@nextxai/cli 0.0.0-stage → 0.1.0

package/dist/commands/auth.js

@@ -0,0 +1,165 @@
+import { brand } from "../core/brand.js";
+import { context } from "../core/context.js";
+import { CliError, Exit } from "../core/errors.js";
+import { tr } from "../core/i18n.js";
+import { c, emit, info, ok, table, warn } from "../core/output.js";
+import { get, del } from "../core/http.js";
+import { getProfile, loadConfig, removeProfile } from "../core/config.js";
+import { deleteSession, readSession, storageKind } from "../auth/credentials.js";
+import { authSource, currentAuth, logoutServer, decodeJwt } from "../auth/session.js";
+import { loginQr, loginWeb } from "../auth/login.js";
+import { loginDevice } from "../auth/device.js";
+import { loginCi } from "../auth/ci.js";
+import { VERSION } from "../core/version.js";
+/** SSH sessions and Linux boxes without a display cannot open a browser. */
+export function browserAvailable() {
+    if (process.env.SSH_CONNECTION || process.env.SSH_TTY)
+        return false;
+    if (process.platform === "linux" && !process.env.DISPLAY && !process.env.WAYLAND_DISPLAY)
+        return false;
+    return true;
+}
+export async function usage() {
+    try {
+        return await get("/operator/widget/support/usage");
+    }
+    catch {
+        return undefined;
+    }
+}
+function printLogin(r) {
+    const p = getProfile(context().profile);
+    ok(tr(`Đã đăng nhập ${c.bold(r.userName ?? "")} (${r.userEmail ?? ""})`, `Logged in as ${c.bold(r.userName ?? "")} (${r.userEmail ?? ""})`));
+    info(`  ${tr("Workspace", "Workspace")}  ${c.bold(r.workspaceName ?? p?.workspaceName ?? "")}  · ${context().env === "prod" ? "prod" : c.yellow("sandbox")}`);
+    info(`  ${tr("Phiên", "Session")}      ${tr("tự gia hạn khi dùng, hết hạn nếu bỏ không 30 ngày", "renews while used, expires after 30 idle days")} · ${storageKind() === "keychain" ? "Keychain" : tr("tệp 0600", "0600 file")}`);
+    info(c.dim(`  ${tr("Thử", "Try")}: ${brand().bin}  ·  ${brand().bin} -p "${tr("doanh thu hôm qua", "yesterday's revenue")}"  ·  ${brand().bin} help`));
+}
+export function registerAuth(program) {
+    const b = brand();
+    program
+        .command("login")
+        .description(tr("đăng nhập (tự chọn trình duyệt hoặc QR)", "log in (browser or QR, chosen automatically)"))
+        .option("--web", tr("đăng nhập qua trình duyệt", "log in with the browser"))
+        .option("--qr", tr(`quét mã bằng app ${b.mobileApp} (SSH, máy không có trình duyệt)`, `scan with the ${b.mobileApp} app (SSH, headless machines)`))
+        .option("--device", tr("nhập mã trên máy khác (RFC 8628)", "enter a code on another device (RFC 8628)"))
+        .option("--ci", tr("trong GitHub Actions/GitLab CI: đổi token OIDC lấy token ngắn hạn", "in GitHub Actions/GitLab CI: exchange the OIDC token for a short-lived token"))
+        .option("--no-browser", tr("không tự mở trình duyệt, chỉ in link", "do not open the browser, print the link only"))
+        .action(async (o) => {
+        const ws = context().workspace;
+        let r;
+        if (o.ci)
+            r = await loginCi({ workspace: ws });
+        else if (o.device)
+            r = await loginDevice({ workspace: ws });
+        else if (o.qr || (!o.web && !browserAvailable()))
+            r = await loginQr({ workspace: ws });
+        else
+            r = await loginWeb({ workspace: ws, noBrowser: o.browser === false });
+        const u = await usage();
+        emit({ user: { name: r.userName, email: r.userEmail }, workspace: r.workspaceName, env: context().env, via: r.session.via, ai: u ?? null }, () => {
+            printLogin(r);
+            if (u)
+                info(`  ${tr("Gói AI", "AI plan")}     ${c.bold(u.planName ?? "-")}${u.limit ? ` · ${tr("còn", "left")} ${u.remaining}/${u.limit}` : ""}`);
+        });
+    });
+    program
+        .command("logout")
+        .description(tr("đăng xuất hồ sơ này (thu hồi phiên trên máy chủ)", "log out this profile (revokes the server session)"))
+        .option("--all", tr("đăng xuất mọi hồ sơ trên máy này", "log out every profile on this machine"))
+        .action(async (o) => {
+        const profiles = o.all ? Object.keys(loadConfig().profiles) : [context().profile];
+        for (const name of profiles) {
+            const { setContext, initContext } = await import("../core/context.js");
+            if (name !== context().profile) {
+                initContext({ profile: name });
+                setContext({ profile: name });
+            }
+            if (!readSession(name))
+                continue;
+            const revoked = await logoutServer();
+            deleteSession(name);
+            removeProfile(name);
+            if (revoked)
+                ok(tr(`Đã đăng xuất (${name})`, `Logged out (${name})`));
+            else
+                warn(tr(`Đã xoá phiên trên máy (${name}), nhưng không tới được máy chủ: phiên còn sống tới khi hết hạn. Thu hồi tại ${context().endpoints.id} › Thiết bị`, `Removed the local session (${name}), but the server was unreachable: it stays valid until it expires. Revoke it at ${context().endpoints.id} › Devices`));
+        }
+    });
+    program
+        .command("status")
+        .description(tr("tài khoản, workspace, môi trường, gói AI, phiên", "account, workspace, environment, AI plan, session"))
+        .action(async () => {
+        const src = authSource();
+        const p = getProfile(context().profile);
+        const base = { version: VERSION, profile: context().profile, env: context().env, api: context().endpoints.api, identity: src };
+        if (src === "none") {
+            emit({ ...base, loggedIn: false }, () => {
+                info(`${b.name} CLI ${VERSION} · ${tr("hồ sơ", "profile")} ${context().profile} · ${context().env}`);
+                warn(tr(`Chưa đăng nhập. Chạy \`${b.bin} login\``, `Not logged in. Run \`${b.bin} login\``));
+            });
+            process.exitCode = Exit.auth;
+            return;
+        }
+        if (src === "apiKey") {
+            emit({ ...base, loggedIn: true, kind: "apiKey" }, () => info(tr(`Đang dùng khoá API từ ${b.envPrefix}_API_KEY (danh tính agent).`, `Using the API key from ${b.envPrefix}_API_KEY (agent identity).`)));
+            return;
+        }
+        const auth = await currentAuth({ required: true });
+        const me = await get("/iam/auth/me");
+        const u = await usage();
+        const s = readSession(context().profile);
+        const claims = auth?.kind !== "apiKey" ? decodeJwt(auth.token) : {};
+        const data = {
+            ...base,
+            loggedIn: true,
+            user: { name: me.fullName, email: me.email },
+            workspace: me.workspace,
+            groups: me.groups,
+            ai: u ?? null,
+            session: s ? { via: s.via, accessExpiresAt: new Date(s.expiresAt).toISOString(), storage: storageKind() } : null,
+            tokenExp: claims.exp ? new Date(claims.exp * 1000).toISOString() : null,
+        };
+        emit(data, () => {
+            info(`${c.bold(me.fullName ?? "")} ${c.dim(me.email ?? "")}`);
+            info(`  ${tr("Workspace", "Workspace")}   ${c.bold(me.workspace?.name ?? "")} ${c.dim(me.workspace?.code ?? "")} · ${(me.groups ?? []).join(", ")}`);
+            info(`  ${tr("Môi trường", "Environment")}  ${context().env === "prod" ? c.red("prod") : c.yellow("sandbox")} · ${context().endpoints.api}`);
+            if (u)
+                info(`  ${tr("Gói AI", "AI plan")}      ${u.planName ?? "-"}${u.limit ? ` · ${tr("đã dùng", "used")} ${u.used}/${u.limit}, ${tr("mở lại", "resets")} ${u.resetsAt?.slice(0, 10)}` : ""}`);
+            info(`  ${tr("Danh tính", "Identity")}    ${src === "token" ? `${b.envPrefix}_TOKEN` : `${tr("phiên", "session")} (${s?.via}) · ${storageKind() === "keychain" ? "Keychain" : tr("tệp", "file")}`}`);
+            info(`  ${tr("Hồ sơ", "Profile")}       ${context().profile}${p?.agent ? ` · agent ${p.agent}` : ""} · CLI ${VERSION}`);
+        });
+    });
+    const sessions = program.command("sessions").description(tr("phiên đăng nhập của bạn trên mọi thiết bị", "your login sessions on all devices"));
+    sessions
+        .command("list", { isDefault: true })
+        .description(tr("danh sách phiên", "list sessions"))
+        .action(async () => {
+        const list = await get("/iam/sessions");
+        const device = (s) => {
+            const cli = /^([a-z]+)-cli\/(\S+) \(([^;)]+)/.exec(s.userAgent ?? "");
+            if (cli)
+                return `${s.browserName ?? `${brand().name} CLI ${cli[2]}`} · ${s.osName ?? cli[3]}`;
+            return s.deviceName ?? ([s.osName, s.browserName].filter(Boolean).join(" · ") || s.userAgent || "");
+        };
+        emit(list, () => info(table(["", "ID", tr("Thiết bị", "Device"), tr("Nơi", "Where"), tr("Hoạt động", "Last active")], list.map((s) => [s.isCurrentSession ? c.green("●") : "", s.id.slice(0, 8), device(s).slice(0, 40), s.city ?? s.ipAddress ?? "", (s.lastActivity ?? s.createdAt ?? "").slice(0, 16).replace("T", " ")]))));
+    });
+    sessions
+        .command("revoke [id]")
+        .description(tr("thu hồi một phiên, hoặc --others để thu hồi mọi phiên khác", "revoke one session, or --others for all other sessions"))
+        .option("--others", tr("mọi phiên trừ phiên này", "every session except this one"))
+        .action(async (id, o) => {
+        if (o.others) {
+            await del("/iam/sessions");
+            ok(tr("Đã thu hồi mọi phiên khác.", "Revoked all other sessions."));
+            return;
+        }
+        if (!id)
+            throw new CliError(tr("Cần id phiên (xem `sessions list`) hoặc --others.", "Pass a session id (see `sessions list`) or --others."), Exit.usage);
+        const list = await get("/iam/sessions");
+        const hit = list.find((s) => s.id === id || s.id.startsWith(id));
+        if (!hit)
+            throw new CliError(tr("Không thấy phiên này.", "Session not found."), Exit.notFound);
+        await del(`/iam/sessions/${hit.id}`);
+        ok(tr(`Đã thu hồi phiên ${hit.id.slice(0, 8)}.`, `Revoked session ${hit.id.slice(0, 8)}.`));
+    });
+}

package/dist/commands/docs.js

@@ -0,0 +1,55 @@
+import { writeFileSync } from "node:fs";
+import { context } from "../core/context.js";
+import { tr } from "../core/i18n.js";
+import { c, info, json, ok } from "../core/output.js";
+import { get } from "../core/http.js";
+const TOPICS = {
+    cli: "/docs/cli",
+    quickstart: "/docs/quickstart",
+    "api-keys": "/docs/api-keys",
+    oauth: "/docs/oauth",
+    mcp: "/docs/mcp",
+    "ai-tools": "/docs/ai-tools",
+    webhooks: "/docs/webhooks",
+    sdk: "/docs/sdk",
+    errors: "/docs/errors",
+    "rate-limit": "/docs/rate-limit",
+    sandbox: "/docs/sandbox",
+    changelog: "/docs/changelog",
+    versioning: "/docs/versioning",
+    security: "/docs/security",
+};
+export function registerDocs(program) {
+    program
+        .command("openapi")
+        .description(tr("tải đặc tả OpenAPI công khai", "download the public OpenAPI spec"))
+        .command("pull")
+        .option("--module <m>", tr("chỉ một phân hệ", "one module only"))
+        .option("-o, --out <file>", "", "openapi.json")
+        .action(async (o) => {
+        const spec = await get(`${context().endpoints.docs}/openapi.json`, { anonymous: true, baseUrl: "", query: { module: o.module } });
+        writeFileSync(o.out, JSON.stringify(spec, null, 2));
+        const paths = Object.keys(spec.paths ?? {}).length;
+        ok(tr(`Đã lưu ${o.out} · ${paths} đường`, `Saved ${o.out} · ${paths} paths`));
+    });
+    program
+        .command("docs [topic]")
+        .description(tr(`mở tài liệu (${Object.keys(TOPICS).join(", ")})`, `open the docs (${Object.keys(TOPICS).join(", ")})`))
+        .action(async (topic) => {
+        const url = `${context().endpoints.docs}${topic ? TOPICS[topic] ?? `/docs/${topic}` : "/docs"}`;
+        info(c.dim(url));
+        const open = (await import("open")).default;
+        await open(url).catch(() => undefined);
+    });
+    program
+        .command("changelog")
+        .description(tr("thay đổi API gần đây", "recent API changes"))
+        .action(async () => {
+        const spec = await get(`${context().endpoints.docs}/openapi.json`, { anonymous: true, baseUrl: "" });
+        const log = spec.info?.["x-changelog"];
+        if (log)
+            json(log);
+        else
+            info(`${tr("Phiên bản API", "API version")} ${spec.info?.version ?? "?"} · ${context().endpoints.docs}/docs/changelog`);
+    });
+}

package/dist/commands/help.js

@@ -0,0 +1,48 @@
+import { brand } from "../core/brand.js";
+import { tr } from "../core/i18n.js";
+import { json } from "../core/output.js";
+import { VERSION } from "../core/version.js";
+import { Exit } from "../core/errors.js";
+import { SLASH, SHORTCUTS } from "../repl/slash.js";
+const opt = (o) => ({ flags: o.flags, description: o.description, ...(o.defaultValue !== undefined ? { default: o.defaultValue } : {}), ...(o.argChoices ? { choices: o.argChoices } : {}) });
+function walk(cmd) {
+    return {
+        name: cmd.name(),
+        aliases: cmd.aliases(),
+        usage: cmd.usage(),
+        description: cmd.description(),
+        arguments: cmd.registeredArguments.map((a) => ({ name: a.name(), required: a.required, variadic: a.variadic, description: a.description })),
+        options: cmd.options.filter((o) => !o.hidden).map(opt),
+        commands: cmd.commands.filter((c) => !c._hidden && !c.name().startsWith("__")).map(walk),
+    };
+}
+/** Machine-readable command tree; the developer portal renders /docs/cli from this. */
+export function helpTree(program) {
+    const b = brand();
+    return {
+        bin: b.bin,
+        package: b.pkg,
+        version: VERSION,
+        brand: b.id,
+        root: walk(program),
+        slashCommands: SLASH.map((s) => ({ name: `/${s.name}`, args: s.args ?? null, description: s.description() })),
+        shortcuts: SHORTCUTS.map((s) => ({ keys: s.keys, description: s.description() })),
+        exitCodes: Object.entries(Exit).map(([name, code]) => ({ name, code })),
+        environment: ["API_KEY", "TOKEN", "PROFILE", "ENV", "WORKSPACE", "LANG", "DEBUG", "NO_UPDATE_CHECK", "NO_KEYCHAIN", "ID_TOKEN"].map((v) => `${b.envPrefix}_${v}`),
+    };
+}
+export function registerHelp(program) {
+    program
+        .command("help [command...]")
+        .description(tr("trợ giúp (--json: toàn bộ cây lệnh cho máy đọc)", "help (--json: full command tree, machine readable)"))
+        .option("--json", tr("in cây lệnh dạng JSON", "print the command tree as JSON"))
+        .action((path = [], o) => {
+        if (o.json || program.opts().json)
+            return json(helpTree(program));
+        let cmd = program;
+        for (const p of path)
+            cmd = cmd.commands.find((c) => c.name() === p || c.aliases().includes(p)) ?? cmd;
+        cmd.outputHelp();
+    });
+    program.addHelpCommand(false);
+}

package/dist/commands/keys.js

@@ -0,0 +1,85 @@
+import { brand } from "../core/brand.js";
+import { CliError, Exit } from "../core/errors.js";
+import { tr } from "../core/i18n.js";
+import { c, emit, info, ok, table, warn } from "../core/output.js";
+import { get, post, del } from "../core/http.js";
+import { confirm, hasTty } from "../core/prompt.js";
+import { requirePerson } from "../auth/session.js";
+/** 90d, 12h, 2w → ISO date from now. */
+export function parseDuration(s) {
+    const m = /^(\d+)([hdwmy])$/.exec(s.trim());
+    if (!m)
+        throw new CliError(tr(`Thời hạn không hợp lệ: ${s} (vd 30d, 12h, 6m, 1y)`, `Invalid duration: ${s} (e.g. 30d, 12h, 6m, 1y)`), Exit.usage);
+    const n = Number(m[1]);
+    const ms = { h: 3600e3, d: 86400e3, w: 7 * 86400e3, m: 30 * 86400e3, y: 365 * 86400e3 }[m[2]];
+    return new Date(Date.now() + n * ms).toISOString();
+}
+async function findKey(id) {
+    const k = (await get("/iam/api-keys")).find((x) => x.id === id || x.id.startsWith(id) || x.keyPrefix === id || x.name === id);
+    if (!k)
+        throw new CliError(tr("Không thấy khoá này.", "Key not found."), Exit.notFound);
+    return k;
+}
+export function registerKeys(program) {
+    const keys = program.command("keys").description(tr("khoá API của workspace", "workspace API keys"));
+    keys.hook("preAction", async () => void (await requirePerson()));
+    keys.command("list", { isDefault: true }).description(tr("danh sách khoá", "list keys")).action(async () => {
+        const list = await get("/iam/api-keys");
+        emit(list, () => info(table(["ID", tr("Tên", "Name"), tr("Đầu khoá", "Prefix"), tr("Quyền", "Scopes"), tr("Hết hạn", "Expires"), ""], list.map((k) => [
+            k.id.slice(0, 8), k.name, k.keyPrefix, k.scopes.length ? `${k.scopes.slice(0, 3).join(", ")}${k.scopes.length > 3 ? ` +${k.scopes.length - 3}` : ""}` : c.yellow(tr("không giới hạn", "unlimited")),
+            k.expiresAt?.slice(0, 10) ?? "", k.revokedAt ? c.red(tr("đã thu hồi", "revoked")) : k.isActive ? c.green("●") : c.dim(tr("tắt", "off")),
+        ]))));
+    });
+    keys.command("create")
+        .description(tr("tạo khoá mới (in khoá đúng một lần)", "create a key (printed once)"))
+        .requiredOption("--name <name>")
+        .requiredOption("--scopes <codes>", tr("mã quyền, phẩy ngăn cách, vd crm.contacts.view,sales.orders.view", "permission codes, comma separated, e.g. crm.contacts.view,sales.orders.view"))
+        .option("--expires <dur>", tr("thời hạn: 30d, 6m, 1y", "lifetime: 30d, 6m, 1y"), "90d")
+        .option("--description <text>")
+        .action(async (o) => {
+        const r = await post("/iam/api-keys", {
+            name: o.name,
+            scopes: o.scopes.split(",").map((s) => s.trim()).filter(Boolean),
+            expiresAt: parseDuration(o.expires),
+            description: o.description,
+            source: "integration",
+        });
+        const raw = String(r.rawKey ?? r.key ?? r.apiKey ?? "");
+        emit(r, () => {
+            ok(tr(`Đã tạo khoá "${o.name}"`, `Created key "${o.name}"`));
+            info(`\n  ${c.bold(raw)}\n`);
+            warn(tr("Chỉ hiện một lần. Lưu ngay vào nơi an toàn (biến bí mật của CI, trình quản lý mật khẩu).", "Shown only once. Store it now (CI secret, password manager)."));
+            info(c.dim(`  ${brand().envPrefix}_API_KEY=${raw.slice(0, 8)}… ${brand().bin} tools list`));
+        });
+    });
+    keys.command("revoke <id>").description(tr("thu hồi khoá (dừng ngay)", "revoke a key (stops immediately)")).action(async (id) => {
+        const k = await findKey(id);
+        if (hasTty() && !(await confirm(tr(`Thu hồi khoá "${k.name}" (${k.keyPrefix})? Mọi hệ thống đang dùng sẽ ngừng chạy.`, `Revoke "${k.name}" (${k.keyPrefix})? Anything using it stops working.`))))
+            return;
+        await post(`/iam/api-keys/${k.id}/revoke`, {});
+        ok(tr("Đã thu hồi.", "Revoked."));
+    });
+    keys.command("delete <id>").description(tr("xoá khoá", "delete a key")).action(async (id) => {
+        const k = await findKey(id);
+        if (hasTty() && !(await confirm(tr(`Xoá khoá "${k.name}"?`, `Delete "${k.name}"?`))))
+            return;
+        await del(`/iam/api-keys/${k.id}`);
+        ok(tr("Đã xoá.", "Deleted."));
+    });
+    keys.command("usage [id]").description(tr("số lượt gọi 7 ngày", "calls over 7 days")).action(async (id) => {
+        const u = await get("/iam/api-keys/usage");
+        const rows = (u.keys ?? []).filter((k) => !id || k.id.startsWith(id));
+        emit(u, () => {
+            if (!rows.length)
+                return void info(JSON.stringify(u, null, 2));
+            info(table([tr("Khoá", "Key"), ...(rows[0]?.days ?? []).map((d) => d.date.slice(5))], rows.map((k) => [k.name ?? k.id.slice(0, 8), ...(k.days ?? []).map((d) => d.count)])));
+            if (u.limitPerMinute)
+                info(c.dim(`  ${tr("Hạn mức", "Limit")}: ${u.limitPerMinute}/${tr("phút", "min")}`));
+        });
+    });
+    keys.command("calls <id>").description(tr("50 lượt gọi gần nhất của một khoá", "last 50 calls of a key")).action(async (id) => {
+        const k = await findKey(id);
+        const calls = await get(`/iam/api-keys/${k.id}/calls`);
+        emit(calls, () => info(table([tr("Lúc", "At"), "", tr("Đường", "Path"), tr("Kết quả", "Status"), "ms"], calls.map((x) => [(x.at ?? "").slice(0, 19).replace("T", " "), x.method ?? "", x.path ?? "", String(x.status ?? ""), x.durationMs ?? ""]))));
+    });
+}

package/dist/commands/mcp.js

@@ -0,0 +1,202 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync, copyFileSync } from "node:fs";
+import { homedir, platform } from "node:os";
+import { dirname, join } from "node:path";
+import { spawnSync } from "node:child_process";
+import { createInterface } from "node:readline";
+import { fetch } from "undici";
+import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
+import { brand } from "../core/brand.js";
+import { context } from "../core/context.js";
+import { CliError, Exit } from "../core/errors.js";
+import { tr } from "../core/i18n.js";
+import { c, info, ok, warn } from "../core/output.js";
+import { hasTty, multiSelect } from "../core/prompt.js";
+import { userAgent } from "../core/http.js";
+import { mcpToken } from "../auth/mcp-oauth.js";
+const home = homedir();
+const appSupport = () => platform() === "darwin" ? join(home, "Library", "Application Support") : platform() === "win32" ? process.env.APPDATA ?? join(home, "AppData", "Roaming") : join(home, ".config");
+const obj = (cfg, k) => (cfg[k] ??= {});
+/** Clients in A→Z order: no assistant vendor is favoured. */
+const TARGETS = [
+    { id: "chatgpt", name: "ChatGPT", kind: "manual" },
+    { id: "claude", name: "Claude Code", kind: "command" },
+    {
+        id: "claude-desktop", name: "Claude Desktop", kind: "file-json",
+        file: () => join(appSupport(), "Claude", "claude_desktop_config.json"),
+        apply: (cfg, key, _u, stdio) => void (obj(cfg, "mcpServers")[key] = stdio),
+        remove: (cfg, key) => void delete obj(cfg, "mcpServers")[key],
+    },
+    {
+        id: "codex", name: "Codex", kind: "file-toml",
+        file: () => join(process.env.CODEX_HOME ?? join(home, ".codex"), "config.toml"),
+        apply: (cfg, key, _u, stdio) => void (obj(cfg, "mcp_servers")[key] = stdio),
+        remove: (cfg, key) => void delete obj(cfg, "mcp_servers")[key],
+    },
+    { id: "copilot", name: "Copilot", kind: "manual" },
+    {
+        id: "cursor", name: "Cursor", kind: "file-json",
+        file: () => join(home, ".cursor", "mcp.json"),
+        apply: (cfg, key, url) => void (obj(cfg, "mcpServers")[key] = { url }),
+        remove: (cfg, key) => void delete obj(cfg, "mcpServers")[key],
+    },
+    {
+        id: "gemini", name: "Gemini CLI", kind: "file-json",
+        file: () => join(home, ".gemini", "settings.json"),
+        apply: (cfg, key, url) => void (obj(cfg, "mcpServers")[key] = { httpUrl: url }),
+        remove: (cfg, key) => void delete obj(cfg, "mcpServers")[key],
+    },
+    { id: "grok", name: "Grok", kind: "manual" },
+    {
+        id: "vscode", name: "VS Code", kind: "file-json",
+        file: () => join(appSupport(), "Code", "User", "mcp.json"),
+        apply: (cfg, key, url) => void (obj(cfg, "servers")[key] = { type: "http", url }),
+        remove: (cfg, key) => void delete obj(cfg, "servers")[key],
+    },
+    {
+        id: "windsurf", name: "Windsurf", kind: "file-json",
+        file: () => join(home, ".codeium", "windsurf", "mcp_config.json"),
+        apply: (cfg, key, url) => void (obj(cfg, "mcpServers")[key] = { serverUrl: url }),
+        remove: (cfg, key) => void delete obj(cfg, "mcpServers")[key],
+    },
+];
+function readCfg(t) {
+    const f = t.file();
+    if (!existsSync(f))
+        return {};
+    const raw = readFileSync(f, "utf8");
+    if (!raw.trim())
+        return {};
+    return t.kind === "file-toml" ? parseToml(raw) : JSON.parse(raw);
+}
+function writeCfg(t, cfg) {
+    const f = t.file();
+    mkdirSync(dirname(f), { recursive: true });
+    if (existsSync(f))
+        copyFileSync(f, `${f}.bak`);
+    writeFileSync(f, t.kind === "file-toml" ? stringifyToml(cfg) : `${JSON.stringify(cfg, null, 2)}\n`);
+}
+function installOne(t, url) {
+    const key = brand().bin;
+    const stdio = { command: brand().bin, args: ["mcp", "serve", "--stdio", ...(context().env === "sandbox" ? ["--sandbox"] : [])] };
+    if (t.kind === "manual") {
+        info(`${c.cyan("•")} ${t.name}: ${tr("vào Cài đặt › Kết nối (Connectors) › Thêm, dán", "open Settings › Connectors › Add, paste")} ${c.bold(url)}`);
+        return;
+    }
+    if (t.kind === "command") {
+        const r = spawnSync("claude", ["mcp", "add", "--transport", "http", "--scope", "user", key, url], { stdio: "pipe", encoding: "utf8" });
+        if (r.error)
+            return info(`${c.cyan("•")} ${t.name}: ${tr("chạy", "run")} ${c.bold(`claude mcp add --transport http ${key} ${url}`)}`);
+        if (r.status === 0)
+            return ok(`${t.name}: ${tr(`đã thêm "${key}" → ${url}`, `added "${key}" → ${url}`)}`);
+        return warn(`${t.name}: ${(r.stderr || r.stdout).trim()}`);
+    }
+    const cfg = readCfg(t);
+    t.apply(cfg, key, url, stdio);
+    writeCfg(t, cfg);
+    ok(`${t.name}: ${tr(`đã thêm "${key}" vào`, `added "${key}" to`)} ${c.dim(t.file())}`);
+}
+export function registerMcp(program) {
+    const mcp = program.command("mcp").description(tr("kết nối máy chủ MCP vào trợ lý AI khác", "connect the MCP server to other AI assistants"));
+    mcp.command("url").description(tr("in địa chỉ máy chủ MCP", "print the MCP server URL")).action(() => info(context().endpoints.mcp));
+    mcp.command("install [clients...]")
+        .description(tr(`cài vào: ${TARGETS.map((t) => t.id).join(", ")}`, `install into: ${TARGETS.map((t) => t.id).join(", ")}`))
+        .action(async (ids) => {
+        const url = context().endpoints.mcp;
+        let chosen = TARGETS.filter((t) => ids.includes(t.id));
+        const unknown = ids.filter((i) => !TARGETS.some((t) => t.id === i));
+        if (unknown.length)
+            throw new CliError(tr(`Không biết client: ${unknown.join(", ")}`, `Unknown client: ${unknown.join(", ")}`), Exit.usage);
+        if (!chosen.length) {
+            if (!hasTty()) {
+                info(url);
+                return;
+            }
+            chosen = (await multiSelect(tr("Cài máy chủ MCP vào client nào? (mặc định: mọi client MCP)", "Install the MCP server into which clients? (default: any MCP client)"), TARGETS.map((t) => ({ label: t.name, value: t })))) ?? [];
+        }
+        for (const t of chosen)
+            installOne(t, url);
+        if (chosen.length)
+            info(c.dim(tr("  Lần đầu mỗi client sẽ mở trình duyệt để bạn đồng ý quyền.", "  Each client opens the browser once so you can approve access.")));
+    });
+    mcp.command("uninstall <client>").action((id) => {
+        const t = TARGETS.find((x) => x.id === id);
+        if (!t)
+            throw new CliError(tr("Không biết client này.", "Unknown client."), Exit.usage);
+        if (t.kind === "command")
+            return void spawnSync("claude", ["mcp", "remove", brand().bin], { stdio: "inherit" });
+        if (t.kind === "manual")
+            return info(tr(`${t.name}: gỡ trong Cài đặt › Kết nối.`, `${t.name}: remove it in Settings › Connectors.`));
+        const cfg = readCfg(t);
+        t.remove(cfg, brand().bin);
+        writeCfg(t, cfg);
+        ok(tr(`Đã gỡ khỏi ${t.name}.`, `Removed from ${t.name}.`));
+    });
+    mcp.command("serve")
+        .description(tr("chạy MCP qua stdio bằng quyền của CLI (cho client không hỗ trợ OAuth)", "serve MCP over stdio with the CLI's grant (for clients without OAuth)"))
+        .option("--stdio", tr("dùng stdin/stdout (mặc định)", "use stdin/stdout (default)"))
+        .action(async () => serveStdio());
+}
+/** Line-delimited JSON-RPC on stdio ⇄ Streamable HTTP to the hosted server. Logs go to stderr only. */
+async function serveStdio() {
+    const url = context().endpoints.mcp;
+    let token = await mcpToken({ interactive: false });
+    let sessionId;
+    const rl = createInterface({ input: process.stdin });
+    const write = (m) => process.stdout.write(`${JSON.stringify(m)}\n`);
+    for await (const line of rl) {
+        if (!line.trim())
+            continue;
+        let msg;
+        try {
+            msg = JSON.parse(line);
+        }
+        catch {
+            continue;
+        }
+        const send = async () => fetch(url, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Accept: "application/json, text/event-stream",
+                Authorization: `Bearer ${token}`,
+                "User-Agent": userAgent(),
+                ...(sessionId ? { "Mcp-Session-Id": sessionId } : {}),
+            },
+            body: line,
+        });
+        try {
+            let res = await send();
+            if (res.status === 401) {
+                token = await mcpToken({ interactive: false });
+                res = await send();
+            }
+            const sid = res.headers.get("mcp-session-id");
+            if (sid)
+                sessionId = sid;
+            if (msg.id === undefined) {
+                await res.body?.cancel();
+                continue;
+            }
+            const ct = res.headers.get("content-type") ?? "";
+            if (ct.includes("text/event-stream")) {
+                const text = await res.text();
+                for (const frame of text.split("\n\n")) {
+                    const data = frame.split("\n").filter((l) => l.startsWith("data:")).map((l) => l.slice(5).trim()).join("\n");
+                    if (data)
+                        process.stdout.write(`${data}\n`);
+                }
+            }
+            else {
+                const body = await res.text();
+                if (body)
+                    process.stdout.write(`${body.trim()}\n`);
+                else
+                    write({ jsonrpc: "2.0", id: msg.id, error: { code: -32603, message: `HTTP ${res.status}` } });
+            }
+        }
+        catch (e) {
+            process.stderr.write(`${e.message}\n`);
+            write({ jsonrpc: "2.0", id: msg.id, error: { code: -32603, message: e.message } });
+        }
+    }
+}