\n  }\n  const incomingVersion = readManifestVersion(manifestEntry.getData().toString('utf8'), `bundled zip ${zipPath}`);\n\n  const existingManifest = path.join(targetDir, 'manifest.json');\n  if (fs.existsSync(existingManifest)) {\n    try {\n      const existingVersion = readManifestVersion(\n        fs.readFileSync(existingManifest, 'utf8'),\n        `existing ${existingManifest}`,\n      );\n      if (existingVersion === incomingVersion) {\n        return { extracted: false, version: incomingVersion };\n      }\n    } catch {\n      // Existing manifest is malformed or missing version — fall through and overwrite.\n    }\n  }\n\n  fs.mkdirSync(targetDir, { recursive: true });\n  zip.extractAllTo(targetDir, /* overwrite */ true, /* keepOriginalPermission */ false);\n  return { extracted: true, version: incomingVersion };\n}\n","/**\n * Pure additive merge for `claude_desktop_config.json`.\n *\n * Customers may already have other MCP servers configured in their\n * `claude_desktop_config.json`. We must add or update ONLY our own\n * `mcpServers[\"darwinium-portal-mcp\"]` entry, preserving everything else.\n *\n * To guard against config corruption, the caller (`install.ts`) writes a\n * `.bak` before any modification and uses temp+rename for atomicity. This\n * module is pure — no fs reads/writes, no side effects — so it's trivially\n * testable and cannot leak partial state.\n *\n * Pre-existing malformed JSON triggers a hard refusal: if we can't parse it,\n * we don't touch it. The caller maps the thrown error to the user-facing\n * fail line.\n */\n\n/** Shape of the per-server entry written under `mcpServers[<name>]`. */\nexport interface McpServerEntry {\n  command: string;\n  args: string[];\n  env?: Record<string, string>;\n}\n\n/** Result of a merge: the new full JSON object plus diff metadata. */\nexport interface MergeResult {\n  /** Full top-level JSON object after merge. Caller serializes + writes. */\n  merged: object;\n  /** True if the merged JSON differs from `current` (warrants a write). */\n  changed: boolean;\n  /** True if `current` already had a `mcpServers[serverName]` entry. */\n  existed: boolean;\n}\n\n/**\n * Returns a merged JSON object with `mcpServers[serverName]` set to `entry`,\n * preserving all other top-level keys and other `mcpServers.*` siblings.\n *\n * `current` semantics:\n *   - `null` → treated as empty starting point (file did not exist on disk).\n *   - non-null non-object (e.g. array, string, number) → throws.\n *\n * Idempotency: if the existing entry is byte-equal (via JSON.stringify of\n * `args` and `env`) to the proposed entry, returns `{changed: false}` so the\n * caller can skip the `.bak` write and the temp-rename.\n */\nexport function mergeMcpServersEntry(current: unknown, serverName: string, entry: McpServerEntry): MergeResult {\n  // Treat null (file absent) as empty starting point. Any other non-object is\n  // a malformed file and we refuse to write.\n  if (current !== null && (typeof current !== 'object' || Array.isArray(current))) {\n    throw new Error('claude_desktop_config.json is not a JSON object');\n  }\n  const base: Record<string, unknown> = (current ?? {}) as Record<string, unknown>;\n\n  // `mcpServers` must be a plain object or absent. Anything else (a string, an\n  // array) is malformed, and spreading it would scatter its indices across the\n  // rewritten config — so it takes the same hard refusal as malformed JSON\n  // rather than being silently coerced.\n  const rawServers = base.mcpServers;\n  if (rawServers !== undefined && (typeof rawServers !== 'object' || rawServers === null || Array.isArray(rawServers))) {\n    throw new Error('claude_desktop_config.json has a malformed \"mcpServers\" value');\n  }\n  const mcpServers: Record<string, unknown> = (rawServers ?? {}) as Record<string, unknown>;\n\n  const existing = mcpServers[serverName];\n  const existed = existing !== undefined;\n\n  // Narrow before reading fields: a non-object entry simply fails the match and\n  // gets overwritten, which is what the old `any` did implicitly.\n  const existingEntry =\n    typeof existing === 'object' && existing !== null ? (existing as Partial<McpServerEntry>) : undefined;\n\n  // Drift detection: compare command, args, env via stable JSON encoding. We\n  // intentionally use JSON.stringify(args) instead of array equality so order\n  // and nested structures are compared deeply.\n  const isMatch =\n    existingEntry !== undefined &&\n    existingEntry.command === entry.command &&\n    JSON.stringify(existingEntry.args) === JSON.stringify(entry.args) &&\n    JSON.stringify(existingEntry.env ?? {}) === JSON.stringify(entry.env ?? {});\n\n  if (isMatch) {\n    return { merged: base, changed: false, existed: true };\n  }\n\n  return {\n    merged: { ...base, mcpServers: { ...mcpServers, [serverName]: entry } },\n    changed: true,\n    existed,\n  };\n}\n","/**\n * `npx @darwinium/portal-mcp install` — orchestrator.\n *\n * Sequence:\n *   1. migrate.maybeMigrate()       — legacy token-path move\n *   2. token: skip if exists, else generateAndWrite({silent:true})\n *   3. winAcl.lockAcl(TOKEN_PATH) AND winAcl.lockAcl(TOKEN_DIR)\n *   4. extract.extractBundledExtension(zip, EXTENSION_DIR)\n *   5. configMerge → write `.bak` then atomic temp+rename\n *   6. Print Claude Code marketplace + Chrome extension instructions\n *   7. oobPair.run({mode:'install', expectedToken: token})\n *   8. Success summary + process.exit(0)\n *\n * Security:\n *   - Token never echoed — generateAndWrite({silent:true}).\n *   - configMerge entry contains only `npx @darwinium/portal-mcp serve` —\n *     no token, no env.\n *   - `.bak` written via copyFileSync BEFORE temp-write; atomic fs.renameSync\n *     replaces target. Malformed pre-existing JSON → refusal.\n */\nimport * as fs from 'node:fs';\nimport * as os from 'node:os';\nimport * as path from 'node:path';\nimport { TOKEN_DIR, TOKEN_PATH, EXTENSION_DIR } from '../token/paths.js';\nimport { generateAndWrite } from '../token/store.js';\nimport * as term from './term.js';\nimport * as migrate from './migrate.js';\nimport * as winAcl from './winAcl.js';\nimport * as extract from './extract.js';\nimport { bundledExtensionZipPath } from './bundlePaths.js';\nimport { mergeMcpServersEntry, type McpServerEntry } from './configMerge.js';\nimport * as oobPair from './oobPair.js';\n\n/** Config entry — never includes the token; only the cli invocation. */\nconst MCP_ENTRY: McpServerEntry = {\n  command: 'npx',\n  args: ['-y', '@darwinium/portal-mcp', 'serve'],\n};\n\nconst SERVER_NAME = 'darwinium-portal-mcp';\n\n/** Resolve the platform-correct claude_desktop_config.json path. */\nfunction resolveClaudeDesktopConfigPath(): string {\n  if (process.platform === 'darwin') {\n    return path.join(os.homedir(), 'Library', 'Application Support', 'Claude', 'claude_desktop_config.json');\n  }\n  if (process.platform === 'win32') {\n    const appData = process.env.APPDATA ?? path.join(os.homedir(), 'AppData', 'Roaming');\n    return path.join(appData, 'Claude', 'claude_desktop_config.json');\n  }\n  // Linux fallback — Anthropic's documented location matches XDG_CONFIG_HOME default.\n  return path.join(os.homedir(), '.config', 'Claude', 'claude_desktop_config.json');\n}\n\n/** Read + parse claude_desktop_config.json. Returns null on ENOENT. */\nfunction readConfigJson(configPath: string): unknown {\n  if (!fs.existsSync(configPath)) return null;\n  const raw = fs.readFileSync(configPath, 'utf8');\n  try {\n    return JSON.parse(raw);\n  } catch (err) {\n    // Re-throw as a tagged error the caller can map to the user-facing fail line.\n    throw new Error(`claude_desktop_config.json is not valid JSON: ${(err as Error).message}`);\n  }\n}\n\n/** Atomic write: `.bak` (if pre-existing) → temp → rename. */\nfunction writeConfigJsonAtomic(configPath: string, merged: object, existed: boolean): void {\n  if (existed) {\n    fs.copyFileSync(configPath, `${configPath}.bak`);\n  }\n  const tmpPath = `${configPath}.tmp.${process.pid}`;\n  fs.writeFileSync(tmpPath, JSON.stringify(merged, null, 2), { mode: 0o644 });\n  fs.renameSync(tmpPath, configPath);\n}\n\n/**\n * Apply the configMerge to claude_desktop_config.json. Emits exactly one\n * summary-line variant for the config row.\n */\nfunction applyClaudeDesktopMerge(): void {\n  const configPath = resolveClaudeDesktopConfigPath();\n  const configDir = path.dirname(configPath);\n\n  if (!fs.existsSync(configDir)) {\n    // Claude Desktop not installed — warn and continue.\n    term.warn(\n      `config (Claude Desktop config dir not found at ${configDir} — install Claude Desktop or use the Claude Code marketplace path).`,\n    );\n    return;\n  }\n\n  let current: unknown;\n  try {\n    current = readConfigJson(configPath);\n  } catch {\n    // Refuse to overwrite invalid JSON.\n    term.fail(`config (refusing to write — ${configPath} is not valid JSON; please fix or delete and re-run)`);\n    process.exit(1);\n  }\n\n  let result: ReturnType<typeof mergeMcpServersEntry>;\n  try {\n    result = mergeMcpServersEntry(current, SERVER_NAME, MCP_ENTRY);\n  } catch (err) {\n    // mergeMcpServersEntry throws on non-object top-level — same fail line.\n    term.fail(`config (refusing to write — ${configPath} is not a JSON object: ${(err as Error).message})`);\n    process.exit(1);\n  }\n\n  const fileExisted = current !== null;\n  if (!result.changed) {\n    term.ok('config (existing match)');\n    return;\n  }\n\n  writeConfigJsonAtomic(configPath, result.merged, fileExisted);\n  if (result.existed) {\n    term.ok(`config (updated darwinium-portal-mcp entry; .bak written)`);\n  } else if (fileExisted) {\n    term.ok(`config (added darwinium-portal-mcp entry to ${configPath}; .bak written)`);\n  } else {\n    // First-ever config file — there's no pre-existing content to back up.\n    term.ok(`config (added darwinium-portal-mcp entry to ${configPath}; new file)`);\n  }\n}\n\n/** Print the Claude Code + Chrome extension instructions block. */\nfunction printPostInstallInstructions(): void {\n  console.error('');\n  term.info('Claude Code: run `/plugin marketplace add darwinium-com/portal-mcp-marketplace`');\n  console.error('             then `/plugin install portal-mcp` from inside Claude Code.');\n  console.error('');\n  term.info('Chrome extension — pick one:');\n  console.error('  (a) Web Store:  https://chromewebstore.google.com/detail/<placeholder-listing-url>');\n  console.error('  (b) Unpacked:   chrome://extensions → enable Developer Mode →');\n  console.error(`                  Load Unpacked → point at ${EXTENSION_DIR}`);\n  console.error('');\n}\n\n/** Public entry point — invoked from the lazy-loaded `install` action in bin. */\nexport async function runInstall(_opts: { json?: boolean; yes?: boolean } = {}): Promise<void> {\n  term.info('install starting...');\n\n  // 1. Legacy token-path migration (silent on no-op).\n  migrate.maybeMigrate(TOKEN_PATH);\n\n  // 2. Token — skip generation if existing, else write silently.\n  let token: string;\n  if (fs.existsSync(TOKEN_PATH)) {\n    token = fs.readFileSync(TOKEN_PATH, 'utf8').trim();\n    const aclSuffix = process.platform === 'win32' ? ', ACL locked' : '';\n    term.ok(`token (existing at ${TOKEN_PATH}, mode 0600${aclSuffix})`);\n  } else {\n    token = generateAndWrite({ silent: true });\n    const aclSuffix = process.platform === 'win32' ? ', ACL locked' : '';\n    term.ok(`token (added at ${TOKEN_PATH}, mode 0600${aclSuffix})`);\n  }\n\n  // 3. Windows ACL on token + parent dir. Non-Windows: no-op.\n  for (const p of [TOKEN_PATH, TOKEN_DIR]) {\n    const r = winAcl.lockAcl(p);\n    if (!r.ok) {\n      term.warn(`Could not restrict ACLs on ${p}: ${r.error}. Run \\`${r.cmd}\\` manually.`);\n    }\n  }\n\n  // 4. Extract bundled extension (idempotent).\n  const extZip = bundledExtensionZipPath();\n  try {\n    const extResult = extract.extractBundledExtension(extZip, EXTENSION_DIR);\n    if (extResult.extracted) {\n      term.ok(`extension (extracted v${extResult.version} to ${EXTENSION_DIR})`);\n    } else {\n      term.ok(`extension (existing v${extResult.version})`);\n    }\n  } catch (err) {\n    term.fail(\n      `extension (extract failed: ${(err as Error).message}; bundled extension at ${extZip} is intact — re-run install)`,\n    );\n    process.exit(1);\n  }\n\n  // 5. claude_desktop_config.json additive merge.\n  applyClaudeDesktopMerge();\n\n  // 6. Post-install instructions.\n  printPostInstallInstructions();\n\n  // 7. Foreground OOB pair — blocks until paired or SIGINT.\n  await oobPair.run({ mode: 'install', expectedToken: token });\n\n  // 8. Success summary. Read the manifest of the just-extracted extension to\n  // get its version for the success line. If it's missing for any reason,\n  // emit the version-less variant.\n  let extVersionForSuccess = '';\n  const manifestPath = path.join(EXTENSION_DIR, 'manifest.json');\n  if (fs.existsSync(manifestPath)) {\n    try {\n      extVersionForSuccess = JSON.parse(fs.readFileSync(manifestPath, 'utf8')).version as string;\n    } catch {\n      /* fall through to versionless variant */\n    }\n  }\n  if (extVersionForSuccess) {\n    term.ok(`paired with extension (extension version ${extVersionForSuccess})`);\n  } else {\n    term.ok('paired with extension');\n  }\n  term.info('install complete. You can close this terminal.');\n  process.exit(0);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,SAAS,oBAAoB,MAAc,QAAwB;CACjE,IAAI;AACJ,KAAI;AACF,WAAS,KAAK,MAAM,KAAK;SACnB;AACN,QAAM,IAAI,MAAM,GAAG,OAAO,mCAAmC;;AAE/D,KAAI,CAAC,UAAU,OAAO,WAAW,SAC/B,OAAM,IAAI,MAAM,GAAG,OAAO,sCAAsC;CAElE,MAAM,IAAK,OAAiC;AAC5C,KAAI,OAAO,MAAM,YAAY,EAAE,WAAW,EACxC,OAAM,IAAI,MAAM,GAAG,OAAO,wCAAwC;AAEpE,QAAO;;;;;;;;;;AAWT,SAAgB,wBAAwB,SAAiB,WAAkC;CAGzF,MAAM,MAAM,IAAI,OAAO,QAAQ;CAC/B,MAAM,gBAAgB,IAAI,SAAS,gBAAgB;AACnD,KAAI,CAAC,cACH,OAAM,IAAI,MAAM,eAAe,QAAQ,wBAAwB;CAEjE,MAAM,kBAAkB,oBAAoB,cAAc,SAAS,CAAC,SAAS,OAAO,EAAE,eAAe,UAAU;CAE/G,MAAM,mBAAmB,KAAK,KAAK,WAAW,gBAAgB;AAC9D,KAAI,GAAG,WAAW,iBAAiB,CACjC,KAAI;AAKF,MAJwB,oBACtB,GAAG,aAAa,kBAAkB,OAAO,EACzC,YAAY,mBAEK,KAAK,gBACtB,QAAO;GAAE,WAAW;GAAO,SAAS;GAAiB;SAEjD;AAKV,IAAG,UAAU,WAAW,EAAE,WAAW,MAAM,CAAC;AAC5C,KAAI,aAAa,WAA2B,MAAmC,MAAM;AACrF,QAAO;EAAE,WAAW;EAAM,SAAS;EAAiB;;;;;;;;;;;;;;;;;AC1CtD,SAAgB,qBAAqB,SAAkB,YAAoB,OAAoC;AAG7G,KAAI,YAAY,SAAS,OAAO,YAAY,YAAY,MAAM,QAAQ,QAAQ,EAC5E,OAAM,IAAI,MAAM,kDAAkD;CAEpE,MAAM,OAAiC,WAAW,EAAE;CAMpD,MAAM,aAAa,KAAK;AACxB,KAAI,eAAe,WAAc,OAAO,eAAe,YAAY,eAAe,QAAQ,MAAM,QAAQ,WAAW,EACjH,OAAM,IAAI,MAAM,kEAAgE;CAElF,MAAM,aAAuC,cAAc,EAAE;CAE7D,MAAM,WAAW,WAAW;CAC5B,MAAM,UAAU,aAAa;CAI7B,MAAM,gBACJ,OAAO,aAAa,YAAY,aAAa,OAAQ,WAAuC;AAW9F,KALE,kBAAkB,UAClB,cAAc,YAAY,MAAM,WAChC,KAAK,UAAU,cAAc,KAAK,KAAK,KAAK,UAAU,MAAM,KAAK,IACjE,KAAK,UAAU,cAAc,OAAO,EAAE,CAAC,KAAK,KAAK,UAAU,MAAM,OAAO,EAAE,CAAC,CAG3E,QAAO;EAAE,QAAQ;EAAM,SAAS;EAAO,SAAS;EAAM;AAGxD,QAAO;EACL,QAAQ;GAAE,GAAG;GAAM,YAAY;IAAE,GAAG;KAAa,aAAa;IAAO;GAAE;EACvE,SAAS;EACT;EACD;;;;;;;;;;;;;;;;;;;;;;;;;;ACvDH,MAAM,YAA4B;CAChC,SAAS;CACT,MAAM;EAAC;EAAM;EAAyB;EAAQ;CAC/C;AAED,MAAM,cAAc;;AAGpB,SAAS,iCAAyC;AAChD,KAAI,QAAQ,aAAa,SACvB,QAAO,KAAK,KAAK,GAAG,SAAS,EAAE,WAAW,uBAAuB,UAAU,6BAA6B;AAE1G,KAAI,QAAQ,aAAa,SAAS;EAChC,MAAM,UAAU,QAAQ,IAAI,WAAW,KAAK,KAAK,GAAG,SAAS,EAAE,WAAW,UAAU;AACpF,SAAO,KAAK,KAAK,SAAS,UAAU,6BAA6B;;AAGnE,QAAO,KAAK,KAAK,GAAG,SAAS,EAAE,WAAW,UAAU,6BAA6B;;;AAInF,SAAS,eAAe,YAA6B;AACnD,KAAI,CAAC,GAAG,WAAW,WAAW,CAAE,QAAO;CACvC,MAAM,MAAM,GAAG,aAAa,YAAY,OAAO;AAC/C,KAAI;AACF,SAAO,KAAK,MAAM,IAAI;UACf,KAAK;AAEZ,QAAM,IAAI,MAAM,iDAAkD,IAAc,UAAU;;;;AAK9F,SAAS,sBAAsB,YAAoB,QAAgB,SAAwB;AACzF,KAAI,QACF,IAAG,aAAa,YAAY,GAAG,WAAW,MAAM;CAElD,MAAM,UAAU,GAAG,WAAW,OAAO,QAAQ;AAC7C,IAAG,cAAc,SAAS,KAAK,UAAU,QAAQ,MAAM,EAAE,EAAE,EAAE,MAAM,KAAO,CAAC;AAC3E,IAAG,WAAW,SAAS,WAAW;;;;;;AAOpC,SAAS,0BAAgC;CACvC,MAAM,aAAa,gCAAgC;CACnD,MAAM,YAAY,KAAK,QAAQ,WAAW;AAE1C,KAAI,CAAC,GAAG,WAAW,UAAU,EAAE;AAE7B,OACE,kDAAkD,UAAU,qEAC7D;AACD;;CAGF,IAAI;AACJ,KAAI;AACF,YAAU,eAAe,WAAW;SAC9B;AAEN,OAAU,+BAA+B,WAAW,sDAAsD;AAC1G,UAAQ,KAAK,EAAE;;CAGjB,IAAI;AACJ,KAAI;AACF,WAAS,qBAAqB,SAAS,aAAa,UAAU;UACvD,KAAK;AAEZ,OAAU,+BAA+B,WAAW,yBAA0B,IAAc,QAAQ,GAAG;AACvG,UAAQ,KAAK,EAAE;;CAGjB,MAAM,cAAc,YAAY;AAChC,KAAI,CAAC,OAAO,SAAS;AACnB,KAAQ,0BAA0B;AAClC;;AAGF,uBAAsB,YAAY,OAAO,QAAQ,YAAY;AAC7D,KAAI,OAAO,QACT,IAAQ,4DAA4D;UAC3D,YACT,IAAQ,+CAA+C,WAAW,iBAAiB;KAGnF,IAAQ,+CAA+C,WAAW,aAAa;;;AAKnF,SAAS,+BAAqC;AAC5C,SAAQ,MAAM,GAAG;AACjB,MAAU,kFAAkF;AAC5F,SAAQ,MAAM,0EAA0E;AACxF,SAAQ,MAAM,GAAG;AACjB,MAAU,+BAA+B;AACzC,SAAQ,MAAM,uFAAuF;AACrG,SAAQ,MAAM,kEAAkE;AAChF,SAAQ,MAAM,8CAA8C,gBAAgB;AAC5E,SAAQ,MAAM,GAAG;;;AAInB,eAAsB,WAAW,QAA2C,EAAE,EAAiB;AAC7F,MAAU,sBAAsB;AAGhC,cAAqB,WAAW;CAGhC,IAAI;AACJ,KAAI,GAAG,WAAW,WAAW,EAAE;AAC7B,UAAQ,GAAG,aAAa,YAAY,OAAO,CAAC,MAAM;EAClD,MAAM,YAAY,QAAQ,aAAa,UAAU,iBAAiB;AAClE,KAAQ,sBAAsB,WAAW,aAAa,UAAU,GAAG;QAC9D;AACL,UAAQ,iBAAiB,EAAE,QAAQ,MAAM,CAAC;EAC1C,MAAM,YAAY,QAAQ,aAAa,UAAU,iBAAiB;AAClE,KAAQ,mBAAmB,WAAW,aAAa,UAAU,GAAG;;AAIlE,MAAK,MAAM,KAAK,CAAC,YAAY,UAAU,EAAE;EACvC,MAAM,IAAIA,QAAe,EAAE;AAC3B,MAAI,CAAC,EAAE,GACL,MAAU,8BAA8B,EAAE,IAAI,EAAE,MAAM,UAAU,EAAE,IAAI,cAAc;;CAKxF,MAAM,SAAS,yBAAyB;AACxC,KAAI;EACF,MAAM,YAAYC,wBAAgC,QAAQ,cAAc;AACxE,MAAI,UAAU,UACZ,IAAQ,yBAAyB,UAAU,QAAQ,MAAM,cAAc,GAAG;MAE1E,IAAQ,wBAAwB,UAAU,QAAQ,GAAG;UAEhD,KAAK;AACZ,OACE,8BAA+B,IAAc,QAAQ,yBAAyB,OAAO,8BACtF;AACD,UAAQ,KAAK,EAAE;;AAIjB,0BAAyB;AAGzB,+BAA8B;AAG9B,OAAMC,IAAY;EAAE,MAAM;EAAW,eAAe;EAAO,CAAC;CAK5D,IAAI,uBAAuB;CAC3B,MAAM,eAAe,KAAK,KAAK,eAAe,gBAAgB;AAC9D,KAAI,GAAG,WAAW,aAAa,CAC7B,KAAI;AACF,yBAAuB,KAAK,MAAM,GAAG,aAAa,cAAc,OAAO,CAAC,CAAC;SACnE;AAIV,KAAI,qBACF,IAAQ,4CAA4C,qBAAqB,GAAG;KAE5E,IAAQ,wBAAwB;AAElC,MAAU,iDAAiD;AAC3D,SAAQ,KAAK,EAAE"}

package/dist/bin/killProcessOnPort-Bt5MA5Dv.js

@@ -0,0 +1,136 @@
+import * as path from "node:path";
+import { execSync } from "node:child_process";
+import { z } from "zod";
+import envPaths from "env-paths";
+import * as net from "node:net";
+
+//#region src/bridge/wireProtocol.ts
+/**
+* Wire-protocol schemas for the binary↔extension WebSocket bridge.
+*
+* IMPORTANT — KEEP IN SYNC: this file MUST stay aligned with
+* `dwn_aphex/packages/portal-extension/src/shared/wireProtocol.ts`.
+* The binary bundle (Node, tsdown) and extension bundle (browser, WXT/Vite)
+* cannot share a workspace dep, so the schemas are duplicated. Do NOT change
+* one without updating the other; the smoke test checks the constants for drift.
+*/
+/** Application-level wire protocol version. Bumped when frame shapes change. */
+const PROTOCOL_VERSION = "0.1.0";
+/** WS subprotocol token returned in the response Sec-WebSocket-Protocol header. */
+const VERSION_SUBPROTOCOL = "darwinium.v1";
+/** Prefix for the per-connection token entry in the offered Sec-WebSocket-Protocol list. */
+const TOKEN_SUBPROTOCOL_PREFIX = "tok.";
+/**
+* Token subprotocol regex: exactly 64 lowercase hex characters after the
+* `tok.` prefix.
+*
+* Used by `src/ws/server.ts` `handleProtocols` to reject ill-shaped offers at
+* the upgrade boundary (HTTP 401 — distinct from post-upgrade WS 4401).
+*/
+const TOKEN_SUBPROTOCOL_REGEX = /^tok\.[a-f0-9]{64}$/;
+/** Pairing-code subprotocol regex: `pair.<6-digit>`. */
+const PAIRING_CODE_REGEX = /^pair\.[0-9]{6}$/;
+/** Maximum window for the post-upgrade `{type:'hello'}` first frame to arrive. */
+const HELLO_TIMEOUT_MS = 1e3;
+/** WS close code for token-handshake failure. */
+const WS_CLOSE_TOKEN_MISMATCH = 4401;
+const HelloFrameSchema = z.object({
+	type: z.literal("hello"),
+	token: z.string().regex(/^[0-9a-f]{64}$/),
+	version: z.string()
+});
+const ReqFrameSchema = z.object({
+	id: z.string(),
+	type: z.literal("req"),
+	op: z.string(),
+	args: z.unknown()
+});
+const RespFrameSchema = z.object({
+	id: z.string(),
+	type: z.literal("resp"),
+	result: z.unknown().optional(),
+	error: z.string().optional()
+});
+const PageIdChangedFrameSchema = z.object({
+	type: z.literal("pageIdChanged"),
+	pageId: z.string().nullable()
+});
+const PingFrameSchema = z.object({ type: z.literal("ping") });
+const PongFrameSchema = z.object({ type: z.literal("pong") });
+/**
+* Frame the OOB pairing-WS server sends to the popup once a `pair.<6-digit>`
+* upgrade matches the armed code. Delivers the 64-hex token across the
+* authenticated pairing channel.
+*/
+const PairedFrameSchema = z.object({
+	type: z.literal("paired"),
+	token: z.string().regex(/^[0-9a-f]{64}$/),
+	version: z.string()
+});
+
+//#endregion
+//#region src/token/paths.ts
+/**
+* Cross-platform paths for the portal-mcp installer.
+*
+* Uses `env-paths`-driven platform-conventional locations:
+*   - macOS:   ~/Library/Application Support/darwinium-portal-mcp/
+*   - Windows: %APPDATA%/darwinium-portal-mcp/Data/  (env-paths default)
+*   - Linux:   ~/.local/share/darwinium-portal-mcp/  (XDG_DATA_HOME)
+*
+* The token file and the extracted bundled extension share this single per-user
+* data dir so customers see one platform-conventional folder rather than two.
+*
+* Migration of the legacy `~/.config/darwinium-portal-mcp/token` location to
+* `<env-paths data dir>/token` lives in `src/install/migrate.ts`.
+*/
+const paths = envPaths("darwinium-portal-mcp", { suffix: "" });
+/** Per-user data directory; parent of the token file and extracted extension. */
+const TOKEN_DIR = paths.data;
+/** Token file path: 64-hex secret used for the binary↔extension handshake. */
+const TOKEN_PATH = path.join(TOKEN_DIR, "token");
+/** Extracted bundled-extension directory (loaded via Chrome's "Load Unpacked"). */
+const EXTENSION_DIR = path.join(TOKEN_DIR, "extension");
+
+//#endregion
+//#region src/ws/killProcessOnPort.ts
+/**
+* Kill any process holding the given port. Cross-platform; safe to call when port is free.
+*
+* SECURITY: kills ONLY the PID returned by `lsof -ti:PORT` (or netstat equivalent).
+* Does NOT take a port-range; cannot kill unrelated processes. Caller-controlled
+* port number is the only risk surface.
+*
+* Pattern verbatim from BrowserMCP: github.com/BrowserMCP/mcp/blob/main/src/utils/port.ts
+*/
+function killProcessOnPort(port) {
+	try {
+		if (process.platform === "win32") {
+			execSync(`FOR /F "tokens=5" %a in ('netstat -ano ^| findstr :${port}') do taskkill /F /PID %a`, { stdio: "pipe" });
+			return;
+		}
+		const pids = execSync(`lsof -ti:${port}`, { stdio: "pipe" }).toString().split("\n").map((line) => Number(line.trim())).filter((pid) => Number.isInteger(pid) && pid > 0 && pid !== process.pid);
+		for (const pid of pids) try {
+			process.kill(pid, "SIGKILL");
+		} catch {}
+	} catch {}
+}
+/**
+* Check whether a port is currently bound. Returns true if held; false if free.
+* Polls by attempting to bind a tester server on the same host.
+*/
+function isPortInUse(port) {
+	return new Promise((resolve) => {
+		const tester = net.createServer().once("error", () => resolve(true)).once("listening", () => tester.close(() => resolve(false))).listen(port, "127.0.0.1");
+	});
+}
+/**
+* Sleep for `ms` milliseconds. Used by the bind-loop poll cap.
+*/
+function wait(ms) {
+	return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+//#endregion
+export { TOKEN_DIR as a, PAIRING_CODE_REGEX as c, TOKEN_SUBPROTOCOL_REGEX as d, VERSION_SUBPROTOCOL as f, EXTENSION_DIR as i, PROTOCOL_VERSION as l, killProcessOnPort as n, TOKEN_PATH as o, WS_CLOSE_TOKEN_MISMATCH as p, wait as r, HELLO_TIMEOUT_MS as s, isPortInUse as t, TOKEN_SUBPROTOCOL_PREFIX as u };
+//# sourceMappingURL=killProcessOnPort-Bt5MA5Dv.js.map

package/dist/bin/killProcessOnPort-Bt5MA5Dv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"killProcessOnPort-Bt5MA5Dv.js","names":[],"sources":["../../src/bridge/wireProtocol.ts","../../src/token/paths.ts","../../src/ws/killProcessOnPort.ts"],"sourcesContent":["/**\n * Wire-protocol schemas for the binary↔extension WebSocket bridge.\n *\n * IMPORTANT — KEEP IN SYNC: this file MUST stay aligned with\n * `dwn_aphex/packages/portal-extension/src/shared/wireProtocol.ts`.\n * The binary bundle (Node, tsdown) and extension bundle (browser, WXT/Vite)\n * cannot share a workspace dep, so the schemas are duplicated. Do NOT change\n * one without updating the other; the smoke test checks the constants for drift.\n */\nimport { z } from 'zod';\n\n// -- Wire literals ----------------------------------------------------------\n\n/** Application-level wire protocol version. Bumped when frame shapes change. */\nexport const PROTOCOL_VERSION = '0.1.0';\n\n/** WS subprotocol token returned in the response Sec-WebSocket-Protocol header. */\nexport const VERSION_SUBPROTOCOL = 'darwinium.v1';\n\n/** Prefix for the per-connection token entry in the offered Sec-WebSocket-Protocol list. */\nexport const TOKEN_SUBPROTOCOL_PREFIX = 'tok.';\n\n/**\n * Token subprotocol regex: exactly 64 lowercase hex characters after the\n * `tok.` prefix.\n *\n * Used by `src/ws/server.ts` `handleProtocols` to reject ill-shaped offers at\n * the upgrade boundary (HTTP 401 — distinct from post-upgrade WS 4401).\n */\nexport const TOKEN_SUBPROTOCOL_REGEX = /^tok\\.[a-f0-9]{64}$/;\n\n/**\n * Out-of-band pairing wire format. The installer's foreground pairing-WS\n * server in `src/install/oobPair.ts` accepts a parallel subprotocol shape\n * `pair.<6-digit>` (separate lifecycle from production `serve`). The pairing\n * server returns ONLY `VERSION_SUBPROTOCOL` — never echoes the code.\n *\n * KEEP IN SYNC: this constant ALSO lives in\n * `dwn_aphex/packages/portal-extension/src/shared/wireProtocol.ts`; the smoke\n * test enforces byte-equality.\n */\nexport const PAIR_SUBPROTOCOL_PREFIX = 'pair.';\n\n/** Pairing-code subprotocol regex: `pair.<6-digit>`. */\nexport const PAIRING_CODE_REGEX = /^pair\\.[0-9]{6}$/;\n\n/** Maximum window for the post-upgrade `{type:'hello'}` first frame to arrive. */\nexport const HELLO_TIMEOUT_MS = 1000;\n\n/** WS close code for token-handshake failure. */\nexport const WS_CLOSE_TOKEN_MISMATCH = 4401;\n\n// -- Frame schemas ----------------------------------------------------------\n\nexport const HelloFrameSchema = z.object({\n  type: z.literal('hello'),\n  token: z.string().regex(/^[0-9a-f]{64}$/),\n  version: z.string(),\n});\nexport type HelloFrame = z.infer<typeof HelloFrameSchema>;\n\nexport const ReqFrameSchema = z.object({\n  id: z.string(),\n  type: z.literal('req'),\n  op: z.string(),\n  args: z.unknown(),\n});\nexport type ReqFrame = z.infer<typeof ReqFrameSchema>;\n\nexport const RespFrameSchema = z.object({\n  id: z.string(),\n  type: z.literal('resp'),\n  result: z.unknown().optional(),\n  error: z.string().optional(),\n});\nexport type RespFrame = z.infer<typeof RespFrameSchema>;\n\nexport const PageIdChangedFrameSchema = z.object({\n  type: z.literal('pageIdChanged'),\n  pageId: z.string().nullable(),\n});\nexport type PageIdChangedFrame = z.infer<typeof PageIdChangedFrameSchema>;\n\nexport const PingFrameSchema = z.object({ type: z.literal('ping') });\nexport type PingFrame = z.infer<typeof PingFrameSchema>;\n\nexport const PongFrameSchema = z.object({ type: z.literal('pong') });\nexport type PongFrame = z.infer<typeof PongFrameSchema>;\n\n/**\n * Frame the OOB pairing-WS server sends to the popup once a `pair.<6-digit>`\n * upgrade matches the armed code. Delivers the 64-hex token across the\n * authenticated pairing channel.\n */\nexport const PairedFrameSchema = z.object({\n  type: z.literal('paired'),\n  token: z.string().regex(/^[0-9a-f]{64}$/),\n  version: z.string(),\n});\nexport type PairedFrame = z.infer<typeof PairedFrameSchema>;\n","/**\n * Cross-platform paths for the portal-mcp installer.\n *\n * Uses `env-paths`-driven platform-conventional locations:\n *   - macOS:   ~/Library/Application Support/darwinium-portal-mcp/\n *   - Windows: %APPDATA%/darwinium-portal-mcp/Data/  (env-paths default)\n *   - Linux:   ~/.local/share/darwinium-portal-mcp/  (XDG_DATA_HOME)\n *\n * The token file and the extracted bundled extension share this single per-user\n * data dir so customers see one platform-conventional folder rather than two.\n *\n * Migration of the legacy `~/.config/darwinium-portal-mcp/token` location to\n * `<env-paths data dir>/token` lives in `src/install/migrate.ts`.\n */\nimport envPaths from 'env-paths';\nimport * as path from 'node:path';\n\nconst paths = envPaths('darwinium-portal-mcp', { suffix: '' });\n\n/** Per-user data directory; parent of the token file and extracted extension. */\nexport const TOKEN_DIR = paths.data;\n\n/** Token file path: 64-hex secret used for the binary↔extension handshake. */\nexport const TOKEN_PATH = path.join(TOKEN_DIR, 'token');\n\n/** Extracted bundled-extension directory (loaded via Chrome's \"Load Unpacked\"). */\nexport const EXTENSION_DIR = path.join(TOKEN_DIR, 'extension');\n","import { execSync } from 'node:child_process';\nimport * as net from 'node:net';\n\n/**\n * Kill any process holding the given port. Cross-platform; safe to call when port is free.\n *\n * SECURITY: kills ONLY the PID returned by `lsof -ti:PORT` (or netstat equivalent).\n * Does NOT take a port-range; cannot kill unrelated processes. Caller-controlled\n * port number is the only risk surface.\n *\n * Pattern verbatim from BrowserMCP: github.com/BrowserMCP/mcp/blob/main/src/utils/port.ts\n */\nexport function killProcessOnPort(port: number): void {\n  try {\n    if (process.platform === 'win32') {\n      execSync(`FOR /F \"tokens=5\" %a in ('netstat -ano ^| findstr :${port}') do taskkill /F /PID %a`, {\n        stdio: 'pipe',\n      });\n      return;\n    }\n    // `lsof -ti` lists every process with ANY socket on the port, including\n    // OUR OWN client connections to it (e.g. the peer probe in ws/server.ts).\n    // Piping straight into `xargs kill -9` therefore makes the caller kill\n    // itself along with the holder. Filter our own pid out and signal the rest\n    // directly rather than shelling out a second time.\n    const out = execSync(`lsof -ti:${port}`, { stdio: 'pipe' }).toString();\n    const pids = out\n      .split('\\n')\n      .map((line) => Number(line.trim()))\n      .filter((pid) => Number.isInteger(pid) && pid > 0 && pid !== process.pid);\n    for (const pid of pids) {\n      try {\n        process.kill(pid, 'SIGKILL');\n      } catch {\n        /* already gone, or not ours to kill — the isPortInUse poll decides. */\n      }\n    }\n  } catch {\n    /* port was free, lsof returned nonzero — fine. The subsequent isPortInUse poll is the source of truth. */\n  }\n}\n\n/**\n * Check whether a port is currently bound. Returns true if held; false if free.\n * Polls by attempting to bind a tester server on the same host.\n */\nexport function isPortInUse(port: number): Promise<boolean> {\n  return new Promise((resolve) => {\n    const tester = net\n      .createServer()\n      .once('error', () => resolve(true))\n      .once('listening', () => tester.close(() => resolve(false)))\n      .listen(port, '127.0.0.1');\n  });\n}\n\n/**\n * Sleep for `ms` milliseconds. Used by the bind-loop poll cap.\n */\nexport function wait(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAcA,MAAa,mBAAmB;;AAGhC,MAAa,sBAAsB;;AAGnC,MAAa,2BAA2B;;;;;;;;AASxC,MAAa,0BAA0B;;AAevC,MAAa,qBAAqB;;AAGlC,MAAa,mBAAmB;;AAGhC,MAAa,0BAA0B;AAIvC,MAAa,mBAAmB,EAAE,OAAO;CACvC,MAAM,EAAE,QAAQ,QAAQ;CACxB,OAAO,EAAE,QAAQ,CAAC,MAAM,iBAAiB;CACzC,SAAS,EAAE,QAAQ;CACpB,CAAC;AAGF,MAAa,iBAAiB,EAAE,OAAO;CACrC,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,QAAQ,MAAM;CACtB,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,SAAS;CAClB,CAAC;AAGF,MAAa,kBAAkB,EAAE,OAAO;CACtC,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,QAAQ,OAAO;CACvB,QAAQ,EAAE,SAAS,CAAC,UAAU;CAC9B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC;AAGF,MAAa,2BAA2B,EAAE,OAAO;CAC/C,MAAM,EAAE,QAAQ,gBAAgB;CAChC,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC9B,CAAC;AAGF,MAAa,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,CAAC;AAGpE,MAAa,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,CAAC;;;;;;AAQpE,MAAa,oBAAoB,EAAE,OAAO;CACxC,MAAM,EAAE,QAAQ,SAAS;CACzB,OAAO,EAAE,QAAQ,CAAC,MAAM,iBAAiB;CACzC,SAAS,EAAE,QAAQ;CACpB,CAAC;;;;;;;;;;;;;;;;;;ACjFF,MAAM,QAAQ,SAAS,wBAAwB,EAAE,QAAQ,IAAI,CAAC;;AAG9D,MAAa,YAAY,MAAM;;AAG/B,MAAa,aAAa,KAAK,KAAK,WAAW,QAAQ;;AAGvD,MAAa,gBAAgB,KAAK,KAAK,WAAW,YAAY;;;;;;;;;;;;;ACd9D,SAAgB,kBAAkB,MAAoB;AACpD,KAAI;AACF,MAAI,QAAQ,aAAa,SAAS;AAChC,YAAS,sDAAsD,KAAK,4BAA4B,EAC9F,OAAO,QACR,CAAC;AACF;;EAQF,MAAM,OADM,SAAS,YAAY,QAAQ,EAAE,OAAO,QAAQ,CAAC,CAAC,UAC5C,CACb,MAAM,KAAK,CACX,KAAK,SAAS,OAAO,KAAK,MAAM,CAAC,CAAC,CAClC,QAAQ,QAAQ,OAAO,UAAU,IAAI,IAAI,MAAM,KAAK,QAAQ,QAAQ,IAAI;AAC3E,OAAK,MAAM,OAAO,KAChB,KAAI;AACF,WAAQ,KAAK,KAAK,UAAU;UACtB;SAIJ;;;;;;AASV,SAAgB,YAAY,MAAgC;AAC1D,QAAO,IAAI,SAAS,YAAY;EAC9B,MAAM,SAAS,IACZ,cAAc,CACd,KAAK,eAAe,QAAQ,KAAK,CAAC,CAClC,KAAK,mBAAmB,OAAO,YAAY,QAAQ,MAAM,CAAC,CAAC,CAC3D,OAAO,MAAM,YAAY;GAC5B;;;;;AAMJ,SAAgB,KAAK,IAA2B;AAC9C,QAAO,IAAI,SAAS,YAAY,WAAW,SAAS,GAAG,CAAC"}