@vibesdotdev/external 0.0.0-stage → 1.0.0-rc.1

package/dist/plugins/installers/mcp/environment.js

@@ -0,0 +1,314 @@
+import { CapabilityError, CaughtFailureSchema, isCapabilityError } from '@vibesdotdev/kernel';
+import { serviceOrigin } from '@vibesdotdev/infra-core/service';
+import { mcpHostClaimPath, parsePortValue, resolveMcpHostPort } from '@vibesdotdev/paths/workspace-mcp-host';
+import { join } from '@vibesdotdev/filesystem';
+import { getRuntimeProcessService } from '@vibesdotdev/kernel/process';
+import * as z from 'zod/v4';
+import { deleteOwn, ownObject, ownValue, setOwn } from "../config-value.js";
+import { parseHostConfig } from "../../../detection/config-document.js";
+import { externalFileSystem, readTextIfPresent } from "../../../utils/runtime-fs.js";
+/**
+ * The tier a host declared. A host that declares none cannot say whether its
+ * installs should dial a local or a hosted MCP, so it fails closed.
+ */
+export function mcpEnvironmentTier(scope) {
+    const name = scope.qualifiers?.environmentTier?.trim();
+    if (!name) {
+        throw new CapabilityError('This host declares no environment tier, so the MCP origin to write is unknown.', 'UNAVAILABLE', {
+            reason: 'tier-undeclared',
+            retryable: false,
+            recoveryHint: 'The host declaration must set qualifiers.environmentTier.'
+        });
+    }
+    return { name, isLocal: name === 'local' || name === 'dev' };
+}
+/**
+ * The hosted MCP origin a non-local install writes: the declared `mcp`
+ * `infra/service` (rc04 §2.4) in the runtime's configured service
+ * environment. `undefined` for a local tier (it dials the workspace's MCP
+ * host), and when the host declares no `mcp` service for that environment
+ * (`service-undeclared`, a confirmed absence: stdio installs never dial it,
+ * and an http install then fails `hosted-mcp-undeclared`). Any other failure
+ * throws.
+ */
+export async function resolveHostedMcpOrigin(runtime) {
+    if (mcpEnvironmentTier(runtime.declaredScope).isLocal)
+        return undefined;
+    // Ask the declared fact: a host that declares no `mcp` service has no hosted origin.
+    if (!runtime.hasKind('infra/service') || runtime.query('infra/service').withId('mcp').descriptors().length === 0) {
+        return undefined;
+    }
+    return (await serviceOrigin(runtime, 'mcp')).replace(/\/$/, '');
+}
+import { buildMcpServeArgs, resolveMcpServeIdentity } from "./serve-identity.js";
+export { buildMcpServeArgs, resolveMcpServeIdentity } from "./serve-identity.js";
+export function getMcpEnvironmentConfig(env, catalogId, hostId = '') {
+    const localHttpUrl = () => {
+        if (env.localMcpUrl !== undefined)
+            return env.localMcpUrl;
+        return env.workspaceRoot
+            ? localMcpUrl(resolveMcpHostPort({ workspaceRoot: env.workspaceRoot }))
+            : undefined;
+    };
+    if (env.detectedBinary) {
+        const { command, args: baseArgs } = env.detectedBinary;
+        return {
+            command,
+            args: buildMcpServeArgs(baseArgs, catalogId, hostId),
+            httpUrl: env.isLocal ? localHttpUrl() : env.hostedMcpOrigin
+        };
+    }
+    const args = buildMcpServeArgs(['dev', 'mcp', 'serve'], catalogId, hostId);
+    if (env.isLocal) {
+        return { command: resolveLocalCliCommand(env.userHome, env.platform), args, httpUrl: localHttpUrl() };
+    }
+    return { command: 'vibes', args, httpUrl: env.hostedMcpOrigin };
+}
+/** A host claim's fields, each read independently; a field that is not its shape is absent. */
+const ClaimPidSchema = z.number().int().positive();
+const ClaimPortSchema = z.union([z.number(), z.string()]);
+const ClaimWorkspaceSchema = z.string();
+/** The claim's three fields, each its own parse (one bad field never hides another). */
+function claimFields(raw) {
+    const pid = ClaimPidSchema.safeParse(ownValue(raw, 'pid'));
+    const port = ClaimPortSchema.safeParse(ownValue(raw, 'port'));
+    const workspaceRoot = ClaimWorkspaceSchema.safeParse(ownValue(raw, 'workspaceRoot'));
+    const fields = {};
+    if (pid.success)
+        fields.pid = pid.data;
+    if (port.success)
+        fields.port = port.data;
+    if (workspaceRoot.success)
+        fields.workspaceRoot = workspaceRoot.data;
+    return fields;
+}
+/** The claim file's text, refused typed when it cannot be read; `null` when absent. */
+async function readClaimText(fs, claimPath) {
+    try {
+        return await readTextIfPresent(fs, claimPath);
+    }
+    catch (error) {
+        throw new CapabilityError(`The MCP host claim ${claimPath} cannot be read.`, 'UNAVAILABLE', {
+            reason: 'fs-denied',
+            retryable: false,
+            details: { path: claimPath },
+            cause: CaughtFailureSchema.parse(error)
+        });
+    }
+}
+/** Parse a claim document through the one host-config reader, or refuse it `INTERNAL` `data-corrupt` (path only). */
+function parseClaim(raw, claimPath) {
+    try {
+        return parseHostConfig(raw, claimPath, 'json');
+    }
+    catch (error) {
+        const failure = CaughtFailureSchema.parse(error);
+        if (!(failure instanceof Error && isCapabilityError(failure) && failure.reason === 'host-config-invalid'))
+            throw error;
+        throw new CapabilityError(`The MCP host claim ${claimPath} is not valid JSON.`, 'INTERNAL', {
+            reason: 'data-corrupt',
+            details: { path: claimPath },
+            cause: failure
+        });
+    }
+}
+/**
+ * The port a LIVE local host is actually serving on, read from its own claim
+ * through the handed runtime's filesystem, with the claimed pid's liveness
+ * from its process service.
+ *
+ * The claim is the host's own record of what it bound (`pid`, `port`,
+ * `workspaceRoot`), so it beats any recomputation: it reflects an explicit
+ * `--port` the operator passed, which no derivation can know about. No claim,
+ * a claim for a dead pid, or one for another workspace is "no host". A claim
+ * that cannot be read or parsed fails typed: it is never silently a wrong
+ * endpoint. `roots.vibesHome` is the runtime's `paths/roots` Vibes home (D40),
+ * the root the claim's writer keys claims under; empty roots are refused
+ * `mcp-host-claim-roots-missing`.
+ */
+export async function readLiveHostPort(runtime, workspaceRoot, roots) {
+    const claimPath = mcpHostClaimPath(workspaceRoot, roots);
+    const raw = await readClaimText(await externalFileSystem(runtime), claimPath);
+    if (raw === null)
+        return null;
+    const claim = claimFields(parseClaim(raw, claimPath));
+    if (claim.pid === undefined || claim.port === undefined)
+        return null;
+    if (claim.workspaceRoot !== workspaceRoot)
+        return null;
+    const processes = await getRuntimeProcessService(runtime);
+    if (!(await processes.isRunning(claim.pid)))
+        return null;
+    return parsePortValue(claim.port);
+}
+/**
+ * The local MCP HTTP URL written into a tool's config AND dialled per hook call.
+ * Resolution order: the LIVE host's own claim for this workspace root (it
+ * records the port actually bound, including an explicit `--port`), else the
+ * workspace derivation through the SAME `resolveMcpHostPort` the host uses,
+ * so a config written while no host runs names the port the next host binds.
+ * No branch can produce a machine-global constant, and no env var redirects it.
+ */
+export async function resolveLocalMcpUrlForRuntime(runtime, roots) {
+    const live = await readLiveHostPort(runtime, roots.workspaceRoot, { vibesHome: roots.vibesHome });
+    return localMcpUrl(live ?? resolveMcpHostPort({ workspaceRoot: roots.workspaceRoot }));
+}
+function localMcpUrl(port) {
+    return `http://localhost:${port}/mcp`;
+}
+/**
+ * The installed CLI under the runtime's `paths/roots` user home, for the
+ * host's platform (`roots.platform`); a caller that names none gets the
+ * POSIX location.
+ */
+function resolveLocalCliCommand(userHome, platform) {
+    if (platform === 'win32')
+        return join(userHome, 'AppData', 'Local', 'vibes', 'bin', 'vibes.exe');
+    return join(userHome, '.local', 'bin', 'vibes');
+}
+/** The MCP server command and origin for an install on a host of `tier`. */
+export function getEnvironmentConfig(tier, roots) {
+    const env = { ...tier, userHome: roots.userHome, vibesHome: roots.vibesHome, platform: roots.platform };
+    if (roots.localMcpUrl !== undefined)
+        env.localMcpUrl = roots.localMcpUrl;
+    return getMcpEnvironmentConfig(env);
+}
+/**
+ * The local MCP URL an install on `tier` writes for `workspaceRoot`: resolved
+ * through the runtime for a local tier with a workspace, else none.
+ */
+export async function installLocalMcpUrl(runtime, tier, roots) {
+    if (!tier.isLocal || !roots.workspaceRoot)
+        return undefined;
+    return resolveLocalMcpUrlForRuntime(runtime, { workspaceRoot: roots.workspaceRoot, vibesHome: roots.vibesHome });
+}
+/**
+ * Identity + home anchors written into every MCP client config.
+ *
+ * Without these, GUI / non-shell launches (Claude Desktop, Grok Build, Codex)
+ * could fork storage/secrets into a different home and write presence under a
+ * default agent id — the mis-anchored body injury (see
+ * docs/findings/mcp-workspace-home-anchoring/FINDINGS.md).
+ *
+ * - `VIBES_AGENT_ID` — provider-declared presence/brain body slug
+ * - `VIBES_HARNESS` — provider-declared external host identity
+ * - `VIBES_MCP_PRESET` — catalog (`minimal` | `presence` | `code` | `full`)
+ * - `VIBES_HOME` — the runtime-selected home from paths/roots (`~/.vibes` by default),
+ *   pinned so GUI launches share one home with CLI launches
+ *
+ * The project root is not an env var: an install that knows it pins it in the
+ * server's argv ({@link mcpWorkspaceRootArgs}), because the kernel ignores
+ * `VIBES_WORKSPACE_PATH`.
+ */
+export function buildMcpIdentityEnv(options) {
+    const clientId = options.clientId.trim();
+    // paths/roots already honors VIBES_HOME at composition; the caller that holds
+    // the runtime hands its vibesHome in, so there is one selection seam (#1098).
+    const home = options.vibesHome;
+    const identity = resolveMcpServeIdentity(options.catalogId ?? 'full', clientId, {
+        harness: options.harnessId,
+        agent: options.agentId
+    });
+    const env = { VIBES_MCP_PRESET: identity.preset, VIBES_HOME: home };
+    if (identity.agent)
+        env.VIBES_AGENT_ID = identity.agent;
+    if (identity.harness)
+        env.VIBES_HARNESS = identity.harness;
+    return env;
+}
+/**
+ * The argv that pins a `vibes` MCP server to an install's known project root:
+ * `--workspace-root <dir>`, the global flag the CLI pre-parses before its host
+ * binds. Empty when the install names no root, or names `/`, so the server
+ * binds from its own cwd.
+ */
+export function mcpWorkspaceRootArgs(workspacePath) {
+    const workspace = workspacePath?.trim();
+    return workspace && workspace !== '/' ? ['--workspace-root', workspace] : [];
+}
+/**
+ * `args` with the project pin inserted where the CLI's own self-spawn puts a
+ * global flag: after the executable prefix, before the `dev mcp serve`
+ * subcommand (a host manifest may require the argv to END with the serve
+ * identity). Unchanged when there is no pin or it already carries one (an
+ * agent-pack server built for the same install). Installers apply it to every
+ * stdio server they write, so a project config is pinned whichever path built it.
+ */
+export function pinWorkspaceRoot(args, workspacePath) {
+    const pin = mcpWorkspaceRootArgs(workspacePath);
+    if (pin.length === 0 || args.includes('--workspace-root'))
+        return [...args];
+    const serve = args.findIndex((arg, index) => arg === 'dev' && args[index + 1] === 'mcp' && args[index + 2] === 'serve');
+    const at = serve < 0 ? args.length : serve;
+    return [...args.slice(0, at), ...pin, ...args.slice(at)];
+}
+/**
+ * The bearer key installers once published into a harness's MCP config. It is
+ * never written now: the spawned `vibes` MCP server resolves the caller's
+ * bearer from its own host's declared capability (the harness profile's
+ * device session, or a live `VIBES_HOST_CREDENTIALS` manifest from
+ * `vibes secrets exec`), rc01 §6 Q1 "Publishers" / R3.
+ */
+export const PUBLISHED_BEARER_KEY = 'VIBES_AUTH_TOKEN';
+/** What an installer prints when a reinstall removes a previously published bearer. */
+export const PUBLISHED_BEARER_REMOVED_NOTICE = `Removed ${PUBLISHED_BEARER_KEY} from the MCP config: the Vibes MCP server no longer runs as the ` +
+    'account whose token was written there. It now acts as whoever is signed in on this machine ' +
+    '(`vibes auth login`), or as the credentials `vibes secrets exec --session` publishes to it.';
+/** True when an MCP server entry carries a published bearer in `env` or `settings`. */
+export function hasPublishedBearer(serverConfig) {
+    if (!serverConfig)
+        return false;
+    return ['env', 'settings'].some((key) => {
+        const section = ownObject(serverConfig, key);
+        return section !== undefined && Object.hasOwn(section, PUBLISHED_BEARER_KEY);
+    });
+}
+/** Delete a published bearer from an MCP server entry's `env` and `settings`, in place. */
+export function stripPublishedBearer(serverConfig) {
+    for (const key of ['env', 'settings']) {
+        const section = ownObject(serverConfig, key);
+        if (section)
+            deleteOwn(section, PUBLISHED_BEARER_KEY);
+    }
+}
+/** The install message, with the identity change appended when a published bearer was removed. */
+export function withIdentityChange(message, removedPublishedBearer) {
+    return removedPublishedBearer ? `${message}\n${PUBLISHED_BEARER_REMOVED_NOTICE}` : message;
+}
+export function buildStdioConfig(envConfig, 
+/** Extra env merged after identity defaults. Never carries a bearer. */
+extraEnv) {
+    const config = {
+        command: envConfig.command,
+        args: [...envConfig.args]
+    };
+    const env = {};
+    for (const [key, value] of Object.entries(extraEnv ?? {})) {
+        if (key !== PUBLISHED_BEARER_KEY)
+            setOwn(env, key, value);
+    }
+    if (Object.keys(env).length > 0) {
+        config.env = env;
+    }
+    return config;
+}
+export function buildHttpConfig(envConfig, authToken, urlKey = 'url') {
+    if (!envConfig.httpUrl) {
+        throw new CapabilityError('A local http MCP config dials the MCP host of a workspace, and none was given.', 'INVALID_INPUT', {
+            reason: 'workspace-root-required',
+            recoveryHint: 'Pass the workspace root, or install from inside a workspace.'
+        });
+    }
+    const config = { type: 'http' };
+    setOwn(config, urlKey, envConfig.httpUrl);
+    if (authToken) {
+        config.headers = { Authorization: `Bearer ${authToken}` };
+    }
+    return config;
+}
+export function buildMcpConfig(envConfig, mode, authToken) {
+    // A remote http server authenticates each request by its header; a stdio
+    // server resolves its own caller bearer, so it never receives one.
+    return mode === 'http' ? buildHttpConfig(envConfig, authToken) : buildStdioConfig(envConfig);
+}
+//# sourceMappingURL=environment.js.map

package/dist/plugins/installers/mcp/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../../../src/plugins/installers/mcp/environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,EAAsC,MAAM,qBAAqB,CAAC;AAClI,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EACN,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAqB,MAAM,oBAAoB,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAExE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAA2B,MAAM,8BAA8B,CAAC;AAyB9G;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAElC;IACA,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACxB,gFAAgF,EAChF,aAAa,EACb;YACC,MAAM,EAAE,iBAAiB;YACzB,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,2DAA2D;SACzE,CACD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAqB;IACjE,IAAI,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACxE,qFAAqF;IACrF,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClH,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC;AAyBD,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EACN,iBAAiB,EACjB,uBAAuB,EAEvB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,UAAU,uBAAuB,CACtC,GAAoB,EACpB,SAAkB,EAClB,MAAM,GAAG,EAAE;IAEX,MAAM,YAAY,GAAG,GAAuB,EAAE;QAC7C,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,WAAW,CAAC;QAC1D,OAAO,GAAG,CAAC,aAAa;YACvB,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;YACvE,CAAC,CAAC,SAAS,CAAC;IACd,CAAC,CAAC;IACF,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,cAAc,CAAC;QACvD,OAAO;YACN,OAAO;YACP,IAAI,EAAE,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;YACpD,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe;SAC3D,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3E,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,sBAAsB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC;IACvG,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC;AACjE,CAAC;AAED,+FAA+F;AAC/F,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;AACnD,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAC1D,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AASxC,wFAAwF;AACxF,SAAS,WAAW,CAAC,GAAiB;IACrC,MAAM,GAAG,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,IAAI,GAAG,CAAC,OAAO;QAAE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC;IACvC,IAAI,IAAI,CAAC,OAAO;QAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IAC1C,IAAI,aAAa,CAAC,OAAO;QAAE,MAAM,CAAC,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC;IACrE,OAAO,MAAM,CAAC;AACf,CAAC;AAED,uFAAuF;AACvF,KAAK,UAAU,aAAa,CAAC,EAAsB,EAAE,SAAiB;IACrE,IAAI,CAAC;QACJ,OAAO,MAAM,iBAAiB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,sBAAsB,SAAS,kBAAkB,EAAE,aAAa,EAAE;YAC3F,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC5B,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC;SACvC,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,qHAAqH;AACrH,SAAS,UAAU,CAAC,GAAW,EAAE,SAAiB;IACjD,IAAI,CAAC;QACJ,OAAO,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,CAAC,OAAO,YAAY,KAAK,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,CAAC;YAAE,MAAM,KAAK,CAAC;QACvH,MAAM,IAAI,eAAe,CAAC,sBAAsB,SAAS,qBAAqB,EAAE,UAAU,EAAE;YAC3F,MAAM,EAAE,cAAc;YACtB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC5B,KAAK,EAAE,OAAO;SACd,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,OAAmB,EACnB,aAAqB,EACrB,KAA2C;IAE3C,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9E,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,OAAmB,EAAE,KAAwB;IAC/F,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAClG,OAAO,WAAW,CAAC,IAAI,IAAI,kBAAkB,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAChC,OAAO,oBAAoB,IAAI,MAAM,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,QAAgB,EAAE,QAAiC;IAClF,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IACjG,OAAO,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CACnC,IAAwB,EACxB,KAAsG;IAEtG,MAAM,GAAG,GAAoB,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IACzH,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACzE,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,OAAmB,EACnB,IAAwB,EACxB,KAAoD;IAEpD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,4BAA4B,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;AAClH,CAAC;AAUD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAWnC;IACA,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzC,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC;IAC/B,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,EAAE,QAAQ,EAAE;QAC/E,OAAO,EAAE,OAAO,CAAC,SAAS;QAC1B,KAAK,EAAE,OAAO,CAAC,OAAO;KACtB,CAAC,CAAC;IACH,MAAM,GAAG,GAAmB,EAAE,gBAAgB,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACpF,IAAI,QAAQ,CAAC,KAAK;QAAE,GAAG,CAAC,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC;IACxD,IAAI,QAAQ,CAAC,OAAO;QAAE,GAAG,CAAC,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC3D,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,aAAsB;IAC1D,MAAM,SAAS,GAAG,aAAa,EAAE,IAAI,EAAE,CAAC;IACxC,OAAO,SAAS,IAAI,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAuB,EAAE,aAAsB;IAC/E,MAAM,GAAG,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAChD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAC3B,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,OAAO,CACzF,CAAC;IACF,MAAM,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3C,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAEvD,uFAAuF;AACvF,MAAM,CAAC,MAAM,+BAA+B,GAC3C,WAAW,oBAAoB,mEAAmE;IAClG,6FAA6F;IAC7F,6FAA6F,CAAC;AAE/F,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CAAC,YAAsC;IACxE,IAAI,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACvC,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC7C,OAAO,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,oBAAoB,CAAC,YAA0B;IAC9D,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,OAAO;YAAE,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IACvD,CAAC;AACF,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,sBAA+B;IAClF,OAAO,sBAAsB,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,+BAA+B,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC/B,SAA+B;AAC/B,wEAAwE;AACxE,QAAiC;IAEjC,MAAM,MAAM,GAAiB;QAC5B,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,IAAI,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC;KACzB,CAAC;IAEF,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,IAAI,GAAG,KAAK,oBAAoB;YAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAC9B,SAA+B,EAC/B,SAAkB,EAClB,SAA8B,KAAK;IAEnC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CACxB,gFAAgF,EAChF,eAAe,EACf;YACC,MAAM,EAAE,yBAAyB;YACjC,YAAY,EAAE,8DAA8D;SAC5E,CACD,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IAE1C,IAAI,SAAS,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,GAAG,EAAE,aAAa,EAAE,UAAU,SAAS,EAAE,EAAE,CAAC;IAC3D,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAC7B,SAA+B,EAC/B,IAAkB,EAClB,SAAkB;IAElB,yEAAyE;IACzE,mEAAmE;IACnE,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;AAC9F,CAAC"}

package/dist/plugins/installers/mcp/index.d.ts

@@ -0,0 +1,9 @@
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import type { ConfigFormat } from '../../schemas/manifest.ts';
+import type { McpInstaller } from '../types.ts';
+export { JsonMcpInstaller } from './json-installer.ts';
+export { TomlMcpInstaller, getTomlMcpServerConfigIssues } from './toml-installer.ts';
+export { YamlMcpInstaller } from './yaml-installer.ts';
+export declare function getMcpInstaller(format: ConfigFormat, runtime: VibesRuntime): Promise<McpInstaller | undefined>;
+export declare function getAllMcpInstallers(runtime: VibesRuntime): Promise<McpInstaller[]>;
+//# sourceMappingURL=index.d.ts.map

package/dist/plugins/installers/mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/plugins/installers/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAMhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,wBAAgB,eAAe,CAC9B,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,YAAY,GACnB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAEnC;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAElF"}

package/dist/plugins/installers/mcp/index.js

@@ -0,0 +1,11 @@
+import { listExternalConfigInstallers, resolveExternalConfigInstaller } from "../runtime.js";
+export { JsonMcpInstaller } from "./json-installer.js";
+export { TomlMcpInstaller, getTomlMcpServerConfigIssues } from "./toml-installer.js";
+export { YamlMcpInstaller } from "./yaml-installer.js";
+export function getMcpInstaller(format, runtime) {
+    return resolveExternalConfigInstaller('mcp', format, runtime);
+}
+export function getAllMcpInstallers(runtime) {
+    return listExternalConfigInstallers('mcp', runtime);
+}
+//# sourceMappingURL=index.js.map

package/dist/plugins/installers/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/plugins/installers/mcp/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACN,4BAA4B,EAC5B,8BAA8B,EAC9B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,UAAU,eAAe,CAC9B,MAAoB,EACpB,OAAqB;IAErB,OAAO,8BAA8B,CAAe,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAqB;IACxD,OAAO,4BAA4B,CAAe,KAAK,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC"}

package/dist/plugins/installers/mcp/json-installer.d.ts

@@ -0,0 +1,18 @@
+import type { ExternalHostManifest, ConfigFormat } from '../../schemas/manifest.ts';
+import type { ExternalInstallRoots, ExternalInstallTarget, McpInstaller, McpInstallOptions, McpInstallResult, InstallResult } from '../types.ts';
+import { type McpEnvironmentTier } from './environment.ts';
+export declare class JsonMcpInstaller implements McpInstaller {
+    readonly id = "json-mcp";
+    readonly supportedFormats: ConfigFormat[];
+    install(options: McpInstallOptions, target: ExternalInstallTarget, tier: McpEnvironmentTier): Promise<McpInstallResult>;
+    isConfigured(manifest: ExternalHostManifest, global: boolean, target: ExternalInstallTarget): Promise<boolean>;
+    /**
+     * Remove the Vibes server entry. An absent file or entry is "not
+     * configured"; an unreadable or invalid file is refused typed, never
+     * reported as a generic read failure.
+     */
+    uninstall(manifest: ExternalHostManifest, global: boolean, target: ExternalInstallTarget): Promise<InstallResult>;
+    getConfigPath(manifest: ExternalHostManifest, global: boolean, roots: ExternalInstallRoots): string;
+    private getConfigLocation;
+}
+//# sourceMappingURL=json-installer.d.ts.map

package/dist/plugins/installers/mcp/json-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-installer.d.ts","sourceRoot":"","sources":["../../../../src/plugins/installers/mcp/json-installer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACpF,OAAO,KAAK,EACX,oBAAoB,EACpB,qBAAqB,EACrB,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,MAAM,aAAa,CAAC;AAErB,OAAO,EAIN,KAAK,kBAAkB,EAEvB,MAAM,kBAAkB,CAAC;AAyC1B,qBAAa,gBAAiB,YAAW,YAAY;IACpD,QAAQ,CAAC,EAAE,cAAc;IACzB,QAAQ,CAAC,gBAAgB,EAAE,YAAY,EAAE,CAAqB;IACxD,OAAO,CACZ,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,qBAAqB,EAC7B,IAAI,EAAE,kBAAkB,GACtB,OAAO,CAAC,gBAAgB,CAAC;IA+DtB,YAAY,CAAC,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC;IAcpH;;;;OAIG;IACG,SAAS,CAAC,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC;IA0BvH,aAAa,CAAC,QAAQ,EAAE,oBAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,GAAG,MAAM;IAMnG,OAAO,CAAC,iBAAiB;CASzB"}

package/dist/plugins/installers/mcp/json-installer.js

@@ -0,0 +1,155 @@
+import * as z from 'zod/v4';
+import { resolvePathTemplate } from "../../../external-tool/path-template.js";
+import { buildMcpConfig, getEnvironmentConfig, hasPublishedBearer, withIdentityChange } from "./environment.js";
+import { anchorIdentityEnv, applyConfigTemplate, finalizeServerConfig, pinServerArgs } from "./server-config.js";
+import { readMcpServerConfig, upsertMcpServerConfig, removeMcpServerConfig } from "./json-paths.js";
+import { readConfigText, writeConfigAtomically } from "../config-file.js";
+import { copyConfigObject, setOwn } from "../config-value.js";
+import { parseHostConfig } from "../../../detection/config-document.js";
+/** Manifests whose servers map sits under a literal dotted key (VS Code settings: "cline.mcpServers"). */
+const LiteralDotsStyleSchema = z.object({ mcpPathStyle: z.literal('literal-dots') });
+function usesLiteralDots(manifest) {
+    return LiteralDotsStyleSchema.safeParse(manifest.metadata).success;
+}
+/** The config document, or null when the file is absent; an unreadable or invalid one fails typed. */
+async function readJsonConfig(target, configPath, format) {
+    const content = await readConfigText(target.fs, configPath);
+    return content === null ? null : parseHostConfig(content, configPath, format);
+}
+/** The server entry an install writes: pack override or environment default, pinned, identified, templated. */
+function buildServerConfig(options, target, tier) {
+    const { manifest, global, projectDir, authToken, transport } = options;
+    const serverConfig = options.serverConfigOverride
+        ? copyConfigObject(options.serverConfigOverride)
+        : buildMcpConfig(getEnvironmentConfig(tier, {
+            userHome: target.userHome,
+            vibesHome: target.vibesHome,
+            platform: target.platform,
+            localMcpUrl: tier.localMcpUrl
+        }), transport ?? 'stdio', authToken);
+    pinServerArgs(serverConfig, global ? undefined : projectDir);
+    anchorIdentityEnv(serverConfig, manifest, target.vibesHome);
+    applyConfigTemplate(serverConfig, manifest.integration.mcp?.configTemplate);
+    return finalizeServerConfig(serverConfig);
+}
+export class JsonMcpInstaller {
+    id = 'json-mcp';
+    supportedFormats = ['json', 'jsonc'];
+    async install(options, target, tier) {
+        const { manifest, global, dryRun, force, authToken, serverName } = options;
+        const configLocation = this.getConfigLocation(manifest, global, target.platform);
+        if (!configLocation) {
+            return {
+                success: false,
+                message: `No ${global ? 'global' : 'project'} JSON config defined for ${manifest.name}`,
+                error: 'NO_CONFIG_LOCATION',
+                configPath: '',
+                created: false,
+                updated: false,
+                serverName: ''
+            };
+        }
+        const configPath = resolvePathTemplate(configLocation.path, target);
+        const mcpPath = configLocation.mcpPath || 'mcpServers';
+        const finalServerName = serverName || manifest.mcp.defaultServerName || 'vibes';
+        // Read the existing config. Only absence starts fresh: an unreadable or
+        // invalid user document is never overwritten.
+        const existing = await readJsonConfig(target, configPath, configLocation.format);
+        const config = existing ?? {};
+        const isUpdate = existing !== null;
+        // Some clients store MCP config under a literal dotted key (e.g. VS Code settings: "cline.mcpServers").
+        if (usesLiteralDots(manifest) && !Object.hasOwn(config, mcpPath))
+            setOwn(config, mcpPath, {});
+        const existingServer = readMcpServerConfig(config, mcpPath, finalServerName);
+        // A published bearer is removed on every reinstall, forced or not.
+        const removedPublishedBearer = hasPublishedBearer(existingServer);
+        if (existingServer && !force && !authToken && !removedPublishedBearer) {
+            return {
+                success: true,
+                message: `${manifest.name} MCP already configured. Use --force to overwrite.`,
+                configPath,
+                created: false,
+                updated: false,
+                serverName: finalServerName
+            };
+        }
+        upsertMcpServerConfig(config, mcpPath, finalServerName, buildServerConfig(options, target, tier));
+        if (!dryRun)
+            await writeConfigAtomically(target.fs, configPath, `${JSON.stringify(config, null, 2)}\n`);
+        const result = {
+            success: true,
+            message: withIdentityChange(dryRun
+                ? `Would ${isUpdate ? 'update' : 'create'} ${manifest.name} MCP config at ${configPath}`
+                : `${isUpdate ? 'Updated' : 'Created'} ${manifest.name} MCP config at ${configPath}`, removedPublishedBearer),
+            configPath,
+            created: !isUpdate,
+            updated: isUpdate,
+            serverName: finalServerName
+        };
+        if (removedPublishedBearer)
+            result.removedPublishedBearer = true;
+        return result;
+    }
+    async isConfigured(manifest, global, target) {
+        const configLocation = this.getConfigLocation(manifest, global, target.platform);
+        if (!configLocation)
+            return false;
+        const configPath = resolvePathTemplate(configLocation.path, target);
+        const mcpPath = configLocation.mcpPath || 'mcpServers';
+        const serverName = manifest.mcp.defaultServerName || 'vibes';
+        const config = await readJsonConfig(target, configPath, configLocation.format);
+        if (!config)
+            return false;
+        if (usesLiteralDots(manifest) && !Object.hasOwn(config, mcpPath))
+            return false;
+        return readMcpServerConfig(config, mcpPath, serverName) !== undefined;
+    }
+    /**
+     * Remove the Vibes server entry. An absent file or entry is "not
+     * configured"; an unreadable or invalid file is refused typed, never
+     * reported as a generic read failure.
+     */
+    async uninstall(manifest, global, target) {
+        const configLocation = this.getConfigLocation(manifest, global, target.platform);
+        if (!configLocation) {
+            return {
+                success: false,
+                message: `No ${global ? 'global' : 'project'} config defined`,
+                error: 'NO_CONFIG_LOCATION'
+            };
+        }
+        const configPath = resolvePathTemplate(configLocation.path, target);
+        const mcpPath = configLocation.mcpPath || 'mcpServers';
+        const serverName = manifest.mcp.defaultServerName || 'vibes';
+        const config = await readJsonConfig(target, configPath, configLocation.format);
+        if (!config)
+            return { success: true, message: 'Vibes MCP not configured' };
+        if (usesLiteralDots(manifest) && !Object.hasOwn(config, mcpPath)) {
+            return { success: true, message: 'Vibes MCP not configured' };
+        }
+        if (!removeMcpServerConfig(config, mcpPath, serverName)) {
+            return { success: true, message: 'Vibes MCP not configured' };
+        }
+        await writeConfigAtomically(target.fs, configPath, `${JSON.stringify(config, null, 2)}\n`);
+        return { success: true, message: `Removed vibes MCP from ${configPath}` };
+    }
+    getConfigPath(manifest, global, roots) {
+        const configLocation = this.getConfigLocation(manifest, global, roots.platform);
+        if (!configLocation)
+            return '';
+        return resolvePathTemplate(configLocation.path, roots);
+    }
+    getConfigLocation(manifest, global, platform) {
+        const scope = global ? 'global' : 'project';
+        return manifest.configs.find((c) => {
+            if (c.scope !== scope)
+                return false;
+            if (!this.supportedFormats.includes(c.format))
+                return false;
+            if (!c.platform || c.platform === 'all')
+                return true;
+            return c.platform === platform;
+        });
+    }
+}
+//# sourceMappingURL=json-installer.js.map

package/dist/plugins/installers/mcp/json-installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-installer.js","sourceRoot":"","sources":["../../../../src/plugins/installers/mcp/json-installer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAU5B,OAAO,EAAE,mBAAmB,EAAoB,MAAM,yCAAyC,CAAC;AAChG,OAAO,EACN,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAElB,kBAAkB,EAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACjH,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAqB,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAExE,0GAA0G;AAC1G,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;AAErF,SAAS,eAAe,CAAC,QAA8B;IACtD,OAAO,sBAAsB,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;AACpE,CAAC;AAED,sGAAsG;AACtG,KAAK,UAAU,cAAc,CAAC,MAA6B,EAAE,UAAkB,EAAE,MAAoB;IACpG,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC5D,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AAC/E,CAAC;AAED,+GAA+G;AAC/G,SAAS,iBAAiB,CAAC,OAA0B,EAAE,MAA4B,EAAE,IAAwB;IAC5G,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACvE,MAAM,YAAY,GAAG,OAAO,CAAC,oBAAoB;QAChD,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAChD,CAAC,CAAC,cAAc,CACd,oBAAoB,CAAC,IAAI,EAAE;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC,EACF,SAAS,IAAI,OAAO,EACpB,SAAS,CACT,CAAC;IACJ,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC7D,iBAAiB,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5D,mBAAmB,CAAC,YAAY,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC5E,OAAO,oBAAoB,CAAC,YAAY,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,OAAO,gBAAgB;IACnB,EAAE,GAAG,UAAU,CAAC;IAChB,gBAAgB,GAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9D,KAAK,CAAC,OAAO,CACZ,OAA0B,EAC1B,MAA6B,EAC7B,IAAwB;QAExB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC3E,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjF,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,MAAM,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,4BAA4B,QAAQ,CAAC,IAAI,EAAE;gBACvF,KAAK,EAAE,oBAAoB;gBAC3B,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,EAAE;aACd,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,IAAI,YAAY,CAAC;QACvD,MAAM,eAAe,GAAG,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC;QAEhF,wEAAwE;QACxE,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,MAAM,GAAiB,QAAQ,IAAI,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC;QAEnC,wGAAwG;QACxG,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;YAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAE9F,MAAM,cAAc,GAAG,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;QAC7E,mEAAmE;QACnE,MAAM,sBAAsB,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC;QAElE,IAAI,cAAc,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACvE,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,oDAAoD;gBAC7E,UAAU;gBACV,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,eAAe;aAC3B,CAAC;QACH,CAAC;QAED,qBAAqB,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QAElG,IAAI,CAAC,MAAM;YAAE,MAAM,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAExG,MAAM,MAAM,GAAqB;YAChC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,kBAAkB,CAC1B,MAAM;gBACL,CAAC,CAAC,SAAS,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,kBAAkB,UAAU,EAAE;gBACxF,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,IAAI,kBAAkB,UAAU,EAAE,EACrF,sBAAsB,CACtB;YACD,UAAU;YACV,OAAO,EAAE,CAAC,QAAQ;YAClB,OAAO,EAAE,QAAQ;YACjB,UAAU,EAAE,eAAe;SAC3B,CAAC;QACF,IAAI,sBAAsB;YAAE,MAAM,CAAC,sBAAsB,GAAG,IAAI,CAAC;QACjE,OAAO,MAAM,CAAC;IACf,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAA8B,EAAE,MAAe,EAAE,MAA6B;QAChG,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjF,IAAI,CAAC,cAAc;YAAE,OAAO,KAAK,CAAC;QAElC,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,IAAI,YAAY,CAAC;QACvD,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC;QAE7D,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/E,OAAO,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,SAAS,CAAC;IACvE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,QAA8B,EAAE,MAAe,EAAE,MAA6B;QAC7F,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjF,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO;gBACN,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,MAAM,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,iBAAiB;gBAC7D,KAAK,EAAE,oBAAoB;aAC3B,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,IAAI,YAAY,CAAC;QACvD,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC;QAE7D,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;QAC3E,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YAClE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,UAAU,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,aAAa,CAAC,QAA8B,EAAE,MAAe,EAAE,KAA2B;QACzF,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChF,IAAI,CAAC,cAAc;YAAE,OAAO,EAAE,CAAC;QAC/B,OAAO,mBAAmB,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IAEO,iBAAiB,CAAC,QAA8B,EAAE,MAAe,EAAE,QAAqB;QAC/F,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5C,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAClC,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO,KAAK,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC5D,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC;YACrD,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAChC,CAAC,CAAC,CAAC;IACJ,CAAC;CACD"}

package/dist/plugins/installers/mcp/json-paths.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Read, upsert and remove one MCP server entry in a parsed host config.
+ *
+ * `mcpPath` is the manifest's location of the servers map: a literal key
+ * (`cline.mcpServers` in VS Code settings), a dotted path (`mcp.servers`), or
+ * a path ending in an array segment (`mcp.servers[]`) whose entries carry a
+ * `name`. Every key is an own property (see config-value.ts).
+ */
+import { type ConfigObject } from '../config-value.ts';
+export declare function readMcpServerConfig(config: ConfigObject, mcpPath: string, serverName: string): ConfigObject | undefined;
+export declare function upsertMcpServerConfig(config: ConfigObject, mcpPath: string, serverName: string, serverConfig: ConfigObject): void;
+export declare function removeMcpServerConfig(config: ConfigObject, mcpPath: string, serverName: string): boolean;
+//# sourceMappingURL=json-paths.d.ts.map

package/dist/plugins/installers/mcp/json-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-paths.d.ts","sourceRoot":"","sources":["../../../../src/plugins/installers/mcp/json-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAMN,KAAK,YAAY,EAEjB,MAAM,oBAAoB,CAAC;AAgC5B,wBAAgB,mBAAmB,CAClC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GAChB,YAAY,GAAG,SAAS,CAmB1B;AAED,wBAAgB,qBAAqB,CACpC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,YAAY,GACxB,IAAI,CA6BN;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAgCxG"}