@ken-jo/agent-connector 0.3.1 → 0.4.1

package/dist/sdk/index.d.ts

@@ -0,0 +1,52 @@
+export { ConnectorConfigError, defineAction, defineCommand, defineConfigPatch, defineConnector, defineHook, defineMemory, defineNativeHook, defineSkill, defineStatusline, defineSubagent } from '../index.js';
+export { S as SURFACE_PREDICATES, a as SurfaceName, c as capabilitiesOf, h as hostsSupporting, s as surfaceSupport } from '../introspect-Nw8hTReX.js';
+import { P as PlatformId } from '../types-CRVrFWeU.js';
+export { A as ActionDef, a as ActionResult, b as AuthSpec, C as CommandDef, c as ConfigPatchDef, d as ConnectorConfig, E as EventPayloadMap, H as HookDefinition, e as HookEventName, f as HookParadigm, g as HookResponse, h as HooksConfig, i as HostCtx, I as InstallScope, J as JsonValue, M as MemoryDef, N as NativeHookDef, j as NativeHookEvent, k as NotificationEvent, l as PermissionRequestEvent, m as PlatformCapabilities, n as PlatformMemoryOverride, o as PlatformOverride, p as PostToolUseEvent, q as PostToolUseFailureEvent, r as PreCompactEvent, s as PreToolUseEvent, t as PublishConfig, R as ResolvedConnector, S as ServerDef, u as SessionEndEvent, v as SessionStartEvent, w as SkillDef, x as StatuslineContext, y as StatuslineDef, z as StopEvent, B as SubagentDef, D as SubagentStartEvent, F as SubagentStopEvent, G as SurfaceToolPolicy, T as TelemetryAccessor, K as TelemetryConfig, L as TelemetryUsageSummary, O as ToolFilter, Q as Transport, U as UserPromptSubmitEvent } from '../types-CRVrFWeU.js';
+
+/**
+ * sdk/helpers — host-aware authoring helpers for connector handlers.
+ *
+ * A handler (a hook, a statusline render, an action run) sees the host it is
+ * dispatched for via the {@link HostCtx} (`ctx.host`). These two helpers let a
+ * handler render a host-correct value without hardcoding a per-host branch:
+ *
+ *   • {@link toolName} — resolve a bare MCP tool name to the host's native
+ *     reference form (some hosts namespace MCP tools as `mcp__<id>__<tool>`).
+ *   • {@link style}    — wrap text in an ANSI escape ONLY on hosts that render
+ *     ANSI in a status line / output; plain everywhere else.
+ *
+ * Both are deliberately MODEST, documented best-effort lists — NOT a capability
+ * query. The per-host convention each encodes is not centrally modeled in
+ * {@link PlatformCapabilities} yet; if either set grows it should migrate to a
+ * capability flag (a `mcpToolPrefix` / `rendersAnsi` flag) the adapter declares.
+ */
+
+/**
+ * Resolve a bare MCP tool name to the host's native reference form.
+ *
+ * On a {@link PREFIXED_HOSTS} host the result is `mcp__<connectorId>__<baseName>`
+ * (how those hosts surface a connector's MCP tools); on every other host it is
+ * the bare `baseName`. When the host prefixes but no `connectorId` is supplied
+ * the helper falls back to the bare name rather than emitting a malformed
+ * `mcp__undefined__…` reference — it NEVER throws.
+ */
+declare function toolName(ctx: {
+    host: PlatformId;
+    connectorId?: string;
+}, baseName: string): string;
+/**
+ * Style `text` with an ANSI SGR escape on hosts that render it (a status line /
+ * terminal output), plain everywhere else.
+ *
+ * When `ctx.host` is in {@link ANSI_HOSTS} and `codes.ansi` is provided, returns
+ * `\x1b[<ansi>m<text>\x1b[0m`; otherwise returns `text` unchanged (an
+ * IDE-embedded host, or no `ansi` code given). `codes.ansi` is the SGR
+ * parameter(s), e.g. `"1"` (bold) or `"1;32"` (bold green).
+ */
+declare function style(ctx: {
+    host: PlatformId;
+}, text: string, codes: {
+    ansi?: string;
+}): string;
+
+export { PlatformId, style, toolName };

package/dist/sdk/index.js

@@ -0,0 +1,82 @@
+#!/usr/bin/env node
+import {
+  SURFACE_PREDICATES,
+  capabilitiesOf,
+  hostsSupporting,
+  surfaceSupport
+} from "../chunk-XJ4S47CT.js";
+import {
+  ConnectorConfigError,
+  defineAction,
+  defineCommand,
+  defineConfigPatch,
+  defineConnector,
+  defineHook,
+  defineMemory,
+  defineNativeHook,
+  defineSkill,
+  defineStatusline,
+  defineSubagent
+} from "../chunk-4ENJK5S2.js";
+import "../chunk-DCKFYWGM.js";
+import "../chunk-FAHIMJRU.js";
+import "../chunk-N6HH7K6P.js";
+import "../chunk-TRQKHP7D.js";
+
+// src/sdk/helpers.ts
+var PREFIXED_HOSTS = /* @__PURE__ */ new Set([
+  "claude-code",
+  "codex",
+  "kimi",
+  "cursor",
+  "copilot-cli",
+  "vscode-copilot",
+  "jetbrains-copilot",
+  "gemini-cli",
+  "qwen-code"
+]);
+function toolName(ctx, baseName) {
+  if (PREFIXED_HOSTS.has(ctx.host) && ctx.connectorId) {
+    return `mcp__${ctx.connectorId}__${baseName}`;
+  }
+  return baseName;
+}
+var ANSI_HOSTS = /* @__PURE__ */ new Set([
+  "claude-code",
+  "codex",
+  "gemini-cli",
+  "qwen-code",
+  "cursor",
+  "copilot-cli",
+  "opencode",
+  "droid",
+  "crush",
+  "goose",
+  "amp"
+]);
+function style(ctx, text, codes) {
+  if (codes.ansi && ANSI_HOSTS.has(ctx.host)) {
+    return `\x1B[${codes.ansi}m${text}\x1B[0m`;
+  }
+  return text;
+}
+export {
+  ConnectorConfigError,
+  SURFACE_PREDICATES,
+  capabilitiesOf,
+  defineAction,
+  defineCommand,
+  defineConfigPatch,
+  defineConnector,
+  defineHook,
+  defineMemory,
+  defineNativeHook,
+  defineSkill,
+  defineStatusline,
+  defineSubagent,
+  hostsSupporting,
+  style,
+  surfaceSupport,
+  toolName
+};
+//# sourceMappingURL=index.js.map

package/dist/sdk/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/sdk/helpers.ts"],"sourcesContent":["/**\n * sdk/helpers — host-aware authoring helpers for connector handlers.\n *\n * A handler (a hook, a statusline render, an action run) sees the host it is\n * dispatched for via the {@link HostCtx} (`ctx.host`). These two helpers let a\n * handler render a host-correct value without hardcoding a per-host branch:\n *\n *   • {@link toolName} — resolve a bare MCP tool name to the host's native\n *     reference form (some hosts namespace MCP tools as `mcp__<id>__<tool>`).\n *   • {@link style}    — wrap text in an ANSI escape ONLY on hosts that render\n *     ANSI in a status line / output; plain everywhere else.\n *\n * Both are deliberately MODEST, documented best-effort lists — NOT a capability\n * query. The per-host convention each encodes is not centrally modeled in\n * {@link PlatformCapabilities} yet; if either set grows it should migrate to a\n * capability flag (a `mcpToolPrefix` / `rendersAnsi` flag) the adapter declares.\n */\n\nimport type { PlatformId } from \"../core/types.js\";\n\n/**\n * Hosts that namespace MCP tools as `mcp__<connectorId>__<tool>` — the\n * `mcp__`-prefix convention Claude Code popularized and most MCP-client agents\n * adopted. CONFIRMED in-repo via the adapters' own `mcp__` PreToolUse matchers\n * for claude-code, codex, and kimi; the remaining members are MCP-client hosts\n * the convention applies to but are not separately verified here (a wrong\n * inclusion only ever yields a name the host doesn't resolve, the same outcome\n * as wrongly EXCLUDING a prefixing host — and an author can always construct the\n * reference themselves). This is a SMALL explicit set, not a capability query;\n * if it grows, migrate it to a per-adapter `mcpToolPrefix` capability flag.\n * (Follow-up: spot-verify gemini-cli / a copilot variant on a live box.)\n */\nconst PREFIXED_HOSTS: ReadonlySet<PlatformId> = new Set<PlatformId>([\n  \"claude-code\",\n  \"codex\",\n  \"kimi\",\n  \"cursor\",\n  \"copilot-cli\",\n  \"vscode-copilot\",\n  \"jetbrains-copilot\",\n  \"gemini-cli\",\n  \"qwen-code\",\n]);\n\n/**\n * Resolve a bare MCP tool name to the host's native reference form.\n *\n * On a {@link PREFIXED_HOSTS} host the result is `mcp__<connectorId>__<baseName>`\n * (how those hosts surface a connector's MCP tools); on every other host it is\n * the bare `baseName`. When the host prefixes but no `connectorId` is supplied\n * the helper falls back to the bare name rather than emitting a malformed\n * `mcp__undefined__…` reference — it NEVER throws.\n */\nexport function toolName(\n  ctx: { host: PlatformId; connectorId?: string },\n  baseName: string,\n): string {\n  if (PREFIXED_HOSTS.has(ctx.host) && ctx.connectorId) {\n    return `mcp__${ctx.connectorId}__${baseName}`;\n  }\n  return baseName;\n}\n\n/**\n * Hosts that render ANSI escape sequences in a status line / terminal output —\n * the CLI/TUI hosts. IDE-embedded hosts (where output lands in a webview /\n * editor panel that shows the raw escape) are deliberately EXCLUDED. Like\n * {@link PREFIXED_HOSTS} this is a documented best-effort list, not a capability\n * query; migrate it to a `rendersAnsi` capability flag if it grows.\n */\nconst ANSI_HOSTS: ReadonlySet<PlatformId> = new Set<PlatformId>([\n  \"claude-code\",\n  \"codex\",\n  \"gemini-cli\",\n  \"qwen-code\",\n  \"cursor\",\n  \"copilot-cli\",\n  \"opencode\",\n  \"droid\",\n  \"crush\",\n  \"goose\",\n  \"amp\",\n]);\n\n/**\n * Style `text` with an ANSI SGR escape on hosts that render it (a status line /\n * terminal output), plain everywhere else.\n *\n * When `ctx.host` is in {@link ANSI_HOSTS} and `codes.ansi` is provided, returns\n * `\\x1b[<ansi>m<text>\\x1b[0m`; otherwise returns `text` unchanged (an\n * IDE-embedded host, or no `ansi` code given). `codes.ansi` is the SGR\n * parameter(s), e.g. `\"1\"` (bold) or `\"1;32\"` (bold green).\n */\nexport function style(\n  ctx: { host: PlatformId },\n  text: string,\n  codes: { ansi?: string },\n): string {\n  if (codes.ansi && ANSI_HOSTS.has(ctx.host)) {\n    return `\\x1b[${codes.ansi}m${text}\\x1b[0m`;\n  }\n  return text;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,IAAM,iBAA0C,oBAAI,IAAgB;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAWM,SAAS,SACd,KACA,UACQ;AACR,MAAI,eAAe,IAAI,IAAI,IAAI,KAAK,IAAI,aAAa;AACnD,WAAO,QAAQ,IAAI,WAAW,KAAK,QAAQ;AAAA,EAC7C;AACA,SAAO;AACT;AASA,IAAM,aAAsC,oBAAI,IAAgB;AAAA,EAC9D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAWM,SAAS,MACd,KACA,MACA,OACQ;AACR,MAAI,MAAM,QAAQ,WAAW,IAAI,IAAI,IAAI,GAAG;AAC1C,WAAO,QAAQ,MAAM,IAAI,IAAI,IAAI;AAAA,EACnC;AACA,SAAO;AACT;","names":[]}

package/dist/sdk/test.d.ts

@@ -0,0 +1,74 @@
+import { P as PlatformId, e as HookEventName, R as ResolvedConnector } from '../types-CRVrFWeU.js';
+import { a as SurfaceName } from '../introspect-Nw8hTReX.js';
+
+/**
+ * sdk/test-harness — the SHIPPED, OFFLINE behavioral harness.
+ *
+ * Two read-only tools a connector author runs WITHOUT installing anything or
+ * touching the host's filesystem:
+ *
+ *   • `explain(connector)` — the static per-host × per-DECLARED-surface matrix:
+ *     for every registered host and every surface the connector actually ships,
+ *     is it `native` (the host can honor it), `disabled` (the connector opted
+ *     out for that host via `platforms[host].<surface> === false`), or
+ *     `skip-warn` (the host cannot honor it → install would skip-warn)?
+ *
+ *   • `simulate(connector, opts)` — runs the REAL adapter parse → handler →
+ *     format chain INLINE against a host-shaped raw payload and reports whether
+ *     the host actually HONORS the connector's response (the trustworthy part:
+ *     it surfaces the documented degradations, e.g. Codex silently dropping a
+ *     UserPromptSubmit "context" injection that has no stdout path).
+ *
+ * It deliberately does NOT import the runtime entrypoints (runHook /
+ * runStatusline) — those load the REGISTERED connector from disk and record
+ * telemetry. The harness instead re-implements the tiny parse→handler→format
+ * chain against the in-memory connector + the adapter, mirroring the runtime's
+ * input tolerance (empty/malformed payload → `{}`) and its fail-safe envelope.
+ */
+
+/** One cell of the {@link explain} matrix: a host × a declared surface. */
+interface ExplainRow {
+    host: PlatformId;
+    surface: SurfaceName;
+    /**
+     *  - "native"    — the host's capabilities pass the surface predicate.
+     *  - "disabled"  — the connector opted out for this host
+     *                  (`platforms[host].<surface> === false`).
+     *  - "skip-warn" — the host cannot honor it; install would skip-warn.
+     */
+    support: "native" | "skip-warn" | "disabled";
+    reason: string;
+}
+/**
+ * The static support matrix: every registered host × every surface the
+ * connector declares. Rows are sorted by host then surface for stable output.
+ * Pure read of the adapter capabilities — installs nothing, writes nothing.
+ */
+declare function explain(connector: ResolvedConnector): Promise<ExplainRow[]>;
+/** What to drive through the harness: one host, one surface, one raw payload. */
+interface SimulateOptions {
+    surface: "hooks" | "statusline";
+    host: PlatformId | string;
+    /** REQUIRED when `surface === "hooks"`: which normalized lifecycle event. */
+    event?: HookEventName;
+    /** The host-shaped RAW payload (what the host would pipe in on stdin). */
+    input: unknown;
+}
+/** The harness verdict: did the host actually honor the connector's response? */
+interface SimulateResult {
+    /** True when the host's native reply carries the connector's intent. */
+    honored: boolean;
+    /** The host-native stdout the adapter would emit (when there is one). */
+    hostReply?: string;
+    /** Human-readable why — names the documented degradation when honored:false. */
+    reason: string;
+}
+/**
+ * Run the connector against ONE host-shaped payload through the REAL adapter
+ * path and report whether the host honors the response. Self-contained (does not
+ * touch the registered-connector loader or telemetry) and fail-safe: any throw
+ * in the chain degrades to `honored:false` with the error message, never rejects.
+ */
+declare function simulate(connector: ResolvedConnector, opts: SimulateOptions): Promise<SimulateResult>;
+
+export { type ExplainRow, type SimulateOptions, type SimulateResult, explain, simulate };

package/dist/sdk/test.js

@@ -0,0 +1,292 @@
+#!/usr/bin/env node
+import {
+  compileMatcher,
+  eventMatcherSubject
+} from "../chunk-2AVLX7GH.js";
+import "../chunk-BCHWFTV4.js";
+import "../chunk-KHO5WNTP.js";
+import {
+  SURFACE_PREDICATES
+} from "../chunk-XJ4S47CT.js";
+import "../chunk-24IDL5RW.js";
+import "../chunk-4ENJK5S2.js";
+import {
+  allAdapters,
+  loadAdapter
+} from "../chunk-DCKFYWGM.js";
+import "../chunk-FAHIMJRU.js";
+import "../chunk-N6HH7K6P.js";
+import "../chunk-TRQKHP7D.js";
+
+// src/sdk/test-harness.ts
+function declaredGlobalSurfaces(connector) {
+  const out = [];
+  if (connector.server) out.push("server");
+  if (Object.keys(connector.hooks).length > 0) out.push("hooks");
+  if (connector.commands.length > 0) out.push("commands");
+  if (connector.skills.length > 0) out.push("skills");
+  if (connector.subagents.length > 0) out.push("subagents");
+  if (connector.memory.length > 0) out.push("memory");
+  if (connector.statusline) out.push("statusline");
+  if (connector.actions.length > 0) out.push("actions");
+  return out;
+}
+function platformScopedSurfacesFor(override) {
+  const out = [];
+  if (!override) return out;
+  if ((override.configPatch?.length ?? 0) > 0) out.push("configPatch");
+  if (override.nativeHooks != null && Object.keys(override.nativeHooks).length > 0) {
+    out.push("nativeHooks");
+  }
+  return out;
+}
+function isDisabledForHost(connector, host, surface) {
+  const override = connector.platforms[host];
+  if (!override) return false;
+  switch (surface) {
+    case "server":
+      return override.server === false;
+    case "hooks":
+      return override.hooks === false;
+    case "commands":
+      return override.commands === false;
+    case "skills":
+      return override.skills === false;
+    case "subagents":
+      return override.subagents === false;
+    case "memory":
+      return override.memory === false;
+    case "statusline":
+      return override.statusline === false;
+    case "actions":
+    case "configPatch":
+    case "nativeHooks":
+      return false;
+  }
+}
+async function explain(connector) {
+  const globalSurfaces = declaredGlobalSurfaces(connector);
+  const adapters = await allAdapters();
+  const rows = [];
+  for (const adapter of adapters) {
+    const override = connector.platforms[adapter.id];
+    const surfaces = [
+      ...globalSurfaces,
+      ...platformScopedSurfacesFor(override)
+    ];
+    for (const surface of surfaces) {
+      if (isDisabledForHost(connector, adapter.id, surface)) {
+        rows.push({
+          host: adapter.id,
+          surface,
+          support: "disabled",
+          reason: `connector opted out for ${adapter.id} (platforms.${adapter.id}.${surface} = false)`
+        });
+        continue;
+      }
+      const native = SURFACE_PREDICATES[surface](adapter.capabilities);
+      rows.push({
+        host: adapter.id,
+        surface,
+        support: native ? "native" : "skip-warn",
+        reason: explainReason(adapter.id, surface, native)
+      });
+    }
+  }
+  rows.sort(
+    (a, b) => a.host === b.host ? a.surface.localeCompare(b.surface) : a.host.localeCompare(b.host)
+  );
+  return rows;
+}
+function explainReason(host, surface, native) {
+  if (surface === "server") {
+    return native ? `${host} advertises an MCP transport (capability-based; registration may be host-managed)` : `${host} advertises no MCP transport; install skip-warns`;
+  }
+  return native ? `${host} natively supports ${surface}` : `${host} cannot honor ${surface}; install skip-warns`;
+}
+function coerceInput(input) {
+  if (input == null) return {};
+  if (typeof input === "string") {
+    const trimmed = input.trim();
+    if (trimmed === "") return {};
+    try {
+      return JSON.parse(trimmed);
+    } catch {
+      return {};
+    }
+  }
+  return input;
+}
+function normalizeResponse(value) {
+  if (value == null || typeof value !== "object") return {};
+  return value;
+}
+function parseReplyStdout(stdout) {
+  if (stdout == null || stdout.trim() === "") return void 0;
+  try {
+    const value = JSON.parse(stdout);
+    return value != null && typeof value === "object" ? value : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function deepEqual(a, b) {
+  if (a === b) return true;
+  if (typeof a !== typeof b || a == null || b == null) return false;
+  if (typeof a !== "object") return false;
+  const aArr = Array.isArray(a);
+  if (aArr !== Array.isArray(b)) return false;
+  if (aArr) {
+    const x2 = a;
+    const y2 = b;
+    return x2.length === y2.length && x2.every((v, i) => deepEqual(v, y2[i]));
+  }
+  const x = a;
+  const y = b;
+  const xk = Object.keys(x);
+  const yk = Object.keys(y);
+  return xk.length === yk.length && xk.every((k) => deepEqual(x[k], y[k]));
+}
+function judgeHookHonor(host, event, response, stdout) {
+  const decision = response.decision;
+  if (decision === void 0 || decision === "allow") {
+    return { honored: true, reason: "pass-through allow" };
+  }
+  const reply = parseReplyStdout(stdout);
+  const hso = reply?.hookSpecificOutput;
+  if (decision === "context") {
+    const want = response.additionalContext;
+    const got = hso?.additionalContext ?? reply?.systemMessage;
+    if (reply && got === want) {
+      return { honored: true, reason: `${host} injects context on ${event}` };
+    }
+    return {
+      honored: false,
+      reason: `${host} drops context on ${event} (no stdout path)`
+    };
+  }
+  if (decision === "deny") {
+    if (!reply) {
+      return {
+        honored: false,
+        reason: `${host} drops deny on ${event} (deny not honored; fails open to allow)`
+      };
+    }
+    if (hso?.permissionDecision === "deny" || hso?.decision?.behavior === "deny") {
+      return { honored: true, reason: `${host} blocks ${event}` };
+    }
+    if (reply.decision === "block") {
+      return {
+        honored: true,
+        reason: `${host} continues the session/subagent on ${event} (persistence) \u2014 NOT a block`
+      };
+    }
+    if (hso?.additionalContext != null) {
+      return {
+        honored: false,
+        reason: `${host} degrades deny to a context note on ${event}; spawn/failure not blocked`
+      };
+    }
+    return {
+      honored: false,
+      reason: `${host} drops deny on ${event} (deny not honored; fails open to allow)`
+    };
+  }
+  if (decision === "ask") {
+    if (hso?.permissionDecision === "ask") {
+      return { honored: true, reason: `${host} asks on ${event}` };
+    }
+    if (event === "PermissionRequest" && !reply) {
+      return {
+        honored: true,
+        reason: `${host} shows the native confirmation dialog on ${event} (the ask)`
+      };
+    }
+    return {
+      honored: false,
+      reason: `${host} drops ask on ${event} (no ask path)`
+    };
+  }
+  const wrote = hso?.updatedInput ?? hso?.decision?.updatedInput;
+  if (reply && wrote !== void 0 && deepEqual(wrote, response.updatedInput)) {
+    return { honored: true, reason: `${host} rewrites tool input on ${event}` };
+  }
+  return {
+    honored: false,
+    reason: `${host} drops modify on ${event} (modify not honored)`
+  };
+}
+async function simulate(connector, opts) {
+  try {
+    const adapter = await loadAdapter(opts.host);
+    if (!adapter) {
+      return { honored: false, reason: `unknown host "${opts.host}"` };
+    }
+    if (opts.surface === "statusline") {
+      if (!(adapter.capabilities.supportsStatusline ?? false) || !adapter.parseStatusInput || !adapter.formatStatusOutput) {
+        return { honored: false, reason: `${opts.host} has no statusline surface` };
+      }
+      if (!connector.statusline || typeof connector.statusline.render !== "function") {
+        return { honored: false, reason: "connector declares no statusline" };
+      }
+      const ctx = adapter.parseStatusInput(coerceInput(opts.input));
+      ctx.connectorId = connector.id;
+      if (ctx.capabilities == null) ctx.capabilities = adapter.capabilities;
+      const perHost2 = connector.statusline.hosts?.[opts.host]?.render;
+      const render = typeof perHost2 === "function" ? perHost2 : connector.statusline.render;
+      const rendered = await render(ctx);
+      const line = rendered == null ? "" : String(rendered);
+      const reply2 = adapter.formatStatusOutput(line);
+      return {
+        honored: true,
+        ...reply2.stdout !== void 0 ? { hostReply: reply2.stdout } : {},
+        reason: "rendered"
+      };
+    }
+    const event = opts.event;
+    if (!event) {
+      return { honored: false, reason: 'event is required when surface === "hooks"' };
+    }
+    if (!adapter.parseEvent || !adapter.formatReply) {
+      return { honored: false, reason: `${opts.host} has no hook runtime (mcp-only)` };
+    }
+    const evt = adapter.parseEvent(event, coerceInput(opts.input));
+    evt.connectorId = connector.id;
+    evt.capabilities = adapter.capabilities;
+    const definition = connector.hooks[event];
+    if (!definition || typeof definition.handler !== "function") {
+      return { honored: false, reason: `connector declares no ${event} handler` };
+    }
+    const subject = eventMatcherSubject(evt);
+    if (subject !== void 0) {
+      const re = compileMatcher(definition.matcher);
+      if (re && !re.test(subject)) {
+        return {
+          honored: true,
+          reason: `matcher excludes ${subject} (handler not run)`
+        };
+      }
+    }
+    const perHost = definition.hosts?.[opts.host]?.handler;
+    const handler = typeof perHost === "function" ? perHost : definition.handler;
+    const response = normalizeResponse(
+      await handler(evt)
+    );
+    const reply = adapter.formatReply(event, response);
+    const verdict = judgeHookHonor(String(opts.host), event, response, reply.stdout);
+    return {
+      honored: verdict.honored,
+      ...reply.stdout !== void 0 ? { hostReply: reply.stdout } : {},
+      reason: verdict.reason
+    };
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    const verb = opts.surface === "statusline" ? "render" : "handler";
+    return { honored: false, reason: `${verb} threw: ${message}` };
+  }
+}
+export {
+  explain,
+  simulate
+};
+//# sourceMappingURL=test.js.map

package/dist/sdk/test.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/sdk/test-harness.ts"],"sourcesContent":["/**\n * sdk/test-harness — the SHIPPED, OFFLINE behavioral harness.\n *\n * Two read-only tools a connector author runs WITHOUT installing anything or\n * touching the host's filesystem:\n *\n *   • `explain(connector)` — the static per-host × per-DECLARED-surface matrix:\n *     for every registered host and every surface the connector actually ships,\n *     is it `native` (the host can honor it), `disabled` (the connector opted\n *     out for that host via `platforms[host].<surface> === false`), or\n *     `skip-warn` (the host cannot honor it → install would skip-warn)?\n *\n *   • `simulate(connector, opts)` — runs the REAL adapter parse → handler →\n *     format chain INLINE against a host-shaped raw payload and reports whether\n *     the host actually HONORS the connector's response (the trustworthy part:\n *     it surfaces the documented degradations, e.g. Codex silently dropping a\n *     UserPromptSubmit \"context\" injection that has no stdout path).\n *\n * It deliberately does NOT import the runtime entrypoints (runHook /\n * runStatusline) — those load the REGISTERED connector from disk and record\n * telemetry. The harness instead re-implements the tiny parse→handler→format\n * chain against the in-memory connector + the adapter, mirroring the runtime's\n * input tolerance (empty/malformed payload → `{}`) and its fail-safe envelope.\n */\n\nimport type {\n  HookEventName,\n  HookResponse,\n  PlatformId,\n  PlatformOverride,\n  ResolvedConnector,\n} from \"../core/types.js\";\nimport { allAdapters, loadAdapter } from \"../adapters/registry.js\";\nimport type { NormalizedEvent } from \"../adapters/spi.js\";\nimport {\n  compileMatcher,\n  eventMatcherSubject,\n} from \"../runtime/hook-entrypoint.js\";\nimport type { SurfaceName } from \"./introspect.js\";\nimport { SURFACE_PREDICATES } from \"./introspect.js\";\n\n// ─────────────────────────────────────────────────────────────────────────\n// explain — the static per-host × per-declared-surface matrix\n// ─────────────────────────────────────────────────────────────────────────\n\n/** One cell of the {@link explain} matrix: a host × a declared surface. */\nexport interface ExplainRow {\n  host: PlatformId;\n  surface: SurfaceName;\n  /**\n   *  - \"native\"    — the host's capabilities pass the surface predicate.\n   *  - \"disabled\"  — the connector opted out for this host\n   *                  (`platforms[host].<surface> === false`).\n   *  - \"skip-warn\" — the host cannot honor it; install would skip-warn.\n   */\n  support: \"native\" | \"skip-warn\" | \"disabled\";\n  reason: string;\n}\n\n/**\n * The GLOBAL surfaces a connector declares (these apply to every host — only\n * declared surfaces get a matrix row). The two platform-scoped surfaces\n * (`configPatch` / `nativeHooks`) are deliberately EXCLUDED here: they are\n * declared under one specific `platforms[host]`, so each is added PER HOST in\n * {@link explain} (see {@link platformScopedSurfacesFor}) — adding them globally\n * would falsely promise a configPatch row on hosts that never declared it.\n */\nfunction declaredGlobalSurfaces(connector: ResolvedConnector): SurfaceName[] {\n  const out: SurfaceName[] = [];\n  if (connector.server) out.push(\"server\");\n  if (Object.keys(connector.hooks).length > 0) out.push(\"hooks\");\n  if (connector.commands.length > 0) out.push(\"commands\");\n  if (connector.skills.length > 0) out.push(\"skills\");\n  if (connector.subagents.length > 0) out.push(\"subagents\");\n  if (connector.memory.length > 0) out.push(\"memory\");\n  if (connector.statusline) out.push(\"statusline\");\n  if (connector.actions.length > 0) out.push(\"actions\");\n  return out;\n}\n\n/**\n * The platform-scoped surfaces (`configPatch` / `nativeHooks`) THIS host\n * actually declares — keyed off the host's own `platforms[host]` override, so a\n * configPatch declared under claude-code never shows up as a row for codex.\n */\nfunction platformScopedSurfacesFor(\n  override: PlatformOverride | undefined,\n): SurfaceName[] {\n  const out: SurfaceName[] = [];\n  if (!override) return out;\n  if ((override.configPatch?.length ?? 0) > 0) out.push(\"configPatch\");\n  if (override.nativeHooks != null && Object.keys(override.nativeHooks).length > 0) {\n    out.push(\"nativeHooks\");\n  }\n  return out;\n}\n\n/**\n * Is the surface explicitly DISABLED for this host? Mirrors the per-host opt-out\n * the installer honors: a boolean-or-object surface override is \"disabled\" only\n * when set to the literal `false` (the object form is a tuning, not an opt-out).\n * `configPatch` / `nativeHooks` have no boolean opt-out form — declaring them is\n * the opt-in, so they are never \"disabled\".\n */\nfunction isDisabledForHost(\n  connector: ResolvedConnector,\n  host: PlatformId,\n  surface: SurfaceName,\n): boolean {\n  const override = connector.platforms[host];\n  if (!override) return false;\n  switch (surface) {\n    case \"server\":\n      return override.server === false;\n    case \"hooks\":\n      return override.hooks === false;\n    case \"commands\":\n      return override.commands === false;\n    case \"skills\":\n      return override.skills === false;\n    case \"subagents\":\n      return override.subagents === false;\n    case \"memory\":\n      return override.memory === false;\n    case \"statusline\":\n      return override.statusline === false;\n    case \"actions\":\n    case \"configPatch\":\n    case \"nativeHooks\":\n      // No per-host boolean opt-out form (declaring them is the opt-in).\n      return false;\n  }\n}\n\n/**\n * The static support matrix: every registered host × every surface the\n * connector declares. Rows are sorted by host then surface for stable output.\n * Pure read of the adapter capabilities — installs nothing, writes nothing.\n */\nexport async function explain(connector: ResolvedConnector): Promise<ExplainRow[]> {\n  const globalSurfaces = declaredGlobalSurfaces(connector);\n  const adapters = await allAdapters();\n  const rows: ExplainRow[] = [];\n\n  for (const adapter of adapters) {\n    // Per-host surface set = the global surfaces every host gets a row for, plus\n    // the platform-scoped surfaces THIS host actually declares (configPatch /\n    // nativeHooks live under platforms[host], so they are host-local).\n    const override = connector.platforms[adapter.id];\n    const surfaces = [\n      ...globalSurfaces,\n      ...platformScopedSurfacesFor(override),\n    ];\n    for (const surface of surfaces) {\n      if (isDisabledForHost(connector, adapter.id, surface)) {\n        rows.push({\n          host: adapter.id,\n          surface,\n          support: \"disabled\",\n          reason: `connector opted out for ${adapter.id} (platforms.${adapter.id}.${surface} = false)`,\n        });\n        continue;\n      }\n      const native = SURFACE_PREDICATES[surface](adapter.capabilities);\n      rows.push({\n        host: adapter.id,\n        surface,\n        support: native ? \"native\" : \"skip-warn\",\n        reason: explainReason(adapter.id, surface, native),\n      });\n    }\n  }\n\n  rows.sort((a, b) =>\n    a.host === b.host ? a.surface.localeCompare(b.surface) : a.host.localeCompare(b.host),\n  );\n  return rows;\n}\n\n/**\n * The human-readable reason for a native/skip-warn cell. `server` is a special\n * case: the predicate is CAPABILITY-based (the host advertises ≥1 MCP\n * transport), but advertising a transport does NOT guarantee a writable\n * registration — e.g. jetbrains-copilot advertises stdio yet its installServer\n * skip-warns because MCP is managed in IDE settings. So the server reason states\n * the verdict is capability-based and registration may be host-managed, rather\n * than promising a write. (A precise per-adapter installServer dry-run is a\n * Phase-2 enhancement — until then this avoids over-promising.)\n */\nfunction explainReason(host: PlatformId, surface: SurfaceName, native: boolean): string {\n  if (surface === \"server\") {\n    return native\n      ? `${host} advertises an MCP transport (capability-based; registration may be host-managed)`\n      : `${host} advertises no MCP transport; install skip-warns`;\n  }\n  return native\n    ? `${host} natively supports ${surface}`\n    : `${host} cannot honor ${surface}; install skip-warns`;\n}\n\n// ─────────────────────────────────────────────────────────────────────────\n// simulate — the real adapter parse → handler → format chain, inline\n// ─────────────────────────────────────────────────────────────────────────\n\n/** What to drive through the harness: one host, one surface, one raw payload. */\nexport interface SimulateOptions {\n  surface: \"hooks\" | \"statusline\";\n  host: PlatformId | string;\n  /** REQUIRED when `surface === \"hooks\"`: which normalized lifecycle event. */\n  event?: HookEventName;\n  /** The host-shaped RAW payload (what the host would pipe in on stdin). */\n  input: unknown;\n}\n\n/** The harness verdict: did the host actually honor the connector's response? */\nexport interface SimulateResult {\n  /** True when the host's native reply carries the connector's intent. */\n  honored: boolean;\n  /** The host-native stdout the adapter would emit (when there is one). */\n  hostReply?: string;\n  /** Human-readable why — names the documented degradation when honored:false. */\n  reason: string;\n}\n\n/**\n * Tolerantly coerce the raw payload, mirroring the runtime's parseStdin: a\n * string is JSON-parsed (empty/malformed → `{}`); a nullish value → `{}`; any\n * other value (already-parsed object) is passed through untouched.\n */\nfunction coerceInput(input: unknown): unknown {\n  if (input == null) return {};\n  if (typeof input === \"string\") {\n    const trimmed = input.trim();\n    if (trimmed === \"\") return {};\n    try {\n      return JSON.parse(trimmed);\n    } catch {\n      return {};\n    }\n  }\n  return input;\n}\n\n/** Normalize a handler's return into a concrete response (void/non-object → `{}`). */\nfunction normalizeResponse(value: HookResponse | void): HookResponse {\n  if (value == null || typeof value !== \"object\") return {};\n  return value;\n}\n\n/**\n * The decoded shape of a host's native hook reply on stdout. Every json-stdio\n * adapter writes a SUBSET of these fields (claude-code / codex share the\n * `hookSpecificOutput` envelope; Stop-class continuation uses the TOP-LEVEL\n * `decision:\"block\"`). We read the DECODED fields — never substring-match the\n * serialized JSON, which a path/newline/quote in the payload would break.\n */\ninterface ParsedReply {\n  /** Top-level Stop-class continuation: {\"decision\":\"block\",\"reason\"}. */\n  decision?: unknown;\n  reason?: unknown;\n  /** Top-level Claude context channel (no adapter emits it yet; future-proofing). */\n  systemMessage?: unknown;\n  hookSpecificOutput?: {\n    hookEventName?: unknown;\n    additionalContext?: unknown;\n    permissionDecision?: unknown;\n    permissionDecisionReason?: unknown;\n    updatedInput?: unknown;\n    /** PermissionRequest nested envelope: decision:{behavior:\"allow\"|\"deny\", updatedInput?}. */\n    decision?: { behavior?: unknown; updatedInput?: unknown };\n  };\n}\n\n/**\n * Tolerantly decode a reply's stdout into {@link ParsedReply}. Empty / absent /\n * unparseable stdout is a legitimate \"no payload\" signal (the adapter wrote a\n * bare exit-0) → `undefined`, the honest \"this decision had no stdout path\"\n * verdict input.\n */\nfunction parseReplyStdout(stdout: string | undefined): ParsedReply | undefined {\n  if (stdout == null || stdout.trim() === \"\") return undefined;\n  try {\n    const value = JSON.parse(stdout);\n    return value != null && typeof value === \"object\"\n      ? (value as ParsedReply)\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/** Structural deep-equal for plain JSON values (objects/arrays/primitives). */\nfunction deepEqual(a: unknown, b: unknown): boolean {\n  if (a === b) return true;\n  if (typeof a !== typeof b || a == null || b == null) return false;\n  if (typeof a !== \"object\") return false;\n  const aArr = Array.isArray(a);\n  if (aArr !== Array.isArray(b)) return false;\n  if (aArr) {\n    const x = a as unknown[];\n    const y = b as unknown[];\n    return x.length === y.length && x.every((v, i) => deepEqual(v, y[i]));\n  }\n  const x = a as Record<string, unknown>;\n  const y = b as Record<string, unknown>;\n  const xk = Object.keys(x);\n  const yk = Object.keys(y);\n  return xk.length === yk.length && xk.every((k) => deepEqual(x[k], y[k]));\n}\n\n/**\n * Decide whether the host HONORED a decision-bearing response, judging the\n * PARSED reply against each adapter's ACTUAL (event, decision) contract — never\n * by substring-matching the serialized JSON. `allow`/no-decision is always\n * pass-through honored; every other decision is honored only when the decoded\n * reply carries that exact intent, and the verdict names the documented\n * degradation when it does not.\n */\nfunction judgeHookHonor(\n  host: string,\n  event: HookEventName,\n  response: HookResponse,\n  stdout: string | undefined,\n): { honored: boolean; reason: string } {\n  const decision = response.decision;\n  if (decision === undefined || decision === \"allow\") {\n    return { honored: true, reason: \"pass-through allow\" };\n  }\n\n  const reply = parseReplyStdout(stdout);\n  const hso = reply?.hookSpecificOutput;\n\n  if (decision === \"context\") {\n    // Honored only when the DECODED additionalContext equals what the handler\n    // asked to inject (claude-code's hookSpecificOutput.additionalContext, or a\n    // future top-level systemMessage). codex only emits this on\n    // SessionStart/PostToolUse — every other event silently drops it.\n    const want = response.additionalContext;\n    const got = hso?.additionalContext ?? reply?.systemMessage;\n    if (reply && got === want) {\n      return { honored: true, reason: `${host} injects context on ${event}` };\n    }\n    return {\n      honored: false,\n      reason: `${host} drops context on ${event} (no stdout path)`,\n    };\n  }\n\n  if (decision === \"deny\") {\n    if (!reply) {\n      return {\n        honored: false,\n        reason: `${host} drops deny on ${event} (deny not honored; fails open to allow)`,\n      };\n    }\n    // A real block: PreToolUse's permissionDecision:\"deny\", or the\n    // PermissionRequest nested decision.behavior:\"deny\".\n    if (hso?.permissionDecision === \"deny\" || hso?.decision?.behavior === \"deny\") {\n      return { honored: true, reason: `${host} blocks ${event}` };\n    }\n    // Stop-class continuation: top-level decision:\"block\" KEEPS the session /\n    // subagent running (persistence) — the SEMANTIC OPPOSITE of a block. Honored\n    // (the reply carried the intent), but the reason must not say \"blocks\".\n    if (reply.decision === \"block\") {\n      return {\n        honored: true,\n        reason: `${host} continues the session/subagent on ${event} (persistence) — NOT a block`,\n      };\n    }\n    // SubagentStart / PostToolUseFailure DEGRADE a deny to a context note — the\n    // spawn/failure is not actually blocked.\n    if (hso?.additionalContext != null) {\n      return {\n        honored: false,\n        reason: `${host} degrades deny to a context note on ${event}; spawn/failure not blocked`,\n      };\n    }\n    return {\n      honored: false,\n      reason: `${host} drops deny on ${event} (deny not honored; fails open to allow)`,\n    };\n  }\n\n  if (decision === \"ask\") {\n    if (hso?.permissionDecision === \"ask\") {\n      return { honored: true, reason: `${host} asks on ${event}` };\n    }\n    // On PermissionRequest, ask/void falls through to the host's NATIVE dialog\n    // (the dialog IS the ask), which the adapter expresses as a bare exit-0.\n    if (event === \"PermissionRequest\" && !reply) {\n      return {\n        honored: true,\n        reason: `${host} shows the native confirmation dialog on ${event} (the ask)`,\n      };\n    }\n    return {\n      honored: false,\n      reason: `${host} drops ask on ${event} (no ask path)`,\n    };\n  }\n\n  // decision === \"modify\": honored only when the decoded updatedInput deep-equals\n  // what the handler asked to write (hookSpecificOutput.updatedInput, or the\n  // PermissionRequest nested decision.updatedInput).\n  const wrote = hso?.updatedInput ?? hso?.decision?.updatedInput;\n  if (reply && wrote !== undefined && deepEqual(wrote, response.updatedInput)) {\n    return { honored: true, reason: `${host} rewrites tool input on ${event}` };\n  }\n  return {\n    honored: false,\n    reason: `${host} drops modify on ${event} (modify not honored)`,\n  };\n}\n\n/**\n * Run the connector against ONE host-shaped payload through the REAL adapter\n * path and report whether the host honors the response. Self-contained (does not\n * touch the registered-connector loader or telemetry) and fail-safe: any throw\n * in the chain degrades to `honored:false` with the error message, never rejects.\n */\nexport async function simulate(\n  connector: ResolvedConnector,\n  opts: SimulateOptions,\n): Promise<SimulateResult> {\n  try {\n    const adapter = await loadAdapter(opts.host);\n    if (!adapter) {\n      return { honored: false, reason: `unknown host \"${opts.host}\"` };\n    }\n\n    if (opts.surface === \"statusline\") {\n      if (\n        !(adapter.capabilities.supportsStatusline ?? false) ||\n        !adapter.parseStatusInput ||\n        !adapter.formatStatusOutput\n      ) {\n        return { honored: false, reason: `${opts.host} has no statusline surface` };\n      }\n      // Guarding on the TOP-LEVEL render is sufficient: a `hosts`-only statusline\n      // (a hosts: map with no top-level render) is rejected at defineConnector, so\n      // a connector that targets `opts.host` only via hosts[] still has a top-level\n      // render here. (If that author-time invariant ever relaxes, revisit this.)\n      if (!connector.statusline || typeof connector.statusline.render !== \"function\") {\n        return { honored: false, reason: \"connector declares no statusline\" };\n      }\n      const ctx = adapter.parseStatusInput(coerceInput(opts.input));\n      ctx.connectorId = connector.id;\n      // Defensive: parseStatusInput now sets ctx.capabilities (it is required on\n      // StatuslineContext), but a future adapter could omit it — backfill from\n      // the adapter so render() can always read ctx.capabilities.\n      if (ctx.capabilities == null) ctx.capabilities = adapter.capabilities;\n      // Per-host render override, mirroring the runtime: hosts[host].render wins\n      // over the top-level render; an unlisted host falls back to top-level.\n      const perHost = connector.statusline.hosts?.[opts.host as PlatformId]?.render;\n      const render =\n        typeof perHost === \"function\" ? perHost : connector.statusline.render;\n      const rendered = await render(ctx);\n      const line = rendered == null ? \"\" : String(rendered);\n      const reply = adapter.formatStatusOutput(line);\n      return {\n        honored: true,\n        ...(reply.stdout !== undefined ? { hostReply: reply.stdout } : {}),\n        reason: \"rendered\",\n      };\n    }\n\n    // surface === \"hooks\"\n    const event = opts.event;\n    if (!event) {\n      return { honored: false, reason: \"event is required when surface === \\\"hooks\\\"\" };\n    }\n    if (!adapter.parseEvent || !adapter.formatReply) {\n      return { honored: false, reason: `${opts.host} has no hook runtime (mcp-only)` };\n    }\n\n    const evt = adapter.parseEvent(event, coerceInput(opts.input));\n    evt.connectorId = connector.id;\n    // Mirror the runtime: runHook backfills evt.capabilities from the adapter so\n    // a handler reading evt.capabilities behaves the same here. (scope/telemetry\n    // are runtime-only — recovered from the registered meta / store, which the\n    // offline harness deliberately never touches — so they stay undefined.)\n    evt.capabilities = adapter.capabilities;\n\n    // Guarding on the TOP-LEVEL handler is sufficient: a `hosts`-only hook (a\n    // hosts: map with no top-level handler) is rejected at defineConnector, so a\n    // host targeted only via hosts[] still has a top-level handler here. (If that\n    // author-time invariant ever relaxes, revisit this.)\n    const definition = connector.hooks[event];\n    if (!definition || typeof definition.handler !== \"function\") {\n      return { honored: false, reason: `connector declares no ${event} handler` };\n    }\n\n    // Matcher filtering, in lockstep with runHook: when the connector's matcher\n    // is set and the event's subject (tool name, or agent type for Subagent*\n    // events) does not match, the host never runs the handler — so the harness\n    // must NOT run it either, and reports the (honored) exclusion. Reuses the\n    // runtime helpers directly so the two stay byte-for-byte aligned.\n    const subject = eventMatcherSubject(evt as NormalizedEvent);\n    if (subject !== undefined) {\n      const re = compileMatcher(definition.matcher);\n      if (re && !re.test(subject)) {\n        return {\n          honored: true,\n          reason: `matcher excludes ${subject} (handler not run)`,\n        };\n      }\n    }\n\n    // Per-host handler override, mirroring runHook: hosts[host].handler wins\n    // over the top-level handler; an unlisted host falls back to top-level.\n    const perHost = definition.hosts?.[opts.host as PlatformId]?.handler;\n    const handler = typeof perHost === \"function\" ? perHost : definition.handler;\n    const response = normalizeResponse(\n      await handler(evt as never),\n    );\n    const reply = adapter.formatReply(event, response);\n    const verdict = judgeHookHonor(String(opts.host), event, response, reply.stdout);\n    return {\n      honored: verdict.honored,\n      ...(reply.stdout !== undefined ? { hostReply: reply.stdout } : {}),\n      reason: verdict.reason,\n    };\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    const verb = opts.surface === \"statusline\" ? \"render\" : \"handler\";\n    return { honored: false, reason: `${verb} threw: ${message}` };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAmEA,SAAS,uBAAuB,WAA6C;AAC3E,QAAM,MAAqB,CAAC;AAC5B,MAAI,UAAU,OAAQ,KAAI,KAAK,QAAQ;AACvC,MAAI,OAAO,KAAK,UAAU,KAAK,EAAE,SAAS,EAAG,KAAI,KAAK,OAAO;AAC7D,MAAI,UAAU,SAAS,SAAS,EAAG,KAAI,KAAK,UAAU;AACtD,MAAI,UAAU,OAAO,SAAS,EAAG,KAAI,KAAK,QAAQ;AAClD,MAAI,UAAU,UAAU,SAAS,EAAG,KAAI,KAAK,WAAW;AACxD,MAAI,UAAU,OAAO,SAAS,EAAG,KAAI,KAAK,QAAQ;AAClD,MAAI,UAAU,WAAY,KAAI,KAAK,YAAY;AAC/C,MAAI,UAAU,QAAQ,SAAS,EAAG,KAAI,KAAK,SAAS;AACpD,SAAO;AACT;AAOA,SAAS,0BACP,UACe;AACf,QAAM,MAAqB,CAAC;AAC5B,MAAI,CAAC,SAAU,QAAO;AACtB,OAAK,SAAS,aAAa,UAAU,KAAK,EAAG,KAAI,KAAK,aAAa;AACnE,MAAI,SAAS,eAAe,QAAQ,OAAO,KAAK,SAAS,WAAW,EAAE,SAAS,GAAG;AAChF,QAAI,KAAK,aAAa;AAAA,EACxB;AACA,SAAO;AACT;AASA,SAAS,kBACP,WACA,MACA,SACS;AACT,QAAM,WAAW,UAAU,UAAU,IAAI;AACzC,MAAI,CAAC,SAAU,QAAO;AACtB,UAAQ,SAAS;AAAA,IACf,KAAK;AACH,aAAO,SAAS,WAAW;AAAA,IAC7B,KAAK;AACH,aAAO,SAAS,UAAU;AAAA,IAC5B,KAAK;AACH,aAAO,SAAS,aAAa;AAAA,IAC/B,KAAK;AACH,aAAO,SAAS,WAAW;AAAA,IAC7B,KAAK;AACH,aAAO,SAAS,cAAc;AAAA,IAChC,KAAK;AACH,aAAO,SAAS,WAAW;AAAA,IAC7B,KAAK;AACH,aAAO,SAAS,eAAe;AAAA,IACjC,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAEH,aAAO;AAAA,EACX;AACF;AAOA,eAAsB,QAAQ,WAAqD;AACjF,QAAM,iBAAiB,uBAAuB,SAAS;AACvD,QAAM,WAAW,MAAM,YAAY;AACnC,QAAM,OAAqB,CAAC;AAE5B,aAAW,WAAW,UAAU;AAI9B,UAAM,WAAW,UAAU,UAAU,QAAQ,EAAE;AAC/C,UAAM,WAAW;AAAA,MACf,GAAG;AAAA,MACH,GAAG,0BAA0B,QAAQ;AAAA,IACvC;AACA,eAAW,WAAW,UAAU;AAC9B,UAAI,kBAAkB,WAAW,QAAQ,IAAI,OAAO,GAAG;AACrD,aAAK,KAAK;AAAA,UACR,MAAM,QAAQ;AAAA,UACd;AAAA,UACA,SAAS;AAAA,UACT,QAAQ,2BAA2B,QAAQ,EAAE,eAAe,QAAQ,EAAE,IAAI,OAAO;AAAA,QACnF,CAAC;AACD;AAAA,MACF;AACA,YAAM,SAAS,mBAAmB,OAAO,EAAE,QAAQ,YAAY;AAC/D,WAAK,KAAK;AAAA,QACR,MAAM,QAAQ;AAAA,QACd;AAAA,QACA,SAAS,SAAS,WAAW;AAAA,QAC7B,QAAQ,cAAc,QAAQ,IAAI,SAAS,MAAM;AAAA,MACnD,CAAC;AAAA,IACH;AAAA,EACF;AAEA,OAAK;AAAA,IAAK,CAAC,GAAG,MACZ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,cAAc,EAAE,OAAO,IAAI,EAAE,KAAK,cAAc,EAAE,IAAI;AAAA,EACtF;AACA,SAAO;AACT;AAYA,SAAS,cAAc,MAAkB,SAAsB,QAAyB;AACtF,MAAI,YAAY,UAAU;AACxB,WAAO,SACH,GAAG,IAAI,sFACP,GAAG,IAAI;AAAA,EACb;AACA,SAAO,SACH,GAAG,IAAI,sBAAsB,OAAO,KACpC,GAAG,IAAI,iBAAiB,OAAO;AACrC;AA+BA,SAAS,YAAY,OAAyB;AAC5C,MAAI,SAAS,KAAM,QAAO,CAAC;AAC3B,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,YAAY,GAAI,QAAO,CAAC;AAC5B,QAAI;AACF,aAAO,KAAK,MAAM,OAAO;AAAA,IAC3B,QAAQ;AACN,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,kBAAkB,OAA0C;AACnE,MAAI,SAAS,QAAQ,OAAO,UAAU,SAAU,QAAO,CAAC;AACxD,SAAO;AACT;AAgCA,SAAS,iBAAiB,QAAqD;AAC7E,MAAI,UAAU,QAAQ,OAAO,KAAK,MAAM,GAAI,QAAO;AACnD,MAAI;AACF,UAAM,QAAQ,KAAK,MAAM,MAAM;AAC/B,WAAO,SAAS,QAAQ,OAAO,UAAU,WACpC,QACD;AAAA,EACN,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGA,SAAS,UAAU,GAAY,GAAqB;AAClD,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,OAAO,MAAM,OAAO,KAAK,KAAK,QAAQ,KAAK,KAAM,QAAO;AAC5D,MAAI,OAAO,MAAM,SAAU,QAAO;AAClC,QAAM,OAAO,MAAM,QAAQ,CAAC;AAC5B,MAAI,SAAS,MAAM,QAAQ,CAAC,EAAG,QAAO;AACtC,MAAI,MAAM;AACR,UAAMA,KAAI;AACV,UAAMC,KAAI;AACV,WAAOD,GAAE,WAAWC,GAAE,UAAUD,GAAE,MAAM,CAAC,GAAG,MAAM,UAAU,GAAGC,GAAE,CAAC,CAAC,CAAC;AAAA,EACtE;AACA,QAAM,IAAI;AACV,QAAM,IAAI;AACV,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,QAAM,KAAK,OAAO,KAAK,CAAC;AACxB,SAAO,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC,MAAM,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACzE;AAUA,SAAS,eACP,MACA,OACA,UACA,QACsC;AACtC,QAAM,WAAW,SAAS;AAC1B,MAAI,aAAa,UAAa,aAAa,SAAS;AAClD,WAAO,EAAE,SAAS,MAAM,QAAQ,qBAAqB;AAAA,EACvD;AAEA,QAAM,QAAQ,iBAAiB,MAAM;AACrC,QAAM,MAAM,OAAO;AAEnB,MAAI,aAAa,WAAW;AAK1B,UAAM,OAAO,SAAS;AACtB,UAAM,MAAM,KAAK,qBAAqB,OAAO;AAC7C,QAAI,SAAS,QAAQ,MAAM;AACzB,aAAO,EAAE,SAAS,MAAM,QAAQ,GAAG,IAAI,uBAAuB,KAAK,GAAG;AAAA,IACxE;AACA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ,GAAG,IAAI,qBAAqB,KAAK;AAAA,IAC3C;AAAA,EACF;AAEA,MAAI,aAAa,QAAQ;AACvB,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ,GAAG,IAAI,kBAAkB,KAAK;AAAA,MACxC;AAAA,IACF;AAGA,QAAI,KAAK,uBAAuB,UAAU,KAAK,UAAU,aAAa,QAAQ;AAC5E,aAAO,EAAE,SAAS,MAAM,QAAQ,GAAG,IAAI,WAAW,KAAK,GAAG;AAAA,IAC5D;AAIA,QAAI,MAAM,aAAa,SAAS;AAC9B,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ,GAAG,IAAI,sCAAsC,KAAK;AAAA,MAC5D;AAAA,IACF;AAGA,QAAI,KAAK,qBAAqB,MAAM;AAClC,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ,GAAG,IAAI,uCAAuC,KAAK;AAAA,MAC7D;AAAA,IACF;AACA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ,GAAG,IAAI,kBAAkB,KAAK;AAAA,IACxC;AAAA,EACF;AAEA,MAAI,aAAa,OAAO;AACtB,QAAI,KAAK,uBAAuB,OAAO;AACrC,aAAO,EAAE,SAAS,MAAM,QAAQ,GAAG,IAAI,YAAY,KAAK,GAAG;AAAA,IAC7D;AAGA,QAAI,UAAU,uBAAuB,CAAC,OAAO;AAC3C,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ,GAAG,IAAI,4CAA4C,KAAK;AAAA,MAClE;AAAA,IACF;AACA,WAAO;AAAA,MACL,SAAS;AAAA,MACT,QAAQ,GAAG,IAAI,iBAAiB,KAAK;AAAA,IACvC;AAAA,EACF;AAKA,QAAM,QAAQ,KAAK,gBAAgB,KAAK,UAAU;AAClD,MAAI,SAAS,UAAU,UAAa,UAAU,OAAO,SAAS,YAAY,GAAG;AAC3E,WAAO,EAAE,SAAS,MAAM,QAAQ,GAAG,IAAI,2BAA2B,KAAK,GAAG;AAAA,EAC5E;AACA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ,GAAG,IAAI,oBAAoB,KAAK;AAAA,EAC1C;AACF;AAQA,eAAsB,SACpB,WACA,MACyB;AACzB,MAAI;AACF,UAAM,UAAU,MAAM,YAAY,KAAK,IAAI;AAC3C,QAAI,CAAC,SAAS;AACZ,aAAO,EAAE,SAAS,OAAO,QAAQ,iBAAiB,KAAK,IAAI,IAAI;AAAA,IACjE;AAEA,QAAI,KAAK,YAAY,cAAc;AACjC,UACE,EAAE,QAAQ,aAAa,sBAAsB,UAC7C,CAAC,QAAQ,oBACT,CAAC,QAAQ,oBACT;AACA,eAAO,EAAE,SAAS,OAAO,QAAQ,GAAG,KAAK,IAAI,6BAA6B;AAAA,MAC5E;AAKA,UAAI,CAAC,UAAU,cAAc,OAAO,UAAU,WAAW,WAAW,YAAY;AAC9E,eAAO,EAAE,SAAS,OAAO,QAAQ,mCAAmC;AAAA,MACtE;AACA,YAAM,MAAM,QAAQ,iBAAiB,YAAY,KAAK,KAAK,CAAC;AAC5D,UAAI,cAAc,UAAU;AAI5B,UAAI,IAAI,gBAAgB,KAAM,KAAI,eAAe,QAAQ;AAGzD,YAAMC,WAAU,UAAU,WAAW,QAAQ,KAAK,IAAkB,GAAG;AACvE,YAAM,SACJ,OAAOA,aAAY,aAAaA,WAAU,UAAU,WAAW;AACjE,YAAM,WAAW,MAAM,OAAO,GAAG;AACjC,YAAM,OAAO,YAAY,OAAO,KAAK,OAAO,QAAQ;AACpD,YAAMC,SAAQ,QAAQ,mBAAmB,IAAI;AAC7C,aAAO;AAAA,QACL,SAAS;AAAA,QACT,GAAIA,OAAM,WAAW,SAAY,EAAE,WAAWA,OAAM,OAAO,IAAI,CAAC;AAAA,QAChE,QAAQ;AAAA,MACV;AAAA,IACF;AAGA,UAAM,QAAQ,KAAK;AACnB,QAAI,CAAC,OAAO;AACV,aAAO,EAAE,SAAS,OAAO,QAAQ,6CAA+C;AAAA,IAClF;AACA,QAAI,CAAC,QAAQ,cAAc,CAAC,QAAQ,aAAa;AAC/C,aAAO,EAAE,SAAS,OAAO,QAAQ,GAAG,KAAK,IAAI,kCAAkC;AAAA,IACjF;AAEA,UAAM,MAAM,QAAQ,WAAW,OAAO,YAAY,KAAK,KAAK,CAAC;AAC7D,QAAI,cAAc,UAAU;AAK5B,QAAI,eAAe,QAAQ;AAM3B,UAAM,aAAa,UAAU,MAAM,KAAK;AACxC,QAAI,CAAC,cAAc,OAAO,WAAW,YAAY,YAAY;AAC3D,aAAO,EAAE,SAAS,OAAO,QAAQ,yBAAyB,KAAK,WAAW;AAAA,IAC5E;AAOA,UAAM,UAAU,oBAAoB,GAAsB;AAC1D,QAAI,YAAY,QAAW;AACzB,YAAM,KAAK,eAAe,WAAW,OAAO;AAC5C,UAAI,MAAM,CAAC,GAAG,KAAK,OAAO,GAAG;AAC3B,eAAO;AAAA,UACL,SAAS;AAAA,UACT,QAAQ,oBAAoB,OAAO;AAAA,QACrC;AAAA,MACF;AAAA,IACF;AAIA,UAAM,UAAU,WAAW,QAAQ,KAAK,IAAkB,GAAG;AAC7D,UAAM,UAAU,OAAO,YAAY,aAAa,UAAU,WAAW;AACrE,UAAM,WAAW;AAAA,MACf,MAAM,QAAQ,GAAY;AAAA,IAC5B;AACA,UAAM,QAAQ,QAAQ,YAAY,OAAO,QAAQ;AACjD,UAAM,UAAU,eAAe,OAAO,KAAK,IAAI,GAAG,OAAO,UAAU,MAAM,MAAM;AAC/E,WAAO;AAAA,MACL,SAAS,QAAQ;AAAA,MACjB,GAAI,MAAM,WAAW,SAAY,EAAE,WAAW,MAAM,OAAO,IAAI,CAAC;AAAA,MAChE,QAAQ,QAAQ;AAAA,IAClB;AAAA,EACF,SAAS,KAAK;AACZ,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,UAAM,OAAO,KAAK,YAAY,eAAe,WAAW;AACxD,WAAO,EAAE,SAAS,OAAO,QAAQ,GAAG,IAAI,WAAW,OAAO,GAAG;AAAA,EAC/D;AACF;","names":["x","y","perHost","reply"]}

package/dist/{serve-3C2VFPAY.js → serve-GER7URPR.js}

@@ -1,17 +1,21 @@
 #!/usr/bin/env node
 import {
   fail
-} from "./chunk-3RBLIHPZ.js";
+} from "./chunk-O5TWCIJN.js";
 import {
   runServe
-} from "./chunk-ZAM4M7LI.js";
-import "./chunk-BCHWFTV4.js";
+} from "./chunk-5OWS5CMA.js";
 import "./chunk-OP4KBXUO.js";
-import "./chunk-KVAAFYRR.js";
-import "./chunk-NJU275US.js";
-import "./chunk-3JCRUROU.js";
-import "./chunk-GSGDG2BV.js";
-import "./chunk-MEH7GC7R.js";
+import "./chunk-F5RX62T7.js";
+import "./chunk-EGCBZ2DC.js";
+import "./chunk-2AVLX7GH.js";
+import "./chunk-BCHWFTV4.js";
+import "./chunk-KHO5WNTP.js";
+import "./chunk-24IDL5RW.js";
+import "./chunk-4ENJK5S2.js";
+import "./chunk-DCKFYWGM.js";
+import "./chunk-FAHIMJRU.js";
+import "./chunk-I5MLE6S7.js";
 import "./chunk-N6HH7K6P.js";
 import "./chunk-TRQKHP7D.js";
 
@@ -63,4 +67,4 @@ async function run(argv) {
 export {
   run
 };
-//# sourceMappingURL=serve-3C2VFPAY.js.map
+//# sourceMappingURL=serve-GER7URPR.js.map

package/dist/{serve-3C2VFPAY.js.map → serve-GER7URPR.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli/commands/serve.ts"],"sourcesContent":["/**\n * cli/commands/serve — the telemetry-wrapping MCP stdio proxy entrypoint.\n *\n *   agent-connector serve --connector <id> [--scope <user|project>] [--host <platformId>] -- <realCommand> <realArgs...>\n *\n * A stdio MCP server that opts into transparent telemetry has its host config\n * rewritten to launch THIS instead of the server directly. We split argv at the\n * literal `--` separator: flags on the left, the real server command + args on\n * the right (taken verbatim). The optional `--scope` flag records the install\n * dimension (global user vs project-local) onto telemetry; it is absent for\n * configs written before scope plumbing existed → the runtime reads \"unknown\".\n * The optional `--host` flag carries the install TARGET platform id so the proxy\n * stamps hostPlatform correctly under a headless spawn; absent configs fall back\n * to runtime env detection.\n * runServe stands up the per-session telemetry context and proxies bytes both\n * ways, resolving with the child's exit code.\n */\n\nimport { parseArgs } from \"node:util\";\n\nimport type { PlatformId } from \"../../core/types.js\";\nimport type { TelemetryInstallScope } from \"../../telemetry/types.js\";\nimport { runServe } from \"../../runtime/index.js\";\nimport { fail } from \"../app.js\";\n\nexport async function run(argv: string[]): Promise<number> {\n  // Split at the FIRST literal \"--\": everything after it is the real server\n  // invocation and must be passed through verbatim (never re-parsed as flags).\n  const sepIndex = argv.indexOf(\"--\");\n  if (sepIndex === -1) {\n    return fail(\n      \"usage: agent-connector serve --connector <id> [--scope <user|project>] [--host <platformId>] -- <command> [args...]\",\n    );\n  }\n  const flagArgs = argv.slice(0, sepIndex);\n  const serverInvocation = argv.slice(sepIndex + 1);\n\n  // strict:false so an unknown FUTURE flag before `--` (written by a newer host\n  // config) is ignored instead of throwing — a parse throw here would prevent the\n  // real MCP server from ever spawning and wedge the host's tool call. We only\n  // read the two flags we understand; everything else is tolerated.\n  const { values } = parseArgs({\n    args: flagArgs,\n    options: {\n      connector: { type: \"string\" },\n      scope: { type: \"string\" },\n      // `--host <platformId>` bakes the install TARGET platform into the wrapper\n      // so the proxy stamps hostPlatform correctly under a headless spawn (where\n      // runtime env markers are absent). Optional + tolerated (strict:false).\n      host: { type: \"string\" },\n    },\n    allowPositionals: true,\n    strict: false,\n  });\n\n  // With strict:false, parseArgs types each value as string | boolean; we only\n  // accept the string form (a bare `--connector` flag with no value is invalid).\n  const connectorId = typeof values.connector === \"string\" ? values.connector : undefined;\n  if (!connectorId || connectorId.trim() === \"\") {\n    return fail(\"serve requires --connector <id>\");\n  }\n\n  // `--scope` is optional and only ever \"user\" | \"project\" (the wrapper emits\n  // exactly those). An unrecognized value is ignored rather than fatal so a\n  // future/older wrapper can never break a real tool call over a flag mismatch.\n  const rawScope = values.scope;\n  const installScope: TelemetryInstallScope | undefined =\n    rawScope === \"user\" || rawScope === \"project\" ? rawScope : undefined;\n\n  // `--host` carries the install TARGET platform id (string only). runServe\n  // validates it against the registry and falls back to runtime detection when\n  // it is absent or unrecognized — so a future/older wrapper never breaks here.\n  const hostPlatformOverride =\n    typeof values.host === \"string\" ? (values.host as PlatformId) : undefined;\n\n  const serverCommand = serverInvocation[0];\n  if (!serverCommand) {\n    return fail(\"serve requires a command after `--`\");\n  }\n  const serverArgs = serverInvocation.slice(1);\n\n  const code = await runServe({\n    connectorId,\n    serverCommand,\n    serverArgs,\n    installScope,\n    hostPlatformOverride,\n  });\n  process.exit(code);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAkBA,SAAS,iBAAiB;AAO1B,eAAsB,IAAI,MAAiC;AAGzD,QAAM,WAAW,KAAK,QAAQ,IAAI;AAClC,MAAI,aAAa,IAAI;AACnB,WAAO;AAAA,MACL;AAAA,IACF;AAAA,EACF;AACA,QAAM,WAAW,KAAK,MAAM,GAAG,QAAQ;AACvC,QAAM,mBAAmB,KAAK,MAAM,WAAW,CAAC;AAMhD,QAAM,EAAE,OAAO,IAAI,UAAU;AAAA,IAC3B,MAAM;AAAA,IACN,SAAS;AAAA,MACP,WAAW,EAAE,MAAM,SAAS;AAAA,MAC5B,OAAO,EAAE,MAAM,SAAS;AAAA;AAAA;AAAA;AAAA,MAIxB,MAAM,EAAE,MAAM,SAAS;AAAA,IACzB;AAAA,IACA,kBAAkB;AAAA,IAClB,QAAQ;AAAA,EACV,CAAC;AAID,QAAM,cAAc,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;AAC9E,MAAI,CAAC,eAAe,YAAY,KAAK,MAAM,IAAI;AAC7C,WAAO,KAAK,iCAAiC;AAAA,EAC/C;AAKA,QAAM,WAAW,OAAO;AACxB,QAAM,eACJ,aAAa,UAAU,aAAa,YAAY,WAAW;AAK7D,QAAM,uBACJ,OAAO,OAAO,SAAS,WAAY,OAAO,OAAsB;AAElE,QAAM,gBAAgB,iBAAiB,CAAC;AACxC,MAAI,CAAC,eAAe;AAClB,WAAO,KAAK,qCAAqC;AAAA,EACnD;AACA,QAAM,aAAa,iBAAiB,MAAM,CAAC;AAE3C,QAAM,OAAO,MAAM,SAAS;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,UAAQ,KAAK,IAAI;AACnB;","names":[]}
+{"version":3,"sources":["../src/cli/commands/serve.ts"],"sourcesContent":["/**\n * cli/commands/serve — the telemetry-wrapping MCP stdio proxy entrypoint.\n *\n *   agent-connector serve --connector <id> [--scope <user|project>] [--host <platformId>] -- <realCommand> <realArgs...>\n *\n * A stdio MCP server that opts into transparent telemetry has its host config\n * rewritten to launch THIS instead of the server directly. We split argv at the\n * literal `--` separator: flags on the left, the real server command + args on\n * the right (taken verbatim). The optional `--scope` flag records the install\n * dimension (global user vs project-local) onto telemetry; it is absent for\n * configs written before scope plumbing existed → the runtime reads \"unknown\".\n * The optional `--host` flag carries the install TARGET platform id so the proxy\n * stamps hostPlatform correctly under a headless spawn; absent configs fall back\n * to runtime env detection.\n * runServe stands up the per-session telemetry context and proxies bytes both\n * ways, resolving with the child's exit code.\n */\n\nimport { parseArgs } from \"node:util\";\n\nimport type { PlatformId } from \"../../core/types.js\";\nimport type { TelemetryInstallScope } from \"../../telemetry/types.js\";\nimport { runServe } from \"../../runtime/index.js\";\nimport { fail } from \"../app.js\";\n\nexport async function run(argv: string[]): Promise<number> {\n  // Split at the FIRST literal \"--\": everything after it is the real server\n  // invocation and must be passed through verbatim (never re-parsed as flags).\n  const sepIndex = argv.indexOf(\"--\");\n  if (sepIndex === -1) {\n    return fail(\n      \"usage: agent-connector serve --connector <id> [--scope <user|project>] [--host <platformId>] -- <command> [args...]\",\n    );\n  }\n  const flagArgs = argv.slice(0, sepIndex);\n  const serverInvocation = argv.slice(sepIndex + 1);\n\n  // strict:false so an unknown FUTURE flag before `--` (written by a newer host\n  // config) is ignored instead of throwing — a parse throw here would prevent the\n  // real MCP server from ever spawning and wedge the host's tool call. We only\n  // read the two flags we understand; everything else is tolerated.\n  const { values } = parseArgs({\n    args: flagArgs,\n    options: {\n      connector: { type: \"string\" },\n      scope: { type: \"string\" },\n      // `--host <platformId>` bakes the install TARGET platform into the wrapper\n      // so the proxy stamps hostPlatform correctly under a headless spawn (where\n      // runtime env markers are absent). Optional + tolerated (strict:false).\n      host: { type: \"string\" },\n    },\n    allowPositionals: true,\n    strict: false,\n  });\n\n  // With strict:false, parseArgs types each value as string | boolean; we only\n  // accept the string form (a bare `--connector` flag with no value is invalid).\n  const connectorId = typeof values.connector === \"string\" ? values.connector : undefined;\n  if (!connectorId || connectorId.trim() === \"\") {\n    return fail(\"serve requires --connector <id>\");\n  }\n\n  // `--scope` is optional and only ever \"user\" | \"project\" (the wrapper emits\n  // exactly those). An unrecognized value is ignored rather than fatal so a\n  // future/older wrapper can never break a real tool call over a flag mismatch.\n  const rawScope = values.scope;\n  const installScope: TelemetryInstallScope | undefined =\n    rawScope === \"user\" || rawScope === \"project\" ? rawScope : undefined;\n\n  // `--host` carries the install TARGET platform id (string only). runServe\n  // validates it against the registry and falls back to runtime detection when\n  // it is absent or unrecognized — so a future/older wrapper never breaks here.\n  const hostPlatformOverride =\n    typeof values.host === \"string\" ? (values.host as PlatformId) : undefined;\n\n  const serverCommand = serverInvocation[0];\n  if (!serverCommand) {\n    return fail(\"serve requires a command after `--`\");\n  }\n  const serverArgs = serverInvocation.slice(1);\n\n  const code = await runServe({\n    connectorId,\n    serverCommand,\n    serverArgs,\n    installScope,\n    hostPlatformOverride,\n  });\n  process.exit(code);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAkBA,SAAS,iBAAiB;AAO1B,eAAsB,IAAI,MAAiC;AAGzD,QAAM,WAAW,KAAK,QAAQ,IAAI;AAClC,MAAI,aAAa,IAAI;AACnB,WAAO;AAAA,MACL;AAAA,IACF;AAAA,EACF;AACA,QAAM,WAAW,KAAK,MAAM,GAAG,QAAQ;AACvC,QAAM,mBAAmB,KAAK,MAAM,WAAW,CAAC;AAMhD,QAAM,EAAE,OAAO,IAAI,UAAU;AAAA,IAC3B,MAAM;AAAA,IACN,SAAS;AAAA,MACP,WAAW,EAAE,MAAM,SAAS;AAAA,MAC5B,OAAO,EAAE,MAAM,SAAS;AAAA;AAAA;AAAA;AAAA,MAIxB,MAAM,EAAE,MAAM,SAAS;AAAA,IACzB;AAAA,IACA,kBAAkB;AAAA,IAClB,QAAQ;AAAA,EACV,CAAC;AAID,QAAM,cAAc,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;AAC9E,MAAI,CAAC,eAAe,YAAY,KAAK,MAAM,IAAI;AAC7C,WAAO,KAAK,iCAAiC;AAAA,EAC/C;AAKA,QAAM,WAAW,OAAO;AACxB,QAAM,eACJ,aAAa,UAAU,aAAa,YAAY,WAAW;AAK7D,QAAM,uBACJ,OAAO,OAAO,SAAS,WAAY,OAAO,OAAsB;AAElE,QAAM,gBAAgB,iBAAiB,CAAC;AACxC,MAAI,CAAC,eAAe;AAClB,WAAO,KAAK,qCAAqC;AAAA,EACnD;AACA,QAAM,aAAa,iBAAiB,MAAM,CAAC;AAE3C,QAAM,OAAO,MAAM,SAAS;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,UAAQ,KAAK,IAAI;AACnB;","names":[]}