@vibesdotdev/external 0.0.0-stage → 1.0.0-rc.0

package/dist/plugins/installers/mcp/json-paths.js

@@ -0,0 +1,130 @@
+/**
+ * Read, upsert and remove one MCP server entry in a parsed host config.
+ *
+ * `mcpPath` is the manifest's location of the servers map: a literal key
+ * (`cline.mcpServers` in VS Code settings), a dotted path (`mcp.servers`), or
+ * a path ending in an array segment (`mcp.servers[]`) whose entries carry a
+ * `name`. Every key is an own property (see config-value.ts).
+ */
+import { deleteOwn, isConfigObject, ownObject, ownValue, setOwn } from "../config-value.js";
+function getOrCreateObject(parent, key) {
+    const existing = ownObject(parent, key);
+    if (existing)
+        return existing;
+    const created = {};
+    setOwn(parent, key, created);
+    return created;
+}
+function getOrCreateArray(parent, key) {
+    const existing = ownValue(parent, key);
+    if (Array.isArray(existing))
+        return existing;
+    const created = [];
+    setOwn(parent, key, created);
+    return created;
+}
+function splitPath(path) {
+    return path.split('.').filter(Boolean);
+}
+/** Whether an array entry is the named server. */
+function isNamedEntry(value, serverName) {
+    return isConfigObject(value) && ownValue(value, 'name') === serverName;
+}
+function findNamedEntry(entries, serverName) {
+    for (const entry of entries)
+        if (isNamedEntry(entry, serverName))
+            return entry;
+    return undefined;
+}
+export function readMcpServerConfig(config, mcpPath, serverName) {
+    // Prefer the literal key (e.g. "cline.mcpServers") when present.
+    if (Object.hasOwn(config, mcpPath)) {
+        const servers = ownObject(config, mcpPath);
+        return servers ? ownObject(servers, serverName) : undefined;
+    }
+    let current = config;
+    for (const part of splitPath(mcpPath)) {
+        if (part.endsWith('[]')) {
+            const entries = ownValue(current, part.slice(0, -2));
+            if (!Array.isArray(entries))
+                return undefined;
+            return findNamedEntry(entries, serverName);
+        }
+        const next = ownObject(current, part);
+        if (!next)
+            return undefined;
+        current = next;
+    }
+    return ownObject(current, serverName);
+}
+export function upsertMcpServerConfig(config, mcpPath, serverName, serverConfig) {
+    // Prefer the literal key (e.g. "cline.mcpServers") when present.
+    if (Object.hasOwn(config, mcpPath)) {
+        setOwn(getOrCreateObject(config, mcpPath), serverName, serverConfig);
+        return;
+    }
+    const parts = splitPath(mcpPath);
+    let current = config;
+    for (const [index, part] of parts.entries()) {
+        if (part.endsWith('[]')) {
+            const entries = getOrCreateArray(current, part.slice(0, -2));
+            const named = { name: serverName };
+            for (const [key, value] of Object.entries(serverConfig))
+                setOwn(named, key, value);
+            const existing = findNamedEntry(entries, serverName);
+            if (existing) {
+                for (const [key, value] of Object.entries(named))
+                    setOwn(existing, key, value);
+            }
+            else {
+                entries.push(named);
+            }
+            return;
+        }
+        // The final segment is the servers map.
+        if (index === parts.length - 1) {
+            setOwn(getOrCreateObject(current, part), serverName, serverConfig);
+            return;
+        }
+        current = getOrCreateObject(current, part);
+    }
+}
+export function removeMcpServerConfig(config, mcpPath, serverName) {
+    // Prefer the literal key (e.g. "cline.mcpServers") when present.
+    if (Object.hasOwn(config, mcpPath)) {
+        const servers = ownObject(config, mcpPath);
+        if (!servers || !deleteOwn(servers, serverName))
+            return false;
+        if (Object.keys(servers).length === 0)
+            deleteOwn(config, mcpPath);
+        return true;
+    }
+    let current = config;
+    let parent;
+    let lastKey;
+    for (const part of splitPath(mcpPath)) {
+        if (part.endsWith('[]')) {
+            const key = part.slice(0, -2);
+            const entries = ownValue(current, key);
+            if (!Array.isArray(entries))
+                return false;
+            const kept = entries.filter((entry) => !isNamedEntry(entry, serverName));
+            setOwn(current, key, kept);
+            return kept.length !== entries.length;
+        }
+        const next = ownObject(current, part);
+        if (!next)
+            return false;
+        parent = current;
+        lastKey = part;
+        current = next;
+    }
+    if (!parent || lastKey === undefined)
+        return false;
+    if (!deleteOwn(current, serverName))
+        return false;
+    if (Object.keys(current).length === 0)
+        deleteOwn(parent, lastKey);
+    return true;
+}
+//# sourceMappingURL=json-paths.js.map

package/dist/plugins/installers/mcp/json-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-paths.js","sourceRoot":"","sources":["../../../../src/plugins/installers/mcp/json-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACN,SAAS,EACT,cAAc,EACd,SAAS,EACT,QAAQ,EACR,MAAM,EAGN,MAAM,oBAAoB,CAAC;AAE5B,SAAS,iBAAiB,CAAC,MAAoB,EAAE,GAAW;IAC3D,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAoB,EAAE,GAAW;IAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7C,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,kDAAkD;AAClD,SAAS,YAAY,CAAC,KAAkB,EAAE,UAAkB;IAC3D,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,UAAU,CAAC;AACxE,CAAC;AAED,SAAS,cAAc,CAAC,OAA+B,EAAE,UAAkB;IAC1E,KAAK,MAAM,KAAK,IAAI,OAAO;QAAE,IAAI,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;IAC/E,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAClC,MAAoB,EACpB,OAAe,EACf,UAAkB;IAElB,iEAAiE;IACjE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,CAAC;IAED,IAAI,OAAO,GAAiB,MAAM,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC9C,OAAO,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,OAAO,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,qBAAqB,CACpC,MAAoB,EACpB,OAAe,EACf,UAAkB,EAClB,YAA0B;IAE1B,iEAAiE;IACjE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACrE,OAAO;IACR,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,OAAO,GAAG,MAAM,CAAC;IACrB,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAiB,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;gBAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YACnF,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACrD,IAAI,QAAQ,EAAE,CAAC;gBACd,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAChF,CAAC;iBAAM,CAAC;gBACP,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YACD,OAAO;QACR,CAAC;QACD,wCAAwC;QACxC,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;YACnE,OAAO;QACR,CAAC;QACD,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;AACF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAoB,EAAE,OAAe,EAAE,UAAkB;IAC9F,iEAAiE;IACjE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9D,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,OAAO,GAAiB,MAAM,CAAC;IACnC,IAAI,MAAgC,CAAC;IACrC,IAAI,OAA2B,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;YACzE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,GAAG,OAAO,CAAC;QACjB,OAAO,GAAG,IAAI,CAAC;QACf,OAAO,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/plugins/installers/mcp/serve-identity.d.ts

@@ -0,0 +1,19 @@
+export interface McpServeIdentity {
+    preset: string;
+    /** Absent when no host or override names one; `vibes dev mcp serve` then decides. */
+    harness?: string;
+    /** Absent when nothing names an agent; never defaulted to a shared body. */
+    agent?: string;
+}
+export interface McpServeIdentityOverrides {
+    harness?: string;
+    agent?: string;
+}
+/**
+ * Compile explicit descriptor-derived inputs into the identities consumed by
+ * `vibes dev mcp serve`. External does not own a catalog whitelist or a host
+ * alias table; the MCP surface and provider descriptor own those values.
+ */
+export declare function resolveMcpServeIdentity(catalogId?: string, hostId?: string, overrides?: McpServeIdentityOverrides): McpServeIdentity;
+export declare function buildMcpServeArgs(baseArgs: string[], catalogId?: string, hostId?: string, overrides?: McpServeIdentityOverrides): string[];
+//# sourceMappingURL=serve-identity.d.ts.map

package/dist/plugins/installers/mcp/serve-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-identity.d.ts","sourceRoot":"","sources":["../../../../src/plugins/installers/mcp/serve-identity.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,yBAAyB;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACtC,SAAS,SAAS,EAClB,MAAM,SAAK,EACX,SAAS,GAAE,yBAA8B,GACvC,gBAAgB,CASlB;AAED,wBAAgB,iBAAiB,CAChC,QAAQ,EAAE,MAAM,EAAE,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,SAAK,EACX,SAAS,GAAE,yBAA8B,GACvC,MAAM,EAAE,CAYV"}

package/dist/plugins/installers/mcp/serve-identity.js

@@ -0,0 +1,31 @@
+/**
+ * Compile explicit descriptor-derived inputs into the identities consumed by
+ * `vibes dev mcp serve`. External does not own a catalog whitelist or a host
+ * alias table; the MCP surface and provider descriptor own those values.
+ */
+export function resolveMcpServeIdentity(catalogId = 'full', hostId = '', overrides = {}) {
+    const preset = catalogId.trim().toLowerCase() || 'full';
+    const host = hostId.trim().toLowerCase();
+    const harness = overrides.harness?.trim().toLowerCase() || host || undefined;
+    const agent = overrides.agent?.trim().toLowerCase() || harness;
+    const identity = { preset };
+    if (harness)
+        identity.harness = harness;
+    if (agent)
+        identity.agent = agent;
+    return identity;
+}
+export function buildMcpServeArgs(baseArgs, catalogId, hostId = '', overrides = {}) {
+    if (!catalogId?.trim() && !hostId.trim() && !overrides.harness && !overrides.agent) {
+        return [...baseArgs];
+    }
+    const identity = resolveMcpServeIdentity(catalogId, hostId, overrides);
+    return [
+        ...baseArgs,
+        '--preset',
+        identity.preset,
+        ...(identity.harness ? ['--harness', identity.harness] : []),
+        ...(identity.agent ? ['--agent', identity.agent] : [])
+    ];
+}
+//# sourceMappingURL=serve-identity.js.map

package/dist/plugins/installers/mcp/serve-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-identity.js","sourceRoot":"","sources":["../../../../src/plugins/installers/mcp/serve-identity.ts"],"names":[],"mappings":"AAaA;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACtC,SAAS,GAAG,MAAM,EAClB,MAAM,GAAG,EAAE,EACX,YAAuC,EAAE;IAEzC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,MAAM,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,IAAI,IAAI,SAAS,CAAC;IAC7E,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC;IAC/D,MAAM,QAAQ,GAAqB,EAAE,MAAM,EAAE,CAAC;IAC9C,IAAI,OAAO;QAAE,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;IACxC,IAAI,KAAK;QAAE,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;IAClC,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAChC,QAAkB,EAClB,SAAkB,EAClB,MAAM,GAAG,EAAE,EACX,YAAuC,EAAE;IAEzC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACpF,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACvE,OAAO;QACN,GAAG,QAAQ;QACX,UAAU;QACV,QAAQ,CAAC,MAAM;QACf,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACH,CAAC"}

package/dist/plugins/installers/mcp/server-config.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Steps every MCP installer applies to the server entry it writes: pin a
+ * project server to its project, anchor its identity env, and strip any
+ * published bearer. Shared so JSON, YAML and TOML entries agree.
+ */
+import type { ExternalHostManifest } from '../../schemas/manifest.ts';
+import { type ConfigObject } from '../config-value.ts';
+/** The string entries of an own `env` object, as a fresh map. */
+export declare function stringEnv(config: ConfigObject | undefined): ConfigObject;
+/** Merge maps left to right into a fresh own-property object. */
+export declare function mergeEnv(...layers: ConfigObject[]): ConfigObject;
+/** Pin a stdio server's string `args` to `projectDir` (argv, not env); unchanged when it has no args. */
+export declare function pinServerArgs(serverConfig: ConfigObject, projectDir: string | undefined): void;
+/** Put the host's identity anchors under the entry's own env (its existing entries win). */
+export declare function anchorIdentityEnv(serverConfig: ConfigObject, manifest: ExternalHostManifest, vibesHome: string): void;
+/** Overlay a manifest's config template; template and entry env merge, the entry's winning. */
+export declare function applyConfigTemplate(serverConfig: ConfigObject, template: ConfigObject | undefined): void;
+/** The final step on every entry: no bearer is ever published into a harness config (R3). */
+export declare function finalizeServerConfig(serverConfig: ConfigObject): ConfigObject;
+//# sourceMappingURL=server-config.d.ts.map

package/dist/plugins/installers/mcp/server-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-config.d.ts","sourceRoot":"","sources":["../../../../src/plugins/installers/mcp/server-config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,OAAO,EAA+C,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGpG,iEAAiE;AACjE,wBAAgB,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,YAAY,CAOxE;AAED,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,CAIhE;AAED,yGAAyG;AACzG,wBAAgB,aAAa,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAO9F;AAED,4FAA4F;AAC5F,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAUrH;AAED,+FAA+F;AAC/F,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,GAAG,SAAS,GAAG,IAAI,CAQxG;AAED,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,YAAY,GAAG,YAAY,CAG7E"}

package/dist/plugins/installers/mcp/server-config.js

@@ -0,0 +1,64 @@
+/**
+ * Steps every MCP installer applies to the server entry it writes: pin a
+ * project server to its project, anchor its identity env, and strip any
+ * published bearer. Shared so JSON, YAML and TOML entries agree.
+ */
+import { externalHostIdentityId } from "../../../external-tool/runtime.js";
+import { isConfigString, ownObject, ownValue, setOwn } from "../config-value.js";
+import { buildMcpIdentityEnv, pinWorkspaceRoot, stripPublishedBearer } from "./environment.js";
+/** The string entries of an own `env` object, as a fresh map. */
+export function stringEnv(config) {
+    const env = {};
+    const source = config ? ownObject(config, 'env') : undefined;
+    for (const [key, value] of Object.entries(source ?? {})) {
+        if (isConfigString(value))
+            setOwn(env, key, value);
+    }
+    return env;
+}
+/** Merge maps left to right into a fresh own-property object. */
+export function mergeEnv(...layers) {
+    const merged = {};
+    for (const layer of layers)
+        for (const [key, value] of Object.entries(layer))
+            setOwn(merged, key, value);
+    return merged;
+}
+/** Pin a stdio server's string `args` to `projectDir` (argv, not env); unchanged when it has no args. */
+export function pinServerArgs(serverConfig, projectDir) {
+    const args = ownValue(serverConfig, 'args');
+    if (!Array.isArray(args))
+        return;
+    serverConfig.args = pinWorkspaceRoot(args.filter((arg) => isConfigString(arg)), projectDir);
+}
+/** Put the host's identity anchors under the entry's own env (its existing entries win). */
+export function anchorIdentityEnv(serverConfig, manifest, vibesHome) {
+    const identity = {};
+    const anchors = buildMcpIdentityEnv({
+        clientId: manifest.id,
+        harnessId: externalHostIdentityId(manifest),
+        agentId: externalHostIdentityId(manifest),
+        vibesHome
+    });
+    for (const [key, value] of Object.entries(anchors))
+        setOwn(identity, key, value);
+    serverConfig.env = mergeEnv(identity, stringEnv(serverConfig));
+}
+/** Overlay a manifest's config template; template and entry env merge, the entry's winning. */
+export function applyConfigTemplate(serverConfig, template) {
+    if (!template)
+        return;
+    const configEnv = stringEnv(serverConfig);
+    const templateEnv = stringEnv(template);
+    for (const [key, value] of Object.entries(template))
+        setOwn(serverConfig, key, value);
+    if (Object.keys(templateEnv).length > 0 || Object.keys(configEnv).length > 0) {
+        serverConfig.env = mergeEnv(templateEnv, configEnv);
+    }
+}
+/** The final step on every entry: no bearer is ever published into a harness config (R3). */
+export function finalizeServerConfig(serverConfig) {
+    stripPublishedBearer(serverConfig);
+    return serverConfig;
+}
+//# sourceMappingURL=server-config.js.map

package/dist/plugins/installers/mcp/server-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-config.js","sourceRoot":"","sources":["../../../../src/plugins/installers/mcp/server-config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAqB,MAAM,oBAAoB,CAAC;AACpG,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAE/F,iEAAiE;AACjE,MAAM,UAAU,SAAS,CAAC,MAAgC;IACzD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACzD,IAAI,cAAc,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,QAAQ,CAAC,GAAG,MAAsB;IACjD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACzG,OAAO,MAAM,CAAC;AACf,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,aAAa,CAAC,YAA0B,EAAE,UAA8B;IACvF,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO;IACjC,YAAY,CAAC,IAAI,GAAG,gBAAgB,CACnC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EACxD,UAAU,CACV,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAAC,YAA0B,EAAE,QAA8B,EAAE,SAAiB;IAC9G,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,mBAAmB,CAAC;QACnC,QAAQ,EAAE,QAAQ,CAAC,EAAE;QACrB,SAAS,EAAE,sBAAsB,CAAC,QAAQ,CAAC;QAC3C,OAAO,EAAE,sBAAsB,CAAC,QAAQ,CAAC;QACzC,SAAS;KACT,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACjF,YAAY,CAAC,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,mBAAmB,CAAC,YAA0B,EAAE,QAAkC;IACjG,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,MAAM,SAAS,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,CAAC,YAAY,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9E,YAAY,CAAC,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;AACF,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,oBAAoB,CAAC,YAA0B;IAC9D,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACnC,OAAO,YAAY,CAAC;AACrB,CAAC"}

package/dist/plugins/installers/mcp/toml-installer.d.ts

@@ -0,0 +1,41 @@
+/**
+ * TOML MCP Installer
+ *
+ * Installs MCP configuration for tools that use TOML config files (Codex CLI,
+ * Grok Build). The user's document is read with the one TOML reader
+ * (utils/toml.ts) and edited textually: only the Vibes server's table family
+ * is replaced, so unrelated tables, comments and formatting survive. Every
+ * emitted string and key is escaped, the generated document is re-read and
+ * validated before it is written, and the write is an atomic replace.
+ */
+import type { ExternalHostManifest, ConfigFormat } from '../../schemas/manifest.ts';
+import type { ExternalInstallRoots, ExternalInstallTarget, McpInstaller, McpInstallOptions, McpInstallResult, InstallResult } from '../types.ts';
+import { type McpEnvironmentTier } from './environment.ts';
+import { type ConfigValue } from '../config-value.ts';
+/**
+ * Validate the launch-critical part of a TOML MCP server entry.
+ * Custom executable prefixes are allowed, but the manifest's MCP argv and
+ * host safety policy must survive projection exactly.
+ */
+export declare function getTomlMcpServerConfigIssues(manifest: ExternalHostManifest, value: ConfigValue | undefined): string[];
+/** A TOML key: bare when it is only letters, digits, `_` and `-`, else a quoted basic string. */
+export declare function formatTomlKey(key: string): string;
+/** A TOML basic string with every character that needs it escaped. */
+export declare function formatTomlString(value: string): string;
+/** A TOML inline value; objects inside arrays become inline tables. */
+export declare function formatTomlValue(value: ConfigValue): string;
+/**
+ * TOML-based MCP installer for tools with TOML config files
+ */
+export declare class TomlMcpInstaller implements McpInstaller {
+    readonly id = "toml-mcp";
+    readonly supportedFormats: ConfigFormat[];
+    install(options: McpInstallOptions, target: ExternalInstallTarget, tier: McpEnvironmentTier): Promise<McpInstallResult>;
+    /** Configured exactly as setup writes it; an unreadable or invalid file is refused typed. */
+    isConfigured(manifest: ExternalHostManifest, global: boolean, target: ExternalInstallTarget): Promise<boolean>;
+    /** Remove the Vibes table family; an absent file or entry is "not configured", an unreadable or invalid one is refused typed. */
+    uninstall(manifest: ExternalHostManifest, global: boolean, target: ExternalInstallTarget): Promise<InstallResult>;
+    getConfigPath(manifest: ExternalHostManifest, global: boolean, roots: ExternalInstallRoots): string;
+    private getConfigLocation;
+}
+//# sourceMappingURL=toml-installer.d.ts.map

package/dist/plugins/installers/mcp/toml-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toml-installer.d.ts","sourceRoot":"","sources":["../../../../src/plugins/installers/mcp/toml-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACpF,OAAO,KAAK,EACX,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,MAAM,aAAa,CAAC;AAErB,OAAO,EAA4C,KAAK,kBAAkB,EAAsB,MAAM,kBAAkB,CAAC;AAGzH,OAAO,EAQN,KAAK,WAAW,EAChB,MAAM,oBAAoB,CAAC;AAqH5B;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC3C,QAAQ,EAAE,oBAAoB,EAC9B,KAAK,EAAE,WAAW,GAAG,SAAS,GAC5B,MAAM,EAAE,CAyBV;AAiBD,iGAAiG;AACjG,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAatD;AAED,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAS1D;AA8DD;;GAEG;AACH,qBAAa,gBAAiB,YAAW,YAAY;IACpD,QAAQ,CAAC,EAAE,cAAc;IACzB,QAAQ,CAAC,gBAAgB,EAAE,YAAY,EAAE,CAAY;IAE/C,OAAO,CACZ,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,qBAAqB,EAC7B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,gBAAgB,CAAC;IAoG5B,6FAA6F;IACvF,YAAY,CAAC,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC;IAYpH,iIAAiI;IAC3H,SAAS,CAAC,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC;IAsBvH,aAAa,CAAC,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,GAAG,MAAM;IAMnG,OAAO,CAAC,iBAAiB;CAKzB"}