@harperfast/harper-pro 5.0.30 → 5.1.0-beta.2

package/dist/core/bin/mcp/doctor.js

@@ -0,0 +1,193 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDoctor = runDoctor;
+exports.formatDoctorReport = formatDoctorReport;
+/**
+ * `harper mcp doctor` — quick connectivity + handshake smoke check.
+ *
+ * Steps:
+ *   1. Resolve connection (UDS or network).
+ *   2. POST an `initialize` request.
+ *   3. Read the response, capture Mcp-Session-Id.
+ *   4. POST a `tools/list` and confirm a JSON-RPC result comes back.
+ *   5. DELETE the session (if allowed) for cleanup.
+ *
+ * Each step prints a line to stdout (one line = one OK/FAIL). Exit code
+ * is 0 on full success, 1 if any step fails.
+ */
+const http = __importStar(require("node:http"));
+const https = __importStar(require("node:https"));
+const client_ts_1 = require("./client.js");
+const SESSION_HEADER = 'mcp-session-id';
+const PROTOCOL_VERSION = '2025-06-18';
+async function runDoctor(opts) {
+    const connection = (0, client_ts_1.resolveConnection)(opts);
+    const steps = [];
+    // Step 1: initialize.
+    let sessionId;
+    let protocolVersion = PROTOCOL_VERSION;
+    try {
+        const res = await postJson(connection, opts.mountPath, {
+            jsonrpc: '2.0',
+            id: 1,
+            method: 'initialize',
+            params: {
+                protocolVersion: PROTOCOL_VERSION,
+                capabilities: {},
+                clientInfo: { name: 'harper-mcp-doctor', version: '1.0.0' },
+            },
+        });
+        if (res.statusCode !== 200) {
+            steps.push({ name: 'initialize', ok: false, detail: `HTTP ${res.statusCode}: ${res.body.slice(0, 200)}` });
+            return finalize(steps);
+        }
+        const sid = res.headers[SESSION_HEADER];
+        sessionId = Array.isArray(sid) ? sid[0] : sid;
+        const parsed = JSON.parse(res.body);
+        if (parsed?.error) {
+            steps.push({ name: 'initialize', ok: false, detail: `JSON-RPC error: ${parsed.error.message}` });
+            return finalize(steps);
+        }
+        if (typeof parsed?.result?.protocolVersion === 'string')
+            protocolVersion = parsed.result.protocolVersion;
+        steps.push({ name: 'initialize', ok: true, detail: `session=${sessionId} protocol=${protocolVersion}` });
+    }
+    catch (err) {
+        steps.push({ name: 'initialize', ok: false, detail: err.message });
+        return finalize(steps);
+    }
+    // Step 2: tools/list (validates the session works for real dispatch).
+    try {
+        const res = await postJson(connection, opts.mountPath, { jsonrpc: '2.0', id: 2, method: 'tools/list' }, sessionId, protocolVersion);
+        if (res.statusCode !== 200) {
+            steps.push({ name: 'tools/list', ok: false, detail: `HTTP ${res.statusCode}` });
+            return finalize(steps);
+        }
+        const parsed = JSON.parse(res.body);
+        if (parsed?.error) {
+            steps.push({ name: 'tools/list', ok: false, detail: `JSON-RPC error: ${parsed.error.message}` });
+            return finalize(steps);
+        }
+        const count = Array.isArray(parsed?.result?.tools) ? parsed.result.tools.length : 0;
+        steps.push({ name: 'tools/list', ok: true, detail: `${count} tool(s) visible` });
+    }
+    catch (err) {
+        steps.push({ name: 'tools/list', ok: false, detail: err.message });
+        return finalize(steps);
+    }
+    // Step 3: DELETE the session. Tolerated to fail (some configs disable it
+    // with allowClientDelete=false → 405). Either way the doctor overall is
+    // still OK if initialize + tools/list passed.
+    try {
+        const del = await sendDelete(connection, opts.mountPath, sessionId, protocolVersion);
+        if (del.statusCode >= 200 && del.statusCode < 300) {
+            steps.push({ name: 'session cleanup', ok: true });
+        }
+        else {
+            steps.push({ name: 'session cleanup', ok: false, detail: `HTTP ${del.statusCode}` });
+        }
+    }
+    catch (err) {
+        steps.push({ name: 'session cleanup', ok: false, detail: err.message });
+    }
+    return finalize(steps);
+}
+function finalize(steps) {
+    const ok = steps.every((s) => s.ok || s.name === 'session cleanup');
+    return { ok, steps };
+}
+function postJson(connection, mountPath, body, sessionId, protocolVersion) {
+    const headers = {
+        'content-type': 'application/json',
+        'accept': 'application/json, text/event-stream',
+    };
+    if (sessionId)
+        headers[SESSION_HEADER] = sessionId;
+    if (protocolVersion)
+        headers['mcp-protocol-version'] = protocolVersion;
+    return rawRequest(connection, mountPath, 'POST', headers, JSON.stringify(body));
+}
+function sendDelete(connection, mountPath, sessionId, protocolVersion) {
+    return rawRequest(connection, mountPath, 'DELETE', {
+        [SESSION_HEADER]: sessionId,
+        'mcp-protocol-version': protocolVersion,
+    });
+}
+function rawRequest(connection, mountPath, method, headers, body) {
+    return new Promise((resolve, reject) => {
+        const isHttps = connection.protocol === 'https:';
+        const lib = isHttps ? https : http;
+        const reqHeaders = { ...headers };
+        if (connection.authHeader)
+            reqHeaders.authorization = connection.authHeader;
+        const reqOpts = {
+            method,
+            path: mountPath,
+            headers: reqHeaders,
+        };
+        if (connection.socketPath) {
+            reqOpts.socketPath = connection.socketPath;
+        }
+        else {
+            reqOpts.hostname = connection.hostname;
+            reqOpts.port = connection.port;
+        }
+        if (isHttps)
+            reqOpts.rejectUnauthorized = connection.rejectUnauthorized;
+        const req = lib.request(reqOpts, async (res) => {
+            const chunks = [];
+            for await (const chunk of res)
+                chunks.push(typeof chunk === 'string' ? Buffer.from(chunk, 'utf8') : chunk);
+            resolve({
+                statusCode: res.statusCode ?? 0,
+                headers: res.headers,
+                body: Buffer.concat(chunks).toString('utf8'),
+            });
+        });
+        req.on('error', reject);
+        if (body !== undefined)
+            req.write(body);
+        req.end();
+    });
+}
+function formatDoctorReport(result, stdout = process.stdout) {
+    for (const s of result.steps) {
+        const tag = s.ok ? 'OK  ' : 'FAIL';
+        stdout.write(`[${tag}] ${s.name}${s.detail ? ' — ' + s.detail : ''}\n`);
+    }
+    stdout.write(result.ok ? '\nAll checks passed.\n' : '\nDoctor reported failures; see above.\n');
+}
+//# sourceMappingURL=doctor.js.map

package/dist/core/bin/mcp/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../../../core/bin/mcp/doctor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,8BA4EC;AAgFD,gDAMC;AA5LD;;;;;;;;;;;;GAYG;AACH,gDAAkC;AAClC,kDAAoC;AAEpC,2CAAgD;AAEhD,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAO/B,KAAK,UAAU,SAAS,CAAC,IAAmB;IAClD,MAAM,UAAU,GAAG,IAAA,6BAAiB,EAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,KAAK,GAA0D,EAAE,CAAC;IAExE,sBAAsB;IACtB,IAAI,SAA6B,CAAC;IAClC,IAAI,eAAe,GAAG,gBAAgB,CAAC;IACvC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE;YACtD,OAAO,EAAE,KAAK;YACd,EAAE,EAAE,CAAC;YACL,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE;gBACP,eAAe,EAAE,gBAAgB;gBACjC,YAAY,EAAE,EAAE;gBAChB,UAAU,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE;aAC3D;SACD,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3G,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACxC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjG,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,OAAO,MAAM,EAAE,MAAM,EAAE,eAAe,KAAK,QAAQ;YAAE,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;QACzG,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,SAAS,aAAa,eAAe,EAAE,EAAE,CAAC,CAAC;IAC1G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9E,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,sEAAsE;IACtE,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,QAAQ,CACzB,UAAU,EACV,IAAI,CAAC,SAAS,EACd,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAC/C,SAAS,EACT,eAAe,CACf,CAAC;QACF,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAChF,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjG,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,kBAAkB,EAAE,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9E,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,yEAAyE;IACzE,wEAAwE;IACxE,8CAA8C;IAC9C,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,SAAU,EAAE,eAAe,CAAC,CAAC;QACtF,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACtF,CAAC;IACF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAoE;IACrF,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC;IACpE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AACtB,CAAC;AAQD,SAAS,QAAQ,CAChB,UAAgD,EAChD,SAAiB,EACjB,IAAY,EACZ,SAAkB,EAClB,eAAwB;IAExB,MAAM,OAAO,GAA2B;QACvC,cAAc,EAAE,kBAAkB;QAClC,QAAQ,EAAE,qCAAqC;KAC/C,CAAC;IACF,IAAI,SAAS;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC;IACnD,IAAI,eAAe;QAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,eAAe,CAAC;IACvE,OAAO,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,UAAU,CAClB,UAAgD,EAChD,SAAiB,EACjB,SAAiB,EACjB,eAAuB;IAEvB,OAAO,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE;QAClD,CAAC,cAAc,CAAC,EAAE,SAAS;QAC3B,sBAAsB,EAAE,eAAe;KACvC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAClB,UAAgD,EAChD,SAAiB,EACjB,MAAyB,EACzB,OAA+B,EAC/B,IAAa;IAEb,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC;QACjD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACnC,MAAM,UAAU,GAA2B,EAAE,GAAG,OAAO,EAAE,CAAC;QAC1D,IAAI,UAAU,CAAC,UAAU;YAAE,UAAU,CAAC,aAAa,GAAG,UAAU,CAAC,UAAU,CAAC;QAC5E,MAAM,OAAO,GAAwB;YACpC,MAAM;YACN,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,UAAU;SACnB,CAAC;QACF,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;YAC3B,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC;QAC5C,CAAC;aAAM,CAAC;YACP,OAAO,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;YACvC,OAAO,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAChC,CAAC;QACD,IAAI,OAAO;YAAG,OAAgC,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QAClG,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;gBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC3G,OAAO,CAAC;gBACP,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;gBAC/B,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;aAC5C,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,IAAI,IAAI,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,GAAG,CAAC,GAAG,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAoB,EAAE,SAAgC,OAAO,CAAC,MAAM;IACtG,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC;AACjG,CAAC"}

package/dist/core/bin/mcp/index.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseArgs = void 0;
+exports.runMcpCli = runMcpCli;
+/**
+ * `harper mcp` — stdio CLI for connecting an MCP host (Claude Desktop,
+ * Cursor, Zed) to a running Harper instance. Dispatches to one of three
+ * subcommands (bridge, print-config, doctor). With no subcommand the
+ * bridge runs and stays alive until stdin closes.
+ */
+const options_ts_1 = require("./options.js");
+Object.defineProperty(exports, "parseArgs", { enumerable: true, get: function () { return options_ts_1.parseArgs; } });
+const client_ts_1 = require("./client.js");
+const printConfig_ts_1 = require("./printConfig.js");
+const doctor_ts_1 = require("./doctor.js");
+const HELP = `
+Usage: harper mcp [subcommand] [flags]
+
+Connects an MCP host (Claude Desktop, Cursor, Zed) to a Harper instance over
+the Streamable HTTP MCP transport. By default the CLI runs as a stdio bridge:
+host JSON-RPC frames in on stdin, Harper responses out on stdout.
+
+Subcommands:
+  (default)         Run the stdio bridge until stdin closes.
+  print-config      Emit a paste-ready config block for an MCP host.
+                    Required: --client {claude-desktop,cursor,zed}.
+  doctor            Connect, handshake, list tools; report OK/FAIL per step.
+  help              This message.
+
+Connection flags:
+  --profile <p>     'operations' or 'application' (default: operations).
+                    --profile application requires --target (the application
+                    HTTP server doesn't expose a local UDS).
+  --target <url>    Connect over the network instead of local UDS. Example:
+                    --target https://node.example.com:9926
+  --mount-path <p>  Override the MCP route mount path (default: /mcp).
+  --username <u>    Basic auth username (network mode).
+  --password <p>    Basic auth password (network mode).
+  --bearer <token>  Bearer token (network mode). Wins over username/password.
+  --insecure        Skip TLS certificate validation (network mode only).
+
+print-config flags:
+  --client <name>   claude-desktop | cursor | zed
+
+Examples:
+  harper mcp
+  harper mcp doctor --target https://node.example.com:9926
+  harper mcp print-config --client claude-desktop
+`;
+async function runMcpCli(argv) {
+    const opts = (0, options_ts_1.parseArgs)(argv);
+    if (opts.help || opts.subcommand === 'help') {
+        process.stdout.write(HELP.trim() + '\n');
+        return 0;
+    }
+    switch (opts.subcommand) {
+        case 'bridge': {
+            const connection = (0, client_ts_1.resolveConnection)(opts);
+            await (0, client_ts_1.runBridge)({ connection, mountPath: opts.mountPath });
+            return 0;
+        }
+        case 'print-config': {
+            if (!opts.client) {
+                process.stderr.write('harper mcp print-config: --client is required (claude-desktop | cursor | zed)\n');
+                return 1;
+            }
+            (0, printConfig_ts_1.emit)(opts);
+            return 0;
+        }
+        case 'doctor': {
+            const result = await (0, doctor_ts_1.runDoctor)(opts);
+            (0, doctor_ts_1.formatDoctorReport)(result);
+            return result.ok ? 0 : 1;
+        }
+        default: {
+            process.stderr.write(`harper mcp: unknown subcommand '${opts.subcommand}'\n`);
+            return 1;
+        }
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/core/bin/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../core/bin/mcp/index.ts"],"names":[],"mappings":";;;AA8CA,8BA8BC;AA5ED;;;;;GAKG;AACH,6CAA6D;AAwEpD,0FAxEA,sBAAS,OAwEA;AAvElB,2CAA2D;AAC3D,qDAA2D;AAC3D,2CAA4D;AAE5D,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCZ,CAAC;AAEK,KAAK,UAAU,SAAS,CAAC,IAAuB;IACtD,MAAM,IAAI,GAAG,IAAA,sBAAS,EAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC;IACV,CAAC;IACD,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;QACzB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,MAAM,UAAU,GAAG,IAAA,6BAAiB,EAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,IAAA,qBAAS,EAAC,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC;QACV,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;gBACxG,OAAO,CAAC,CAAC;YACV,CAAC;YACD,IAAA,qBAAe,EAAC,IAAI,CAAC,CAAC;YACtB,OAAO,CAAC,CAAC;QACV,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAS,EAAC,IAAI,CAAC,CAAC;YACrC,IAAA,8BAAkB,EAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,IAAI,CAAC,UAAoB,KAAK,CAAC,CAAC;YACxF,OAAO,CAAC,CAAC;QACV,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/core/bin/mcp/options.js

@@ -0,0 +1,113 @@
+"use strict";
+/**
+ * Argument and environment resolution for `harper mcp`. The CLI deliberately
+ * avoids pulling in a flag-parsing dep (Harper's no-new-deps policy) — a few
+ * `--key=value` and `--key value` arguments plus a positional subcommand is
+ * the entire vocabulary.
+ *
+ * Two connection modes:
+ *   - **UDS** (default): connects to the locally-running Harper instance via
+ *     the operationsApi domain socket. **Only the operations profile is
+ *     reachable this way** — the application profile is mounted on the
+ *     application HTTP server, which doesn't expose a UDS in v1. Filesystem
+ *     permissions on the operations socket are the access gate; no
+ *     credentials are required or sent.
+ *   - **HTTPS**: `--target https://host:port` connects over the network.
+ *     Required for `--profile application`. Credential precedence
+ *     (highest first):
+ *       `--bearer` > `--username` + `--password` > URL-embedded user/pass
+ *       > saved JWT from `~/.harperdb/credentials.json` (populated by
+ *       `harper login` and looked up via `cliCredentials.normalizeTarget`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseArgs = parseArgs;
+function parseArgs(argv) {
+    const opts = {
+        subcommand: 'bridge',
+        // Operations is the safer default: the typical zero-config path
+        // (`harper mcp` / `harper mcp doctor` on the local machine, no
+        // --target) connects over the operations UDS, which only routes
+        // to the operations MCP endpoint in v1.
+        profile: 'operations',
+        mountPath: '/mcp',
+        rejectUnauthorized: true,
+        help: false,
+    };
+    // argv begins after `harper mcp`, i.e. process.argv.slice(3).
+    let i = 0;
+    if (argv[0] && !argv[0].startsWith('-')) {
+        const sub = argv[0];
+        if (sub === 'print-config' || sub === 'doctor' || sub === 'help') {
+            opts.subcommand = sub;
+            i = 1;
+        }
+        else if (sub === 'bridge') {
+            opts.subcommand = 'bridge';
+            i = 1;
+        }
+        // anything else: assume it's a flag-style arg or noise; leave i=0.
+    }
+    for (; i < argv.length; i++) {
+        const arg = argv[i];
+        const eq = arg.indexOf('=');
+        const isLong = arg.startsWith('--');
+        const key = isLong ? (eq === -1 ? arg.slice(2) : arg.slice(2, eq)) : arg;
+        const valueInline = eq === -1 ? undefined : arg.slice(eq + 1);
+        const consumeNext = () => {
+            if (valueInline !== undefined)
+                return valueInline;
+            const next = argv[i + 1];
+            if (next === undefined || next.startsWith('-'))
+                return undefined;
+            i++;
+            return next;
+        };
+        switch (key) {
+            case '--profile':
+            case 'profile': {
+                const v = consumeNext();
+                if (v === 'operations' || v === 'application')
+                    opts.profile = v;
+                break;
+            }
+            case '--target':
+            case 'target':
+                opts.target = consumeNext();
+                break;
+            case '--mount-path':
+            case 'mount-path':
+                opts.mountPath = consumeNext() ?? opts.mountPath;
+                break;
+            case '--username':
+            case 'username':
+                opts.username = consumeNext();
+                break;
+            case '--password':
+            case 'password':
+                opts.password = consumeNext();
+                break;
+            case '--bearer':
+            case 'bearer':
+                opts.bearer = consumeNext();
+                break;
+            case '--insecure':
+            case 'insecure':
+                opts.rejectUnauthorized = false;
+                break;
+            case '--client':
+            case 'client': {
+                const v = consumeNext();
+                if (v === 'claude-desktop' || v === 'cursor' || v === 'zed')
+                    opts.client = v;
+                break;
+            }
+            case '--help':
+            case 'help':
+            case '-h':
+                opts.help = true;
+                break;
+        }
+    }
+    return opts;
+}
+//# sourceMappingURL=options.js.map

package/dist/core/bin/mcp/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../../../core/bin/mcp/options.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;AAeH,8BAuFC;AAvFD,SAAgB,SAAS,CAAC,IAAuB;IAChD,MAAM,IAAI,GAAkB;QAC3B,UAAU,EAAE,QAAQ;QACpB,gEAAgE;QAChE,+DAA+D;QAC/D,gEAAgE;QAChE,wCAAwC;QACxC,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE,MAAM;QACjB,kBAAkB,EAAE,IAAI;QACxB,IAAI,EAAE,KAAK;KACX,CAAC;IAEF,8DAA8D;IAC9D,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,cAAc,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YAClE,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;YACtB,CAAC,GAAG,CAAC,CAAC;QACP,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC;YAC3B,CAAC,GAAG,CAAC,CAAC;QACP,CAAC;QACD,mEAAmE;IACpE,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACzE,MAAM,WAAW,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,GAAuB,EAAE;YAC5C,IAAI,WAAW,KAAK,SAAS;gBAAE,OAAO,WAAW,CAAC;YAClD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACjE,CAAC,EAAE,CAAC;YACJ,OAAO,IAAI,CAAC;QACb,CAAC,CAAC;QAEF,QAAQ,GAAG,EAAE,CAAC;YACb,KAAK,WAAW,CAAC;YACjB,KAAK,SAAS,CAAC,CAAC,CAAC;gBAChB,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,aAAa;oBAAE,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;gBAChE,MAAM;YACP,CAAC;YACD,KAAK,UAAU,CAAC;YAChB,KAAK,QAAQ;gBACZ,IAAI,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;gBAC5B,MAAM;YACP,KAAK,cAAc,CAAC;YACpB,KAAK,YAAY;gBAChB,IAAI,CAAC,SAAS,GAAG,WAAW,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC;gBACjD,MAAM;YACP,KAAK,YAAY,CAAC;YAClB,KAAK,UAAU;gBACd,IAAI,CAAC,QAAQ,GAAG,WAAW,EAAE,CAAC;gBAC9B,MAAM;YACP,KAAK,YAAY,CAAC;YAClB,KAAK,UAAU;gBACd,IAAI,CAAC,QAAQ,GAAG,WAAW,EAAE,CAAC;gBAC9B,MAAM;YACP,KAAK,UAAU,CAAC;YAChB,KAAK,QAAQ;gBACZ,IAAI,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;gBAC5B,MAAM;YACP,KAAK,YAAY,CAAC;YAClB,KAAK,UAAU;gBACd,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;gBAChC,MAAM;YACP,KAAK,UAAU,CAAC;YAChB,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACf,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,KAAK;oBAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC7E,MAAM;YACP,CAAC;YACD,KAAK,QAAQ,CAAC;YACd,KAAK,MAAM,CAAC;YACZ,KAAK,IAAI;gBACR,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;gBACjB,MAAM;QACR,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/core/bin/mcp/printConfig.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderConfig = renderConfig;
+exports.emit = emit;
+function renderConfig(opts) {
+    const client = opts.client ?? 'claude-desktop';
+    const args = ['mcp'];
+    // Default is 'operations'; only emit the flag when overriding to 'application'.
+    if (opts.profile !== 'operations')
+        args.push('--profile', opts.profile);
+    if (opts.target)
+        args.push('--target', opts.target);
+    if (opts.mountPath !== '/mcp')
+        args.push('--mount-path', opts.mountPath);
+    if (opts.username)
+        args.push('--username', opts.username);
+    if (opts.password)
+        args.push('--password', opts.password);
+    if (opts.bearer)
+        args.push('--bearer', opts.bearer);
+    if (!opts.rejectUnauthorized)
+        args.push('--insecure');
+    switch (client) {
+        case 'claude-desktop': {
+            return {
+                target: '~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\\Claude\\claude_desktop_config.json (Windows)',
+                body: {
+                    mcpServers: {
+                        harper: {
+                            command: 'harper',
+                            args,
+                        },
+                    },
+                },
+                notes: [
+                    'Restart Claude Desktop after editing the file.',
+                    'Merge into an existing `mcpServers` block if you already have one.',
+                ],
+            };
+        }
+        case 'cursor': {
+            return {
+                target: '~/.cursor/mcp.json',
+                body: {
+                    mcpServers: {
+                        harper: {
+                            command: 'harper',
+                            args,
+                        },
+                    },
+                },
+                notes: ['Cursor reads this file at startup; restart after editing.'],
+            };
+        }
+        case 'zed': {
+            return {
+                target: 'Zed settings.json',
+                body: {
+                    context_servers: {
+                        harper: {
+                            command: {
+                                path: 'harper',
+                                args,
+                                env: {},
+                            },
+                        },
+                    },
+                },
+                notes: ["Zed's MCP support is behind a feature flag — see the Zed docs for activation."],
+            };
+        }
+        default:
+            throw new Error(`harper mcp print-config: unknown --client '${client}'`);
+    }
+}
+function emit(opts, stdout = process.stdout) {
+    const block = renderConfig(opts);
+    stdout.write(`# Target file: ${block.target}\n`);
+    stdout.write(JSON.stringify(block.body, null, 2));
+    stdout.write('\n');
+    for (const note of block.notes) {
+        stdout.write(`# Note: ${note}\n`);
+    }
+}
+//# sourceMappingURL=printConfig.js.map

package/dist/core/bin/mcp/printConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"printConfig.js","sourceRoot":"","sources":["../../../../core/bin/mcp/printConfig.ts"],"names":[],"mappings":";;AAaA,oCAiEC;AAED,oBAQC;AA3ED,SAAgB,YAAY,CAAC,IAAmB;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,gFAAgF;IAChF,IAAI,IAAI,CAAC,OAAO,KAAK,YAAY;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,kBAAkB;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAEtD,QAAQ,MAAM,EAAE,CAAC;QAChB,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACvB,OAAO;gBACN,MAAM,EACL,oIAAoI;gBACrI,IAAI,EAAE;oBACL,UAAU,EAAE;wBACX,MAAM,EAAE;4BACP,OAAO,EAAE,QAAQ;4BACjB,IAAI;yBACJ;qBACD;iBACD;gBACD,KAAK,EAAE;oBACN,gDAAgD;oBAChD,oEAAoE;iBACpE;aACD,CAAC;QACH,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,OAAO;gBACN,MAAM,EAAE,oBAAoB;gBAC5B,IAAI,EAAE;oBACL,UAAU,EAAE;wBACX,MAAM,EAAE;4BACP,OAAO,EAAE,QAAQ;4BACjB,IAAI;yBACJ;qBACD;iBACD;gBACD,KAAK,EAAE,CAAC,2DAA2D,CAAC;aACpE,CAAC;QACH,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACZ,OAAO;gBACN,MAAM,EAAE,mBAAmB;gBAC3B,IAAI,EAAE;oBACL,eAAe,EAAE;wBAChB,MAAM,EAAE;4BACP,OAAO,EAAE;gCACR,IAAI,EAAE,QAAQ;gCACd,IAAI;gCACJ,GAAG,EAAE,EAAE;6BACP;yBACD;qBACD;iBACD;gBACD,KAAK,EAAE,CAAC,+EAA+E,CAAC;aACxF,CAAC;QACH,CAAC;QACD;YACC,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAgB,GAAG,CAAC,CAAC;IACrF,CAAC;AACF,CAAC;AAED,SAAgB,IAAI,CAAC,IAAmB,EAAE,SAAgC,OAAO,CAAC,MAAM;IACvF,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,CAAC,KAAK,CAAC,kBAAkB,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC;IACnC,CAAC;AACF,CAAC"}

package/dist/core/bin/multipartBuilder.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildMultipartBody = buildMultipartBody;
+const node_crypto_1 = require("node:crypto");
+const node_stream_1 = require("node:stream");
+/**
+ * Build a streaming multipart/form-data body for the operations API.
+ *
+ * Fields are emitted first, in the order they appear in the `fields` record, then the
+ * single (optional) file part. That ordering is required by the server-side multipart
+ * parser (`server/serverHelpers/multipartParser.ts`): dispatching fields like `operation`
+ * must arrive before the file so preValidation/auth hooks can see them, and the file
+ * always comes last so the route handler streams it into extraction.
+ *
+ * Each field value is JSON-stringified — the server parser will reverse that on values
+ * that look like JSON, otherwise leave them as raw strings.
+ */
+function buildMultipartBody(fields, file) {
+    const boundary = '----HarperMultipart' + (0, node_crypto_1.randomBytes)(12).toString('hex');
+    const stream = node_stream_1.Readable.from(generateParts(boundary, fields, file));
+    return {
+        boundary,
+        contentType: `multipart/form-data; boundary=${boundary}`,
+        stream,
+    };
+}
+async function* generateParts(boundary, fields, file) {
+    const dashBoundary = `--${boundary}`;
+    for (const [name, value] of Object.entries(fields)) {
+        if (value === undefined)
+            continue;
+        yield Buffer.from(`${dashBoundary}\r\nContent-Disposition: form-data; name="${escapeFieldName(name)}"\r\n\r\n${serializeFieldValue(value)}\r\n`);
+    }
+    if (file) {
+        const contentType = file.contentType ?? 'application/octet-stream';
+        yield Buffer.from(`${dashBoundary}\r\nContent-Disposition: form-data; name="${escapeFieldName(file.name)}"; filename="${escapeFieldName(file.filename)}"\r\nContent-Type: ${contentType}\r\n\r\n`);
+        for await (const chunk of file.stream) {
+            yield typeof chunk === 'string' ? Buffer.from(chunk) : chunk;
+        }
+        yield Buffer.from('\r\n');
+    }
+    yield Buffer.from(`${dashBoundary}--\r\n`);
+}
+function serializeFieldValue(value) {
+    if (typeof value === 'string')
+        return value;
+    return JSON.stringify(value);
+}
+function escapeFieldName(name) {
+    // Strip CR/LF and quote characters that would break the Content-Disposition header.
+    // Field/file names are caller-controlled CLI values so this is defense-in-depth, not
+    // untrusted-input sanitization.
+    return name.replace(/[\r\n"]/g, '');
+}
+//# sourceMappingURL=multipartBuilder.js.map

package/dist/core/bin/multipartBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipartBuilder.js","sourceRoot":"","sources":["../../../core/bin/multipartBuilder.ts"],"names":[],"mappings":";;AA4BA,gDAQC;AApCD,6CAA0C;AAC1C,6CAAuC;AAevC;;;;;;;;;;;GAWG;AACH,SAAgB,kBAAkB,CAAC,MAA+B,EAAE,IAAoB;IACvF,MAAM,QAAQ,GAAG,qBAAqB,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,sBAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACpE,OAAO;QACN,QAAQ;QACR,WAAW,EAAE,iCAAiC,QAAQ,EAAE;QACxD,MAAM;KACN,CAAC;AACH,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,aAAa,CAC5B,QAAgB,EAChB,MAA+B,EAC/B,IAA+B;IAE/B,MAAM,YAAY,GAAG,KAAK,QAAQ,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,MAAM,CAAC,IAAI,CAChB,GAAG,YAAY,6CAA6C,eAAe,CAAC,IAAI,CAAC,YAAY,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAC7H,CAAC;IACH,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACV,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,0BAA0B,CAAC;QACnE,MAAM,MAAM,CAAC,IAAI,CAChB,GAAG,YAAY,6CAA6C,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,WAAW,UAAU,CAC/K,CAAC;QACF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAgB,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACpC,oFAAoF;IACpF,qFAAqF;IACrF,gCAAgC;IAChC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC"}