@springbrand/cli 0.1.0

package/dist/lib/mcp-json-config.js

@@ -0,0 +1,164 @@
+/** 复刻自 tiny-fish CLI 编译产物：mcp-json-config.d.ts + mcp-json-config.impl.js */
+import * as fs from 'fs';
+import { matchesCliKey } from './auth.js';
+function isPlainRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+// Footgun: the key lands plaintext in mcp.json (0600) — per-device keys are the GA hardening.
+// `Authorization: Bearer` is the only place the Gateway reads a key from; a key in any other
+// header reaches `/mcp` as no credential at all and the client is pushed back into OAuth.
+export function buildSpringbrandServerEntry(mcpUrl, apiKey) {
+    return apiKey ? { url: mcpUrl, headers: { Authorization: `Bearer ${apiKey}` } } : { url: mcpUrl };
+}
+function parseMcpJson(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        if (!isPlainRecord(parsed))
+            return { ok: false, error: 'mcp.json root is not a JSON object' };
+        if ('mcpServers' in parsed && !isPlainRecord(parsed.mcpServers)) {
+            return { ok: false, error: 'mcp.json mcpServers is not a JSON object' };
+        }
+        return { ok: true, value: parsed };
+    }
+    catch (e) {
+        return { ok: false, error: e instanceof Error ? e.message : String(e) };
+    }
+}
+// Non-ENOENT read failures count as corruption: skip, never clobber.
+function readExisting(target) {
+    let raw;
+    try {
+        raw = fs.readFileSync(target.file(), 'utf8');
+    }
+    catch (e) {
+        if (e.code === 'ENOENT')
+            return { parsed: {} };
+        return { error: e instanceof Error ? e.message : String(e) };
+    }
+    const parsed = parseMcpJson(raw);
+    if (!parsed.ok)
+        return { error: parsed.error ?? 'mcp.json could not be parsed' };
+    return { raw, parsed: parsed.value };
+}
+/** Dry-run description of the pending write; touches nothing. */
+export function planWrite(target, mcpUrl, apiKey) {
+    const existing = readExisting(target);
+    const filePath = target.file();
+    if ('error' in existing) {
+        return `${filePath}: existing file is corrupt (${existing.error}) — would skip and leave it untouched`;
+    }
+    const authNote = apiKey
+        ? ' with an API-key header — the key is stored in plaintext in that file (value not shown here)'
+        : '';
+    const servers = existing.parsed.mcpServers;
+    const current = isPlainRecord(servers) ? servers[target.serverKey] : undefined;
+    if (JSON.stringify(current) === JSON.stringify(buildSpringbrandServerEntry(mcpUrl, apiKey))) {
+        return `${filePath}: already has the ${target.serverKey} MCP entry — no change`;
+    }
+    return existing.raw === undefined
+        ? `${filePath}: would create with a "${target.serverKey}" MCP server entry${authNote}`
+        : `${filePath}: would back up to a timestamped copy, then merge in the "${target.serverKey}" MCP server entry${authNote}`;
+}
+// omp expands `${VAR}` / `${VAR:-default}` header values at load.
+const ENV_TEMPLATE_VALUE = /^\$\{([A-Za-z_][A-Za-z0-9_]*)(?::-[^}]*)?\}$/;
+/** Reports the header's shape, never its value. */
+export function readSpringbrandEntry(target) {
+    const existing = readExisting(target);
+    if ('error' in existing)
+        return { present: false, hasApiKeyHeader: false, error: existing.error };
+    const servers = existing.parsed.mcpServers;
+    const entry = isPlainRecord(servers) ? servers[target.serverKey] : undefined;
+    if (!isPlainRecord(entry))
+        return { present: false, hasApiKeyHeader: false };
+    const key = readKeyHeader(entry.headers, target.keyHeader);
+    const templateVar = key ? ENV_TEMPLATE_VALUE.exec(key.value)?.[1] : undefined;
+    return {
+        present: true,
+        hasApiKeyHeader: key !== undefined,
+        ...(entry.enabled === false ? { enabled: false } : {}),
+        ...(key?.legacy ? { legacyKeyHeader: true } : {}),
+        ...(matchesCliKey(key?.value) ? { keyMatchesCliKey: true } : {}),
+        ...(templateVar ? { keyTemplateVar: templateVar } : {}),
+        ...(typeof entry.url === 'string' ? { url: entry.url } : {}),
+    };
+}
+// What CLIs before the Bearer switch wrote. The Gateway never read it, so an entry carrying one
+// is a broken install rather than a keyless one, and saying so earns the user a repair.
+const LEGACY_KEY_HEADER = { name: 'x-api-key', valuePrefix: '' };
+/** Reports the key header's shape, never its value. */
+function readKeyHeader(headers, keyHeader) {
+    const current = keyHeader ?? { name: 'Authorization', valuePrefix: 'Bearer ' };
+    return findKeyHeader(headers, current) ?? findKeyHeader(headers, LEGACY_KEY_HEADER, true);
+}
+function findKeyHeader(headers, keyHeader, legacy = false) {
+    const { name, valuePrefix = '' } = keyHeader;
+    // Header names are case-insensitive, and this file is hand-editable — matching only the
+    // casing we write would understate auth mode for a user who typed it differently.
+    const found = isPlainRecord(headers)
+        ? Object.entries(headers).find((entry) => entry[0].toLowerCase() === name.toLowerCase() && typeof entry[1] === 'string')
+        : undefined;
+    if (!found)
+        return undefined;
+    // The scheme is case-insensitive too, and a hand-edited header may omit it entirely.
+    const headerValue = found[1];
+    if (typeof headerValue !== 'string')
+        return undefined;
+    const hasPrefix = headerValue.toLowerCase().startsWith(valuePrefix.toLowerCase());
+    return {
+        value: hasPrefix ? headerValue.slice(valuePrefix.length) : headerValue,
+        ...(legacy ? { legacy: true } : {}),
+    };
+}
+// Backup, then atomic temp+rename; pid avoids same-millisecond backup collisions.
+function commitServers(target, existing, servers) {
+    const filePath = target.file();
+    fs.mkdirSync(target.dir(), { recursive: true, mode: 0o700 });
+    let backupPath;
+    if (existing.raw !== undefined) {
+        backupPath = `${filePath}.bak-${Date.now()}-${process.pid}`;
+        fs.writeFileSync(backupPath, existing.raw, { mode: 0o600 });
+    }
+    const next = { ...existing.parsed, mcpServers: servers };
+    const tmpPath = `${filePath}.tmp-${process.pid}`;
+    fs.writeFileSync(tmpPath, JSON.stringify(next, null, 2) + '\n', { mode: 0o600 });
+    try {
+        fs.renameSync(tmpPath, filePath);
+    }
+    catch (e) {
+        fs.rmSync(tmpPath, { force: true });
+        throw e;
+    }
+    return { status: 'written', backupPath };
+}
+/** Merges only the target's key; skips unreadable/corrupt files rather than clobber. */
+export function writeMcpConfig(target, mcpUrl, apiKey) {
+    const existing = readExisting(target);
+    if ('error' in existing)
+        return { status: 'corrupt_skip', error: existing.error };
+    const servers = isPlainRecord(existing.parsed.mcpServers)
+        ? { ...existing.parsed.mcpServers }
+        : {};
+    const nextEntry = buildSpringbrandServerEntry(mcpUrl, apiKey);
+    if (JSON.stringify(servers[target.serverKey]) === JSON.stringify(nextEntry)) {
+        return { status: 'unchanged' };
+    }
+    const repaired = target.serverKey in servers;
+    servers[target.serverKey] = nextEntry;
+    return { ...commitServers(target, existing, servers), repaired };
+}
+/** Removes only the target's key. */
+export function removeServer(target) {
+    const existing = readExisting(target);
+    if ('error' in existing)
+        return { status: 'corrupt_skip', error: existing.error };
+    if (existing.raw === undefined)
+        return { status: 'unchanged' };
+    const servers = isPlainRecord(existing.parsed.mcpServers)
+        ? { ...existing.parsed.mcpServers }
+        : {};
+    if (!(target.serverKey in servers))
+        return { status: 'unchanged' };
+    delete servers[target.serverKey];
+    return commitServers(target, existing, servers);
+}
+//# sourceMappingURL=mcp-json-config.js.map

package/dist/lib/mcp-json-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-json-config.js","sourceRoot":"","sources":["../../src/lib/mcp-json-config.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAE5E,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAY1C,SAAS,aAAa,CAAC,KAAc;IACjC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC;AACD,8FAA8F;AAC9F,6FAA6F;AAC7F,0FAA0F;AAC1F,MAAM,UAAU,2BAA2B,CAAC,MAAc,EAAE,MAAe;IACvE,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACtG,CAAC;AACD,SAAS,YAAY,CAAC,GAAW;IAC7B,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACtE,IAAI,YAAY,IAAI,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,CAAC;AACL,CAAC;AACD,qEAAqE;AACrE,SAAS,YAAY,CAAC,MAAqB;IACvC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACD,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,CAAC,EAAE,CAAC;QACP,IAAK,CAAwB,CAAC,IAAI,KAAK,QAAQ;YAC3C,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,EAAE;QACV,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,8BAA8B,EAAE,CAAC;IACrE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAwB,EAAE,CAAC;AAC5D,CAAC;AACD,iEAAiE;AACjE,MAAM,UAAU,SAAS,CAAC,MAAqB,EAAE,MAAc,EAAE,MAAe;IAC5E,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QACtB,OAAO,GAAG,QAAQ,+BAA+B,QAAQ,CAAC,KAAK,uCAAuC,CAAC;IAC3G,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM;QACnB,CAAC,CAAC,8FAA8F;QAChG,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;IAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QAC1F,OAAO,GAAG,QAAQ,qBAAqB,MAAM,CAAC,SAAS,wBAAwB,CAAC;IACpF,CAAC;IACD,OAAO,QAAQ,CAAC,GAAG,KAAK,SAAS;QAC7B,CAAC,CAAC,GAAG,QAAQ,0BAA0B,MAAM,CAAC,SAAS,qBAAqB,QAAQ,EAAE;QACtF,CAAC,CAAC,GAAG,QAAQ,6DAA6D,MAAM,CAAC,SAAS,qBAAqB,QAAQ,EAAE,CAAC;AAClI,CAAC;AACD,kEAAkE;AAClE,MAAM,kBAAkB,GAAG,8CAA8C,CAAC;AAC1E,mDAAmD;AACnD,MAAM,UAAU,oBAAoB,CAAC,MAAqB;IACtD,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,OAAO,IAAI,QAAQ;QACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC7E,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;IAC3C,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACtD,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,OAAO;QACH,OAAO,EAAE,IAAI;QACb,eAAe,EAAE,GAAG,KAAK,SAAS;QAClC,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;AACN,CAAC;AACD,gGAAgG;AAChG,wFAAwF;AACxF,MAAM,iBAAiB,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AACjE,uDAAuD;AACvD,SAAS,aAAa,CAAC,OAAgB,EAAE,SAAqC;IAC1E,MAAM,OAAO,GAAG,SAAS,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IAC/E,OAAO,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;AAC9F,CAAC;AACD,SAAS,aAAa,CAAC,OAAgB,EAAE,SAAiD,EAAE,MAAM,GAAG,KAAK;IACtG,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,EAAE,EAAE,GAAG,SAAS,CAAC;IAC7C,wFAAwF;IACxF,kFAAkF;IAClF,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;QACxH,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,KAAK;QACN,OAAO,SAAS,CAAC;IACrB,qFAAqF;IACrF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,OAAO,WAAW,KAAK,QAAQ;QAC/B,OAAO,SAAS,CAAC;IACrB,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC;IAClF,OAAO;QACH,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW;QACtE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;AACN,CAAC;AACD,kFAAkF;AAClF,SAAS,aAAa,CAAC,MAAqB,EAAE,QAAkE,EAAE,OAAgC;IAC9I,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,IAAI,UAAU,CAAC;IACf,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7B,UAAU,GAAG,GAAG,QAAQ,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC5D,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACzD,MAAM,OAAO,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACjD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC;QACD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,EAAE,CAAC;QACP,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAkB,EAAE,UAAU,EAAE,CAAC;AACtD,CAAC;AACD,wFAAwF;AACxF,MAAM,UAAU,cAAc,CAAC,MAAqB,EAAE,MAAc,EAAE,MAAe;IACjF,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,OAAO,IAAI,QAAQ;QACnB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;QACrD,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE;QACnC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,SAAS,GAAG,2BAA2B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACnC,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC;IAC7C,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;IACtC,OAAO,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC;AACrE,CAAC;AACD,qCAAqC;AACrC,MAAM,UAAU,YAAY,CAAC,MAAqB;IAC9C,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,OAAO,IAAI,QAAQ;QACnB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC7D,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS;QAC1B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;QACrD,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE;QACnC,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACnC,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjC,OAAO,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC"}

package/dist/lib/notice.d.ts

@@ -0,0 +1,13 @@
+/** 复刻自 tiny-fish CLI 编译产物：notice.d.ts + notice.impl.js */
+import type { Command } from 'commander';
+/** Test-only: the capture slot and the once-per-invocation latch are module state. */
+export declare function resetNoticeState(): void;
+/** Records the first notice seen; printing is deferred so it lands at the end of a command. */
+export declare function captureNotice(headers: Headers): void;
+/** Advisory only, never changes stdout, the exit code, or control flow. */
+export declare function emitNotice(): void;
+/** For commands that are the fix themselves, such as `upgrade`, where the nudge is noise. */
+export declare function suppressNotice(): void;
+/** postAction covers clean completions, the exit hook covers the process.exit and rejection paths, the latch keeps it to one. */
+export declare function installNoticeEmit(program: Command): () => NodeJS.Process;
+//# sourceMappingURL=notice.d.ts.map

package/dist/lib/notice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notice.d.ts","sourceRoot":"","sources":["../../src/lib/notice.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAE1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBzC,sFAAsF;AACtF,wBAAgB,gBAAgB,IAAI,IAAI,CAGvC;AACD,+FAA+F;AAC/F,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAqBpD;AASD,2EAA2E;AAC3E,wBAAgB,UAAU,IAAI,IAAI,CAUjC;AACD,6FAA6F;AAC7F,wBAAgB,cAAc,IAAI,IAAI,CAGrC;AACD,iIAAiI;AACjI,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,wBAKjD"}

package/dist/lib/notice.js

@@ -0,0 +1,73 @@
+/** 复刻自 tiny-fish CLI 编译产物：notice.d.ts + notice.impl.js */
+import { CLI_VERSION } from './constants.js';
+import { detectHumanInitiated } from './harness.js';
+import { err, sanitizeLine, warnLine } from './output.js';
+const NOTICE_HEADER = 'x-sp-notice';
+const LEVEL_HEADER = 'x-sp-notice-level';
+const LATEST_HEADER = 'x-sp-notice-latest';
+const MAX_LENGTH = 300;
+const PLAIN_VERSION = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)$/;
+const VALID_LEVELS = new Set(['required', 'recommended']);
+let captured;
+let printed = false;
+/** Test-only: the capture slot and the once-per-invocation latch are module state. */
+export function resetNoticeState() {
+    captured = undefined;
+    printed = false;
+}
+/** Records the first notice seen; printing is deferred so it lands at the end of a command. */
+export function captureNotice(headers) {
+    if (captured)
+        return;
+    if (typeof headers?.get !== 'function')
+        return;
+    const message = sanitizeLine(headers.get(NOTICE_HEADER) ?? '')
+        .trim()
+        .slice(0, MAX_LENGTH);
+    if (!message)
+        return;
+    const rawLevel = headers.get(LEVEL_HEADER)?.trim().toLowerCase();
+    const rawLatest = headers.get(LATEST_HEADER)?.trim() ?? '';
+    // Spread rather than `level: undefined`, which exactOptionalPropertyTypes rejects.
+    const level = rawLevel && VALID_LEVELS.has(rawLevel)
+        ? rawLevel
+        : undefined;
+    captured = {
+        message,
+        ...(level ? { level } : {}),
+        ...(PLAIN_VERSION.test(rawLatest) ? { latest: rawLatest } : {}),
+    };
+}
+/** Built here, not by the server, so nothing it sends can reach an agent's context as instructions. */
+function agentMessage({ level, latest }) {
+    // Latest is the registry version, not the required floor; only the soft level names it.
+    const target = latest ? ` (latest ${latest})` : '';
+    return level === 'required'
+        ? `This SpringBrand CLI (${CLI_VERSION}) is below the required minimum. Run: sp upgrade`
+        : `A SpringBrand CLI update is available${target} (you have ${CLI_VERSION}). Run: sp upgrade`;
+}
+/** Advisory only, never changes stdout, the exit code, or control flow. */
+export function emitNotice() {
+    if (printed || !captured)
+        return;
+    printed = true;
+    const { message, ...rest } = captured;
+    if (detectHumanInitiated()) {
+        warnLine(message);
+        return;
+    }
+    err({ notice: agentMessage(rest), ...rest });
+}
+/** For commands that are the fix themselves, such as `upgrade`, where the nudge is noise. */
+export function suppressNotice() {
+    captured = undefined;
+    printed = true;
+}
+/** postAction covers clean completions, the exit hook covers the process.exit and rejection paths, the latch keeps it to one. */
+export function installNoticeEmit(program) {
+    const backstop = () => emitNotice();
+    program.hook('postAction', () => emitNotice());
+    process.once('exit', backstop);
+    return () => process.removeListener('exit', backstop);
+}
+//# sourceMappingURL=notice.js.map

package/dist/lib/notice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notice.js","sourceRoot":"","sources":["../../src/lib/notice.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAG1D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC1D,MAAM,aAAa,GAAG,aAAa,CAAC;AACpC,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,MAAM,aAAa,GAAG,kDAAkD,CAAC;AACzE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;AAM1D,IAAI,QAAoC,CAAC;AACzC,IAAI,OAAO,GAAG,KAAK,CAAC;AACpB,sFAAsF;AACtF,MAAM,UAAU,gBAAgB;IAC5B,QAAQ,GAAG,SAAS,CAAC;IACrB,OAAO,GAAG,KAAK,CAAC;AACpB,CAAC;AACD,+FAA+F;AAC/F,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC1C,IAAI,QAAQ;QACR,OAAO;IACX,IAAI,OAAO,OAAO,EAAE,GAAG,KAAK,UAAU;QAClC,OAAO;IACX,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;SACzD,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1B,IAAI,CAAC,OAAO;QACR,OAAO;IACX,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3D,mFAAmF;IACnF,MAAM,KAAK,GAAG,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChD,CAAC,CAAE,QAAoC;QACvC,CAAC,CAAC,SAAS,CAAC;IAChB,QAAQ,GAAG;QACP,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC;AACN,CAAC;AACD,uGAAuG;AACvG,SAAS,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAA4C;IAC7E,wFAAwF;IACxF,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,OAAO,KAAK,KAAK,UAAU;QACvB,CAAC,CAAC,yBAAyB,WAAW,kDAAkD;QACxF,CAAC,CAAC,wCAAwC,MAAM,cAAc,WAAW,oBAAoB,CAAC;AACtG,CAAC;AACD,2EAA2E;AAC3E,MAAM,UAAU,UAAU;IACtB,IAAI,OAAO,IAAI,CAAC,QAAQ;QACpB,OAAO;IACX,OAAO,GAAG,IAAI,CAAC;IACf,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;IACtC,IAAI,oBAAoB,EAAE,EAAE,CAAC;QACzB,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClB,OAAO;IACX,CAAC;IACD,GAAG,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC;AACD,6FAA6F;AAC7F,MAAM,UAAU,cAAc;IAC1B,QAAQ,GAAG,SAAS,CAAC;IACrB,OAAO,GAAG,IAAI,CAAC;AACnB,CAAC;AACD,iIAAiI;AACjI,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAC9C,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC;IACpC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC1D,CAAC"}

package/dist/lib/omp-config.d.ts

@@ -0,0 +1,18 @@
+/** 复刻自 tiny-fish CLI 编译产物：omp-config.d.ts + omp-config.impl.js */
+import type { McpJsonServerEntry, McpJsonTarget, McpJsonWriteResult } from './mcp-json-config.js';
+/** Tests share one process; the resolver result must not. */
+export declare function resetOmpAgentDirCache(): void;
+/** Profiles move the dir; a guessed path is written unread. */
+export declare function ompAgentDir(): string | undefined;
+/** Undefined means unresolved; connect fails closed via requireOmpTarget. */
+export declare function ompMcpTarget(): McpJsonTarget | undefined;
+export declare function ompMcpPath(): string;
+/** Reports the header's shape, never its value; undefined means unresolved. */
+export declare function readOmpSpringbrandEntry(): McpJsonServerEntry | undefined;
+/** Merges only the `springbrand` key; throws when the dir is unresolved. */
+export declare function writeOmpMcpConfig(mcpUrl: string, apiKey?: string): McpJsonWriteResult;
+/** Dry-run description of the pending write; touches nothing. */
+export declare function planOmpWrite(mcpUrl: string, apiKey?: string): string;
+/** Removes only the `springbrand` key. */
+export declare function removeOmpMcpServer(): McpJsonWriteResult;
+//# sourceMappingURL=omp-config.d.ts.map

package/dist/lib/omp-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omp-config.d.ts","sourceRoot":"","sources":["../../src/lib/omp-config.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAElE,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AASlG,6DAA6D;AAC7D,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AACD,+DAA+D;AAC/D,wBAAgB,WAAW,IAAI,MAAM,GAAG,SAAS,CAGhD;AAeD,6EAA6E;AAC7E,wBAAgB,YAAY,IAAI,aAAa,GAAG,SAAS,CAKxD;AAQD,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AACD,+EAA+E;AAC/E,wBAAgB,uBAAuB,IAAI,kBAAkB,GAAG,SAAS,CAGxE;AACD,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAErF;AACD,iEAAiE;AACjE,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAKpE;AACD,0CAA0C;AAC1C,wBAAgB,kBAAkB,IAAI,kBAAkB,CAKvD"}

package/dist/lib/omp-config.js

@@ -0,0 +1,73 @@
+/** 复刻自 tiny-fish CLI 编译产物：omp-config.d.ts + omp-config.impl.js */
+import * as path from 'path';
+import spawn from 'cross-spawn';
+import { ConnectStepError } from './connect-runtime.js';
+import { HARNESS_PROBE_TIMEOUT_MS } from './constants.js';
+import { planWrite, readSpringbrandEntry, removeServer, writeMcpConfig, } from './mcp-json-config.js';
+const UNRESOLVED_REASON = '`omp config path` did not report a config directory';
+// Cached: every later read must agree with the write.
+let cachedAgentDir;
+/** Tests share one process; the resolver result must not. */
+export function resetOmpAgentDirCache() {
+    cachedAgentDir = undefined;
+}
+/** Profiles move the dir; a guessed path is written unread. */
+export function ompAgentDir() {
+    cachedAgentDir ??= { dir: resolveAgentDir() };
+    return cachedAgentDir.dir;
+}
+function resolveAgentDir() {
+    const result = spawn.sync('omp', ['config', 'path'], {
+        encoding: 'utf8',
+        timeout: HARNESS_PROBE_TIMEOUT_MS,
+    });
+    if (result.error || result.status !== 0)
+        return undefined;
+    const dir = (result.stdout ?? '')
+        .split('\n')
+        .map((line) => line.trim())
+        .filter(Boolean)
+        .at(-1);
+    return dir && path.isAbsolute(dir) ? dir : undefined;
+}
+/** Undefined means unresolved; connect fails closed via requireOmpTarget. */
+export function ompMcpTarget() {
+    const dir = ompAgentDir();
+    if (!dir)
+        return undefined;
+    return { serverKey: 'springbrand', dir: () => dir, file: () => path.join(dir, 'mcp.json') };
+}
+function requireOmpTarget() {
+    const target = ompMcpTarget();
+    if (target)
+        return target;
+    throw new ConnectStepError("Could not locate omp's config directory: `omp config path` did not print one. " +
+        'Check that omp is installed and `omp config path` works, then re-run: sp connect omp', 'invalid_config', { failureDetail: 'omp_agent_dir_unresolved' });
+}
+export function ompMcpPath() {
+    return requireOmpTarget().file();
+}
+/** Reports the header's shape, never its value; undefined means unresolved. */
+export function readOmpSpringbrandEntry() {
+    const target = ompMcpTarget();
+    return target ? readSpringbrandEntry(target) : undefined;
+}
+/** Merges only the `springbrand` key; throws when the dir is unresolved. */
+export function writeOmpMcpConfig(mcpUrl, apiKey) {
+    return writeMcpConfig(requireOmpTarget(), mcpUrl, apiKey);
+}
+/** Dry-run description of the pending write; touches nothing. */
+export function planOmpWrite(mcpUrl, apiKey) {
+    const target = ompMcpTarget();
+    if (!target)
+        return `${UNRESOLVED_REASON} — connect omp would fail the same way`;
+    return planWrite(target, mcpUrl, apiKey);
+}
+/** Removes only the `springbrand` key. */
+export function removeOmpMcpServer() {
+    const target = ompMcpTarget();
+    if (!target)
+        return { status: 'corrupt_skip', error: UNRESOLVED_REASON };
+    return removeServer(target);
+}
+//# sourceMappingURL=omp-config.js.map

package/dist/lib/omp-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"omp-config.js","sourceRoot":"","sources":["../../src/lib/omp-config.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAGlE,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,MAAM,aAAa,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,YAAY,EAAE,cAAc,GAAG,MAAM,sBAAsB,CAAC;AACtG,MAAM,iBAAiB,GAAG,qDAAqD,CAAC;AAChF,sDAAsD;AACtD,IAAI,cAAc,CAAC;AACnB,6DAA6D;AAC7D,MAAM,UAAU,qBAAqB;IACjC,cAAc,GAAG,SAAS,CAAC;AAC/B,CAAC;AACD,+DAA+D;AAC/D,MAAM,UAAU,WAAW;IACvB,cAAc,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,CAAC;IAC9C,OAAO,cAAc,CAAC,GAAG,CAAC;AAC9B,CAAC;AACD,SAAS,eAAe;IACpB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE;QACjD,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,wBAAwB;KACpC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QACnC,OAAO,SAAS,CAAC;IACrB,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;SAC5B,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC;SACf,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AACD,6EAA6E;AAC7E,MAAM,UAAU,YAAY;IACxB,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,IAAI,CAAC,GAAG;QACJ,OAAO,SAAS,CAAC;IACrB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;AAChG,CAAC;AACD,SAAS,gBAAgB;IACrB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,IAAI,MAAM;QACN,OAAO,MAAM,CAAC;IAClB,MAAM,IAAI,gBAAgB,CAAC,gFAAgF;QACvG,sFAAsF,EAAE,gBAAgB,EAAE,EAAE,aAAa,EAAE,0BAA0B,EAAE,CAAC,CAAC;AACjK,CAAC;AACD,MAAM,UAAU,UAAU;IACtB,OAAO,gBAAgB,EAAE,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC;AACD,+EAA+E;AAC/E,MAAM,UAAU,uBAAuB;IACnC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,OAAO,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AACD,4EAA4E;AAC5E,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,MAAe;IAC7D,OAAO,cAAc,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC9D,CAAC;AACD,iEAAiE;AACjE,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,MAAe;IACxD,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,IAAI,CAAC,MAAM;QACP,OAAO,GAAG,iBAAiB,wCAAwC,CAAC;IACxE,OAAO,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AACD,0CAA0C;AAC1C,MAAM,UAAU,kBAAkB;IAC9B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,IAAI,CAAC,MAAM;QACP,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAChE,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC"}

package/dist/lib/output.d.ts

@@ -0,0 +1,22 @@
+/** 复刻自 tiny-fish CLI 编译产物：output.d.ts + output.impl.js */
+export declare class ApiError extends Error {
+    readonly status: number;
+    readonly code?: string | undefined;
+    constructor(status: number, message: string, code?: string | undefined);
+}
+export declare function out(data: unknown): void;
+/** The only writer for untrusted text: strips ANSI and C0/C1 controls. */
+export declare function sanitizeLine(text: string): string;
+/** Every version the route caps at 32 printable ASCII chars. */
+export declare function boundedVersion(text: string): string | undefined;
+export declare function outLine(line: string): void;
+/** `connect --all` nests a harness's own lines under its step header. */
+export declare function setErrIndent(prefix: string): void;
+export declare function errLine(line: string): void;
+/** Advisory stderr line, yellow on a terminal and plain everywhere else so piped output stays clean. */
+export declare function warnLine(line: string): void;
+export declare function err(data: unknown): void;
+export declare function handleApiError(e: unknown): never;
+/** Undefined, not a throw: callers hand the value to a Zod safeParse. */
+export declare function parseJson(text: string): unknown;
+//# sourceMappingURL=output.d.ts.map

package/dist/lib/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAG1D,qBAAa,QAAS,SAAQ,KAAK;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;gBACvB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS;CAMzE;AACD,wBAAgB,GAAG,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAEvC;AACD,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGjD;AACD,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAO/D;AACD,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAE1C;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEjD;AACD,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAI1C;AAID,wGAAwG;AACxG,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAI3C;AACD,wBAAgB,GAAG,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAIvC;AACD,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,KAAK,CAyBhD;AACD,yEAAyE;AACzE,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAO/C"}

package/dist/lib/output.js

@@ -0,0 +1,92 @@
+/** 复刻自 tiny-fish CLI 编译产物：output.d.ts + output.impl.js */
+import { stripVTControlCharacters } from 'node:util';
+export class ApiError extends Error {
+    status;
+    code;
+    constructor(status, message, code) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.name = 'ApiError';
+    }
+}
+export function out(data) {
+    process.stdout.write(JSON.stringify(data) + '\n');
+}
+/** The only writer for untrusted text: strips ANSI and C0/C1 controls. */
+export function sanitizeLine(text) {
+    // eslint-disable-next-line no-control-regex
+    return stripVTControlCharacters(text).replace(/[\u0000-\u0008\u000b-\u001f\u007f-\u009f]/g, '');
+}
+/** Every version the route caps at 32 printable ASCII chars. */
+export function boundedVersion(text) {
+    // First line only: sanitizeLine keeps newlines, so stripping splices lines.
+    const version = sanitizeLine(text)
+        .split('\n')[0]
+        .replace(/[^\x20-\x7E]/g, '')
+        .trim();
+    return version ? version.slice(0, 32) : undefined;
+}
+export function outLine(line) {
+    process.stdout.write(sanitizeLine(line) + '\n');
+}
+let errIndent = '';
+/** `connect --all` nests a harness's own lines under its step header. */
+export function setErrIndent(prefix) {
+    errIndent = prefix;
+}
+export function errLine(line) {
+    const text = sanitizeLine(line);
+    // Per line, not once: a replayed capture carries newlines.
+    process.stderr.write((errIndent ? text.replace(/^(?=.)/gm, errIndent) : text) + '\n');
+}
+const WARN_ON = '\x1b[33m';
+const WARN_OFF = '\x1b[39m';
+const VAULT_RECONNECT_REQUIRED = 'VAULT_RECONNECT_REQUIRED';
+/** Advisory stderr line, yellow on a terminal and plain everywhere else so piped output stays clean. */
+export function warnLine(line) {
+    const text = sanitizeLine(line);
+    const colour = Boolean(process.stderr.isTTY) && !process.env['NO_COLOR'];
+    process.stderr.write(colour ? `${WARN_ON}${text}${WARN_OFF}\n` : `${text}\n`);
+}
+export function err(data) {
+    const payload = typeof data === 'string' ? { error: data } : data;
+    const serialized = JSON.stringify(payload) ?? 'undefined';
+    process.stderr.write(sanitizeLine(serialized) + '\n');
+}
+export function handleApiError(e) {
+    if (e instanceof ApiError) {
+        const payload = {
+            error: e.message,
+            status: e.status,
+        };
+        if (e.code)
+            payload.code = e.code;
+        if (e.code === VAULT_RECONNECT_REQUIRED) {
+            payload.hint =
+                'Reconnect the provider with `sp vault connection add --provider 1password` or `sp vault connection add --provider bitwarden --client-id <client-id>`. Vault secrets are read from SPRINGBRAND_VAULT_TOKEN, SPRINGBRAND_VAULT_CLIENT_SECRET, and SPRINGBRAND_VAULT_MASTER_PASSWORD.';
+        }
+        else if (e.status === 401) {
+            payload.hint =
+                'Clear the SPRINGBRAND_API_KEY environment variable, run `sp auth login`, then try again.';
+        }
+        err(payload);
+    }
+    else if (e instanceof Error) {
+        err({ error: e.message });
+    }
+    else {
+        err({ error: String(e) });
+    }
+    process.exit(1);
+}
+/** Undefined, not a throw: callers hand the value to a Zod safeParse. */
+export function parseJson(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=output.js.map

package/dist/lib/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAE1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AACrD,MAAM,OAAO,QAAS,SAAQ,KAAK;IACtB,MAAM,CAAS;IACf,IAAI,CAAsB;IACnC,YAAY,MAAc,EAAE,OAAe,EAAE,IAAyB;QAClE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IAC3B,CAAC;CACJ;AACD,MAAM,UAAU,GAAG,CAAC,IAAa;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AACtD,CAAC;AACD,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,IAAY;IACrC,4CAA4C;IAC5C,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;AACpG,CAAC;AACD,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,IAAY;IACvC,4EAA4E;IAC5E,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC;SAC7B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SACd,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,IAAI,EAAE,CAAC;IACZ,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,IAAY;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AACpD,CAAC;AACD,IAAI,SAAS,GAAG,EAAE,CAAC;AACnB,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,MAAc;IACvC,SAAS,GAAG,MAAM,CAAC;AACvB,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,2DAA2D;IAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AAC1F,CAAC;AACD,MAAM,OAAO,GAAG,UAAU,CAAC;AAC3B,MAAM,QAAQ,GAAG,UAAU,CAAC;AAC5B,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAC5D,wGAAwG;AACxG,MAAM,UAAU,QAAQ,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,IAAI,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AAClF,CAAC;AACD,MAAM,UAAU,GAAG,CAAC,IAAa;IAC7B,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC;IAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;AAC1D,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,CAAU;IACrC,IAAI,CAAC,YAAY,QAAQ,EAAE,CAAC;QACxB,MAAM,OAAO,GAAoE;YAC7E,KAAK,EAAE,CAAC,CAAC,OAAO;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM;SACnB,CAAC;QACF,IAAI,CAAC,CAAC,IAAI;YACN,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI;gBACR,oRAAoR,CAAC;QAC7R,CAAC;aACI,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI;gBACR,0FAA0F,CAAC;QACnG,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,CAAC;IACjB,CAAC;SACI,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;QAC1B,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9B,CAAC;SACI,CAAC;QACF,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AACD,yEAAyE;AACzE,MAAM,UAAU,SAAS,CAAC,IAAY;IAClC,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,CAAC;QACH,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC"}

package/dist/lib/pi-config.d.ts

@@ -0,0 +1,27 @@
+/** 复刻自 tiny-fish CLI 编译产物：pi-config.d.ts + pi-config.impl.js */
+import type { McpJsonServerEntry, McpJsonWriteResult } from './mcp-json-config.js';
+/** Mirrors pi's own getAgentDir: the override wins, else `~/.pi/agent`. */
+export declare function piAgentDir(): string;
+export declare function piMcpPath(): string;
+/** Reports the header's shape, never its value. */
+export declare function readPiSpringbrandEntry(): McpJsonServerEntry;
+/** Merges only the `springbrand` key. */
+export declare function writePiMcpConfig(mcpUrl: string, apiKey?: string): McpJsonWriteResult;
+/** Dry-run description of the pending write; touches nothing. */
+export declare function planPiWrite(mcpUrl: string, apiKey?: string): string;
+/** Removes only the `springbrand` key. */
+export declare function removePiMcpServer(): McpJsonWriteResult;
+export declare const PI_ADAPTER_INSTALL_COMMAND = "pi install npm:pi-mcp-adapter";
+/** Core pi has no MCP, so without this package the entry we write is never read. */
+export declare function piMcpAdapterState(cwd?: string): PiAdapterState;
+/** Tests share one process; the probe result must not. */
+export declare function resetPiBinaryCache(): void;
+/** npm ships an unrelated `pi` that prints `3`; only a semver answer is the harness. */
+export declare function piBinaryIsPi(): boolean;
+/** `skills` hardcodes the default dir, so an override leaves the skill where pi will not look. */
+export declare function piSkillDirMismatch(): {
+    installedTo: string;
+    readFrom: string;
+} | undefined;
+export type PiAdapterState = 'installed' | 'absent' | 'unknown';
+//# sourceMappingURL=pi-config.d.ts.map

package/dist/lib/pi-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-config.d.ts","sourceRoot":"","sources":["../../src/lib/pi-config.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAEhE,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAenF,2EAA2E;AAC3E,wBAAgB,UAAU,IAAI,MAAM,CAGnC;AAOD,wBAAgB,SAAS,IAAI,MAAM,CAElC;AACD,mDAAmD;AACnD,wBAAgB,sBAAsB,IAAI,kBAAkB,CAE3D;AACD,yCAAyC;AACzC,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAEpF;AACD,iEAAiE;AACjE,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAEnE;AACD,0CAA0C;AAC1C,wBAAgB,iBAAiB,IAAI,kBAAkB,CAEtD;AACD,eAAO,MAAM,0BAA0B,kCAAkC,CAAC;AA4B1E,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,cAAc,CAS9D;AAGD,0DAA0D;AAC1D,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AACD,wFAAwF;AACxF,wBAAgB,YAAY,IAAI,OAAO,CAGtC;AAUD,kGAAkG;AAClG,wBAAgB,kBAAkB,IAAI;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CACpB,GAAG,SAAS,CAMZ;AAGD,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC"}