@memnexus-ai/cli 1.7.228 → 1.7.229

package/dist/lib/setup/detector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../../../src/lib/setup/detector.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,KAAK,EAAmB,aAAa,EAAY,MAAM,YAAY,CAAC;AAG3E,wCAAwC;AACxC,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAS7C;AAuGD;;;GAGG;AACH,wBAAsB,YAAY,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAqEhF"}
+{"version":3,"file":"detector.d.ts","sourceRoot":"","sources":["../../../src/lib/setup/detector.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,KAAK,EAAmB,aAAa,EAAY,MAAM,YAAY,CAAC;AAI3E,wCAAwC;AACxC,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAS7C;AA8GD;;;GAGG;AACH,wBAAsB,YAAY,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAqEhF"}

package/dist/lib/setup/detector.js

@@ -15,6 +15,7 @@ const node_child_process_1 = require("node:child_process");
 const node_path_1 = __importDefault(require("node:path"));
 const node_os_1 = __importDefault(require("node:os"));
 const registry_js_1 = require("./registry.js");
+const verify_ours_js_1 = require("./verify-ours.js");
 /** Resolve ~ and %APPDATA% in paths. */
 function resolvePath(p) {
     if (p.startsWith('~')) {
@@ -93,18 +94,25 @@ async function checkExistingConfig(configPath, agent) {
     try {
         const content = await (0, promises_1.readFile)(configPath, 'utf-8');
         if (agent.mcp.configFormat === 'toml') {
-            // Simple check for TOML — look for [mcp_servers.memnexus]
+            // Real section parse (not substring): read the [mcp_servers.memnexus] block's
+            // command/args and verify it runs our bridge. A commented-out header or a
+            // foreign command is NOT configured (#5177).
+            const block = (0, verify_ours_js_1.parseMemnexusTomlBlock)(content);
             return {
                 exists: true,
-                hasMemnexus: content.includes('[mcp_servers.memnexus]'),
+                hasMemnexus: (0, verify_ours_js_1.isOursTomlBlock)(block),
             };
         }
-        // JSON — parse and check for memnexus key
+        // JSON — the entry counts as configured only when it is structurally ours
+        // (command basename `mx`, a node runner delegating to @memnexus-ai/, or a URL at
+        // our MCP server). Key presence alone let a cloned repo suppress a real install
+        // by shipping a foreign `memnexus` entry (#5177).
         const parsed = JSON.parse(content);
         const servers = parsed[agent.mcp.serversKey] || {};
+        const entry = servers.memnexus;
         return {
             exists: true,
-            hasMemnexus: 'memnexus' in servers,
+            hasMemnexus: 'memnexus' in servers && (0, verify_ours_js_1.isOursJsonEntry)(entry),
         };
     }
     catch {

package/dist/lib/setup/detector.js.map

@@ -1 +1 @@
-{"version":3,"file":"detector.js","sourceRoot":"","sources":["../../../src/lib/setup/detector.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;AAWH,kCASC;AA2GD,oCAqEC;AAlMD,qCAAqC;AACrC,+CAA4C;AAC5C,2DAAkD;AAClD,0DAA6B;AAC7B,sDAAyB;AAEzB,+CAAgD;AAEhD,wCAAwC;AACxC,SAAgB,WAAW,CAAC,CAAS;IACnC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8CAA8C;AAC9C,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,iBAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1D,IAAA,iCAAY,EAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE;YACxB,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,UAAkB,EAClB,MAAyB;IAEzB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAE3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC5C,IAAI,IAAA,oBAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;gBAC/B,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,MAAyB;IACnD,MAAM,QAAQ,GAAG,iBAAE,CAAC,QAAQ,EAAc,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,iBAAiB;QACjB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAC9B,MAAM;YACR,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;gBACxC,IAAI,IAAA,oBAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;oBACzB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAChC,UAAkB,EAClB,KAAsB;IAEtB,IAAI,CAAC,IAAA,oBAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAQ,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAEpD,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YACtC,0DAA0D;YAC1D,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC;aACxD,CAAC;QACJ,CAAC;QAED,0CAA0C;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,UAAU,IAAI,OAAO;SACnC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,YAAY,CAAC,UAAmB;IACpD,MAAM,MAAM,GAAG,IAAA,6BAAe,GAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,iBAAE,CAAC,QAAQ,EAAc,CAAC;IAE3C,MAAM,YAAY,GAAG,UAAU;QAC7B,CAAC,CAAC,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC;QACzC,CAAC,CAAC,IAAI,GAAG,EAAqB,CAAC;IACjC,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE3C,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;YAAE,SAAS;QAEtC,MAAM,UAAU,GAAG,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAErF,8EAA8E;QAC9E,4EAA4E;QAC5E,4EAA4E;QAC5E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,+DAA+D;QAC/D,IAAI,kBAAsC,CAAC;QAC3C,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAE9B,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,cAAc,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,MAAM,WAAW,GAAG,cAAc;YAChC,CAAC,CAAC,MAAM,mBAAmB,CAAC,cAAc,EAAE,KAAK,CAAC;YAClD,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAE1C,MAAM,eAAe,GACnB,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,iBAAiB;YACvC,CAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC;YACpD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,YAAY,GAAG,eAAe;YAClC,CAAC,CAAC,MAAM,mBAAmB,CAAC,eAAe,EAAE,KAAK,CAAC;YACnD,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAE1C,iBAAiB,GAAG,WAAW,CAAC,WAAW,IAAI,YAAY,CAAC,WAAW,CAAC;QAExE,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,iCAAiC;QACjC,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;YAC7B,kBAAkB,GAAG,eAAe,CAAC;QACvC,CAAC;aAAM,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;YACnC,kBAAkB,GAAG,cAAc,CAAC;QACtC,CAAC;aAAM,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;YAC/B,kBAAkB,GAAG,eAAe,CAAC;QACvC,CAAC;aAAM,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YAC9B,kBAAkB,GAAG,cAAc,CAAC;QACtC,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,KAAK;YACL,UAAU;YACV,kBAAkB;YAClB,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"detector.js","sourceRoot":"","sources":["../../../src/lib/setup/detector.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;AAYH,kCASC;AAkHD,oCAqEC;AA1MD,qCAAqC;AACrC,+CAA4C;AAC5C,2DAAkD;AAClD,0DAA6B;AAC7B,sDAAyB;AAEzB,+CAAgD;AAChD,qDAA4F;AAE5F,wCAAwC;AACxC,SAAgB,WAAW,CAAC,CAAS;IACnC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACrF,OAAO,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8CAA8C;AAC9C,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,iBAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1D,IAAA,iCAAY,EAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE;YACxB,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,UAAkB,EAClB,MAAyB;IAEzB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAE3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YAC5C,IAAI,IAAA,oBAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;gBAC/B,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,MAAyB;IACnD,MAAM,QAAQ,GAAG,iBAAE,CAAC,QAAQ,EAAc,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAE1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,iBAAiB;QACjB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YAC3C,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAC9B,MAAM;YACR,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;gBACxC,IAAI,IAAA,oBAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;oBACzB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAChC,UAAkB,EAClB,KAAsB;IAEtB,IAAI,CAAC,IAAA,oBAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAQ,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAEpD,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YACtC,8EAA8E;YAC9E,0EAA0E;YAC1E,6CAA6C;YAC7C,MAAM,KAAK,GAAG,IAAA,uCAAsB,EAAC,OAAO,CAAC,CAAC;YAC9C,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,IAAA,gCAAe,EAAC,KAAK,CAAC;aACpC,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,iFAAiF;QACjF,gFAAgF;QAChF,kDAAkD;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,KAAK,GAAI,OAAmC,CAAC,QAAQ,CAAC;QAC5D,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,UAAU,IAAI,OAAO,IAAI,IAAA,gCAAe,EAAC,KAAK,CAAC;SAC7D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,YAAY,CAAC,UAAmB;IACpD,MAAM,MAAM,GAAG,IAAA,6BAAe,GAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,iBAAE,CAAC,QAAQ,EAAc,CAAC;IAE3C,MAAM,YAAY,GAAG,UAAU;QAC7B,CAAC,CAAC,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC;QACzC,CAAC,CAAC,IAAI,GAAG,EAAqB,CAAC;IACjC,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAE3C,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;YAAE,SAAS;QAEtC,MAAM,UAAU,GAAG,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAErF,8EAA8E;QAC9E,4EAA4E;QAC5E,4EAA4E;QAC5E,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,+DAA+D;QAC/D,IAAI,kBAAsC,CAAC;QAC3C,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAE9B,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,cAAc,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,MAAM,WAAW,GAAG,cAAc;YAChC,CAAC,CAAC,MAAM,mBAAmB,CAAC,cAAc,EAAE,KAAK,CAAC;YAClD,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAE1C,MAAM,eAAe,GACnB,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,iBAAiB;YACvC,CAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC;YACpD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,YAAY,GAAG,eAAe;YAClC,CAAC,CAAC,MAAM,mBAAmB,CAAC,eAAe,EAAE,KAAK,CAAC;YACnD,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAE1C,iBAAiB,GAAG,WAAW,CAAC,WAAW,IAAI,YAAY,CAAC,WAAW,CAAC;QAExE,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,iCAAiC;QACjC,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;YAC7B,kBAAkB,GAAG,eAAe,CAAC;QACvC,CAAC;aAAM,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC;YACnC,kBAAkB,GAAG,cAAc,CAAC;QACtC,CAAC;aAAM,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;YAC/B,kBAAkB,GAAG,eAAe,CAAC;QACvC,CAAC;aAAM,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YAC9B,kBAAkB,GAAG,cAAc,CAAC;QACtC,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,KAAK;YACL,UAAU;YACV,kBAAkB;YAClB,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/lib/setup/index.d.ts

@@ -9,5 +9,7 @@ export { writeAllSkills, removeAllSkills, listSkills, resolveSkillsDir, resolveS
 export { SKILLS, parseSkillVersion } from './skills-templates.js';
 export { installHooks, removeHooks } from './hooks-writer.js';
 export type { HooksWriteResult } from './hooks-writer.js';
+export { isOursJsonEntry, isOursTomlBlock, parseMemnexusTomlBlock, oursMcpHosts, exeBase, } from './verify-ours.js';
+export type { TomlMemnexusBlock } from './verify-ours.js';
 export type * from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/lib/setup/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/setup/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5F,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EACL,cAAc,EACd,eAAe,EACf,UAAU,EACV,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC9D,YAAY,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,mBAAmB,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/setup/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5F,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EACL,cAAc,EACd,eAAe,EACf,UAAU,EACV,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC9D,YAAY,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EACL,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,YAAY,EACZ,OAAO,GACR,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,mBAAmB,YAAY,CAAC"}

package/dist/lib/setup/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.removeHooks = exports.installHooks = exports.parseSkillVersion = exports.SKILLS = exports.resolveSkillPath = exports.resolveSkillsDir = exports.listSkills = exports.removeAllSkills = exports.writeAllSkills = exports.wasDowngradedToGlobal = exports.resolveEffectiveScope = exports.AGENTS = exports.getSortedAgents = exports.getAgentIds = exports.getAgent = exports.parseSteeringVersion = exports.composeRules = exports.resolveSteeringPath = exports.getSteeringVersion = exports.removeSteeringSection = exports.writeSteeringFile = exports.displayPath = exports.verifyAll = exports.verifyAgent = exports.resolveConfigPath = exports.removeAgentConfig = exports.writeAgentConfig = exports.resolvePath = exports.detectAgents = void 0;
+exports.exeBase = exports.oursMcpHosts = exports.parseMemnexusTomlBlock = exports.isOursTomlBlock = exports.isOursJsonEntry = exports.removeHooks = exports.installHooks = exports.parseSkillVersion = exports.SKILLS = exports.resolveSkillPath = exports.resolveSkillsDir = exports.listSkills = exports.removeAllSkills = exports.writeAllSkills = exports.wasDowngradedToGlobal = exports.resolveEffectiveScope = exports.AGENTS = exports.getSortedAgents = exports.getAgentIds = exports.getAgent = exports.parseSteeringVersion = exports.composeRules = exports.resolveSteeringPath = exports.getSteeringVersion = exports.removeSteeringSection = exports.writeSteeringFile = exports.displayPath = exports.verifyAll = exports.verifyAgent = exports.resolveConfigPath = exports.removeAgentConfig = exports.writeAgentConfig = exports.resolvePath = exports.detectAgents = void 0;
 var detector_js_1 = require("./detector.js");
 Object.defineProperty(exports, "detectAgents", { enumerable: true, get: function () { return detector_js_1.detectAgents; } });
 Object.defineProperty(exports, "resolvePath", { enumerable: true, get: function () { return detector_js_1.resolvePath; } });
@@ -40,4 +40,10 @@ Object.defineProperty(exports, "parseSkillVersion", { enumerable: true, get: fun
 var hooks_writer_js_1 = require("./hooks-writer.js");
 Object.defineProperty(exports, "installHooks", { enumerable: true, get: function () { return hooks_writer_js_1.installHooks; } });
 Object.defineProperty(exports, "removeHooks", { enumerable: true, get: function () { return hooks_writer_js_1.removeHooks; } });
+var verify_ours_js_1 = require("./verify-ours.js");
+Object.defineProperty(exports, "isOursJsonEntry", { enumerable: true, get: function () { return verify_ours_js_1.isOursJsonEntry; } });
+Object.defineProperty(exports, "isOursTomlBlock", { enumerable: true, get: function () { return verify_ours_js_1.isOursTomlBlock; } });
+Object.defineProperty(exports, "parseMemnexusTomlBlock", { enumerable: true, get: function () { return verify_ours_js_1.parseMemnexusTomlBlock; } });
+Object.defineProperty(exports, "oursMcpHosts", { enumerable: true, get: function () { return verify_ours_js_1.oursMcpHosts; } });
+Object.defineProperty(exports, "exeBase", { enumerable: true, get: function () { return verify_ours_js_1.exeBase; } });
 //# sourceMappingURL=index.js.map

package/dist/lib/setup/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/setup/index.ts"],"names":[],"mappings":";;;AAAA,6CAA0D;AAAjD,2GAAA,YAAY,OAAA;AAAE,0GAAA,WAAW,OAAA;AAClC,uDAA4F;AAAnF,oHAAA,gBAAgB,OAAA;AAAE,qHAAA,iBAAiB,OAAA;AAAE,qHAAA,iBAAiB,OAAA;AAC/D,6CAAoE;AAA3D,0GAAA,WAAW,OAAA;AAAE,wGAAA,SAAS,OAAA;AAAE,0GAAA,WAAW,OAAA;AAC5C,qDAK2B;AAJzB,oHAAA,iBAAiB,OAAA;AACjB,wHAAA,qBAAqB,OAAA;AACrB,qHAAA,kBAAkB,OAAA;AAClB,sHAAA,mBAAmB,OAAA;AAErB,2DAA0E;AAAjE,kHAAA,YAAY,OAAA;AAAE,0HAAA,oBAAoB,OAAA;AAC3C,6CAA+E;AAAtE,uGAAA,QAAQ,OAAA;AAAE,0GAAA,WAAW,OAAA;AAAE,8GAAA,eAAe,OAAA;AAAE,qGAAA,MAAM,OAAA;AACvD,uCAA0E;AAAjE,iHAAA,qBAAqB,OAAA;AAAE,iHAAA,qBAAqB,OAAA;AACrD,uDAM4B;AAL1B,kHAAA,cAAc,OAAA;AACd,mHAAA,eAAe,OAAA;AACf,8GAAA,UAAU,OAAA;AACV,oHAAA,gBAAgB,OAAA;AAChB,oHAAA,gBAAgB,OAAA;AAElB,6DAAkE;AAAzD,6GAAA,MAAM,OAAA;AAAE,wHAAA,iBAAiB,OAAA;AAClC,qDAA8D;AAArD,+GAAA,YAAY,OAAA;AAAE,8GAAA,WAAW,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/setup/index.ts"],"names":[],"mappings":";;;AAAA,6CAA0D;AAAjD,2GAAA,YAAY,OAAA;AAAE,0GAAA,WAAW,OAAA;AAClC,uDAA4F;AAAnF,oHAAA,gBAAgB,OAAA;AAAE,qHAAA,iBAAiB,OAAA;AAAE,qHAAA,iBAAiB,OAAA;AAC/D,6CAAoE;AAA3D,0GAAA,WAAW,OAAA;AAAE,wGAAA,SAAS,OAAA;AAAE,0GAAA,WAAW,OAAA;AAC5C,qDAK2B;AAJzB,oHAAA,iBAAiB,OAAA;AACjB,wHAAA,qBAAqB,OAAA;AACrB,qHAAA,kBAAkB,OAAA;AAClB,sHAAA,mBAAmB,OAAA;AAErB,2DAA0E;AAAjE,kHAAA,YAAY,OAAA;AAAE,0HAAA,oBAAoB,OAAA;AAC3C,6CAA+E;AAAtE,uGAAA,QAAQ,OAAA;AAAE,0GAAA,WAAW,OAAA;AAAE,8GAAA,eAAe,OAAA;AAAE,qGAAA,MAAM,OAAA;AACvD,uCAA0E;AAAjE,iHAAA,qBAAqB,OAAA;AAAE,iHAAA,qBAAqB,OAAA;AACrD,uDAM4B;AAL1B,kHAAA,cAAc,OAAA;AACd,mHAAA,eAAe,OAAA;AACf,8GAAA,UAAU,OAAA;AACV,oHAAA,gBAAgB,OAAA;AAChB,oHAAA,gBAAgB,OAAA;AAElB,6DAAkE;AAAzD,6GAAA,MAAM,OAAA;AAAE,wHAAA,iBAAiB,OAAA;AAClC,qDAA8D;AAArD,+GAAA,YAAY,OAAA;AAAE,8GAAA,WAAW,OAAA;AAElC,mDAM0B;AALxB,iHAAA,eAAe,OAAA;AACf,iHAAA,eAAe,OAAA;AACf,wHAAA,sBAAsB,OAAA;AACtB,8GAAA,YAAY,OAAA;AACZ,yGAAA,OAAO,OAAA"}

package/dist/lib/setup/verify-ours.d.ts

@@ -0,0 +1,71 @@
+/**
+ * verify-ours — structural ownership check for an existing `memnexus` config entry.
+ *
+ * `mx setup` decides an agent is "already configured" when it finds a config entry
+ * named `memnexus`. Key presence alone is not proof the entry is ours: a cloned
+ * repository can ship a `memnexus`-named entry pointing anywhere, which suppresses a
+ * real install (#5177). These predicates answer one question — does the entry
+ * structurally execute our bridge? — binding on the executed TARGET (command binary,
+ * delegated package, or remote host).
+ *
+ * Terminal rule: every EXECUTABLE arm requires the genuine ours-TARGET AND the bridge
+ * invocation; the remote-url arm requires an exact host.
+ *   - (A) `mx` arm: command basename is `mx` AND the bridge invocation `mcp serve` is at
+ *     the START of args (`args[0]==='mcp' && args[1]==='serve'`; a trailing
+ *     `--inject-rules` is allowed). Checking the invocation POSITION, not anywhere in
+ *     args, rejects a decoy: `mx status mcp serve` runs `mx status`.
+ *   - (B) node-runner arm: the EXECUTED package (first non-flag positional token, deno's
+ *     `run` subcommand skipped) IS our scoped package as a token PREFIX (`@memnexus-ai/`,
+ *     or deno's `npm:@memnexus-ai/`), AND `mcp serve` comes IMMEDIATELY AFTER that
+ *     package token. Binding the package to the executed position rejects a decoy
+ *     (`npx evil-pkg @memnexus-ai/cli mcp serve` runs evil-pkg); binding on a prefix (not
+ *     a substring anywhere) rejects a foreign package that merely mentions our scope in a
+ *     flag value; binding the invocation to right-after-the-package rejects
+ *     `npx @memnexus-ai/cli status mcp serve` (runs `@memnexus-ai/cli status`).
+ *   - (C) remote-url arm: a url/serverUrl/remoteUrl host EXACTLY equals our MCP server.
+ * Args are never a positive signal for a foreign command: these refinements only make
+ * each arm stricter, and a foreign command reaches no executable arm.
+ *
+ * Anything not positively recognized as ours returns false (safe error direction:
+ * worst case is a harmless re-write with a `.bak` backup; a false "true" is the
+ * suppression bug).
+ *
+ * SEVERITY CONTEXT: this predicate is a DEFAULT-SELECTION nudge — it sets
+ * `alreadyConfigured`, which only pre-unchecks a re-selectable install checkbox. It is
+ * NOT an execution gate: it cannot grant execution to any entry, it can only fail to
+ * auto-remediate a pre-existing one. The write path is unchanged (FR-5).
+ */
+/** Hosts that count as our MCP server (remote-url agents). */
+export declare function oursMcpHosts(): Set<string>;
+/** basename without a Windows executable extension, lowercased. */
+export declare function exeBase(cmd: string): string;
+/**
+ * PERMISSIVE-STRUCTURAL ownership check for a JSON server entry.
+ *
+ * Recognizes every real ours-shape across all agents and past `mx` versions —
+ * including customized ones (extra `env`, extra args, older versions with no `type`
+ * field, absolute/`.exe` command path, and OpenCode's array-form command). Returns
+ * false for foreign commands and for anything it cannot positively recognize.
+ */
+export declare function isOursJsonEntry(entry: unknown): boolean;
+/** Parsed [mcp_servers.memnexus] fields (command + args), or null if absent/malformed. */
+export interface TomlMemnexusBlock {
+    command?: string;
+    args?: string[];
+}
+/** Same ownership rule applied to a parsed TOML block. */
+export declare function isOursTomlBlock(block: TomlMemnexusBlock | null): boolean;
+/**
+ * Minimal line-based section parse of the `[mcp_servers.memnexus]` block.
+ *
+ * Replaces the previous raw-substring check (which fired on a commented-out header and
+ * could not read `command`). Strips comments first, locates the real section header
+ * (a line whose trimmed value is exactly `[mcp_servers.memnexus]`), then reads
+ * `key = value` lines until the next `[section]` header or EOF, extracting `command`
+ * (quoted string) and `args` (array of quoted strings).
+ *
+ * Returns null when there is no live section header. A full TOML library is not
+ * required; the block grammar is fixed by what `buildTomlBlock` writes.
+ */
+export declare function parseMemnexusTomlBlock(content: string): TomlMemnexusBlock | null;
+//# sourceMappingURL=verify-ours.d.ts.map

package/dist/lib/setup/verify-ours.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-ours.d.ts","sourceRoot":"","sources":["../../../src/lib/setup/verify-ours.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAQH,8DAA8D;AAC9D,wBAAgB,YAAY,IAAI,GAAG,CAAC,MAAM,CAAC,CAY1C;AA+CD,mEAAmE;AACnE,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG3C;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CA0CvD;AAED,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,GAAG,OAAO,CAUxE;AAoED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAsChF"}

package/dist/lib/setup/verify-ours.js

@@ -0,0 +1,302 @@
+"use strict";
+/**
+ * verify-ours — structural ownership check for an existing `memnexus` config entry.
+ *
+ * `mx setup` decides an agent is "already configured" when it finds a config entry
+ * named `memnexus`. Key presence alone is not proof the entry is ours: a cloned
+ * repository can ship a `memnexus`-named entry pointing anywhere, which suppresses a
+ * real install (#5177). These predicates answer one question — does the entry
+ * structurally execute our bridge? — binding on the executed TARGET (command binary,
+ * delegated package, or remote host).
+ *
+ * Terminal rule: every EXECUTABLE arm requires the genuine ours-TARGET AND the bridge
+ * invocation; the remote-url arm requires an exact host.
+ *   - (A) `mx` arm: command basename is `mx` AND the bridge invocation `mcp serve` is at
+ *     the START of args (`args[0]==='mcp' && args[1]==='serve'`; a trailing
+ *     `--inject-rules` is allowed). Checking the invocation POSITION, not anywhere in
+ *     args, rejects a decoy: `mx status mcp serve` runs `mx status`.
+ *   - (B) node-runner arm: the EXECUTED package (first non-flag positional token, deno's
+ *     `run` subcommand skipped) IS our scoped package as a token PREFIX (`@memnexus-ai/`,
+ *     or deno's `npm:@memnexus-ai/`), AND `mcp serve` comes IMMEDIATELY AFTER that
+ *     package token. Binding the package to the executed position rejects a decoy
+ *     (`npx evil-pkg @memnexus-ai/cli mcp serve` runs evil-pkg); binding on a prefix (not
+ *     a substring anywhere) rejects a foreign package that merely mentions our scope in a
+ *     flag value; binding the invocation to right-after-the-package rejects
+ *     `npx @memnexus-ai/cli status mcp serve` (runs `@memnexus-ai/cli status`).
+ *   - (C) remote-url arm: a url/serverUrl/remoteUrl host EXACTLY equals our MCP server.
+ * Args are never a positive signal for a foreign command: these refinements only make
+ * each arm stricter, and a foreign command reaches no executable arm.
+ *
+ * Anything not positively recognized as ours returns false (safe error direction:
+ * worst case is a harmless re-write with a `.bak` backup; a false "true" is the
+ * suppression bug).
+ *
+ * SEVERITY CONTEXT: this predicate is a DEFAULT-SELECTION nudge — it sets
+ * `alreadyConfigured`, which only pre-unchecks a re-selectable install checkbox. It is
+ * NOT an execution gate: it cannot grant execution to any entry, it can only fail to
+ * auto-remediate a pre-existing one. The write path is unchanged (FR-5).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.oursMcpHosts = oursMcpHosts;
+exports.exeBase = exeBase;
+exports.isOursJsonEntry = isOursJsonEntry;
+exports.isOursTomlBlock = isOursTomlBlock;
+exports.parseMemnexusTomlBlock = parseMemnexusTomlBlock;
+/** The package our JSON npx-fallback and TOML entries delegate to. */
+const OURS_PACKAGE = '@memnexus-ai/'; // matches @memnexus-ai/cli (and future scoped pkgs)
+/** Node runners that delegate to our published package in the fallback shapes. */
+const NODE_RUNNERS = new Set(['npx', 'node', 'bunx', 'pnpm', 'yarn', 'deno']);
+/** Hosts that count as our MCP server (remote-url agents). */
+function oursMcpHosts() {
+    const hosts = new Set(['mcp.memnexus.ai']);
+    for (const raw of [process.env.MX_MCP_URL, process.env.MX_MCP_RESOURCE_URL]) {
+        if (raw) {
+            try {
+                hosts.add(new URL(raw).host);
+            }
+            catch {
+                /* ignore an unparseable env override */
+            }
+        }
+    }
+    return hosts;
+}
+/**
+ * True when the bridge invocation `mcp serve` appears at the exact position `pos`
+ * (`tail[pos] === 'mcp' && tail[pos + 1] === 'serve'`). Position-bound, not
+ * anywhere-in-tail: a decoy `mcp serve` trailing an inert subcommand
+ * (`mx status mcp serve`, which runs `mx status`) must not qualify. Trailing tokens
+ * after `serve` (e.g. `--inject-rules`) are allowed.
+ */
+function bridgeInvokedAt(tail, pos) {
+    return tail[pos] === 'mcp' && tail[pos + 1] === 'serve';
+}
+/**
+ * True when some token IS our scoped package (a prefix match), not merely a token
+ * that contains our scope somewhere (which a foreign package could carry in a flag
+ * value). Accepts the deno `npm:@memnexus-ai/cli` form since deno is a node runner.
+ */
+function refsOursPackage(tokens) {
+    return tokens.some((t) => t.startsWith(OURS_PACKAGE) || t.startsWith('npm:' + OURS_PACKAGE));
+}
+/**
+ * The package a node runner actually EXECUTES = the first non-flag positional token.
+ * A bare ours-token in a later position is a decoy (`npx evil-pkg @memnexus-ai/cli` runs
+ * evil-pkg), so ownership must bind on the executed position, not any-position.
+ *
+ * Returns the INDEX in `tail` of the executed package token, or -1 if none. The caller
+ * both checks that token is ours AND that `mcp serve` immediately follows it, so the
+ * invocation position is bound to the actual package (see bridgeInvokedAt).
+ *
+ * deno is the one runner whose first non-flag token is a subcommand rather than the
+ * package (`deno run <script>`); we skip a leading `run` so the executed script is
+ * evaluated. deno support is purely DEFENSIVE — config-writer only ever writes `mx` or
+ * `npx` (config-writer.ts:38-51), never deno — so this keeps a hand-written
+ * `deno run npm:@memnexus-ai/cli` entry recognized rather than false-negatived (which
+ * would only cost a harmless re-write anyway). The decoy protection still holds for
+ * deno: `deno run evil.js npm:@memnexus-ai/cli` resolves to `evil.js`, not ours.
+ */
+function executedRunnerPackageIndex(base, tail) {
+    const start = base === 'deno' && tail[0] === 'run' ? 1 : 0;
+    for (let i = start; i < tail.length; i++) {
+        if (!tail[i].startsWith('-'))
+            return i;
+    }
+    return -1;
+}
+/** basename without a Windows executable extension, lowercased. */
+function exeBase(cmd) {
+    const base = cmd.split(/[\\/]/).pop() ?? cmd;
+    return base.toLowerCase().replace(/\.(exe|cmd|bat)$/, '');
+}
+/**
+ * PERMISSIVE-STRUCTURAL ownership check for a JSON server entry.
+ *
+ * Recognizes every real ours-shape across all agents and past `mx` versions —
+ * including customized ones (extra `env`, extra args, older versions with no `type`
+ * field, absolute/`.exe` command path, and OpenCode's array-form command). Returns
+ * false for foreign commands and for anything it cannot positively recognize.
+ */
+function isOursJsonEntry(entry) {
+    if (!entry || typeof entry !== 'object')
+        return false;
+    const e = entry;
+    // Resolve the executed binary + trailing tokens. `command` is a string for most
+    // agents and an array for OpenCode's "local" transport (command = [exe, ...args]).
+    let exe;
+    let tail = [];
+    if (typeof e.command === 'string') {
+        exe = e.command;
+        tail = Array.isArray(e.args) ? e.args.map(String) : [];
+    }
+    else if (Array.isArray(e.command)) {
+        const arr = e.command.map(String);
+        exe = arr[0];
+        tail = arr.slice(1);
+    }
+    if (exe) {
+        const base = exeBase(exe);
+        // (A) our bridge binary + invocation at the START of args.
+        if (base === 'mx' && bridgeInvokedAt(tail, 0))
+            return true;
+        // (B) runner → our package in the EXECUTED position, with `mcp serve` immediately after it.
+        if (NODE_RUNNERS.has(base)) {
+            const idx = executedRunnerPackageIndex(base, tail);
+            if (idx !== -1 && refsOursPackage([tail[idx]]) && bridgeInvokedAt(tail, idx + 1))
+                return true;
+        }
+    }
+    // (C) remote-url form: url/serverUrl/remoteUrl host is our MCP server.
+    const hosts = oursMcpHosts();
+    for (const key of ['url', 'serverUrl', 'remoteUrl']) {
+        const v = e[key];
+        if (typeof v === 'string') {
+            try {
+                if (hosts.has(new URL(v).host))
+                    return true;
+            }
+            catch {
+                /* ignore an unparseable url field */
+            }
+        }
+    }
+    return false; // foreign / unrecognized
+}
+/** Same ownership rule applied to a parsed TOML block. */
+function isOursTomlBlock(block) {
+    if (!block || typeof block.command !== 'string')
+        return false;
+    const base = exeBase(block.command);
+    const args = block.args ?? [];
+    if (base === 'mx' && bridgeInvokedAt(args, 0))
+        return true;
+    if (NODE_RUNNERS.has(base)) {
+        const idx = executedRunnerPackageIndex(base, args);
+        if (idx !== -1 && refsOursPackage([args[idx]]) && bridgeInvokedAt(args, idx + 1))
+            return true;
+    }
+    return false;
+}
+/**
+ * Strip a trailing `#` comment from a single TOML line, respecting quoted strings so
+ * a `#` inside a value is not treated as a comment start. Minimal: handles single and
+ * double quotes; the block grammar we read is fixed by what `buildTomlBlock` writes.
+ */
+function stripTomlComment(line) {
+    let inSingle = false;
+    let inDouble = false;
+    for (let i = 0; i < line.length; i++) {
+        const ch = line[i];
+        if (ch === "'" && !inDouble) {
+            inSingle = !inSingle;
+        }
+        else if (ch === '"' && !inSingle) {
+            inDouble = !inDouble;
+        }
+        else if (ch === '#' && !inSingle && !inDouble) {
+            return line.slice(0, i);
+        }
+    }
+    return line;
+}
+/** Parse a double- or single-quoted TOML string value. Returns undefined if not a quoted string. */
+function parseTomlString(raw) {
+    const v = raw.trim();
+    if (v.length >= 2 && v[0] === '"' && v[v.length - 1] === '"') {
+        return v.slice(1, -1);
+    }
+    if (v.length >= 2 && v[0] === "'" && v[v.length - 1] === "'") {
+        return v.slice(1, -1);
+    }
+    return undefined;
+}
+/**
+ * Parse a TOML inline array of quoted strings, e.g. `["mcp", "serve"]`.
+ * Returns the string elements; non-string elements are dropped. Returns undefined
+ * if the value is not an array literal.
+ */
+function parseTomlStringArray(raw) {
+    const v = raw.trim();
+    if (v[0] !== '[' || v[v.length - 1] !== ']')
+        return undefined;
+    const inner = v.slice(1, -1);
+    const out = [];
+    // Split on commas that are not inside quotes.
+    let cur = '';
+    let inSingle = false;
+    let inDouble = false;
+    for (let i = 0; i < inner.length; i++) {
+        const ch = inner[i];
+        if (ch === "'" && !inDouble)
+            inSingle = !inSingle;
+        else if (ch === '"' && !inSingle)
+            inDouble = !inDouble;
+        if (ch === ',' && !inSingle && !inDouble) {
+            const s = parseTomlString(cur);
+            if (s !== undefined)
+                out.push(s);
+            cur = '';
+            continue;
+        }
+        cur += ch;
+    }
+    if (cur.trim().length > 0) {
+        const s = parseTomlString(cur);
+        if (s !== undefined)
+            out.push(s);
+    }
+    return out;
+}
+/**
+ * Minimal line-based section parse of the `[mcp_servers.memnexus]` block.
+ *
+ * Replaces the previous raw-substring check (which fired on a commented-out header and
+ * could not read `command`). Strips comments first, locates the real section header
+ * (a line whose trimmed value is exactly `[mcp_servers.memnexus]`), then reads
+ * `key = value` lines until the next `[section]` header or EOF, extracting `command`
+ * (quoted string) and `args` (array of quoted strings).
+ *
+ * Returns null when there is no live section header. A full TOML library is not
+ * required; the block grammar is fixed by what `buildTomlBlock` writes.
+ */
+function parseMemnexusTomlBlock(content) {
+    const lines = content.split('\n');
+    let inSection = false;
+    let found = false;
+    const block = {};
+    for (const rawLine of lines) {
+        const line = stripTomlComment(rawLine).trim();
+        if (line.length === 0)
+            continue;
+        if (line.startsWith('[')) {
+            if (line === '[mcp_servers.memnexus]') {
+                inSection = true;
+                found = true;
+                continue;
+            }
+            // Any other section header ends the memnexus block.
+            if (inSection)
+                inSection = false;
+            continue;
+        }
+        if (!inSection)
+            continue;
+        const eq = line.indexOf('=');
+        if (eq === -1)
+            continue;
+        const key = line.slice(0, eq).trim();
+        const value = line.slice(eq + 1).trim();
+        if (key === 'command') {
+            const s = parseTomlString(value);
+            if (s !== undefined)
+                block.command = s;
+        }
+        else if (key === 'args') {
+            const arr = parseTomlStringArray(value);
+            if (arr !== undefined)
+                block.args = arr;
+        }
+    }
+    return found ? block : null;
+}
+//# sourceMappingURL=verify-ours.js.map

package/dist/lib/setup/verify-ours.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-ours.js","sourceRoot":"","sources":["../../../src/lib/setup/verify-ours.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;;AASH,oCAYC;AAgDD,0BAGC;AAUD,0CA0CC;AASD,0CAUC;AAgFD,wDAsCC;AAnQD,sEAAsE;AACtE,MAAM,YAAY,GAAG,eAAe,CAAC,CAAC,oDAAoD;AAE1F,kFAAkF;AAClF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE9E,8DAA8D;AAC9D,SAAgB,YAAY;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC5E,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC;gBACH,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,IAAc,EAAE,GAAW;IAClD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,OAAO,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAgB;IACvC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,0BAA0B,CAAC,IAAY,EAAE,IAAc;IAC9D,MAAM,KAAK,GAAG,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,mEAAmE;AACnE,SAAgB,OAAO,CAAC,GAAW;IACjC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC;IAC7C,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAE3C,gFAAgF;IAChF,mFAAmF;IACnF,IAAI,GAAuB,CAAC;IAC5B,IAAI,IAAI,GAAa,EAAE,CAAC;IACxB,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAClC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC;QAChB,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,IAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,GAAI,CAAC,CAAC,OAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACb,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,2DAA2D;QAC3D,IAAI,IAAI,KAAK,IAAI,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3D,4FAA4F;QAC5F,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,0BAA0B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnD,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QAChG,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,CAAU,EAAE,CAAC;QAC7D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,yBAAyB;AACzC,CAAC;AAQD,0DAA0D;AAC1D,SAAgB,eAAe,CAAC,KAA+B;IAC7D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAI,KAAK,IAAI,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,0BAA0B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAChG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,QAAQ,GAAG,CAAC,QAAQ,CAAC;QACvB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,QAAQ,GAAG,CAAC,QAAQ,CAAC;QACvB,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oGAAoG;AACpG,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QAC7D,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QAC7D,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,8CAA8C;IAC9C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ;YAAE,QAAQ,GAAG,CAAC,QAAQ,CAAC;aAC7C,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ;YAAE,QAAQ,GAAG,CAAC,QAAQ,CAAC;QACvD,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjC,GAAG,GAAG,EAAE,CAAC;YACT,SAAS;QACX,CAAC;QACD,GAAG,IAAI,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,sBAAsB,CAAC,OAAe;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,KAAK,GAAsB,EAAE,CAAC;IAEpC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEhC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBACtC,SAAS,GAAG,IAAI,CAAC;gBACjB,KAAK,GAAG,IAAI,CAAC;gBACb,SAAS;YACX,CAAC;YACD,oDAAoD;YACpD,IAAI,SAAS;gBAAE,SAAS,GAAG,KAAK,CAAC;YACjC,SAAS;QACX,CAAC;QAED,IAAI,CAAC,SAAS;YAAE,SAAS;QAEzB,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAExC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,SAAS;gBAAE,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,GAAG,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@memnexus-ai/cli",
-  "version": "1.7.228",
+  "version": "1.7.229",
   "description": "Command-line interface for MemNexus Core API",
   "main": "dist/index.js",
   "bin": {