@humain/terminal 0.0.2 → 0.0.3-beta.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (680) hide show
  1. package/CHANGELOG.md +241 -24
  2. package/README.md +143 -119
  3. package/dist/cli/args.d.ts +4 -2
  4. package/dist/cli/args.d.ts.map +1 -1
  5. package/dist/cli/args.js +37 -39
  6. package/dist/cli/args.js.map +1 -1
  7. package/dist/cli/auth-check.d.ts +19 -0
  8. package/dist/cli/auth-check.d.ts.map +1 -0
  9. package/dist/cli/auth-check.js +50 -0
  10. package/dist/cli/auth-check.js.map +1 -0
  11. package/dist/cli/auth-command.d.ts +24 -0
  12. package/dist/cli/auth-command.d.ts.map +1 -0
  13. package/dist/cli/auth-command.js +103 -0
  14. package/dist/cli/auth-command.js.map +1 -0
  15. package/dist/cli/config-selector.d.ts.map +1 -1
  16. package/dist/cli/config-selector.js +2 -2
  17. package/dist/cli/config-selector.js.map +1 -1
  18. package/dist/cli/credential-print.d.ts +5 -15
  19. package/dist/cli/credential-print.d.ts.map +1 -1
  20. package/dist/cli/credential-print.js +42 -83
  21. package/dist/cli/credential-print.js.map +1 -1
  22. package/dist/cli/experimental/auth.d.ts +16 -0
  23. package/dist/cli/experimental/auth.d.ts.map +1 -0
  24. package/dist/cli/experimental/auth.js +13 -0
  25. package/dist/cli/experimental/auth.js.map +1 -0
  26. package/dist/cli/experimental/cli.d.ts +6 -0
  27. package/dist/cli/experimental/cli.d.ts.map +1 -0
  28. package/dist/cli/experimental/cli.js +5 -0
  29. package/dist/cli/experimental/cli.js.map +1 -0
  30. package/dist/cli/experimental/command-options.d.ts +17 -0
  31. package/dist/cli/experimental/command-options.d.ts.map +1 -0
  32. package/dist/cli/experimental/command-options.js +35 -0
  33. package/dist/cli/experimental/command-options.js.map +1 -0
  34. package/dist/cli/experimental/command.d.ts +63 -0
  35. package/dist/cli/experimental/command.d.ts.map +1 -0
  36. package/dist/cli/experimental/command.js +130 -0
  37. package/dist/cli/experimental/command.js.map +1 -0
  38. package/dist/cli/experimental/commands/client.d.ts +13 -0
  39. package/dist/cli/experimental/commands/client.d.ts.map +1 -0
  40. package/dist/cli/experimental/commands/client.js +25 -0
  41. package/dist/cli/experimental/commands/client.js.map +1 -0
  42. package/dist/cli/experimental/commands/pi.d.ts +15 -0
  43. package/dist/cli/experimental/commands/pi.d.ts.map +1 -0
  44. package/dist/cli/experimental/commands/pi.js +28 -0
  45. package/dist/cli/experimental/commands/pi.js.map +1 -0
  46. package/dist/cli/experimental/commands/server.d.ts +13 -0
  47. package/dist/cli/experimental/commands/server.d.ts.map +1 -0
  48. package/dist/cli/experimental/commands/server.js +25 -0
  49. package/dist/cli/experimental/commands/server.js.map +1 -0
  50. package/dist/cli/experimental/transport-address.d.ts +10 -0
  51. package/dist/cli/experimental/transport-address.d.ts.map +1 -0
  52. package/dist/cli/experimental/transport-address.js +38 -0
  53. package/dist/cli/experimental/transport-address.js.map +1 -0
  54. package/dist/cli/list-models.d.ts +1 -1
  55. package/dist/cli/list-models.d.ts.map +1 -1
  56. package/dist/cli/list-models.js +2 -2
  57. package/dist/cli/list-models.js.map +1 -1
  58. package/dist/cli/startup-ui.d.ts +1 -1
  59. package/dist/cli/startup-ui.d.ts.map +1 -1
  60. package/dist/cli/startup-ui.js +2 -2
  61. package/dist/cli/startup-ui.js.map +1 -1
  62. package/dist/client/index.d.ts +3 -0
  63. package/dist/client/index.d.ts.map +1 -0
  64. package/dist/client/index.js +3 -0
  65. package/dist/client/index.js.map +1 -0
  66. package/dist/client/remote-session.d.ts +53 -0
  67. package/dist/client/remote-session.d.ts.map +1 -0
  68. package/dist/client/remote-session.js +340 -0
  69. package/dist/client/remote-session.js.map +1 -0
  70. package/dist/client/transcript.d.ts +12 -0
  71. package/dist/client/transcript.d.ts.map +1 -0
  72. package/dist/client/transcript.js +98 -0
  73. package/dist/client/transcript.js.map +1 -0
  74. package/dist/core/agent-session-services.d.ts +1 -0
  75. package/dist/core/agent-session-services.d.ts.map +1 -1
  76. package/dist/core/agent-session-services.js +1 -0
  77. package/dist/core/agent-session-services.js.map +1 -1
  78. package/dist/core/agent-session.d.ts +1 -10
  79. package/dist/core/agent-session.d.ts.map +1 -1
  80. package/dist/core/agent-session.js +72 -70
  81. package/dist/core/agent-session.js.map +1 -1
  82. package/dist/core/auth-storage.d.ts +25 -9
  83. package/dist/core/auth-storage.d.ts.map +1 -1
  84. package/dist/core/auth-storage.js +237 -39
  85. package/dist/core/auth-storage.js.map +1 -1
  86. package/dist/core/extensions/index.d.ts +1 -1
  87. package/dist/core/extensions/index.d.ts.map +1 -1
  88. package/dist/core/extensions/index.js.map +1 -1
  89. package/dist/core/extensions/loader.d.ts.map +1 -1
  90. package/dist/core/extensions/loader.js +60 -41
  91. package/dist/core/extensions/loader.js.map +1 -1
  92. package/dist/core/extensions/runner.d.ts +2 -1
  93. package/dist/core/extensions/runner.d.ts.map +1 -1
  94. package/dist/core/extensions/runner.js +3 -0
  95. package/dist/core/extensions/runner.js.map +1 -1
  96. package/dist/core/extensions/types.d.ts +27 -4
  97. package/dist/core/extensions/types.d.ts.map +1 -1
  98. package/dist/core/extensions/types.js.map +1 -1
  99. package/dist/core/http-dispatcher.d.ts.map +1 -1
  100. package/dist/core/http-dispatcher.js +5 -0
  101. package/dist/core/http-dispatcher.js.map +1 -1
  102. package/dist/core/keybindings.d.ts +45 -5
  103. package/dist/core/keybindings.d.ts.map +1 -1
  104. package/dist/core/keybindings.js.map +1 -1
  105. package/dist/core/model-config.d.ts +29 -5
  106. package/dist/core/model-config.d.ts.map +1 -1
  107. package/dist/core/model-config.js +4 -0
  108. package/dist/core/model-config.js.map +1 -1
  109. package/dist/core/model-registry.d.ts +5 -3
  110. package/dist/core/model-registry.d.ts.map +1 -1
  111. package/dist/core/model-registry.js +13 -10
  112. package/dist/core/model-registry.js.map +1 -1
  113. package/dist/core/model-resolver.d.ts +4 -3
  114. package/dist/core/model-resolver.d.ts.map +1 -1
  115. package/dist/core/model-resolver.js +42 -10
  116. package/dist/core/model-resolver.js.map +1 -1
  117. package/dist/core/model-runtime.d.ts +30 -13
  118. package/dist/core/model-runtime.d.ts.map +1 -1
  119. package/dist/core/model-runtime.js +233 -73
  120. package/dist/core/model-runtime.js.map +1 -1
  121. package/dist/core/models-store.d.ts +12 -7
  122. package/dist/core/models-store.d.ts.map +1 -1
  123. package/dist/core/models-store.js +83 -14
  124. package/dist/core/models-store.js.map +1 -1
  125. package/dist/core/package-manager.d.ts +6 -3
  126. package/dist/core/package-manager.d.ts.map +1 -1
  127. package/dist/core/package-manager.js +80 -61
  128. package/dist/core/package-manager.js.map +1 -1
  129. package/dist/core/pi-manifest.d.ts +8 -0
  130. package/dist/core/pi-manifest.d.ts.map +1 -0
  131. package/dist/core/pi-manifest.js +28 -0
  132. package/dist/core/pi-manifest.js.map +1 -0
  133. package/dist/core/provider-composer.d.ts +4 -1
  134. package/dist/core/provider-composer.d.ts.map +1 -1
  135. package/dist/core/provider-composer.js +36 -15
  136. package/dist/core/provider-composer.js.map +1 -1
  137. package/dist/core/remote-catalog-provider.d.ts.map +1 -1
  138. package/dist/core/remote-catalog-provider.js +73 -67
  139. package/dist/core/remote-catalog-provider.js.map +1 -1
  140. package/dist/core/resource-loader.d.ts.map +1 -1
  141. package/dist/core/resource-loader.js +2 -2
  142. package/dist/core/resource-loader.js.map +1 -1
  143. package/dist/core/runtime-credentials.d.ts +5 -5
  144. package/dist/core/runtime-credentials.d.ts.map +1 -1
  145. package/dist/core/runtime-credentials.js +11 -8
  146. package/dist/core/runtime-credentials.js.map +1 -1
  147. package/dist/core/sdk.d.ts +1 -1
  148. package/dist/core/sdk.d.ts.map +1 -1
  149. package/dist/core/sdk.js +2 -2
  150. package/dist/core/sdk.js.map +1 -1
  151. package/dist/core/session-manager.d.ts.map +1 -1
  152. package/dist/core/session-manager.js +3 -1
  153. package/dist/core/session-manager.js.map +1 -1
  154. package/dist/core/settings-manager.d.ts +12 -0
  155. package/dist/core/settings-manager.d.ts.map +1 -1
  156. package/dist/core/settings-manager.js +40 -16
  157. package/dist/core/settings-manager.js.map +1 -1
  158. package/dist/core/system-prompt.d.ts.map +1 -1
  159. package/dist/core/system-prompt.js +8 -0
  160. package/dist/core/system-prompt.js.map +1 -1
  161. package/dist/core/tools/bash.d.ts +5 -1
  162. package/dist/core/tools/bash.d.ts.map +1 -1
  163. package/dist/core/tools/bash.js +16 -15
  164. package/dist/core/tools/bash.js.map +1 -1
  165. package/dist/core/tools/edit.d.ts +4 -0
  166. package/dist/core/tools/edit.d.ts.map +1 -1
  167. package/dist/core/tools/edit.js +11 -7
  168. package/dist/core/tools/edit.js.map +1 -1
  169. package/dist/core/tools/find.d.ts +7 -0
  170. package/dist/core/tools/find.d.ts.map +1 -1
  171. package/dist/core/tools/find.js +16 -19
  172. package/dist/core/tools/find.js.map +1 -1
  173. package/dist/core/tools/grep.d.ts +4 -0
  174. package/dist/core/tools/grep.d.ts.map +1 -1
  175. package/dist/core/tools/grep.js +5 -1
  176. package/dist/core/tools/grep.js.map +1 -1
  177. package/dist/core/tools/ls.d.ts +4 -0
  178. package/dist/core/tools/ls.d.ts.map +1 -1
  179. package/dist/core/tools/ls.js +5 -1
  180. package/dist/core/tools/ls.js.map +1 -1
  181. package/dist/core/tools/read.d.ts +4 -0
  182. package/dist/core/tools/read.d.ts.map +1 -1
  183. package/dist/core/tools/read.js +7 -3
  184. package/dist/core/tools/read.js.map +1 -1
  185. package/dist/core/tools/write.d.ts +4 -0
  186. package/dist/core/tools/write.d.ts.map +1 -1
  187. package/dist/core/tools/write.js +6 -2
  188. package/dist/core/tools/write.js.map +1 -1
  189. package/dist/extensions/llama/index.d.ts.map +1 -1
  190. package/dist/extensions/llama/index.js +11 -2
  191. package/dist/extensions/llama/index.js.map +1 -1
  192. package/dist/extensions/llama/provider.d.ts.map +1 -1
  193. package/dist/extensions/llama/provider.js +21 -7
  194. package/dist/extensions/llama/provider.js.map +1 -1
  195. package/dist/humain/agent-execution-protocol.d.ts +218 -0
  196. package/dist/humain/agent-execution-protocol.d.ts.map +1 -0
  197. package/dist/humain/agent-execution-protocol.js +204 -0
  198. package/dist/humain/agent-execution-protocol.js.map +1 -0
  199. package/dist/humain/agent-execution-runtime.d.ts +35 -0
  200. package/dist/humain/agent-execution-runtime.d.ts.map +1 -0
  201. package/dist/humain/agent-execution-runtime.js +170 -0
  202. package/dist/humain/agent-execution-runtime.js.map +1 -0
  203. package/dist/humain/index.d.ts.map +1 -1
  204. package/dist/humain/index.js +8 -7
  205. package/dist/humain/index.js.map +1 -1
  206. package/dist/humain/mcp-adapter/vendor/CHANGELOG.md +660 -0
  207. package/dist/humain/mcp-adapter/vendor/LICENSE +21 -0
  208. package/dist/humain/mcp-adapter/vendor/README.md +733 -0
  209. package/dist/humain/mcp-adapter/vendor/abort.ts +34 -0
  210. package/dist/humain/mcp-adapter/vendor/agent-dir.ts +60 -0
  211. package/dist/humain/mcp-adapter/vendor/agent-plugin-loader.ts +377 -0
  212. package/dist/humain/mcp-adapter/vendor/app-bridge.bundle.js +67 -0
  213. package/dist/humain/mcp-adapter/vendor/banner.png +0 -0
  214. package/dist/humain/mcp-adapter/vendor/cli.js +209 -0
  215. package/dist/humain/mcp-adapter/vendor/commands.ts +627 -0
  216. package/dist/humain/mcp-adapter/vendor/config.ts +1226 -0
  217. package/dist/humain/mcp-adapter/vendor/consent-manager.ts +64 -0
  218. package/dist/humain/mcp-adapter/vendor/direct-tools.ts +604 -0
  219. package/dist/humain/mcp-adapter/vendor/elicitation-handler.ts +348 -0
  220. package/dist/humain/mcp-adapter/vendor/error-signal.ts +21 -0
  221. package/dist/humain/mcp-adapter/vendor/errors.ts +223 -0
  222. package/dist/humain/mcp-adapter/vendor/glimpse-ui.ts +80 -0
  223. package/dist/humain/mcp-adapter/vendor/host-html-template.ts +461 -0
  224. package/dist/humain/mcp-adapter/vendor/index.bundle.d.mts +4 -0
  225. package/dist/humain/mcp-adapter/vendor/index.bundle.mjs +15923 -0
  226. package/dist/humain/mcp-adapter/vendor/index.ts +898 -0
  227. package/dist/humain/mcp-adapter/vendor/init.ts +649 -0
  228. package/dist/humain/mcp-adapter/vendor/json-schema-validator.ts +69 -0
  229. package/dist/humain/mcp-adapter/vendor/lifecycle.ts +147 -0
  230. package/dist/humain/mcp-adapter/vendor/logger.ts +169 -0
  231. package/dist/humain/mcp-adapter/vendor/mcp-auth-flow.ts +993 -0
  232. package/dist/humain/mcp-adapter/vendor/mcp-auth.ts +1000 -0
  233. package/dist/humain/mcp-adapter/vendor/mcp-callback-server.ts +510 -0
  234. package/dist/humain/mcp-adapter/vendor/mcp-code.ts +354 -0
  235. package/dist/humain/mcp-adapter/vendor/mcp-keyring-helper.cjs +89 -0
  236. package/dist/humain/mcp-adapter/vendor/mcp-oauth-provider.ts +616 -0
  237. package/dist/humain/mcp-adapter/vendor/mcp-output-guard.ts +408 -0
  238. package/dist/humain/mcp-adapter/vendor/mcp-panel.ts +1015 -0
  239. package/dist/humain/mcp-adapter/vendor/mcp-probe.ts +187 -0
  240. package/dist/humain/mcp-adapter/vendor/mcp-script-worker.mjs +130 -0
  241. package/dist/humain/mcp-adapter/vendor/mcp-setup-panel.ts +666 -0
  242. package/dist/humain/mcp-adapter/vendor/mcp-status.ts +109 -0
  243. package/dist/humain/mcp-adapter/vendor/mcp-trace.ts +306 -0
  244. package/dist/humain/mcp-adapter/vendor/metadata-cache.ts +353 -0
  245. package/dist/humain/mcp-adapter/vendor/npx-resolver.ts +543 -0
  246. package/dist/humain/mcp-adapter/vendor/oauth-handler.ts +30 -0
  247. package/dist/humain/mcp-adapter/vendor/oauth.ts +48 -0
  248. package/dist/humain/mcp-adapter/vendor/onboarding-state.ts +76 -0
  249. package/dist/humain/mcp-adapter/vendor/package.json +178 -0
  250. package/dist/humain/mcp-adapter/vendor/panel-keys.ts +53 -0
  251. package/dist/humain/mcp-adapter/vendor/prompts.ts +353 -0
  252. package/dist/humain/mcp-adapter/vendor/proxy-modes.ts +1331 -0
  253. package/dist/humain/mcp-adapter/vendor/resource-tools.ts +17 -0
  254. package/dist/humain/mcp-adapter/vendor/runtime-owner.ts +91 -0
  255. package/dist/humain/mcp-adapter/vendor/sampling-handler.ts +284 -0
  256. package/dist/humain/mcp-adapter/vendor/search-ranking.ts +206 -0
  257. package/dist/humain/mcp-adapter/vendor/server-manager.ts +1124 -0
  258. package/dist/humain/mcp-adapter/vendor/session-recovery.ts +151 -0
  259. package/dist/humain/mcp-adapter/vendor/skills/mcp-scripting/SKILL.md +38 -0
  260. package/dist/humain/mcp-adapter/vendor/state.ts +62 -0
  261. package/dist/humain/mcp-adapter/vendor/tool-approval.ts +182 -0
  262. package/dist/humain/mcp-adapter/vendor/tool-metadata.ts +276 -0
  263. package/dist/humain/mcp-adapter/vendor/tool-registrar.ts +253 -0
  264. package/dist/humain/mcp-adapter/vendor/tool-result-renderer.ts +423 -0
  265. package/dist/humain/mcp-adapter/vendor/ts-shape.ts +149 -0
  266. package/dist/humain/mcp-adapter/vendor/types.ts +859 -0
  267. package/dist/humain/mcp-adapter/vendor/ui-app-bridge-helpers.ts +40 -0
  268. package/dist/humain/mcp-adapter/vendor/ui-resource-handler.ts +250 -0
  269. package/dist/humain/mcp-adapter/vendor/ui-server.ts +866 -0
  270. package/dist/humain/mcp-adapter/vendor/ui-session.ts +570 -0
  271. package/dist/humain/mcp-adapter/vendor/ui-stream-types.ts +89 -0
  272. package/dist/humain/mcp-adapter/vendor/ui-tool-visibility.ts +25 -0
  273. package/dist/humain/mcp-adapter/vendor/unix-socket-transport.ts +85 -0
  274. package/dist/humain/mcp-adapter/vendor/utils.ts +310 -0
  275. package/dist/humain/mcp-adapter.d.ts +3 -0
  276. package/dist/humain/mcp-adapter.d.ts.map +1 -0
  277. package/dist/humain/mcp-adapter.js +5 -0
  278. package/dist/humain/mcp-adapter.js.map +1 -0
  279. package/dist/humain/pi-agent-execution-host.d.ts +34 -0
  280. package/dist/humain/pi-agent-execution-host.d.ts.map +1 -0
  281. package/dist/humain/pi-agent-execution-host.js +77 -0
  282. package/dist/humain/pi-agent-execution-host.js.map +1 -0
  283. package/dist/humain/web-access/host.d.ts +4 -0
  284. package/dist/humain/web-access/host.d.ts.map +1 -0
  285. package/dist/humain/web-access/host.js +3 -0
  286. package/dist/humain/web-access/host.js.map +1 -0
  287. package/dist/humain/web-access/index.d.ts +3 -0
  288. package/dist/humain/web-access/index.d.ts.map +1 -0
  289. package/dist/humain/web-access/index.js +5 -0
  290. package/dist/humain/web-access/index.js.map +1 -0
  291. package/dist/humain/web-access/vendor/activity.d.ts +34 -0
  292. package/dist/humain/web-access/vendor/activity.d.ts.map +1 -0
  293. package/dist/humain/web-access/vendor/activity.js +68 -0
  294. package/dist/humain/web-access/vendor/activity.js.map +1 -0
  295. package/dist/humain/web-access/vendor/anysearch.d.ts +8 -0
  296. package/dist/humain/web-access/vendor/anysearch.d.ts.map +1 -0
  297. package/dist/humain/web-access/vendor/anysearch.js +167 -0
  298. package/dist/humain/web-access/vendor/anysearch.js.map +1 -0
  299. package/dist/humain/web-access/vendor/bocha.d.ts +4 -0
  300. package/dist/humain/web-access/vendor/bocha.d.ts.map +1 -0
  301. package/dist/humain/web-access/vendor/bocha.js +219 -0
  302. package/dist/humain/web-access/vendor/bocha.js.map +1 -0
  303. package/dist/humain/web-access/vendor/brave.d.ts +4 -0
  304. package/dist/humain/web-access/vendor/brave.d.ts.map +1 -0
  305. package/dist/humain/web-access/vendor/brave.js +194 -0
  306. package/dist/humain/web-access/vendor/brave.js.map +1 -0
  307. package/dist/humain/web-access/vendor/brightdata-unlocker.d.ts +12 -0
  308. package/dist/humain/web-access/vendor/brightdata-unlocker.d.ts.map +1 -0
  309. package/dist/humain/web-access/vendor/brightdata-unlocker.js +230 -0
  310. package/dist/humain/web-access/vendor/brightdata-unlocker.js.map +1 -0
  311. package/dist/humain/web-access/vendor/brightdata.d.ts +8 -0
  312. package/dist/humain/web-access/vendor/brightdata.d.ts.map +1 -0
  313. package/dist/humain/web-access/vendor/brightdata.js +519 -0
  314. package/dist/humain/web-access/vendor/brightdata.js.map +1 -0
  315. package/dist/humain/web-access/vendor/chrome-cookies.d.ts +10 -0
  316. package/dist/humain/web-access/vendor/chrome-cookies.d.ts.map +1 -0
  317. package/dist/humain/web-access/vendor/chrome-cookies.js +438 -0
  318. package/dist/humain/web-access/vendor/chrome-cookies.js.map +1 -0
  319. package/dist/humain/web-access/vendor/content-find.d.ts +11 -0
  320. package/dist/humain/web-access/vendor/content-find.d.ts.map +1 -0
  321. package/dist/humain/web-access/vendor/content-find.js +117 -0
  322. package/dist/humain/web-access/vendor/content-find.js.map +1 -0
  323. package/dist/humain/web-access/vendor/credential-source.d.ts +28 -0
  324. package/dist/humain/web-access/vendor/credential-source.d.ts.map +1 -0
  325. package/dist/humain/web-access/vendor/credential-source.js +151 -0
  326. package/dist/humain/web-access/vendor/credential-source.js.map +1 -0
  327. package/dist/humain/web-access/vendor/curator-page.d.ts +29 -0
  328. package/dist/humain/web-access/vendor/curator-page.d.ts.map +1 -0
  329. package/dist/humain/web-access/vendor/curator-page.js +3554 -0
  330. package/dist/humain/web-access/vendor/curator-page.js.map +1 -0
  331. package/dist/humain/web-access/vendor/curator-server.d.ts +93 -0
  332. package/dist/humain/web-access/vendor/curator-server.d.ts.map +1 -0
  333. package/dist/humain/web-access/vendor/curator-server.js +688 -0
  334. package/dist/humain/web-access/vendor/curator-server.js.map +1 -0
  335. package/dist/humain/web-access/vendor/datalab-pdf-extract.d.ts +60 -0
  336. package/dist/humain/web-access/vendor/datalab-pdf-extract.d.ts.map +1 -0
  337. package/dist/humain/web-access/vendor/datalab-pdf-extract.js +416 -0
  338. package/dist/humain/web-access/vendor/datalab-pdf-extract.js.map +1 -0
  339. package/dist/humain/web-access/vendor/declared-web-links.d.ts +16 -0
  340. package/dist/humain/web-access/vendor/declared-web-links.d.ts.map +1 -0
  341. package/dist/humain/web-access/vendor/declared-web-links.js +168 -0
  342. package/dist/humain/web-access/vendor/declared-web-links.js.map +1 -0
  343. package/dist/humain/web-access/vendor/duckduckgo.d.ts +4 -0
  344. package/dist/humain/web-access/vendor/duckduckgo.d.ts.map +1 -0
  345. package/dist/humain/web-access/vendor/duckduckgo.js +123 -0
  346. package/dist/humain/web-access/vendor/duckduckgo.js.map +1 -0
  347. package/dist/humain/web-access/vendor/exa.d.ts +10 -0
  348. package/dist/humain/web-access/vendor/exa.d.ts.map +1 -0
  349. package/dist/humain/web-access/vendor/exa.js +426 -0
  350. package/dist/humain/web-access/vendor/exa.js.map +1 -0
  351. package/dist/humain/web-access/vendor/extract.d.ts +46 -0
  352. package/dist/humain/web-access/vendor/extract.d.ts.map +1 -0
  353. package/dist/humain/web-access/vendor/extract.js +1064 -0
  354. package/dist/humain/web-access/vendor/extract.js.map +1 -0
  355. package/dist/humain/web-access/vendor/feature-config.d.ts +3 -0
  356. package/dist/humain/web-access/vendor/feature-config.d.ts.map +1 -0
  357. package/dist/humain/web-access/vendor/feature-config.js +27 -0
  358. package/dist/humain/web-access/vendor/feature-config.js.map +1 -0
  359. package/dist/humain/web-access/vendor/fetch-params.d.ts +25 -0
  360. package/dist/humain/web-access/vendor/fetch-params.d.ts.map +1 -0
  361. package/dist/humain/web-access/vendor/fetch-params.js +57 -0
  362. package/dist/humain/web-access/vendor/fetch-params.js.map +1 -0
  363. package/dist/humain/web-access/vendor/firecrawl.d.ts +12 -0
  364. package/dist/humain/web-access/vendor/firecrawl.d.ts.map +1 -0
  365. package/dist/humain/web-access/vendor/firecrawl.js +239 -0
  366. package/dist/humain/web-access/vendor/firecrawl.js.map +1 -0
  367. package/dist/humain/web-access/vendor/gemini-api.d.ts +27 -0
  368. package/dist/humain/web-access/vendor/gemini-api.d.ts.map +1 -0
  369. package/dist/humain/web-access/vendor/gemini-api.js +230 -0
  370. package/dist/humain/web-access/vendor/gemini-api.js.map +1 -0
  371. package/dist/humain/web-access/vendor/gemini-pdf-extract.d.ts +9 -0
  372. package/dist/humain/web-access/vendor/gemini-pdf-extract.d.ts.map +1 -0
  373. package/dist/humain/web-access/vendor/gemini-pdf-extract.js +85 -0
  374. package/dist/humain/web-access/vendor/gemini-pdf-extract.js.map +1 -0
  375. package/dist/humain/web-access/vendor/gemini-search.d.ts +40 -0
  376. package/dist/humain/web-access/vendor/gemini-search.d.ts.map +1 -0
  377. package/dist/humain/web-access/vendor/gemini-search.js +814 -0
  378. package/dist/humain/web-access/vendor/gemini-search.js.map +1 -0
  379. package/dist/humain/web-access/vendor/gemini-url-context.d.ts +4 -0
  380. package/dist/humain/web-access/vendor/gemini-url-context.d.ts.map +1 -0
  381. package/dist/humain/web-access/vendor/gemini-url-context.js +101 -0
  382. package/dist/humain/web-access/vendor/gemini-url-context.js.map +1 -0
  383. package/dist/humain/web-access/vendor/gemini-web-config.d.ts +4 -0
  384. package/dist/humain/web-access/vendor/gemini-web-config.d.ts.map +1 -0
  385. package/dist/humain/web-access/vendor/gemini-web-config.js +42 -0
  386. package/dist/humain/web-access/vendor/gemini-web-config.js.map +1 -0
  387. package/dist/humain/web-access/vendor/gemini-web.d.ts +18 -0
  388. package/dist/humain/web-access/vendor/gemini-web.d.ts.map +1 -0
  389. package/dist/humain/web-access/vendor/gemini-web.js +385 -0
  390. package/dist/humain/web-access/vendor/gemini-web.js.map +1 -0
  391. package/dist/humain/web-access/vendor/github-api.d.ts +7 -0
  392. package/dist/humain/web-access/vendor/github-api.d.ts.map +1 -0
  393. package/dist/humain/web-access/vendor/github-api.js +160 -0
  394. package/dist/humain/web-access/vendor/github-api.js.map +1 -0
  395. package/dist/humain/web-access/vendor/github-extract.d.ts +13 -0
  396. package/dist/humain/web-access/vendor/github-extract.d.ts.map +1 -0
  397. package/dist/humain/web-access/vendor/github-extract.js +635 -0
  398. package/dist/humain/web-access/vendor/github-extract.js.map +1 -0
  399. package/dist/humain/web-access/vendor/index.d.ts +4 -0
  400. package/dist/humain/web-access/vendor/index.d.ts.map +1 -0
  401. package/dist/humain/web-access/vendor/index.js +3002 -0
  402. package/dist/humain/web-access/vendor/index.js.map +1 -0
  403. package/dist/humain/web-access/vendor/jina-search.d.ts +8 -0
  404. package/dist/humain/web-access/vendor/jina-search.d.ts.map +1 -0
  405. package/dist/humain/web-access/vendor/jina-search.js +255 -0
  406. package/dist/humain/web-access/vendor/jina-search.js.map +1 -0
  407. package/dist/humain/web-access/vendor/kagi.d.ts +15 -0
  408. package/dist/humain/web-access/vendor/kagi.d.ts.map +1 -0
  409. package/dist/humain/web-access/vendor/kagi.js +262 -0
  410. package/dist/humain/web-access/vendor/kagi.js.map +1 -0
  411. package/dist/humain/web-access/vendor/ollama.d.ts +15 -0
  412. package/dist/humain/web-access/vendor/ollama.d.ts.map +1 -0
  413. package/dist/humain/web-access/vendor/ollama.js +216 -0
  414. package/dist/humain/web-access/vendor/ollama.js.map +1 -0
  415. package/dist/humain/web-access/vendor/openai-search.d.ts +15 -0
  416. package/dist/humain/web-access/vendor/openai-search.d.ts.map +1 -0
  417. package/dist/humain/web-access/vendor/openai-search.js +459 -0
  418. package/dist/humain/web-access/vendor/openai-search.js.map +1 -0
  419. package/dist/humain/web-access/vendor/page-query.d.ts +16 -0
  420. package/dist/humain/web-access/vendor/page-query.d.ts.map +1 -0
  421. package/dist/humain/web-access/vendor/page-query.js +79 -0
  422. package/dist/humain/web-access/vendor/page-query.js.map +1 -0
  423. package/dist/humain/web-access/vendor/parallel.d.ts +12 -0
  424. package/dist/humain/web-access/vendor/parallel.d.ts.map +1 -0
  425. package/dist/humain/web-access/vendor/parallel.js +343 -0
  426. package/dist/humain/web-access/vendor/parallel.js.map +1 -0
  427. package/dist/humain/web-access/vendor/pdf-extract.d.ts +44 -0
  428. package/dist/humain/web-access/vendor/pdf-extract.d.ts.map +1 -0
  429. package/dist/humain/web-access/vendor/pdf-extract.js +298 -0
  430. package/dist/humain/web-access/vendor/pdf-extract.js.map +1 -0
  431. package/dist/humain/web-access/vendor/perplexity.d.ts +20 -0
  432. package/dist/humain/web-access/vendor/perplexity.d.ts.map +1 -0
  433. package/dist/humain/web-access/vendor/perplexity.js +159 -0
  434. package/dist/humain/web-access/vendor/perplexity.js.map +1 -0
  435. package/dist/humain/web-access/vendor/querit.d.ts +10 -0
  436. package/dist/humain/web-access/vendor/querit.d.ts.map +1 -0
  437. package/dist/humain/web-access/vendor/querit.js +335 -0
  438. package/dist/humain/web-access/vendor/querit.js.map +1 -0
  439. package/dist/humain/web-access/vendor/render-search-error.d.ts +57 -0
  440. package/dist/humain/web-access/vendor/render-search-error.d.ts.map +1 -0
  441. package/dist/humain/web-access/vendor/render-search-error.js +130 -0
  442. package/dist/humain/web-access/vendor/render-search-error.js.map +1 -0
  443. package/dist/humain/web-access/vendor/rsc-extract.d.ts +12 -0
  444. package/dist/humain/web-access/vendor/rsc-extract.d.ts.map +1 -0
  445. package/dist/humain/web-access/vendor/rsc-extract.js +329 -0
  446. package/dist/humain/web-access/vendor/rsc-extract.js.map +1 -0
  447. package/dist/humain/web-access/vendor/search1api.d.ts +10 -0
  448. package/dist/humain/web-access/vendor/search1api.d.ts.map +1 -0
  449. package/dist/humain/web-access/vendor/search1api.js +251 -0
  450. package/dist/humain/web-access/vendor/search1api.js.map +1 -0
  451. package/dist/humain/web-access/vendor/searchinfinity.d.ts +8 -0
  452. package/dist/humain/web-access/vendor/searchinfinity.d.ts.map +1 -0
  453. package/dist/humain/web-access/vendor/searchinfinity.js +229 -0
  454. package/dist/humain/web-access/vendor/searchinfinity.js.map +1 -0
  455. package/dist/humain/web-access/vendor/searxng.d.ts +4 -0
  456. package/dist/humain/web-access/vendor/searxng.d.ts.map +1 -0
  457. package/dist/humain/web-access/vendor/searxng.js +238 -0
  458. package/dist/humain/web-access/vendor/searxng.js.map +1 -0
  459. package/dist/humain/web-access/vendor/serpbase.d.ts +4 -0
  460. package/dist/humain/web-access/vendor/serpbase.d.ts.map +1 -0
  461. package/dist/humain/web-access/vendor/serpbase.js +211 -0
  462. package/dist/humain/web-access/vendor/serpbase.js.map +1 -0
  463. package/dist/humain/web-access/vendor/serpdive.d.ts +8 -0
  464. package/dist/humain/web-access/vendor/serpdive.d.ts.map +1 -0
  465. package/dist/humain/web-access/vendor/serpdive.js +267 -0
  466. package/dist/humain/web-access/vendor/serpdive.js.map +1 -0
  467. package/dist/humain/web-access/vendor/source-check.d.ts +99 -0
  468. package/dist/humain/web-access/vendor/source-check.d.ts.map +1 -0
  469. package/dist/humain/web-access/vendor/source-check.js +205 -0
  470. package/dist/humain/web-access/vendor/source-check.js.map +1 -0
  471. package/dist/humain/web-access/vendor/ssrf-protection.d.ts +50 -0
  472. package/dist/humain/web-access/vendor/ssrf-protection.d.ts.map +1 -0
  473. package/dist/humain/web-access/vendor/ssrf-protection.js +466 -0
  474. package/dist/humain/web-access/vendor/ssrf-protection.js.map +1 -0
  475. package/dist/humain/web-access/vendor/storage.d.ts +55 -0
  476. package/dist/humain/web-access/vendor/storage.d.ts.map +1 -0
  477. package/dist/humain/web-access/vendor/storage.js +485 -0
  478. package/dist/humain/web-access/vendor/storage.js.map +1 -0
  479. package/dist/humain/web-access/vendor/summary-model-scope.d.ts +25 -0
  480. package/dist/humain/web-access/vendor/summary-model-scope.d.ts.map +1 -0
  481. package/dist/humain/web-access/vendor/summary-model-scope.js +98 -0
  482. package/dist/humain/web-access/vendor/summary-model-scope.js.map +1 -0
  483. package/dist/humain/web-access/vendor/summary-review.d.ts +24 -0
  484. package/dist/humain/web-access/vendor/summary-review.d.ts.map +1 -0
  485. package/dist/humain/web-access/vendor/summary-review.js +341 -0
  486. package/dist/humain/web-access/vendor/summary-review.js.map +1 -0
  487. package/dist/humain/web-access/vendor/tavily.d.ts +8 -0
  488. package/dist/humain/web-access/vendor/tavily.d.ts.map +1 -0
  489. package/dist/humain/web-access/vendor/tavily.js +194 -0
  490. package/dist/humain/web-access/vendor/tavily.js.map +1 -0
  491. package/dist/humain/web-access/vendor/tinyfish.d.ts +11 -0
  492. package/dist/humain/web-access/vendor/tinyfish.d.ts.map +1 -0
  493. package/dist/humain/web-access/vendor/tinyfish.js +331 -0
  494. package/dist/humain/web-access/vendor/tinyfish.js.map +1 -0
  495. package/dist/humain/web-access/vendor/utils.d.ts +20 -0
  496. package/dist/humain/web-access/vendor/utils.d.ts.map +1 -0
  497. package/dist/humain/web-access/vendor/utils.js +91 -0
  498. package/dist/humain/web-access/vendor/utils.js.map +1 -0
  499. package/dist/humain/web-access/vendor/video-extract.d.ts +16 -0
  500. package/dist/humain/web-access/vendor/video-extract.d.ts.map +1 -0
  501. package/dist/humain/web-access/vendor/video-extract.js +335 -0
  502. package/dist/humain/web-access/vendor/video-extract.js.map +1 -0
  503. package/dist/humain/web-access/vendor/xai-search.d.ts +13 -0
  504. package/dist/humain/web-access/vendor/xai-search.d.ts.map +1 -0
  505. package/dist/humain/web-access/vendor/xai-search.js +331 -0
  506. package/dist/humain/web-access/vendor/xai-search.js.map +1 -0
  507. package/dist/humain/web-access/vendor/youtube-extract.d.ts +27 -0
  508. package/dist/humain/web-access/vendor/youtube-extract.d.ts.map +1 -0
  509. package/dist/humain/web-access/vendor/youtube-extract.js +282 -0
  510. package/dist/humain/web-access/vendor/youtube-extract.js.map +1 -0
  511. package/dist/index.d.ts +7 -4
  512. package/dist/index.d.ts.map +1 -1
  513. package/dist/index.js +5 -2
  514. package/dist/index.js.map +1 -1
  515. package/dist/main.d.ts +2 -2
  516. package/dist/main.d.ts.map +1 -1
  517. package/dist/main.js +169 -102
  518. package/dist/main.js.map +1 -1
  519. package/dist/modes/agent-exec-mode.d.ts +14 -0
  520. package/dist/modes/agent-exec-mode.d.ts.map +1 -0
  521. package/dist/modes/agent-exec-mode.js +92 -0
  522. package/dist/modes/agent-exec-mode.js.map +1 -0
  523. package/dist/modes/index.d.ts +4 -2
  524. package/dist/modes/index.d.ts.map +1 -1
  525. package/dist/modes/index.js +2 -1
  526. package/dist/modes/index.js.map +1 -1
  527. package/dist/modes/interactive/components/assistant-message.d.ts +5 -2
  528. package/dist/modes/interactive/components/assistant-message.d.ts.map +1 -1
  529. package/dist/modes/interactive/components/assistant-message.js +13 -4
  530. package/dist/modes/interactive/components/assistant-message.js.map +1 -1
  531. package/dist/modes/interactive/components/custom-editor.d.ts.map +1 -1
  532. package/dist/modes/interactive/components/custom-editor.js +7 -0
  533. package/dist/modes/interactive/components/custom-editor.js.map +1 -1
  534. package/dist/modes/interactive/components/earendil-announcement.d.ts +5 -0
  535. package/dist/modes/interactive/components/earendil-announcement.d.ts.map +1 -0
  536. package/dist/modes/interactive/components/earendil-announcement.js +40 -0
  537. package/dist/modes/interactive/components/earendil-announcement.js.map +1 -0
  538. package/dist/modes/interactive/components/footer.d.ts.map +1 -1
  539. package/dist/modes/interactive/components/footer.js +1 -1
  540. package/dist/modes/interactive/components/footer.js.map +1 -1
  541. package/dist/modes/interactive/components/markdown-transform.d.ts +3 -0
  542. package/dist/modes/interactive/components/markdown-transform.d.ts.map +1 -0
  543. package/dist/modes/interactive/components/markdown-transform.js +19 -0
  544. package/dist/modes/interactive/components/markdown-transform.js.map +1 -0
  545. package/dist/modes/interactive/components/mermaid.d.ts +11 -0
  546. package/dist/modes/interactive/components/mermaid.d.ts.map +1 -0
  547. package/dist/modes/interactive/components/mermaid.js +75 -0
  548. package/dist/modes/interactive/components/mermaid.js.map +1 -0
  549. package/dist/modes/interactive/components/model-selector.d.ts +1 -1
  550. package/dist/modes/interactive/components/model-selector.d.ts.map +1 -1
  551. package/dist/modes/interactive/components/model-selector.js +16 -4
  552. package/dist/modes/interactive/components/model-selector.js.map +1 -1
  553. package/dist/modes/interactive/components/scoped-models-selector.d.ts +4 -0
  554. package/dist/modes/interactive/components/scoped-models-selector.d.ts.map +1 -1
  555. package/dist/modes/interactive/components/scoped-models-selector.js +26 -0
  556. package/dist/modes/interactive/components/scoped-models-selector.js.map +1 -1
  557. package/dist/modes/interactive/components/settings-selector.d.ts +8 -2
  558. package/dist/modes/interactive/components/settings-selector.d.ts.map +1 -1
  559. package/dist/modes/interactive/components/settings-selector.js +30 -0
  560. package/dist/modes/interactive/components/settings-selector.js.map +1 -1
  561. package/dist/modes/interactive/components/user-message.d.ts +3 -1
  562. package/dist/modes/interactive/components/user-message.d.ts.map +1 -1
  563. package/dist/modes/interactive/components/user-message.js +9 -2
  564. package/dist/modes/interactive/components/user-message.js.map +1 -1
  565. package/dist/modes/interactive/interactive-mode.d.ts +45 -9
  566. package/dist/modes/interactive/interactive-mode.d.ts.map +1 -1
  567. package/dist/modes/interactive/interactive-mode.js +581 -211
  568. package/dist/modes/interactive/interactive-mode.js.map +1 -1
  569. package/dist/modes/interactive/theme/dark.json +1 -0
  570. package/dist/modes/interactive/theme/light.json +1 -0
  571. package/dist/modes/interactive/theme/theme-controller.d.ts +3 -0
  572. package/dist/modes/interactive/theme/theme-controller.d.ts.map +1 -1
  573. package/dist/modes/interactive/theme/theme-controller.js +10 -1
  574. package/dist/modes/interactive/theme/theme-controller.js.map +1 -1
  575. package/dist/modes/interactive/theme/theme-schema.json +5 -1
  576. package/dist/modes/interactive/theme/theme.d.ts +2 -2
  577. package/dist/modes/interactive/theme/theme.d.ts.map +1 -1
  578. package/dist/modes/interactive/theme/theme.js +24 -6
  579. package/dist/modes/interactive/theme/theme.js.map +1 -1
  580. package/dist/modes/json-event.d.ts +28 -0
  581. package/dist/modes/json-event.d.ts.map +1 -0
  582. package/dist/modes/json-event.js +12 -0
  583. package/dist/modes/json-event.js.map +1 -0
  584. package/dist/modes/print-mode.d.ts.map +1 -1
  585. package/dist/modes/print-mode.js +12 -2
  586. package/dist/modes/print-mode.js.map +1 -1
  587. package/dist/modes/rpc/rpc-client.d.ts +12 -5
  588. package/dist/modes/rpc/rpc-client.d.ts.map +1 -1
  589. package/dist/modes/rpc/rpc-client.js +55 -1
  590. package/dist/modes/rpc/rpc-client.js.map +1 -1
  591. package/dist/modes/rpc/rpc-mode.d.ts +1 -1
  592. package/dist/modes/rpc/rpc-mode.d.ts.map +1 -1
  593. package/dist/modes/rpc/rpc-mode.js +13 -3
  594. package/dist/modes/rpc/rpc-mode.js.map +1 -1
  595. package/dist/modes/rpc/rpc-types.d.ts +15 -0
  596. package/dist/modes/rpc/rpc-types.d.ts.map +1 -1
  597. package/dist/modes/rpc/rpc-types.js.map +1 -1
  598. package/dist/package-manager-cli.d.ts.map +1 -1
  599. package/dist/package-manager-cli.js +11 -9
  600. package/dist/package-manager-cli.js.map +1 -1
  601. package/dist/rpc-entry.d.ts.map +1 -1
  602. package/dist/rpc-entry.js +3 -2
  603. package/dist/rpc-entry.js.map +1 -1
  604. package/dist/server/create-harness.d.ts +26 -0
  605. package/dist/server/create-harness.d.ts.map +1 -0
  606. package/dist/server/create-harness.js +104 -0
  607. package/dist/server/create-harness.js.map +1 -0
  608. package/dist/utils/abort.d.ts +5 -0
  609. package/dist/utils/abort.d.ts.map +1 -0
  610. package/dist/utils/abort.js +48 -0
  611. package/dist/utils/abort.js.map +1 -0
  612. package/dist/utils/clipboard.d.ts +1 -1
  613. package/dist/utils/clipboard.d.ts.map +1 -1
  614. package/dist/utils/clipboard.js +22 -2
  615. package/dist/utils/clipboard.js.map +1 -1
  616. package/dist/utils/management-http.d.ts +23 -0
  617. package/dist/utils/management-http.d.ts.map +1 -0
  618. package/dist/utils/management-http.js +50 -0
  619. package/dist/utils/management-http.js.map +1 -0
  620. package/dist/utils/paths.d.ts +3 -0
  621. package/dist/utils/paths.d.ts.map +1 -1
  622. package/dist/utils/paths.js +23 -1
  623. package/dist/utils/paths.js.map +1 -1
  624. package/dist/utils/tool-result-images.d.ts +19 -0
  625. package/dist/utils/tool-result-images.d.ts.map +1 -0
  626. package/dist/utils/tool-result-images.js +45 -0
  627. package/dist/utils/tool-result-images.js.map +1 -0
  628. package/dist/utils/tools-manager.d.ts.map +1 -1
  629. package/dist/utils/tools-manager.js +13 -25
  630. package/dist/utils/tools-manager.js.map +1 -1
  631. package/dist/utils/version-check.d.ts +4 -0
  632. package/dist/utils/version-check.d.ts.map +1 -1
  633. package/dist/utils/version-check.js +23 -5
  634. package/dist/utils/version-check.js.map +1 -1
  635. package/docs/compaction.md +2 -2
  636. package/docs/custom-provider.md +7 -5
  637. package/docs/extensions.md +30 -5
  638. package/docs/humain-terminal.md +21 -1
  639. package/docs/json.md +24 -19
  640. package/docs/keybindings.md +46 -14
  641. package/docs/models.md +32 -11
  642. package/docs/providers.md +9 -1
  643. package/docs/quickstart.md +39 -37
  644. package/docs/rpc.md +31 -11
  645. package/docs/sdk.md +21 -2
  646. package/docs/security.md +21 -21
  647. package/docs/session-format.md +14 -14
  648. package/docs/settings.md +4 -1
  649. package/docs/themes.md +5 -3
  650. package/docs/usage.md +7 -0
  651. package/examples/extensions/custom-compaction.ts +3 -18
  652. package/examples/extensions/custom-provider-anthropic/index.ts +5 -1
  653. package/examples/extensions/custom-provider-anthropic/package-lock.json +2 -2
  654. package/examples/extensions/custom-provider-anthropic/package.json +1 -1
  655. package/examples/extensions/custom-provider-gitlab-duo/index.ts +5 -1
  656. package/examples/extensions/custom-provider-gitlab-duo/package.json +1 -1
  657. package/examples/extensions/doom-overlay/wad-finder.ts +7 -3
  658. package/examples/extensions/gondolin/package-lock.json +2 -2
  659. package/examples/extensions/gondolin/package.json +1 -1
  660. package/examples/extensions/handoff.ts +4 -13
  661. package/examples/extensions/qna.ts +5 -9
  662. package/examples/extensions/sandbox/package-lock.json +2 -2
  663. package/examples/extensions/sandbox/package.json +1 -1
  664. package/examples/extensions/summarize.ts +9 -20
  665. package/examples/extensions/with-deps/package-lock.json +2 -2
  666. package/examples/extensions/with-deps/package.json +1 -1
  667. package/examples/rpc-extension-ui.ts +11 -2
  668. package/examples/sdk/02-custom-model.ts +2 -3
  669. package/examples/sdk/09-api-keys-and-oauth.ts +1 -1
  670. package/examples/sdk/12-full-control.ts +1 -1
  671. package/examples/sdk/README.md +1 -1
  672. package/npm-shrinkwrap.json +2771 -535
  673. package/package.json +40 -11
  674. package/src/humain/mcp-adapter/UPSTREAM.md +15 -0
  675. package/src/humain/mcp-adapter/upstream.json +7 -0
  676. package/src/humain/mcp-adapter/vendor/CHANGELOG.md +660 -0
  677. package/src/humain/mcp-adapter/vendor/LICENSE +21 -0
  678. package/src/humain/web-access/UPSTREAM.md +17 -0
  679. package/src/humain/web-access/upstream.json +23 -0
  680. package/src/humain/web-access/vendor/LICENSE +21 -0
@@ -0,0 +1,543 @@
1
+ // npx-resolver.ts - Resolve npx/npm exec binaries to avoid npm parent processes
2
+ import { existsSync, readFileSync, realpathSync, readdirSync, statSync, writeFileSync, renameSync, mkdirSync, openSync, readSync, closeSync, unlinkSync } from "node:fs";
3
+ import { join, dirname, extname, resolve, sep } from "node:path";
4
+ import { getAgentPath } from "./agent-dir.ts";
5
+ import { throwIfAborted } from "./abort.ts";
6
+ import crossSpawn from "cross-spawn";
7
+
8
+ const CACHE_VERSION = 2;
9
+ const CACHE_TTL_MS = 24 * 60 * 60 * 1000;
10
+ const EXACT_PACKAGE_VERSION_RE = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z][0-9A-Za-z.-]*)?(?:\+[0-9A-Za-z][0-9A-Za-z.-]*)?$/;
11
+
12
+ interface NpxCacheEntry {
13
+ resolvedBin: string;
14
+ resolvedAt: number;
15
+ packageVersion?: string;
16
+ isJs: boolean;
17
+ }
18
+
19
+ interface NpxCache {
20
+ version: number;
21
+ entries: Record<string, NpxCacheEntry>;
22
+ }
23
+
24
+ export interface NpxResolution {
25
+ binPath: string;
26
+ extraArgs: string[];
27
+ isJs: boolean;
28
+ }
29
+
30
+ interface ParsedInvocation {
31
+ packageSpec: string;
32
+ binName?: string;
33
+ extraArgs: string[];
34
+ }
35
+
36
+ interface ParsedPackageSpec {
37
+ packageName: string;
38
+ exactVersion?: string;
39
+ }
40
+
41
+ export async function resolveNpxBinary(
42
+ command: string,
43
+ args: string[],
44
+ signal?: AbortSignal,
45
+ ): Promise<NpxResolution | null> {
46
+ throwIfAborted(signal);
47
+ const parsed = command === "npx"
48
+ ? parseNpxArgs(args)
49
+ : command === "npm"
50
+ ? parseNpmExecArgs(args)
51
+ : null;
52
+
53
+ if (!parsed) return null;
54
+
55
+ const packageSpec = parsePackageSpec(parsed.packageSpec);
56
+ const cacheKey = JSON.stringify([command, parsed.packageSpec, parsed.binName ?? ""]);
57
+ const cache = loadCache();
58
+ const cached = cache?.entries?.[cacheKey];
59
+
60
+ if (
61
+ cached
62
+ && Date.now() - cached.resolvedAt < CACHE_TTL_MS
63
+ && existsSync(cached.resolvedBin)
64
+ && (!packageSpec?.exactVersion || cached.packageVersion === packageSpec.exactVersion)
65
+ ) {
66
+ return { binPath: cached.resolvedBin, extraArgs: parsed.extraArgs, isJs: cached.isJs };
67
+ }
68
+
69
+ const resolved = resolveFromNpmCache(parsed.packageSpec, parsed.binName);
70
+ if (resolved) {
71
+ saveCacheEntry(cacheKey, resolved);
72
+ return { binPath: resolved.resolvedBin, extraArgs: parsed.extraArgs, isJs: resolved.isJs };
73
+ }
74
+
75
+ // Slow path: force npx cache population
76
+ await forceNpxCache(parsed.packageSpec, signal);
77
+ const resolvedAfterInstall = resolveFromNpmCache(parsed.packageSpec, parsed.binName);
78
+ if (resolvedAfterInstall) {
79
+ saveCacheEntry(cacheKey, resolvedAfterInstall);
80
+ return { binPath: resolvedAfterInstall.resolvedBin, extraArgs: parsed.extraArgs, isJs: resolvedAfterInstall.isJs };
81
+ }
82
+
83
+ return null;
84
+ }
85
+
86
+ function parseNpxArgs(args: string[]): ParsedInvocation | null {
87
+ const separatorIndex = args.indexOf("--");
88
+ const before = separatorIndex >= 0 ? args.slice(0, separatorIndex) : args;
89
+ const after = separatorIndex >= 0 ? args.slice(separatorIndex + 1) : [];
90
+
91
+ const positionals: string[] = [];
92
+ let packageSpec: string | undefined;
93
+ let sawPackageFlag = false;
94
+ let foundFirstPositional = false;
95
+
96
+ for (let i = 0; i < before.length; i++) {
97
+ const arg = before[i];
98
+ if (arg === undefined) return null;
99
+ if (foundFirstPositional) {
100
+ positionals.push(arg);
101
+ continue;
102
+ }
103
+ if (arg === "-y" || arg === "--yes") continue;
104
+ if (arg === "-p" || arg === "--package") {
105
+ const value = before[i + 1];
106
+ if (!value || value.startsWith("-")) return null;
107
+ if (!packageSpec) packageSpec = value;
108
+ sawPackageFlag = true;
109
+ i++;
110
+ continue;
111
+ }
112
+ if (arg.startsWith("--package=")) {
113
+ const value = arg.slice("--package=".length);
114
+ if (!value) return null;
115
+ if (!packageSpec) packageSpec = value;
116
+ sawPackageFlag = true;
117
+ continue;
118
+ }
119
+ if (arg.startsWith("-")) {
120
+ return null;
121
+ }
122
+ positionals.push(arg);
123
+ foundFirstPositional = true;
124
+ }
125
+
126
+ const separatedAfter = separatorIndex >= 0 && after.length > 0 ? ["--", ...after] : after;
127
+
128
+ if (sawPackageFlag) {
129
+ const binName = positionals[0];
130
+ if (!packageSpec || !binName) return null;
131
+ const extraArgs = positionals.slice(1).concat(separatedAfter);
132
+ return { packageSpec, binName, extraArgs };
133
+ }
134
+
135
+ const packagePositional = positionals[0];
136
+ if (!packagePositional) return null;
137
+ const extraArgs = positionals.slice(1).concat(separatedAfter);
138
+ return { packageSpec: packagePositional, extraArgs };
139
+ }
140
+
141
+ function parseNpmExecArgs(args: string[]): ParsedInvocation | null {
142
+ if (args[0] !== "exec") return null;
143
+ const execArgs = args.slice(1);
144
+ const separatorIndex = execArgs.indexOf("--");
145
+ if (separatorIndex < 0) return null;
146
+
147
+ const before = execArgs.slice(0, separatorIndex);
148
+ const after = execArgs.slice(separatorIndex + 1);
149
+
150
+ let packageSpec: string | undefined;
151
+ for (let i = 0; i < before.length; i++) {
152
+ const arg = before[i];
153
+ if (arg === undefined) return null;
154
+ if (arg === "-y" || arg === "--yes") continue;
155
+ if (arg === "--package") {
156
+ const value = before[i + 1];
157
+ if (!value || value.startsWith("-")) return null;
158
+ if (!packageSpec) packageSpec = value;
159
+ i++;
160
+ continue;
161
+ }
162
+ if (arg.startsWith("--package=")) {
163
+ const value = arg.slice("--package=".length);
164
+ if (!value) return null;
165
+ if (!packageSpec) packageSpec = value;
166
+ continue;
167
+ }
168
+ if (arg.startsWith("-")) {
169
+ return null;
170
+ }
171
+ }
172
+
173
+ const binName = after[0];
174
+ if (!packageSpec || !binName) return null;
175
+ const extraArgs = after.slice(1);
176
+ return { packageSpec, binName, extraArgs };
177
+ }
178
+
179
+ function resolveFromNpmCache(packageSpec: string, binName?: string): NpxCacheEntry | null {
180
+ const cacheDir = getNpmCacheDir();
181
+ if (!cacheDir) return null;
182
+
183
+ const parsedSpec = parsePackageSpec(packageSpec);
184
+ if (!parsedSpec) return null;
185
+
186
+ const { packageName, exactVersion } = parsedSpec;
187
+ const packageDir = findCachedPackageDir(cacheDir, packageName, exactVersion);
188
+ if (!packageDir) return null;
189
+
190
+ const packageJsonPath = join(packageDir, "package.json");
191
+ if (!existsSync(packageJsonPath)) return null;
192
+
193
+ let pkg: { bin?: string | Record<string, string>; version?: string } | null = null;
194
+ try {
195
+ pkg = JSON.parse(readFileSync(packageJsonPath, "utf-8")) as {
196
+ bin?: string | Record<string, string>;
197
+ version?: string;
198
+ };
199
+ } catch {
200
+ return null;
201
+ }
202
+
203
+ const binField = pkg?.bin;
204
+ if (!binField) return null;
205
+
206
+ const candidates = buildBinCandidates(packageName, binName);
207
+ let chosenBinName: string | undefined;
208
+ let binRel: string | undefined;
209
+
210
+ if (typeof binField === "string") {
211
+ chosenBinName = defaultBinName(packageName);
212
+ binRel = binField;
213
+ } else {
214
+ for (const candidate of candidates) {
215
+ if (binField[candidate]) {
216
+ chosenBinName = candidate;
217
+ binRel = binField[candidate];
218
+ break;
219
+ }
220
+ }
221
+ if (!binRel) {
222
+ const firstEntry = Object.entries(binField)[0];
223
+ if (firstEntry) {
224
+ chosenBinName = firstEntry[0];
225
+ binRel = firstEntry[1];
226
+ }
227
+ }
228
+ }
229
+
230
+ if (!binRel) return null;
231
+
232
+ const nodeModulesDir = findNodeModulesDir(packageDir);
233
+ const binLink = chosenBinName ? join(nodeModulesDir, ".bin", chosenBinName) : null;
234
+ let resolvedBin = binLink && existsSync(binLink) ? safeRealpath(binLink) : "";
235
+ if (!resolvedBin) {
236
+ resolvedBin = resolve(packageDir, binRel);
237
+ if (!existsSync(resolvedBin)) return null;
238
+ }
239
+
240
+ const isJs = detectJsBinary(resolvedBin);
241
+ return {
242
+ resolvedBin,
243
+ resolvedAt: Date.now(),
244
+ ...(pkg?.version !== undefined ? { packageVersion: pkg.version } : {}),
245
+ isJs,
246
+ };
247
+ }
248
+
249
+ const FORCE_CACHE_TIMEOUT_MS = 30_000;
250
+
251
+ async function forceNpxCache(packageSpec: string, signal?: AbortSignal): Promise<void> {
252
+ throwIfAborted(signal);
253
+ try {
254
+ await new Promise<void>((resolve, reject) => {
255
+ const proc = crossSpawn(
256
+ "npm",
257
+ ["exec", "--yes", "--package", packageSpec, "--", "node", "-e", "1"],
258
+ { stdio: "ignore" }
259
+ );
260
+ const timer = setTimeout(() => {
261
+ proc.kill();
262
+ reject(new Error("timeout"));
263
+ }, FORCE_CACHE_TIMEOUT_MS);
264
+ const abort = () => {
265
+ proc.kill();
266
+ reject(signal?.reason instanceof Error ? signal.reason : new Error("MCP request aborted"));
267
+ };
268
+ signal?.addEventListener("abort", abort, { once: true });
269
+ timer.unref();
270
+ proc.on("close", () => {
271
+ clearTimeout(timer);
272
+ signal?.removeEventListener("abort", abort);
273
+ resolve();
274
+ });
275
+ proc.on("error", (err) => {
276
+ clearTimeout(timer);
277
+ signal?.removeEventListener("abort", abort);
278
+ reject(err);
279
+ });
280
+ });
281
+ } catch (error) {
282
+ if (signal?.aborted) throwIfAborted(signal);
283
+ // Ignore failures, resolution will fall back to original command
284
+ }
285
+ throwIfAborted(signal);
286
+ }
287
+
288
+ function buildBinCandidates(packageName: string, explicitBin?: string): string[] {
289
+ const candidates: string[] = [];
290
+ if (explicitBin) candidates.push(explicitBin);
291
+
292
+ if (packageName.startsWith("@")) {
293
+ const namePart = packageName.split("/")[1] ?? "";
294
+ const scopePart = packageName.split("/")[0]?.replace("@", "") ?? "";
295
+ if (namePart) candidates.push(namePart);
296
+ if (scopePart && namePart) candidates.push(`${scopePart}-${namePart}`);
297
+ } else {
298
+ candidates.push(packageName);
299
+ }
300
+
301
+ return [...new Set(candidates.filter(Boolean))];
302
+ }
303
+
304
+ function parsePackageSpec(spec: string): ParsedPackageSpec | null {
305
+ const trimmed = spec.trim();
306
+ if (!trimmed) return null;
307
+
308
+ let packageName: string;
309
+ let requestedVersion: string | undefined;
310
+ if (trimmed.startsWith("@")) {
311
+ const slashIndex = trimmed.indexOf("/");
312
+ if (slashIndex < 0) return null;
313
+ const atIndex = trimmed.lastIndexOf("@");
314
+ if (atIndex > slashIndex) {
315
+ packageName = trimmed.slice(0, atIndex);
316
+ requestedVersion = trimmed.slice(atIndex + 1);
317
+ } else {
318
+ packageName = trimmed;
319
+ }
320
+ } else {
321
+ const atIndex = trimmed.indexOf("@");
322
+ if (atIndex >= 0) {
323
+ packageName = trimmed.slice(0, atIndex);
324
+ requestedVersion = trimmed.slice(atIndex + 1);
325
+ } else {
326
+ packageName = trimmed;
327
+ }
328
+ }
329
+
330
+ if (!packageName) return null;
331
+ const normalizedVersion = requestedVersion?.replace(/^=/, "").replace(/^v/i, "");
332
+ return {
333
+ packageName,
334
+ ...(normalizedVersion && EXACT_PACKAGE_VERSION_RE.test(normalizedVersion)
335
+ ? { exactVersion: normalizedVersion }
336
+ : {}),
337
+ };
338
+ }
339
+
340
+ function defaultBinName(packageName: string): string {
341
+ if (packageName.startsWith("@")) {
342
+ const parts = packageName.split("/");
343
+ return parts[1] ?? packageName.replace("@", "").replace("/", "-");
344
+ }
345
+ return packageName;
346
+ }
347
+
348
+ function findCachedPackageDir(cacheDir: string, packageName: string, exactVersion?: string): string | null {
349
+ const npxDir = join(cacheDir, "_npx");
350
+ if (!existsSync(npxDir)) return null;
351
+
352
+ const packagePathParts = packageName.startsWith("@")
353
+ ? packageName.split("/")
354
+ : [packageName];
355
+
356
+ const candidates = readdirSync(npxDir, { withFileTypes: true })
357
+ .filter(entry => entry.isDirectory())
358
+ .map(entry => {
359
+ const full = join(npxDir, entry.name);
360
+ const mtime = safeStatMtime(full);
361
+ return { name: entry.name, mtime };
362
+ })
363
+ .sort((a, b) => b.mtime - a.mtime);
364
+
365
+ for (const entry of candidates) {
366
+ const pkgDir = join(npxDir, entry.name, "node_modules", ...packagePathParts);
367
+ const packageJsonPath = join(pkgDir, "package.json");
368
+ if (!existsSync(packageJsonPath)) continue;
369
+ if (exactVersion) {
370
+ try {
371
+ const pkg = JSON.parse(readFileSync(packageJsonPath, "utf-8")) as { version?: unknown };
372
+ if (pkg.version !== exactVersion) continue;
373
+ } catch {
374
+ continue;
375
+ }
376
+ }
377
+ return pkgDir;
378
+ }
379
+
380
+ return null;
381
+ }
382
+
383
+ function findNodeModulesDir(packageDir: string): string {
384
+ const parts = packageDir.split(sep);
385
+ const idx = parts.lastIndexOf("node_modules");
386
+ if (idx >= 0) {
387
+ return parts.slice(0, idx + 1).join(sep);
388
+ }
389
+ return join(packageDir, "..");
390
+ }
391
+
392
+ function detectJsBinary(binPath: string): boolean {
393
+ const ext = extname(binPath).toLowerCase();
394
+ if (ext === ".js" || ext === ".mjs" || ext === ".cjs") return true;
395
+ try {
396
+ const fd = openSync(binPath, "r");
397
+ try {
398
+ const buf = Buffer.alloc(256);
399
+ readSync(fd, buf, 0, 256, 0);
400
+ const firstLine = buf.toString("utf-8").split("\n")[0] ?? "";
401
+ return firstLine.startsWith("#!") && firstLine.includes("node");
402
+ } finally {
403
+ closeSync(fd);
404
+ }
405
+ } catch {
406
+ return false;
407
+ }
408
+ }
409
+
410
+ let npmCacheDirCached: string | null | undefined;
411
+
412
+ function getNpmCacheDir(): string | null {
413
+ if (npmCacheDirCached !== undefined) return npmCacheDirCached;
414
+ if (process.env.NPM_CONFIG_CACHE) {
415
+ npmCacheDirCached = process.env.NPM_CONFIG_CACHE;
416
+ return npmCacheDirCached;
417
+ }
418
+ try {
419
+ const result = crossSpawn.sync("npm", ["config", "get", "cache"], { encoding: "utf-8" });
420
+ if (result.status === 0) {
421
+ const path = String(result.stdout).trim();
422
+ npmCacheDirCached = path || null;
423
+ return npmCacheDirCached;
424
+ }
425
+ } catch {
426
+ npmCacheDirCached = null;
427
+ return null;
428
+ }
429
+ npmCacheDirCached = null;
430
+ return null;
431
+ }
432
+
433
+ function getNpxCachePath(): string {
434
+ return getAgentPath("mcp-npx-cache.json");
435
+ }
436
+
437
+ function readNpxCachePayload(cachePath: string): unknown | null {
438
+ if (!existsSync(cachePath)) return null;
439
+ try {
440
+ return JSON.parse(readFileSync(cachePath, "utf-8")) as unknown;
441
+ } catch {
442
+ return null;
443
+ }
444
+ }
445
+
446
+ function asRecord(value: unknown): Record<string, unknown> | null {
447
+ return typeof value === "object" && value !== null && !Array.isArray(value)
448
+ ? value as Record<string, unknown>
449
+ : null;
450
+ }
451
+
452
+ function createCacheEntries(): Record<string, NpxCacheEntry> {
453
+ return Object.create(null) as Record<string, NpxCacheEntry>;
454
+ }
455
+
456
+ function toNpxCacheEntry(value: unknown): NpxCacheEntry | null {
457
+ const raw = asRecord(value);
458
+ if (!raw) return null;
459
+ if (typeof raw.resolvedBin !== "string") return null;
460
+ if (typeof raw.resolvedAt !== "number" || !Number.isFinite(raw.resolvedAt)) return null;
461
+ if (typeof raw.isJs !== "boolean") return null;
462
+ if (raw.packageVersion !== undefined && typeof raw.packageVersion !== "string") return null;
463
+ return {
464
+ resolvedBin: raw.resolvedBin,
465
+ resolvedAt: raw.resolvedAt,
466
+ ...(raw.packageVersion !== undefined ? { packageVersion: raw.packageVersion } : {}),
467
+ isJs: raw.isJs,
468
+ };
469
+ }
470
+
471
+ function toNpxCache(value: unknown): NpxCache | null {
472
+ const raw = asRecord(value);
473
+ if (!raw || raw.version !== CACHE_VERSION) return null;
474
+ const rawEntries = asRecord(raw.entries);
475
+ if (!rawEntries) return null;
476
+
477
+ const entries = createCacheEntries();
478
+ for (const [key, rawEntry] of Object.entries(rawEntries)) {
479
+ const entry = toNpxCacheEntry(rawEntry);
480
+ if (entry) entries[key] = entry;
481
+ }
482
+ return { version: CACHE_VERSION, entries };
483
+ }
484
+
485
+ function clearLegacyCache(): boolean {
486
+ const cachePath = getNpxCachePath();
487
+ const raw = asRecord(readNpxCachePayload(cachePath));
488
+ if (raw?.version !== 1) return false;
489
+ try {
490
+ unlinkSync(cachePath);
491
+ } catch {
492
+ try {
493
+ writeFileSync(cachePath, "", "utf-8");
494
+ } catch {
495
+ // Cache cleanup is best effort; resolution must still proceed.
496
+ }
497
+ }
498
+ return true;
499
+ }
500
+
501
+ clearLegacyCache();
502
+
503
+ function loadCache(): NpxCache | null {
504
+ if (clearLegacyCache()) return null;
505
+
506
+ return toNpxCache(readNpxCachePayload(getNpxCachePath()));
507
+ }
508
+
509
+ function saveCacheEntry(key: string, entry: NpxCacheEntry): void {
510
+ try {
511
+ const cachePath = getNpxCachePath();
512
+ const dir = dirname(cachePath);
513
+ mkdirSync(dir, { recursive: true });
514
+
515
+ const existing = toNpxCache(readNpxCachePayload(cachePath));
516
+ const entries = createCacheEntries();
517
+ if (existing) Object.assign(entries, existing.entries);
518
+ const merged: NpxCache = { version: CACHE_VERSION, entries };
519
+
520
+ merged.entries[key] = entry;
521
+ const tmpPath = `${cachePath}.${process.pid}.tmp`;
522
+ writeFileSync(tmpPath, JSON.stringify(merged, null, 2), "utf-8");
523
+ renameSync(tmpPath, cachePath);
524
+ } catch {
525
+ // Cache writes are best effort; resolution must still proceed.
526
+ }
527
+ }
528
+
529
+ function safeRealpath(path: string): string {
530
+ try {
531
+ return realpathSync(path);
532
+ } catch {
533
+ return "";
534
+ }
535
+ }
536
+
537
+ function safeStatMtime(path: string): number {
538
+ try {
539
+ return statSync(path).mtimeMs;
540
+ } catch {
541
+ return 0;
542
+ }
543
+ }
@@ -0,0 +1,30 @@
1
+ // oauth-handler.ts - OAuth token compatibility helpers for MCP servers
2
+ import type { OAuthTokens } from "@modelcontextprotocol/client";
3
+ import { getAuthEntry } from "./mcp-auth.ts";
4
+
5
+ /**
6
+ * Get stored OAuth tokens for a server (if any).
7
+ * Returns undefined if no tokens exist or tokens are expired.
8
+ *
9
+ * Persistent credentials are read from the OS secure credential store. Legacy
10
+ * plaintext entries are imported through mcp-auth.ts before this returns.
11
+ */
12
+ export function getStoredTokens(serverName: string): OAuthTokens | undefined {
13
+ const tokens = getAuthEntry(serverName)?.tokens;
14
+ if (!tokens) return undefined;
15
+
16
+ if (tokens.expiresAt !== undefined && tokens.expiresAt < Date.now() / 1000) {
17
+ return undefined;
18
+ }
19
+
20
+ return {
21
+ access_token: tokens.accessToken,
22
+ token_type: "Bearer",
23
+ refresh_token: tokens.refreshToken,
24
+ expires_in: tokens.expiresAt !== undefined
25
+ ? Math.max(0, Math.floor(tokens.expiresAt - Date.now() / 1000))
26
+ : undefined,
27
+ scope: tokens.scope,
28
+ ...(tokens.issuer !== undefined ? { issuer: tokens.issuer } : {}),
29
+ };
30
+ }
@@ -0,0 +1,48 @@
1
+ import { getValidToken } from "./mcp-auth-flow.ts";
2
+ import {
3
+ inspectAuthForUrl,
4
+ updateTokens,
5
+ type AuthStorageOptions,
6
+ type StoredTokens,
7
+ } from "./mcp-auth.ts";
8
+
9
+ export type McpOAuthTokens = StoredTokens;
10
+ export type McpOAuthStorageOptions = AuthStorageOptions;
11
+ export interface McpOAuthTokenOptions {
12
+ authStorageOptions?: McpOAuthStorageOptions;
13
+ signal?: AbortSignal;
14
+ skipIssuerMetadataValidation?: boolean;
15
+ }
16
+ export type McpOAuthTokenStatus =
17
+ | { status: "present"; tokens: McpOAuthTokens }
18
+ | { status: "absent" }
19
+ | { status: "unavailable"; message: string };
20
+
21
+ export async function getMcpOAuthTokensForUrl(
22
+ serverName: string,
23
+ serverUrl: string,
24
+ options: McpOAuthTokenOptions = {},
25
+ ): Promise<McpOAuthTokens | undefined> {
26
+ return (await getValidToken(serverName, serverUrl, options)) ?? undefined;
27
+ }
28
+
29
+ export function inspectMcpOAuthTokensForUrl(
30
+ serverName: string,
31
+ serverUrl: string,
32
+ options?: McpOAuthStorageOptions,
33
+ ): McpOAuthTokenStatus {
34
+ const status = inspectAuthForUrl(serverName, serverUrl, options);
35
+ if (status.status !== "present") return status;
36
+ return status.entry.tokens
37
+ ? { status: "present", tokens: status.entry.tokens }
38
+ : { status: "absent" };
39
+ }
40
+
41
+ export function updateMcpOAuthTokensForUrl(
42
+ serverName: string,
43
+ serverUrl: string,
44
+ tokens: McpOAuthTokens,
45
+ options?: McpOAuthStorageOptions,
46
+ ): void {
47
+ updateTokens(serverName, tokens, serverUrl, options);
48
+ }
@@ -0,0 +1,76 @@
1
+ import { existsSync, mkdirSync, readFileSync, writeFileSync, renameSync } from "node:fs";
2
+ import { dirname } from "node:path";
3
+ import { getAgentPath } from "./agent-dir.ts";
4
+
5
+ export interface McpOnboardingState {
6
+ version: 1;
7
+ sharedConfigHintShown: boolean;
8
+ setupCompleted: boolean;
9
+ lastDiscoveryFingerprint?: string;
10
+ }
11
+
12
+ const DEFAULT_STATE: McpOnboardingState = {
13
+ version: 1,
14
+ sharedConfigHintShown: false,
15
+ setupCompleted: false,
16
+ };
17
+
18
+ export function getOnboardingStatePath(): string {
19
+ return getAgentPath("mcp-onboarding.json");
20
+ }
21
+
22
+ export function loadOnboardingState(): McpOnboardingState {
23
+ const path = getOnboardingStatePath();
24
+ if (!existsSync(path)) return { ...DEFAULT_STATE };
25
+
26
+ try {
27
+ const raw = JSON.parse(readFileSync(path, "utf-8")) as Partial<McpOnboardingState>;
28
+ if (!raw || typeof raw !== "object") return { ...DEFAULT_STATE };
29
+ return {
30
+ version: 1,
31
+ sharedConfigHintShown: raw.sharedConfigHintShown === true,
32
+ setupCompleted: raw.setupCompleted === true,
33
+ ...(typeof raw.lastDiscoveryFingerprint === "string"
34
+ ? { lastDiscoveryFingerprint: raw.lastDiscoveryFingerprint }
35
+ : {}),
36
+ };
37
+ } catch {
38
+ return { ...DEFAULT_STATE };
39
+ }
40
+ }
41
+
42
+ export function saveOnboardingState(state: McpOnboardingState): void {
43
+ const path = getOnboardingStatePath();
44
+ mkdirSync(dirname(path), { recursive: true });
45
+ const tmpPath = `${path}.${process.pid}.tmp`;
46
+ writeFileSync(tmpPath, `${JSON.stringify(state, null, 2)}\n`, "utf-8");
47
+ renameSync(tmpPath, path);
48
+ }
49
+
50
+ export function updateOnboardingState(updater: (state: McpOnboardingState) => McpOnboardingState): McpOnboardingState {
51
+ const next = updater(loadOnboardingState());
52
+ saveOnboardingState(next);
53
+ return next;
54
+ }
55
+
56
+ export function markSharedConfigHintShown(fingerprint?: string): McpOnboardingState {
57
+ return updateOnboardingState((state) => {
58
+ const lastDiscoveryFingerprint = fingerprint ?? state.lastDiscoveryFingerprint;
59
+ return {
60
+ ...state,
61
+ sharedConfigHintShown: true,
62
+ ...(lastDiscoveryFingerprint !== undefined ? { lastDiscoveryFingerprint } : {}),
63
+ };
64
+ });
65
+ }
66
+
67
+ export function markSetupCompleted(fingerprint?: string): McpOnboardingState {
68
+ return updateOnboardingState((state) => {
69
+ const lastDiscoveryFingerprint = fingerprint ?? state.lastDiscoveryFingerprint;
70
+ return {
71
+ ...state,
72
+ setupCompleted: true,
73
+ ...(lastDiscoveryFingerprint !== undefined ? { lastDiscoveryFingerprint } : {}),
74
+ };
75
+ });
76
+ }