@harperfast/harper 5.0.30 → 5.1.0-beta.2

package/dist/bin/mcp/index.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseArgs = void 0;
+exports.runMcpCli = runMcpCli;
+/**
+ * `harper mcp` — stdio CLI for connecting an MCP host (Claude Desktop,
+ * Cursor, Zed) to a running Harper instance. Dispatches to one of three
+ * subcommands (bridge, print-config, doctor). With no subcommand the
+ * bridge runs and stays alive until stdin closes.
+ */
+const options_ts_1 = require("./options.js");
+Object.defineProperty(exports, "parseArgs", { enumerable: true, get: function () { return options_ts_1.parseArgs; } });
+const client_ts_1 = require("./client.js");
+const printConfig_ts_1 = require("./printConfig.js");
+const doctor_ts_1 = require("./doctor.js");
+const HELP = `
+Usage: harper mcp [subcommand] [flags]
+
+Connects an MCP host (Claude Desktop, Cursor, Zed) to a Harper instance over
+the Streamable HTTP MCP transport. By default the CLI runs as a stdio bridge:
+host JSON-RPC frames in on stdin, Harper responses out on stdout.
+
+Subcommands:
+  (default)         Run the stdio bridge until stdin closes.
+  print-config      Emit a paste-ready config block for an MCP host.
+                    Required: --client {claude-desktop,cursor,zed}.
+  doctor            Connect, handshake, list tools; report OK/FAIL per step.
+  help              This message.
+
+Connection flags:
+  --profile <p>     'operations' or 'application' (default: operations).
+                    --profile application requires --target (the application
+                    HTTP server doesn't expose a local UDS).
+  --target <url>    Connect over the network instead of local UDS. Example:
+                    --target https://node.example.com:9926
+  --mount-path <p>  Override the MCP route mount path (default: /mcp).
+  --username <u>    Basic auth username (network mode).
+  --password <p>    Basic auth password (network mode).
+  --bearer <token>  Bearer token (network mode). Wins over username/password.
+  --insecure        Skip TLS certificate validation (network mode only).
+
+print-config flags:
+  --client <name>   claude-desktop | cursor | zed
+
+Examples:
+  harper mcp
+  harper mcp doctor --target https://node.example.com:9926
+  harper mcp print-config --client claude-desktop
+`;
+async function runMcpCli(argv) {
+    const opts = (0, options_ts_1.parseArgs)(argv);
+    if (opts.help || opts.subcommand === 'help') {
+        process.stdout.write(HELP.trim() + '\n');
+        return 0;
+    }
+    switch (opts.subcommand) {
+        case 'bridge': {
+            const connection = (0, client_ts_1.resolveConnection)(opts);
+            await (0, client_ts_1.runBridge)({ connection, mountPath: opts.mountPath });
+            return 0;
+        }
+        case 'print-config': {
+            if (!opts.client) {
+                process.stderr.write('harper mcp print-config: --client is required (claude-desktop | cursor | zed)\n');
+                return 1;
+            }
+            (0, printConfig_ts_1.emit)(opts);
+            return 0;
+        }
+        case 'doctor': {
+            const result = await (0, doctor_ts_1.runDoctor)(opts);
+            (0, doctor_ts_1.formatDoctorReport)(result);
+            return result.ok ? 0 : 1;
+        }
+        default: {
+            process.stderr.write(`harper mcp: unknown subcommand '${opts.subcommand}'\n`);
+            return 1;
+        }
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/bin/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../bin/mcp/index.ts"],"names":[],"mappings":";;;AA8CA,8BA8BC;AA5ED;;;;;GAKG;AACH,6CAA6D;AAwEpD,0FAxEA,sBAAS,OAwEA;AAvElB,2CAA2D;AAC3D,qDAA2D;AAC3D,2CAA4D;AAE5D,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCZ,CAAC;AAEK,KAAK,UAAU,SAAS,CAAC,IAAuB;IACtD,MAAM,IAAI,GAAG,IAAA,sBAAS,EAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC;IACV,CAAC;IACD,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;QACzB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,MAAM,UAAU,GAAG,IAAA,6BAAiB,EAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,IAAA,qBAAS,EAAC,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC;QACV,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;gBACxG,OAAO,CAAC,CAAC;YACV,CAAC;YACD,IAAA,qBAAe,EAAC,IAAI,CAAC,CAAC;YACtB,OAAO,CAAC,CAAC;QACV,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAS,EAAC,IAAI,CAAC,CAAC;YACrC,IAAA,8BAAkB,EAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,IAAI,CAAC,UAAoB,KAAK,CAAC,CAAC;YACxF,OAAO,CAAC,CAAC;QACV,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/bin/mcp/options.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Argument and environment resolution for `harper mcp`. The CLI deliberately
+ * avoids pulling in a flag-parsing dep (Harper's no-new-deps policy) — a few
+ * `--key=value` and `--key value` arguments plus a positional subcommand is
+ * the entire vocabulary.
+ *
+ * Two connection modes:
+ *   - **UDS** (default): connects to the locally-running Harper instance via
+ *     the operationsApi domain socket. **Only the operations profile is
+ *     reachable this way** — the application profile is mounted on the
+ *     application HTTP server, which doesn't expose a UDS in v1. Filesystem
+ *     permissions on the operations socket are the access gate; no
+ *     credentials are required or sent.
+ *   - **HTTPS**: `--target https://host:port` connects over the network.
+ *     Required for `--profile application`. Credential precedence
+ *     (highest first):
+ *       `--bearer` > `--username` + `--password` > URL-embedded user/pass
+ *       > saved JWT from `~/.harperdb/credentials.json` (populated by
+ *       `harper login` and looked up via `cliCredentials.normalizeTarget`).
+ */
+export interface McpCliOptions {
+    subcommand: 'bridge' | 'print-config' | 'doctor' | 'help';
+    profile: 'operations' | 'application';
+    target?: string;
+    mountPath: string;
+    username?: string;
+    password?: string;
+    bearer?: string;
+    rejectUnauthorized: boolean;
+    client?: 'claude-desktop' | 'cursor' | 'zed';
+    help: boolean;
+}
+export declare function parseArgs(argv: readonly string[]): McpCliOptions;

package/dist/bin/mcp/options.js

@@ -0,0 +1,113 @@
+"use strict";
+/**
+ * Argument and environment resolution for `harper mcp`. The CLI deliberately
+ * avoids pulling in a flag-parsing dep (Harper's no-new-deps policy) — a few
+ * `--key=value` and `--key value` arguments plus a positional subcommand is
+ * the entire vocabulary.
+ *
+ * Two connection modes:
+ *   - **UDS** (default): connects to the locally-running Harper instance via
+ *     the operationsApi domain socket. **Only the operations profile is
+ *     reachable this way** — the application profile is mounted on the
+ *     application HTTP server, which doesn't expose a UDS in v1. Filesystem
+ *     permissions on the operations socket are the access gate; no
+ *     credentials are required or sent.
+ *   - **HTTPS**: `--target https://host:port` connects over the network.
+ *     Required for `--profile application`. Credential precedence
+ *     (highest first):
+ *       `--bearer` > `--username` + `--password` > URL-embedded user/pass
+ *       > saved JWT from `~/.harperdb/credentials.json` (populated by
+ *       `harper login` and looked up via `cliCredentials.normalizeTarget`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseArgs = parseArgs;
+function parseArgs(argv) {
+    const opts = {
+        subcommand: 'bridge',
+        // Operations is the safer default: the typical zero-config path
+        // (`harper mcp` / `harper mcp doctor` on the local machine, no
+        // --target) connects over the operations UDS, which only routes
+        // to the operations MCP endpoint in v1.
+        profile: 'operations',
+        mountPath: '/mcp',
+        rejectUnauthorized: true,
+        help: false,
+    };
+    // argv begins after `harper mcp`, i.e. process.argv.slice(3).
+    let i = 0;
+    if (argv[0] && !argv[0].startsWith('-')) {
+        const sub = argv[0];
+        if (sub === 'print-config' || sub === 'doctor' || sub === 'help') {
+            opts.subcommand = sub;
+            i = 1;
+        }
+        else if (sub === 'bridge') {
+            opts.subcommand = 'bridge';
+            i = 1;
+        }
+        // anything else: assume it's a flag-style arg or noise; leave i=0.
+    }
+    for (; i < argv.length; i++) {
+        const arg = argv[i];
+        const eq = arg.indexOf('=');
+        const isLong = arg.startsWith('--');
+        const key = isLong ? (eq === -1 ? arg.slice(2) : arg.slice(2, eq)) : arg;
+        const valueInline = eq === -1 ? undefined : arg.slice(eq + 1);
+        const consumeNext = () => {
+            if (valueInline !== undefined)
+                return valueInline;
+            const next = argv[i + 1];
+            if (next === undefined || next.startsWith('-'))
+                return undefined;
+            i++;
+            return next;
+        };
+        switch (key) {
+            case '--profile':
+            case 'profile': {
+                const v = consumeNext();
+                if (v === 'operations' || v === 'application')
+                    opts.profile = v;
+                break;
+            }
+            case '--target':
+            case 'target':
+                opts.target = consumeNext();
+                break;
+            case '--mount-path':
+            case 'mount-path':
+                opts.mountPath = consumeNext() ?? opts.mountPath;
+                break;
+            case '--username':
+            case 'username':
+                opts.username = consumeNext();
+                break;
+            case '--password':
+            case 'password':
+                opts.password = consumeNext();
+                break;
+            case '--bearer':
+            case 'bearer':
+                opts.bearer = consumeNext();
+                break;
+            case '--insecure':
+            case 'insecure':
+                opts.rejectUnauthorized = false;
+                break;
+            case '--client':
+            case 'client': {
+                const v = consumeNext();
+                if (v === 'claude-desktop' || v === 'cursor' || v === 'zed')
+                    opts.client = v;
+                break;
+            }
+            case '--help':
+            case 'help':
+            case '-h':
+                opts.help = true;
+                break;
+        }
+    }
+    return opts;
+}
+//# sourceMappingURL=options.js.map

package/dist/bin/mcp/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../../bin/mcp/options.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;AAeH,8BAuFC;AAvFD,SAAgB,SAAS,CAAC,IAAuB;IAChD,MAAM,IAAI,GAAkB;QAC3B,UAAU,EAAE,QAAQ;QACpB,gEAAgE;QAChE,+DAA+D;QAC/D,gEAAgE;QAChE,wCAAwC;QACxC,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE,MAAM;QACjB,kBAAkB,EAAE,IAAI;QACxB,IAAI,EAAE,KAAK;KACX,CAAC;IAEF,8DAA8D;IAC9D,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,cAAc,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YAClE,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;YACtB,CAAC,GAAG,CAAC,CAAC;QACP,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC;YAC3B,CAAC,GAAG,CAAC,CAAC;QACP,CAAC;QACD,mEAAmE;IACpE,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACzE,MAAM,WAAW,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,GAAuB,EAAE;YAC5C,IAAI,WAAW,KAAK,SAAS;gBAAE,OAAO,WAAW,CAAC;YAClD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACjE,CAAC,EAAE,CAAC;YACJ,OAAO,IAAI,CAAC;QACb,CAAC,CAAC;QAEF,QAAQ,GAAG,EAAE,CAAC;YACb,KAAK,WAAW,CAAC;YACjB,KAAK,SAAS,CAAC,CAAC,CAAC;gBAChB,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,aAAa;oBAAE,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;gBAChE,MAAM;YACP,CAAC;YACD,KAAK,UAAU,CAAC;YAChB,KAAK,QAAQ;gBACZ,IAAI,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;gBAC5B,MAAM;YACP,KAAK,cAAc,CAAC;YACpB,KAAK,YAAY;gBAChB,IAAI,CAAC,SAAS,GAAG,WAAW,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC;gBACjD,MAAM;YACP,KAAK,YAAY,CAAC;YAClB,KAAK,UAAU;gBACd,IAAI,CAAC,QAAQ,GAAG,WAAW,EAAE,CAAC;gBAC9B,MAAM;YACP,KAAK,YAAY,CAAC;YAClB,KAAK,UAAU;gBACd,IAAI,CAAC,QAAQ,GAAG,WAAW,EAAE,CAAC;gBAC9B,MAAM;YACP,KAAK,UAAU,CAAC;YAChB,KAAK,QAAQ;gBACZ,IAAI,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;gBAC5B,MAAM;YACP,KAAK,YAAY,CAAC;YAClB,KAAK,UAAU;gBACd,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;gBAChC,MAAM;YACP,KAAK,UAAU,CAAC;YAChB,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACf,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,gBAAgB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,KAAK;oBAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;gBAC7E,MAAM;YACP,CAAC;YACD,KAAK,QAAQ,CAAC;YACd,KAAK,MAAM,CAAC;YACZ,KAAK,IAAI;gBACR,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;gBACjB,MAAM;QACR,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/bin/mcp/printConfig.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Emit a paste-ready config block for each supported MCP client. Output
+ * goes to stdout so the user can pipe or copy directly into their
+ * client's config file.
+ */
+import type { McpCliOptions } from './options.ts';
+interface ConfigBlock {
+    target: string;
+    body: object;
+    notes: readonly string[];
+}
+export declare function renderConfig(opts: McpCliOptions): ConfigBlock;
+export declare function emit(opts: McpCliOptions, stdout?: NodeJS.WritableStream): void;
+export {};

package/dist/bin/mcp/printConfig.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderConfig = renderConfig;
+exports.emit = emit;
+function renderConfig(opts) {
+    const client = opts.client ?? 'claude-desktop';
+    const args = ['mcp'];
+    // Default is 'operations'; only emit the flag when overriding to 'application'.
+    if (opts.profile !== 'operations')
+        args.push('--profile', opts.profile);
+    if (opts.target)
+        args.push('--target', opts.target);
+    if (opts.mountPath !== '/mcp')
+        args.push('--mount-path', opts.mountPath);
+    if (opts.username)
+        args.push('--username', opts.username);
+    if (opts.password)
+        args.push('--password', opts.password);
+    if (opts.bearer)
+        args.push('--bearer', opts.bearer);
+    if (!opts.rejectUnauthorized)
+        args.push('--insecure');
+    switch (client) {
+        case 'claude-desktop': {
+            return {
+                target: '~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\\Claude\\claude_desktop_config.json (Windows)',
+                body: {
+                    mcpServers: {
+                        harper: {
+                            command: 'harper',
+                            args,
+                        },
+                    },
+                },
+                notes: [
+                    'Restart Claude Desktop after editing the file.',
+                    'Merge into an existing `mcpServers` block if you already have one.',
+                ],
+            };
+        }
+        case 'cursor': {
+            return {
+                target: '~/.cursor/mcp.json',
+                body: {
+                    mcpServers: {
+                        harper: {
+                            command: 'harper',
+                            args,
+                        },
+                    },
+                },
+                notes: ['Cursor reads this file at startup; restart after editing.'],
+            };
+        }
+        case 'zed': {
+            return {
+                target: 'Zed settings.json',
+                body: {
+                    context_servers: {
+                        harper: {
+                            command: {
+                                path: 'harper',
+                                args,
+                                env: {},
+                            },
+                        },
+                    },
+                },
+                notes: ["Zed's MCP support is behind a feature flag — see the Zed docs for activation."],
+            };
+        }
+        default:
+            throw new Error(`harper mcp print-config: unknown --client '${client}'`);
+    }
+}
+function emit(opts, stdout = process.stdout) {
+    const block = renderConfig(opts);
+    stdout.write(`# Target file: ${block.target}\n`);
+    stdout.write(JSON.stringify(block.body, null, 2));
+    stdout.write('\n');
+    for (const note of block.notes) {
+        stdout.write(`# Note: ${note}\n`);
+    }
+}
+//# sourceMappingURL=printConfig.js.map

package/dist/bin/mcp/printConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"printConfig.js","sourceRoot":"","sources":["../../../bin/mcp/printConfig.ts"],"names":[],"mappings":";;AAaA,oCAiEC;AAED,oBAQC;AA3ED,SAAgB,YAAY,CAAC,IAAmB;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,gFAAgF;IAChF,IAAI,IAAI,CAAC,OAAO,KAAK,YAAY;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,kBAAkB;QAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAEtD,QAAQ,MAAM,EAAE,CAAC;QAChB,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACvB,OAAO;gBACN,MAAM,EACL,oIAAoI;gBACrI,IAAI,EAAE;oBACL,UAAU,EAAE;wBACX,MAAM,EAAE;4BACP,OAAO,EAAE,QAAQ;4BACjB,IAAI;yBACJ;qBACD;iBACD;gBACD,KAAK,EAAE;oBACN,gDAAgD;oBAChD,oEAAoE;iBACpE;aACD,CAAC;QACH,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACf,OAAO;gBACN,MAAM,EAAE,oBAAoB;gBAC5B,IAAI,EAAE;oBACL,UAAU,EAAE;wBACX,MAAM,EAAE;4BACP,OAAO,EAAE,QAAQ;4BACjB,IAAI;yBACJ;qBACD;iBACD;gBACD,KAAK,EAAE,CAAC,2DAA2D,CAAC;aACpE,CAAC;QACH,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACZ,OAAO;gBACN,MAAM,EAAE,mBAAmB;gBAC3B,IAAI,EAAE;oBACL,eAAe,EAAE;wBAChB,MAAM,EAAE;4BACP,OAAO,EAAE;gCACR,IAAI,EAAE,QAAQ;gCACd,IAAI;gCACJ,GAAG,EAAE,EAAE;6BACP;yBACD;qBACD;iBACD;gBACD,KAAK,EAAE,CAAC,+EAA+E,CAAC;aACxF,CAAC;QACH,CAAC;QACD;YACC,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAgB,GAAG,CAAC,CAAC;IACrF,CAAC;AACF,CAAC;AAED,SAAgB,IAAI,CAAC,IAAmB,EAAE,SAAgC,OAAO,CAAC,MAAM;IACvF,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,CAAC,KAAK,CAAC,kBAAkB,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC;IACnC,CAAC;AACF,CAAC"}

package/dist/bin/multipartBuilder.d.ts

@@ -0,0 +1,26 @@
+import { Readable } from 'node:stream';
+interface MultipartFile {
+    name: string;
+    filename: string;
+    contentType?: string;
+    stream: Readable;
+}
+interface MultipartBody {
+    boundary: string;
+    contentType: string;
+    stream: Readable;
+}
+/**
+ * Build a streaming multipart/form-data body for the operations API.
+ *
+ * Fields are emitted first, in the order they appear in the `fields` record, then the
+ * single (optional) file part. That ordering is required by the server-side multipart
+ * parser (`server/serverHelpers/multipartParser.ts`): dispatching fields like `operation`
+ * must arrive before the file so preValidation/auth hooks can see them, and the file
+ * always comes last so the route handler streams it into extraction.
+ *
+ * Each field value is JSON-stringified — the server parser will reverse that on values
+ * that look like JSON, otherwise leave them as raw strings.
+ */
+export declare function buildMultipartBody(fields: Record<string, unknown>, file?: MultipartFile): MultipartBody;
+export {};

package/dist/bin/multipartBuilder.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildMultipartBody = buildMultipartBody;
+const node_crypto_1 = require("node:crypto");
+const node_stream_1 = require("node:stream");
+/**
+ * Build a streaming multipart/form-data body for the operations API.
+ *
+ * Fields are emitted first, in the order they appear in the `fields` record, then the
+ * single (optional) file part. That ordering is required by the server-side multipart
+ * parser (`server/serverHelpers/multipartParser.ts`): dispatching fields like `operation`
+ * must arrive before the file so preValidation/auth hooks can see them, and the file
+ * always comes last so the route handler streams it into extraction.
+ *
+ * Each field value is JSON-stringified — the server parser will reverse that on values
+ * that look like JSON, otherwise leave them as raw strings.
+ */
+function buildMultipartBody(fields, file) {
+    const boundary = '----HarperMultipart' + (0, node_crypto_1.randomBytes)(12).toString('hex');
+    const stream = node_stream_1.Readable.from(generateParts(boundary, fields, file));
+    return {
+        boundary,
+        contentType: `multipart/form-data; boundary=${boundary}`,
+        stream,
+    };
+}
+async function* generateParts(boundary, fields, file) {
+    const dashBoundary = `--${boundary}`;
+    for (const [name, value] of Object.entries(fields)) {
+        if (value === undefined)
+            continue;
+        yield Buffer.from(`${dashBoundary}\r\nContent-Disposition: form-data; name="${escapeFieldName(name)}"\r\n\r\n${serializeFieldValue(value)}\r\n`);
+    }
+    if (file) {
+        const contentType = file.contentType ?? 'application/octet-stream';
+        yield Buffer.from(`${dashBoundary}\r\nContent-Disposition: form-data; name="${escapeFieldName(file.name)}"; filename="${escapeFieldName(file.filename)}"\r\nContent-Type: ${contentType}\r\n\r\n`);
+        for await (const chunk of file.stream) {
+            yield typeof chunk === 'string' ? Buffer.from(chunk) : chunk;
+        }
+        yield Buffer.from('\r\n');
+    }
+    yield Buffer.from(`${dashBoundary}--\r\n`);
+}
+function serializeFieldValue(value) {
+    if (typeof value === 'string')
+        return value;
+    return JSON.stringify(value);
+}
+function escapeFieldName(name) {
+    // Strip CR/LF and quote characters that would break the Content-Disposition header.
+    // Field/file names are caller-controlled CLI values so this is defense-in-depth, not
+    // untrusted-input sanitization.
+    return name.replace(/[\r\n"]/g, '');
+}
+//# sourceMappingURL=multipartBuilder.js.map

package/dist/bin/multipartBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipartBuilder.js","sourceRoot":"","sources":["../../bin/multipartBuilder.ts"],"names":[],"mappings":";;AA4BA,gDAQC;AApCD,6CAA0C;AAC1C,6CAAuC;AAevC;;;;;;;;;;;GAWG;AACH,SAAgB,kBAAkB,CAAC,MAA+B,EAAE,IAAoB;IACvF,MAAM,QAAQ,GAAG,qBAAqB,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,sBAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACpE,OAAO;QACN,QAAQ;QACR,WAAW,EAAE,iCAAiC,QAAQ,EAAE;QACxD,MAAM;KACN,CAAC;AACH,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,aAAa,CAC5B,QAAgB,EAChB,MAA+B,EAC/B,IAA+B;IAE/B,MAAM,YAAY,GAAG,KAAK,QAAQ,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,MAAM,CAAC,IAAI,CAChB,GAAG,YAAY,6CAA6C,eAAe,CAAC,IAAI,CAAC,YAAY,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAC7H,CAAC;IACH,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACV,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,0BAA0B,CAAC;QACnE,MAAM,MAAM,CAAC,IAAI,CAChB,GAAG,YAAY,6CAA6C,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,WAAW,UAAU,CAC/K,CAAC;QACF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAgB,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACpC,oFAAoF;IACpF,qFAAqF;IACrF,gCAAgC;IAChC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC"}

package/dist/bin/restart.d.ts

@@ -1,13 +1,14 @@
+export { restart, restartService };
 /**
  * Restart Harper.
  * It will restart all the child threads and the hub and leaf server processes.
  * @param req
  * @returns {Promise<string>}
  */
-export function restart(req: any): Promise<string>;
+declare function restart(req: any): Promise<string>;
 /**
  * Used to restart a particular service, services includes - httpWorkers
  * @param req
  * @returns {Promise<string>}
  */
-export function restartService(req: any): Promise<string>;
+declare function restartService(req: any): Promise<any>;