@ken-jo/agent-connector 0.4.67 → 0.4.75

package/README.md

@@ -120,6 +120,12 @@ The 0.2.0 additions — the `memory` surface, the `nativeHooks` passthrough, and
 migrations (context-mode, oh-my-claudecode) and verified in isolated-home
 installs before landing (see [`CHANGELOG.md`](CHANGELOG.md)).
 
+**Dogfood result:** the context-mode connector migration — porting a real
+multi-host plugin to `defineConnector` — collapsed **~20,322 lines of
+hand-maintained per-host code down to ~76 lines** (a 99.63% reduction). The
+other hand-maintained surfaces — MCP registration, hook entries, memory files —
+dissolved into the same single config declaration.
+
 Coverage was confirmed by **installing the real, not-yet-present agent CLIs into
 isolated homes and observing their actual config** — which caught defects a
 static code/web audit missed. See the reports under
@@ -175,6 +181,14 @@ npx @ken-jo/agent-connector usage export --format csv --out usage.csv
 > **Audience A** — you write an MCP server + hooks once and deploy them across
 > every detected host, measuring **your own server's** per-tool tokens.
 
+**Step 0 — write your MCP server.** agent-connector deploys and wraps an MCP
+server you already have (or are about to write). If you haven't built one yet,
+the [official MCP SDK quickstart](https://modelcontextprotocol.io/quickstart/server)
+is the fastest on-ramp — pick your language, follow the tutorial, and come back
+with a working stdio server binary or script. The
+[`examples/acme-db/acme-db-mcp-server.mjs`](examples/acme-db/acme-db-mcp-server.mjs)
+in this repo is a self-contained ~35-line stub you can copy as a template.
+
 agent-connector is an **SDK you depend on**, not a global tool. Add it to the
 package that holds your connector, declare the connector once, then **either**
 ship a branded CLI your users drive directly **or** run it with `npx`. No
@@ -225,7 +239,7 @@ users never install agent-connector globally or type `--connector`. See
   "name": "acme-db-tools",
   "type": "module",
   "bin": { "acme-db": "./bin.mjs" },
-  "dependencies": { "@ken-jo/agent-connector": "^0.2.0" }
+  "dependencies": { "@ken-jo/agent-connector": "^0.4.0" }
 }
 ```
 
@@ -306,7 +320,13 @@ handler / HUD actually work on host X?"* before you touch a real host:
 
 - `explain(connector)` → `Promise<ExplainRow[]>` — the per-host × per-declared-surface
   matrix. Each row is `{ host, surface, support: "native"|"skip-warn"|"disabled", reason }`.
-  Only surfaces the connector actually declares are included.
+  Only surfaces the connector actually declares are included. The `hooks` row is judged
+  against **your connector's specific declared events** — a Stop-only connector reports
+  `skip-warn` (not `native`) on a host that cannot fire Stop, naming the dead events.
+- `explainHooks(connector, hosts)` → `Promise<HookEventVerdict[]>` — the per-`(host, event)`
+  honor matrix (`honored | degraded | dropped` + reason), powered by `simulate()`. This is
+  what `agent-connector doctor --explain` prints — the trustworthy per-event diagnostic,
+  no hand-enumeration of `(host, event)` pairs.
 - `simulate(connector, { surface, host, event?, input })` → `Promise<{ honored, hostReply?, reason }>`
   — runs the **real** adapter parse→handler→format chain offline and judges the
   actual `(event, decision)` contract. It encodes each host's real honor / drop /
@@ -376,14 +396,18 @@ Same one definition, your choice of distribution:
 ## Define once
 
 ```ts
+import { fileURLToPath } from "node:url";
 import { defineConnector } from "@ken-jo/agent-connector";
 
+// Resolve your server to an absolute path — host CLIs spawn it from their own CWD.
+const serverPath = fileURLToPath(new URL("./my-mcp-server.mjs", import.meta.url));
+
 export default defineConnector({
   id: "acme-db",
   server: {
     transport: "stdio",
-    command: "npx",
-    args: ["-y", "@acme/db-mcp"],
+    command: "node",           // or "npx", "python", etc. — whatever starts your server
+    args: [serverPath],        // replace with your real server entrypoint
     env: { ACME_DB_DSN: "${env:ACME_DB_DSN}" },
   },
   hooks: {
@@ -400,6 +424,19 @@ export default defineConnector({
 });
 ```
 
+> **Secret env-refs (`${env:VAR}`).** Write `"${env:VAR}"` in `command`, `args`,
+> `env`, `url`, or `headers` to reference an environment variable, or
+> `"${env:VAR:-default}"` to supply a fallback. On hosts with **native**
+> interpolation (Claude Code, Cursor, VS Code Copilot, amp, codebuff) the token
+> is written through to the host config and resolved at runtime — the secret is
+> never baked into a file. Every other host has **no** native interpolation, so
+> the value is resolved to a **literal at install time**. An unset variable with
+> no default resolves to an **empty string**; on a literal-resolving host that
+> would silently bake `""` where a secret was meant, so `install` now emits a
+> `warn` for it (e.g. *"ACME_DB_DSN is unset — baking an empty value into codex
+> config"*) — `export` the variable before installing, or give the ref a
+> `:-default`.
+
 > **Native hooks escape hatch.** The normalized `hooks` API covers the 13
 > cross-platform events. For host-only events — Claude Code alone ships 30
 > (`TaskCompleted`, `TeammateIdle`, `WorktreeCreate`, …) — declare
@@ -594,7 +631,7 @@ verdict — intentional).
 | `install [--scope user\|project] [--targets …] [--dry-run] [--force]` | Render + write MCP + hooks + content surfaces (commands / skills / subagents / memory) across targets. `--force` overwrites user-edited memory blocks (after a backup). |
 | `uninstall [--targets …]` | Full inverse — removes everything we wrote. |
 | `upgrade [--channel stable\|latest]` | One verb (alias: `update`, `sync`) — re-render host config + heal stale pointers + refresh the home-binary pointer, printing managed-update guidance (never a silent self-update). |
-| `doctor [--probe]` | Per-platform health checks with fixes; `--probe` runs a live MCP handshake (initialize → ping → tools/list) against the real server. |
+| `doctor [--probe] [--explain]` | Per-platform health checks with fixes; `--probe` runs a live MCP handshake (initialize → ping → tools/list) against the real server; `--explain` prints the per-`(host, event)` hook honor matrix (`honored` / `degraded` / `dropped` + reason) for the connector's declared events. **Exit code:** `--explain` fails (exit 1) ONLY when an explicitly-targeted host (`--targets` / `targets:[...]`) `degraded`s a declared event — it fires the event but silently won't honor the reply. A `dropped` cell (an mcp-only host that architecturally can't fire hooks) and fleet-wide gaps under `targets:"auto"` are expected and stay informational (exit 0) — the same scope-aware non-failure as plain `doctor`. |
 | `status` | Light install-state: which connectors are present on which hosts (always exits 0). |
 | `package [--format <fmt>\|all]` | Emit a host bundle, or an OFFICIAL standard artifact: `mcp-server-json` (registry) · `mcpb` (one-click bundle). |
 | `telemetry report [--by tool\|session\|project] [--since 7d] [--connector <id>]` | **MCP-developer track.** Per-tool token footprint of **your connector's own wrapped server** (scope with `--connector`). Stdio servers only. |
@@ -604,7 +641,7 @@ verdict — intentional).
 
 > `hook` and `serve` also exist — internal entrypoints the written host configs
 > point at; you never run them by hand. Full flag-level reference: the
-> [docs site `/docs/dev/cli`](https://github.com/ken-jo/agent-connector) · `llms-full.txt` §3 (canonical, drift-guarded by tests).
+> [docs site `/docs/dev/cli`](https://agent-connector.ai/docs/dev/cli) · `llms-full.txt` §3 (canonical, drift-guarded by tests).
 
 > A **branded CLI** auto-injects `--connector` for you: `<your-tool>
 > leaderboard` ≈ `agent-connector leaderboard --connector <id>`, and

package/dist/{action-RUM6GP23.js → action-TCKBTTZX.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import {
   fail
-} from "./chunk-NXR4HM5N.js";
+} from "./chunk-HKM3HUOK.js";
 import {
   runAction
-} from "./chunk-CSRBMJLU.js";
+} from "./chunk-MHDQWZ4A.js";
 import "./chunk-OP4KBXUO.js";
 import "./chunk-7QRUZAUG.js";
-import "./chunk-GCRRX4MO.js";
-import "./chunk-E45SUUD7.js";
+import "./chunk-TW4DVR4V.js";
+import "./chunk-24K6JOKV.js";
 import "./chunk-D6ZJS4ND.js";
 import "./chunk-KHO5WNTP.js";
-import "./chunk-RQCBBLTA.js";
-import "./chunk-UVBAH263.js";
-import "./chunk-LS65GL2P.js";
+import "./chunk-5LAFKXFM.js";
+import "./chunk-7ITLLYWB.js";
+import "./chunk-Q5LECKZL.js";
 import "./chunk-7CZKXXBD.js";
 import "./chunk-TO57WYBB.js";
 import "./chunk-ALVXORZM.js";
@@ -52,4 +52,4 @@ async function run(argv) {
 export {
   run
 };
-//# sourceMappingURL=action-RUM6GP23.js.map
+//# sourceMappingURL=action-TCKBTTZX.js.map

package/dist/{amazon-q-KXVJFT7Q.js → amazon-q-CB4XFX7T.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   resolveEnvRefsDeep
-} from "./chunk-DBQMX75U.js";
+} from "./chunk-BEFVJ2OE.js";
 import {
   BaseAdapter
-} from "./chunk-RHML2NOB.js";
+} from "./chunk-NUGMVVV2.js";
 import {
   buildWrappedStdio,
   isHomeBinHookCommand
@@ -563,4 +563,4 @@ export {
   adapter,
   amazon_q_default as default
 };
-//# sourceMappingURL=amazon-q-KXVJFT7Q.js.map
+//# sourceMappingURL=amazon-q-CB4XFX7T.js.map

package/dist/{amp-WAPHJYTK.js → amp-6Q5OYHNW.js}

@@ -4,11 +4,11 @@ import {
 } from "./chunk-FBJQGRET.js";
 import {
   rewriteEnvRefs
-} from "./chunk-DBQMX75U.js";
+} from "./chunk-BEFVJ2OE.js";
 import {
   BaseAdapter,
   renderSkillMd
-} from "./chunk-RHML2NOB.js";
+} from "./chunk-NUGMVVV2.js";
 import {
   buildWrappedStdio
 } from "./chunk-TO57WYBB.js";
@@ -68,6 +68,10 @@ var AmpAdapter = class extends BaseAdapter {
     canInjectSessionContext: false,
     // Amp registers stdio and Streamable HTTP MCP servers.
     transports: ["stdio", "http"],
+    // Server env/url use Amp's NATIVE ${env:VAR} interpolation (rewriteEnvRefs)
+    // — the token survives into the config, never a baked literal — so the
+    // installer's unset-env-ref bake warn does not apply here.
+    nativeServerEnvInterpolation: true,
     // Skills: Amp reads SKILL.md from ~/.config/agents/skills/<name>/SKILL.md
     // (user) and <projectDir>/.agents/skills/<name>/SKILL.md (project) — a root
     // OUTSIDE the config dir, so the skillDir() helper resolves it explicitly.
@@ -604,4 +608,4 @@ export {
   adapter,
   amp_default as default
 };
-//# sourceMappingURL=amp-WAPHJYTK.js.map
+//# sourceMappingURL=amp-6Q5OYHNW.js.map

package/dist/amp-6Q5OYHNW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/amp/index.ts"],"sourcesContent":["/**\n * adapters/amp — Amp (Sourcegraph / AmpCode) platform adapter for agent-connector.\n *\n * Amp is a **ts-plugin** host: alongside MCP it loads TypeScript plugin modules\n * from `.amp/plugins/<name>.ts`, each default-exporting a function `(amp) => void`\n * that registers lifecycle handlers via `amp.on(\"<event>\", async (event, ctx) =>\n * …)` (ampcode.com/manual → Plugins). This adapter wires the five amp.on events\n * that have a canonical analog and bridges them to the universal home-bin\n * entrypoint, exactly like the OMP / OpenCode ts-plugin adapters.\n *\n * Event mapping (only events the connector declares are subscribed):\n *   SessionStart     → amp.on(\"session.start\", …)  (thread begins; id = event.thread.id)\n *   UserPromptSubmit → amp.on(\"agent.start\",  …)   (user submits a prompt; observe-only)\n *   PreToolUse       → amp.on(\"tool.call\",     …)   (before a tool runs; deny → return\n *                       { action: \"reject-and-continue\" }, else { action: \"allow\" })\n *   PostToolUse      → amp.on(\"tool.result\",   …)   (after a tool finishes; observe-only)\n *   Stop             → amp.on(\"agent.end\",     …)   (turn ends; observe-only)\n * Amp documents NO session.end event, so SessionEnd is an honest gap (warn-skip\n * via the unsupported-here detail). tool.call's decision surface is the\n * { action } union (canModifyArgs:false — the \"modify\" input shape is not\n * documented); tool.result CAN return a replacement but the manual never\n * documents its object shape, so PostToolUse is observe-only (canModifyOutput:\n * false) rather than ship a guessed mutation; session.start has no documented\n * context-injection surface (canInjectSessionContext:false).\n *\n * Why we SYNTHESIZE a self-contained module instead of importing handlers:\n *   the connector's hook handlers are arbitrary developer code we must not import\n *   into Amp's (Bun) runtime — wrong cwd, wrong deps, version skew. So, like the\n *   OMP / OpenCode adapters, we generate a tiny ESM/TS plugin that imports NOTHING\n *   from agent-connector: each `amp.on(...)` handler shells out to the ONE stable\n *   home binary's universal entrypoint (`<homeBin> hook amp <event> --connector\n *   <id>`) over child_process, feeds it the amp-shaped payload as JSON on stdin,\n *   and JSON.parses the normalized HookResponse back from stdout. Fail-open: any\n *   bridge error → no-op. One entrypoint, every paradigm.\n *\n * Plugin scope: the `.amp/plugins/` dir is documented at PROJECT scope only; Amp\n * documents no user-scope plugins dir, so installHooks writes the plugin for\n * project scope and warn-skips user scope (the MCP + skills surfaces keep their\n * own user-scope paths). MCP config (report §2 / §5.3):\n *   - user scope    → ~/.config/amp/settings.json\n *   - project scope → <projectDir>/.amp/settings.json\n *   Both are JSONC (we write plain JSON, which is valid JSONC). The settings file\n *   is SHARED with the rest of Amp's configuration, so we MERGE our entry into\n *   the existing object and never clobber unrelated keys.\n *\n * QUIRK 1 — dotted top-level key: Amp does NOT use a nested `mcpServers` object.\n * The MCP registry is a single FLAT settings key literally named\n * `\"amp.mcpServers\"`, whose value is an object of `{ id: { command, args, env } }`.\n * We therefore set `settings[\"amp.mcpServers\"][connectorId] = entry`. Because the\n * base JSON helpers index `config[rootKey][serverId]`, passing the dotted string\n * as the root key writes exactly that flat key while preserving every sibling\n * setting (true merge).\n *\n * QUIRK 2 — native interpolation: Amp expands `${VAR_NAME}` in stdio entries at\n * runtime, so we KEEP env/header/url refs native by rewriting the portable\n * `${env:VAR}` syntax to Amp's `${VAR}` token rather than resolving to literals\n * (secrets stay out of the settings file).\n *\n * Skills surface: Amp reads SKILL.md files (dir-per-skill, same shape as\n * claude-code) from a skill root that is NOT under the config dir\n * (`~/.config/amp`):\n *   - user scope    → ~/.config/agents/skills/<name>/SKILL.md  (the sibling\n *     cross-agent `agents` dir — `~/.config/amp/skills/` is also documented-native,\n *     but the `agents` root is the cross-agent standard we standardize on)\n *   - project scope → <projectDir>/.agents/skills/<name>/SKILL.md\n * Because that root differs from getConfigDir, skills use a dedicated skillDir()\n * helper rather than reusing getConfigDir.\n */\n\nimport { existsSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\n\nimport { BaseAdapter } from \"../base.js\";\nimport type {\n  Adapter,\n  GeneratedPluginFile,\n  HookReply,\n  InstallContext,\n  NormalizedEvent,\n} from \"../spi.js\";\nimport type {\n  ChangeRecord,\n  DetectedPlatform,\n  HealthCheck,\n  HookEventName,\n  HookParadigm,\n  HookResponse,\n  PlatformCapabilities,\n  PlatformId,\n  PostToolUseEvent,\n  PreToolUseEvent,\n  ServerDef,\n  SessionStartEvent,\n  SkillDef,\n  StopEvent,\n  Transport,\n  UserPromptSubmitEvent,\n} from \"../../core/types.js\";\nimport { rewriteEnvRefs } from \"../../core/interpolate.js\";\nimport { renderBridgePrelude } from \"../../core/ts-plugin-bridge.js\";\nimport {\n  buildWrappedStdio,\n} from \"../../core/spawn.js\";\nimport { renderSkillMd } from \"../claude-code/render.js\";\n\nconst HOST: PlatformId = \"amp\";\n/**\n * QUIRK: a single FLAT, dotted settings key — NOT a nested object. The base\n * JSON helpers treat this as `config[\"amp.mcpServers\"][serverId]`.\n */\nconst MCP_ROOT_KEY = \"amp.mcpServers\";\n\n/**\n * Canonical → Amp plugin event name map. A connector hook event is only\n * subscribed by the generated plugin when it appears here AND is declared by the\n * connector. Names verified against ampcode.com/manual (Plugins → amp.on events).\n * Amp documents NO `session.end`, so SessionEnd has no entry (honest gap).\n */\nconst EVENT_TO_AMP: Partial<Record<HookEventName, string>> = {\n  SessionStart: \"session.start\",\n  UserPromptSubmit: \"agent.start\",\n  PreToolUse: \"tool.call\",\n  PostToolUse: \"tool.result\",\n  Stop: \"agent.end\",\n};\n\n/** Raw payload the generated plugin posts to the universal hook entrypoint. */\ninterface AmpBridgePayload {\n  toolName?: string;\n  toolInput?: Record<string, unknown>;\n  // ToolResultEvent.output is typed `unknown` by the host (@ampcode/plugin\n  // index.d.ts:947 — \"Tool output/result if available\"), so the bridge may\n  // forward a string OR a structured value; parseEvent stringifies non-strings.\n  toolOutput?: unknown;\n  isError?: boolean;\n  prompt?: string;\n  sessionId?: string;\n  projectDir?: string;\n}\n\n/** Native MCP server entry shapes Amp accepts under `amp.mcpServers`. */\ninterface AmpStdioServer {\n  command: string;\n  args?: string[];\n  env?: Record<string, string>;\n}\ninterface AmpHttpServer {\n  url: string;\n  headers?: Record<string, string>;\n}\n\nexport class AmpAdapter extends BaseAdapter implements Adapter {\n  readonly id: PlatformId = HOST;\n  readonly name = \"Amp\";\n  readonly paradigm: HookParadigm = \"ts-plugin\";\n\n  readonly capabilities: PlatformCapabilities = {\n    // Memory surface: AGENTS.md-first managed block via the BaseAdapter default\n    // (memoryTargets: project <projectDir>/AGENTS.md; user scope where documented).\n    supportsMemory: true,\n    // amp.on lifecycle events with a canonical analog (EVENT_TO_AMP):\n    // tool.call / tool.result / session.start / agent.start / agent.end.\n    preToolUse: true,\n    postToolUse: true,\n    // Amp has no documented compaction hook.\n    preCompact: false,\n    sessionStart: true,\n    // Amp documents NO session.end event — SessionEnd is an honest gap.\n    sessionEnd: false,\n    userPromptSubmit: true,\n    stop: true,\n    notification: false,\n    // Newer events: Amp documents no permission/approval, post-tool-failure, or\n    // subagent lifecycle hook with a canonical analog, so permissionRequest /\n    // postToolUseFailure / subagentStart / subagentStop stay unset — the\n    // generated bridge never references them and install reports them as\n    // \"unsupported here\".\n    // tool.call's documented decision surface is { action: \"allow\" |\n    // \"reject-and-continue\" | \"modify\" | \"synthesize\" } (ampcode.com/manual →\n    // Plugins → tool.call). We wire allow + reject-and-continue (block); the\n    // \"modify\" input-rewrite shape is not byte-documented, so canModifyArgs:false.\n    canModifyArgs: false,\n    // tool.result says \"return a replacement status/output\" but the manual never\n    // documents the replacement OBJECT SHAPE (which keys). Rather than guess it,\n    // PostToolUse is observe-only and canModifyOutput stays false until the shape\n    // is primary-source-verified (honesty bar: under-claim, never emit a guessed\n    // mutation contract).\n    canModifyOutput: false,\n    // session.start has no documented context-injection surface.\n    canInjectSessionContext: false,\n    // Amp registers stdio and Streamable HTTP MCP servers.\n    transports: [\"stdio\", \"http\"],\n    // Server env/url use Amp's NATIVE ${env:VAR} interpolation (rewriteEnvRefs)\n    // — the token survives into the config, never a baked literal — so the\n    // installer's unset-env-ref bake warn does not apply here.\n    nativeServerEnvInterpolation: true,\n    // Skills: Amp reads SKILL.md from ~/.config/agents/skills/<name>/SKILL.md\n    // (user) and <projectDir>/.agents/skills/<name>/SKILL.md (project) — a root\n    // OUTSIDE the config dir, so the skillDir() helper resolves it explicitly.\n    supportsSkills: true,\n    // Native passthrough hooks: amp.on events with no canonical HookEventName\n    // analog are reachable via platforms[\"amp\"].nativeHooks; the generated plugin\n    // registers + bridges each declared native event verbatim and the home-bin\n    // runtime dispatches it host-generically via runNativeHook.\n    supportsNativeHooks: true,\n  };\n\n  // ── Detection ────────────────────────────────────────────────────────────\n\n  detectInstalled(projectDir: string): DetectedPlatform {\n    const userDir = join(homedir(), \".config\", \"amp\");\n    const userSettings = join(userDir, \"settings.json\");\n    const projectDirAmp = join(projectDir, \".amp\");\n    const projectSettings = join(projectDirAmp, \"settings.json\");\n\n    const userInstalled = existsSync(userDir) || existsSync(userSettings);\n    const projectInstalled = existsSync(projectDirAmp) || existsSync(projectSettings);\n    const installed = userInstalled || projectInstalled;\n    const scope = projectInstalled && !userInstalled ? \"project\" : \"user\";\n    const configPath = scope === \"project\" ? projectSettings : userSettings;\n\n    return {\n      id: this.id,\n      name: this.name,\n      installed,\n      paradigm: this.paradigm,\n      capabilities: this.capabilities,\n      configPath,\n      scope,\n      reason: installed\n        ? `found Amp config (${scope}) at ${configPath}`\n        : `no Amp config at ${userSettings} or ${projectSettings}`,\n      confidence: installed ? \"high\" : \"low\",\n    };\n  }\n\n  // ── Native paths ─────────────────────────────────────────────────────────\n\n  getConfigDir(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \".amp\")\n      : join(homedir(), \".config\", \"amp\");\n  }\n\n  getServerConfigPath(ctx: InstallContext): string {\n    return join(this.getConfigDir(ctx), \"settings.json\");\n  }\n\n  /**\n   * For this ts-plugin host the \"hook config path\" is the generated plugin\n   * MODULE. Amp loads every `.ts` file in `.amp/plugins/`, so writing this file\n   * IS the registration. The `.amp/plugins/` dir is documented at PROJECT scope\n   * (Amp documents no user-scope plugins dir — see pluginsDir); the user-scope\n   * path is returned for doctor/uninstall symmetry but installHooks warn-skips it.\n   */\n  getHookConfigPath(ctx: InstallContext): string {\n    return join(this.pluginsDir(ctx), `${ctx.connector.id}.ts`);\n  }\n\n  /**\n   * Plugin directory Amp auto-loads `.ts` modules from. PROJECT scope is the\n   * documented `<projectDir>/.amp/plugins`; user scope mirrors the MCP config dir\n   * (`~/.config/amp/plugins`) for path symmetry only — installHooks never writes\n   * there because Amp documents no user-scope plugins dir.\n   */\n  private pluginsDir(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \".amp\", \"plugins\")\n      : join(this.getConfigDir(ctx), \"plugins\");\n  }\n\n  // ── MCP server install / uninstall ───────────────────────────────────────\n\n  installServer(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    const override = connector.platforms[HOST]?.server;\n    if (!connector.server || override === false) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          detail: connector.server\n            ? \"server registration disabled for amp\"\n            : \"connector declares no MCP server\",\n        },\n      ];\n    }\n\n    // Shallow-merge any per-platform server override into the base ServerDef.\n    const server: ServerDef =\n      override && typeof override === \"object\"\n        ? { ...connector.server, ...override }\n        : connector.server;\n\n    const serverPath = this.getServerConfigPath(ctx);\n    const entry = this.renderServerEntry(ctx, server);\n\n    // Upsert into the flat \"amp.mcpServers\" key, merging into existing settings.\n    return [\n      this.upsertServerInJson(serverPath, MCP_ROOT_KEY, connector.id, entry, ctx.dryRun),\n    ];\n  }\n\n  uninstallServer(ctx: InstallContext): ChangeRecord[] {\n    const serverPath = this.getServerConfigPath(ctx);\n    return [\n      this.removeServerFromJson(serverPath, MCP_ROOT_KEY, ctx.connector.id, ctx.dryRun),\n    ];\n  }\n\n  /** Render a normalized ServerDef into Amp's native `amp.mcpServers` entry. */\n  private renderServerEntry(\n    ctx: InstallContext,\n    server: ServerDef,\n  ): AmpStdioServer | AmpHttpServer {\n    const transport: Transport = server.transport;\n\n    if (transport === \"stdio\") {\n      let command = server.command ?? \"\";\n      let args = [...(server.args ?? [])];\n\n      // Transparent telemetry wrapping: route the real command through\n      // `<homeBin> serve --connector <id> -- <command> <args...>`.\n      ({ command, args } = buildWrappedStdio(ctx, server, this.id, command, args));\n\n      // Amp expands ${VAR_NAME} natively, so keep refs native (no literals).\n      const entry: AmpStdioServer = { command: this.rewrite(command) };\n      if (args.length > 0) entry.args = args.map((a) => this.rewrite(a));\n      const env = this.renderEnv(server.env);\n      if (env) entry.env = env;\n      return entry;\n    }\n\n    // http (and any other remote transport we surface) — Amp registers a URL.\n    const entry: AmpHttpServer = { url: this.rewrite(server.url ?? \"\") };\n    const headers = this.renderEnv(server.headers);\n    if (headers) entry.headers = headers;\n    return entry;\n  }\n\n  /**\n   * Render env/header values. Amp supports native `${VAR_NAME}` interpolation,\n   * so translate `${env:VAR}` refs to that native token rather than baking\n   * secrets into the file. Literals pass through unchanged.\n   */\n  private renderEnv(\n    env: Record<string, string> | undefined,\n  ): Record<string, string> | undefined {\n    if (!env || Object.keys(env).length === 0) return undefined;\n    const out: Record<string, string> = {};\n    for (const [k, v] of Object.entries(env)) out[k] = this.rewrite(v);\n    return out;\n  }\n\n  /** Translate `${env:VAR(:-default)}` to Amp's native `${VAR}` token. */\n  private rewrite(value: string): string {\n    return rewriteEnvRefs(value, ampEnvToken);\n  }\n\n  // ── Skills surface ───────────────────────────────────────────────────────\n  // CONTENT-ONLY: pure native-file writers under the skill root. No runtime\n  // dispatch, no home-bin pointer, no telemetry wrap. Idempotent (byte-identical\n  // → skip) via writeContentFile and reversible via removeContentFile. Honors\n  // platforms[\"amp\"].skills === false to skip.\n  //\n  // QUIRK: the skill root is NOT under getConfigDir (~/.config/amp). Amp reads\n  // SKILL.md from the sibling cross-agent `agents` tree:\n  //   user scope    → ~/.config/agents/skills/<name>/SKILL.md\n  //   project scope → <projectDir>/.agents/skills/<name>/SKILL.md\n  // so skillDir() resolves it explicitly rather than reusing getConfigDir.\n\n  /** Skill root: user `~/.config/agents/skills`, project `<projectDir>/.agents/skills`. */\n  private skillsDir(ctx: InstallContext): string {\n    return ctx.scope === \"project\"\n      ? join(ctx.projectDir, \".agents\", \"skills\")\n      : join(homedir(), \".config\", \"agents\", \"skills\");\n  }\n\n  /** Native skill dir: <skillRoot>/<name>. */\n  private skillDir(ctx: InstallContext, name: string): string {\n    return join(this.skillsDir(ctx), name);\n  }\n\n  override installSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.platforms[HOST]?.skills === false) {\n      return [{ platform: this.id, action: \"skip\", detail: \"skills disabled for amp\" }];\n    }\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      changes.push(\n        this.writeContentFile(join(dir, \"SKILL.md\"), this.renderSkill(skill), ctx.dryRun),\n      );\n      // Bundle any resource files beside SKILL.md (relative path → contents).\n      // Defense-in-depth: skip+warn on any key that escapes the skill dir\n      // (config-time validation already rejects these, but never trust input).\n      for (const [rel, contents] of Object.entries(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) {\n          changes.push({\n            platform: this.id,\n            action: \"warn\",\n            detail: `skill resource \"${rel}\" escapes the skill dir; skipped`,\n          });\n          continue;\n        }\n        changes.push(this.writeContentFile(target, contents, ctx.dryRun));\n      }\n    }\n    return changes;\n  }\n\n  override uninstallSkills(ctx: InstallContext): ChangeRecord[] {\n    const { connector } = ctx;\n    if (connector.skills.length === 0) {\n      return [{ platform: this.id, action: \"skip\", detail: \"connector declares no skills\" }];\n    }\n    const changes: ChangeRecord[] = [];\n    for (const skill of connector.skills) {\n      const dir = this.skillDir(ctx, skill.name);\n      // Remove only the files we wrote (SKILL.md + declared resources), then the\n      // skill dir itself when we own its full contents.\n      changes.push(this.removeContentFile(join(dir, \"SKILL.md\"), ctx.dryRun));\n      for (const rel of Object.keys(skill.resources ?? {})) {\n        const target = this.resolveWithin(dir, rel);\n        if (target === null) continue; // never delete outside the skill dir\n        changes.push(this.removeContentFile(target, ctx.dryRun));\n      }\n      // Only remove the skill dir when WE own its full contents — never rm -rf a\n      // dir that still holds user-added / sibling-tool / shared files.\n      changes.push(this.removeDirIfEmpty(dir, ctx.dryRun));\n    }\n    return changes;\n  }\n\n  /** Render a skill's SKILL.md (delegates to the shared renderer). */\n  private renderSkill(skill: SkillDef): string {\n    return renderSkillMd(skill);\n  }\n\n  // ── Hook install / uninstall (ts-plugin module) ──────────────────────────\n\n  installHooks(ctx: InstallContext): ChangeRecord[] {\n    const pluginPath = this.getHookConfigPath(ctx);\n\n    // Amp documents no user-scope plugins dir — only `.amp/plugins/` at project\n    // scope. Degradation is never silent: warn-skip rather than write to an\n    // unverified user path.\n    if (ctx.scope !== \"project\") {\n      return [\n        {\n          platform: this.id,\n          action: \"warn\",\n          path: pluginPath,\n          detail:\n            \"amp plugins are project-scoped (.amp/plugins/) — no user-scope plugins dir is documented; skipped\",\n        },\n      ];\n    }\n\n    // Native passthrough events are a sibling, amp-scoped declaration: `hooks:\n    // false` disables only the CANONICAL events, and the generated native loop\n    // reads platforms.amp.nativeHooks directly (independent of hookEvents). So\n    // whenever native events exist the plugin must still be synthesized.\n    const canonicalDisabled = ctx.connector.platforms[HOST]?.hooks === false;\n    const hasCanonical = !canonicalDisabled && ctx.connector.hookEvents.length > 0;\n    const hasNative = this.nativeHookEvents(ctx).length > 0;\n\n    if (!hasCanonical && !hasNative) {\n      return [\n        {\n          platform: this.id,\n          action: \"skip\",\n          path: pluginPath,\n          detail: canonicalDisabled\n            ? \"hooks disabled for amp\"\n            : \"connector declares no hooks\",\n        },\n      ];\n    }\n\n    const files = this.synthesizePlugin(ctx);\n    const changes: ChangeRecord[] = [];\n\n    for (const file of files) {\n      changes.push(\n        this.writeManagedFile(\n          file.path,\n          file.contents,\n          ctx.dryRun,\n          `amp plugin module (${this.hookDetail(ctx)})`,\n          file.executable,\n        ),\n      );\n    }\n\n    return changes;\n  }\n\n  uninstallHooks(ctx: InstallContext): ChangeRecord[] {\n    const pluginPath = this.getHookConfigPath(ctx);\n    return [\n      this.removeManagedFile(pluginPath, ctx.dryRun, \"amp plugin module\", \"no amp plugin module present\"),\n    ];\n  }\n\n  /**\n   * Human-facing summary of which declared events the synthesized module ACTUALLY\n   * wires. Only events present in EVENT_TO_AMP are mapped/wired; any declared\n   * event with no Amp mapping (e.g. SessionEnd) is reported separately as\n   * \"unsupported here\" so the detail never overstates coverage.\n   */\n  private hookDetail(ctx: InstallContext): string {\n    // `hooks: false` suppresses the canonical handlers, so the detail must not\n    // claim them; native events are still reported below.\n    const canonicalOff = ctx.connector.platforms[HOST]?.hooks === false;\n    const declared = canonicalOff ? [] : ctx.connector.hookEvents;\n    const mapped = declared.filter((e) => EVENT_TO_AMP[e] !== undefined);\n    const unsupported = declared.filter((e) => EVENT_TO_AMP[e] === undefined);\n    const native = this.nativeHookEvents(ctx);\n    const parts: string[] = [];\n    if (mapped.length > 0) parts.push(mapped.join(\",\"));\n    if (native.length > 0) parts.push(`native: ${native.join(\",\")}`);\n    const base = parts.join(\"; \") || \"no canonical hooks\";\n    return unsupported.length > 0\n      ? `${base}; unsupported here: ${unsupported.join(\",\")}`\n      : base;\n  }\n\n  /**\n   * Amp-native passthrough events declared on platforms[\"amp\"].nativeHooks\n   * (amp.on event names with no canonical HookEventName analog). Emitted as\n   * generic bridge registrations and dispatched host-generically by the home-bin's\n   * runNativeHook.\n   */\n  private nativeHookEvents(ctx: InstallContext): string[] {\n    return Object.keys(ctx.connector.platforms[HOST]?.nativeHooks ?? {});\n  }\n\n  // ── ts-plugin synthesis ──────────────────────────────────────────────────\n\n  /**\n   * Build ONE self-contained Amp plugin module (`.amp/plugins/<id>.ts`). It\n   * imports nothing from agent-connector; each `amp.on(...)` handler shells out to\n   * the universal hook entrypoint via child_process and applies the normalized\n   * HookResponse. Its default export is the Amp plugin function `(amp) => void`.\n   */\n  synthesizePlugin(ctx: InstallContext): GeneratedPluginFile[] {\n    const path = this.getHookConfigPath(ctx);\n    const contents = this.buildPluginSource(ctx);\n    return [{ path, contents, executable: false }];\n  }\n\n  /** Compose the generated plugin source with plain string concatenation. */\n  private buildPluginSource(ctx: InstallContext): string {\n    // `platforms.amp.hooks === false` disables only the CANONICAL events (the\n    // native loop below reads platforms.amp.nativeHooks directly and is a sibling,\n    // unaffected). When canonical hooks are off the module may still be\n    // synthesized for native events, so the canonical handler set collapses to\n    // empty here rather than short-circuiting the whole plugin.\n    const canonicalOff = ctx.connector.platforms[HOST]?.hooks === false;\n    const events = canonicalOff\n      ? []\n      : ctx.connector.hookEvents.filter(\n          (e): e is HookEventName => EVENT_TO_AMP[e] !== undefined,\n        );\n    const has = (e: HookEventName) => events.includes(e);\n\n    const header = `/**\n * AUTO-GENERATED by agent-connector — DO NOT EDIT.\n *\n * Self-contained Amp plugin for connector ${ctx.connector.id}.\n * It imports nothing from agent-connector: every hook invocation shells out to\n * the stable home binary's universal entrypoint and JSON-parses the normalized\n * response. Fail-open: any bridge error degrades to a no-op (never wedges Amp).\n *\n * Amp loads this module from .amp/plugins/${ctx.connector.id}.ts; the default\n * export is the plugin function (amp) => void called once with the PluginAPI.\n */\nimport type { PluginAPI } from \"@ampcode/plugin\";\nimport { execFileSync, execSync } from \"node:child_process\";\n\n${renderBridgePrelude({\n  homeBin: ctx.homeBinPath,\n  connectorId: ctx.connector.id,\n  hookSlug: \"amp\",\n  payloadNoun: \"amp\",\n  failOpenComment: \"Fail-open — never wedge an Amp tool call / lifecycle event.\",\n})}\n\n// Amp documents no project-dir env var; the plugin process runs in the workspace\n// root, so resolve once at load. Session id is rebound on each session.start.\nconst PROJECT_DIR = process.cwd();\nlet SESSION_ID = \"\";\n`;\n\n    const handlers: string[] = [];\n\n    if (has(\"SessionStart\")) {\n      handlers.push(`  // SessionStart → rebind the session id and notify the connector.\n  // Amp's session.start event carries event.thread.id (ampcode.com/manual →\n  // Plugins → session.start: \"Example session.start for \\${event.thread.id}\").\n  amp.on(\"session.start\", async (event) => {\n    SESSION_ID =\n      (event && event.thread && event.thread.id) || \"amp-session\";\n    bridge(\"SessionStart\", { sessionId: SESSION_ID, projectDir: PROJECT_DIR });\n  });`);\n    }\n\n    if (has(\"UserPromptSubmit\")) {\n      handlers.push(`  // UserPromptSubmit → agent.start \"fires when the user submits a prompt\"\n  // (ampcode.com/manual). The host DOES carry the prompt: AgentStartEvent.message\n  // is \"The user's prompt message\" (@ampcode/plugin index.d.ts:1011-1012), so we\n  // PROJECT event.message into the bridge payload's prompt key (the prior version\n  // dropped it). Observe-only return surface — any deny/context decision is a no-op.\n  amp.on(\"agent.start\", async (event) => {\n    bridge(\"UserPromptSubmit\", {\n      prompt: (event && typeof event.message === \"string\" && event.message) || \"\",\n      sessionId: SESSION_ID,\n      projectDir: PROJECT_DIR,\n      raw: event,\n    });\n  });`);\n    }\n\n    if (has(\"PreToolUse\")) {\n      handlers.push(`  // PreToolUse → Amp's tool.call returns a decision union (ampcode.com/manual →\n  // Plugins → tool.call): { action: \"allow\" } to run, or { action:\n  // \"reject-and-continue\", message } to block and let the agent continue. The\n  // tool name is event.tool (verified); the input field is not byte-documented,\n  // so event.input is a best-effort hint for the connector's matcher (the matcher\n  // keys on the verified tool name). A deny/ask decision maps to reject-and-\n  // continue; everything else allows.\n  amp.on(\"tool.call\", async (event) => {\n    const payload = {\n      toolName: (event && event.tool) || \"\",\n      toolInput: (event && event.input) || {},\n      sessionId: SESSION_ID,\n      projectDir: PROJECT_DIR,\n    };\n    const res = bridge(\"PreToolUse\", payload);\n    if (res && (res.decision === \"deny\" || res.decision === \"ask\")) {\n      return {\n        action: \"reject-and-continue\",\n        message: res.reason || \"Blocked by ${ctx.connector.id}\",\n      };\n    }\n    return { action: \"allow\" };\n  });`);\n    }\n\n    if (has(\"PostToolUse\")) {\n      handlers.push(`  // PostToolUse → tool.result \"fires after a tool finishes and before the result\n  // is sent back to the model\" (ampcode.com/manual). The tool name is event.tool\n  // and the error signal is event.status === \"error\" (both verified). The host DOES\n  // carry the output: ToolResultEvent extends ToolResult.output (typed unknown —\n  // \"Tool output/result if available\", @ampcode/plugin index.d.ts:946-947,976), so\n  // we PROJECT event.output into the bridge payload's toolOutput (prior version\n  // dropped it). Replacement still observe-only (canModifyOutput:false) — the\n  // replacement OBJECT shape is undocumented, so we never return a guessed mutation.\n  amp.on(\"tool.result\", async (event) => {\n    bridge(\"PostToolUse\", {\n      toolName: (event && event.tool) || \"\",\n      toolOutput: event && event.output,\n      isError: !!(event && event.status === \"error\"),\n      sessionId: SESSION_ID,\n      projectDir: PROJECT_DIR,\n      raw: event,\n    });\n  });`);\n    }\n\n    if (has(\"Stop\")) {\n      handlers.push(`  // Stop → observe turn end. Amp's agent.end exposes no decision surface, so\n  // this is observe-only (a deny decision degrades to a no-op).\n  amp.on(\"agent.end\", async (event) => {\n    bridge(\"Stop\", { sessionId: SESSION_ID, projectDir: PROJECT_DIR, raw: event });\n  });`);\n    }\n\n    // NATIVE passthrough events: amp.on event names with no canonical analog,\n    // declared on platforms.amp.nativeHooks (independent of hookEvents, so they\n    // install even with hooks:false). Each bridges the NATIVE event name verbatim\n    // to the home-bin → runNativeHook dispatches it host-generically.\n    for (const ev of this.nativeHookEvents(ctx)) {\n      const key = JSON.stringify(ev);\n      handlers.push(`  // nativeHooks passthrough → ${ev}\n  amp.on(${key}, async (event) => {\n    bridge(${key}, { sessionId: SESSION_ID, projectDir: PROJECT_DIR, raw: event });\n  });`);\n    }\n\n    const factory = `\nexport default function plugin(amp: PluginAPI) {\n${handlers.join(\"\\n\\n\")}\n}\n`;\n\n    return header + factory;\n  }\n\n  // ── Runtime: parse OUR bridge payload → normalized event ─────────────────\n\n  /**\n   * `raw` is the payload OUR generated plugin posts (NOT a host-native shape):\n   *   { toolName?, toolInput?, toolOutput?, isError?, prompt?, sessionId?, projectDir? }\n   * so this maps straight through.\n   */\n  parseEvent(event: HookEventName, raw: unknown): NormalizedEvent {\n    const input = (raw ?? {}) as AmpBridgePayload;\n    const base = {\n      hostPlatform: HOST,\n      connectorId: \"\",\n      sessionId: typeof input.sessionId === \"string\" ? input.sessionId : \"\",\n      raw,\n      ...(typeof input.projectDir === \"string\"\n        ? { projectDir: input.projectDir }\n        : {}),\n    } as const;\n\n    switch (event) {\n      case \"PreToolUse\": {\n        const ev: PreToolUseEvent = {\n          ...base,\n          toolName: input.toolName ?? \"\",\n          toolInput: input.toolInput ?? {},\n        };\n        return ev;\n      }\n      case \"PostToolUse\": {\n        // ToolResultEvent.output is typed `unknown` by the host (@ampcode/plugin\n        // index.d.ts:947), so the bridge can forward a string OR a structured value.\n        // Accept both: pass strings through, JSON-stringify other non-nullish\n        // values (the old `typeof === \"string\"` guard silently dropped the latter).\n        const out = coerceToolOutput(input.toolOutput);\n        const ev: PostToolUseEvent = {\n          ...base,\n          toolName: input.toolName ?? \"\",\n          toolInput: input.toolInput ?? {},\n          ...(out !== undefined ? { toolOutput: out } : {}),\n          ...(typeof input.isError === \"boolean\"\n            ? { isError: input.isError }\n            : {}),\n        };\n        return ev;\n      }\n      case \"UserPromptSubmit\": {\n        const ev: UserPromptSubmitEvent = {\n          ...base,\n          prompt: typeof input.prompt === \"string\" ? input.prompt : \"\",\n        };\n        return ev;\n      }\n      case \"Stop\": {\n        const ev: StopEvent = { ...base };\n        return ev;\n      }\n      case \"SessionStart\": {\n        const ev: SessionStartEvent = { ...base, source: \"startup\" };\n        return ev;\n      }\n      default:\n        // Other canonical events are not surfaced by Amp; treat as a\n        // session-start-shaped no-op so the dispatcher fails open gracefully.\n        return { ...base, source: \"startup\" } satisfies SessionStartEvent;\n    }\n  }\n\n  // ── Runtime: normalized response → reply the generated bridge parses ─────\n\n  /**\n   * Unlike json-stdio hosts (whose reply is the host's NATIVE control payload),\n   * OUR generated bridge consumes this stdout directly. So the reply body is the\n   * NORMALIZED HookResponse itself — the bridge JSON.parses it and, for tool.call,\n   * maps a deny/ask decision → { action: \"reject-and-continue\" } (else allow).\n   * Other events are observe-only, so their reply is ignored by the handler.\n   */\n  formatReply(_event: HookEventName, response: HookResponse): HookReply {\n    return {\n      exitCode: 0,\n      stdout: JSON.stringify(response ?? { decision: \"allow\" }),\n    };\n  }\n\n  // ── Diagnostics ──────────────────────────────────────────────────────────\n\n  override getHealthChecks(ctx: InstallContext): readonly HealthCheck[] {\n    const settingsPath = this.getServerConfigPath(ctx);\n    const connectorId = ctx.connector.id;\n    return [\n      {\n        name: `${this.name}: settings.json present`,\n        check: () =>\n          existsSync(settingsPath)\n            ? { status: \"OK\", detail: settingsPath }\n            : { status: \"FAIL\", detail: `not found: ${settingsPath}` },\n      },\n      {\n        name: `${this.name}: server entry registered`,\n        check: () => {\n          // Only assert what the connector declares: a server-less connector\n          // never writes a server entry, so its absence is healthy.\n          if (!ctx.connector.server) {\n            return { status: \"OK\", detail: \"no MCP server declared\" };\n          }\n          const cfg = this.readJson<{ [k: string]: Record<string, unknown> }>(settingsPath);\n          const bucket = cfg?.[MCP_ROOT_KEY];\n          if (!cfg || !bucket) {\n            return { status: \"FAIL\", detail: `no \"${MCP_ROOT_KEY}\" in ${settingsPath}` };\n          }\n          return connectorId in bucket\n            ? { status: \"OK\", detail: `\"${MCP_ROOT_KEY}\".${connectorId} present` }\n            : {\n                status: \"FAIL\",\n                detail: `no \"${MCP_ROOT_KEY}\".${connectorId} in ${settingsPath}`,\n              };\n        },\n      },\n      {\n        name: `${this.name}: plugin module present`,\n        check: () => {\n          const hasHooks =\n            ctx.connector.hookEvents.length > 0 ||\n            this.nativeHookEvents(ctx).length > 0;\n          if (!hasHooks) return { status: \"OK\", detail: \"no hooks declared\" };\n          // Amp plugins are project-scoped; a user-scope install warn-skips the\n          // plugin, so its absence there is healthy.\n          if (ctx.scope !== \"project\") {\n            return {\n              status: \"OK\",\n              detail: \"amp plugins are project-scoped (user scope skipped)\",\n            };\n          }\n          const pluginPath = this.getHookConfigPath(ctx);\n          return existsSync(pluginPath)\n            ? { status: \"OK\", detail: pluginPath }\n            : { status: \"FAIL\", detail: `not found: ${pluginPath}` };\n        },\n      },\n    ];\n  }\n\n  /** Read a file, returning undefined on any error (idempotency compare). */\n}\n\n/**\n * Coerce Amp's `ToolResultEvent.output` (typed `unknown` upstream) into the\n * normalized event's `toolOutput: string`. Strings pass through; other\n * non-nullish values (objects / arrays / numbers) are JSON-stringified so a\n * structured tool result is no longer silently dropped. `undefined`/`null`\n * yields `undefined` (the key is omitted by the caller).\n */\nfunction coerceToolOutput(value: unknown): string | undefined {\n  if (typeof value === \"string\") return value;\n  if (value === undefined || value === null) return undefined;\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\n/**\n * Amp native interpolation token: `${env:VAR}` → `${VAR}`.\n *\n * When the portable ref carried a default (`${env:VAR:-fallback}`), Amp's native\n * `${VAR}` token has no way to express it — so a bare native token would silently\n * DROP the default. Instead, resolve the default at install time: emit the live\n * value when VAR is set and non-empty, else the literal fallback. The native\n * token is only emitted when there is no default to preserve.\n */\nfunction ampEnvToken(name: string, def?: string): string {\n  if (def !== undefined) {\n    const v = process.env[name];\n    return v != null && v !== \"\" ? v : def;\n  }\n  return `\\${${name}}`;\n}\n\nexport const adapter = new AmpAdapter();\nexport default adapter;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqEA,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,YAAY;AAmCrB,IAAM,OAAmB;AAKzB,IAAM,eAAe;AAQrB,IAAM,eAAuD;AAAA,EAC3D,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,MAAM;AACR;AA2BO,IAAM,aAAN,cAAyB,YAA+B;AAAA,EACpD,KAAiB;AAAA,EACjB,OAAO;AAAA,EACP,WAAyB;AAAA,EAEzB,eAAqC;AAAA;AAAA;AAAA,IAG5C,gBAAgB;AAAA;AAAA;AAAA,IAGhB,YAAY;AAAA,IACZ,aAAa;AAAA;AAAA,IAEb,YAAY;AAAA,IACZ,cAAc;AAAA;AAAA,IAEd,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,MAAM;AAAA,IACN,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUd,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMf,iBAAiB;AAAA;AAAA,IAEjB,yBAAyB;AAAA;AAAA,IAEzB,YAAY,CAAC,SAAS,MAAM;AAAA;AAAA;AAAA;AAAA,IAI5B,8BAA8B;AAAA;AAAA;AAAA;AAAA,IAI9B,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA,IAKhB,qBAAqB;AAAA,EACvB;AAAA;AAAA,EAIA,gBAAgB,YAAsC;AACpD,UAAM,UAAU,KAAK,QAAQ,GAAG,WAAW,KAAK;AAChD,UAAM,eAAe,KAAK,SAAS,eAAe;AAClD,UAAM,gBAAgB,KAAK,YAAY,MAAM;AAC7C,UAAM,kBAAkB,KAAK,eAAe,eAAe;AAE3D,UAAM,gBAAgB,WAAW,OAAO,KAAK,WAAW,YAAY;AACpE,UAAM,mBAAmB,WAAW,aAAa,KAAK,WAAW,eAAe;AAChF,UAAM,YAAY,iBAAiB;AACnC,UAAM,QAAQ,oBAAoB,CAAC,gBAAgB,YAAY;AAC/D,UAAM,aAAa,UAAU,YAAY,kBAAkB;AAE3D,WAAO;AAAA,MACL,IAAI,KAAK;AAAA,MACT,MAAM,KAAK;AAAA,MACX;AAAA,MACA,UAAU,KAAK;AAAA,MACf,cAAc,KAAK;AAAA,MACnB;AAAA,MACA;AAAA,MACA,QAAQ,YACJ,qBAAqB,KAAK,QAAQ,UAAU,KAC5C,oBAAoB,YAAY,OAAO,eAAe;AAAA,MAC1D,YAAY,YAAY,SAAS;AAAA,IACnC;AAAA,EACF;AAAA;AAAA,EAIA,aAAa,KAA6B;AACxC,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,MAAM,IAC3B,KAAK,QAAQ,GAAG,WAAW,KAAK;AAAA,EACtC;AAAA,EAEA,oBAAoB,KAA6B;AAC/C,WAAO,KAAK,KAAK,aAAa,GAAG,GAAG,eAAe;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,kBAAkB,KAA6B;AAC7C,WAAO,KAAK,KAAK,WAAW,GAAG,GAAG,GAAG,IAAI,UAAU,EAAE,KAAK;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,WAAW,KAA6B;AAC9C,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,QAAQ,SAAS,IACtC,KAAK,KAAK,aAAa,GAAG,GAAG,SAAS;AAAA,EAC5C;AAAA;AAAA,EAIA,cAAc,KAAqC;AACjD,UAAM,EAAE,UAAU,IAAI;AACtB,UAAM,WAAW,UAAU,UAAU,IAAI,GAAG;AAC5C,QAAI,CAAC,UAAU,UAAU,aAAa,OAAO;AAC3C,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,QAAQ,UAAU,SACd,yCACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAGA,UAAM,SACJ,YAAY,OAAO,aAAa,WAC5B,EAAE,GAAG,UAAU,QAAQ,GAAG,SAAS,IACnC,UAAU;AAEhB,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,UAAM,QAAQ,KAAK,kBAAkB,KAAK,MAAM;AAGhD,WAAO;AAAA,MACL,KAAK,mBAAmB,YAAY,cAAc,UAAU,IAAI,OAAO,IAAI,MAAM;AAAA,IACnF;AAAA,EACF;AAAA,EAEA,gBAAgB,KAAqC;AACnD,UAAM,aAAa,KAAK,oBAAoB,GAAG;AAC/C,WAAO;AAAA,MACL,KAAK,qBAAqB,YAAY,cAAc,IAAI,UAAU,IAAI,IAAI,MAAM;AAAA,IAClF;AAAA,EACF;AAAA;AAAA,EAGQ,kBACN,KACA,QACgC;AAChC,UAAM,YAAuB,OAAO;AAEpC,QAAI,cAAc,SAAS;AACzB,UAAI,UAAU,OAAO,WAAW;AAChC,UAAI,OAAO,CAAC,GAAI,OAAO,QAAQ,CAAC,CAAE;AAIlC,OAAC,EAAE,SAAS,KAAK,IAAI,kBAAkB,KAAK,QAAQ,KAAK,IAAI,SAAS,IAAI;AAG1E,YAAMA,SAAwB,EAAE,SAAS,KAAK,QAAQ,OAAO,EAAE;AAC/D,UAAI,KAAK,SAAS,EAAG,CAAAA,OAAM,OAAO,KAAK,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;AACjE,YAAM,MAAM,KAAK,UAAU,OAAO,GAAG;AACrC,UAAI,IAAK,CAAAA,OAAM,MAAM;AACrB,aAAOA;AAAA,IACT;AAGA,UAAM,QAAuB,EAAE,KAAK,KAAK,QAAQ,OAAO,OAAO,EAAE,EAAE;AACnE,UAAM,UAAU,KAAK,UAAU,OAAO,OAAO;AAC7C,QAAI,QAAS,OAAM,UAAU;AAC7B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,UACN,KACoC;AACpC,QAAI,CAAC,OAAO,OAAO,KAAK,GAAG,EAAE,WAAW,EAAG,QAAO;AAClD,UAAM,MAA8B,CAAC;AACrC,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,EAAG,KAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;AACjE,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,QAAQ,OAAuB;AACrC,WAAO,eAAe,OAAO,WAAW;AAAA,EAC1C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeQ,UAAU,KAA6B;AAC7C,WAAO,IAAI,UAAU,YACjB,KAAK,IAAI,YAAY,WAAW,QAAQ,IACxC,KAAK,QAAQ,GAAG,WAAW,UAAU,QAAQ;AAAA,EACnD;AAAA;AAAA,EAGQ,SAAS,KAAqB,MAAsB;AAC1D,WAAO,KAAK,KAAK,UAAU,GAAG,GAAG,IAAI;AAAA,EACvC;AAAA,EAES,cAAc,KAAqC;AAC1D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,UAAU,IAAI,GAAG,WAAW,OAAO;AAC/C,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,0BAA0B,CAAC;AAAA,IAClF;AACA,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AACzC,cAAQ;AAAA,QACN,KAAK,iBAAiB,KAAK,KAAK,UAAU,GAAG,KAAK,YAAY,KAAK,GAAG,IAAI,MAAM;AAAA,MAClF;AAIA,iBAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,MAAM,aAAa,CAAC,CAAC,GAAG;AACnE,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,MAAM;AACnB,kBAAQ,KAAK;AAAA,YACX,UAAU,KAAK;AAAA,YACf,QAAQ;AAAA,YACR,QAAQ,mBAAmB,GAAG;AAAA,UAChC,CAAC;AACD;AAAA,QACF;AACA,gBAAQ,KAAK,KAAK,iBAAiB,QAAQ,UAAU,IAAI,MAAM,CAAC;AAAA,MAClE;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAES,gBAAgB,KAAqC;AAC5D,UAAM,EAAE,UAAU,IAAI;AACtB,QAAI,UAAU,OAAO,WAAW,GAAG;AACjC,aAAO,CAAC,EAAE,UAAU,KAAK,IAAI,QAAQ,QAAQ,QAAQ,+BAA+B,CAAC;AAAA,IACvF;AACA,UAAM,UAA0B,CAAC;AACjC,eAAW,SAAS,UAAU,QAAQ;AACpC,YAAM,MAAM,KAAK,SAAS,KAAK,MAAM,IAAI;AAGzC,cAAQ,KAAK,KAAK,kBAAkB,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,CAAC;AACtE,iBAAW,OAAO,OAAO,KAAK,MAAM,aAAa,CAAC,CAAC,GAAG;AACpD,cAAM,SAAS,KAAK,cAAc,KAAK,GAAG;AAC1C,YAAI,WAAW,KAAM;AACrB,gBAAQ,KAAK,KAAK,kBAAkB,QAAQ,IAAI,MAAM,CAAC;AAAA,MACzD;AAGA,cAAQ,KAAK,KAAK,iBAAiB,KAAK,IAAI,MAAM,CAAC;AAAA,IACrD;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGQ,YAAY,OAAyB;AAC3C,WAAO,cAAc,KAAK;AAAA,EAC5B;AAAA;AAAA,EAIA,aAAa,KAAqC;AAChD,UAAM,aAAa,KAAK,kBAAkB,GAAG;AAK7C,QAAI,IAAI,UAAU,WAAW;AAC3B,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QACE;AAAA,QACJ;AAAA,MACF;AAAA,IACF;AAMA,UAAM,oBAAoB,IAAI,UAAU,UAAU,IAAI,GAAG,UAAU;AACnE,UAAM,eAAe,CAAC,qBAAqB,IAAI,UAAU,WAAW,SAAS;AAC7E,UAAM,YAAY,KAAK,iBAAiB,GAAG,EAAE,SAAS;AAEtD,QAAI,CAAC,gBAAgB,CAAC,WAAW;AAC/B,aAAO;AAAA,QACL;AAAA,UACE,UAAU,KAAK;AAAA,UACf,QAAQ;AAAA,UACR,MAAM;AAAA,UACN,QAAQ,oBACJ,2BACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AAEA,UAAM,QAAQ,KAAK,iBAAiB,GAAG;AACvC,UAAM,UAA0B,CAAC;AAEjC,eAAW,QAAQ,OAAO;AACxB,cAAQ;AAAA,QACN,KAAK;AAAA,UACH,KAAK;AAAA,UACL,KAAK;AAAA,UACL,IAAI;AAAA,UACJ,sBAAsB,KAAK,WAAW,GAAG,CAAC;AAAA,UAC1C,KAAK;AAAA,QACP;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,eAAe,KAAqC;AAClD,UAAM,aAAa,KAAK,kBAAkB,GAAG;AAC7C,WAAO;AAAA,MACL,KAAK,kBAAkB,YAAY,IAAI,QAAQ,qBAAqB,8BAA8B;AAAA,IACpG;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,WAAW,KAA6B;AAG9C,UAAM,eAAe,IAAI,UAAU,UAAU,IAAI,GAAG,UAAU;AAC9D,UAAM,WAAW,eAAe,CAAC,IAAI,IAAI,UAAU;AACnD,UAAM,SAAS,SAAS,OAAO,CAAC,MAAM,aAAa,CAAC,MAAM,MAAS;AACnE,UAAM,cAAc,SAAS,OAAO,CAAC,MAAM,aAAa,CAAC,MAAM,MAAS;AACxE,UAAM,SAAS,KAAK,iBAAiB,GAAG;AACxC,UAAM,QAAkB,CAAC;AACzB,QAAI,OAAO,SAAS,EAAG,OAAM,KAAK,OAAO,KAAK,GAAG,CAAC;AAClD,QAAI,OAAO,SAAS,EAAG,OAAM,KAAK,WAAW,OAAO,KAAK,GAAG,CAAC,EAAE;AAC/D,UAAM,OAAO,MAAM,KAAK,IAAI,KAAK;AACjC,WAAO,YAAY,SAAS,IACxB,GAAG,IAAI,uBAAuB,YAAY,KAAK,GAAG,CAAC,KACnD;AAAA,EACN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,iBAAiB,KAA+B;AACtD,WAAO,OAAO,KAAK,IAAI,UAAU,UAAU,IAAI,GAAG,eAAe,CAAC,CAAC;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,iBAAiB,KAA4C;AAC3D,UAAM,OAAO,KAAK,kBAAkB,GAAG;AACvC,UAAM,WAAW,KAAK,kBAAkB,GAAG;AAC3C,WAAO,CAAC,EAAE,MAAM,UAAU,YAAY,MAAM,CAAC;AAAA,EAC/C;AAAA;AAAA,EAGQ,kBAAkB,KAA6B;AAMrD,UAAM,eAAe,IAAI,UAAU,UAAU,IAAI,GAAG,UAAU;AAC9D,UAAM,SAAS,eACX,CAAC,IACD,IAAI,UAAU,WAAW;AAAA,MACvB,CAAC,MAA0B,aAAa,CAAC,MAAM;AAAA,IACjD;AACJ,UAAM,MAAM,CAAC,MAAqB,OAAO,SAAS,CAAC;AAEnD,UAAM,SAAS;AAAA;AAAA;AAAA,6CAG0B,IAAI,UAAU,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA,6CAKhB,IAAI,UAAU,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM3D,oBAAoB;AAAA,MACpB,SAAS,IAAI;AAAA,MACb,aAAa,IAAI,UAAU;AAAA,MAC3B,UAAU;AAAA,MACV,aAAa;AAAA,MACb,iBAAiB;AAAA,IACnB,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQE,UAAM,WAAqB,CAAC;AAE5B,QAAI,IAAI,cAAc,GAAG;AACvB,eAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAOd;AAAA,IACF;AAEA,QAAI,IAAI,kBAAkB,GAAG;AAC3B,eAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAYd;AAAA,IACF;AAEA,QAAI,IAAI,YAAY,GAAG;AACrB,eAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6CAkByB,IAAI,UAAU,EAAE;AAAA;AAAA;AAAA;AAAA,MAIvD;AAAA,IACF;AAEA,QAAI,IAAI,aAAa,GAAG;AACtB,eAAS,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAiBd;AAAA,IACF;AAEA,QAAI,IAAI,MAAM,GAAG;AACf,eAAS,KAAK;AAAA;AAAA;AAAA;AAAA,MAId;AAAA,IACF;AAMA,eAAW,MAAM,KAAK,iBAAiB,GAAG,GAAG;AAC3C,YAAM,MAAM,KAAK,UAAU,EAAE;AAC7B,eAAS,KAAK,uCAAkC,EAAE;AAAA,WAC7C,GAAG;AAAA,aACD,GAAG;AAAA,MACV;AAAA,IACF;AAEA,UAAM,UAAU;AAAA;AAAA,EAElB,SAAS,KAAK,MAAM,CAAC;AAAA;AAAA;AAInB,WAAO,SAAS;AAAA,EAClB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,WAAW,OAAsB,KAA+B;AAC9D,UAAM,QAAS,OAAO,CAAC;AACvB,UAAM,OAAO;AAAA,MACX,cAAc;AAAA,MACd,aAAa;AAAA,MACb,WAAW,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY;AAAA,MACnE;AAAA,MACA,GAAI,OAAO,MAAM,eAAe,WAC5B,EAAE,YAAY,MAAM,WAAW,IAC/B,CAAC;AAAA,IACP;AAEA,YAAQ,OAAO;AAAA,MACb,KAAK,cAAc;AACjB,cAAM,KAAsB;AAAA,UAC1B,GAAG;AAAA,UACH,UAAU,MAAM,YAAY;AAAA,UAC5B,WAAW,MAAM,aAAa,CAAC;AAAA,QACjC;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,eAAe;AAKlB,cAAM,MAAM,iBAAiB,MAAM,UAAU;AAC7C,cAAM,KAAuB;AAAA,UAC3B,GAAG;AAAA,UACH,UAAU,MAAM,YAAY;AAAA,UAC5B,WAAW,MAAM,aAAa,CAAC;AAAA,UAC/B,GAAI,QAAQ,SAAY,EAAE,YAAY,IAAI,IAAI,CAAC;AAAA,UAC/C,GAAI,OAAO,MAAM,YAAY,YACzB,EAAE,SAAS,MAAM,QAAQ,IACzB,CAAC;AAAA,QACP;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,oBAAoB;AACvB,cAAM,KAA4B;AAAA,UAChC,GAAG;AAAA,UACH,QAAQ,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AAAA,QAC5D;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK,QAAQ;AACX,cAAM,KAAgB,EAAE,GAAG,KAAK;AAChC,eAAO;AAAA,MACT;AAAA,MACA,KAAK,gBAAgB;AACnB,cAAM,KAAwB,EAAE,GAAG,MAAM,QAAQ,UAAU;AAC3D,eAAO;AAAA,MACT;AAAA,MACA;AAGE,eAAO,EAAE,GAAG,MAAM,QAAQ,UAAU;AAAA,IACxC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,YAAY,QAAuB,UAAmC;AACpE,WAAO;AAAA,MACL,UAAU;AAAA,MACV,QAAQ,KAAK,UAAU,YAAY,EAAE,UAAU,QAAQ,CAAC;AAAA,IAC1D;AAAA,EACF;AAAA;AAAA,EAIS,gBAAgB,KAA6C;AACpE,UAAM,eAAe,KAAK,oBAAoB,GAAG;AACjD,UAAM,cAAc,IAAI,UAAU;AAClC,WAAO;AAAA,MACL;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MACL,WAAW,YAAY,IACnB,EAAE,QAAQ,MAAM,QAAQ,aAAa,IACrC,EAAE,QAAQ,QAAQ,QAAQ,cAAc,YAAY,GAAG;AAAA,MAC/D;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MAAM;AAGX,cAAI,CAAC,IAAI,UAAU,QAAQ;AACzB,mBAAO,EAAE,QAAQ,MAAM,QAAQ,yBAAyB;AAAA,UAC1D;AACA,gBAAM,MAAM,KAAK,SAAmD,YAAY;AAChF,gBAAM,SAAS,MAAM,YAAY;AACjC,cAAI,CAAC,OAAO,CAAC,QAAQ;AACnB,mBAAO,EAAE,QAAQ,QAAQ,QAAQ,OAAO,YAAY,QAAQ,YAAY,GAAG;AAAA,UAC7E;AACA,iBAAO,eAAe,SAClB,EAAE,QAAQ,MAAM,QAAQ,IAAI,YAAY,KAAK,WAAW,WAAW,IACnE;AAAA,YACE,QAAQ;AAAA,YACR,QAAQ,OAAO,YAAY,KAAK,WAAW,OAAO,YAAY;AAAA,UAChE;AAAA,QACN;AAAA,MACF;AAAA,MACA;AAAA,QACE,MAAM,GAAG,KAAK,IAAI;AAAA,QAClB,OAAO,MAAM;AACX,gBAAM,WACJ,IAAI,UAAU,WAAW,SAAS,KAClC,KAAK,iBAAiB,GAAG,EAAE,SAAS;AACtC,cAAI,CAAC,SAAU,QAAO,EAAE,QAAQ,MAAM,QAAQ,oBAAoB;AAGlE,cAAI,IAAI,UAAU,WAAW;AAC3B,mBAAO;AAAA,cACL,QAAQ;AAAA,cACR,QAAQ;AAAA,YACV;AAAA,UACF;AACA,gBAAM,aAAa,KAAK,kBAAkB,GAAG;AAC7C,iBAAO,WAAW,UAAU,IACxB,EAAE,QAAQ,MAAM,QAAQ,WAAW,IACnC,EAAE,QAAQ,QAAQ,QAAQ,cAAc,UAAU,GAAG;AAAA,QAC3D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAGF;AASA,SAAS,iBAAiB,OAAoC;AAC5D,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO;AAClD,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAWA,SAAS,YAAY,MAAc,KAAsB;AACvD,MAAI,QAAQ,QAAW;AACrB,UAAM,IAAI,QAAQ,IAAI,IAAI;AAC1B,WAAO,KAAK,QAAQ,MAAM,KAAK,IAAI;AAAA,EACrC;AACA,SAAO,MAAM,IAAI;AACnB;AAEO,IAAM,UAAU,IAAI,WAAW;AACtC,IAAO,cAAQ;","names":["entry"]}

package/dist/{antigravity-GF3RU42A.js → antigravity-WIK3XBN5.js}

@@ -3,10 +3,10 @@ import {
   AntigravityAdapter,
   adapter,
   antigravity_default
-} from "./chunk-3Y23ZYYF.js";
+} from "./chunk-Q42SEI7W.js";
 import "./chunk-H53QZQJI.js";
-import "./chunk-DBQMX75U.js";
-import "./chunk-RHML2NOB.js";
+import "./chunk-BEFVJ2OE.js";
+import "./chunk-NUGMVVV2.js";
 import "./chunk-TO57WYBB.js";
 import "./chunk-ALVXORZM.js";
 import "./chunk-2HCJV6UO.js";
@@ -15,4 +15,4 @@ export {
   adapter,
   antigravity_default as default
 };
-//# sourceMappingURL=antigravity-GF3RU42A.js.map
+//# sourceMappingURL=antigravity-WIK3XBN5.js.map

package/dist/{antigravity-cli-OH27IFH5.js → antigravity-cli-L3RZMF6V.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   AntigravityAdapter
-} from "./chunk-3Y23ZYYF.js";
+} from "./chunk-Q42SEI7W.js";
 import "./chunk-H53QZQJI.js";
-import "./chunk-DBQMX75U.js";
-import "./chunk-RHML2NOB.js";
+import "./chunk-BEFVJ2OE.js";
+import "./chunk-NUGMVVV2.js";
 import "./chunk-TO57WYBB.js";
 import "./chunk-ALVXORZM.js";
 import "./chunk-2HCJV6UO.js";
@@ -84,4 +84,4 @@ export {
   adapter,
   antigravity_cli_default as default
 };
-//# sourceMappingURL=antigravity-cli-OH27IFH5.js.map
+//# sourceMappingURL=antigravity-cli-L3RZMF6V.js.map

package/dist/{chunk-E45SUUD7.js → chunk-24K6JOKV.js}

@@ -12,11 +12,11 @@ import {
 import {
   loadRegisteredConnector,
   readRegisteredMeta
-} from "./chunk-RQCBBLTA.js";
+} from "./chunk-5LAFKXFM.js";
 import {
   REGISTERED_PLATFORM_IDS,
   loadAdapter
-} from "./chunk-LS65GL2P.js";
+} from "./chunk-Q5LECKZL.js";
 import {
   projectIdentity
 } from "./chunk-2HCJV6UO.js";
@@ -371,4 +371,4 @@ export {
   isNativeHookDeclared,
   runNativeHook
 };
-//# sourceMappingURL=chunk-E45SUUD7.js.map
+//# sourceMappingURL=chunk-24K6JOKV.js.map

package/dist/{chunk-IZ4XQ23W.js → chunk-2L6LTQ6L.js}

@@ -2,7 +2,7 @@
 import {
   installInstructions,
   packageConnector
-} from "./chunk-ZEFUDBTY.js";
+} from "./chunk-OEQJGBBW.js";
 import {
   MARKETPLACE_NAME,
   agyPluginInstalled,
@@ -44,7 +44,7 @@ import {
 } from "./chunk-7QRUZAUG.js";
 import {
   detectInstalledPlatforms
-} from "./chunk-GCRRX4MO.js";
+} from "./chunk-TW4DVR4V.js";
 import {
   log
 } from "./chunk-KHO5WNTP.js";
@@ -52,14 +52,17 @@ import {
   deregisterConnector,
   loadRegisteredConnector,
   registerConnector
-} from "./chunk-RQCBBLTA.js";
+} from "./chunk-5LAFKXFM.js";
 import {
   REGISTERED_PLATFORM_IDS,
   loadAdapter
-} from "./chunk-LS65GL2P.js";
+} from "./chunk-Q5LECKZL.js";
 import {
   configPatchManualEdit
 } from "./chunk-7CZKXXBD.js";
+import {
+  findUnsetEnvRefs
+} from "./chunk-BEFVJ2OE.js";
 import {
   hasMemoryLedger
 } from "./chunk-ALVXORZM.js";
@@ -124,7 +127,23 @@ async function installConnector(opts) {
       });
     }
     runStep(id, "installServer", result, () => {
-      pushAll(result.changes, adapter.installServer(ctx));
+      const serverChanges = adapter.installServer(ctx);
+      pushAll(result.changes, serverChanges);
+      if (!(adapter.capabilities.nativeServerEnvInterpolation ?? false)) {
+        const wroteEntry = serverChanges.some(
+          (c) => c.action === "create" || c.action === "update"
+        );
+        const server = effectiveServerFor(connector, id);
+        if (wroteEntry && server) {
+          for (const name of findUnsetEnvRefs(serverSecretFields(server))) {
+            result.changes.push({
+              platform: id,
+              action: "warn",
+              detail: `${name} is unset \u2014 baking an empty value into ${id} config (export it before install, or give the ref a \${env:${name}:-default})`
+            });
+          }
+        }
+      }
     });
     runStep(id, "installHooks", result, () => {
       pushAll(result.changes, adapter.installHooks(ctx));
@@ -391,6 +410,22 @@ function buildContext(connector, id, defaultScope, projectDir, dryRun, force = f
     force
   };
 }
+function effectiveServerFor(connector, id) {
+  const override = connector.platforms[id]?.server;
+  if (override === false) return void 0;
+  const base = connector.server;
+  if (!base) return void 0;
+  return override && typeof override === "object" ? { ...base, ...override } : base;
+}
+function serverSecretFields(server) {
+  return {
+    command: server.command,
+    args: server.args,
+    env: server.env,
+    url: server.url,
+    headers: server.headers
+  };
+}
 async function tryLoadAdapter(id, result) {
   try {
     const adapter = await loadAdapter(id);
@@ -3038,4 +3073,4 @@ export {
   upgradeViaMarketplace,
   marketplaceDoctorChecks
 };
-//# sourceMappingURL=chunk-IZ4XQ23W.js.map
+//# sourceMappingURL=chunk-2L6LTQ6L.js.map