@tabai/sdk 0.2.0

package/dist/cli/client-config.js

@@ -0,0 +1,382 @@
+/**
+ * Where an MCP client keeps its server list, and how `tab connect` edits it.
+ *
+ * ## The claim this file has to earn
+ *
+ * Adopting Tab costs one line of configuration. That line is a `mcpServers`
+ * stanza in a file the client already owns, and `tab connect` writes it. The
+ * claim is only worth making if the write is safe to run, so three properties
+ * are enforced here rather than documented:
+ *
+ * - **Idempotent.** Running it twice writes once. The second run compares the
+ *   merged document against what is on disk and, finding no change, writes
+ *   nothing and takes no backup. A connect command that rewrote the file every
+ *   time would churn a file the client also writes.
+ * - **Backed up.** Any run that does change the file copies the previous
+ *   contents beside it first, named with the instant. This is somebody's editor
+ *   configuration, and it may hold servers this package has never heard of.
+ * - **Never a key.** {@link assertNoSecret} walks the stanza before it is
+ *   written and refuses on anything key-shaped. The settlement signing key is
+ *   read from the environment at the moment a Settlement is signed. It does not
+ *   belong in a JSON file that a desktop client rewrites, syncs, and quotes in
+ *   its own logs.
+ *
+ * ## Only `mcpServers.tab` is touched
+ *
+ * The merge is by key, and every other server in the document is carried through
+ * untouched, as is every top-level key the client keeps beside `mcpServers`. A
+ * file that fails to parse is not overwritten: it is reported, because a
+ * half-written config file is a client that will not start and the caller is the
+ * only one who knows what was in it.
+ *
+ * Requirements: 25.5, 25.6
+ */
+import { copyFileSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { homedir, platform } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { ok } from "../_shared/index.js";
+import { fail, notFoundError, validationError } from "../errors.js";
+import { isRecord } from "../mcp/json.js";
+const home = () => homedir();
+/**
+ * The per-platform locations, one entry per client.
+ *
+ * Each path is the client's own documented location. A client absent from a
+ * platform has `undefined` there rather than a guessed path, so `--client` names
+ * something real or fails by name.
+ */
+function configPathFor(id, os, env, cwd) {
+    const appData = env["APPDATA"];
+    switch (id) {
+        case "claude-desktop":
+            if (os === "darwin")
+                return join(home(), "Library", "Application Support", "Claude", "claude_desktop_config.json");
+            if (os === "win32")
+                return appData === undefined ? undefined : join(appData, "Claude", "claude_desktop_config.json");
+            return join(home(), ".config", "Claude", "claude_desktop_config.json");
+        case "claude-code":
+            // Project-scoped and checked in beside the code, which is the form a team
+            // shares. The user-scoped list lives in `~/.claude.json` and is edited by
+            // the CLI itself, so this command does not reach into it.
+            return resolve(cwd, ".mcp.json");
+        case "cursor":
+            return join(home(), ".cursor", "mcp.json");
+        case "windsurf":
+            return join(home(), ".codeium", "windsurf", "mcp_config.json");
+        case "vscode":
+            if (os === "darwin")
+                return join(home(), "Library", "Application Support", "Code", "User", "mcp.json");
+            if (os === "win32")
+                return appData === undefined ? undefined : join(appData, "Code", "User", "mcp.json");
+            return join(home(), ".config", "Code", "User", "mcp.json");
+        default:
+            return undefined;
+    }
+}
+/** Every client `connect` can target, in the order detection prefers them. */
+export const MCP_CLIENT_IDS = ["claude-code", "claude-desktop", "cursor", "windsurf", "vscode"];
+const LABELS = {
+    "claude-code": "Claude Code (project .mcp.json)",
+    "claude-desktop": "Claude Desktop",
+    cursor: "Cursor",
+    windsurf: "Windsurf",
+    vscode: "Visual Studio Code",
+};
+const exists = (path) => {
+    if (path === undefined)
+        return false;
+    try {
+        return existsSync(path) && statSync(path).isFile();
+    }
+    catch {
+        return false;
+    }
+};
+const directoryExists = (path) => {
+    if (path === undefined)
+        return false;
+    try {
+        return existsSync(dirname(path));
+    }
+    catch {
+        return false;
+    }
+};
+/** Every known client on this platform, whether or not it is installed. */
+export function detectMcpClients(options = {}) {
+    const os = options.os ?? platform();
+    const env = options.env ?? process.env;
+    const cwd = options.cwd ?? process.cwd();
+    return MCP_CLIENT_IDS.map((id) => {
+        const configPath = configPathFor(id, os, env, cwd);
+        return {
+            id,
+            label: LABELS[id] ?? id,
+            configPath,
+            present: exists(configPath),
+            installed: directoryExists(configPath),
+        };
+    });
+}
+/**
+ * The client to write to when the caller named none.
+ *
+ * A client with an existing config file wins over one that is merely installed,
+ * because an existing file is evidence somebody uses it. Detection never picks
+ * between two files silently: with more than one candidate present, the caller
+ * is asked to name one.
+ */
+export function chooseMcpClient(targets) {
+    const present = targets.filter((target) => target.present);
+    if (present.length === 1)
+        return ok(present[0]);
+    if (present.length > 1) {
+        return fail("CONFLICT", "CLIENT_AMBIGUOUS", `more than one MCP client is configured on this machine (${present.map((t) => t.id).join(", ")}); name one with --client`, { details: { candidates: present.map((t) => t.id).join(", ") } });
+    }
+    const installed = targets.filter((target) => target.installed);
+    if (installed.length === 1)
+        return ok(installed[0]);
+    if (installed.length > 1) {
+        return fail("CONFLICT", "CLIENT_AMBIGUOUS", `more than one MCP client is installed on this machine (${installed.map((t) => t.id).join(", ")}); name one with --client`, { details: { candidates: installed.map((t) => t.id).join(", ") } });
+    }
+    return notFoundError("CLIENT_NOT_FOUND", `no MCP client config was found on this machine; name one with --client (${MCP_CLIENT_IDS.join(", ")}) or point at the file with --config`);
+}
+/** The key the stanza is written under. One server, one name, always this one. */
+export const TAB_SERVER_KEY = "tab";
+/**
+ * Builds the stanza.
+ *
+ * `npx -y @tabai/sdk mcp` rather than a path: the client launches it, `npx`
+ * resolves the published package, and nothing has to be installed first. That is
+ * the one line the adoption claim rests on.
+ *
+ * The `env` block carries only what the server reads and a person could publish:
+ * an RPC endpoint, a chain id and a read API URL. The names are the ones in the
+ * tracked environment contract, `MONAD_RPC_URL`, `MONAD_CHAIN_ID` and
+ * `NEXT_PUBLIC_REGISTRY_API_URL`, so a stanza and a `.env` agree.
+ */
+export function buildTabStanza(env = {}) {
+    const entries = Object.entries(env).filter(([, value]) => typeof value === "string" && value.trim() !== "");
+    return {
+        command: "npx",
+        args: ["-y", "@tabai/sdk", "mcp"],
+        ...(entries.length === 0 ? {} : { env: Object.fromEntries(entries) }),
+    };
+}
+/** Anything that looks like a signing key, by name or by shape. */
+const SECRET_NAME = /(PRIVATE[_-]?KEY|SECRET|MNEMONIC|SEED[_-]?PHRASE|PASSWORD|API[_-]?KEY|TOKEN|CREDENTIAL)/i;
+const SECRET_SHAPE = /^(0x)?[0-9a-fA-F]{64}$/;
+/**
+ * Refuses a stanza that carries a secret.
+ *
+ * Both a name check and a shape check, because either alone is defeated by the
+ * obvious mistake: a key under an innocuous name has the shape, and an empty
+ * placeholder under `PRIVATE_KEY` has the name. This runs on the merged document
+ * before it is written, so it also catches a secret that was already in the file
+ * under the `tab` key from an earlier hand edit.
+ */
+export function assertNoSecret(stanza, where = "the tab stanza") {
+    const problems = [];
+    const walk = (value, path) => {
+        if (typeof value === "string") {
+            if (SECRET_SHAPE.test(value.trim()))
+                problems.push(`${path} holds a 32-byte hex value, which is the shape of a signing key`);
+            return;
+        }
+        if (Array.isArray(value)) {
+            value.forEach((entry, index) => walk(entry, `${path}[${index}]`));
+            return;
+        }
+        if (isRecord(value)) {
+            for (const [key, entry] of Object.entries(value)) {
+                const child = path === "" ? key : `${path}.${key}`;
+                if (SECRET_NAME.test(key))
+                    problems.push(`${child} names a credential`);
+                walk(entry, child);
+            }
+        }
+    };
+    walk(stanza, "");
+    if (problems.length > 0) {
+        return validationError("STANZA_CARRIES_SECRET", `${where} would carry a credential and was not written: ${problems.join("; ")}. Settlement signing keys are read from the environment at run time and never from a client config file.`, { details: { problems: problems.join("; ") } });
+    }
+    return ok(undefined);
+}
+/** Two-space JSON with a trailing newline, which is what every one of these files uses. */
+export const renderConfig = (document) => `${JSON.stringify(document, null, 2)}\n`;
+/**
+ * Merges the stanza into a document, leaving every other key alone.
+ *
+ * `changed` compares rendered text rather than object identity, so a run that
+ * produces the same file is reported as no change even when the objects differ
+ * by key order.
+ */
+export function mergeTabStanza(previous, stanza) {
+    const existingServers = previous["mcpServers"];
+    if (existingServers !== undefined && !isRecord(existingServers)) {
+        return validationError("CONFIG_MCP_SERVERS_INVALID", "the config file has an `mcpServers` key that is not an object, so it was left alone rather than replaced");
+    }
+    const servers = { ...(isRecord(existingServers) ? existingServers : {}) };
+    const hadStanza = servers[TAB_SERVER_KEY] !== undefined;
+    servers[TAB_SERVER_KEY] = stanza;
+    // Only the `tab` stanza is checked. Another server's API key is that server's
+    // business and carrying it through untouched is the whole point of merging
+    // rather than replacing -- refusing on it would make `connect` fail on exactly
+    // the machines that already use MCP. The guarantee this command owes is about
+    // what it writes, and what it writes is the stanza.
+    const secret = assertNoSecret(servers[TAB_SERVER_KEY], `the \`${TAB_SERVER_KEY}\` stanza`);
+    if (!secret.ok)
+        return secret;
+    const merged = { ...previous, mcpServers: servers };
+    return ok({
+        merged,
+        previous,
+        changed: renderConfig(previous) !== renderConfig(merged),
+        hadStanza,
+    });
+}
+/**
+ * Reads a client config.
+ *
+ * A file that does not exist is an empty document and not an error: connecting a
+ * client that has never been configured is the common case. A file that exists
+ * and does not parse *is* an error, and nothing is written over it.
+ */
+export function readClientConfig(path) {
+    if (!existsSync(path))
+        return ok({ document: {}, existed: false, raw: "" });
+    let raw;
+    try {
+        raw = readFileSync(path, "utf8");
+    }
+    catch (error) {
+        return fail("UNAVAILABLE", "CONFIG_UNREADABLE", `\`${path}\` could not be read`, {
+            details: { path },
+            cause: { code: "READ_FAILED", message: error instanceof Error ? error.message : String(error) },
+        });
+    }
+    if (raw.trim() === "")
+        return ok({ document: {}, existed: true, raw });
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (error) {
+        return validationError("CONFIG_MALFORMED", `\`${path}\` is not valid JSON, so it was left untouched: ${error instanceof Error ? error.message : String(error)}`, { details: { path } });
+    }
+    if (!isRecord(parsed)) {
+        return validationError("CONFIG_MALFORMED", `\`${path}\` must hold a JSON object at its top level`, {
+            details: { path },
+        });
+    }
+    return ok({ document: parsed, existed: true, raw });
+}
+/** Where a backup of `path` goes, named with the instant so two runs never collide. */
+export const backupPathFor = (path, at) => `${path}.tab-backup-${at.toISOString().replace(/[:.]/g, "-")}`;
+/** Writes the merged document, taking a backup first when a file was already there. */
+export function writeClientConfig(path, outcome, existed, at) {
+    if (!outcome.changed)
+        return ok({ path, wrote: false });
+    try {
+        mkdirSync(dirname(path), { recursive: true });
+    }
+    catch (error) {
+        return fail("UNAVAILABLE", "CONFIG_DIRECTORY_UNWRITABLE", `\`${dirname(path)}\` could not be created`, {
+            details: { path },
+            cause: { code: "MKDIR_FAILED", message: error instanceof Error ? error.message : String(error) },
+        });
+    }
+    let backupPath;
+    if (existed) {
+        backupPath = backupPathFor(path, at);
+        try {
+            copyFileSync(path, backupPath);
+        }
+        catch (error) {
+            return fail("UNAVAILABLE", "CONFIG_BACKUP_FAILED", `\`${path}\` could not be backed up, so it was not changed`, {
+                details: { path, backupPath },
+                cause: { code: "COPY_FAILED", message: error instanceof Error ? error.message : String(error) },
+            });
+        }
+    }
+    try {
+        writeFileSync(path, renderConfig(outcome.merged), "utf8");
+    }
+    catch (error) {
+        return fail("UNAVAILABLE", "CONFIG_UNWRITABLE", `\`${path}\` could not be written`, {
+            details: { path },
+            cause: { code: "WRITE_FAILED", message: error instanceof Error ? error.message : String(error) },
+        });
+    }
+    return ok({ path, wrote: true, ...(backupPath === undefined ? {} : { backupPath }) });
+}
+// ---------------------------------------------------------------- the diff
+/**
+ * A unified diff of two JSON documents, line by line.
+ *
+ * Written here rather than pulled in because it is a longest-common-subsequence
+ * over at most a few hundred lines and the alternative is a dependency for a
+ * command that prints one. `connect` shows this before it claims to have done
+ * anything, because a command that edits a file the user did not open owes them
+ * a look at what it changed.
+ */
+export function unifiedDiff(before, after, context = 2) {
+    const a = before === "" ? [] : before.replace(/\n$/, "").split("\n");
+    const b = after === "" ? [] : after.replace(/\n$/, "").split("\n");
+    // LCS table. Both sides are one JSON document, so the quadratic cost is a few
+    // hundred thousand cells at worst and is paid once, on a command a person ran.
+    const lengths = Array.from({ length: a.length + 1 }, () => new Array(b.length + 1).fill(0));
+    for (let i = a.length - 1; i >= 0; i -= 1) {
+        for (let j = b.length - 1; j >= 0; j -= 1) {
+            lengths[i][j] = a[i] === b[j] ? lengths[i + 1][j + 1] + 1 : Math.max(lengths[i + 1][j], lengths[i][j + 1]);
+        }
+    }
+    const lines = [];
+    let i = 0;
+    let j = 0;
+    while (i < a.length && j < b.length) {
+        if (a[i] === b[j]) {
+            lines.push({ mark: " ", text: a[i] });
+            i += 1;
+            j += 1;
+        }
+        else if (lengths[i + 1][j] >= lengths[i][j + 1]) {
+            lines.push({ mark: "-", text: a[i] });
+            i += 1;
+        }
+        else {
+            lines.push({ mark: "+", text: b[j] });
+            j += 1;
+        }
+    }
+    for (; i < a.length; i += 1)
+        lines.push({ mark: "-", text: a[i] });
+    for (; j < b.length; j += 1)
+        lines.push({ mark: "+", text: b[j] });
+    // Keep only the changed lines and `context` lines either side, so a large
+    // config with one added server prints as one hunk.
+    const keep = new Set();
+    lines.forEach((line, index) => {
+        if (line.mark === " ")
+            return;
+        for (let k = Math.max(0, index - context); k <= Math.min(lines.length - 1, index + context); k += 1)
+            keep.add(k);
+    });
+    // Nothing changed is no diff at all, not one elision marker.
+    if (keep.size === 0)
+        return "";
+    const rendered = [];
+    let skipping = false;
+    lines.forEach((line, index) => {
+        if (keep.has(index)) {
+            rendered.push(`${line.mark}${line.text}`);
+            skipping = false;
+        }
+        else if (!skipping) {
+            rendered.push("@@");
+            skipping = true;
+        }
+    });
+    return rendered.join("\n");
+}
+//# sourceMappingURL=client-config.js.map

package/dist/cli/client-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-config.js","sourceRoot":"","sources":["../../src/cli/client-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGnD,OAAO,EAAE,EAAE,EAAE,MAAM,eAAe,CAAC;AAEnC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAmB,MAAM,gBAAgB,CAAC;AAmB3D,MAAM,IAAI,GAAG,GAAW,EAAE,CAAC,OAAO,EAAE,CAAC;AAErC;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,EAAU,EAAE,EAAU,EAAE,GAAsB,EAAE,GAAW;IAChF,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,gBAAgB;YACnB,IAAI,EAAE,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,4BAA4B,CAAC,CAAC;YACnH,IAAI,EAAE,KAAK,OAAO;gBAAE,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,4BAA4B,CAAC,CAAC;YACrH,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,4BAA4B,CAAC,CAAC;QACzE,KAAK,aAAa;YAChB,0EAA0E;YAC1E,0EAA0E;YAC1E,0DAA0D;YAC1D,OAAO,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACnC,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,UAAU;YACb,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;QACjE,KAAK,QAAQ;YACX,IAAI,EAAE,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YACvG,IAAI,EAAE,KAAK,OAAO;gBAAE,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YACzG,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAC7D;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAC;AAEzG,MAAM,MAAM,GAAqC;IAC/C,aAAa,EAAE,iCAAiC;IAChD,gBAAgB,EAAE,gBAAgB;IAClC,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,oBAAoB;CAC7B,CAAC;AAQF,MAAM,MAAM,GAAG,CAAC,IAAwB,EAAW,EAAE;IACnD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,IAAwB,EAAW,EAAE;IAC5D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,UAAyB,EAAE;IAC1D,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,QAAQ,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QAC/B,MAAM,UAAU,GAAG,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACnD,OAAO;YACL,EAAE;YACF,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;YACvB,UAAU;YACV,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC;YAC3B,SAAS,EAAE,eAAe,CAAC,UAAU,CAAC;SACvC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAmC;IAEnC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,IAAI,CACT,UAAU,EACV,kBAAkB,EAClB,2DAA2D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,EACzH,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC;IACrD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CACT,UAAU,EACV,kBAAkB,EAClB,0DAA0D,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAC1H,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CACnE,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAClB,kBAAkB,EAClB,2EAA2E,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAC3I,CAAC;AACJ,CAAC;AAaD,kFAAkF;AAClF,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AAEpC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,MAAiB,EAAE;IAChD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5G,OAAO;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC;QACjC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,WAAW,GAAG,0FAA0F,CAAC;AAC/G,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,MAAe,EAAE,KAAK,GAAG,gBAAgB;IACtE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,IAAY,EAAQ,EAAE;QAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,iEAAiE,CAAC,CAAC;YAC7H,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjD,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;gBACnD,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;gBACxE,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,eAAe,CACpB,uBAAuB,EACvB,GAAG,KAAK,kDAAkD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,0GAA0G,EACvL,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;AACvB,CAAC;AAeD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAiB,EAAU,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAEpG;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,QAAoB,EAAE,MAAiB;IACpE,MAAM,eAAe,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC/C,IAAI,eAAe,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAChE,OAAO,eAAe,CACpB,4BAA4B,EAC5B,0GAA0G,CAC3G,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAA4B,EAAE,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACnG,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,KAAK,SAAS,CAAC;IACxD,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC;IAEjC,8EAA8E;IAC9E,2EAA2E;IAC3E,+EAA+E;IAC/E,8EAA8E;IAC9E,oDAAoD;IACpD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,SAAS,cAAc,WAAW,CAAC,CAAC;IAC3F,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAE9B,MAAM,MAAM,GAAe,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAEhE,OAAO,EAAE,CAAC;QACR,MAAM;QACN,QAAQ;QACR,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,MAAM,CAAC;QACxD,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5E,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,aAAa,EAAE,mBAAmB,EAAE,KAAK,IAAI,sBAAsB,EAAE;YAC/E,OAAO,EAAE,EAAE,IAAI,EAAE;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAChG,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACvE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CACpB,kBAAkB,EAClB,KAAK,IAAI,mDAAmD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACpH,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CACtB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,eAAe,CAAC,kBAAkB,EAAE,KAAK,IAAI,6CAA6C,EAAE;YACjG,OAAO,EAAE,EAAE,IAAI,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAQ,EAAU,EAAE,CAC9D,GAAG,IAAI,eAAe,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;AASjE,uFAAuF;AACvF,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,OAAqB,EACrB,OAAgB,EAChB,EAAQ;IAER,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,aAAa,EAAE,6BAA6B,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,yBAAyB,EAAE;YACrG,OAAO,EAAE,EAAE,IAAI,EAAE;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACjG,CAAC,CAAC;IACL,CAAC;IAED,IAAI,UAA8B,CAAC;IACnC,IAAI,OAAO,EAAE,CAAC;QACZ,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,aAAa,EAAE,sBAAsB,EAAE,KAAK,IAAI,kDAAkD,EAAE;gBAC9G,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC7B,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aAChG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,aAAa,EAAE,mBAAmB,EAAE,KAAK,IAAI,yBAAyB,EAAE;YAClF,OAAO,EAAE,EAAE,IAAI,EAAE;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACjG,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,4EAA4E;AAE5E;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,KAAa,EAAE,OAAO,GAAG,CAAC;IACpE,MAAM,CAAC,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEnE,8EAA8E;IAC9E,+EAA+E;IAC/E,MAAM,OAAO,GAAe,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,KAAK,CAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChH,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC;QACpH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAgE,EAAE,CAAC;IAC9E,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;YACvC,CAAC,IAAI,CAAC,CAAC;YACP,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAE,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,CAAE,EAAE,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;YACvC,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;YACvC,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;IAEpE,0EAA0E;IAC1E,mDAAmD;IACnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;YAAE,OAAO;QAC9B,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnH,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1C,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;aAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC","sourcesContent":["/**\n * Where an MCP client keeps its server list, and how `tab connect` edits it.\n *\n * ## The claim this file has to earn\n *\n * Adopting Tab costs one line of configuration. That line is a `mcpServers`\n * stanza in a file the client already owns, and `tab connect` writes it. The\n * claim is only worth making if the write is safe to run, so three properties\n * are enforced here rather than documented:\n *\n * - **Idempotent.** Running it twice writes once. The second run compares the\n *   merged document against what is on disk and, finding no change, writes\n *   nothing and takes no backup. A connect command that rewrote the file every\n *   time would churn a file the client also writes.\n * - **Backed up.** Any run that does change the file copies the previous\n *   contents beside it first, named with the instant. This is somebody's editor\n *   configuration, and it may hold servers this package has never heard of.\n * - **Never a key.** {@link assertNoSecret} walks the stanza before it is\n *   written and refuses on anything key-shaped. The settlement signing key is\n *   read from the environment at the moment a Settlement is signed. It does not\n *   belong in a JSON file that a desktop client rewrites, syncs, and quotes in\n *   its own logs.\n *\n * ## Only `mcpServers.tab` is touched\n *\n * The merge is by key, and every other server in the document is carried through\n * untouched, as is every top-level key the client keeps beside `mcpServers`. A\n * file that fails to parse is not overwritten: it is reported, because a\n * half-written config file is a client that will not start and the caller is the\n * only one who knows what was in it.\n *\n * Requirements: 25.5, 25.6\n */\n\nimport { copyFileSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from \"node:fs\";\nimport { homedir, platform } from \"node:os\";\nimport { dirname, join, resolve } from \"node:path\";\n\nimport type { Result } from \"../_shared/index.js\";\nimport { ok } from \"../_shared/index.js\";\n\nimport { fail, notFoundError, validationError } from \"../errors.js\";\nimport { isRecord, type JsonRecord } from \"../mcp/json.js\";\n\n/** One MCP client this command knows how to find. */\nexport interface McpClientTarget {\n  /** The `--client` value, for example `claude-desktop`. */\n  readonly id: string;\n  /** What to call it in a message a person reads. */\n  readonly label: string;\n  /** Absolute path to its server list on this platform, or undefined where it has none. */\n  readonly configPath: string | undefined;\n  /** True when the file exists. A known client with no file yet is still a valid target. */\n  readonly present: boolean;\n  /**\n   * True when the directory the file would live in exists, which is the signal\n   * that the client is installed even though it has never been configured.\n   */\n  readonly installed: boolean;\n}\n\nconst home = (): string => homedir();\n\n/**\n * The per-platform locations, one entry per client.\n *\n * Each path is the client's own documented location. A client absent from a\n * platform has `undefined` there rather than a guessed path, so `--client` names\n * something real or fails by name.\n */\nfunction configPathFor(id: string, os: string, env: NodeJS.ProcessEnv, cwd: string): string | undefined {\n  const appData = env[\"APPDATA\"];\n  switch (id) {\n    case \"claude-desktop\":\n      if (os === \"darwin\") return join(home(), \"Library\", \"Application Support\", \"Claude\", \"claude_desktop_config.json\");\n      if (os === \"win32\") return appData === undefined ? undefined : join(appData, \"Claude\", \"claude_desktop_config.json\");\n      return join(home(), \".config\", \"Claude\", \"claude_desktop_config.json\");\n    case \"claude-code\":\n      // Project-scoped and checked in beside the code, which is the form a team\n      // shares. The user-scoped list lives in `~/.claude.json` and is edited by\n      // the CLI itself, so this command does not reach into it.\n      return resolve(cwd, \".mcp.json\");\n    case \"cursor\":\n      return join(home(), \".cursor\", \"mcp.json\");\n    case \"windsurf\":\n      return join(home(), \".codeium\", \"windsurf\", \"mcp_config.json\");\n    case \"vscode\":\n      if (os === \"darwin\") return join(home(), \"Library\", \"Application Support\", \"Code\", \"User\", \"mcp.json\");\n      if (os === \"win32\") return appData === undefined ? undefined : join(appData, \"Code\", \"User\", \"mcp.json\");\n      return join(home(), \".config\", \"Code\", \"User\", \"mcp.json\");\n    default:\n      return undefined;\n  }\n}\n\n/** Every client `connect` can target, in the order detection prefers them. */\nexport const MCP_CLIENT_IDS = [\"claude-code\", \"claude-desktop\", \"cursor\", \"windsurf\", \"vscode\"] as const;\n\nconst LABELS: Readonly<Record<string, string>> = {\n  \"claude-code\": \"Claude Code (project .mcp.json)\",\n  \"claude-desktop\": \"Claude Desktop\",\n  cursor: \"Cursor\",\n  windsurf: \"Windsurf\",\n  vscode: \"Visual Studio Code\",\n};\n\nexport interface DetectOptions {\n  readonly os?: string;\n  readonly env?: NodeJS.ProcessEnv;\n  readonly cwd?: string;\n}\n\nconst exists = (path: string | undefined): boolean => {\n  if (path === undefined) return false;\n  try {\n    return existsSync(path) && statSync(path).isFile();\n  } catch {\n    return false;\n  }\n};\n\nconst directoryExists = (path: string | undefined): boolean => {\n  if (path === undefined) return false;\n  try {\n    return existsSync(dirname(path));\n  } catch {\n    return false;\n  }\n};\n\n/** Every known client on this platform, whether or not it is installed. */\nexport function detectMcpClients(options: DetectOptions = {}): readonly McpClientTarget[] {\n  const os = options.os ?? platform();\n  const env = options.env ?? process.env;\n  const cwd = options.cwd ?? process.cwd();\n  return MCP_CLIENT_IDS.map((id) => {\n    const configPath = configPathFor(id, os, env, cwd);\n    return {\n      id,\n      label: LABELS[id] ?? id,\n      configPath,\n      present: exists(configPath),\n      installed: directoryExists(configPath),\n    };\n  });\n}\n\n/**\n * The client to write to when the caller named none.\n *\n * A client with an existing config file wins over one that is merely installed,\n * because an existing file is evidence somebody uses it. Detection never picks\n * between two files silently: with more than one candidate present, the caller\n * is asked to name one.\n */\nexport function chooseMcpClient(\n  targets: readonly McpClientTarget[],\n): Result<McpClientTarget> {\n  const present = targets.filter((target) => target.present);\n  if (present.length === 1) return ok(present[0]!);\n  if (present.length > 1) {\n    return fail(\n      \"CONFLICT\",\n      \"CLIENT_AMBIGUOUS\",\n      `more than one MCP client is configured on this machine (${present.map((t) => t.id).join(\", \")}); name one with --client`,\n      { details: { candidates: present.map((t) => t.id).join(\", \") } },\n    );\n  }\n  const installed = targets.filter((target) => target.installed);\n  if (installed.length === 1) return ok(installed[0]!);\n  if (installed.length > 1) {\n    return fail(\n      \"CONFLICT\",\n      \"CLIENT_AMBIGUOUS\",\n      `more than one MCP client is installed on this machine (${installed.map((t) => t.id).join(\", \")}); name one with --client`,\n      { details: { candidates: installed.map((t) => t.id).join(\", \") } },\n    );\n  }\n  return notFoundError(\n    \"CLIENT_NOT_FOUND\",\n    `no MCP client config was found on this machine; name one with --client (${MCP_CLIENT_IDS.join(\", \")}) or point at the file with --config`,\n  );\n}\n\n// ---------------------------------------------------------------- the stanza\n\n/** The `env` block the stanza carries. Non-secret values only, by construction. */\nexport type StanzaEnv = Readonly<Record<string, string>>;\n\nexport interface TabStanza {\n  readonly command: string;\n  readonly args: readonly string[];\n  readonly env?: StanzaEnv;\n}\n\n/** The key the stanza is written under. One server, one name, always this one. */\nexport const TAB_SERVER_KEY = \"tab\";\n\n/**\n * Builds the stanza.\n *\n * `npx -y @tabai/sdk mcp` rather than a path: the client launches it, `npx`\n * resolves the published package, and nothing has to be installed first. That is\n * the one line the adoption claim rests on.\n *\n * The `env` block carries only what the server reads and a person could publish:\n * an RPC endpoint, a chain id and a read API URL. The names are the ones in the\n * tracked environment contract, `MONAD_RPC_URL`, `MONAD_CHAIN_ID` and\n * `NEXT_PUBLIC_REGISTRY_API_URL`, so a stanza and a `.env` agree.\n */\nexport function buildTabStanza(env: StanzaEnv = {}): TabStanza {\n  const entries = Object.entries(env).filter(([, value]) => typeof value === \"string\" && value.trim() !== \"\");\n  return {\n    command: \"npx\",\n    args: [\"-y\", \"@tabai/sdk\", \"mcp\"],\n    ...(entries.length === 0 ? {} : { env: Object.fromEntries(entries) }),\n  };\n}\n\n/** Anything that looks like a signing key, by name or by shape. */\nconst SECRET_NAME = /(PRIVATE[_-]?KEY|SECRET|MNEMONIC|SEED[_-]?PHRASE|PASSWORD|API[_-]?KEY|TOKEN|CREDENTIAL)/i;\nconst SECRET_SHAPE = /^(0x)?[0-9a-fA-F]{64}$/;\n\n/**\n * Refuses a stanza that carries a secret.\n *\n * Both a name check and a shape check, because either alone is defeated by the\n * obvious mistake: a key under an innocuous name has the shape, and an empty\n * placeholder under `PRIVATE_KEY` has the name. This runs on the merged document\n * before it is written, so it also catches a secret that was already in the file\n * under the `tab` key from an earlier hand edit.\n */\nexport function assertNoSecret(stanza: unknown, where = \"the tab stanza\"): Result<void> {\n  const problems: string[] = [];\n  const walk = (value: unknown, path: string): void => {\n    if (typeof value === \"string\") {\n      if (SECRET_SHAPE.test(value.trim())) problems.push(`${path} holds a 32-byte hex value, which is the shape of a signing key`);\n      return;\n    }\n    if (Array.isArray(value)) {\n      value.forEach((entry, index) => walk(entry, `${path}[${index}]`));\n      return;\n    }\n    if (isRecord(value)) {\n      for (const [key, entry] of Object.entries(value)) {\n        const child = path === \"\" ? key : `${path}.${key}`;\n        if (SECRET_NAME.test(key)) problems.push(`${child} names a credential`);\n        walk(entry, child);\n      }\n    }\n  };\n  walk(stanza, \"\");\n  if (problems.length > 0) {\n    return validationError(\n      \"STANZA_CARRIES_SECRET\",\n      `${where} would carry a credential and was not written: ${problems.join(\"; \")}. Settlement signing keys are read from the environment at run time and never from a client config file.`,\n      { details: { problems: problems.join(\"; \") } },\n    );\n  }\n  return ok(undefined);\n}\n\n// ---------------------------------------------------------------- merge\n\nexport interface MergeOutcome {\n  /** The document as it should be on disk. */\n  readonly merged: JsonRecord;\n  /** The document that was on disk, or an empty object when the file did not exist. */\n  readonly previous: JsonRecord;\n  /** False when the file already said exactly this, which is the idempotent case. */\n  readonly changed: boolean;\n  /** Whether a `tab` stanza was already there, so a message can say added or updated. */\n  readonly hadStanza: boolean;\n}\n\n/** Two-space JSON with a trailing newline, which is what every one of these files uses. */\nexport const renderConfig = (document: unknown): string => `${JSON.stringify(document, null, 2)}\\n`;\n\n/**\n * Merges the stanza into a document, leaving every other key alone.\n *\n * `changed` compares rendered text rather than object identity, so a run that\n * produces the same file is reported as no change even when the objects differ\n * by key order.\n */\nexport function mergeTabStanza(previous: JsonRecord, stanza: TabStanza): Result<MergeOutcome> {\n  const existingServers = previous[\"mcpServers\"];\n  if (existingServers !== undefined && !isRecord(existingServers)) {\n    return validationError(\n      \"CONFIG_MCP_SERVERS_INVALID\",\n      \"the config file has an `mcpServers` key that is not an object, so it was left alone rather than replaced\",\n    );\n  }\n  const servers: Record<string, unknown> = { ...(isRecord(existingServers) ? existingServers : {}) };\n  const hadStanza = servers[TAB_SERVER_KEY] !== undefined;\n  servers[TAB_SERVER_KEY] = stanza;\n\n  // Only the `tab` stanza is checked. Another server's API key is that server's\n  // business and carrying it through untouched is the whole point of merging\n  // rather than replacing -- refusing on it would make `connect` fail on exactly\n  // the machines that already use MCP. The guarantee this command owes is about\n  // what it writes, and what it writes is the stanza.\n  const secret = assertNoSecret(servers[TAB_SERVER_KEY], `the \\`${TAB_SERVER_KEY}\\` stanza`);\n  if (!secret.ok) return secret;\n\n  const merged: JsonRecord = { ...previous, mcpServers: servers };\n\n  return ok({\n    merged,\n    previous,\n    changed: renderConfig(previous) !== renderConfig(merged),\n    hadStanza,\n  });\n}\n\n// ---------------------------------------------------------------- the file\n\nexport interface ReadConfigOutcome {\n  readonly document: JsonRecord;\n  readonly existed: boolean;\n  readonly raw: string;\n}\n\n/**\n * Reads a client config.\n *\n * A file that does not exist is an empty document and not an error: connecting a\n * client that has never been configured is the common case. A file that exists\n * and does not parse *is* an error, and nothing is written over it.\n */\nexport function readClientConfig(path: string): Result<ReadConfigOutcome> {\n  if (!existsSync(path)) return ok({ document: {}, existed: false, raw: \"\" });\n  let raw: string;\n  try {\n    raw = readFileSync(path, \"utf8\");\n  } catch (error) {\n    return fail(\"UNAVAILABLE\", \"CONFIG_UNREADABLE\", `\\`${path}\\` could not be read`, {\n      details: { path },\n      cause: { code: \"READ_FAILED\", message: error instanceof Error ? error.message : String(error) },\n    });\n  }\n  if (raw.trim() === \"\") return ok({ document: {}, existed: true, raw });\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch (error) {\n    return validationError(\n      \"CONFIG_MALFORMED\",\n      `\\`${path}\\` is not valid JSON, so it was left untouched: ${error instanceof Error ? error.message : String(error)}`,\n      { details: { path } },\n    );\n  }\n  if (!isRecord(parsed)) {\n    return validationError(\"CONFIG_MALFORMED\", `\\`${path}\\` must hold a JSON object at its top level`, {\n      details: { path },\n    });\n  }\n  return ok({ document: parsed, existed: true, raw });\n}\n\n/** Where a backup of `path` goes, named with the instant so two runs never collide. */\nexport const backupPathFor = (path: string, at: Date): string =>\n  `${path}.tab-backup-${at.toISOString().replace(/[:.]/g, \"-\")}`;\n\nexport interface WriteOutcome {\n  readonly path: string;\n  /** Absent when nothing was written, which is the idempotent case. */\n  readonly backupPath?: string;\n  readonly wrote: boolean;\n}\n\n/** Writes the merged document, taking a backup first when a file was already there. */\nexport function writeClientConfig(\n  path: string,\n  outcome: MergeOutcome,\n  existed: boolean,\n  at: Date,\n): Result<WriteOutcome> {\n  if (!outcome.changed) return ok({ path, wrote: false });\n  try {\n    mkdirSync(dirname(path), { recursive: true });\n  } catch (error) {\n    return fail(\"UNAVAILABLE\", \"CONFIG_DIRECTORY_UNWRITABLE\", `\\`${dirname(path)}\\` could not be created`, {\n      details: { path },\n      cause: { code: \"MKDIR_FAILED\", message: error instanceof Error ? error.message : String(error) },\n    });\n  }\n\n  let backupPath: string | undefined;\n  if (existed) {\n    backupPath = backupPathFor(path, at);\n    try {\n      copyFileSync(path, backupPath);\n    } catch (error) {\n      return fail(\"UNAVAILABLE\", \"CONFIG_BACKUP_FAILED\", `\\`${path}\\` could not be backed up, so it was not changed`, {\n        details: { path, backupPath },\n        cause: { code: \"COPY_FAILED\", message: error instanceof Error ? error.message : String(error) },\n      });\n    }\n  }\n\n  try {\n    writeFileSync(path, renderConfig(outcome.merged), \"utf8\");\n  } catch (error) {\n    return fail(\"UNAVAILABLE\", \"CONFIG_UNWRITABLE\", `\\`${path}\\` could not be written`, {\n      details: { path },\n      cause: { code: \"WRITE_FAILED\", message: error instanceof Error ? error.message : String(error) },\n    });\n  }\n  return ok({ path, wrote: true, ...(backupPath === undefined ? {} : { backupPath }) });\n}\n\n// ---------------------------------------------------------------- the diff\n\n/**\n * A unified diff of two JSON documents, line by line.\n *\n * Written here rather than pulled in because it is a longest-common-subsequence\n * over at most a few hundred lines and the alternative is a dependency for a\n * command that prints one. `connect` shows this before it claims to have done\n * anything, because a command that edits a file the user did not open owes them\n * a look at what it changed.\n */\nexport function unifiedDiff(before: string, after: string, context = 2): string {\n  const a = before === \"\" ? [] : before.replace(/\\n$/, \"\").split(\"\\n\");\n  const b = after === \"\" ? [] : after.replace(/\\n$/, \"\").split(\"\\n\");\n\n  // LCS table. Both sides are one JSON document, so the quadratic cost is a few\n  // hundred thousand cells at worst and is paid once, on a command a person ran.\n  const lengths: number[][] = Array.from({ length: a.length + 1 }, () => new Array<number>(b.length + 1).fill(0));\n  for (let i = a.length - 1; i >= 0; i -= 1) {\n    for (let j = b.length - 1; j >= 0; j -= 1) {\n      lengths[i]![j] = a[i] === b[j] ? lengths[i + 1]![j + 1]! + 1 : Math.max(lengths[i + 1]![j]!, lengths[i]![j + 1]!);\n    }\n  }\n\n  const lines: { readonly mark: \" \" | \"-\" | \"+\"; readonly text: string }[] = [];\n  let i = 0;\n  let j = 0;\n  while (i < a.length && j < b.length) {\n    if (a[i] === b[j]) {\n      lines.push({ mark: \" \", text: a[i]! });\n      i += 1;\n      j += 1;\n    } else if (lengths[i + 1]![j]! >= lengths[i]![j + 1]!) {\n      lines.push({ mark: \"-\", text: a[i]! });\n      i += 1;\n    } else {\n      lines.push({ mark: \"+\", text: b[j]! });\n      j += 1;\n    }\n  }\n  for (; i < a.length; i += 1) lines.push({ mark: \"-\", text: a[i]! });\n  for (; j < b.length; j += 1) lines.push({ mark: \"+\", text: b[j]! });\n\n  // Keep only the changed lines and `context` lines either side, so a large\n  // config with one added server prints as one hunk.\n  const keep = new Set<number>();\n  lines.forEach((line, index) => {\n    if (line.mark === \" \") return;\n    for (let k = Math.max(0, index - context); k <= Math.min(lines.length - 1, index + context); k += 1) keep.add(k);\n  });\n\n  // Nothing changed is no diff at all, not one elision marker.\n  if (keep.size === 0) return \"\";\n\n  const rendered: string[] = [];\n  let skipping = false;\n  lines.forEach((line, index) => {\n    if (keep.has(index)) {\n      rendered.push(`${line.mark}${line.text}`);\n      skipping = false;\n    } else if (!skipping) {\n      rendered.push(\"@@\");\n      skipping = true;\n    }\n  });\n  return rendered.join(\"\\n\");\n}\n"]}

package/dist/cli/connect.d.ts

@@ -0,0 +1,76 @@
+/**
+ * `tab connect`: the one line of configuration.
+ *
+ * The whole adoption story is this command. It finds the MCP client's server
+ * list, reads the deployment keylessly so it can tell the caller what they are
+ * about to be connected to, merges one `mcpServers.tab` stanza, backs up what
+ * was there, and prints the diff.
+ *
+ * ## Read before write
+ *
+ * The keyless read happens first and its result is reported whether it succeeded
+ * or not. A `connect` that silently wrote a stanza pointing at a registry that
+ * does not answer would look like success and behave like a broken install, and
+ * the person running it would find out from a model instead of from the command.
+ * The read never blocks the write: a deployment that is temporarily down is not
+ * a reason to refuse to configure a client against it.
+ *
+ * ## Nothing here is a secret
+ *
+ * The stanza carries a command, its arguments, and at most two URLs. Every value
+ * in it is publishable. {@link assertNoSecret} runs over the merged document
+ * before anything is written, so the property is enforced rather than asserted
+ * in a comment.
+ *
+ * Requirements: 25.5, 25.6
+ */
+import type { Result } from "../_shared/index.js";
+import type { Logger } from "../logger.js";
+import { type RegistryFetch } from "../mcp/registry-client.js";
+import type { TabMcpSettings } from "../mcp/settings.js";
+import { type TabStanza } from "./client-config.js";
+export interface ConnectOptions {
+    readonly settings: TabMcpSettings;
+    /** `claude-code`, `claude-desktop`, `cursor`, `windsurf` or `vscode`. */
+    readonly client?: string;
+    /** An explicit config file, which beats `client` and skips detection. */
+    readonly configPath?: string;
+    readonly env?: NodeJS.ProcessEnv;
+    readonly os?: string;
+    readonly cwd?: string;
+    /** Injectable clock, so a backup name is testable. */
+    readonly now?: () => Date;
+    /** Work out and print everything, and write nothing. */
+    readonly dryRun?: boolean;
+    readonly fetchImpl?: RegistryFetch;
+    readonly logger?: Logger;
+}
+/** What the deployment said when it was asked, before anything was written. */
+export interface ConnectPreflight {
+    readonly registryUrl: string | undefined;
+    /** Services indexed, or null when the read API did not answer. */
+    readonly services: number | null;
+    readonly note: string;
+}
+export interface ConnectReport {
+    readonly client: string;
+    readonly configPath: string;
+    /** False when the file already said exactly this. */
+    readonly changed: boolean;
+    /** True when a `tab` stanza was already there, so a message can say updated. */
+    readonly hadStanza: boolean;
+    readonly backupPath: string | undefined;
+    readonly stanza: TabStanza;
+    /** Empty when nothing changed. */
+    readonly diff: string;
+    readonly preflight: ConnectPreflight;
+    readonly dryRun: boolean;
+}
+/**
+ * Runs the command.
+ *
+ * Every failure is a `Result`, including a config file that will not parse. The
+ * one thing this never does is write over something it could not read.
+ */
+export declare function runConnect(options: ConnectOptions): Promise<Result<ConnectReport>>;
+//# sourceMappingURL=connect.d.ts.map

package/dist/cli/connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/cli/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAI5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAG3C,OAAO,EAA4B,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAWL,KAAK,SAAS,EACf,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,sDAAsD;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B,wDAAwD;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,+EAA+E;AAC/E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,gFAAgF;IAChF,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAmFD;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAkDxF"}