@mastra/code-sdk 0.0.0-esbuild-bundle-worker-20260807173433

package/dist/mcp/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","names":[],"sources":["../../src/mcp/manager.ts"],"sourcesContent":["/**\n * MCP manager — orchestrates MCP server connections using MCPClient directly.\n * Created once at startup, provides tools from connected MCP servers.\n */\n\nimport { existsSync, mkdirSync, readFileSync, writeFileSync, renameSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { MCPClient, MCPOAuthClientProvider } from '@mastra/mcp';\nimport type { MastraMCPServerDefinition, OAuthClientInformation, OAuthStorage } from '@mastra/mcp';\nimport { DEFAULT_CONFIG_DIR } from '../constants.js';\nimport { getAppDataDir } from '../utils/project.js';\nimport {\n  DEFAULT_OAUTH_REDIRECT_URL,\n  loadMcpConfig,\n  getProjectMcpPath,\n  getGlobalMcpPath,\n  getClaudeSettingsPath,\n  resolveOAuthRedirectUrl,\n} from './config.js';\nimport { loadDisabledServers, loadGlobalDisableState, saveDisabledServers, saveGlobalDisableState } from './state.js';\nimport type {\n  McpConfig,\n  McpHttpOAuthConfig,\n  McpHttpServerConfig,\n  McpServerConfig,\n  McpServerStatus,\n  McpSkippedServer,\n} from './types.js';\n\nconst MASTRACODE_MCP_TIMEOUT_MS = 7 * 24 * 60 * 60 * 1000; // 7 days\n\n/** Summary of MCP initialization result. */\nexport interface McpInitResult {\n  connected: McpServerStatus[];\n  failed: McpServerStatus[];\n  skipped: McpSkippedServer[];\n  totalTools: number;\n}\n\n/** Public interface for the MCP manager returned by createMcpManager(). */\nexport interface McpManager {\n  /** Connect to all configured MCP servers and collect their tools. */\n  init(): Promise<void>;\n  /** Start init in the background. Returns a promise that resolves with status when done. */\n  initInBackground(): Promise<McpInitResult>;\n  /** Disconnect all servers, reload config from disk, reconnect. */\n  reload(): Promise<void>;\n  /** Reconnect a single server by name. Returns updated status. */\n  reconnectServer(name: string): Promise<McpServerStatus>;\n  /**\n   * Run the OAuth authorization-code flow for an HTTP server, then reconnect it.\n   * Servers without an `oauth` config are provisioned with a zero-config default\n   * (dynamic client registration). The authorization URL is surfaced through\n   * `onAuthorizationUrl` for the caller to open in a browser.\n   *\n   * Resolves with the resulting {@link McpServerStatus}: a connected status on\n   * success, or a status carrying an `error` message on failure (including\n   * cancellation) — it does not reject. Inspect the returned status rather than\n   * relying on a thrown error.\n   */\n  authenticateServer(\n    name: string,\n    options?: { onAuthorizationUrl?: (url: string) => void; timeoutMs?: number },\n  ): Promise<McpServerStatus>;\n  /**\n   * Cancel a pending {@link authenticateServer} flow for a server (e.g. the\n   * user closed the browser without completing consent). The pending\n   * authenticate call rejects and the server returns to the `needsAuth` state\n   * so it can be retried. Returns `true` if a flow was cancelled.\n   */\n  cancelServerAuthentication(name: string): Promise<boolean>;\n  /**\n   * Disable or enable a single server by name. The change is persisted (in\n   * mastracode's app data, not the user's config files) and survives restarts.\n   * With `global: true` the change applies to every project; otherwise it is\n   * scoped to this project. Enabling only removes the server from the given\n   * scope — a server disabled in the other scope stays disabled, and the\n   * returned status's `disabledScope` says which scope still applies.\n   * Connections are rebuilt, so other servers reconnect — same behavior as\n   * {@link reload}. Returns the server's resulting status.\n   */\n  setServerDisabled(name: string, disabled: boolean, options?: { global?: boolean }): Promise<McpServerStatus>;\n  /**\n   * Disable or enable all servers at once. Project scope records every\n   * currently-configured server name; enabling clears the project list.\n   * Global scope sets/clears a persisted all-MCP kill switch (and, when\n   * enabling, also clears globally disabled server names). Persisted like\n   * {@link setServerDisabled}.\n   */\n  setAllDisabled(disabled: boolean, options?: { global?: boolean }): Promise<void>;\n  /** Names of configured servers that are currently disabled (any scope). */\n  getDisabledServers(): string[];\n  /** Whether all MCP is disabled globally (across every project). */\n  isAllDisabledGlobally(): boolean;\n  /** Disconnect from all MCP servers and clean up. */\n  disconnect(): Promise<void>;\n  /** Get all tools from connected MCP servers (namespaced as serverName_toolName). */\n  getTools(): Record<string, any>;\n  /** Check if any MCP servers are configured (or skipped). */\n  hasServers(): boolean;\n  /** Get status of all servers. */\n  getServerStatuses(): McpServerStatus[];\n  /** Get servers that were skipped during config loading. */\n  getSkippedServers(): McpSkippedServer[];\n  /** Get config file paths for display. */\n  getConfigPaths(): { project: string; global: string; claude: string };\n  /** Get the merged config. */\n  getConfig(): McpConfig;\n  /** Get captured stderr logs for a server. */\n  getServerLogs(name: string): string[];\n}\n\nfunction getTransport(cfg: McpServerConfig): 'stdio' | 'http' {\n  return 'url' in cfg ? 'http' : 'stdio';\n}\n\nclass FileOAuthStorage implements OAuthStorage {\n  constructor(private filePath: string) {}\n\n  get(key: string): string | undefined {\n    return this.read()[key];\n  }\n\n  set(key: string, value: string): void {\n    const data = this.read();\n    data[key] = value;\n    this.write(data);\n  }\n\n  delete(key: string): void {\n    const data = this.read();\n    delete data[key];\n    this.write(data);\n  }\n\n  private read(): Record<string, string> {\n    if (!existsSync(this.filePath)) return {};\n    try {\n      return JSON.parse(readFileSync(this.filePath, 'utf-8')) as Record<string, string>;\n    } catch {\n      return {};\n    }\n  }\n\n  private write(data: Record<string, string>): void {\n    const dir = dirname(this.filePath);\n    if (!existsSync(dir)) {\n      mkdirSync(dir, { recursive: true, mode: 0o700 });\n    }\n    const tmpPath = `${this.filePath}.tmp`;\n    writeFileSync(tmpPath, JSON.stringify(data, null, 2), { encoding: 'utf-8', mode: 0o600 });\n    renameSync(tmpPath, this.filePath);\n  }\n}\n\n/**\n * Zero-config OAuth defaults for servers with a bare `url` entry. Dynamic\n * client registration provisions the client, so no `clientId` is needed.\n */\nconst DEFAULT_OAUTH_CONFIG: McpHttpOAuthConfig = { redirectUrl: DEFAULT_OAUTH_REDIRECT_URL };\n\nfunction getOAuthStoragePath(projectDir: string, name: string, cfg: McpHttpServerConfig): string {\n  // The fingerprint always uses the resolved redirect URL so a bare `url`\n  // entry keeps the same token file before and after zero-config provisioning.\n  const key = JSON.stringify({\n    projectDir,\n    name,\n    url: cfg.url,\n    redirectUrl: resolveOAuthRedirectUrl(cfg.oauth),\n    clientId: cfg.oauth?.clientId,\n    scopes: cfg.oauth?.scopes ?? [],\n  });\n  return join(getAppDataDir(), 'mcp-oauth', `${getStorageKeyFingerprint(key)}.json`);\n}\n\nfunction getStorageKeyFingerprint(value: string): string {\n  let fingerprint = 0xcbf29ce484222325n;\n  for (let i = 0; i < value.length; i += 1) {\n    fingerprint ^= BigInt(value.charCodeAt(i));\n    fingerprint = BigInt.asUintN(64, fingerprint * 0x100000001b3n);\n  }\n  return fingerprint.toString(16).padStart(16, '0');\n}\n\n/**\n * Create an MCP manager that wraps MCPClient with config-file discovery\n * and per-server status tracking.\n */\nexport function createMcpManager(\n  projectDir: string,\n  configDirName = DEFAULT_CONFIG_DIR,\n  extraServers?: Record<string, McpServerConfig>,\n): McpManager {\n  /** Merge programmatic servers into a base config (highest priority). */\n  const applyExtraServers = (base: McpConfig): McpConfig => {\n    if (!extraServers || Object.keys(extraServers).length === 0) return base;\n    return { ...base, mcpServers: { ...base.mcpServers, ...extraServers } };\n  };\n\n  let config = applyExtraServers(loadMcpConfig(projectDir, configDirName));\n  let disabledServers = new Set(loadDisabledServers(projectDir));\n  let globalDisableState = loadGlobalDisableState();\n  let globallyDisabledServers = new Set(globalDisableState.disabledServers);\n\n  /** Whether a server is disabled in any scope (global kill switch, global list, or project list). */\n  const isDisabled = (name: string): boolean =>\n    globalDisableState.allDisabled || globallyDisabledServers.has(name) || disabledServers.has(name);\n\n  /** Which scope disables a server. Global takes precedence — project-level enable can't undo it. */\n  const disabledScopeOf = (name: string): 'project' | 'global' | undefined => {\n    if (globalDisableState.allDisabled || globallyDisabledServers.has(name)) return 'global';\n    if (disabledServers.has(name)) return 'project';\n    return undefined;\n  };\n  let client: MCPClient | null = null;\n  let serverDefs: Record<string, MastraMCPServerDefinition> = {};\n  let tools: Record<string, any> = {};\n  let serverStatuses = new Map<string, McpServerStatus>();\n  let stderrLogs = new Map<string, string[]>();\n  let initialized = false;\n\n  /** Per-server handlers that receive the OAuth authorization URL during authenticateServer(). */\n  const authUrlHandlers = new Map<string, (url: string) => void>();\n\n  /**\n   * Servers with an OAuth authorization flow currently in flight. Owned by the\n   * manager (not the TUI) so the state survives a `/mcp` selector being closed\n   * and reopened — the reopened selector reads it back off the server status and\n   * can still offer \"Cancel authentication\".\n   */\n  const authenticatingServers = new Set<string>();\n\n  /**\n   * Servers whose in-flight authentication was cancelled by the caller. Set by\n   * cancelServerAuthentication() so the resolving authenticateServer() call can\n   * mark its failed status as a deliberate cancel rather than a genuine failure.\n   * This lives on the manager (not the TUI selector) so the signal survives the\n   * selector being closed and reopened mid-flow.\n   */\n  const cancelledAuthServers = new Set<string>();\n\n  /** Overlay the manager-owned `authenticating` flag onto a status snapshot. */\n  const withAuthenticating = (status: McpServerStatus): McpServerStatus =>\n    authenticatingServers.has(status.name) ? { ...status, authenticating: true } : status;\n\n  const MAX_STDERR_LINES = 200;\n\n  /** Hook into a server's stderr stream and buffer its output. */\n  function captureStderr(serverName: string): void {\n    if (!client || typeof client.getServerStderr !== 'function') return;\n    const stream = client.getServerStderr(serverName);\n    if (!stream) return;\n\n    let buffer = '';\n    const lines = stderrLogs.get(serverName) ?? [];\n    stderrLogs.set(serverName, lines);\n\n    stream.on('data', (chunk: Buffer) => {\n      buffer += chunk.toString();\n      const parts = buffer.split('\\n');\n      // Last element is incomplete line (or empty if ended with \\n)\n      buffer = parts.pop()!;\n      for (const line of parts) {\n        if (line.trim()) {\n          lines.push(line);\n          if (lines.length > MAX_STDERR_LINES) {\n            lines.shift();\n          }\n        }\n      }\n    });\n\n    stream.on('end', () => {\n      if (buffer.trim()) {\n        lines.push(buffer);\n        if (lines.length > MAX_STDERR_LINES) {\n          lines.shift();\n        }\n      }\n    });\n  }\n\n  function createOAuthProvider(name: string, cfg: McpHttpServerConfig) {\n    // Bare `url` entries get no eager provider — auth is provisioned lazily\n    // when the user authenticates — unless a previous session already stored\n    // OAuth state for this server, in which case the provider is needed to\n    // attach the persisted tokens on connect.\n    const oauth =\n      cfg.oauth ?? (existsSync(getOAuthStoragePath(projectDir, name, cfg)) ? DEFAULT_OAUTH_CONFIG : undefined);\n    if (!oauth) return undefined;\n\n    // redirectUrl is optional in the user-supplied config; resolve the stable\n    // default (or the `callbackPort` shorthand, for programmatically registered\n    // servers that bypass config parsing) so provider metadata always carries\n    // a concrete URL.\n    const redirectUrl = resolveOAuthRedirectUrl(oauth);\n\n    return new MCPOAuthClientProvider({\n      redirectUrl,\n      clientMetadata: {\n        redirect_uris: [redirectUrl],\n        client_name: oauth.clientName ?? `Mastra Code MCP ${name}`,\n        grant_types: ['authorization_code', 'refresh_token'],\n        response_types: ['code'],\n        ...(oauth.scopes?.length ? { scope: oauth.scopes.join(' ') } : {}),\n      },\n      clientInformation: oauth.clientId\n        ? ({\n            client_id: oauth.clientId,\n            ...(oauth.clientSecret ? { client_secret: oauth.clientSecret } : {}),\n          } satisfies OAuthClientInformation)\n        : undefined,\n      storage: new FileOAuthStorage(getOAuthStoragePath(projectDir, name, cfg)),\n      onRedirectToAuthorization: url => {\n        authUrlHandlers.get(name)?.(url.toString());\n      },\n    });\n  }\n\n  function buildServerDefs(servers: Record<string, McpServerConfig>): Record<string, MastraMCPServerDefinition> {\n    const defs: Record<string, MastraMCPServerDefinition> = {};\n    for (const [name, cfg] of Object.entries(servers)) {\n      if ('url' in cfg) {\n        const httpCfg = cfg as McpHttpServerConfig;\n        defs[name] = {\n          url: new URL(httpCfg.url),\n          requestInit: httpCfg.headers ? { headers: httpCfg.headers } : undefined,\n          authProvider: createOAuthProvider(name, httpCfg),\n        };\n      } else {\n        defs[name] = { command: cfg.command, args: cfg.args, env: cfg.env, stderr: 'pipe' };\n      }\n    }\n    return defs;\n  }\n\n  /** Seed a `disabled` status for every disabled server so it stays visible. */\n  function setDisabledStatuses(): void {\n    for (const [name, cfg] of Object.entries(config.mcpServers ?? {})) {\n      const scope = disabledScopeOf(name);\n      if (!scope) continue;\n      serverStatuses.set(name, {\n        name,\n        connected: false,\n        toolCount: 0,\n        toolNames: [],\n        transport: getTransport(cfg),\n        disabled: true,\n        disabledScope: scope,\n      });\n    }\n  }\n\n  async function connectAndCollectTools(): Promise<void> {\n    setDisabledStatuses();\n\n    const servers = Object.fromEntries(Object.entries(config.mcpServers ?? {}).filter(([name]) => !isDisabled(name)));\n    if (Object.keys(servers).length === 0) {\n      return;\n    }\n\n    // Pre-populate statuses as \"connecting\" so callers can see in-progress state\n    const serverNames = Object.keys(servers);\n    for (const name of serverNames) {\n      serverStatuses.set(name, {\n        name,\n        connected: false,\n        connecting: true,\n        toolCount: 0,\n        toolNames: [],\n        transport: getTransport(servers[name]!),\n      });\n    }\n\n    serverDefs = buildServerDefs(servers);\n    client = new MCPClient({\n      id: 'mastra-code-mcp',\n      servers: serverDefs,\n      timeout: MASTRACODE_MCP_TIMEOUT_MS,\n    });\n\n    // Use listToolsetsWithErrors() to get tools grouped by server name,\n    // plus per-server error messages for servers that failed to connect.\n\n    try {\n      const { toolsets, errors } = await client.listToolsetsWithErrors();\n      const typedToolsets = toolsets as Record<string, Record<string, any>>;\n\n      // Flatten toolsets into the namespaced tools map (serverName_toolName)\n      for (const [serverName, serverTools] of Object.entries(typedToolsets)) {\n        for (const [toolName, toolConfig] of Object.entries(serverTools)) {\n          tools[`${serverName}_${toolName}`] = toolConfig;\n        }\n      }\n\n      for (const name of serverNames) {\n        const serverTools = typedToolsets[name];\n        if (serverTools && Object.keys(serverTools).length > 0) {\n          const toolNames = Object.keys(serverTools).map(t => `${name}_${t}`);\n          serverStatuses.set(name, {\n            name,\n            connected: true,\n            toolCount: toolNames.length,\n            toolNames,\n            transport: getTransport(servers[name]!),\n          });\n        } else {\n          // Server failed — use the real error from listToolsetsWithErrors()\n          const error = errors[name] ?? 'Failed to connect';\n          serverStatuses.set(name, {\n            name,\n            connected: false,\n            toolCount: 0,\n            toolNames: [],\n            transport: getTransport(servers[name]!),\n            error,\n            ...(serverNeedsAuth(name, servers[name]!, error) ? { needsAuth: true } : {}),\n          });\n        }\n      }\n\n      // Capture stderr from all stdio servers (connected or failed)\n      for (const name of serverNames) {\n        captureStderr(name);\n      }\n    } catch (error) {\n      const errMsg = error instanceof Error ? error.message : String(error);\n\n      for (const name of serverNames) {\n        serverStatuses.set(name, {\n          name,\n          connected: false,\n          toolCount: 0,\n          toolNames: [],\n          transport: getTransport(servers[name]!),\n          error: errMsg,\n          ...(serverNeedsAuth(name, servers[name]!, errMsg) ? { needsAuth: true } : {}),\n        });\n      }\n    }\n  }\n\n  /**\n   * Whether a failed HTTP server is blocked on OAuth authorization.\n   *\n   * Provider-backed servers report the exact state tracked by `@mastra/mcp`.\n   * Bare `url` entries carry no provider until the user authenticates, so the\n   * signal is a 401 in the connect error — surfaced either as the status text\n   * or as the RFC 6750 `invalid_token` bearer error code in the response body.\n   */\n  function serverNeedsAuth(name: string, cfg: McpServerConfig, error?: string): boolean {\n    if (getTransport(cfg) !== 'http') return false;\n    if (client?.getServerAuthState?.(name) === 'needs-auth') return true;\n    if (serverDefs[name]?.authProvider) return false;\n    return error !== undefined && /\\b401\\b|unauthorized|invalid_token/i.test(error);\n  }\n\n  /**\n   * Runs a single-server connect action (reconnect or authenticate), then\n   * refreshes that server's tools and status from the client.\n   */\n  async function connectSingleServer(\n    name: string,\n    cfg: McpServerConfig,\n    connect: () => Promise<unknown>,\n  ): Promise<McpServerStatus> {\n    const transport = getTransport(cfg);\n\n    // Remove old tools for this server\n    const prefix = `${name}_`;\n    for (const key of Object.keys(tools)) {\n      if (key.startsWith(prefix)) {\n        delete tools[key];\n      }\n    }\n\n    // Clear old logs and mark as connecting\n    stderrLogs.delete(name);\n    serverStatuses.set(name, {\n      name,\n      connected: false,\n      connecting: true,\n      toolCount: 0,\n      toolNames: [],\n      transport,\n    });\n\n    try {\n      await connect();\n\n      // Recapture stderr for the reconnected server\n      captureStderr(name);\n\n      // Fetch updated toolsets to get this server's tools\n      const { toolsets, errors } = await client!.listToolsetsWithErrors();\n      const serverTools = toolsets[name];\n      const serverError = errors[name];\n\n      if (serverError) {\n        const status: McpServerStatus = {\n          name,\n          connected: false,\n          toolCount: 0,\n          toolNames: [],\n          transport,\n          error: serverError,\n          ...(serverNeedsAuth(name, cfg, serverError) ? { needsAuth: true } : {}),\n        };\n        serverStatuses.set(name, status);\n        return status;\n      } else if (serverTools && Object.keys(serverTools).length > 0) {\n        const toolNames = Object.keys(serverTools).map(t => `${name}_${t}`);\n        for (const [toolName, toolConfig] of Object.entries(serverTools)) {\n          tools[`${name}_${toolName}`] = toolConfig;\n        }\n        const status: McpServerStatus = {\n          name,\n          connected: true,\n          toolCount: toolNames.length,\n          toolNames,\n          transport,\n        };\n        serverStatuses.set(name, status);\n        return status;\n      } else {\n        const status: McpServerStatus = {\n          name,\n          connected: false,\n          toolCount: 0,\n          toolNames: [],\n          transport,\n          error: 'Failed to connect',\n        };\n        serverStatuses.set(name, status);\n        return status;\n      }\n    } catch (error) {\n      const errMsg = error instanceof Error ? error.message : String(error);\n      const status: McpServerStatus = {\n        name,\n        connected: false,\n        toolCount: 0,\n        toolNames: [],\n        transport,\n        error: errMsg,\n        ...(serverNeedsAuth(name, cfg, errMsg) ? { needsAuth: true } : {}),\n      };\n      serverStatuses.set(name, status);\n      return status;\n    }\n  }\n\n  async function disconnect(): Promise<void> {\n    if (client) {\n      try {\n        await client.disconnect();\n      } catch {\n        // Ignore disconnect errors\n      }\n      client = null;\n    }\n  }\n\n  /** Tear down all connections and reconnect every enabled server. */\n  async function rebuildConnections(): Promise<void> {\n    await disconnect();\n    tools = {};\n    serverStatuses = new Map();\n    stderrLogs = new Map();\n    initialized = false;\n    await connectAndCollectTools();\n    initialized = true;\n  }\n\n  function disabledStatus(name: string): McpServerStatus {\n    const cfg = config.mcpServers?.[name];\n    return {\n      name,\n      connected: false,\n      toolCount: 0,\n      toolNames: [],\n      transport: cfg ? getTransport(cfg) : 'stdio',\n      disabled: true,\n      disabledScope: disabledScopeOf(name),\n    };\n  }\n\n  // Read-merge-write persistence: re-read the persisted state and apply this\n  // operation's delta on top, then adopt the merged result in memory. This\n  // way a concurrent mastracode process's changes (e.g. another window\n  // flipping the global kill switch) are never clobbered by this manager's\n  // construction-time snapshot.\n  function persistProjectDelta(mutate: (names: Set<string>) => void): void {\n    const fresh = new Set(loadDisabledServers(projectDir));\n    mutate(fresh);\n    disabledServers = fresh;\n    saveDisabledServers(projectDir, Array.from(fresh));\n  }\n\n  function persistGlobalDelta(mutate: (state: { allDisabled: boolean; disabledServers: Set<string> }) => void): void {\n    const onDisk = loadGlobalDisableState();\n    const fresh = { allDisabled: onDisk.allDisabled, disabledServers: new Set(onDisk.disabledServers) };\n    mutate(fresh);\n    globallyDisabledServers = fresh.disabledServers;\n    globalDisableState = { allDisabled: fresh.allDisabled, disabledServers: Array.from(fresh.disabledServers) };\n    saveGlobalDisableState(globalDisableState);\n  }\n\n  return {\n    async init() {\n      if (initialized) return;\n      await connectAndCollectTools();\n      initialized = true;\n    },\n\n    async initInBackground(): Promise<McpInitResult> {\n      await this.init();\n      const statuses = Array.from(serverStatuses.values());\n      const connected = statuses.filter(s => s.connected);\n      const failed = statuses.filter(s => !s.connected && !s.disabled);\n      return {\n        connected,\n        failed,\n        skipped: [...(config.skippedServers ?? [])],\n        totalTools: connected.reduce((sum, s) => sum + s.toolCount, 0),\n      };\n    },\n\n    async reload() {\n      config = applyExtraServers(loadMcpConfig(projectDir, configDirName));\n      disabledServers = new Set(loadDisabledServers(projectDir));\n      globalDisableState = loadGlobalDisableState();\n      globallyDisabledServers = new Set(globalDisableState.disabledServers);\n      await rebuildConnections();\n    },\n\n    async setServerDisabled(name: string, disabled: boolean, options?: { global?: boolean }): Promise<McpServerStatus> {\n      if (!config.mcpServers?.[name]) {\n        return {\n          name,\n          connected: false,\n          toolCount: 0,\n          toolNames: [],\n          transport: 'stdio',\n          error: `Server \"${name}\" not found in config`,\n        };\n      }\n\n      const wasEffectivelyDisabled = isDisabled(name);\n\n      if (options?.global) {\n        persistGlobalDelta(state => {\n          if (disabled) {\n            state.disabledServers.add(name);\n          } else {\n            state.disabledServers.delete(name);\n          }\n        });\n      } else {\n        persistProjectDelta(names => {\n          if (disabled) {\n            names.add(name);\n          } else {\n            names.delete(name);\n          }\n        });\n      }\n\n      // Only rebuild connections when the server's effective state actually\n      // flipped — e.g. removing it from one scope while the other scope (or\n      // the global kill switch) still disables it leaves connections alone.\n      if (isDisabled(name) !== wasEffectivelyDisabled) {\n        await rebuildConnections();\n        return withAuthenticating(serverStatuses.get(name) ?? disabledStatus(name));\n      }\n      // Effective state unchanged. If still disabled, report a fresh status so\n      // `disabledScope` reflects the scope that (still) applies.\n      return withAuthenticating(\n        isDisabled(name) ? disabledStatus(name) : (serverStatuses.get(name) ?? disabledStatus(name)),\n      );\n    },\n\n    async setAllDisabled(disabled: boolean, options?: { global?: boolean }): Promise<void> {\n      const configuredNames = Object.keys(config.mcpServers ?? {});\n      const effectiveBefore = configuredNames.filter(name => isDisabled(name)).join(',');\n      if (options?.global) {\n        persistGlobalDelta(state => {\n          state.allDisabled = disabled;\n          if (!disabled) {\n            // Enabling globally also clears globally disabled server names so\n            // \"/mcp enable all --global\" fully restores global state.\n            state.disabledServers.clear();\n          }\n        });\n      } else {\n        persistProjectDelta(names => {\n          if (disabled) {\n            for (const name of configuredNames) {\n              names.add(name);\n            }\n          } else {\n            names.clear();\n          }\n        });\n      }\n      // Skip the disconnect/reconnect cycle when the effective disabled set is\n      // unchanged — e.g. repeating \"/mcp disable all\", or a project-scope\n      // \"enable all\" while the global kill switch still disables everything.\n      const effectiveAfter = configuredNames.filter(name => isDisabled(name)).join(',');\n      if (effectiveAfter !== effectiveBefore) {\n        await rebuildConnections();\n      }\n    },\n\n    getDisabledServers() {\n      return Object.keys(config.mcpServers ?? {})\n        .filter(name => isDisabled(name))\n        .sort();\n    },\n\n    isAllDisabledGlobally() {\n      return globalDisableState.allDisabled;\n    },\n\n    async reconnectServer(name: string): Promise<McpServerStatus> {\n      if (isDisabled(name)) {\n        return { ...disabledStatus(name), error: `Server \"${name}\" is disabled — enable it first` };\n      }\n      const cfg = config.mcpServers?.[name];\n      if (!cfg) {\n        return {\n          name,\n          connected: false,\n          toolCount: 0,\n          toolNames: [],\n          transport: 'stdio',\n          error: `Server \"${name}\" not found in config`,\n        };\n      }\n\n      if (!client) {\n        return {\n          name,\n          connected: false,\n          toolCount: 0,\n          toolNames: [],\n          transport: getTransport(cfg),\n          error: 'MCP client not initialized',\n        };\n      }\n\n      // Use MCPClient's per-server reconnect\n      return connectSingleServer(name, cfg, () => client!.reconnectServer(name));\n    },\n\n    async authenticateServer(\n      name: string,\n      options?: { onAuthorizationUrl?: (url: string) => void; timeoutMs?: number },\n    ): Promise<McpServerStatus> {\n      const cfg = config.mcpServers?.[name];\n      if (!cfg) {\n        return {\n          name,\n          connected: false,\n          toolCount: 0,\n          toolNames: [],\n          transport: 'stdio',\n          error: `Server \"${name}\" not found in config`,\n        };\n      }\n\n      if (isDisabled(name)) {\n        return { ...disabledStatus(name), error: `Server \"${name}\" is disabled — enable it first` };\n      }\n\n      if (!client) {\n        return {\n          name,\n          connected: false,\n          toolCount: 0,\n          toolNames: [],\n          transport: getTransport(cfg),\n          error: 'MCP client not initialized',\n        };\n      }\n\n      if (getTransport(cfg) !== 'http') {\n        return {\n          name,\n          connected: false,\n          toolCount: 0,\n          toolNames: [],\n          transport: 'stdio',\n          error: `Server \"${name}\" uses stdio transport, which does not support OAuth`,\n        };\n      }\n\n      // Zero-config provisioning: a bare `url` entry gets a provider with the\n      // default redirect URL the first time the user authenticates. Dynamic\n      // client registration takes care of the client credentials.\n      //\n      // NOTE: `serverDefs[name]` is the same object reference the MCPClient was\n      // constructed with, and connectHttp reads `authProvider` live off it at\n      // connect time, so mutating it here reaches the already-created client.\n      // If MCPClient ever defensively copies its server config, zero-config auth\n      // would need an explicit \"set this server's provider\" API instead.\n      const def = serverDefs[name];\n      if (def?.url && !def.authProvider) {\n        def.authProvider = createOAuthProvider(name, { ...(cfg as McpHttpServerConfig), oauth: DEFAULT_OAUTH_CONFIG });\n      }\n\n      // Reject a concurrent second attempt for the same server. authUrlHandlers\n      // has a single slot per server, so a second call with an onAuthorizationUrl\n      // would overwrite the first caller's handler (which then never sees the\n      // URL) and its finally would delete the handler out from under the other\n      // in-flight call. Gate on authenticatingServers rather than authUrlHandlers\n      // so callers without a URL handler are caught too. The underlying\n      // client.authenticate already coalesces same-server calls into one flow.\n      if (authenticatingServers.has(name)) {\n        const current = serverStatuses.get(name);\n        return {\n          name,\n          connected: current?.connected ?? false,\n          connecting: current?.connecting,\n          needsAuth: current?.needsAuth,\n          toolCount: current?.toolCount ?? 0,\n          toolNames: current?.toolNames ?? [],\n          transport: current?.transport ?? getTransport(cfg),\n          error: `Authentication for \"${name}\" is already in progress`,\n        };\n      }\n\n      if (options?.onAuthorizationUrl) {\n        authUrlHandlers.set(name, options.onAuthorizationUrl);\n      }\n      authenticatingServers.add(name);\n      cancelledAuthServers.delete(name);\n      try {\n        const result = await connectSingleServer(name, cfg, () =>\n          client!.authenticate(name, options?.timeoutMs === undefined ? undefined : { timeoutMs: options.timeoutMs }),\n        );\n        // A cancelled flow resolves with a failed status; mark it so callers can\n        // distinguish a deliberate cancel from a genuine authentication failure.\n        // Write the marker back to the durable status map (not just the returned\n        // value) so a selector reopened after cancellation still sees it.\n        const finalStatus =\n          cancelledAuthServers.has(name) && !result.connected ? { ...result, cancelled: true } : result;\n        serverStatuses.set(name, finalStatus);\n        return finalStatus;\n      } finally {\n        authUrlHandlers.delete(name);\n        authenticatingServers.delete(name);\n        cancelledAuthServers.delete(name);\n      }\n    },\n\n    async cancelServerAuthentication(name: string): Promise<boolean> {\n      if (!client) {\n        return false;\n      }\n      // Record the intent before aborting so the resolving authenticateServer()\n      // call can tag its failed status as cancelled rather than failed.\n      cancelledAuthServers.add(name);\n      const cancelled = await client.cancelAuthentication(name);\n      if (!cancelled) {\n        cancelledAuthServers.delete(name);\n      }\n      return cancelled;\n    },\n\n    disconnect,\n\n    getTools() {\n      return { ...tools };\n    },\n\n    hasServers() {\n      const hasConfigured = config.mcpServers !== undefined && Object.keys(config.mcpServers).length > 0;\n      const hasSkipped = config.skippedServers !== undefined && config.skippedServers.length > 0;\n      return hasConfigured || hasSkipped;\n    },\n\n    getServerStatuses() {\n      return Array.from(serverStatuses.values(), withAuthenticating);\n    },\n\n    getSkippedServers() {\n      return [...(config.skippedServers ?? [])];\n    },\n\n    getConfigPaths() {\n      return {\n        project: getProjectMcpPath(projectDir, configDirName),\n        global: getGlobalMcpPath(configDirName),\n        claude: getClaudeSettingsPath(projectDir),\n      };\n    },\n\n    getConfig() {\n      return config;\n    },\n\n    getServerLogs(name: string) {\n      return [...(stderrLogs.get(name) ?? [])];\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;AA6BA,MAAM,4BAA4B,QAAc,KAAK;AAmFrD,SAAS,aAAa,KAAwC;CAC5D,OAAO,SAAS,MAAM,SAAS;AACjC;AAEA,IAAM,mBAAN,MAA+C;CACzB;CAApB,YAAY,UAA0B;EAAlB,KAAA,WAAA;CAAmB;CAEvC,IAAI,KAAiC;EACnC,OAAO,KAAK,KAAK,CAAC,CAAC;CACrB;CAEA,IAAI,KAAa,OAAqB;EACpC,MAAM,OAAO,KAAK,KAAK;EACvB,KAAK,OAAO;EACZ,KAAK,MAAM,IAAI;CACjB;CAEA,OAAO,KAAmB;EACxB,MAAM,OAAO,KAAK,KAAK;EACvB,OAAO,KAAK;EACZ,KAAK,MAAM,IAAI;CACjB;CAEA,OAAuC;EACrC,IAAI,CAAC,WAAW,KAAK,QAAQ,GAAG,OAAO,CAAC;EACxC,IAAI;GACF,OAAO,KAAK,MAAM,aAAa,KAAK,UAAU,OAAO,CAAC;EACxD,QAAQ;GACN,OAAO,CAAC;EACV;CACF;CAEA,MAAc,MAAoC;EAChD,MAAM,MAAM,QAAQ,KAAK,QAAQ;EACjC,IAAI,CAAC,WAAW,GAAG,GACjB,UAAU,KAAK;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EAEjD,MAAM,UAAU,GAAG,KAAK,SAAS;EACjC,cAAc,SAAS,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG;GAAE,UAAU;GAAS,MAAM;EAAM,CAAC;EACxF,WAAW,SAAS,KAAK,QAAQ;CACnC;AACF;;;;;AAMA,MAAM,uBAA2C,EAAE,aAAa,2BAA2B;AAE3F,SAAS,oBAAoB,YAAoB,MAAc,KAAkC;CAG/F,MAAM,MAAM,KAAK,UAAU;EACzB;EACA;EACA,KAAK,IAAI;EACT,aAAa,wBAAwB,IAAI,KAAK;EAC9C,UAAU,IAAI,OAAO;EACrB,QAAQ,IAAI,OAAO,UAAU,CAAC;CAChC,CAAC;CACD,OAAO,KAAK,cAAc,GAAG,aAAa,GAAG,yBAAyB,GAAG,EAAE,MAAM;AACnF;AAEA,SAAS,yBAAyB,OAAuB;CACvD,IAAI,cAAc;CAClB,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,GAAG;EACxC,eAAe,OAAO,MAAM,WAAW,CAAC,CAAC;EACzC,cAAc,OAAO,QAAQ,IAAI,cAAc,cAAc;CAC/D;CACA,OAAO,YAAY,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,GAAG;AAClD;;;;;AAMA,SAAgB,iBACd,YACA,gBAAgB,oBAChB,cACY;;CAEZ,MAAM,qBAAqB,SAA+B;EACxD,IAAI,CAAC,gBAAgB,OAAO,KAAK,YAAY,CAAC,CAAC,WAAW,GAAG,OAAO;EACpE,OAAO;GAAE,GAAG;GAAM,YAAY;IAAE,GAAG,KAAK;IAAY,GAAG;GAAa;EAAE;CACxE;CAEA,IAAI,SAAS,kBAAkB,cAAc,YAAY,aAAa,CAAC;CACvE,IAAI,kBAAkB,IAAI,IAAI,oBAAoB,UAAU,CAAC;CAC7D,IAAI,qBAAqB,uBAAuB;CAChD,IAAI,0BAA0B,IAAI,IAAI,mBAAmB,eAAe;;CAGxE,MAAM,cAAc,SAClB,mBAAmB,eAAe,wBAAwB,IAAI,IAAI,KAAK,gBAAgB,IAAI,IAAI;;CAGjG,MAAM,mBAAmB,SAAmD;EAC1E,IAAI,mBAAmB,eAAe,wBAAwB,IAAI,IAAI,GAAG,OAAO;EAChF,IAAI,gBAAgB,IAAI,IAAI,GAAG,OAAO;CAExC;CACA,IAAI,SAA2B;CAC/B,IAAI,aAAwD,CAAC;CAC7D,IAAI,QAA6B,CAAC;CAClC,IAAI,iCAAiB,IAAI,IAA6B;CACtD,IAAI,6BAAa,IAAI,IAAsB;CAC3C,IAAI,cAAc;;CAGlB,MAAM,kCAAkB,IAAI,IAAmC;;;;;;;CAQ/D,MAAM,wCAAwB,IAAI,IAAY;;;;;;;;CAS9C,MAAM,uCAAuB,IAAI,IAAY;;CAG7C,MAAM,sBAAsB,WAC1B,sBAAsB,IAAI,OAAO,IAAI,IAAI;EAAE,GAAG;EAAQ,gBAAgB;CAAK,IAAI;CAEjF,MAAM,mBAAmB;;CAGzB,SAAS,cAAc,YAA0B;EAC/C,IAAI,CAAC,UAAU,OAAO,OAAO,oBAAoB,YAAY;EAC7D,MAAM,SAAS,OAAO,gBAAgB,UAAU;EAChD,IAAI,CAAC,QAAQ;EAEb,IAAI,SAAS;EACb,MAAM,QAAQ,WAAW,IAAI,UAAU,KAAK,CAAC;EAC7C,WAAW,IAAI,YAAY,KAAK;EAEhC,OAAO,GAAG,SAAS,UAAkB;GACnC,UAAU,MAAM,SAAS;GACzB,MAAM,QAAQ,OAAO,MAAM,IAAI;GAE/B,SAAS,MAAM,IAAI;GACnB,KAAK,MAAM,QAAQ,OACjB,IAAI,KAAK,KAAK,GAAG;IACf,MAAM,KAAK,IAAI;IACf,IAAI,MAAM,SAAS,kBACjB,MAAM,MAAM;GAEhB;EAEJ,CAAC;EAED,OAAO,GAAG,aAAa;GACrB,IAAI,OAAO,KAAK,GAAG;IACjB,MAAM,KAAK,MAAM;IACjB,IAAI,MAAM,SAAS,kBACjB,MAAM,MAAM;GAEhB;EACF,CAAC;CACH;CAEA,SAAS,oBAAoB,MAAc,KAA0B;EAKnE,MAAM,QACJ,IAAI,UAAU,WAAW,oBAAoB,YAAY,MAAM,GAAG,CAAC,IAAI,uBAAuB,KAAA;EAChG,IAAI,CAAC,OAAO,OAAO,KAAA;EAMnB,MAAM,cAAc,wBAAwB,KAAK;EAEjD,OAAO,IAAI,uBAAuB;GAChC;GACA,gBAAgB;IACd,eAAe,CAAC,WAAW;IAC3B,aAAa,MAAM,cAAc,mBAAmB;IACpD,aAAa,CAAC,sBAAsB,eAAe;IACnD,gBAAgB,CAAC,MAAM;IACvB,GAAI,MAAM,QAAQ,SAAS,EAAE,OAAO,MAAM,OAAO,KAAK,GAAG,EAAE,IAAI,CAAC;GAClE;GACA,mBAAmB,MAAM,WACpB;IACC,WAAW,MAAM;IACjB,GAAI,MAAM,eAAe,EAAE,eAAe,MAAM,aAAa,IAAI,CAAC;GACpE,IACA,KAAA;GACJ,SAAS,IAAI,iBAAiB,oBAAoB,YAAY,MAAM,GAAG,CAAC;GACxE,4BAA2B,QAAO;IAChC,gBAAgB,IAAI,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC;GAC5C;EACF,CAAC;CACH;CAEA,SAAS,gBAAgB,SAAqF;EAC5G,MAAM,OAAkD,CAAC;EACzD,KAAK,MAAM,CAAC,MAAM,QAAQ,OAAO,QAAQ,OAAO,GAC9C,IAAI,SAAS,KAAK;GAChB,MAAM,UAAU;GAChB,KAAK,QAAQ;IACX,KAAK,IAAI,IAAI,QAAQ,GAAG;IACxB,aAAa,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,KAAA;IAC9D,cAAc,oBAAoB,MAAM,OAAO;GACjD;EACF,OACE,KAAK,QAAQ;GAAE,SAAS,IAAI;GAAS,MAAM,IAAI;GAAM,KAAK,IAAI;GAAK,QAAQ;EAAO;EAGtF,OAAO;CACT;;CAGA,SAAS,sBAA4B;EACnC,KAAK,MAAM,CAAC,MAAM,QAAQ,OAAO,QAAQ,OAAO,cAAc,CAAC,CAAC,GAAG;GACjE,MAAM,QAAQ,gBAAgB,IAAI;GAClC,IAAI,CAAC,OAAO;GACZ,eAAe,IAAI,MAAM;IACvB;IACA,WAAW;IACX,WAAW;IACX,WAAW,CAAC;IACZ,WAAW,aAAa,GAAG;IAC3B,UAAU;IACV,eAAe;GACjB,CAAC;EACH;CACF;CAEA,eAAe,yBAAwC;EACrD,oBAAoB;EAEpB,MAAM,UAAU,OAAO,YAAY,OAAO,QAAQ,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,IAAI,CAAC,CAAC;EAChH,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,WAAW,GAClC;EAIF,MAAM,cAAc,OAAO,KAAK,OAAO;EACvC,KAAK,MAAM,QAAQ,aACjB,eAAe,IAAI,MAAM;GACvB;GACA,WAAW;GACX,YAAY;GACZ,WAAW;GACX,WAAW,CAAC;GACZ,WAAW,aAAa,QAAQ,KAAM;EACxC,CAAC;EAGH,aAAa,gBAAgB,OAAO;EACpC,SAAS,IAAI,UAAU;GACrB,IAAI;GACJ,SAAS;GACT,SAAS;EACX,CAAC;EAKD,IAAI;GACF,MAAM,EAAE,UAAU,WAAW,MAAM,OAAO,uBAAuB;GACjE,MAAM,gBAAgB;GAGtB,KAAK,MAAM,CAAC,YAAY,gBAAgB,OAAO,QAAQ,aAAa,GAClE,KAAK,MAAM,CAAC,UAAU,eAAe,OAAO,QAAQ,WAAW,GAC7D,MAAM,GAAG,WAAW,GAAG,cAAc;GAIzC,KAAK,MAAM,QAAQ,aAAa;IAC9B,MAAM,cAAc,cAAc;IAClC,IAAI,eAAe,OAAO,KAAK,WAAW,CAAC,CAAC,SAAS,GAAG;KACtD,MAAM,YAAY,OAAO,KAAK,WAAW,CAAC,CAAC,KAAI,MAAK,GAAG,KAAK,GAAG,GAAG;KAClE,eAAe,IAAI,MAAM;MACvB;MACA,WAAW;MACX,WAAW,UAAU;MACrB;MACA,WAAW,aAAa,QAAQ,KAAM;KACxC,CAAC;IACH,OAAO;KAEL,MAAM,QAAQ,OAAO,SAAS;KAC9B,eAAe,IAAI,MAAM;MACvB;MACA,WAAW;MACX,WAAW;MACX,WAAW,CAAC;MACZ,WAAW,aAAa,QAAQ,KAAM;MACtC;MACA,GAAI,gBAAgB,MAAM,QAAQ,OAAQ,KAAK,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;KAC5E,CAAC;IACH;GACF;GAGA,KAAK,MAAM,QAAQ,aACjB,cAAc,IAAI;EAEtB,SAAS,OAAO;GACd,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GAEpE,KAAK,MAAM,QAAQ,aACjB,eAAe,IAAI,MAAM;IACvB;IACA,WAAW;IACX,WAAW;IACX,WAAW,CAAC;IACZ,WAAW,aAAa,QAAQ,KAAM;IACtC,OAAO;IACP,GAAI,gBAAgB,MAAM,QAAQ,OAAQ,MAAM,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;GAC7E,CAAC;EAEL;CACF;;;;;;;;;CAUA,SAAS,gBAAgB,MAAc,KAAsB,OAAyB;EACpF,IAAI,aAAa,GAAG,MAAM,QAAQ,OAAO;EACzC,IAAI,QAAQ,qBAAqB,IAAI,MAAM,cAAc,OAAO;EAChE,IAAI,WAAW,KAAK,EAAE,cAAc,OAAO;EAC3C,OAAO,UAAU,KAAA,KAAa,sCAAsC,KAAK,KAAK;CAChF;;;;;CAMA,eAAe,oBACb,MACA,KACA,SAC0B;EAC1B,MAAM,YAAY,aAAa,GAAG;EAGlC,MAAM,SAAS,GAAG,KAAK;EACvB,KAAK,MAAM,OAAO,OAAO,KAAK,KAAK,GACjC,IAAI,IAAI,WAAW,MAAM,GACvB,OAAO,MAAM;EAKjB,WAAW,OAAO,IAAI;EACtB,eAAe,IAAI,MAAM;GACvB;GACA,WAAW;GACX,YAAY;GACZ,WAAW;GACX,WAAW,CAAC;GACZ;EACF,CAAC;EAED,IAAI;GACF,MAAM,QAAQ;GAGd,cAAc,IAAI;GAGlB,MAAM,EAAE,UAAU,WAAW,MAAM,OAAQ,uBAAuB;GAClE,MAAM,cAAc,SAAS;GAC7B,MAAM,cAAc,OAAO;GAE3B,IAAI,aAAa;IACf,MAAM,SAA0B;KAC9B;KACA,WAAW;KACX,WAAW;KACX,WAAW,CAAC;KACZ;KACA,OAAO;KACP,GAAI,gBAAgB,MAAM,KAAK,WAAW,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IACvE;IACA,eAAe,IAAI,MAAM,MAAM;IAC/B,OAAO;GACT,OAAO,IAAI,eAAe,OAAO,KAAK,WAAW,CAAC,CAAC,SAAS,GAAG;IAC7D,MAAM,YAAY,OAAO,KAAK,WAAW,CAAC,CAAC,KAAI,MAAK,GAAG,KAAK,GAAG,GAAG;IAClE,KAAK,MAAM,CAAC,UAAU,eAAe,OAAO,QAAQ,WAAW,GAC7D,MAAM,GAAG,KAAK,GAAG,cAAc;IAEjC,MAAM,SAA0B;KAC9B;KACA,WAAW;KACX,WAAW,UAAU;KACrB;KACA;IACF;IACA,eAAe,IAAI,MAAM,MAAM;IAC/B,OAAO;GACT,OAAO;IACL,MAAM,SAA0B;KAC9B;KACA,WAAW;KACX,WAAW;KACX,WAAW,CAAC;KACZ;KACA,OAAO;IACT;IACA,eAAe,IAAI,MAAM,MAAM;IAC/B,OAAO;GACT;EACF,SAAS,OAAO;GACd,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACpE,MAAM,SAA0B;IAC9B;IACA,WAAW;IACX,WAAW;IACX,WAAW,CAAC;IACZ;IACA,OAAO;IACP,GAAI,gBAAgB,MAAM,KAAK,MAAM,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;GAClE;GACA,eAAe,IAAI,MAAM,MAAM;GAC/B,OAAO;EACT;CACF;CAEA,eAAe,aAA4B;EACzC,IAAI,QAAQ;GACV,IAAI;IACF,MAAM,OAAO,WAAW;GAC1B,QAAQ,CAER;GACA,SAAS;EACX;CACF;;CAGA,eAAe,qBAAoC;EACjD,MAAM,WAAW;EACjB,QAAQ,CAAC;EACT,iCAAiB,IAAI,IAAI;EACzB,6BAAa,IAAI,IAAI;EACrB,cAAc;EACd,MAAM,uBAAuB;EAC7B,cAAc;CAChB;CAEA,SAAS,eAAe,MAA+B;EACrD,MAAM,MAAM,OAAO,aAAa;EAChC,OAAO;GACL;GACA,WAAW;GACX,WAAW;GACX,WAAW,CAAC;GACZ,WAAW,MAAM,aAAa,GAAG,IAAI;GACrC,UAAU;GACV,eAAe,gBAAgB,IAAI;EACrC;CACF;CAOA,SAAS,oBAAoB,QAA4C;EACvE,MAAM,QAAQ,IAAI,IAAI,oBAAoB,UAAU,CAAC;EACrD,OAAO,KAAK;EACZ,kBAAkB;EAClB,oBAAoB,YAAY,MAAM,KAAK,KAAK,CAAC;CACnD;CAEA,SAAS,mBAAmB,QAAuF;EACjH,MAAM,SAAS,uBAAuB;EACtC,MAAM,QAAQ;GAAE,aAAa,OAAO;GAAa,iBAAiB,IAAI,IAAI,OAAO,eAAe;EAAE;EAClG,OAAO,KAAK;EACZ,0BAA0B,MAAM;EAChC,qBAAqB;GAAE,aAAa,MAAM;GAAa,iBAAiB,MAAM,KAAK,MAAM,eAAe;EAAE;EAC1G,uBAAuB,kBAAkB;CAC3C;CAEA,OAAO;EACL,MAAM,OAAO;GACX,IAAI,aAAa;GACjB,MAAM,uBAAuB;GAC7B,cAAc;EAChB;EAEA,MAAM,mBAA2C;GAC/C,MAAM,KAAK,KAAK;GAChB,MAAM,WAAW,MAAM,KAAK,eAAe,OAAO,CAAC;GACnD,MAAM,YAAY,SAAS,QAAO,MAAK,EAAE,SAAS;GAElD,OAAO;IACL;IACA,QAHa,SAAS,QAAO,MAAK,CAAC,EAAE,aAAa,CAAC,EAAE,QAGhD;IACL,SAAS,CAAC,GAAI,OAAO,kBAAkB,CAAC,CAAE;IAC1C,YAAY,UAAU,QAAQ,KAAK,MAAM,MAAM,EAAE,WAAW,CAAC;GAC/D;EACF;EAEA,MAAM,SAAS;GACb,SAAS,kBAAkB,cAAc,YAAY,aAAa,CAAC;GACnE,kBAAkB,IAAI,IAAI,oBAAoB,UAAU,CAAC;GACzD,qBAAqB,uBAAuB;GAC5C,0BAA0B,IAAI,IAAI,mBAAmB,eAAe;GACpE,MAAM,mBAAmB;EAC3B;EAEA,MAAM,kBAAkB,MAAc,UAAmB,SAA0D;GACjH,IAAI,CAAC,OAAO,aAAa,OACvB,OAAO;IACL;IACA,WAAW;IACX,WAAW;IACX,WAAW,CAAC;IACZ,WAAW;IACX,OAAO,WAAW,KAAK;GACzB;GAGF,MAAM,yBAAyB,WAAW,IAAI;GAE9C,IAAI,SAAS,QACX,oBAAmB,UAAS;IAC1B,IAAI,UACF,MAAM,gBAAgB,IAAI,IAAI;SAE9B,MAAM,gBAAgB,OAAO,IAAI;GAErC,CAAC;QAED,qBAAoB,UAAS;IAC3B,IAAI,UACF,MAAM,IAAI,IAAI;SAEd,MAAM,OAAO,IAAI;GAErB,CAAC;GAMH,IAAI,WAAW,IAAI,MAAM,wBAAwB;IAC/C,MAAM,mBAAmB;IACzB,OAAO,mBAAmB,eAAe,IAAI,IAAI,KAAK,eAAe,IAAI,CAAC;GAC5E;GAGA,OAAO,mBACL,WAAW,IAAI,IAAI,eAAe,IAAI,IAAK,eAAe,IAAI,IAAI,KAAK,eAAe,IAAI,CAC5F;EACF;EAEA,MAAM,eAAe,UAAmB,SAA+C;GACrF,MAAM,kBAAkB,OAAO,KAAK,OAAO,cAAc,CAAC,CAAC;GAC3D,MAAM,kBAAkB,gBAAgB,QAAO,SAAQ,WAAW,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;GACjF,IAAI,SAAS,QACX,oBAAmB,UAAS;IAC1B,MAAM,cAAc;IACpB,IAAI,CAAC,UAGH,MAAM,gBAAgB,MAAM;GAEhC,CAAC;QAED,qBAAoB,UAAS;IAC3B,IAAI,UACF,KAAK,MAAM,QAAQ,iBACjB,MAAM,IAAI,IAAI;SAGhB,MAAM,MAAM;GAEhB,CAAC;GAMH,IADuB,gBAAgB,QAAO,SAAQ,WAAW,IAAI,CAAC,CAAC,CAAC,KAAK,GAC5D,MAAM,iBACrB,MAAM,mBAAmB;EAE7B;EAEA,qBAAqB;GACnB,OAAO,OAAO,KAAK,OAAO,cAAc,CAAC,CAAC,CAAC,CACxC,QAAO,SAAQ,WAAW,IAAI,CAAC,CAAC,CAChC,KAAK;EACV;EAEA,wBAAwB;GACtB,OAAO,mBAAmB;EAC5B;EAEA,MAAM,gBAAgB,MAAwC;GAC5D,IAAI,WAAW,IAAI,GACjB,OAAO;IAAE,GAAG,eAAe,IAAI;IAAG,OAAO,WAAW,KAAK;GAAiC;GAE5F,MAAM,MAAM,OAAO,aAAa;GAChC,IAAI,CAAC,KACH,OAAO;IACL;IACA,WAAW;IACX,WAAW;IACX,WAAW,CAAC;IACZ,WAAW;IACX,OAAO,WAAW,KAAK;GACzB;GAGF,IAAI,CAAC,QACH,OAAO;IACL;IACA,WAAW;IACX,WAAW;IACX,WAAW,CAAC;IACZ,WAAW,aAAa,GAAG;IAC3B,OAAO;GACT;GAIF,OAAO,oBAAoB,MAAM,WAAW,OAAQ,gBAAgB,IAAI,CAAC;EAC3E;EAEA,MAAM,mBACJ,MACA,SAC0B;GAC1B,MAAM,MAAM,OAAO,aAAa;GAChC,IAAI,CAAC,KACH,OAAO;IACL;IACA,WAAW;IACX,WAAW;IACX,WAAW,CAAC;IACZ,WAAW;IACX,OAAO,WAAW,KAAK;GACzB;GAGF,IAAI,WAAW,IAAI,GACjB,OAAO;IAAE,GAAG,eAAe,IAAI;IAAG,OAAO,WAAW,KAAK;GAAiC;GAG5F,IAAI,CAAC,QACH,OAAO;IACL;IACA,WAAW;IACX,WAAW;IACX,WAAW,CAAC;IACZ,WAAW,aAAa,GAAG;IAC3B,OAAO;GACT;GAGF,IAAI,aAAa,GAAG,MAAM,QACxB,OAAO;IACL;IACA,WAAW;IACX,WAAW;IACX,WAAW,CAAC;IACZ,WAAW;IACX,OAAO,WAAW,KAAK;GACzB;GAYF,MAAM,MAAM,WAAW;GACvB,IAAI,KAAK,OAAO,CAAC,IAAI,cACnB,IAAI,eAAe,oBAAoB,MAAM;IAAE,GAAI;IAA6B,OAAO;GAAqB,CAAC;GAU/G,IAAI,sBAAsB,IAAI,IAAI,GAAG;IACnC,MAAM,UAAU,eAAe,IAAI,IAAI;IACvC,OAAO;KACL;KACA,WAAW,SAAS,aAAa;KACjC,YAAY,SAAS;KACrB,WAAW,SAAS;KACpB,WAAW,SAAS,aAAa;KACjC,WAAW,SAAS,aAAa,CAAC;KAClC,WAAW,SAAS,aAAa,aAAa,GAAG;KACjD,OAAO,uBAAuB,KAAK;IACrC;GACF;GAEA,IAAI,SAAS,oBACX,gBAAgB,IAAI,MAAM,QAAQ,kBAAkB;GAEtD,sBAAsB,IAAI,IAAI;GAC9B,qBAAqB,OAAO,IAAI;GAChC,IAAI;IACF,MAAM,SAAS,MAAM,oBAAoB,MAAM,WAC7C,OAAQ,aAAa,MAAM,SAAS,cAAc,KAAA,IAAY,KAAA,IAAY,EAAE,WAAW,QAAQ,UAAU,CAAC,CAC5G;IAKA,MAAM,cACJ,qBAAqB,IAAI,IAAI,KAAK,CAAC,OAAO,YAAY;KAAE,GAAG;KAAQ,WAAW;IAAK,IAAI;IACzF,eAAe,IAAI,MAAM,WAAW;IACpC,OAAO;GACT,UAAU;IACR,gBAAgB,OAAO,IAAI;IAC3B,sBAAsB,OAAO,IAAI;IACjC,qBAAqB,OAAO,IAAI;GAClC;EACF;EAEA,MAAM,2BAA2B,MAAgC;GAC/D,IAAI,CAAC,QACH,OAAO;GAIT,qBAAqB,IAAI,IAAI;GAC7B,MAAM,YAAY,MAAM,OAAO,qBAAqB,IAAI;GACxD,IAAI,CAAC,WACH,qBAAqB,OAAO,IAAI;GAElC,OAAO;EACT;EAEA;EAEA,WAAW;GACT,OAAO,EAAE,GAAG,MAAM;EACpB;EAEA,aAAa;GACX,MAAM,gBAAgB,OAAO,eAAe,KAAA,KAAa,OAAO,KAAK,OAAO,UAAU,CAAC,CAAC,SAAS;GACjG,MAAM,aAAa,OAAO,mBAAmB,KAAA,KAAa,OAAO,eAAe,SAAS;GACzF,OAAO,iBAAiB;EAC1B;EAEA,oBAAoB;GAClB,OAAO,MAAM,KAAK,eAAe,OAAO,GAAG,kBAAkB;EAC/D;EAEA,oBAAoB;GAClB,OAAO,CAAC,GAAI,OAAO,kBAAkB,CAAC,CAAE;EAC1C;EAEA,iBAAiB;GACf,OAAO;IACL,SAAS,kBAAkB,YAAY,aAAa;IACpD,QAAQ,iBAAiB,aAAa;IACtC,QAAQ,sBAAsB,UAAU;GAC1C;EACF;EAEA,YAAY;GACV,OAAO;EACT;EAEA,cAAc,MAAc;GAC1B,OAAO,CAAC,GAAI,WAAW,IAAI,IAAI,KAAK,CAAC,CAAE;EACzC;CACF;AACF"}

package/dist/mcp/state.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Persisted MCP disable state — mastracode-owned so user config files
+ * (mcp.json, .mcp.json, .claude/settings.local.json) are never mutated.
+ *
+ * Stored as a single JSON file in the app data dir, with a global section
+ * (applies to every project) and per-project entries:
+ *
+ *   {
+ *     "global": { "allDisabled": true, "disabledServers": ["name"] },
+ *     "projects": { "/path/to/project": { "disabledServers": ["name"] } }
+ *   }
+ *
+ * Disabled names are kept even if the server disappears from config, so a
+ * server that is removed and later re-added stays disabled until the user
+ * re-enables it.
+ */
+/** Global (all-projects) MCP disable state. */
+export interface McpGlobalDisableState {
+    /** When true, every MCP server is disabled regardless of per-server state. */
+    allDisabled: boolean;
+    /** Server names disabled across all projects. */
+    disabledServers: string[];
+}
+export declare function getMcpStatePath(): string;
+/** Load the persisted disabled server names for a project. */
+export declare function loadDisabledServers(projectDir: string): string[];
+/** Persist the disabled server names for a project. */
+export declare function saveDisabledServers(projectDir: string, disabledServers: string[]): void;
+/** Load the persisted global disable state (applies to all projects). */
+export declare function loadGlobalDisableState(): McpGlobalDisableState;
+/** Persist the global disable state. Prunes the section when empty. */
+export declare function saveGlobalDisableState(globalState: McpGlobalDisableState): void;
+//# sourceMappingURL=state.d.ts.map

package/dist/mcp/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/mcp/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAWH,+CAA+C;AAC/C,MAAM,WAAW,qBAAqB;IACpC,8EAA8E;IAC9E,WAAW,EAAE,OAAO,CAAC;IACrB,iDAAiD;IACjD,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAgCD,8DAA8D;AAC9D,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAEhE;AAED,uDAAuD;AACvD,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,IAAI,CASvF;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,IAAI,qBAAqB,CAM9D;AAED,uEAAuE;AACvE,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,qBAAqB,GAAG,IAAI,CAc/E"}

package/dist/mcp/state.js

@@ -0,0 +1,88 @@
+import { getAppDataDir } from "../utils/project.js";
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "fs";
+import { dirname, join } from "path";
+//#region src/mcp/state.ts
+/**
+* Persisted MCP disable state — mastracode-owned so user config files
+* (mcp.json, .mcp.json, .claude/settings.local.json) are never mutated.
+*
+* Stored as a single JSON file in the app data dir, with a global section
+* (applies to every project) and per-project entries:
+*
+*   {
+*     "global": { "allDisabled": true, "disabledServers": ["name"] },
+*     "projects": { "/path/to/project": { "disabledServers": ["name"] } }
+*   }
+*
+* Disabled names are kept even if the server disappears from config, so a
+* server that is removed and later re-added stays disabled until the user
+* re-enables it.
+*/
+function getMcpStatePath() {
+	return join(getAppDataDir(), "mcp-state.json");
+}
+function readStateFile() {
+	const filePath = getMcpStatePath();
+	if (!existsSync(filePath)) return {};
+	try {
+		const parsed = JSON.parse(readFileSync(filePath, "utf-8"));
+		return parsed && typeof parsed === "object" ? parsed : {};
+	} catch {
+		return {};
+	}
+}
+function writeStateFile(state) {
+	const filePath = getMcpStatePath();
+	const dir = dirname(filePath);
+	if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
+	const tmpPath = `${filePath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;
+	writeFileSync(tmpPath, JSON.stringify(state, null, 2), "utf-8");
+	renameSync(tmpPath, filePath);
+}
+function cleanNames(names) {
+	if (!Array.isArray(names)) return [];
+	return names.filter((name) => typeof name === "string");
+}
+/** Load the persisted disabled server names for a project. */
+function loadDisabledServers(projectDir) {
+	return cleanNames(readStateFile().projects?.[projectDir]?.disabledServers);
+}
+/** Persist the disabled server names for a project. */
+function saveDisabledServers(projectDir, disabledServers) {
+	const state = readStateFile();
+	const projects = state.projects ?? {};
+	if (disabledServers.length > 0) projects[projectDir] = { disabledServers: [...disabledServers].sort() };
+	else delete projects[projectDir];
+	writeStateFile({
+		...state,
+		projects
+	});
+}
+/** Load the persisted global disable state (applies to all projects). */
+function loadGlobalDisableState() {
+	const global = readStateFile().global;
+	return {
+		allDisabled: global?.allDisabled === true,
+		disabledServers: cleanNames(global?.disabledServers)
+	};
+}
+/** Persist the global disable state. Prunes the section when empty. */
+function saveGlobalDisableState(globalState) {
+	const state = readStateFile();
+	if (!globalState.allDisabled && globalState.disabledServers.length === 0) {
+		delete state.global;
+		writeStateFile(state);
+		return;
+	}
+	writeStateFile({
+		...state,
+		global: {
+			...globalState.allDisabled ? { allDisabled: true } : {},
+			...globalState.disabledServers.length > 0 ? { disabledServers: [...globalState.disabledServers].sort() } : {}
+		}
+	});
+}
+//#endregion
+export { getMcpStatePath, loadDisabledServers, loadGlobalDisableState, saveDisabledServers, saveGlobalDisableState };
+
+//# sourceMappingURL=state.js.map

package/dist/mcp/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","names":[],"sources":["../../src/mcp/state.ts"],"sourcesContent":["/**\n * Persisted MCP disable state — mastracode-owned so user config files\n * (mcp.json, .mcp.json, .claude/settings.local.json) are never mutated.\n *\n * Stored as a single JSON file in the app data dir, with a global section\n * (applies to every project) and per-project entries:\n *\n *   {\n *     \"global\": { \"allDisabled\": true, \"disabledServers\": [\"name\"] },\n *     \"projects\": { \"/path/to/project\": { \"disabledServers\": [\"name\"] } }\n *   }\n *\n * Disabled names are kept even if the server disappears from config, so a\n * server that is removed and later re-added stays disabled until the user\n * re-enables it.\n */\n\nimport { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { getAppDataDir } from '../utils/project.js';\n\ninterface McpStateFile {\n  global?: { allDisabled?: boolean; disabledServers?: string[] };\n  projects?: Record<string, { disabledServers?: string[] }>;\n}\n\n/** Global (all-projects) MCP disable state. */\nexport interface McpGlobalDisableState {\n  /** When true, every MCP server is disabled regardless of per-server state. */\n  allDisabled: boolean;\n  /** Server names disabled across all projects. */\n  disabledServers: string[];\n}\n\nexport function getMcpStatePath(): string {\n  return join(getAppDataDir(), 'mcp-state.json');\n}\n\nfunction readStateFile(): McpStateFile {\n  const filePath = getMcpStatePath();\n  if (!existsSync(filePath)) return {};\n  try {\n    const parsed = JSON.parse(readFileSync(filePath, 'utf-8'));\n    return parsed && typeof parsed === 'object' ? (parsed as McpStateFile) : {};\n  } catch {\n    return {};\n  }\n}\n\nfunction writeStateFile(state: McpStateFile): void {\n  const filePath = getMcpStatePath();\n  const dir = dirname(filePath);\n  if (!existsSync(dir)) {\n    mkdirSync(dir, { recursive: true });\n  }\n  // Atomic write (same pattern as FileOAuthStorage) so a crash mid-write\n  // never leaves a truncated state file. The temp name is process-unique so\n  // two concurrent mastracode processes never share a partially written file.\n  const tmpPath = `${filePath}.${process.pid}.${Math.random().toString(36).slice(2)}.tmp`;\n  writeFileSync(tmpPath, JSON.stringify(state, null, 2), 'utf-8');\n  renameSync(tmpPath, filePath);\n}\n\nfunction cleanNames(names: unknown): string[] {\n  if (!Array.isArray(names)) return [];\n  return names.filter((name): name is string => typeof name === 'string');\n}\n\n/** Load the persisted disabled server names for a project. */\nexport function loadDisabledServers(projectDir: string): string[] {\n  return cleanNames(readStateFile().projects?.[projectDir]?.disabledServers);\n}\n\n/** Persist the disabled server names for a project. */\nexport function saveDisabledServers(projectDir: string, disabledServers: string[]): void {\n  const state = readStateFile();\n  const projects = state.projects ?? {};\n  if (disabledServers.length > 0) {\n    projects[projectDir] = { disabledServers: [...disabledServers].sort() };\n  } else {\n    delete projects[projectDir];\n  }\n  writeStateFile({ ...state, projects });\n}\n\n/** Load the persisted global disable state (applies to all projects). */\nexport function loadGlobalDisableState(): McpGlobalDisableState {\n  const global = readStateFile().global;\n  return {\n    allDisabled: global?.allDisabled === true,\n    disabledServers: cleanNames(global?.disabledServers),\n  };\n}\n\n/** Persist the global disable state. Prunes the section when empty. */\nexport function saveGlobalDisableState(globalState: McpGlobalDisableState): void {\n  const state = readStateFile();\n  if (!globalState.allDisabled && globalState.disabledServers.length === 0) {\n    delete state.global;\n    writeStateFile(state);\n    return;\n  }\n  writeStateFile({\n    ...state,\n    global: {\n      ...(globalState.allDisabled ? { allDisabled: true } : {}),\n      ...(globalState.disabledServers.length > 0 ? { disabledServers: [...globalState.disabledServers].sort() } : {}),\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAkCA,SAAgB,kBAA0B;CACxC,OAAO,KAAK,cAAc,GAAG,gBAAgB;AAC/C;AAEA,SAAS,gBAA8B;CACrC,MAAM,WAAW,gBAAgB;CACjC,IAAI,CAAC,WAAW,QAAQ,GAAG,OAAO,CAAC;CACnC,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,aAAa,UAAU,OAAO,CAAC;EACzD,OAAO,UAAU,OAAO,WAAW,WAAY,SAA0B,CAAC;CAC5E,QAAQ;EACN,OAAO,CAAC;CACV;AACF;AAEA,SAAS,eAAe,OAA2B;CACjD,MAAM,WAAW,gBAAgB;CACjC,MAAM,MAAM,QAAQ,QAAQ;CAC5B,IAAI,CAAC,WAAW,GAAG,GACjB,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;CAKpC,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;CAClF,cAAc,SAAS,KAAK,UAAU,OAAO,MAAM,CAAC,GAAG,OAAO;CAC9D,WAAW,SAAS,QAAQ;AAC9B;AAEA,SAAS,WAAW,OAA0B;CAC5C,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,CAAC;CACnC,OAAO,MAAM,QAAQ,SAAyB,OAAO,SAAS,QAAQ;AACxE;;AAGA,SAAgB,oBAAoB,YAA8B;CAChE,OAAO,WAAW,cAAc,CAAC,CAAC,WAAW,WAAW,EAAE,eAAe;AAC3E;;AAGA,SAAgB,oBAAoB,YAAoB,iBAAiC;CACvF,MAAM,QAAQ,cAAc;CAC5B,MAAM,WAAW,MAAM,YAAY,CAAC;CACpC,IAAI,gBAAgB,SAAS,GAC3B,SAAS,cAAc,EAAE,iBAAiB,CAAC,GAAG,eAAe,CAAC,CAAC,KAAK,EAAE;MAEtE,OAAO,SAAS;CAElB,eAAe;EAAE,GAAG;EAAO;CAAS,CAAC;AACvC;;AAGA,SAAgB,yBAAgD;CAC9D,MAAM,SAAS,cAAc,CAAC,CAAC;CAC/B,OAAO;EACL,aAAa,QAAQ,gBAAgB;EACrC,iBAAiB,WAAW,QAAQ,eAAe;CACrD;AACF;;AAGA,SAAgB,uBAAuB,aAA0C;CAC/E,MAAM,QAAQ,cAAc;CAC5B,IAAI,CAAC,YAAY,eAAe,YAAY,gBAAgB,WAAW,GAAG;EACxE,OAAO,MAAM;EACb,eAAe,KAAK;EACpB;CACF;CACA,eAAe;EACb,GAAG;EACH,QAAQ;GACN,GAAI,YAAY,cAAc,EAAE,aAAa,KAAK,IAAI,CAAC;GACvD,GAAI,YAAY,gBAAgB,SAAS,IAAI,EAAE,iBAAiB,CAAC,GAAG,YAAY,eAAe,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC;EAC/G;CACF,CAAC;AACH"}

package/dist/mcp/types.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Type definitions for the MCP server system.
+ * Servers provide external tools via Model Context Protocol.
+ */
+/**
+ * A stdio-based MCP server configuration entry.
+ * Launches a local process that communicates via stdin/stdout.
+ */
+export interface McpStdioServerConfig {
+    /** The command to launch the MCP server process */
+    command: string;
+    /** Arguments for the command */
+    args?: string[];
+    /** Environment variables to set for the server process */
+    env?: Record<string, string>;
+}
+/**
+ * An HTTP-based MCP server configuration entry.
+ * Connects to a remote server via Streamable HTTP or SSE.
+ */
+export interface McpHttpServerConfig {
+    /** The URL of the remote MCP server endpoint */
+    url: string;
+    /** Optional HTTP headers (e.g. for authentication) */
+    headers?: Record<string, string>;
+    /** Optional OAuth configuration for protected HTTP MCP servers */
+    oauth?: McpHttpOAuthConfig;
+}
+/**
+ * OAuth client configuration for an HTTP MCP server.
+ */
+export interface McpHttpOAuthConfig {
+    /** Redirect URL for OAuth callbacks. Defaults to DEFAULT_OAUTH_REDIRECT_URL when omitted. */
+    redirectUrl?: string;
+    /**
+     * Shorthand for a loopback redirect URL: synthesizes
+     * `http://localhost:<callbackPort>/callback`, matching the convention
+     * Claude Code and Codex use. Config files reject entries that set both
+     * `callbackPort` and `redirectUrl`; for programmatically registered
+     * servers, `callbackPort` takes precedence over `redirectUrl`.
+     */
+    callbackPort?: number;
+    /** Human-readable OAuth client name */
+    clientName?: string;
+    /** Optional scopes requested during OAuth */
+    scopes?: string[];
+    /** Optional pre-registered OAuth client ID */
+    clientId?: string;
+    /** Optional pre-registered OAuth client secret */
+    clientSecret?: string;
+}
+/**
+ * A single MCP server configuration entry.
+ * Detected by the presence of `command` (stdio) or `url` (http).
+ */
+export type McpServerConfig = McpStdioServerConfig | McpHttpServerConfig;
+/**
+ * An MCP server entry that was skipped during config loading.
+ */
+export interface McpSkippedServer {
+    /** Server name (from config key) */
+    name: string;
+    /** Human-readable reason the server was skipped */
+    reason: string;
+}
+/**
+ * The top-level config object from mcp.json or settings.local.json.
+ * Maps server names to their config.
+ */
+export interface McpConfig {
+    mcpServers?: Record<string, McpServerConfig>;
+    skippedServers?: McpSkippedServer[];
+}
+/**
+ * Runtime status of a connected MCP server.
+ */
+export interface McpServerStatus {
+    /** Server name (from config key) */
+    name: string;
+    /** Whether the server is currently connected */
+    connected: boolean;
+    /** Whether the server is currently connecting */
+    connecting?: boolean;
+    /** Number of tools provided by this server */
+    toolCount: number;
+    /** List of tool names provided */
+    toolNames: string[];
+    /** Transport type used by the server */
+    transport: 'stdio' | 'http';
+    /** Error message if connection failed */
+    error?: string;
+    /** Whether the server rejected the connection pending OAuth authorization */
+    needsAuth?: boolean;
+    /**
+     * Whether an OAuth authorization flow is currently in flight for this server.
+     * Owned by the manager so the state survives a selector being closed/reopened;
+     * the UI uses it to keep offering "Cancel authentication" while auth is pending.
+     */
+    authenticating?: boolean;
+    /**
+     * Whether this failed status is the result of the caller deliberately
+     * cancelling an in-flight authentication (rather than a genuine failure).
+     * The UI uses it to suppress a misleading "Failed to authenticate" message.
+     */
+    cancelled?: boolean;
+    /**
+     * Whether the user disabled this server. Disabled servers stay visible in
+     * status listings (so they can be re-enabled) but are never connected and
+     * contribute no tools.
+     */
+    disabled?: boolean;
+    /**
+     * Where the disable state comes from when `disabled` is true. `global`
+     * means the server (or all of MCP) is disabled across every project and
+     * must be re-enabled globally; `project` means only this project disabled
+     * it. Global takes precedence when both apply.
+     */
+    disabledScope?: 'project' | 'global';
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/mcp/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/mcp/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,gCAAgC;IAChC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,kEAAkE;IAClE,KAAK,CAAC,EAAE,kBAAkB,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,6FAA6F;IAC7F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,oBAAoB,GAAG,mBAAmB,CAAC;AAEzE;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;IACnB,iDAAiD;IACjD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,wCAAwC;IACxC,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;CACtC"}

package/dist/mcp/types.js

@@ -0,0 +1 @@
+export {};

package/dist/onboarding/custom-packs.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Pure `GlobalSettings` mutation helpers for custom model packs. Shared by the
+ * TUI `/models` command and the web settings routes — no UI dependencies.
+ */
+import type { GlobalSettings } from './settings.js';
+export declare function removeCustomPackFromSettings(settings: GlobalSettings, packId: string): void;
+//# sourceMappingURL=custom-packs.d.ts.map

package/dist/onboarding/custom-packs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-packs.d.ts","sourceRoot":"","sources":["../../src/onboarding/custom-packs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAsB3F"}

package/dist/onboarding/custom-packs.js

@@ -0,0 +1,17 @@
+//#region src/onboarding/custom-packs.ts
+function removeCustomPackFromSettings(settings, packId) {
+	if (!packId.startsWith("custom:")) return;
+	const packName = packId.slice(7);
+	const removedPack = settings.customModelPacks.find((p) => p.name === packName);
+	settings.customModelPacks = settings.customModelPacks.filter((p) => p.name !== packName);
+	const modeDefaultsMatchRemovedPack = !!removedPack && settings.models.modeDefaults.plan === removedPack.models.plan && settings.models.modeDefaults.build === removedPack.models.build && settings.models.modeDefaults.fast === removedPack.models.fast;
+	if (settings.models.activeModelPackId === packId) {
+		settings.models.activeModelPackId = null;
+		settings.models.modeDefaults = {};
+	} else if (modeDefaultsMatchRemovedPack) settings.models.modeDefaults = {};
+	if (settings.onboarding.modePackId === packId) settings.onboarding.modePackId = null;
+}
+//#endregion
+export { removeCustomPackFromSettings };
+
+//# sourceMappingURL=custom-packs.js.map

package/dist/onboarding/custom-packs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-packs.js","names":[],"sources":["../../src/onboarding/custom-packs.ts"],"sourcesContent":["/**\n * Pure `GlobalSettings` mutation helpers for custom model packs. Shared by the\n * TUI `/models` command and the web settings routes — no UI dependencies.\n */\nimport type { GlobalSettings } from './settings.js';\n\nexport function removeCustomPackFromSettings(settings: GlobalSettings, packId: string): void {\n  if (!packId.startsWith('custom:')) return;\n  const packName = packId.slice('custom:'.length);\n  const removedPack = settings.customModelPacks.find(p => p.name === packName);\n  settings.customModelPacks = settings.customModelPacks.filter(p => p.name !== packName);\n\n  const modeDefaultsMatchRemovedPack =\n    !!removedPack &&\n    settings.models.modeDefaults.plan === removedPack.models.plan &&\n    settings.models.modeDefaults.build === removedPack.models.build &&\n    settings.models.modeDefaults.fast === removedPack.models.fast;\n\n  if (settings.models.activeModelPackId === packId) {\n    settings.models.activeModelPackId = null;\n    settings.models.modeDefaults = {};\n  } else if (modeDefaultsMatchRemovedPack) {\n    settings.models.modeDefaults = {};\n  }\n\n  if (settings.onboarding.modePackId === packId) {\n    settings.onboarding.modePackId = null;\n  }\n}\n"],"mappings":";AAMA,SAAgB,6BAA6B,UAA0B,QAAsB;CAC3F,IAAI,CAAC,OAAO,WAAW,SAAS,GAAG;CACnC,MAAM,WAAW,OAAO,MAAM,CAAgB;CAC9C,MAAM,cAAc,SAAS,iBAAiB,MAAK,MAAK,EAAE,SAAS,QAAQ;CAC3E,SAAS,mBAAmB,SAAS,iBAAiB,QAAO,MAAK,EAAE,SAAS,QAAQ;CAErF,MAAM,+BACJ,CAAC,CAAC,eACF,SAAS,OAAO,aAAa,SAAS,YAAY,OAAO,QACzD,SAAS,OAAO,aAAa,UAAU,YAAY,OAAO,SAC1D,SAAS,OAAO,aAAa,SAAS,YAAY,OAAO;CAE3D,IAAI,SAAS,OAAO,sBAAsB,QAAQ;EAChD,SAAS,OAAO,oBAAoB;EACpC,SAAS,OAAO,eAAe,CAAC;CAClC,OAAO,IAAI,8BACT,SAAS,OAAO,eAAe,CAAC;CAGlC,IAAI,SAAS,WAAW,eAAe,QACrC,SAAS,WAAW,aAAa;AAErC"}

package/dist/onboarding/custom-providers.d.ts

@@ -0,0 +1,4 @@
+import type { CustomProviderSetting, GlobalSettings } from './settings.js';
+export declare function upsertCustomProviderInSettings(settings: GlobalSettings, provider: CustomProviderSetting, previousProviderId?: string): void;
+export declare function removeCustomProviderFromSettings(settings: GlobalSettings, providerId: string): void;
+//# sourceMappingURL=custom-providers.d.ts.map

package/dist/onboarding/custom-providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-providers.d.ts","sourceRoot":"","sources":["../../src/onboarding/custom-providers.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAW3E,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,qBAAqB,EAC/B,kBAAkB,CAAC,EAAE,MAAM,GAC1B,IAAI,CAQN;AAED,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAInG"}

package/dist/onboarding/custom-providers.js

@@ -0,0 +1,30 @@
+import { getCustomProviderId } from "./settings.js";
+//#region src/onboarding/custom-providers.ts
+/**
+* Pure `GlobalSettings` mutation helpers for custom OpenAI-compatible
+* providers. Shared by the TUI `/custom-providers` command and the web
+* settings routes — no UI dependencies.
+*/
+function normalizeProvider(input) {
+	return {
+		name: input.name.trim(),
+		url: input.url.trim(),
+		apiKey: input.apiKey?.trim() || void 0,
+		models: [...new Set(input.models.map((model) => model.trim()).filter(Boolean))]
+	};
+}
+function upsertCustomProviderInSettings(settings, provider, previousProviderId) {
+	const next = normalizeProvider(provider);
+	const nextProviderId = getCustomProviderId(next.name);
+	settings.customProviders = [...settings.customProviders.filter((existing) => {
+		const id = getCustomProviderId(existing.name);
+		return id !== nextProviderId && (!previousProviderId || id !== previousProviderId);
+	}), next];
+}
+function removeCustomProviderFromSettings(settings, providerId) {
+	settings.customProviders = settings.customProviders.filter((provider) => getCustomProviderId(provider.name) !== providerId);
+}
+//#endregion
+export { removeCustomProviderFromSettings, upsertCustomProviderInSettings };
+
+//# sourceMappingURL=custom-providers.js.map

package/dist/onboarding/custom-providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-providers.js","names":[],"sources":["../../src/onboarding/custom-providers.ts"],"sourcesContent":["/**\n * Pure `GlobalSettings` mutation helpers for custom OpenAI-compatible\n * providers. Shared by the TUI `/custom-providers` command and the web\n * settings routes — no UI dependencies.\n */\nimport { getCustomProviderId } from './settings.js';\nimport type { CustomProviderSetting, GlobalSettings } from './settings.js';\n\nfunction normalizeProvider(input: CustomProviderSetting): CustomProviderSetting {\n  return {\n    name: input.name.trim(),\n    url: input.url.trim(),\n    apiKey: input.apiKey?.trim() || undefined,\n    models: [...new Set(input.models.map(model => model.trim()).filter(Boolean))],\n  };\n}\n\nexport function upsertCustomProviderInSettings(\n  settings: GlobalSettings,\n  provider: CustomProviderSetting,\n  previousProviderId?: string,\n): void {\n  const next = normalizeProvider(provider);\n  const nextProviderId = getCustomProviderId(next.name);\n  const filteredProviders = settings.customProviders.filter(existing => {\n    const id = getCustomProviderId(existing.name);\n    return id !== nextProviderId && (!previousProviderId || id !== previousProviderId);\n  });\n  settings.customProviders = [...filteredProviders, next];\n}\n\nexport function removeCustomProviderFromSettings(settings: GlobalSettings, providerId: string): void {\n  settings.customProviders = settings.customProviders.filter(\n    provider => getCustomProviderId(provider.name) !== providerId,\n  );\n}\n"],"mappings":";;;;;;;AAQA,SAAS,kBAAkB,OAAqD;CAC9E,OAAO;EACL,MAAM,MAAM,KAAK,KAAK;EACtB,KAAK,MAAM,IAAI,KAAK;EACpB,QAAQ,MAAM,QAAQ,KAAK,KAAK,KAAA;EAChC,QAAQ,CAAC,GAAG,IAAI,IAAI,MAAM,OAAO,KAAI,UAAS,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC;CAC9E;AACF;AAEA,SAAgB,+BACd,UACA,UACA,oBACM;CACN,MAAM,OAAO,kBAAkB,QAAQ;CACvC,MAAM,iBAAiB,oBAAoB,KAAK,IAAI;CAKpD,SAAS,kBAAkB,CAAC,GAJF,SAAS,gBAAgB,QAAO,aAAY;EACpE,MAAM,KAAK,oBAAoB,SAAS,IAAI;EAC5C,OAAO,OAAO,mBAAmB,CAAC,sBAAsB,OAAO;CACjE,CAC+C,GAAG,IAAI;AACxD;AAEA,SAAgB,iCAAiC,UAA0B,YAA0B;CACnG,SAAS,kBAAkB,SAAS,gBAAgB,QAClD,aAAY,oBAAoB,SAAS,IAAI,MAAM,UACrD;AACF"}

package/dist/onboarding/index.d.ts

@@ -0,0 +1,5 @@
+export { getAvailableModePacks, getAvailableOmPacks, selectPreferredOMPack, ONBOARDING_VERSION } from './packs.js';
+export type { ModePack, OMPack, ProviderAccess, ProviderAccessLevel } from './packs.js';
+export { loadSettings, saveSettings, getSettingsPath, resolveModelDefaults, resolveOmModel, resolveOmRoleModel, } from './settings.js';
+export type { GlobalSettings, CustomPack } from './settings.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/onboarding/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/onboarding/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACnH,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,kBAAkB,GACnB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC"}

package/dist/onboarding/index.js

@@ -0,0 +1,3 @@
+import { getSettingsPath, loadSettings, resolveModelDefaults, resolveOmModel, resolveOmRoleModel, saveSettings } from "./settings.js";
+import { ONBOARDING_VERSION, getAvailableModePacks, getAvailableOmPacks, selectPreferredOMPack } from "./packs.js";
+export { ONBOARDING_VERSION, getAvailableModePacks, getAvailableOmPacks, getSettingsPath, loadSettings, resolveModelDefaults, resolveOmModel, resolveOmRoleModel, saveSettings, selectPreferredOMPack };

package/dist/onboarding/om-settings.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Pure `GlobalSettings` mutation helpers for observational-memory (OM)
+ * configuration. Shared by the TUI `/om` command and the web settings
+ * routes — no UI dependencies.
+ */
+import type { OMPack } from './packs.js';
+import type { GlobalSettings } from './settings.js';
+/** Whether the user has already chosen any persisted OM model or pack. */
+export declare function hasExplicitOMConfiguration(settings: GlobalSettings): boolean;
+/** Seed a built-in OM pack unless the user already chose one; true when settings changed. */
+export declare function applyOMDefaultIfUnconfigured(settings: GlobalSettings, pack: OMPack): boolean;
+/**
+ * Apply a role-specific OM model override to an in-memory `GlobalSettings`.
+ *
+ * When switching `activeOmPackId` from a built-in pack to `'custom'` we also
+ * snapshot the *other* role's currently-resolved model into its override
+ * field. Without this, the other role would silently lose its model on next
+ * startup because `resolveOmRoleModel` would no longer resolve it from the
+ * (now-overridden) pack.
+ *
+ * Exported for unit testing; `persistOmRoleOverride` is the disk-backed wrapper.
+ */
+export declare function applyOmRoleOverride(settings: GlobalSettings, role: 'observer' | 'reflector', modelId: string, otherRoleCurrentModelId: string | null): void;
+export declare function persistOmObserveAttachments(value: 'auto' | boolean): void;
+//# sourceMappingURL=om-settings.d.ts.map

package/dist/onboarding/om-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"om-settings.d.ts","sourceRoot":"","sources":["../../src/onboarding/om-settings.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,0EAA0E;AAC1E,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAO5E;AAED,6FAA6F;AAC7F,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAO5F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,UAAU,GAAG,WAAW,EAC9B,OAAO,EAAE,MAAM,EACf,uBAAuB,EAAE,MAAM,GAAG,IAAI,GACrC,IAAI,CAgBN;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAIzE"}

package/dist/onboarding/om-settings.js

@@ -0,0 +1,47 @@
+import { loadSettings, saveSettings } from "./settings.js";
+//#region src/onboarding/om-settings.ts
+/** Whether the user has already chosen any persisted OM model or pack. */
+function hasExplicitOMConfiguration(settings) {
+	const { activeOmPackId, omModelOverride, observerModelOverride, reflectorModelOverride } = settings.models;
+	if (omModelOverride || observerModelOverride || reflectorModelOverride) return true;
+	return [settings.onboarding.omPackId, activeOmPackId].some((packId) => packId && packId !== "custom");
+}
+/** Seed a built-in OM pack unless the user already chose one; true when settings changed. */
+function applyOMDefaultIfUnconfigured(settings, pack) {
+	if (hasExplicitOMConfiguration(settings)) return false;
+	settings.onboarding.omPackId = pack.id;
+	settings.models.activeOmPackId = pack.id;
+	settings.models.omModelOverride = null;
+	return true;
+}
+/**
+* Apply a role-specific OM model override to an in-memory `GlobalSettings`.
+*
+* When switching `activeOmPackId` from a built-in pack to `'custom'` we also
+* snapshot the *other* role's currently-resolved model into its override
+* field. Without this, the other role would silently lose its model on next
+* startup because `resolveOmRoleModel` would no longer resolve it from the
+* (now-overridden) pack.
+*
+* Exported for unit testing; `persistOmRoleOverride` is the disk-backed wrapper.
+*/
+function applyOmRoleOverride(settings, role, modelId, otherRoleCurrentModelId) {
+	const wasBuiltinPack = settings.models.activeOmPackId !== null && settings.models.activeOmPackId !== "custom";
+	if (role === "observer") {
+		if (wasBuiltinPack && otherRoleCurrentModelId && !settings.models.reflectorModelOverride) settings.models.reflectorModelOverride = otherRoleCurrentModelId;
+		settings.models.observerModelOverride = modelId;
+	} else {
+		if (wasBuiltinPack && otherRoleCurrentModelId && !settings.models.observerModelOverride) settings.models.observerModelOverride = otherRoleCurrentModelId;
+		settings.models.reflectorModelOverride = modelId;
+	}
+	settings.models.activeOmPackId = "custom";
+}
+function persistOmObserveAttachments(value) {
+	const settings = loadSettings();
+	settings.models.omObserveAttachments = value;
+	saveSettings(settings);
+}
+//#endregion
+export { applyOMDefaultIfUnconfigured, applyOmRoleOverride, hasExplicitOMConfiguration, persistOmObserveAttachments };
+
+//# sourceMappingURL=om-settings.js.map

package/dist/onboarding/om-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"om-settings.js","names":[],"sources":["../../src/onboarding/om-settings.ts"],"sourcesContent":["/**\n * Pure `GlobalSettings` mutation helpers for observational-memory (OM)\n * configuration. Shared by the TUI `/om` command and the web settings\n * routes — no UI dependencies.\n */\nimport type { OMPack } from './packs.js';\nimport type { GlobalSettings } from './settings.js';\nimport { loadSettings, saveSettings } from './settings.js';\n\n/** Whether the user has already chosen any persisted OM model or pack. */\nexport function hasExplicitOMConfiguration(settings: GlobalSettings): boolean {\n  const { activeOmPackId, omModelOverride, observerModelOverride, reflectorModelOverride } = settings.models;\n  if (omModelOverride || observerModelOverride || reflectorModelOverride) return true;\n\n  // 'custom' without a model is what onboarding persists when no provider was\n  // reachable — a forced non-choice, not a preference worth preserving.\n  return [settings.onboarding.omPackId, activeOmPackId].some(packId => packId && packId !== 'custom');\n}\n\n/** Seed a built-in OM pack unless the user already chose one; true when settings changed. */\nexport function applyOMDefaultIfUnconfigured(settings: GlobalSettings, pack: OMPack): boolean {\n  if (hasExplicitOMConfiguration(settings)) return false;\n\n  settings.onboarding.omPackId = pack.id;\n  settings.models.activeOmPackId = pack.id;\n  settings.models.omModelOverride = null;\n  return true;\n}\n\n/**\n * Apply a role-specific OM model override to an in-memory `GlobalSettings`.\n *\n * When switching `activeOmPackId` from a built-in pack to `'custom'` we also\n * snapshot the *other* role's currently-resolved model into its override\n * field. Without this, the other role would silently lose its model on next\n * startup because `resolveOmRoleModel` would no longer resolve it from the\n * (now-overridden) pack.\n *\n * Exported for unit testing; `persistOmRoleOverride` is the disk-backed wrapper.\n */\nexport function applyOmRoleOverride(\n  settings: GlobalSettings,\n  role: 'observer' | 'reflector',\n  modelId: string,\n  otherRoleCurrentModelId: string | null,\n): void {\n  const wasBuiltinPack = settings.models.activeOmPackId !== null && settings.models.activeOmPackId !== 'custom';\n\n  if (role === 'observer') {\n    if (wasBuiltinPack && otherRoleCurrentModelId && !settings.models.reflectorModelOverride) {\n      settings.models.reflectorModelOverride = otherRoleCurrentModelId;\n    }\n    settings.models.observerModelOverride = modelId;\n  } else {\n    if (wasBuiltinPack && otherRoleCurrentModelId && !settings.models.observerModelOverride) {\n      settings.models.observerModelOverride = otherRoleCurrentModelId;\n    }\n    settings.models.reflectorModelOverride = modelId;\n  }\n\n  settings.models.activeOmPackId = 'custom';\n}\n\nexport function persistOmObserveAttachments(value: 'auto' | boolean): void {\n  const settings = loadSettings();\n  settings.models.omObserveAttachments = value;\n  saveSettings(settings);\n}\n"],"mappings":";;;AAUA,SAAgB,2BAA2B,UAAmC;CAC5E,MAAM,EAAE,gBAAgB,iBAAiB,uBAAuB,2BAA2B,SAAS;CACpG,IAAI,mBAAmB,yBAAyB,wBAAwB,OAAO;CAI/E,OAAO,CAAC,SAAS,WAAW,UAAU,cAAc,CAAC,CAAC,MAAK,WAAU,UAAU,WAAW,QAAQ;AACpG;;AAGA,SAAgB,6BAA6B,UAA0B,MAAuB;CAC5F,IAAI,2BAA2B,QAAQ,GAAG,OAAO;CAEjD,SAAS,WAAW,WAAW,KAAK;CACpC,SAAS,OAAO,iBAAiB,KAAK;CACtC,SAAS,OAAO,kBAAkB;CAClC,OAAO;AACT;;;;;;;;;;;;AAaA,SAAgB,oBACd,UACA,MACA,SACA,yBACM;CACN,MAAM,iBAAiB,SAAS,OAAO,mBAAmB,QAAQ,SAAS,OAAO,mBAAmB;CAErG,IAAI,SAAS,YAAY;EACvB,IAAI,kBAAkB,2BAA2B,CAAC,SAAS,OAAO,wBAChE,SAAS,OAAO,yBAAyB;EAE3C,SAAS,OAAO,wBAAwB;CAC1C,OAAO;EACL,IAAI,kBAAkB,2BAA2B,CAAC,SAAS,OAAO,uBAChE,SAAS,OAAO,wBAAwB;EAE1C,SAAS,OAAO,yBAAyB;CAC3C;CAEA,SAAS,OAAO,iBAAiB;AACnC;AAEA,SAAgB,4BAA4B,OAA+B;CACzE,MAAM,WAAW,aAAa;CAC9B,SAAS,OAAO,uBAAuB;CACvC,aAAa,QAAQ;AACvB"}

package/dist/onboarding/packs.d.ts

@@ -0,0 +1,46 @@
+export interface ModePack {
+    id: string;
+    name: string;
+    description: string;
+    models: {
+        build: string;
+        plan: string;
+        fast: string;
+    };
+}
+export interface OMPack {
+    id: string;
+    name: string;
+    description: string;
+    modelId: string;
+}
+/** How a provider is accessed: OAuth subscription, API key, or not at all. */
+export type ProviderAccessLevel = 'oauth' | 'apikey' | false;
+/** Which providers the user has access to and how. */
+export interface ProviderAccess {
+    anthropic: ProviderAccessLevel;
+    openai: ProviderAccessLevel;
+    cerebras: ProviderAccessLevel;
+    google: ProviderAccessLevel;
+    deepseek: ProviderAccessLevel;
+    'github-copilot': ProviderAccessLevel;
+    [provider: string]: ProviderAccessLevel;
+}
+/**
+ * Build the list of available mode packs based on which providers the user
+ * can actually reach (API key or OAuth login).
+ *
+ * @param savedCustomPacks  Previously saved custom packs from settings.json.
+ *                          These are inserted before the "New Custom" option.
+ */
+export declare function getAvailableModePacks(access: ProviderAccess, savedCustomPacks?: Array<{
+    name: string;
+    models: Record<string, string>;
+}>): ModePack[];
+/** A provider's low-cost OM pack, or a custom pack on `fallbackModelId` when it has none. */
+export declare function resolveProviderOMDefault(providerId: string, fallbackModelId?: string): OMPack;
+export declare function getAvailableOmPacks(access: ProviderAccess): OMPack[];
+/** Best reachable built-in OM pack: preferred provider, then OAuth, then built-in order. */
+export declare function selectPreferredOMPack(access: ProviderAccess, preferredProviderId?: string): OMPack | undefined;
+export declare const ONBOARDING_VERSION = 1;
+//# sourceMappingURL=packs.d.ts.map

package/dist/onboarding/packs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"packs.d.ts","sourceRoot":"","sources":["../../src/onboarding/packs.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;CACH;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAUD,8EAA8E;AAC9E,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE7D,sDAAsD;AACtD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,MAAM,EAAE,mBAAmB,CAAC;IAC5B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,gBAAgB,EAAE,mBAAmB,CAAC;IACtC,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,CAAC;CACzC;AAMD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,cAAc,EACtB,gBAAgB,GAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAM,GAC7E,QAAQ,EAAE,CAwEZ;AAyCD,6FAA6F;AAC7F,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,SAAsB,GAAG,MAAM,CAkB1G;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,EAAE,CAuBpE;AAED,4FAA4F;AAC5F,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,EAAE,mBAAmB,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAc9G;AAMD,eAAO,MAAM,kBAAkB,IAAI,CAAC"}