@warmio/mcp 11.0.7 → 11.0.10

package/README.md

@@ -1,19 +1,100 @@
 # @warmio/mcp
 
-`@warmio/mcp` is Warm's local stdio MCP server. Run the interactive installer to validate and store one full-access `WARM_API_KEY`, then configure detected supported clients:
+`@warmio/mcp` is Warm's local stdio MCP server. It also documents the hosted HTTP endpoint at `https://app.warm.io/mcp`. Run the interactive installer to validate and store one full-access `WARM_API_KEY`, then configure detected supported clients:
 
 ```sh
-npx -y @warmio/mcp@11.0.7 install
+npx -y @warmio/mcp@latest install
 ```
 
-Each client starts the server with the exact pinned package spec from `@warmio/contracts/mcp` (currently `@warmio/mcp@11.0.7`):
+Each client starts the server with the canonical latest launcher spec from `@warmio/contracts/mcp`:
 
 ```sh
-npx -y @warmio/mcp@11.0.7 mcp
+npx -y @warmio/mcp@latest mcp
 ```
 
 The server exposes financial-context read tools plus the automation operation catalog. The installer stores the local credential with owner-only file permissions. Importing `@warmio/mcp` exposes the library API without starting the CLI.
 
+## Hosted HTTP
+
+Claude Code, Cursor, and VS Code can use the hosted endpoint instead of the local process. The URL is `https://app.warm.io/mcp`. Send the existing Warm API key in the `Authorization` header as `Bearer` plus the key. Do not put the key in the URL.
+
+The hosted server lists only `get_financial_context` and `get_transactions`. The local installer and its five tools stay the same. Claude Desktop, claude.ai, and ChatGPT are not supported on this endpoint. A missing, invalid, or revoked key returns HTTP 401 with `WWW-Authenticate: Bearer realm="Warm MCP"`.
+
+Claude Code:
+
+```json
+{
+  "mcpServers": {
+    "warm": {
+      "type": "http",
+      "url": "https://app.warm.io/mcp",
+      "headers": {
+        "Authorization": "Bearer ${WARM_API_KEY}"
+      }
+    }
+  }
+}
+```
+
+Cursor:
+
+```json
+{
+  "mcpServers": {
+    "warm": {
+      "url": "https://app.warm.io/mcp",
+      "headers": {
+        "Authorization": "Bearer ${env:WARM_API_KEY}"
+      }
+    }
+  }
+}
+```
+
+VS Code (`.vscode/mcp.json`):
+
+```json
+{
+  "servers": {
+    "warm": {
+      "type": "http",
+      "url": "https://app.warm.io/mcp",
+      "headers": {
+        "Authorization": "Bearer ${input:warm-api-key}"
+      }
+    }
+  },
+  "inputs": [
+    {
+      "id": "warm-api-key",
+      "type": "promptString",
+      "description": "Warm API key",
+      "password": true
+    }
+  ]
+}
+```
+
+## OpenCode 2
+
+The installer configures OpenCode 2 using `mcp.servers.warm`. It uses an existing
+`~/.config/opencode/opencode.jsonc` file when present, otherwise `opencode.json`.
+Comments and unrelated settings remain in place.
+
+When reinstalling, the installer moves existing OpenCode 1 MCP server entries under
+`mcp.servers`. It converts `enabled`, numeric timeouts, and OAuth field names to their
+OpenCode 2 equivalents. Conflicting old and new entries for another server stop the
+installation without writing files. The installer replaces Warm's own entry after
+the existing reinstall confirmation, or when `--force` is supplied.
+
+The installer migrates MCP settings only. Migrate the rest of an OpenCode 1 configuration
+using OpenCode's [migration guide](https://opencode.ai/v2/docs/migrate-v1/) before using
+OpenCode 2. New installer output targets OpenCode 2 rather than OpenCode 1.
+
+No plugin is required. OpenCode 2 discovers Warm's tools through MCP and enables Code
+Mode by default. Warm still requires Plus or Pro and staying within the plan's
+bank-login limit.
+
 ## Environment precedence
 
 Credential and config resolution is fixed and never loaded from ancestor or project `.env` files by default:
@@ -28,22 +109,24 @@ Optional local development: set `WARM_LOAD_PROJECT_ENV=1` before starting the CL
 
 ## Launcher integrity contract
 
-Generated launcher configs pin an exact package version (`@warmio/mcp@<version>`), never `@latest`. The release manifest records a `packageIntegrity` contract whose `registryIntegrity` value is populated only after the trusted publish workflow (`.github/workflows/publish-mcp.yml`) completes npm registry readback for the pinned version. Until that gate passes, treat `registryIntegrity: null` as an external deployment requirement rather than a local hash to copy by hand.
+Setup commands and generated launcher configs use the approved `@warmio/mcp@latest` tag. The manifest separately retains the exact release `packageSpec` and `packageVersion` for provenance. Its `packageIntegrity` contract applies to that exact release. The `.github/workflows/publish-mcp.yml` workflow requires an exact merged source SHA and npm registry readback for that version. A registry integrity value does not attest which release the floating `latest` tag resolves to. Until that gate passes, treat `registryIntegrity: null` as an external deployment requirement rather than a local hash to copy by hand.
 
 Set `WARM_MCP_REQUIRE_REGISTRY_INTEGRITY=1` to require an exact registry readback. When the manifest still has `registryIntegrity: null`, set `WARM_MCP_REGISTRY_INTEGRITY` to the trusted workflow's `dist.integrity` value. The gate rejects missing or malformed values. Default installs and launcher generation remain allowed until this opt-in gate is enabled.
 
 ## Claude Desktop Extension
 
-For Claude Desktop users, a packaged `.mcpb` extension is available in `mcpb/`. To build it:
+For Claude Desktop users, the fixed-tree extension is produced only by the guarded, context-aware flow:
 
 ```sh
-cd mcpb
-pnpm install
-pnpm pack
+/absolute/worktree/tools/tasks/run-plan-gate.mjs \
+  --target-id P0_MCPB_FIXED_TREE \
+  --argv-json '[\"/usr/bin/node\",\"/absolute/worktree/libraries/mcp/mcpb/build.js\",\"--contracts-tar\",\"/absolute/worktree/libraries/mcp/mcpb/.inputs/contracts.tgz\",\"--mcp-tar\",\"/absolute/worktree/libraries/mcp/mcpb/.inputs/mcp.tgz\"]' \
+  --context /absolute/context.json
 ```
 
-This produces `warm.mcpb` which can be installed via double-click or drag-and-drop into Claude Desktop.
-The extension uses the same API key authentication as the CLI but provides a settings UI for key entry.
+The flow consumes only the exact local closure tarballs, materializes and packs offline, then
+securely extracts and smokes the unpacked MCPB. It produces `warm.mcpb`; registry and network
+fallbacks are forbidden.
 
 ## Cursor Plugin
 

package/dist/hosted-http.d.ts

@@ -0,0 +1,9 @@
+export declare const HOSTED_MCP_MAX_REQUEST_BYTES = 65536;
+type HostedDispatch = (request: Request) => Promise<Response>;
+export interface HostedReadOnlyMcpDependencies {
+    concurrencyKey: string;
+    dispatchApi: HostedDispatch;
+}
+export declare function handleHostedReadOnlyMcpRequest(request: Request, dependencies: HostedReadOnlyMcpDependencies): Promise<Response>;
+export {};
+//# sourceMappingURL=hosted-http.d.ts.map

package/dist/hosted-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-http.d.ts","sourceRoot":"","sources":["../src/hosted-http.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAWnD,KAAK,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE9D,MAAM,WAAW,6BAA6B;IAC5C,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,cAAc,CAAC;CAC7B;AAkMD,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,6BAA6B,GAC1C,OAAO,CAAC,QAAQ,CAAC,CA2CnB"}

package/dist/hosted-http.js

@@ -0,0 +1,238 @@
+import { CfWorkerJsonSchemaValidator } from '@modelcontextprotocol/sdk/validation/cfworker';
+import { WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js';
+import { apiEndpointManifest } from '@warmio/contracts/api';
+import { transactionPeriodsMcpOutputSchema, WARM_MCP_PACKAGE_VERSION, } from '@warmio/contracts/mcp';
+import { financialContextSchema, latestTransactionsSchema, transactionMonthSchema, } from '@warmio/contracts/schemas';
+import { z } from 'zod';
+import { createPublicWarmServer, HostedApiResultError, HostedMcpLimitError, } from './public-server.js';
+const HOSTED_MCP_MAX_IN_FLIGHT = 2;
+export const HOSTED_MCP_MAX_REQUEST_BYTES = 65_536;
+const HOSTED_MCP_MAX_RESPONSE_BYTES = 16_777_216;
+const HOSTED_MCP_LIMIT_MESSAGE = 'The response is larger than 16777216 bytes.';
+const HOSTED_MCP_MAX_ERROR_MESSAGE_LENGTH = 500;
+const apiErrorSchema = z.object({ error: z.string().min(1) }).passthrough();
+const rpcIdSchema = z
+    .object({ id: z.union([z.string(), z.number(), z.null()]).optional() })
+    .passthrough();
+const inFlightToolCalls = new Map();
+function authorizeHostedTool(permission) {
+    switch (permission) {
+        case 'financial_context:read':
+        case 'transactions:read':
+            return true;
+        default:
+            return false;
+    }
+}
+function apiPath(operationId) {
+    const endpoint = apiEndpointManifest.find((item) => item.operation_id === operationId);
+    if (!endpoint)
+        throw new Error(`Unknown Warm API operation: ${operationId}`);
+    return endpoint.path;
+}
+function forwardedHeaders(request) {
+    const headers = new Headers();
+    const authorization = request.headers.get('authorization');
+    const accept = request.headers.get('accept');
+    if (authorization !== null)
+        headers.set('authorization', authorization);
+    if (accept !== null)
+        headers.set('accept', accept);
+    return headers;
+}
+function financialContextRequest(origin, headers) {
+    return new Request(new URL(apiPath('getFinancialContext'), origin), {
+        headers,
+        method: 'GET',
+    });
+}
+function transactionsRequest(origin, headers, input) {
+    const url = new URL(apiPath('getFinancialContextTransactions'), origin);
+    if ('month' in input)
+        url.searchParams.set('month', input.month);
+    else
+        url.searchParams.set('latest', '1');
+    return new Request(url, { headers, method: 'GET' });
+}
+async function readResponseText(response) {
+    const reader = response.body?.getReader();
+    if (!reader)
+        return '';
+    const chunks = [];
+    let total = 0;
+    try {
+        while (true) {
+            const next = await reader.read();
+            if (next.done)
+                break;
+            chunks.push(next.value);
+            total += next.value.byteLength;
+        }
+    }
+    finally {
+        await reader.cancel().catch(() => undefined);
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return new TextDecoder().decode(bytes);
+}
+async function readRpcId(request) {
+    try {
+        const parsed = rpcIdSchema.safeParse(JSON.parse(await request.text()));
+        if (!parsed.success || parsed.data.id === undefined)
+            return null;
+        return parsed.data.id;
+    }
+    catch {
+        return null;
+    }
+}
+function oversizedToolResponse(id) {
+    const message = {
+        result: {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({ error: HOSTED_MCP_LIMIT_MESSAGE }),
+                },
+            ],
+            isError: true,
+        },
+        jsonrpc: '2.0',
+        id,
+    };
+    return new Response(JSON.stringify(message), {
+        status: 200,
+        headers: { 'Content-Type': 'application/json' },
+    });
+}
+async function enforceSerializedResponseCap(response, id) {
+    const reader = response.body?.getReader();
+    if (!reader)
+        return response;
+    const chunks = [];
+    let total = 0;
+    let overflow = false;
+    try {
+        while (true) {
+            const next = await reader.read();
+            if (next.done)
+                break;
+            total += next.value.byteLength;
+            if (total > HOSTED_MCP_MAX_RESPONSE_BYTES) {
+                overflow = true;
+                break;
+            }
+            chunks.push(next.value);
+        }
+    }
+    finally {
+        await reader.cancel().catch(() => undefined);
+    }
+    if (overflow)
+        return oversizedToolResponse(id);
+    const body = new ArrayBuffer(total);
+    const bytes = new Uint8Array(body);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    const headers = new Headers(response.headers);
+    headers.delete('content-length');
+    return new Response(body, {
+        status: response.status,
+        statusText: response.statusText,
+        headers,
+    });
+}
+function parseFinancialContext(text) {
+    return financialContextSchema.parse(JSON.parse(text));
+}
+function parseTransactions(text) {
+    const value = JSON.parse(text);
+    const periods = transactionPeriodsMcpOutputSchema.safeParse(value);
+    if (periods.success)
+        return periods.data;
+    const month = transactionMonthSchema.safeParse(value);
+    if (month.success)
+        return month.data;
+    return latestTransactionsSchema.parse(value);
+}
+function parseTransactionMonth(text) {
+    return transactionMonthSchema.parse(JSON.parse(text));
+}
+async function readApiErrorMessage(response) {
+    if (response.status >= 500) {
+        await response.body?.cancel();
+        return null;
+    }
+    try {
+        const parsed = apiErrorSchema.safeParse(JSON.parse(await readResponseText(response)));
+        if (!parsed.success)
+            return null;
+        return parsed.data.error.slice(0, HOSTED_MCP_MAX_ERROR_MESSAGE_LENGTH);
+    }
+    catch {
+        return null;
+    }
+}
+async function readDispatch(dependencies, request, parse) {
+    const key = dependencies.concurrencyKey;
+    const inFlight = inFlightToolCalls.get(key) ?? 0;
+    if (inFlight >= HOSTED_MCP_MAX_IN_FLIGHT) {
+        throw new HostedMcpLimitError('Too many Warm MCP calls are in progress. Retry.');
+    }
+    inFlightToolCalls.set(key, inFlight + 1);
+    try {
+        const response = await dependencies.dispatchApi(request);
+        if (!response.ok) {
+            throw new HostedApiResultError(response.status, await readApiErrorMessage(response));
+        }
+        return parse(await readResponseText(response));
+    }
+    finally {
+        const remaining = (inFlightToolCalls.get(key) ?? 1) - 1;
+        if (remaining > 0)
+            inFlightToolCalls.set(key, remaining);
+        else
+            inFlightToolCalls.delete(key);
+    }
+}
+export async function handleHostedReadOnlyMcpRequest(request, dependencies) {
+    const headers = forwardedHeaders(request);
+    const origin = new URL(request.url).origin;
+    const server = createPublicWarmServer({
+        authorize: authorizeHostedTool,
+        jsonSchemaValidator: new CfWorkerJsonSchemaValidator(),
+        readClient: {
+            getFinancialContext: () => readDispatch(dependencies, financialContextRequest(origin, headers), parseFinancialContext),
+            getTransactions: async (input) => {
+                if ('periods' in input) {
+                    const periods = await Promise.all(input.periods.map((month) => readDispatch(dependencies, transactionsRequest(origin, headers, { month }), parseTransactionMonth)));
+                    return transactionPeriodsMcpOutputSchema.parse({ periods });
+                }
+                return readDispatch(dependencies, transactionsRequest(origin, headers, input), parseTransactions);
+            },
+        },
+        serverInfo: { name: 'warm', version: WARM_MCP_PACKAGE_VERSION },
+    });
+    const transport = new WebStandardStreamableHTTPServerTransport({
+        enableJsonResponse: true,
+        maxRequestBodySize: HOSTED_MCP_MAX_REQUEST_BYTES,
+    });
+    const rpcId = await readRpcId(request.clone());
+    try {
+        await server.connect(transport);
+        return await enforceSerializedResponseCap(await transport.handleRequest(request), rpcId);
+    }
+    finally {
+        await server.close();
+        await transport.close();
+    }
+}
+//# sourceMappingURL=hosted-http.js.map

package/dist/hosted-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-http.js","sourceRoot":"","sources":["../src/hosted-http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AAC5F,OAAO,EAAE,wCAAwC,EAAE,MAAM,+DAA+D,CAAC;AACzH,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EACL,iCAAiC,EACjC,wBAAwB,GAEzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAG5B,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACnC,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AACnD,MAAM,6BAA6B,GAAG,UAAU,CAAC;AACjD,MAAM,wBAAwB,GAAG,6CAA6C,CAAC;AAC/E,MAAM,mCAAmC,GAAG,GAAG,CAAC;AAChD,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC5E,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;KACtE,WAAW,EAAE,CAAC;AAEjB,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;AASpD,SAAS,mBAAmB,CAAC,UAAmC;IAC9D,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,wBAAwB,CAAC;QAC9B,KAAK,mBAAmB;YACtB,OAAO,IAAI,CAAC;QACd;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,WAAsE;IACrF,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,KAAK,WAAW,CAAC,CAAC;IACvF,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAC;IAC7E,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgB;IACxC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;IACxE,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc,EAAE,OAAgB;IAC/D,OAAO,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC,EAAE;QAClE,OAAO;QACP,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAc,EACd,OAAgB,EAChB,KAA2D;IAE3D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,iCAAiC,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,IAAI,OAAO,IAAI,KAAK;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;;QAC5D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACzC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAkB;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QACjC,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAgB;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACjE,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,EAA0B;IACvD,MAAM,OAAO,GAAG;QACd,MAAM,EAAE;YACN,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;iBAC1D;aACF;YACD,OAAO,EAAE,IAAI;SACd;QACD,OAAO,EAAE,KAAK;QACd,EAAE;KACH,CAAC;IACF,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;QAC3C,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,QAAkB,EAClB,EAA0B;IAE1B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7B,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,KAAK,GAAG,6BAA6B,EAAE,CAAC;gBAC1C,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,QAAQ;QAAE,OAAO,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,iCAAiC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnE,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC;IACzC,MAAM,KAAK,GAAG,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IACrC,OAAO,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAAkB;IACnD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC3B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACjC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,mCAAmC,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,YAA2C,EAC3C,OAAgB,EAChB,KAA0B;IAE1B,MAAM,GAAG,GAAG,YAAY,CAAC,cAAc,CAAC;IACxC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,QAAQ,IAAI,wBAAwB,EAAE,CAAC;QACzC,MAAM,IAAI,mBAAmB,CAAC,iDAAiD,CAAC,CAAC;IACnF,CAAC;IACD,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,oBAAoB,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,CAAC;YAAS,CAAC;QACT,MAAM,SAAS,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,SAAS,GAAG,CAAC;YAAE,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;;YACpD,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAgB,EAChB,YAA2C;IAE3C,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,MAAM,GAAG,sBAAsB,CAAC;QACpC,SAAS,EAAE,mBAAmB;QAC9B,mBAAmB,EAAE,IAAI,2BAA2B,EAAE;QACtD,UAAU,EAAE;YACV,mBAAmB,EAAE,GAAG,EAAE,CACxB,YAAY,CAAC,YAAY,EAAE,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,CAAC;YAC7F,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC/B,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;oBACvB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1B,YAAY,CACV,YAAY,EACZ,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAC/C,qBAAqB,CACtB,CACF,CACF,CAAC;oBACF,OAAO,iCAAiC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC9D,CAAC;gBACD,OAAO,YAAY,CACjB,YAAY,EACZ,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAC3C,iBAAiB,CAClB,CAAC;YACJ,CAAC;SACF;QACD,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,EAAE;KAChE,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,wCAAwC,CAAC;QAC7D,kBAAkB,EAAE,IAAI;QACxB,kBAAkB,EAAE,4BAA4B;KACjD,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,MAAM,4BAA4B,CAAC,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3F,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC"}

package/dist/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAyCA,KAAK,aAAa,GAAG;IACnB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAcF,MAAM,WAAW,cAAc;IAC7B,gGAAgG;IAChG,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,OAAO,KAAK,CAAC;IACnC,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,sEAAsE;IACtE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,0EAA0E;IAC1E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7E;AAgXD,2EAA2E;AAC3E,wBAAsB,OAAO,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwCzE"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AA4CA,KAAK,aAAa,GAAG;IACnB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAcF,MAAM,WAAW,cAAc;IAC7B,gGAAgG;IAChG,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,OAAO,KAAK,CAAC;IACnC,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,sEAAsE;IACtE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,0EAA0E;IAC1E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7E;AAscD,2EAA2E;AAC3E,wBAAsB,OAAO,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwCzE"}

package/dist/install.js

@@ -3,9 +3,12 @@ import * as fs from 'node:fs';
 import * as os from 'node:os';
 import * as path from 'node:path';
 import { createInterface } from 'node:readline';
-import { API_ORIGIN, WARM_API_KEY_PREFIX } from '@warmio/contracts/api';
+import { applyEdits, modify, parse } from 'jsonc-parser';
+import { z } from 'zod';
+import { API_ORIGIN, isWarmApiKey } from '@warmio/contracts/api';
 import { assertWarmMcpLauncherContract, maybeRequireWarmMcpRegistryIntegrity, WARM_MCP_CLIENTS, WARM_MCP_MANIFEST, WARM_MCP_PROJECT_CONFIGS, WARM_MCP_SERVER_CONFIG, } from '@warmio/contracts/mcp';
 import { getWarmApiKeyPath } from './config-paths.js';
+import { BANK_LOGIN_CAPACITY_EXCEEDED_CODE } from './warm-api-client.js';
 function hasReadlineWriter(readline) {
     return '_writeToOutput' in readline && readline._writeToOutput instanceof Function;
 }
@@ -15,7 +18,6 @@ function isRecord(value) {
     // oxlint-disable-next-line anti-slop/no-runtime-typeof -- object detection is the filesystem JSON boundary check.
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
-const API_KEY_PATTERN = new RegExp(`^${WARM_API_KEY_PREFIX}[A-Za-z0-9_-]{43}$`);
 function configPath(config, homeDir) {
     const root = config.root === 'appData'
         ? process.env['APPDATA']?.trim() || path.join(homeDir, 'AppData', 'Roaming')
@@ -50,7 +52,14 @@ function supportedClients(homeDir, workingDirectory) {
         return clients;
     }, []);
     const configPaths = new Set();
-    return [...globalClients, ...projectClients].filter((client) => {
+    return [...globalClients, ...projectClients]
+        .map((client) => {
+        if (client.configDialect !== 'openCode')
+            return client;
+        const jsoncPath = `${client.configPath}c`;
+        return fs.existsSync(jsoncPath) ? { ...client, configPath: jsoncPath } : client;
+    })
+        .filter((client) => {
         if (configPaths.has(client.configPath))
             return false;
         configPaths.add(client.configPath);
@@ -79,7 +88,12 @@ function isCurrentWarmConfig(client, server) {
 function parseJsonConfig(client, content) {
     if (!content)
         return {};
-    const parsed = JSON.parse(content);
+    const errors = [];
+    const parsed = client.configDialect === 'openCode'
+        ? parse(content, errors, { allowTrailingComma: true })
+        : JSON.parse(content);
+    if (errors.length > 0)
+        throw new Error(`${client.name} config is not valid JSONC.`);
     if (!isRecord(parsed))
         throw new Error(`${client.name} config is not a JSON object.`);
     return parsed;
@@ -87,6 +101,17 @@ function parseJsonConfig(client, content) {
 function readJsonConfig(client) {
     return parseJsonConfig(client, fs.existsSync(client.configPath) ? fs.readFileSync(client.configPath, 'utf8') : '');
 }
+function openCodeMcpConfig(config) {
+    if (config['mcp'] === undefined)
+        return {};
+    if (!isRecord(config['mcp']))
+        throw new Error('OpenCode mcp config must be an object.');
+    const mcp = config['mcp'];
+    if (mcp['servers'] !== undefined && !isRecord(mcp['servers'])) {
+        throw new Error('OpenCode mcp.servers config must be an object.');
+    }
+    return mcp;
+}
 const WARM_TOML_BLOCK = /\n?\[mcp_servers\.warm\][\s\S]*?(?=\n\[[^\n]+\]|\s*$)/g;
 const WARM_TOML_ENV_BLOCK = /\n?\[mcp_servers\.warm\.env\][\s\S]*?(?=\n\[[^\n]+\]|\s*$)/g;
 function existingWarmConfig(client) {
@@ -109,14 +134,16 @@ function existingWarmConfig(client) {
     }
     const config = readJsonConfig(client);
     if (client.configDialect === 'openCode') {
-        const servers = isRecord(config['mcp']) ? config['mcp'] : {};
+        const mcp = openCodeMcpConfig(config);
+        const servers = isRecord(mcp['servers']) ? mcp['servers'] : {};
         const legacyServers = isRecord(config['mcpServers']) ? config['mcpServers'] : {};
         const hasLegacyWarmConfig = 'warm' in legacyServers;
         return {
             current: isRecord(servers['warm']) &&
                 isCurrentWarmConfig(client, servers['warm']) &&
+                !('warm' in mcp) &&
                 !hasLegacyWarmConfig,
-            exists: 'warm' in servers || hasLegacyWarmConfig,
+            exists: 'warm' in servers || 'warm' in mcp || hasLegacyWarmConfig,
         };
     }
     const servers = isRecord(config['mcpServers']) ? config['mcpServers'] : {};
@@ -125,21 +152,69 @@ function existingWarmConfig(client) {
         exists: 'warm' in servers,
     };
 }
+function openCodeServerConfig(server) {
+    const migrated = { ...server };
+    if (server['enabled'] === true || server['enabled'] === false) {
+        migrated['disabled'] = !server['enabled'];
+        delete migrated['enabled'];
+    }
+    const timeout = z.number().safeParse(server['timeout']);
+    if (timeout.success)
+        migrated['timeout'] = { catalog: timeout.data, execution: timeout.data };
+    if (isRecord(server['oauth'])) {
+        const oauth = { ...server['oauth'] };
+        for (const [oldName, newName] of [
+            ['clientId', 'client_id'],
+            ['clientSecret', 'client_secret'],
+            ['callbackPort', 'callback_port'],
+            ['redirectUri', 'redirect_uri'],
+        ]) {
+            if (!(oldName in oauth))
+                continue;
+            if (!(newName in oauth))
+                oauth[newName] = oauth[oldName];
+            delete oauth[oldName];
+        }
+        migrated['oauth'] = oauth;
+    }
+    return migrated;
+}
+function prepareOpenCodeConfig(config, current) {
+    const mcp = openCodeMcpConfig(config);
+    const servers = isRecord(mcp['servers']) ? mcp['servers'] : {};
+    let content = current || '{}';
+    const edit = (location, value) => {
+        content = applyEdits(content, modify(content, location, value, {
+            formattingOptions: { insertSpaces: true, tabSize: 2, eol: '\n' },
+        }));
+    };
+    for (const [name, server] of Object.entries(mcp)) {
+        if (name === 'warm' ||
+            !isRecord(server) ||
+            (server['type'] !== 'local' && server['type'] !== 'remote'))
+            continue;
+        if (name in servers)
+            throw new Error(`OpenCode config has conflicting MCP entries for ${name}.`);
+        edit(['mcp', 'servers', name], openCodeServerConfig(server));
+        edit(['mcp', name], undefined);
+    }
+    edit(['mcp', 'servers', 'warm'], {
+        type: 'local',
+        command: [WARM_MCP_SERVER_CONFIG.command, ...WARM_MCP_SERVER_CONFIG.args],
+    });
+    if ('warm' in mcp)
+        edit(['mcp', 'warm'], undefined);
+    if (isRecord(config['mcpServers']) && 'warm' in config['mcpServers']) {
+        edit(['mcpServers', 'warm'], undefined);
+        if (Object.keys(config['mcpServers']).length === 1)
+            edit(['mcpServers'], undefined);
+    }
+    return `${content.trimEnd()}\n`;
+}
 function prepareJsonConfig(client, current) {
     const config = parseJsonConfig(client, current);
     if (client.configDialect === 'openCode') {
-        const servers = isRecord(config['mcp']) ? config['mcp'] : {};
-        servers['warm'] = {
-            type: 'local',
-            command: [WARM_MCP_SERVER_CONFIG.command, ...WARM_MCP_SERVER_CONFIG.args],
-        };
-        config['mcp'] = servers;
-        if (isRecord(config['mcpServers']) && 'warm' in config['mcpServers']) {
-            delete config['mcpServers']['warm'];
-            if (Object.keys(config['mcpServers']).length === 0)
-                delete config['mcpServers'];
-        }
-        return `${JSON.stringify(config, null, 2)}\n`;
+        return prepareOpenCodeConfig(config, current);
     }
     const servers = isRecord(config['mcpServers']) ? config['mcpServers'] : {};
     servers['warm'] = {
@@ -171,6 +246,7 @@ function snapshotFile(target) {
         };
     }
     catch (error) {
+        // oxlint-disable-next-line typescript/consistent-type-assertions -- [typescript/consistent-type-assertions] Pre-existing production TypeScript assertion surfaced by the corrected assertion-expression family classifier.
         if (error.code !== 'ENOENT')
             throw error;
         return { content: '', exists: false, mode: 0o666 };
@@ -281,9 +357,13 @@ function readlinePrompt(question, options) {
         });
     });
 }
+const API_KEY_VALIDATION_FAILED_MESSAGE = 'Warm API key validation failed. Check Warm Settings and try again.';
+const BANK_LOGIN_CAPACITY_RESOLUTION_MESSAGE = 'This Warm API key is valid, but your account holds more bank logins than your plan includes. Remove a bank login or change your plan in Warm, then run the installer again.';
+class WarmApiCapacityError extends Error {
+}
 async function validateApiKey(apiKey, options) {
-    if (!API_KEY_PATTERN.test(apiKey)) {
-        throw new Error('Warm API key validation failed. Check Warm Settings and try again.');
+    if (!isWarmApiKey(apiKey)) {
+        throw new Error(API_KEY_VALIDATION_FAILED_MESSAGE);
     }
     const response = await (options.fetchImplementation || fetch)(new URL('/api/verify', options.apiUrl || API_ORIGIN), {
         headers: {
@@ -293,9 +373,13 @@ async function validateApiKey(apiKey, options) {
     });
     const text = await response.text();
     const body = parseJsonResponse(text);
-    if (!response.ok || !isRecord(body) || body['valid'] !== true || Object.keys(body).length !== 1) {
-        throw new Error('Warm API key validation failed. Check Warm Settings and try again.');
+    if (response.ok && isRecord(body) && body['valid'] === true && Object.keys(body).length === 1) {
+        return;
+    }
+    if (!response.ok && isRecord(body) && body['code'] === BANK_LOGIN_CAPACITY_EXCEEDED_CODE) {
+        throw new WarmApiCapacityError(BANK_LOGIN_CAPACITY_RESOLUTION_MESSAGE);
     }
+    throw new Error(API_KEY_VALIDATION_FAILED_MESSAGE);
 }
 function parseJsonResponse(text) {
     try {
@@ -327,7 +411,9 @@ async function resolveApiKey(target, ask, options) {
         await validateApiKey(storedApiKey, options);
         return { apiKey: storedApiKey, replaceStoredKey: false };
     }
-    catch {
+    catch (error) {
+        if (error instanceof WarmApiCapacityError)
+            throw error;
         return {
             apiKey: await requestedApiKey(ask, options, INVALID_STORED_API_KEY_PASTE_PROMPT),
             replaceStoredKey: true,