@ken-jo/agent-connector 0.2.0 → 0.3.0

package/README.md

@@ -14,7 +14,7 @@
 ![install verified](https://img.shields.io/badge/install%20verified-29%2F29-22c55e)
 ![headless runtime](https://img.shields.io/badge/headless%20runtime-10%20CLIs%20activated-22c55e)
 ![marketplace](https://img.shields.io/badge/package-9%20marketplace%20formats-2563eb)
-![tests](https://img.shields.io/badge/tests-1263%20passing-22c55e)
+![tests](https://img.shields.io/badge/tests-1438%20passing-22c55e)
 
 ## Who this is for
 
@@ -102,7 +102,7 @@ installed into an isolated environment for every adapter and inspected on disk:
 - **Clean uninstall + `--purge`.** Every installed surface reverses; `--purge`
   deregisters the connector record and tears down the home binary when no
   connectors remain (29 / 29).
-- **1263 tests passing** · `tsc` clean · build green.
+- **1438 tests passing** · `tsc` clean · build green.
 
 The 0.2.0 additions — the `memory` surface, the `nativeHooks` passthrough, and
 `configPatch` — went through the same bar: dogfooded against real connector
@@ -260,6 +260,13 @@ Same one definition, your choice of distribution:
 
 - **Direct install** (above) — `install` writes each host's native MCP + plugin/
   extension config in place; no per-platform marketplace submission or review.
+- **Marketplace install** — `install --method marketplace` drives the host's own
+  plugin flow end-to-end for **Claude Code, codex, and agy/Antigravity** (stages
+  the bundle, registers a local marketplace where the host has one, then runs the
+  host's plugin-install verb; headless, idempotent — verified live on Linux and
+  native Windows). `uninstall --method auto` reverses whichever method is actually
+  installed, a guard refuses installing the same connector by BOTH methods
+  (duplicated hooks/servers), and `doctor` checks registration drift.
 - **Marketplace package** — `agent-connector package` turns the connector into a
   marketplace/extension bundle (manifest + bundled commands, agents, skills,
   hooks, MCP) for **9 host formats** (plus 2 official MCP standard artifacts —

package/dist/chunk-44HUXXC6.js

@@ -0,0 +1,284 @@
+#!/usr/bin/env node
+import {
+  connectorDir,
+  connectorsDir,
+  dataRoot,
+  ensureDir
+} from "./chunk-TRQKHP7D.js";
+
+// src/core/marketplace-state.ts
+import { createHash } from "crypto";
+import {
+  existsSync,
+  readdirSync,
+  readFileSync,
+  rmSync,
+  statSync,
+  writeFileSync
+} from "fs";
+import { homedir } from "os";
+import { dirname, join, relative, resolve } from "path";
+import TOML from "@iarna/toml";
+var MARKETPLACE_NAME = "agent-connector";
+function marketplaceInstallsPath(connectorId) {
+  return join(connectorDir(connectorId), "marketplace-installs.json");
+}
+function readMarketplaceInstalls(connectorId) {
+  try {
+    const raw = readFileSync(marketplaceInstallsPath(connectorId), "utf8");
+    const parsed = JSON.parse(raw);
+    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+      return parsed;
+    }
+  } catch {
+  }
+  return {};
+}
+function writeMarketplaceInstalls(connectorId, installs) {
+  const path = marketplaceInstallsPath(connectorId);
+  if (Object.keys(installs).length === 0) {
+    rmSync(path, { force: true });
+    return;
+  }
+  ensureDir(dirname(path));
+  writeFileSync(path, `${JSON.stringify(installs, null, 2)}
+`, "utf8");
+}
+function connectorHasMarketplaceRecords(connectorId) {
+  return Object.keys(readMarketplaceInstalls(connectorId)).length > 0;
+}
+function anyMarketplaceRecordsRemain(excludeConnectorId) {
+  const dir = connectorsDir();
+  if (!existsSync(dir)) return false;
+  let entries;
+  try {
+    entries = readdirSync(dir);
+  } catch {
+    return false;
+  }
+  return entries.some(
+    (id) => id !== excludeConnectorId && connectorHasMarketplaceRecords(id)
+  );
+}
+function marketplaceRoot() {
+  return join(dataRoot(), "marketplace");
+}
+function claudeStagingRoot() {
+  return join(marketplaceRoot(), "claude");
+}
+function codexStagingRoot() {
+  return join(marketplaceRoot(), "codex");
+}
+function agyStagingRoot() {
+  return join(marketplaceRoot(), "agy");
+}
+function claudeConfigDir() {
+  const override = process.env.CLAUDE_CONFIG_DIR;
+  if (override && override.trim() !== "") return resolve(override);
+  return join(homedir(), ".claude");
+}
+function claudePluginKey(connectorId) {
+  return `${connectorId}@${MARKETPLACE_NAME}`;
+}
+function readJsonFile(path) {
+  try {
+    const parsed = JSON.parse(readFileSync(path, "utf8"));
+    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+      return parsed;
+    }
+  } catch {
+  }
+  return null;
+}
+function readClaudeInstalledPlugins() {
+  const file = join(claudeConfigDir(), "plugins", "installed_plugins.json");
+  const parsed = readJsonFile(file);
+  const plugins = parsed?.plugins;
+  if (plugins && typeof plugins === "object" && !Array.isArray(plugins)) {
+    return plugins;
+  }
+  return null;
+}
+function claudePluginInstalled(connectorId) {
+  const plugins = readClaudeInstalledPlugins();
+  if (!plugins) return false;
+  const entry = plugins[claudePluginKey(connectorId)];
+  return Array.isArray(entry) ? entry.length > 0 : entry != null;
+}
+function anyClaudeAgentConnectorPlugins() {
+  const plugins = readClaudeInstalledPlugins();
+  if (!plugins) return false;
+  return Object.entries(plugins).some(
+    ([key, entry]) => key.endsWith(`@${MARKETPLACE_NAME}`) && (Array.isArray(entry) ? entry.length > 0 : entry != null)
+  );
+}
+function claudeKnownMarketplacePath(name) {
+  const file = join(claudeConfigDir(), "plugins", "known_marketplaces.json");
+  const parsed = readJsonFile(file);
+  const entry = parsed?.[name];
+  if (!entry || typeof entry !== "object") return null;
+  const e = entry;
+  if (typeof e.installLocation === "string") return e.installLocation;
+  const sourcePath = e.source?.path;
+  return typeof sourcePath === "string" ? sourcePath : null;
+}
+function codexConfigHome() {
+  const env = process.env.CODEX_HOME;
+  if (env && env.trim() !== "") {
+    if (env.startsWith("~")) return join(homedir(), env.replace(/^~[/\\]?/, ""));
+    return resolve(env);
+  }
+  return join(homedir(), ".codex");
+}
+function codexPluginKey(connectorId) {
+  return `${connectorId}@${MARKETPLACE_NAME}`;
+}
+function readCodexConfig() {
+  const file = join(codexConfigHome(), "config.toml");
+  try {
+    return TOML.parse(readFileSync(file, "utf8"));
+  } catch {
+    return {};
+  }
+}
+function codexPluginInstalled(connectorId) {
+  const cfg = readCodexConfig();
+  const plugins = cfg["plugins"];
+  if (!plugins || typeof plugins !== "object" || Array.isArray(plugins)) return false;
+  return codexPluginKey(connectorId) in plugins;
+}
+function anyCodexAgentConnectorPlugins() {
+  const cfg = readCodexConfig();
+  const plugins = cfg["plugins"];
+  if (!plugins || typeof plugins !== "object" || Array.isArray(plugins)) return false;
+  return Object.keys(plugins).some(
+    (k) => k.endsWith(`@${MARKETPLACE_NAME}`)
+  );
+}
+function codexMarketplaceSource(name) {
+  const cfg = readCodexConfig();
+  const marketplaces = cfg["marketplaces"];
+  if (!marketplaces || typeof marketplaces !== "object" || Array.isArray(marketplaces)) {
+    return null;
+  }
+  const entry = marketplaces[name];
+  if (!entry || typeof entry !== "object") return null;
+  const source = entry.source;
+  return typeof source === "string" ? source : null;
+}
+function agyConfigDir() {
+  return join(homedir(), ".gemini", "config");
+}
+function agyPluginsDir() {
+  return join(agyConfigDir(), "plugins");
+}
+function agyImportManifestPaths() {
+  return [
+    join(agyConfigDir(), "import_manifest.json"),
+    // win32 location
+    join(agyPluginsDir(), "import_manifest.json")
+    // posix location
+  ];
+}
+function agyPluginInstalled(connectorId) {
+  for (const manifest of agyImportManifestPaths()) {
+    try {
+      const parsed = JSON.parse(readFileSync(manifest, "utf8"));
+      const imports = parsed.imports;
+      if (Array.isArray(imports) && imports.some(
+        (e) => e != null && typeof e === "object" && e.name === connectorId
+      )) {
+        return true;
+      }
+    } catch {
+    }
+  }
+  return existsSync(join(agyPluginsDir(), connectorId, "plugin.json"));
+}
+function marketplaceEvidence(connectorId, platform) {
+  if (readMarketplaceInstalls(connectorId)[platform]) {
+    return "recorded in marketplace-installs.json";
+  }
+  switch (platform) {
+    case "claude-code":
+      if (claudePluginInstalled(connectorId)) {
+        return `${claudePluginKey(connectorId)} listed in Claude's installed_plugins.json`;
+      }
+      return null;
+    case "gemini-cli": {
+      const dir = join(homedir(), ".gemini", "extensions", connectorId);
+      return existsSync(dir) ? `extension dir ${dir} exists` : null;
+    }
+    case "antigravity":
+    case "antigravity-cli": {
+      const dir = join(homedir(), ".gemini", "config", "plugins", connectorId);
+      return existsSync(dir) ? `plugin dir ${dir} exists` : null;
+    }
+    case "codex": {
+      const codexHome = process.env.CODEX_HOME && process.env.CODEX_HOME.trim() !== "" ? resolve(process.env.CODEX_HOME) : join(homedir(), ".codex");
+      const dir = join(codexHome, "plugins", "cache", MARKETPLACE_NAME, connectorId);
+      return existsSync(dir) ? `codex plugin cache ${dir} exists` : null;
+    }
+    default:
+      return null;
+  }
+}
+function hashDirectory(dir) {
+  if (!existsSync(dir)) return "";
+  const files = [];
+  const walk = (d) => {
+    let entries;
+    try {
+      entries = readdirSync(d);
+    } catch {
+      return;
+    }
+    for (const name of entries.sort()) {
+      const full = join(d, name);
+      let st;
+      try {
+        st = statSync(full);
+      } catch {
+        continue;
+      }
+      if (st.isDirectory()) walk(full);
+      else if (st.isFile()) files.push(full);
+    }
+  };
+  walk(dir);
+  const hash = createHash("sha256");
+  for (const file of files.sort()) {
+    hash.update(relative(dir, file).split("\\").join("/"));
+    hash.update("\0");
+    try {
+      hash.update(readFileSync(file));
+    } catch {
+    }
+    hash.update("\0");
+  }
+  return hash.digest("hex");
+}
+
+export {
+  MARKETPLACE_NAME,
+  readMarketplaceInstalls,
+  writeMarketplaceInstalls,
+  connectorHasMarketplaceRecords,
+  anyMarketplaceRecordsRemain,
+  marketplaceRoot,
+  claudeStagingRoot,
+  codexStagingRoot,
+  agyStagingRoot,
+  claudePluginKey,
+  claudePluginInstalled,
+  anyClaudeAgentConnectorPlugins,
+  claudeKnownMarketplacePath,
+  codexPluginKey,
+  codexPluginInstalled,
+  anyCodexAgentConnectorPlugins,
+  codexMarketplaceSource,
+  agyPluginInstalled,
+  marketplaceEvidence,
+  hashDirectory
+};
+//# sourceMappingURL=chunk-44HUXXC6.js.map

package/dist/chunk-44HUXXC6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/marketplace-state.ts"],"sourcesContent":["/**\n * core/marketplace-state — pure read/write helpers for MARKETPLACE-method\n * install state. A LEAF module (fs + paths only, no adapters, no spawning) so\n * the installer, the marketplace orchestration, doctor, and status can all\n * import it without cycles.\n *\n * Two kinds of state live here:\n *\n *   1. The per-connector state record `connectorDir(id)/marketplace-installs.json`\n *      — one entry per platform a connector was marketplace-installed on\n *      ({ format, bundleDir, marketplace, scope, version, contentHash,\n *      installedAt }). It drives `uninstall --method auto`, upgrade staleness\n *      warnings, doctor, and the double-install guard.\n *\n *   2. Read-only fs EVIDENCE probes of the hosts' own plugin state (e.g.\n *      Claude Code's `$CLAUDE_CONFIG_DIR/plugins/installed_plugins.json`).\n *      These catch installs the user performed manually from `package`'s\n *      printed instructions, which the state record alone would miss. Probes\n *      read undocumented host internals, so every reader degrades to null/false\n *      on absence or parse failure — the guard convention is \"refuse only on\n *      positive evidence\" (docs: design risk 4).\n */\n\nimport { createHash } from \"node:crypto\";\nimport {\n  existsSync,\n  readdirSync,\n  readFileSync,\n  rmSync,\n  statSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join, relative, resolve } from \"node:path\";\n\nimport TOML from \"@iarna/toml\";\n\nimport type { InstallScope, PlatformId } from \"./types.js\";\nimport type { PackageFormat } from \"./package.js\";\nimport { connectorDir, connectorsDir, dataRoot, ensureDir } from \"./paths.js\";\n\n// ─────────────────────────────────────────────────────────────────────────\n// State record: connectorDir(id)/marketplace-installs.json\n// ─────────────────────────────────────────────────────────────────────────\n\n/** The catalog name every staged local marketplace is registered under. */\nexport const MARKETPLACE_NAME = \"agent-connector\";\n\n/** One marketplace install of one connector on one platform. */\nexport interface MarketplaceInstallRecord {\n  /** Bundle format that was staged + installed (e.g. \"claude-plugin\"). */\n  format: PackageFormat;\n  /** Absolute path of the staged plugin dir the host references/copied. */\n  bundleDir: string;\n  /** Marketplace/catalog name the install is keyed under ({@link MARKETPLACE_NAME}). */\n  marketplace: string;\n  /** Install scope (v1: always \"user\"). */\n  scope: InstallScope;\n  /** connector.version at install time (staleness warnings key off this). */\n  version: string;\n  /** sha256 over the staged plugin dir at install time (drift detection). */\n  contentHash: string;\n  /** ISO timestamp of the recorded install. */\n  installedAt: string;\n}\n\n/** platform → record map persisted per connector. */\nexport type MarketplaceInstalls = Partial<\n  Record<PlatformId, MarketplaceInstallRecord>\n>;\n\n/** Path of the per-connector marketplace state record. */\nexport function marketplaceInstallsPath(connectorId: string): string {\n  return join(connectorDir(connectorId), \"marketplace-installs.json\");\n}\n\n/** Read the state record ({} on absence/parse failure — never throws). */\nexport function readMarketplaceInstalls(connectorId: string): MarketplaceInstalls {\n  try {\n    const raw = readFileSync(marketplaceInstallsPath(connectorId), \"utf8\");\n    const parsed = JSON.parse(raw) as unknown;\n    if (parsed && typeof parsed === \"object\" && !Array.isArray(parsed)) {\n      return parsed as MarketplaceInstalls;\n    }\n  } catch {\n    /* absent / unreadable → empty */\n  }\n  return {};\n}\n\n/** Write the state record; an empty map DELETES the file (uninstall leaves no husk). */\nexport function writeMarketplaceInstalls(\n  connectorId: string,\n  installs: MarketplaceInstalls,\n): void {\n  const path = marketplaceInstallsPath(connectorId);\n  if (Object.keys(installs).length === 0) {\n    rmSync(path, { force: true });\n    return;\n  }\n  ensureDir(dirname(path));\n  writeFileSync(path, `${JSON.stringify(installs, null, 2)}\\n`, \"utf8\");\n}\n\n/** True when THIS connector has any recorded marketplace install. */\nexport function connectorHasMarketplaceRecords(connectorId: string): boolean {\n  return Object.keys(readMarketplaceInstalls(connectorId)).length > 0;\n}\n\n/**\n * True when ANY registered connector (optionally excluding one) still records a\n * marketplace install. Guards home-bin removal on purge: an installed plugin's\n * hooks exec the home-bin OUTSIDE any adapter-managed config, so removing the\n * launcher while a marketplace install survives would silently kill its hooks.\n */\nexport function anyMarketplaceRecordsRemain(excludeConnectorId?: string): boolean {\n  const dir = connectorsDir();\n  if (!existsSync(dir)) return false;\n  let entries: string[];\n  try {\n    entries = readdirSync(dir);\n  } catch {\n    return false;\n  }\n  return entries.some(\n    (id) => id !== excludeConnectorId && connectorHasMarketplaceRecords(id),\n  );\n}\n\n// ─────────────────────────────────────────────────────────────────────────\n// Staging roots — bundles staged by-reference must survive cwd changes and\n// `rm -rf dist-plugin`, so they live under the data-root, one shared root per\n// host family, holding every marketplace-installed connector's bundle plus ONE\n// regenerated catalog named \"agent-connector\" listing them all.\n// ─────────────────────────────────────────────────────────────────────────\n\n/** Root for every marketplace staging tree: <dataRoot>/marketplace. */\nexport function marketplaceRoot(): string {\n  return join(dataRoot(), \"marketplace\");\n}\n\n/** Shared Claude-family staging root: <dataRoot>/marketplace/claude. */\nexport function claudeStagingRoot(): string {\n  return join(marketplaceRoot(), \"claude\");\n}\n\n/** Shared Codex-family staging root: <dataRoot>/marketplace/codex. */\nexport function codexStagingRoot(): string {\n  return join(marketplaceRoot(), \"codex\");\n}\n\n/** Shared agy (Antigravity) staging root: <dataRoot>/marketplace/agy. */\nexport function agyStagingRoot(): string {\n  return join(marketplaceRoot(), \"agy\");\n}\n\n// ─────────────────────────────────────────────────────────────────────────\n// Claude Code host-state readers ($CLAUDE_CONFIG_DIR || ~/.claude)\n// ─────────────────────────────────────────────────────────────────────────\n\n/** Claude Code's config dir, honoring the CLAUDE_CONFIG_DIR override. */\nexport function claudeConfigDir(): string {\n  const override = process.env.CLAUDE_CONFIG_DIR;\n  if (override && override.trim() !== \"\") return resolve(override);\n  return join(homedir(), \".claude\");\n}\n\n/** The installed_plugins.json key our marketplace install creates for `id`. */\nexport function claudePluginKey(connectorId: string): string {\n  return `${connectorId}@${MARKETPLACE_NAME}`;\n}\n\nfunction readJsonFile(path: string): Record<string, unknown> | null {\n  try {\n    const parsed = JSON.parse(readFileSync(path, \"utf8\")) as unknown;\n    if (parsed && typeof parsed === \"object\" && !Array.isArray(parsed)) {\n      return parsed as Record<string, unknown>;\n    }\n  } catch {\n    /* absent / unreadable → null */\n  }\n  return null;\n}\n\n/** The `plugins` map from Claude's installed_plugins.json (null when unreadable). */\nexport function readClaudeInstalledPlugins(): Record<string, unknown> | null {\n  const file = join(claudeConfigDir(), \"plugins\", \"installed_plugins.json\");\n  const parsed = readJsonFile(file);\n  const plugins = parsed?.plugins;\n  if (plugins && typeof plugins === \"object\" && !Array.isArray(plugins)) {\n    return plugins as Record<string, unknown>;\n  }\n  return null;\n}\n\n/** True when Claude's own state lists `<id>@agent-connector` as installed. */\nexport function claudePluginInstalled(connectorId: string): boolean {\n  const plugins = readClaudeInstalledPlugins();\n  if (!plugins) return false;\n  const entry = plugins[claudePluginKey(connectorId)];\n  return Array.isArray(entry) ? entry.length > 0 : entry != null;\n}\n\n/** True when ANY `*@agent-connector` plugin remains in Claude's state. */\nexport function anyClaudeAgentConnectorPlugins(): boolean {\n  const plugins = readClaudeInstalledPlugins();\n  if (!plugins) return false;\n  return Object.entries(plugins).some(\n    ([key, entry]) =>\n      key.endsWith(`@${MARKETPLACE_NAME}`) &&\n      (Array.isArray(entry) ? entry.length > 0 : entry != null),\n  );\n}\n\n/**\n * The directory Claude's known_marketplaces.json records for `name`, or null\n * when not registered / unreadable. Used both as a presence probe and as the\n * NAME-COLLISION check: a registration pointing somewhere other than our\n * staging root belongs to the user and must never be touched.\n */\nexport function claudeKnownMarketplacePath(name: string): string | null {\n  const file = join(claudeConfigDir(), \"plugins\", \"known_marketplaces.json\");\n  const parsed = readJsonFile(file);\n  const entry = parsed?.[name];\n  if (!entry || typeof entry !== \"object\") return null;\n  const e = entry as { installLocation?: unknown; source?: { path?: unknown } };\n  if (typeof e.installLocation === \"string\") return e.installLocation;\n  const sourcePath = e.source?.path;\n  return typeof sourcePath === \"string\" ? sourcePath : null;\n}\n\n// ─────────────────────────────────────────────────────────────────────────\n// Codex host-state readers ($CODEX_HOME || ~/.codex → config.toml)\n// ─────────────────────────────────────────────────────────────────────────\n\n/** Codex's config home, honoring the CODEX_HOME override (defaults to ~/.codex). */\nexport function codexConfigHome(): string {\n  const env = process.env.CODEX_HOME;\n  if (env && env.trim() !== \"\") {\n    if (env.startsWith(\"~\")) return join(homedir(), env.replace(/^~[/\\\\]?/, \"\"));\n    return resolve(env);\n  }\n  return join(homedir(), \".codex\");\n}\n\n/** The config.toml key our marketplace install creates for `id` (== claude's). */\nexport function codexPluginKey(connectorId: string): string {\n  return `${connectorId}@${MARKETPLACE_NAME}`;\n}\n\n/** Parse <CODEX_HOME>/config.toml ({} on absence/parse failure — never throws). */\nfunction readCodexConfig(): Record<string, unknown> {\n  const file = join(codexConfigHome(), \"config.toml\");\n  try {\n    return TOML.parse(readFileSync(file, \"utf8\")) as Record<string, unknown>;\n  } catch {\n    return {};\n  }\n}\n\n/**\n * True when Codex's config.toml carries the `[plugins.\"<id>@agent-connector\"]`\n * table. The DEFINITIVE install probe — empty `plugins/cache/...` dirs linger\n * after uninstall, so the cache dir must NOT be used (docs: codex quirk).\n */\nexport function codexPluginInstalled(connectorId: string): boolean {\n  const cfg = readCodexConfig();\n  const plugins = cfg[\"plugins\"];\n  if (!plugins || typeof plugins !== \"object\" || Array.isArray(plugins)) return false;\n  return codexPluginKey(connectorId) in (plugins as Record<string, unknown>);\n}\n\n/** True when ANY `*@agent-connector` plugin remains in Codex's config.toml. */\nexport function anyCodexAgentConnectorPlugins(): boolean {\n  const cfg = readCodexConfig();\n  const plugins = cfg[\"plugins\"];\n  if (!plugins || typeof plugins !== \"object\" || Array.isArray(plugins)) return false;\n  return Object.keys(plugins as Record<string, unknown>).some((k) =>\n    k.endsWith(`@${MARKETPLACE_NAME}`),\n  );\n}\n\n/**\n * The directory config.toml records as `[marketplaces.agent-connector].source`,\n * or null when not registered / unreadable. Both a presence probe and the\n * NAME-COLLISION check: a registration pointing somewhere other than our\n * staging root belongs to the user and must never be touched.\n */\nexport function codexMarketplaceSource(name: string): string | null {\n  const cfg = readCodexConfig();\n  const marketplaces = cfg[\"marketplaces\"];\n  if (!marketplaces || typeof marketplaces !== \"object\" || Array.isArray(marketplaces)) {\n    return null;\n  }\n  const entry = (marketplaces as Record<string, unknown>)[name];\n  if (!entry || typeof entry !== \"object\") return null;\n  const source = (entry as { source?: unknown }).source;\n  return typeof source === \"string\" ? source : null;\n}\n\n// ─────────────────────────────────────────────────────────────────────────\n// agy (Antigravity) host-state readers (~/.gemini/config/plugins, NO env)\n// ─────────────────────────────────────────────────────────────────────────\n\n/** agy's config dir: ~/.gemini/config (NO dedicated env — HOME isolation). */\nexport function agyConfigDir(): string {\n  return join(homedir(), \".gemini\", \"config\");\n}\n\n/** agy's plugins dir: ~/.gemini/config/plugins. */\nexport function agyPluginsDir(): string {\n  return join(agyConfigDir(), \"plugins\");\n}\n\n/**\n * Candidate `import_manifest.json` locations. agy 1.0.7 records the manifest at\n * `<config>/plugins/import_manifest.json` on POSIX but at\n * `<config>/import_manifest.json` on Windows (live-confirmed on the my-window\n * box) — both are probed, then the copied plugin dir is the final fallback.\n */\nexport function agyImportManifestPaths(): string[] {\n  return [\n    join(agyConfigDir(), \"import_manifest.json\"), // win32 location\n    join(agyPluginsDir(), \"import_manifest.json\"), // posix location\n  ];\n}\n\n/** @deprecated single-location accessor — prefer {@link agyImportManifestPaths}. */\nexport function agyImportManifestPath(): string {\n  return join(agyPluginsDir(), \"import_manifest.json\");\n}\n\n/**\n * True when `id` is installed per agy's import manifest (`imports[].name`),\n * checking BOTH the win32 and posix manifest locations, with a fallback probe of\n * the copied plugin dir's plugin.json. agy's uninstall removes the plugin dir\n * and clears the manifest entry (live-verified on Windows: install → dir +\n * manifest present, uninstall → both gone, re-install idempotent).\n */\nexport function agyPluginInstalled(connectorId: string): boolean {\n  for (const manifest of agyImportManifestPaths()) {\n    try {\n      const parsed = JSON.parse(readFileSync(manifest, \"utf8\")) as {\n        imports?: unknown;\n      };\n      const imports = parsed.imports;\n      if (\n        Array.isArray(imports) &&\n        imports.some(\n          (e) =>\n            e != null &&\n            typeof e === \"object\" &&\n            (e as { name?: unknown }).name === connectorId,\n        )\n      ) {\n        return true;\n      }\n    } catch {\n      /* absent / unreadable manifest → try the next candidate */\n    }\n  }\n  return existsSync(join(agyPluginsDir(), connectorId, \"plugin.json\"));\n}\n\n// ─────────────────────────────────────────────────────────────────────────\n// Cross-host marketplace-install EVIDENCE (the double-install guard's probe)\n// ─────────────────────────────────────────────────────────────────────────\n\n/**\n * Read-only evidence that `connectorId` is marketplace/plugin-installed on\n * `platform`: the state record first, then a cheap fs probe of the host's own\n * plugin state (catches manual installs from `package`'s printed instructions).\n * Returns a human-readable description of the evidence, or null when none.\n */\nexport function marketplaceEvidence(\n  connectorId: string,\n  platform: PlatformId,\n): string | null {\n  if (readMarketplaceInstalls(connectorId)[platform]) {\n    return \"recorded in marketplace-installs.json\";\n  }\n  switch (platform) {\n    case \"claude-code\":\n      if (claudePluginInstalled(connectorId)) {\n        return `${claudePluginKey(connectorId)} listed in Claude's installed_plugins.json`;\n      }\n      return null;\n    case \"gemini-cli\": {\n      const dir = join(homedir(), \".gemini\", \"extensions\", connectorId);\n      return existsSync(dir) ? `extension dir ${dir} exists` : null;\n    }\n    case \"antigravity\":\n    case \"antigravity-cli\": {\n      const dir = join(homedir(), \".gemini\", \"config\", \"plugins\", connectorId);\n      return existsSync(dir) ? `plugin dir ${dir} exists` : null;\n    }\n    case \"codex\": {\n      const codexHome =\n        process.env.CODEX_HOME && process.env.CODEX_HOME.trim() !== \"\"\n          ? resolve(process.env.CODEX_HOME)\n          : join(homedir(), \".codex\");\n      const dir = join(codexHome, \"plugins\", \"cache\", MARKETPLACE_NAME, connectorId);\n      return existsSync(dir) ? `codex plugin cache ${dir} exists` : null;\n    }\n    default:\n      return null;\n  }\n}\n\n// ─────────────────────────────────────────────────────────────────────────\n// Content hashing — staged-bundle drift detection\n// ─────────────────────────────────────────────────────────────────────────\n\n/**\n * Deterministic sha256 over every file under `dir` (sorted relative paths +\n * bytes). Empty string when the dir is missing/unreadable. Used to record the\n * staged bundle's content at install time and detect drift later (claude caches\n * a versioned COPY, so an edited connector goes silently stale without this).\n */\nexport function hashDirectory(dir: string): string {\n  if (!existsSync(dir)) return \"\";\n  const files: string[] = [];\n  const walk = (d: string): void => {\n    let entries: string[];\n    try {\n      entries = readdirSync(d);\n    } catch {\n      return;\n    }\n    for (const name of entries.sort()) {\n      const full = join(d, name);\n      let st;\n      try {\n        st = statSync(full);\n      } catch {\n        continue;\n      }\n      if (st.isDirectory()) walk(full);\n      else if (st.isFile()) files.push(full);\n    }\n  };\n  walk(dir);\n  const hash = createHash(\"sha256\");\n  for (const file of files.sort()) {\n    hash.update(relative(dir, file).split(\"\\\\\").join(\"/\"));\n    hash.update(\"\\0\");\n    try {\n      hash.update(readFileSync(file));\n    } catch {\n      /* unreadable file contributes only its path */\n    }\n    hash.update(\"\\0\");\n  }\n  return hash.digest(\"hex\");\n}\n"],"mappings":";;;;;;;;;AAuBA,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,eAAe;AACxB,SAAS,SAAS,MAAM,UAAU,eAAe;AAEjD,OAAO,UAAU;AAWV,IAAM,mBAAmB;AA0BzB,SAAS,wBAAwB,aAA6B;AACnE,SAAO,KAAK,aAAa,WAAW,GAAG,2BAA2B;AACpE;AAGO,SAAS,wBAAwB,aAA0C;AAChF,MAAI;AACF,UAAM,MAAM,aAAa,wBAAwB,WAAW,GAAG,MAAM;AACrE,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,GAAG;AAClE,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO,CAAC;AACV;AAGO,SAAS,yBACd,aACA,UACM;AACN,QAAM,OAAO,wBAAwB,WAAW;AAChD,MAAI,OAAO,KAAK,QAAQ,EAAE,WAAW,GAAG;AACtC,WAAO,MAAM,EAAE,OAAO,KAAK,CAAC;AAC5B;AAAA,EACF;AACA,YAAU,QAAQ,IAAI,CAAC;AACvB,gBAAc,MAAM,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAAA,GAAM,MAAM;AACtE;AAGO,SAAS,+BAA+B,aAA8B;AAC3E,SAAO,OAAO,KAAK,wBAAwB,WAAW,CAAC,EAAE,SAAS;AACpE;AAQO,SAAS,4BAA4B,oBAAsC;AAChF,QAAM,MAAM,cAAc;AAC1B,MAAI,CAAC,WAAW,GAAG,EAAG,QAAO;AAC7B,MAAI;AACJ,MAAI;AACF,cAAU,YAAY,GAAG;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACA,SAAO,QAAQ;AAAA,IACb,CAAC,OAAO,OAAO,sBAAsB,+BAA+B,EAAE;AAAA,EACxE;AACF;AAUO,SAAS,kBAA0B;AACxC,SAAO,KAAK,SAAS,GAAG,aAAa;AACvC;AAGO,SAAS,oBAA4B;AAC1C,SAAO,KAAK,gBAAgB,GAAG,QAAQ;AACzC;AAGO,SAAS,mBAA2B;AACzC,SAAO,KAAK,gBAAgB,GAAG,OAAO;AACxC;AAGO,SAAS,iBAAyB;AACvC,SAAO,KAAK,gBAAgB,GAAG,KAAK;AACtC;AAOO,SAAS,kBAA0B;AACxC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,YAAY,SAAS,KAAK,MAAM,GAAI,QAAO,QAAQ,QAAQ;AAC/D,SAAO,KAAK,QAAQ,GAAG,SAAS;AAClC;AAGO,SAAS,gBAAgB,aAA6B;AAC3D,SAAO,GAAG,WAAW,IAAI,gBAAgB;AAC3C;AAEA,SAAS,aAAa,MAA8C;AAClE,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AACpD,QAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,GAAG;AAClE,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAGO,SAAS,6BAA6D;AAC3E,QAAM,OAAO,KAAK,gBAAgB,GAAG,WAAW,wBAAwB;AACxE,QAAM,SAAS,aAAa,IAAI;AAChC,QAAM,UAAU,QAAQ;AACxB,MAAI,WAAW,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,OAAO,GAAG;AACrE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAGO,SAAS,sBAAsB,aAA8B;AAClE,QAAM,UAAU,2BAA2B;AAC3C,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,QAAQ,QAAQ,gBAAgB,WAAW,CAAC;AAClD,SAAO,MAAM,QAAQ,KAAK,IAAI,MAAM,SAAS,IAAI,SAAS;AAC5D;AAGO,SAAS,iCAA0C;AACxD,QAAM,UAAU,2BAA2B;AAC3C,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,OAAO,QAAQ,OAAO,EAAE;AAAA,IAC7B,CAAC,CAAC,KAAK,KAAK,MACV,IAAI,SAAS,IAAI,gBAAgB,EAAE,MAClC,MAAM,QAAQ,KAAK,IAAI,MAAM,SAAS,IAAI,SAAS;AAAA,EACxD;AACF;AAQO,SAAS,2BAA2B,MAA6B;AACtE,QAAM,OAAO,KAAK,gBAAgB,GAAG,WAAW,yBAAyB;AACzE,QAAM,SAAS,aAAa,IAAI;AAChC,QAAM,QAAQ,SAAS,IAAI;AAC3B,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,IAAI;AACV,MAAI,OAAO,EAAE,oBAAoB,SAAU,QAAO,EAAE;AACpD,QAAM,aAAa,EAAE,QAAQ;AAC7B,SAAO,OAAO,eAAe,WAAW,aAAa;AACvD;AAOO,SAAS,kBAA0B;AACxC,QAAM,MAAM,QAAQ,IAAI;AACxB,MAAI,OAAO,IAAI,KAAK,MAAM,IAAI;AAC5B,QAAI,IAAI,WAAW,GAAG,EAAG,QAAO,KAAK,QAAQ,GAAG,IAAI,QAAQ,YAAY,EAAE,CAAC;AAC3E,WAAO,QAAQ,GAAG;AAAA,EACpB;AACA,SAAO,KAAK,QAAQ,GAAG,QAAQ;AACjC;AAGO,SAAS,eAAe,aAA6B;AAC1D,SAAO,GAAG,WAAW,IAAI,gBAAgB;AAC3C;AAGA,SAAS,kBAA2C;AAClD,QAAM,OAAO,KAAK,gBAAgB,GAAG,aAAa;AAClD,MAAI;AACF,WAAO,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAAA,EAC9C,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;AAOO,SAAS,qBAAqB,aAA8B;AACjE,QAAM,MAAM,gBAAgB;AAC5B,QAAM,UAAU,IAAI,SAAS;AAC7B,MAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,EAAG,QAAO;AAC9E,SAAO,eAAe,WAAW,KAAM;AACzC;AAGO,SAAS,gCAAyC;AACvD,QAAM,MAAM,gBAAgB;AAC5B,QAAM,UAAU,IAAI,SAAS;AAC7B,MAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,EAAG,QAAO;AAC9E,SAAO,OAAO,KAAK,OAAkC,EAAE;AAAA,IAAK,CAAC,MAC3D,EAAE,SAAS,IAAI,gBAAgB,EAAE;AAAA,EACnC;AACF;AAQO,SAAS,uBAAuB,MAA6B;AAClE,QAAM,MAAM,gBAAgB;AAC5B,QAAM,eAAe,IAAI,cAAc;AACvC,MAAI,CAAC,gBAAgB,OAAO,iBAAiB,YAAY,MAAM,QAAQ,YAAY,GAAG;AACpF,WAAO;AAAA,EACT;AACA,QAAM,QAAS,aAAyC,IAAI;AAC5D,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,SAAU,MAA+B;AAC/C,SAAO,OAAO,WAAW,WAAW,SAAS;AAC/C;AAOO,SAAS,eAAuB;AACrC,SAAO,KAAK,QAAQ,GAAG,WAAW,QAAQ;AAC5C;AAGO,SAAS,gBAAwB;AACtC,SAAO,KAAK,aAAa,GAAG,SAAS;AACvC;AAQO,SAAS,yBAAmC;AACjD,SAAO;AAAA,IACL,KAAK,aAAa,GAAG,sBAAsB;AAAA;AAAA,IAC3C,KAAK,cAAc,GAAG,sBAAsB;AAAA;AAAA,EAC9C;AACF;AAcO,SAAS,mBAAmB,aAA8B;AAC/D,aAAW,YAAY,uBAAuB,GAAG;AAC/C,QAAI;AACF,YAAM,SAAS,KAAK,MAAM,aAAa,UAAU,MAAM,CAAC;AAGxD,YAAM,UAAU,OAAO;AACvB,UACE,MAAM,QAAQ,OAAO,KACrB,QAAQ;AAAA,QACN,CAAC,MACC,KAAK,QACL,OAAO,MAAM,YACZ,EAAyB,SAAS;AAAA,MACvC,GACA;AACA,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO,WAAW,KAAK,cAAc,GAAG,aAAa,aAAa,CAAC;AACrE;AAYO,SAAS,oBACd,aACA,UACe;AACf,MAAI,wBAAwB,WAAW,EAAE,QAAQ,GAAG;AAClD,WAAO;AAAA,EACT;AACA,UAAQ,UAAU;AAAA,IAChB,KAAK;AACH,UAAI,sBAAsB,WAAW,GAAG;AACtC,eAAO,GAAG,gBAAgB,WAAW,CAAC;AAAA,MACxC;AACA,aAAO;AAAA,IACT,KAAK,cAAc;AACjB,YAAM,MAAM,KAAK,QAAQ,GAAG,WAAW,cAAc,WAAW;AAChE,aAAO,WAAW,GAAG,IAAI,iBAAiB,GAAG,YAAY;AAAA,IAC3D;AAAA,IACA,KAAK;AAAA,IACL,KAAK,mBAAmB;AACtB,YAAM,MAAM,KAAK,QAAQ,GAAG,WAAW,UAAU,WAAW,WAAW;AACvE,aAAO,WAAW,GAAG,IAAI,cAAc,GAAG,YAAY;AAAA,IACxD;AAAA,IACA,KAAK,SAAS;AACZ,YAAM,YACJ,QAAQ,IAAI,cAAc,QAAQ,IAAI,WAAW,KAAK,MAAM,KACxD,QAAQ,QAAQ,IAAI,UAAU,IAC9B,KAAK,QAAQ,GAAG,QAAQ;AAC9B,YAAM,MAAM,KAAK,WAAW,WAAW,SAAS,kBAAkB,WAAW;AAC7E,aAAO,WAAW,GAAG,IAAI,sBAAsB,GAAG,YAAY;AAAA,IAChE;AAAA,IACA;AACE,aAAO;AAAA,EACX;AACF;AAYO,SAAS,cAAc,KAAqB;AACjD,MAAI,CAAC,WAAW,GAAG,EAAG,QAAO;AAC7B,QAAM,QAAkB,CAAC;AACzB,QAAM,OAAO,CAAC,MAAoB;AAChC,QAAI;AACJ,QAAI;AACF,gBAAU,YAAY,CAAC;AAAA,IACzB,QAAQ;AACN;AAAA,IACF;AACA,eAAW,QAAQ,QAAQ,KAAK,GAAG;AACjC,YAAM,OAAO,KAAK,GAAG,IAAI;AACzB,UAAI;AACJ,UAAI;AACF,aAAK,SAAS,IAAI;AAAA,MACpB,QAAQ;AACN;AAAA,MACF;AACA,UAAI,GAAG,YAAY,EAAG,MAAK,IAAI;AAAA,eACtB,GAAG,OAAO,EAAG,OAAM,KAAK,IAAI;AAAA,IACvC;AAAA,EACF;AACA,OAAK,GAAG;AACR,QAAM,OAAO,WAAW,QAAQ;AAChC,aAAW,QAAQ,MAAM,KAAK,GAAG;AAC/B,SAAK,OAAO,SAAS,KAAK,IAAI,EAAE,MAAM,IAAI,EAAE,KAAK,GAAG,CAAC;AACrD,SAAK,OAAO,IAAI;AAChB,QAAI;AACF,WAAK,OAAO,aAAa,IAAI,CAAC;AAAA,IAChC,QAAQ;AAAA,IAER;AACA,SAAK,OAAO,IAAI;AAAA,EAClB;AACA,SAAO,KAAK,OAAO,KAAK;AAC1B;","names":[]}

package/dist/{chunk-AKJGNTU3.js → chunk-DS3LUFVN.js}

@@ -73,35 +73,35 @@ function renderInstallResult(result, verb) {
   return lines.join("\n");
 }
 var COMMANDS = {
-  detect: () => import("./detect-JK7T46N6.js"),
-  install: () => import("./install-DMW2C7SV.js"),
-  uninstall: () => import("./uninstall-H6FGMIHN.js"),
+  detect: () => import("./detect-MNDHGLSV.js"),
+  install: () => import("./install-TQTT4F3I.js"),
+  uninstall: () => import("./uninstall-3DXIBRCV.js"),
   // `upgrade` is the single "bring everything current" verb (re-render host
   // config + refresh the home pointer + managed channel guidance). `sync` and
   // `update` are kept as back-compat aliases that route to the same module so
   // existing scripts/docs keep working without a second concept to learn.
-  upgrade: () => import("./upgrade-76BQZBMA.js"),
-  sync: () => import("./upgrade-76BQZBMA.js"),
-  update: () => import("./upgrade-76BQZBMA.js"),
-  package: () => import("./package-O63K4S7T.js"),
-  doctor: () => import("./doctor-62BHIXOR.js"),
-  status: () => import("./status-M7JLZVLC.js"),
-  telemetry: () => import("./telemetry-3NVEXPYX.js"),
-  usage: () => import("./usage-G3GSCX23.js"),
-  leaderboard: () => import("./leaderboard-R5HRJHNU.js"),
-  hook: () => import("./hook-AC7APC66.js"),
-  serve: () => import("./serve-LFOUSZAD.js"),
+  upgrade: () => import("./upgrade-GJEB3ITY.js"),
+  sync: () => import("./upgrade-GJEB3ITY.js"),
+  update: () => import("./upgrade-GJEB3ITY.js"),
+  package: () => import("./package-SYPA5POO.js"),
+  doctor: () => import("./doctor-N5KZDD55.js"),
+  status: () => import("./status-DYSS6BOR.js"),
+  telemetry: () => import("./telemetry-IJ4GP2Q3.js"),
+  usage: () => import("./usage-2BJLM3GJ.js"),
+  leaderboard: () => import("./leaderboard-MUJ7DURM.js"),
+  hook: () => import("./hook-7LUOKIXH.js"),
+  serve: () => import("./serve-XJOSA7BY.js"),
   // Hidden (omitted from USAGE): the opt-in host-native turn-usage entrypoint an
   // AfterModel / PostInvocation hook points at. Always exits 0; records a
   // distinct `model_turn` row. See cli/commands/usage-event.ts.
-  "usage-event": () => import("./usage-event-QUTMNBS5.js")
+  "usage-event": () => import("./usage-event-472X3DOY.js")
 };
 var DEFAULT_PROGRAM_NAME = "agent-connector";
 var COMMAND_USAGE = {
   detect: "detect [--json] [--project <dir>]",
-  install: "install [--connector <path>] [--scope user|project] [--targets a,b] [--project <dir>] [--dry-run] [--force]",
-  uninstall: "uninstall [--connector <path>] [--connector-id <id>] [--scope user|project] [--targets a,b] [--project <dir>] [--dry-run] [--purge]",
-  upgrade: "upgrade [--channel stable|latest] [--connector <path>] [--scope user|project] [--targets a,b] [--project <dir>] [--dry-run]",
+  install: "install [--method direct|marketplace] [--connector <path>] [--scope user|project] [--targets a,b] [--project <dir>] [--dry-run] [--force]",
+  uninstall: "uninstall [--method auto|direct|marketplace] [--connector <path>] [--connector-id <id>] [--scope user|project] [--targets a,b] [--project <dir>] [--dry-run] [--purge]",
+  upgrade: "upgrade [--method direct|marketplace] [--channel stable|latest] [--connector <path>] [--scope user|project] [--targets a,b] [--project <dir>] [--dry-run]",
   sync: "sync \u2014 alias of upgrade (see `upgrade --help`)",
   update: "update \u2014 alias of upgrade (see `upgrade --help`)",
   package: "package [--connector <path>] [--format <fmt>|all] [--out <dir>] [--project <dir>] [--dry-run]",
@@ -120,8 +120,8 @@ usage: ${programName} <command> [flags]
 
 commands:
   detect       List the AI-agent platforms installed on this machine.
-  install      Deploy a connector across its target platforms.
-  uninstall    Remove a connector's MCP + hook registrations.
+  install      Deploy a connector across its target platforms (--method direct writes host config; --method marketplace drives the host's plugin install).
+  uninstall    Remove a connector's registrations (--method auto reverses whichever method is actually installed).
   upgrade      Bring everything current: re-render host config + heal the home pointer + managed update guidance (alias: update, sync).
   package      Emit a marketplace/extension bundle (9 host formats, or the standard artifacts mcp-server-json | mcpb).
   doctor       Health-check every detected platform; non-zero exit on any failure.
@@ -188,4 +188,4 @@ export {
   renderInstallResult,
   main
 };
-//# sourceMappingURL=chunk-AKJGNTU3.js.map
+//# sourceMappingURL=chunk-DS3LUFVN.js.map

package/dist/chunk-DS3LUFVN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/app.ts"],"sourcesContent":["/**\n * cli/app — shared CLI helpers + command dispatch (NO side effects).\n *\n * Command modules import the shared helpers (print, fail, parse-flags,\n * renderInstallResult) from here, and main() dispatches the first positional to a\n * command module.\n * This module never auto-runs — `cli/index.ts` is the thin bin entry that calls\n * `main()`. Keeping the auto-run out of here is what prevents a dispatch recursion\n * (a command module importing a helper must not re-trigger the program) and makes\n * it robust to bundler entry-splitting (the old import.meta.url entry-guard broke\n * once tsup hoisted this code into a shared chunk).\n */\n\nimport { createRequire } from \"node:module\";\n\nimport type {\n  ChangeRecord,\n  InstallResult,\n  InstallScope,\n  PlatformId,\n} from \"../core/types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────\n// Shared helpers (imported by the command modules)\n// ─────────────────────────────────────────────────────────────────────────\n\n/** Print a line to stdout (machine-readable payloads must stay on stdout). */\nexport function print(line: string): void {\n  process.stdout.write(`${line}\\n`);\n}\n\n/**\n * The brand active for THIS invocation. main() sets it from\n * {@link MainOptions.programName} before dispatch, so error messages printed by\n * command modules via {@link fail} read as the embedding tool (e.g. `acme-db:`)\n * instead of always `agent-connector:`.\n */\nlet activeProgramName = \"agent-connector\";\n\n/** Print an error to stderr (branded) and return a non-zero exit code (default 2). */\nexport function fail(message: string, code = 2): number {\n  process.stderr.write(`${activeProgramName}: ${message}\\n`);\n  return code;\n}\n\n/**\n * Resolve agent-connector's own package version at runtime. Works from both the\n * bundled dist layout (dist/*.js → ../package.json) and the src layout under\n * tsx/vitest (src/cli/ → ../../package.json); the name check guards against\n * accidentally reading some other package.json on the walk.\n */\nexport function resolveOwnVersion(): string {\n  const req = createRequire(import.meta.url);\n  for (const rel of [\"../package.json\", \"../../package.json\", \"../../../package.json\"]) {\n    try {\n      const pkg = req(rel) as { name?: string; version?: string };\n      if (pkg.name === \"@ken-jo/agent-connector\" && typeof pkg.version === \"string\") {\n        return pkg.version;\n      }\n    } catch {\n      /* keep walking */\n    }\n  }\n  return \"0.0.0\";\n}\n\n/** Parse a --scope value the CLI accepts (user|project) into an InstallScope. */\nexport function parseScope(value: string | undefined): InstallScope | null {\n  if (value === \"user\" || value === \"project\") return value;\n  return null;\n}\n\n/**\n * Parse a comma-separated --targets value into PlatformId[]. Returns undefined\n * when the flag is absent/empty so callers can fall back to connector/detection.\n */\nexport function parseTargets(value: string | undefined): PlatformId[] | undefined {\n  if (value == null || value.trim() === \"\") return undefined;\n  const ids = value\n    .split(\",\")\n    .map((s) => s.trim())\n    .filter((s) => s !== \"\") as PlatformId[];\n  return ids.length > 0 ? ids : undefined;\n}\n\nconst ACTION_GLYPH: Record<ChangeRecord[\"action\"], string> = {\n  create: \"+\",\n  update: \"~\",\n  remove: \"-\",\n  skip: \"=\",\n  warn: \"!\",\n};\n\n/**\n * Render an InstallResult as a readable diff: one line per ChangeRecord (glyph,\n * platform, detail, path) followed by any warnings and a summary tally. Used by\n * install / upgrade / uninstall.\n */\nexport function renderInstallResult(\n  result: InstallResult,\n  verb: \"install\" | \"upgrade\" | \"uninstall\",\n): string {\n  const lines: string[] = [];\n  const mode = result.dryRun ? \" (dry-run — nothing written)\" : \"\";\n  lines.push(`${verb} \"${result.connectorId}\"${mode}`);\n\n  if (result.changes.length === 0) {\n    lines.push(\"  (no changes)\");\n  } else {\n    for (const c of result.changes) {\n      const glyph = ACTION_GLYPH[c.action];\n      const where = c.path ? `  ${c.path}` : \"\";\n      lines.push(`  ${glyph} [${c.platform}] ${c.action}: ${c.detail}${where}`);\n    }\n  }\n\n  if (result.warnings.length > 0) {\n    lines.push(\"\");\n    lines.push(\"warnings:\");\n    for (const w of result.warnings) lines.push(`  ! ${w}`);\n  }\n\n  const tally = result.changes.reduce<Record<ChangeRecord[\"action\"], number>>(\n    (acc, c) => {\n      acc[c.action] += 1;\n      return acc;\n    },\n    { create: 0, update: 0, remove: 0, skip: 0, warn: 0 },\n  );\n  lines.push(\"\");\n  lines.push(\n    `summary: ${tally.create} created, ${tally.update} updated, ` +\n      `${tally.remove} removed, ${tally.skip} skipped, ${tally.warn} warning(s)`,\n  );\n\n  return lines.join(\"\\n\");\n}\n\n// ─────────────────────────────────────────────────────────────────────────\n// Command dispatch\n// ─────────────────────────────────────────────────────────────────────────\n\n/** A command module: takes the post-command argv slice, returns an exit code. */\ntype CommandModule = { run: (argv: string[]) => Promise<number> | number };\n\n/** Lazy command loaders — keyed by the first positional. Imported on demand. */\nconst COMMANDS: Record<string, () => Promise<CommandModule>> = {\n  detect: () => import(\"./commands/detect.js\"),\n  install: () => import(\"./commands/install.js\"),\n  uninstall: () => import(\"./commands/uninstall.js\"),\n  // `upgrade` is the single \"bring everything current\" verb (re-render host\n  // config + refresh the home pointer + managed channel guidance). `sync` and\n  // `update` are kept as back-compat aliases that route to the same module so\n  // existing scripts/docs keep working without a second concept to learn.\n  upgrade: () => import(\"./commands/upgrade.js\"),\n  sync: () => import(\"./commands/upgrade.js\"),\n  update: () => import(\"./commands/upgrade.js\"),\n  package: () => import(\"./commands/package.js\"),\n  doctor: () => import(\"./commands/doctor.js\"),\n  status: () => import(\"./commands/status.js\"),\n  telemetry: () => import(\"./commands/telemetry.js\"),\n  usage: () => import(\"./commands/usage.js\"),\n  leaderboard: () => import(\"./commands/leaderboard.js\"),\n  hook: () => import(\"./commands/hook.js\"),\n  serve: () => import(\"./commands/serve.js\"),\n  // Hidden (omitted from USAGE): the opt-in host-native turn-usage entrypoint an\n  // AfterModel / PostInvocation hook points at. Always exits 0; records a\n  // distinct `model_turn` row. See cli/commands/usage-event.ts.\n  \"usage-event\": () => import(\"./commands/usage-event.js\"),\n};\n\n/** Default program name; an embedding SDK CLI overrides it via {@link MainOptions}. */\nexport const DEFAULT_PROGRAM_NAME = \"agent-connector\";\n\n/**\n * One-line usage signature per command — the single central copy behind\n * `<command> --help` and the friendly bad-flag error. Command modules use\n * node:util parseArgs (strict), which THROWS on an unknown flag; without the\n * dispatcher-level handling in {@link main}, `agent-connector install --help`\n * would die with a raw ERR_PARSE_ARGS stack trace — the very invocation the\n * root help tells users to run.\n */\nconst COMMAND_USAGE: Record<string, string> = {\n  detect: \"detect [--json] [--project <dir>]\",\n  install:\n    \"install [--method direct|marketplace] [--connector <path>] [--scope user|project] [--targets a,b] [--project <dir>] [--dry-run] [--force]\",\n  uninstall:\n    \"uninstall [--method auto|direct|marketplace] [--connector <path>] [--connector-id <id>] [--scope user|project] [--targets a,b] [--project <dir>] [--dry-run] [--purge]\",\n  upgrade:\n    \"upgrade [--method direct|marketplace] [--channel stable|latest] [--connector <path>] [--scope user|project] [--targets a,b] [--project <dir>] [--dry-run]\",\n  sync: \"sync — alias of upgrade (see `upgrade --help`)\",\n  update: \"update — alias of upgrade (see `upgrade --help`)\",\n  package:\n    \"package [--connector <path>] [--format <fmt>|all] [--out <dir>] [--project <dir>] [--dry-run]\",\n  doctor:\n    \"doctor [--targets a,b] [--connector <path>] [--scope user|project] [--project <dir>] [--probe] [--json]\",\n  status: \"status [--connector <path>] [--scope user|project] [--project <dir>] [--json]\",\n  telemetry:\n    \"telemetry report|export|leaderboard [--by <dim>] [--since <dur>] [--connector <id>] [--scope <slice>] [--format csv|json] [--out <file>] [--json]\",\n  usage:\n    \"usage report|export|leaderboard [--by <dim>] [--since <dur>] [--platform <id>] [--format csv|json] [--out <file>] [--json]\",\n  leaderboard: \"leaderboard [--since <dur>] [--connector <id>] [--scope <slice>] [--json]\",\n  hook: \"hook <platform> <event> --connector <id>   (internal — host hook configs point here)\",\n  serve:\n    \"serve --connector <id> [--scope user|project] [--host <platformId>] -- <command> [args...]   (internal — host MCP entries point here)\",\n};\n\n/**\n * Build the top-level usage string for a given program name. The brand replaces\n * \"agent-connector\" in the title, the `usage:` line, and the per-command help\n * footer so an embedded CLI (e.g. `acme-db`) reads as its own tool.\n */\nfunction buildUsage(programName: string): string {\n  return `${programName} — write your MCP server + hooks once, install everywhere.\n\nusage: ${programName} <command> [flags]\n\ncommands:\n  detect       List the AI-agent platforms installed on this machine.\n  install      Deploy a connector across its target platforms (--method direct writes host config; --method marketplace drives the host's plugin install).\n  uninstall    Remove a connector's registrations (--method auto reverses whichever method is actually installed).\n  upgrade      Bring everything current: re-render host config + heal the home pointer + managed update guidance (alias: update, sync).\n  package      Emit a marketplace/extension bundle (9 host formats, or the standard artifacts mcp-server-json | mcpb).\n  doctor       Health-check every detected platform; non-zero exit on any failure.\n  status       Light install-state summary: which connectors are present on which hosts (always exits 0).\n  telemetry    Inspect local per-tool token telemetry (report | export | leaderboard).\n  usage        Inspect host-native token usage from agent CLI logs (report | export | leaderboard).\n  leaderboard  Three leaderboards: 🔌 MCP/plugin (mcp-self) + 🖥️ host/user (host-scan-logs) + 🛰️ host-native turns (host-native-live) — never summed.\n  hook         Universal json-stdio hook entrypoint (hosts call this).\n  serve        Telemetry-wrapping MCP stdio proxy (wraps a real server command).\n\nRun \\`${programName} <command> --help\\` for command-specific flags.`;\n}\n\n/** Options accepted by {@link main}. */\nexport interface MainOptions {\n  /**\n   * The brand shown in usage/help text. Defaults to {@link DEFAULT_PROGRAM_NAME}.\n   * An embedding SDK CLI (see cli/sdk.ts) passes its own bin name so every\n   * subcommand's help reads as the developer's tool.\n   */\n  programName?: string;\n}\n\nexport async function main(argv: string[], opts: MainOptions = {}): Promise<number> {\n  const programName = opts.programName ?? DEFAULT_PROGRAM_NAME;\n  activeProgramName = programName; // brand every fail() in this invocation\n  const usage = buildUsage(programName);\n  const command = argv[0];\n\n  if (command == null || command === \"--help\" || command === \"-h\" || command === \"help\") {\n    print(usage);\n    return command == null ? 1 : 0;\n  }\n  if (command === \"--version\" || command === \"-v\") {\n    print(`${programName} ${resolveOwnVersion()}`);\n    return 0;\n  }\n\n  const loader = COMMANDS[command];\n  if (!loader) {\n    process.stderr.write(`${programName}: unknown command \"${command}\"\\n\\n`);\n    process.stderr.write(`${usage}\\n`);\n    return 2;\n  }\n\n  // Per-command help: no command module defines a --help flag (strict parseArgs\n  // would throw on it), so answer it centrally from COMMAND_USAGE.\n  const rest = argv.slice(1);\n  if (rest.includes(\"--help\") || rest.includes(\"-h\")) {\n    const sig = COMMAND_USAGE[command];\n    if (sig) {\n      print(`usage: ${programName} ${sig}`);\n      return 0;\n    }\n  }\n\n  const mod = await loader();\n  try {\n    return await mod.run(rest);\n  } catch (err) {\n    // Friendly bad-flag errors: strict parseArgs throws ERR_PARSE_ARGS_* for an\n    // unknown/malformed option — print the message + the usage line instead of\n    // letting a raw stack trace reach the user. Everything else still rethrows\n    // (the bin entry reports those as fatal).\n    const code = (err as { code?: string }).code;\n    if (typeof code === \"string\" && code.startsWith(\"ERR_PARSE_ARGS\")) {\n      const message = err instanceof Error ? err.message : String(err);\n      const sig = COMMAND_USAGE[command];\n      if (sig) process.stderr.write(`usage: ${programName} ${sig}\\n`);\n      return fail(message);\n    }\n    throw err;\n  }\n}\n"],"mappings":";;;AAaA,SAAS,qBAAqB;AAcvB,SAAS,MAAM,MAAoB;AACxC,UAAQ,OAAO,MAAM,GAAG,IAAI;AAAA,CAAI;AAClC;AAQA,IAAI,oBAAoB;AAGjB,SAAS,KAAK,SAAiB,OAAO,GAAW;AACtD,UAAQ,OAAO,MAAM,GAAG,iBAAiB,KAAK,OAAO;AAAA,CAAI;AACzD,SAAO;AACT;AAQO,SAAS,oBAA4B;AAC1C,QAAM,MAAM,cAAc,YAAY,GAAG;AACzC,aAAW,OAAO,CAAC,mBAAmB,sBAAsB,uBAAuB,GAAG;AACpF,QAAI;AACF,YAAM,MAAM,IAAI,GAAG;AACnB,UAAI,IAAI,SAAS,6BAA6B,OAAO,IAAI,YAAY,UAAU;AAC7E,eAAO,IAAI;AAAA,MACb;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,WAAW,OAAgD;AACzE,MAAI,UAAU,UAAU,UAAU,UAAW,QAAO;AACpD,SAAO;AACT;AAMO,SAAS,aAAa,OAAqD;AAChF,MAAI,SAAS,QAAQ,MAAM,KAAK,MAAM,GAAI,QAAO;AACjD,QAAM,MAAM,MACT,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,MAAM,EAAE;AACzB,SAAO,IAAI,SAAS,IAAI,MAAM;AAChC;AAEA,IAAM,eAAuD;AAAA,EAC3D,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,MAAM;AACR;AAOO,SAAS,oBACd,QACA,MACQ;AACR,QAAM,QAAkB,CAAC;AACzB,QAAM,OAAO,OAAO,SAAS,sCAAiC;AAC9D,QAAM,KAAK,GAAG,IAAI,KAAK,OAAO,WAAW,IAAI,IAAI,EAAE;AAEnD,MAAI,OAAO,QAAQ,WAAW,GAAG;AAC/B,UAAM,KAAK,gBAAgB;AAAA,EAC7B,OAAO;AACL,eAAW,KAAK,OAAO,SAAS;AAC9B,YAAM,QAAQ,aAAa,EAAE,MAAM;AACnC,YAAM,QAAQ,EAAE,OAAO,KAAK,EAAE,IAAI,KAAK;AACvC,YAAM,KAAK,KAAK,KAAK,KAAK,EAAE,QAAQ,KAAK,EAAE,MAAM,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE;AAAA,IAC1E;AAAA,EACF;AAEA,MAAI,OAAO,SAAS,SAAS,GAAG;AAC9B,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,WAAW;AACtB,eAAW,KAAK,OAAO,SAAU,OAAM,KAAK,OAAO,CAAC,EAAE;AAAA,EACxD;AAEA,QAAM,QAAQ,OAAO,QAAQ;AAAA,IAC3B,CAAC,KAAK,MAAM;AACV,UAAI,EAAE,MAAM,KAAK;AACjB,aAAO;AAAA,IACT;AAAA,IACA,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,EAAE;AAAA,EACtD;AACA,QAAM,KAAK,EAAE;AACb,QAAM;AAAA,IACJ,YAAY,MAAM,MAAM,aAAa,MAAM,MAAM,aAC5C,MAAM,MAAM,aAAa,MAAM,IAAI,aAAa,MAAM,IAAI;AAAA,EACjE;AAEA,SAAO,MAAM,KAAK,IAAI;AACxB;AAUA,IAAM,WAAyD;AAAA,EAC7D,QAAQ,MAAM,OAAO,sBAAsB;AAAA,EAC3C,SAAS,MAAM,OAAO,uBAAuB;AAAA,EAC7C,WAAW,MAAM,OAAO,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKjD,SAAS,MAAM,OAAO,uBAAuB;AAAA,EAC7C,MAAM,MAAM,OAAO,uBAAuB;AAAA,EAC1C,QAAQ,MAAM,OAAO,uBAAuB;AAAA,EAC5C,SAAS,MAAM,OAAO,uBAAuB;AAAA,EAC7C,QAAQ,MAAM,OAAO,sBAAsB;AAAA,EAC3C,QAAQ,MAAM,OAAO,sBAAsB;AAAA,EAC3C,WAAW,MAAM,OAAO,yBAAyB;AAAA,EACjD,OAAO,MAAM,OAAO,qBAAqB;AAAA,EACzC,aAAa,MAAM,OAAO,2BAA2B;AAAA,EACrD,MAAM,MAAM,OAAO,oBAAoB;AAAA,EACvC,OAAO,MAAM,OAAO,qBAAqB;AAAA;AAAA;AAAA;AAAA,EAIzC,eAAe,MAAM,OAAO,2BAA2B;AACzD;AAGO,IAAM,uBAAuB;AAUpC,IAAM,gBAAwC;AAAA,EAC5C,QAAQ;AAAA,EACR,SACE;AAAA,EACF,WACE;AAAA,EACF,SACE;AAAA,EACF,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,SACE;AAAA,EACF,QACE;AAAA,EACF,QAAQ;AAAA,EACR,WACE;AAAA,EACF,OACE;AAAA,EACF,aAAa;AAAA,EACb,MAAM;AAAA,EACN,OACE;AACJ;AAOA,SAAS,WAAW,aAA6B;AAC/C,SAAO,GAAG,WAAW;AAAA;AAAA,SAEd,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAgBZ,WAAW;AACnB;AAYA,eAAsB,KAAK,MAAgB,OAAoB,CAAC,GAAoB;AAClF,QAAM,cAAc,KAAK,eAAe;AACxC,sBAAoB;AACpB,QAAM,QAAQ,WAAW,WAAW;AACpC,QAAM,UAAU,KAAK,CAAC;AAEtB,MAAI,WAAW,QAAQ,YAAY,YAAY,YAAY,QAAQ,YAAY,QAAQ;AACrF,UAAM,KAAK;AACX,WAAO,WAAW,OAAO,IAAI;AAAA,EAC/B;AACA,MAAI,YAAY,eAAe,YAAY,MAAM;AAC/C,UAAM,GAAG,WAAW,IAAI,kBAAkB,CAAC,EAAE;AAC7C,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,SAAS,OAAO;AAC/B,MAAI,CAAC,QAAQ;AACX,YAAQ,OAAO,MAAM,GAAG,WAAW,sBAAsB,OAAO;AAAA;AAAA,CAAO;AACvE,YAAQ,OAAO,MAAM,GAAG,KAAK;AAAA,CAAI;AACjC,WAAO;AAAA,EACT;AAIA,QAAM,OAAO,KAAK,MAAM,CAAC;AACzB,MAAI,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI,GAAG;AAClD,UAAM,MAAM,cAAc,OAAO;AACjC,QAAI,KAAK;AACP,YAAM,UAAU,WAAW,IAAI,GAAG,EAAE;AACpC,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,MAAM,MAAM,OAAO;AACzB,MAAI;AACF,WAAO,MAAM,IAAI,IAAI,IAAI;AAAA,EAC3B,SAAS,KAAK;AAKZ,UAAM,OAAQ,IAA0B;AACxC,QAAI,OAAO,SAAS,YAAY,KAAK,WAAW,gBAAgB,GAAG;AACjE,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,YAAM,MAAM,cAAc,OAAO;AACjC,UAAI,IAAK,SAAQ,OAAO,MAAM,UAAU,WAAW,IAAI,GAAG;AAAA,CAAI;AAC9D,aAAO,KAAK,OAAO;AAAA,IACrB;AACA,UAAM;AAAA,EACR;AACF;","names":[]}

package/dist/{chunk-KHO5WNTP.js → chunk-KVAAFYRR.js}

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import {
+  resolveSpawnCommand
+} from "./chunk-MEH7GC7R.js";
 
 // src/core/logger.ts
 var ORDER = {
@@ -24,7 +27,20 @@ var log = {
   debug: (...args) => emit("debug", args)
 };
 
+// src/core/spawn-child.ts
+import { spawn } from "child_process";
+function winQuoteArg(s) {
+  return `"${s.replace(/"/g, '""')}"`;
+}
+function spawnChild(command, args, options) {
+  const resolved = resolveSpawnCommand(command);
+  if (!resolved.needsShell) return spawn(resolved.file, args, options);
+  const line = [resolved.file, ...args].map(winQuoteArg).join(" ");
+  return spawn(line, { ...options, shell: true });
+}
+
 export {
-  log
+  log,
+  spawnChild
 };
-//# sourceMappingURL=chunk-KHO5WNTP.js.map
+//# sourceMappingURL=chunk-KVAAFYRR.js.map

package/dist/chunk-KVAAFYRR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/logger.ts","../src/core/spawn-child.ts"],"sourcesContent":["/**\n * core/logger — minimal leveled logger. Writes human output to stderr so stdout\n * stays clean for machine-readable payloads (hook replies, --json output).\n */\n\nexport type LogLevel = \"silent\" | \"error\" | \"warn\" | \"info\" | \"debug\";\n\nconst ORDER: Record<LogLevel, number> = {\n  silent: 0,\n  error: 1,\n  warn: 2,\n  info: 3,\n  debug: 4,\n};\n\nfunction currentLevel(): LogLevel {\n  const env = (process.env.AGENT_CONNECTOR_LOG ?? \"info\").toLowerCase();\n  return (env in ORDER ? env : \"info\") as LogLevel;\n}\n\nfunction emit(level: Exclude<LogLevel, \"silent\">, args: unknown[]): void {\n  if (ORDER[currentLevel()] < ORDER[level]) return;\n  const prefix = { error: \"✗\", warn: \"!\", info: \"›\", debug: \"·\" }[level];\n  // eslint-disable-next-line no-console\n  console.error(prefix, ...args);\n}\n\nexport const log = {\n  error: (...args: unknown[]) => emit(\"error\", args),\n  warn: (...args: unknown[]) => emit(\"warn\", args),\n  info: (...args: unknown[]) => emit(\"info\", args),\n  debug: (...args: unknown[]) => emit(\"debug\", args),\n};\n","/**\n * core/spawn-child — the cross-platform child_process.spawn wrapper.\n *\n * Kept SEPARATE from core/spawn.ts (pure string/path helpers, imported widely\n * and early) so that pulling in `node:child_process` here does not perturb the\n * module-eval order of test suites that vi.mock(\"node:child_process\").\n */\n\nimport { type ChildProcess, type SpawnOptions, spawn } from \"node:child_process\";\n\nimport { resolveSpawnCommand } from \"./spawn.js\";\n\n/**\n * Quote one token for a cmd.exe command line: wrap in double quotes, doubling any\n * embedded double quote. Sufficient for the paths / package names / flags we\n * spawn (connector config, not untrusted end-user input) — we intentionally do\n * not escape cmd metacharacters (& | ^ %), which never appear in those tokens.\n */\nfunction winQuoteArg(s: string): string {\n  return `\"${s.replace(/\"/g, '\"\"')}\"`;\n}\n\n/**\n * Cross-platform child spawn that fixes native-Windows package-runner launches.\n * Direct spawn on macOS/Linux. On win32 it routes through\n * {@link resolveSpawnCommand}; an `.exe` runs directly, while a `.cmd`/`.bat`\n * (npx.cmd, the agent-connector.cmd launcher) is launched via a SINGLE quoted\n * command line with `shell: true` — a string rather than an args array, which\n * Node requires for a batch file AND which avoids the DEP0190 deprecation that\n * `shell: true` + an args array triggers on Node ≥ 24.\n */\nexport function spawnChild(\n  command: string,\n  args: string[],\n  options: SpawnOptions,\n): ChildProcess {\n  const resolved = resolveSpawnCommand(command);\n  if (!resolved.needsShell) return spawn(resolved.file, args, options);\n  const line = [resolved.file, ...args].map(winQuoteArg).join(\" \");\n  return spawn(line, { ...options, shell: true });\n}\n"],"mappings":";;;;;;AAOA,IAAM,QAAkC;AAAA,EACtC,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO;AACT;AAEA,SAAS,eAAyB;AAChC,QAAM,OAAO,QAAQ,IAAI,uBAAuB,QAAQ,YAAY;AACpE,SAAQ,OAAO,QAAQ,MAAM;AAC/B;AAEA,SAAS,KAAK,OAAoC,MAAuB;AACvE,MAAI,MAAM,aAAa,CAAC,IAAI,MAAM,KAAK,EAAG;AAC1C,QAAM,SAAS,EAAE,OAAO,UAAK,MAAM,KAAK,MAAM,UAAK,OAAO,OAAI,EAAE,KAAK;AAErE,UAAQ,MAAM,QAAQ,GAAG,IAAI;AAC/B;AAEO,IAAM,MAAM;AAAA,EACjB,OAAO,IAAI,SAAoB,KAAK,SAAS,IAAI;AAAA,EACjD,MAAM,IAAI,SAAoB,KAAK,QAAQ,IAAI;AAAA,EAC/C,MAAM,IAAI,SAAoB,KAAK,QAAQ,IAAI;AAAA,EAC/C,OAAO,IAAI,SAAoB,KAAK,SAAS,IAAI;AACnD;;;ACxBA,SAA+C,aAAa;AAU5D,SAAS,YAAY,GAAmB;AACtC,SAAO,IAAI,EAAE,QAAQ,MAAM,IAAI,CAAC;AAClC;AAWO,SAAS,WACd,SACA,MACA,SACc;AACd,QAAM,WAAW,oBAAoB,OAAO;AAC5C,MAAI,CAAC,SAAS,WAAY,QAAO,MAAM,SAAS,MAAM,MAAM,OAAO;AACnE,QAAM,OAAO,CAAC,SAAS,MAAM,GAAG,IAAI,EAAE,IAAI,WAAW,EAAE,KAAK,GAAG;AAC/D,SAAO,MAAM,MAAM,EAAE,GAAG,SAAS,OAAO,KAAK,CAAC;AAChD;","names":[]}

package/dist/{chunk-O2SBA5KR.js → chunk-NJU275US.js}

@@ -30,7 +30,7 @@ var ADAPTER_REGISTRY = [
   },
   {
     id: "warp",
-    load: () => import("./warp-LLOSXR7A.js").then((m) => m.default)
+    load: () => import("./warp-X6MB67NT.js").then((m) => m.default)
   },
   // ts-plugin paradigm: OpenCode loads a generated plugin module that bridges
   // its in-process events to the universal hook entrypoint.
@@ -45,7 +45,7 @@ var ADAPTER_REGISTRY = [
   // the "kilo" extension so there is no fork-ordering constraint between them.
   {
     id: "kilo-cli",
-    load: () => import("./kilo-cli-2RNODHWY.js").then((m) => m.default)
+    load: () => import("./kilo-cli-QWUVXG2O.js").then((m) => m.default)
   },
   // Wave 1 — mcp-only adapters (no lifecycle hooks; MCP registration only).
   {
@@ -61,7 +61,7 @@ var ADAPTER_REGISTRY = [
   // globalStorage / .kilocode project scope). Distinct host from "kilo-cli".
   {
     id: "kilo",
-    load: () => import("./kilo-ISR5FBBJ.js").then((m) => m.default)
+    load: () => import("./kilo-PKAJCWPX.js").then((m) => m.default)
   },
   {
     id: "trae",
@@ -81,7 +81,7 @@ var ADAPTER_REGISTRY = [
   },
   {
     id: "zed",
-    load: () => import("./zed-HYOITK7F.js").then((m) => m.default)
+    load: () => import("./zed-NTCYW4V2.js").then((m) => m.default)
   },
   {
     id: "amp",
@@ -99,7 +99,7 @@ var ADAPTER_REGISTRY = [
   // surface only (writes <piDir>/skills/<name>/SKILL.md).
   {
     id: "pi",
-    load: () => import("./pi-SJPIL4VE.js").then((m) => m.default)
+    load: () => import("./pi-WMTUX6ES.js").then((m) => m.default)
   },
   // Wave 2 — json-stdio adapters (full hook dispatch via the universal entrypoint).
   // jetbrains-copilot before vscode-copilot is unnecessary (distinct hosts); grouped here.
@@ -109,15 +109,15 @@ var ADAPTER_REGISTRY = [
   },
   {
     id: "qwen-code",
-    load: () => import("./qwen-code-IFCM6BJY.js").then((m) => m.default)
+    load: () => import("./qwen-code-MRRIUQ3P.js").then((m) => m.default)
   },
   {
     id: "kiro",
-    load: () => import("./kiro-EKTRW424.js").then((m) => m.default)
+    load: () => import("./kiro-UQRY6EIO.js").then((m) => m.default)
   },
   {
     id: "kimi",
-    load: () => import("./kimi-Q5RG7CYT.js").then((m) => m.default)
+    load: () => import("./kimi-EVD7YKXS.js").then((m) => m.default)
   },
   {
     id: "crush",
@@ -235,4 +235,4 @@ export {
   detectInstalledPlatforms,
   detectRuntimeHost
 };
-//# sourceMappingURL=chunk-O2SBA5KR.js.map
+//# sourceMappingURL=chunk-NJU275US.js.map

package/dist/{chunk-WCETQWWK.js → chunk-OP4KBXUO.js}

@@ -1,19 +1,4 @@
 #!/usr/bin/env node
-import {
-  resolveSpawnCommand
-} from "./chunk-MEH7GC7R.js";
-
-// src/core/spawn-child.ts
-import { spawn } from "child_process";
-function winQuoteArg(s) {
-  return `"${s.replace(/"/g, '""')}"`;
-}
-function spawnChild(command, args, options) {
-  const resolved = resolveSpawnCommand(command);
-  if (!resolved.needsShell) return spawn(resolved.file, args, options);
-  const line = [resolved.file, ...args].map(winQuoteArg).join(" ");
-  return spawn(line, { ...options, shell: true });
-}
 
 // src/telemetry/jsonrpc.ts
 import { StringDecoder } from "string_decoder";
@@ -51,9 +36,8 @@ var LineBuffer = class {
 };
 
 export {
-  spawnChild,
   isObject,
   idKey,
   LineBuffer
 };
-//# sourceMappingURL=chunk-WCETQWWK.js.map
+//# sourceMappingURL=chunk-OP4KBXUO.js.map

package/dist/chunk-OP4KBXUO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/telemetry/jsonrpc.ts"],"sourcesContent":["/**\n * telemetry/jsonrpc — shared MCP stdio wire primitives.\n *\n * The MCP stdio transport is NEWLINE-DELIMITED JSON-RPC: one single-line JSON\n * object per message, terminated by `\\n` (no Content-Length framing). These\n * primitives — the message shape, the id key, the line buffer — are used by BOTH\n * the telemetry proxy (which tees + measures) and `doctor --probe` (which sends\n * a real initialize/ping/tools-list handshake), so framing + id-correlation are\n * byte-identical across the two paths. Extracted here rather than duplicated.\n */\n\nimport { StringDecoder } from \"node:string_decoder\";\n\n/** Any newline-delimited JSON-RPC message — request, response, or notification. */\nexport interface JsonRpcMessage {\n  jsonrpc?: unknown;\n  id?: unknown;\n  method?: unknown;\n  params?: unknown;\n  result?: unknown;\n  error?: unknown;\n}\n\nexport function isObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === \"object\" && v !== null;\n}\n\n/** JSON-RPC ids are number | string; normalize to a Map key. `null` → no key. */\nexport function idKey(id: unknown): string | null {\n  if (typeof id === \"string\") return `s:${id}`;\n  if (typeof id === \"number\") return `n:${id}`;\n  return null;\n}\n\n/**\n * Buffer a byte stream into complete `\\n`-terminated lines and invoke `onLine`\n * for each. Carriage returns are tolerated (some hosts emit CRLF). This is a\n * pure side-channel: it never owns or mutates the bytes being forwarded — the\n * caller has already written the original chunk downstream verbatim.\n */\nexport class LineBuffer {\n  private buf = \"\";\n  private readonly onLine: (line: string) => void;\n  // Incremental UTF-8 decoder: `data` events split on arbitrary byte\n  // boundaries, so a multi-byte sequence (emoji/CJK in a tool arg or result)\n  // can straddle two chunks. StringDecoder holds back a trailing partial\n  // sequence until it completes, keeping the measured copy byte-accurate.\n  // (The forwarded stream is untouched — this is only the tee copy.)\n  private readonly decoder = new StringDecoder(\"utf8\");\n\n  constructor(onLine: (line: string) => void) {\n    this.onLine = onLine;\n  }\n\n  push(chunk: Buffer): void {\n    this.buf += this.decoder.write(chunk);\n    let nl = this.buf.indexOf(\"\\n\");\n    while (nl !== -1) {\n      // Slice off one line (without the newline), tolerate a trailing CR.\n      let line = this.buf.slice(0, nl);\n      if (line.endsWith(\"\\r\")) line = line.slice(0, -1);\n      if (line.length > 0) this.onLine(line);\n      this.buf = this.buf.slice(nl + 1);\n      nl = this.buf.indexOf(\"\\n\");\n    }\n  }\n}\n"],"mappings":";;;AAWA,SAAS,qBAAqB;AAYvB,SAAS,SAAS,GAA0C;AACjE,SAAO,OAAO,MAAM,YAAY,MAAM;AACxC;AAGO,SAAS,MAAM,IAA4B;AAChD,MAAI,OAAO,OAAO,SAAU,QAAO,KAAK,EAAE;AAC1C,MAAI,OAAO,OAAO,SAAU,QAAO,KAAK,EAAE;AAC1C,SAAO;AACT;AAQO,IAAM,aAAN,MAAiB;AAAA,EACd,MAAM;AAAA,EACG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,UAAU,IAAI,cAAc,MAAM;AAAA,EAEnD,YAAY,QAAgC;AAC1C,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,KAAK,OAAqB;AACxB,SAAK,OAAO,KAAK,QAAQ,MAAM,KAAK;AACpC,QAAI,KAAK,KAAK,IAAI,QAAQ,IAAI;AAC9B,WAAO,OAAO,IAAI;AAEhB,UAAI,OAAO,KAAK,IAAI,MAAM,GAAG,EAAE;AAC/B,UAAI,KAAK,SAAS,IAAI,EAAG,QAAO,KAAK,MAAM,GAAG,EAAE;AAChD,UAAI,KAAK,SAAS,EAAG,MAAK,OAAO,IAAI;AACrC,WAAK,MAAM,KAAK,IAAI,MAAM,KAAK,CAAC;AAChC,WAAK,KAAK,IAAI,QAAQ,IAAI;AAAA,IAC5B;AAAA,EACF;AACF;","names":[]}