@springbrand/cli 0.1.0

package/dist/lib/harness.js

@@ -0,0 +1,125 @@
+/** 复刻自 tiny-fish CLI 编译产物：harness.d.ts + harness.impl.js */
+// Detects the coding-agent harness that shelled out to the CLI, so usage events
+// can be split by harness (PF-3168). Names become the `X-SP-Client-Name` header
+// value (unenumerated, lowercase-kebab, matching MCP client_name like
+// "claude-code"). Explicit TF_CLIENT_NAME always wins upstream in client.ts.
+//
+// Fingerprints verified by running scripts/harness-probe.mjs (repo root) in each harness.
+// Order matters: wrappers that embed another agent must precede the embedded
+// one. OpenClaw drives Claude Code via `sdk-cli`, so its env carries both
+// CLAUDECODE=1 and OPENCLAW_MCP_*; it must be checked before claude-code.
+import { existsSync, readFileSync } from 'node:fs';
+const hasVarWithPrefix = (env, prefix) => Object.keys(env).some((key) => key.startsWith(prefix));
+// A new name here must also join KNOWN_CALLING_HARNESSES in
+// frontend/app/api/cli/connect-event/route.ts, or connect telemetry buckets it as `other`.
+// First match wins. Base agents (claude-code) go last so embedding wrappers win.
+const HARNESS_FINGERPRINTS = [
+    { name: 'openclaw', matches: (env) => hasVarWithPrefix(env, 'OPENCLAW_MCP_') },
+    // omp hardcodes CLAUDECODE=1, so it must precede claude-code.
+    { name: 'omp', matches: (env) => env['OMPCODE'] === '1' },
+    { name: 'grok', matches: (env) => env['GROK_AGENT'] === '1' },
+    // Cursor's VS Code host sets CURSOR_* broadly; CURSOR_AGENT=1 flags the
+    // agent specifically, so gate on it rather than the prefix.
+    { name: 'cursor', matches: (env) => env['CURSOR_AGENT'] === '1' },
+    // Antigravity is Google's successor to the (deprecated) gemini-cli.
+    { name: 'antigravity', matches: (env) => env['ANTIGRAVITY_AGENT'] === '1' },
+    // CODEX_CI seen in probe; CODEX_SANDBOX* appear under seatbelt. Match the
+    // prefix so we catch a Codex run regardless of which of its vars are set.
+    { name: 'codex', matches: (env) => hasVarWithPrefix(env, 'CODEX_') },
+    { name: 'hermes', matches: (env) => hasVarWithPrefix(env, 'HERMES_') },
+    // COMMANDCODE_SCRATCHPAD lands on every child; a disabled scratchpad leaves no marker.
+    { name: 'command-code', matches: (env) => hasVarWithPrefix(env, 'COMMANDCODE_') },
+    // Exact key, not a prefix: opencode writes OPENCODE=1 at startup, reads every OPENCODE_* as config.
+    { name: 'opencode', matches: (env) => Boolean(env['OPENCODE']) },
+    // Observed: pi launched from Claude Code inherits CLAUDECODE=1.
+    { name: 'pi', matches: (env) => env['PI_CODING_AGENT'] === 'true' },
+    {
+        name: 'claude-code',
+        matches: (env) => env['CLAUDECODE'] === '1' || Boolean(env['CLAUDE_CODE_ENTRYPOINT']),
+    },
+];
+/** Returns the detected harness name, or null when none match. */
+export function detectHarness(env) {
+    const resolved = env ?? process.env;
+    return HARNESS_FINGERPRINTS.find((fingerprint) => fingerprint.matches(resolved))?.name ?? null;
+}
+// Markers verified live (PF-3778); exact names only — substring "SANDBOX" misfires.
+const SANDBOX_ENV_VARS = [
+    // Codex cloud task container.
+    'CODEX_PROXY_CERT',
+    // ChatGPT agent-mode container; absent in some sessions, NETWORK below backstops.
+    'CAAS_ARTIFACTORY_BASE_URL',
+    'CLAUDE_CODE_REMOTE_SESSION_ID',
+    'E2B_SANDBOX',
+    'MODAL_TASK_ID',
+    'MODAL_SANDBOX_ID',
+];
+// Real humans in containerized dev clouds; still container.
+const DEV_CLOUD_ENV_VARS = [
+    'CODESPACES',
+    'GITPOD_WORKSPACE_ID',
+    'CLOUD_SHELL',
+    'REPL_ID',
+    'KUBERNETES_SERVICE_HOST',
+];
+const CONTAINER_FILES = ['/.dockerenv', '/run/.containerenv'];
+// Container-side line shape only: host mountinfo carries .../containers/<id>/mounts/shm.
+const MOUNTINFO_MARKER = /\/docker\/containers\/[0-9a-f]{64}\/(?:resolv\.conf|hostname|hosts)/;
+const CGROUP_MARKERS = /docker|containerd|kubepods|libpod|lxc/;
+// Per-read isolation: a missing mountinfo must not skip the cgroup probe.
+const safeRead = (fsApi, path) => {
+    try {
+        return fsApi.readFileSync(path, 'utf8');
+    }
+    catch {
+        return '';
+    }
+};
+// One verdict per process, like CLI_INVOCATION_ID: events must never disagree.
+let cachedRuntimeEnv;
+// CODEX_CI / CODEX_SANDBOX* / CLAUDECODE mean agent-spawned, not containerized: never here.
+/** Fails open to desktop: a probe error must never break telemetry. */
+export function detectRuntimeEnv(env, fsApi) {
+    // Injected args bypass the cache so tests stay independent.
+    if (env || fsApi) {
+        return computeRuntimeEnv(env ?? process.env, fsApi ?? { existsSync, readFileSync });
+    }
+    cachedRuntimeEnv ??= computeRuntimeEnv(process.env, { existsSync, readFileSync });
+    return cachedRuntimeEnv;
+}
+function computeRuntimeEnv(env, fsApi) {
+    // Docs guarantee it is never true locally.
+    if (env['CLAUDE_CODE_REMOTE'] === 'true')
+        return 'container';
+    // Generic name, so match the value (ChatGPT agent mode).
+    if (env['NETWORK'] === 'caas_packages_only')
+        return 'container';
+    if (SANDBOX_ENV_VARS.some((name) => env[name]))
+        return 'container';
+    if (hasVarWithPrefix(env, 'CODEX_ENV_'))
+        return 'container';
+    if (DEV_CLOUD_ENV_VARS.some((name) => env[name]))
+        return 'container';
+    try {
+        if (CONTAINER_FILES.some((file) => fsApi.existsSync(file)))
+            return 'container';
+    }
+    catch {
+        // A failed probe is not evidence of a container.
+    }
+    // Modern docker cgroup is bare 0::/; mountinfo still carries the path.
+    if (MOUNTINFO_MARKER.test(safeRead(fsApi, '/proc/self/mountinfo')))
+        return 'container';
+    if (CGROUP_MARKERS.test(safeRead(fsApi, '/proc/self/cgroup')))
+        return 'container';
+    return 'desktop';
+}
+/**
+ * True only when both ends are a real terminal — a human at a prompt. Agents
+ * shell out without a TTY, so this reads false for every harness above and is
+ * the free agent-vs-human signal behind `X-SP-Human-Initiated`.
+ */
+export function detectHumanInitiated(streams) {
+    return Boolean(streams?.stdin.isTTY && streams?.stdout.isTTY);
+}
+//# sourceMappingURL=harness.js.map

package/dist/lib/harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../src/lib/harness.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAE5D,gFAAgF;AAChF,gFAAgF;AAChF,sEAAsE;AACtE,6EAA6E;AAC7E,EAAE;AACF,0FAA0F;AAC1F,6EAA6E;AAC7E,0EAA0E;AAC1E,0EAA0E;AAC1E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAWnD,MAAM,gBAAgB,GAAG,CAAC,GAAQ,EAAE,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9G,4DAA4D;AAC5D,2FAA2F;AAC3F,iFAAiF;AACjF,MAAM,oBAAoB,GAAuD;IAC7E,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE;IACnF,8DAA8D;IAC9D,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,GAAG,EAAE;IAC9D,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,EAAE;IAClE,wEAAwE;IACxE,4DAA4D;IAC5D,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,GAAG,EAAE;IACtE,oEAAoE;IACpE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,GAAG,EAAE;IAChF,0EAA0E;IAC1E,0EAA0E;IAC1E,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE;IACzE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE;IAC3E,uFAAuF;IACvF,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE;IACtF,oGAAoG;IACpG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE;IACrE,gEAAgE;IAChE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,MAAM,EAAE;IACxE;QACI,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;KAC7F;CACJ,CAAC;AACF,kEAAkE;AAClE,MAAM,UAAU,aAAa,CAAC,GAAS;IACnC,MAAM,QAAQ,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;AACnG,CAAC;AACD,oFAAoF;AACpF,MAAM,gBAAgB,GAAG;IACrB,8BAA8B;IAC9B,kBAAkB;IAClB,kFAAkF;IAClF,2BAA2B;IAC3B,+BAA+B;IAC/B,aAAa;IACb,eAAe;IACf,kBAAkB;CACrB,CAAC;AACF,4DAA4D;AAC5D,MAAM,kBAAkB,GAAG;IACvB,YAAY;IACZ,qBAAqB;IACrB,aAAa;IACb,SAAS;IACT,yBAAyB;CAC5B,CAAC;AACF,MAAM,eAAe,GAAG,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;AAC9D,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,qEAAqE,CAAC;AAC/F,MAAM,cAAc,GAAG,uCAAuC,CAAC;AAC/D,0EAA0E;AAC1E,MAAM,QAAQ,GAAG,CAAC,KAAY,EAAE,IAAY,EAAU,EAAE;IACpD,IAAI,CAAC;QACD,OAAO,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,CAAC;QACH,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC,CAAC;AACF,+EAA+E;AAC/E,IAAI,gBAAwC,CAAC;AAC7C,4FAA4F;AAC5F,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,GAAS,EAAE,KAAa;IACrD,4DAA4D;IAC5D,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;QACf,OAAO,iBAAiB,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,gBAAgB,KAAK,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IAClF,OAAO,gBAAgB,CAAC;AAC5B,CAAC;AACD,SAAS,iBAAiB,CAAC,GAAQ,EAAE,KAAY;IAC7C,2CAA2C;IAC3C,IAAI,GAAG,CAAC,oBAAoB,CAAC,KAAK,MAAM;QACpC,OAAO,WAAW,CAAC;IACvB,yDAAyD;IACzD,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,oBAAoB;QACvC,OAAO,WAAW,CAAC;IACvB,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,OAAO,WAAW,CAAC;IACvB,IAAI,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC;QACnC,OAAO,WAAW,CAAC;IACvB,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,WAAW,CAAC;IACvB,IAAI,CAAC;QACD,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACtD,OAAO,WAAW,CAAC;IAC3B,CAAC;IACD,MAAM,CAAC;QACH,iDAAiD;IACrD,CAAC;IACD,uEAAuE;IACvE,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;QAC9D,OAAO,WAAW,CAAC;IACvB,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QACzD,OAAO,WAAW,CAAC;IACvB,OAAO,SAAS,CAAC;AACrB,CAAC;AACD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA+B;IAChE,OAAO,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,IAAI,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC"}

package/dist/lib/hermes-config.d.ts

@@ -0,0 +1,22 @@
+/** 复刻自 tiny-fish CLI 编译产物：hermes-config.d.ts + hermes-config.impl.js */
+/** Every message about the entry names this path. */
+export declare function hermesConfigPath(home: string): string;
+export declare const HERMES_HEADER_TEMPLATE = "Bearer ${MCP_SPRINGBRAND_API_KEY}";
+/** Both the writer and the gate key on this, so they cannot disagree. */
+export declare const HERMES_MCP_SERVER_KEY = "springbrand";
+/** Connect's gate and doctor's probe share this, so they cannot disagree. */
+export declare function readHermesEntry(home: string): HermesEntry;
+export type HermesEntry = {
+    state: 'unreadable';
+} | {
+    state: 'unparseable';
+} | {
+    state: 'absent';
+} | {
+    state: 'disabled';
+    usesKeyHeader: boolean;
+} | {
+    state: 'enabled';
+    usesKeyHeader: boolean;
+};
+//# sourceMappingURL=hermes-config.d.ts.map

package/dist/lib/hermes-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermes-config.d.ts","sourceRoot":"","sources":["../../src/lib/hermes-config.ts"],"names":[],"mappings":"AAAA,wEAAwE;AAOxE,qDAAqD;AACrD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,eAAO,MAAM,sBAAsB,sCAAiC,CAAC;AACrE,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AAsCnD,6EAA6E;AAC7E,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAsBzD;AAGD,MAAM,MAAM,WAAW,GAAG;IACtB,KAAK,EAAE,YAAY,CAAC;CACvB,GAAG;IACA,KAAK,EAAE,aAAa,CAAC;CACxB,GAAG;IACA,KAAK,EAAE,QAAQ,CAAC;CACnB,GAAG;IACA,KAAK,EAAE,UAAU,CAAC;IAClB,aAAa,EAAE,OAAO,CAAC;CAC1B,GAAG;IACA,KAAK,EAAE,SAAS,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;CAC1B,CAAC"}

package/dist/lib/hermes-config.js

@@ -0,0 +1,76 @@
+/** 复刻自 tiny-fish CLI 编译产物：hermes-config.d.ts + hermes-config.impl.js */
+import fs from 'node:fs';
+import path from 'node:path';
+import { parse } from 'yaml';
+import { z } from 'zod';
+import { HERMES_KEY_VAR } from './hermes-env.js';
+/** Every message about the entry names this path. */
+export function hermesConfigPath(home) {
+    return path.join(home, 'config.yaml');
+}
+// Hermes persists the key as an interpolation template (mcp_config.py:174-182).
+export const HERMES_HEADER_TEMPLATE = `Bearer \${${HERMES_KEY_VAR}}`;
+/** Both the writer and the gate key on this, so they cannot disagree. */
+export const HERMES_MCP_SERVER_KEY = 'springbrand';
+// Foreign file: model only what we read, tolerate the rest.
+const entrySchema = z.looseObject({
+    // Anything goes: the runtime defaults unrecognised values to enabled.
+    enabled: z.unknown().optional(),
+    headers: z.record(z.string(), z.unknown()).optional(),
+});
+const configSchema = z
+    .looseObject({
+    mcp_servers: z.looseObject({ [HERMES_MCP_SERVER_KEY]: entrySchema.nullish() }).nullish(),
+})
+    .nullish();
+const TRUTHY_STRINGS = new Set(['true', '1', 'yes', 'on']);
+const FALSY_STRINGS = new Set(['false', '0', 'no', 'off']);
+/**
+ * Mirrors the runtime's _parse_boolish (mcp_tool.py:5656), which decides whether
+ * tools are served. `hermes mcp list` coerces differently and disagrees on
+ * numbers and "on"; the runtime wins because it is what actually serves.
+ */
+function isEnabled(value) {
+    if (value === undefined || value === null)
+        return true;
+    if (typeof value === 'boolean')
+        return value;
+    if (typeof value === 'string') {
+        const lowered = value.trim().toLowerCase();
+        if (TRUTHY_STRINGS.has(lowered))
+            return true;
+        if (FALSY_STRINGS.has(lowered))
+            return false;
+    }
+    return true;
+}
+/** Only the header template proves this entry uses the seeded key. */
+function hasKeyHeader(headers) {
+    const authorization = Object.entries(headers ?? {}).find(([name]) => name.toLowerCase() === 'authorization');
+    return authorization?.[1] === HERMES_HEADER_TEMPLATE;
+}
+/** Connect's gate and doctor's probe share this, so they cannot disagree. */
+export function readHermesEntry(home) {
+    let raw;
+    try {
+        raw = fs.readFileSync(hermesConfigPath(home), 'utf8');
+    }
+    catch {
+        return { state: 'unreadable' };
+    }
+    let config;
+    try {
+        config = configSchema.parse(parse(raw));
+    }
+    catch {
+        return { state: 'unparseable' };
+    }
+    const entry = config?.mcp_servers?.[HERMES_MCP_SERVER_KEY];
+    if (!entry)
+        return { state: 'absent' };
+    const usesKeyHeader = hasKeyHeader(entry.headers);
+    return isEnabled(entry.enabled)
+        ? { state: 'enabled', usesKeyHeader }
+        : { state: 'disabled', usesKeyHeader };
+}
+//# sourceMappingURL=hermes-config.js.map

package/dist/lib/hermes-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermes-config.js","sourceRoot":"","sources":["../../src/lib/hermes-config.ts"],"names":[],"mappings":"AAAA,wEAAwE;AAExE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,qDAAqD;AACrD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AAC1C,CAAC;AACD,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,aAAa,cAAc,GAAG,CAAC;AACrE,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAG,aAAa,CAAC;AACnD,4DAA4D;AAC5D,MAAM,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;IAC9B,sEAAsE;IACtE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,CAAC;KACjB,WAAW,CAAC;IACb,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,qBAAqB,CAAC,EAAE,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;CAC3F,CAAC;KACG,OAAO,EAAE,CAAC;AACf,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAC3D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAC3D;;;;GAIG;AACH,SAAS,SAAS,CAAC,KAAc;IAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QACrC,OAAO,IAAI,CAAC;IAChB,IAAI,OAAO,KAAK,KAAK,SAAS;QAC1B,OAAO,KAAK,CAAC;IACjB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;YAC3B,OAAO,IAAI,CAAC;QAChB,IAAI,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC;YAC1B,OAAO,KAAK,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AACD,sEAAsE;AACtE,SAAS,YAAY,CAAC,OAA4C;IAC9D,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,CAAC;IAC7G,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,KAAK,sBAAsB,CAAC;AACzD,CAAC;AACD,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAAC,IAAY;IACxC,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QACD,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACD,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IACpC,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC,qBAAqB,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK;QACN,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC/B,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClD,OAAO,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;QAC3B,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE;QACrC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AAC/C,CAAC"}

package/dist/lib/hermes-env.d.ts

@@ -0,0 +1,19 @@
+/** 复刻自 tiny-fish CLI 编译产物：hermes-env.d.ts + hermes-env.impl.js */
+/** Tests share one process; the resolver result must not. */
+export declare function resetHermesHomeCache(): void;
+/** Asking Hermes beats reimplementing its profile override, which we'd drift from. */
+export declare function resolveHermesHome(): string | HermesHomeFailure;
+export declare const HERMES_KEY_VAR = "MCP_SPRINGBRAND_API_KEY";
+/** Named in every message about the seeded key, so no caller rebuilds the path. */
+export declare function hermesEnvPath(home: string): string;
+export declare function writeHermesKey(home: string, key: string): void;
+/** Doctor needs this to tell key auth from OAuth. */
+export declare function readHermesKey(home: string): string | undefined;
+/** Restores the exact line writeHermesKey replaces, quotes and comment included. */
+export declare function captureHermesKeyRestore(home: string): () => void;
+export declare function removeHermesKey(home: string): boolean;
+export type HermesHomeReason = 'timeout' | 'exit' | 'no_line' | 'relative';
+export interface HermesHomeFailure {
+    reason: HermesHomeReason;
+}
+//# sourceMappingURL=hermes-env.d.ts.map

package/dist/lib/hermes-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermes-env.d.ts","sourceRoot":"","sources":["../../src/lib/hermes-env.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAclE,6DAA6D;AAC7D,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AACD,sFAAsF;AACtF,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,iBAAiB,CAS9D;AAkBD,eAAO,MAAM,cAAc,4BAA4B,CAAC;AACxD,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;AAiDD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAuB9D;AACD,qDAAqD;AACrD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAW9D;AACD,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,cAoBnD;AACD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUrD;AAGD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AAE3E,MAAM,WAAW,iBAAiB;IAC9B,MAAM,EAAE,gBAAgB,CAAC;CAC5B"}

package/dist/lib/hermes-env.js

@@ -0,0 +1,169 @@
+/** 复刻自 tiny-fish CLI 编译产物：hermes-env.d.ts + hermes-env.impl.js */
+import os from 'node:os';
+import path from 'node:path';
+import fs from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import spawn from 'cross-spawn';
+import { HARNESS_PROBE_TIMEOUT_MS } from './constants.js';
+import { sanitizeLine } from './output.js';
+// display_hermes_home() abbreviates under $HOME, so the value is not always absolute.
+const HERMES_HOME_LINE = /^\s*hermes_home:\s*(\S.*?)\s*$/m;
+// Consistency, not speed: doctor's second probe timing out would downgrade
+// hermes-plugin from fail to warn, and doctor --fix skips the repair.
+let cachedHermesHome;
+/** Tests share one process; the resolver result must not. */
+export function resetHermesHomeCache() {
+    cachedHermesHome = undefined;
+}
+/** Asking Hermes beats reimplementing its profile override, which we'd drift from. */
+export function resolveHermesHome() {
+    if (cachedHermesHome)
+        return cachedHermesHome.value;
+    const value = probeHermesHome();
+    // A timeout is load-dependent; caching it would sink a run a retry still saves.
+    if (typeof value === 'string' || value.reason !== 'timeout') {
+        cachedHermesHome = { value };
+    }
+    return value;
+}
+function probeHermesHome() {
+    const result = spawn.sync('hermes', ['dump'], {
+        encoding: 'utf8',
+        env: { ...process.env, FORCE_COLOR: '0', NO_COLOR: '1' },
+        timeout: HARNESS_PROBE_TIMEOUT_MS,
+    });
+    if (result.error?.code === 'ETIMEDOUT') {
+        return { reason: 'timeout' };
+    }
+    if (result.error || result.status !== 0)
+        return { reason: 'exit' };
+    const raw = HERMES_HOME_LINE.exec(sanitizeLine(`${result.stdout ?? ''}\n${result.stderr ?? ''}`))?.[1];
+    if (!raw)
+        return { reason: 'no_line' };
+    const expanded = raw === '~' || raw.startsWith('~/') ? path.join(os.homedir(), raw.slice(2)) : raw;
+    return path.isAbsolute(expanded) ? expanded : { reason: 'relative' };
+}
+export const HERMES_KEY_VAR = 'MCP_SPRINGBRAND_API_KEY';
+/** Named in every message about the seeded key, so no caller rebuilds the path. */
+export function hermesEnvPath(home) {
+    return path.join(home, '.env');
+}
+const MARKER_HEAD = `# springbrand-cli: SpringBrand MCP key, managed by \`sp connect hermes\``;
+const MARKER_TAIL = '# springbrand-cli: end';
+// Keys are `sk-springbrand-<alnum>`; refusing anything else beats shipping unreachable escaping.
+const BARE_SAFE = /^[A-Za-z0-9._\-/:+=]+$/;
+/** Mirrors Hermes' _env_line_defines_key: load_env() parses the export form too. */
+function definesKey(line) {
+    const stripped = line.trim().replace(/^export\s+/, '');
+    return stripped.startsWith(`${HERMES_KEY_VAR}=`);
+}
+function isMarker(line) {
+    return line.trim() === MARKER_HEAD || line.trim() === MARKER_TAIL;
+}
+// A leading BOM would otherwise ride into the first key's name.
+function readLines(envPath) {
+    if (!fs.existsSync(envPath))
+        return [];
+    const raw = fs.readFileSync(envPath);
+    // A valid UTF-8 .env has no NUL; every wide encoding does.
+    if (raw.includes(0)) {
+        throw new Error(`${envPath} contains NUL bytes, so it is a wide encoding or corrupt; SpringBrand can only ` +
+            `edit a UTF-8 .env. Re-save it as UTF-8 and retry.`);
+    }
+    return raw
+        .toString('utf8')
+        .replace(/^\uFEFF/, '')
+        .split(/(?<=\n)/);
+}
+// Hermes preserves the original mode so Docker volume mounts survive (config.py:3921-3929).
+function writeAtomic(envPath, lines) {
+    let mode = 0o600;
+    try {
+        mode = fs.statSync(envPath).mode & 0o777;
+    }
+    catch {
+        // No existing file: 0600 is the right default for credentials.
+    }
+    const tmp = `${envPath}.${randomUUID()}.tmp`;
+    try {
+        fs.writeFileSync(tmp, lines.join(''), { encoding: 'utf8', mode });
+        // open() applies mode through umask; chmod bypasses it, preserving bits.
+        fs.chmodSync(tmp, mode);
+        fs.renameSync(tmp, envPath);
+    }
+    catch (error) {
+        fs.rmSync(tmp, { force: true });
+        throw error;
+    }
+}
+export function writeHermesKey(home, key) {
+    const clean = key.replace(/[\r\n]/g, '').trim();
+    // An empty key reads as "bad characters" without its own branch.
+    if (!clean)
+        throw new Error("SpringBrand API key is empty; nothing to write to Hermes' .env");
+    if (!BARE_SAFE.test(clean)) {
+        throw new Error('SpringBrand API key contains characters that cannot be written to a .env file');
+    }
+    const envPath = hermesEnvPath(home);
+    fs.mkdirSync(home, { recursive: true });
+    const lines = readLines(envPath);
+    const assignment = `${HERMES_KEY_VAR}=${clean}\n`;
+    const index = lines.findIndex(definesKey);
+    if (index < 0) {
+        if (lines.length && !lines[lines.length - 1].endsWith('\n'))
+            lines[lines.length - 1] += '\n';
+        lines.push(`${MARKER_HEAD}\n`, assignment, `${MARKER_TAIL}\n`);
+        writeAtomic(envPath, lines);
+        return;
+    }
+    lines[index] = assignment;
+    // load_env() is last-wins; a surviving duplicate would beat this value.
+    writeAtomic(envPath, lines.filter((line, i) => i === index || !definesKey(line)));
+}
+/** Doctor needs this to tell key auth from OAuth. */
+export function readHermesKey(home) {
+    const line = readLines(hermesEnvPath(home)).find(definesKey);
+    if (!line)
+        return undefined;
+    // We never write quoted values, so a quoted one isn't ours.
+    const raw = line
+        .trim()
+        .replace(/^export\s+/, '')
+        .slice(HERMES_KEY_VAR.length + 1)
+        .trim();
+    return BARE_SAFE.test(raw) ? raw : undefined;
+}
+/** Restores the exact line writeHermesKey replaces, quotes and comment included. */
+export function captureHermesKeyRestore(home) {
+    // Raw, not readHermesKey: its parse drops quoted and comment-trailed values.
+    const previous = readLines(hermesEnvPath(home)).find(definesKey);
+    return () => {
+        if (previous === undefined) {
+            removeHermesKey(home);
+            return;
+        }
+        const envPath = hermesEnvPath(home);
+        let restored = false;
+        const lines = readLines(envPath).flatMap((line) => {
+            if (!definesKey(line))
+                return [line];
+            if (restored)
+                return [];
+            restored = true;
+            return [previous];
+        });
+        writeAtomic(envPath, restored ? lines : [...lines, previous]);
+    };
+}
+export function removeHermesKey(home) {
+    const envPath = hermesEnvPath(home);
+    const lines = readLines(envPath);
+    if (!lines.length)
+        return false;
+    const kept = lines.filter((line) => !definesKey(line) && !isMarker(line));
+    if (kept.length === lines.length)
+        return false;
+    writeAtomic(envPath, kept);
+    return true;
+}
+//# sourceMappingURL=hermes-env.js.map

package/dist/lib/hermes-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermes-env.js","sourceRoot":"","sources":["../../src/lib/hermes-env.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAElE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,MAAM,aAAa,CAAC;AAChC,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,sFAAsF;AACtF,MAAM,gBAAgB,GAAG,iCAAiC,CAAC;AAC3D,2EAA2E;AAC3E,sEAAsE;AACtE,IAAI,gBAAmE,CAAC;AACxE,6DAA6D;AAC7D,MAAM,UAAU,oBAAoB;IAChC,gBAAgB,GAAG,SAAS,CAAC;AACjC,CAAC;AACD,sFAAsF;AACtF,MAAM,UAAU,iBAAiB;IAC7B,IAAI,gBAAgB;QAChB,OAAO,gBAAgB,CAAC,KAAK,CAAC;IAClC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,gFAAgF;IAChF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1D,gBAAgB,GAAG,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAS,eAAe;IACpB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;QAC1C,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE;QACxD,OAAO,EAAE,wBAAwB;KACpC,CAAC,CAAC;IACH,IAAK,MAAM,CAAC,KAA2C,EAAE,IAAI,KAAK,WAAW,EAAE,CAAC;QAC5E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QACnC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,KAAK,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvG,IAAI,CAAC,GAAG;QACJ,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACnG,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACzE,CAAC;AACD,MAAM,CAAC,MAAM,cAAc,GAAG,yBAAyB,CAAC;AACxD,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACnC,CAAC;AACD,MAAM,WAAW,GAAG,0EAA0E,CAAC;AAC/F,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAC7C,iGAAiG;AACjG,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAC3C,oFAAoF;AACpF,SAAS,UAAU,CAAC,IAAY;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACvD,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,CAAC;AACrD,CAAC;AACD,SAAS,QAAQ,CAAC,IAAY;IAC1B,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,WAAW,CAAC;AACtE,CAAC;AACD,gEAAgE;AAChE,SAAS,SAAS,CAAC,OAAe;IAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QACvB,OAAO,EAAE,CAAC;IACd,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,2DAA2D;IAC3D,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,iFAAiF;YACvG,mDAAmD,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,GAAG;SACL,QAAQ,CAAC,MAAM,CAAC;SAChB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,KAAK,CAAC,SAAS,CAAC,CAAC;AAC1B,CAAC;AACD,4FAA4F;AAC5F,SAAS,WAAW,CAAC,OAAe,EAAE,KAAe;IACjD,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,CAAC;QACD,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;IAC7C,CAAC;IACD,MAAM,CAAC;QACH,+DAA+D;IACnE,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,UAAU,EAAE,MAAM,CAAC;IAC7C,IAAI,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,yEAAyE;QACzE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACxB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,GAAW;IACpD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,iEAAiE;IACjE,IAAI,CAAC,KAAK;QACN,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACtF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,GAAG,cAAc,IAAI,KAAK,IAAI,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACZ,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YACvD,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,IAAI,EAAE,UAAU,EAAE,GAAG,WAAW,IAAI,CAAC,CAAC;QAC/D,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO;IACX,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC;IAC1B,wEAAwE;IACxE,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AACD,qDAAqD;AACrD,MAAM,UAAU,aAAa,CAAC,IAAY;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI;QACL,OAAO,SAAS,CAAC;IACrB,4DAA4D;IAC5D,MAAM,GAAG,GAAG,IAAI;SACX,IAAI,EAAE;SACN,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;SACzB,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;SAChC,IAAI,EAAE,CAAC;IACZ,OAAO,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AACD,oFAAoF;AACpF,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAChD,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjE,OAAO,GAAG,EAAE;QACR,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzB,eAAe,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO;QACX,CAAC;QACD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,QAAQ;gBACR,OAAO,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC;AACN,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,IAAY;IACxC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,MAAM;QACb,OAAO,KAAK,CAAC;IACjB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC5B,OAAO,KAAK,CAAC;IACjB,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/lib/hermes-plugin.d.ts

@@ -0,0 +1,40 @@
+/** 复刻自 tiny-fish CLI 编译产物：hermes-plugin.d.ts + hermes-plugin.impl.js */
+import type { InstallOptions } from './cli-install.js';
+import { z } from 'zod';
+export declare const HERMES_PLUGIN_SHA = "496cd63fefd982bbaa8a85ce78ef2270d700984f";
+export declare const HERMES_PLUGIN_VERSION = "0.1.0";
+export declare const HERMES_PLUGIN_MANUAL_INSTALL = "hermes plugins install springbrand-lab/springbrand-web-agent-integrations/hermes --ref 496cd63fefd982bbaa8a85ce78ef2270d700984f --enable";
+export declare function installHermesPlugin(home: string, apiKey: string, { verbose }: Pick<InstallOptions, 'verbose'>): void;
+/** Absent `enabled` reads as enabled, so never write this field-by-field. */
+export declare function writeHermesMcpEntry(home: string, mcpUrl: string): void;
+/** Retracts our row; an absent `enabled` reads as enabled, so a partial one is live. */
+export declare function removeHermesMcpEntry(home: string): void;
+/** After install only: backends must never name an absent provider. */
+export declare function setHermesWebBackends(home: string): void;
+/** Ours-only unsets: a user-chosen backend value survives the uninstall. */
+export declare function clearHermesWebBackends(home: string): void;
+declare const hermesPluginStatusSchema: z.ZodObject<{
+    ok: z.ZodBoolean;
+    api_key_configured: z.ZodBoolean;
+    api_key_env_var: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    plugin_version: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    provider_available: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+    web_backend_configured: z.ZodBoolean;
+}, z.core.$loose>;
+/** `status --json` always exits 0; a non-zero exit means the subcommand is absent. */
+export declare function readHermesPluginStatus(home: string): HermesPluginProbe;
+/** Fallback verdict input when the plugin CLI cannot answer. */
+export declare function hermesWebBackendsOurs(home: string): boolean;
+export type HermesPluginStatus = z.infer<typeof hermesPluginStatusSchema>;
+export type HermesPluginProbe = {
+    state: 'not_installed';
+} | {
+    state: 'unreachable';
+} | {
+    state: 'unparseable';
+} | {
+    state: 'ok';
+    status: HermesPluginStatus;
+};
+export {};
+//# sourceMappingURL=hermes-plugin.d.ts.map

package/dist/lib/hermes-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hermes-plugin.d.ts","sourceRoot":"","sources":["../../src/lib/hermes-plugin.ts"],"names":[],"mappings":"AAAA,wEAAwE;AAExE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAOvD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,iBAAiB,6CAA6C,CAAC;AAE5E,eAAO,MAAM,qBAAqB,UAAU,CAAC;AAI7C,eAAO,MAAM,4BAA4B,6IAAgF,CAAC;AAgD1H,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,GAAG,IAAI,CAcpH;AAkBD,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAStE;AACD,wFAAwF;AACxF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAEvD;AAID,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAGvD;AAUD,4EAA4E;AAC5E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAKzD;AACD,QAAA,MAAM,wBAAwB;;;;;;;iBAO5B,CAAC;AACH,sFAAsF;AACtF,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAetE;AACD,gEAAgE;AAChE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAGD,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,MAAM,MAAM,iBAAiB,GAAG;IAC5B,KAAK,EAAE,eAAe,CAAC;CAC1B,GAAG;IACA,KAAK,EAAE,aAAa,CAAC;CACxB,GAAG;IACA,KAAK,EAAE,aAAa,CAAC;CACxB,GAAG;IACA,KAAK,EAAE,IAAI,CAAC;IACZ,MAAM,EAAE,kBAAkB,CAAC;CAC9B,CAAC"}