@zhixuan92/multi-model-agent 5.0.1 → 5.0.3

package/dist/http/server.js

@@ -0,0 +1,300 @@
+import { HTTPListener } from '@zhixuan92/multi-model-agent-core';
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { join, dirname } from 'node:path';
+import { homedir } from 'node:os';
+import { RouteDispatcher } from '@zhixuan92/multi-model-agent-core';
+import { EnvelopeBus } from '@zhixuan92/multi-model-agent-core/events/envelope-bus';
+import { LogWriter } from '@zhixuan92/multi-model-agent-core/events/log-writer';
+import { TelemetryUploader } from '@zhixuan92/multi-model-agent-core/events/telemetry-uploader';
+import { StderrLogSubscriber } from '@zhixuan92/multi-model-agent-core/events/stderr-log-subscriber';
+import { decideConsent } from '@zhixuan92/multi-model-agent-core/events/consent-rules';
+import { sendError, sendJson } from './errors.js';
+import { loadToken } from './auth.js';
+import { handleRequest } from './request-pipeline.js';
+import { getRecorder } from '../telemetry/recorder.js';
+/** Server package version — read once at module load time from package.json. */
+function readServerVersion() {
+    try {
+        const thisDir = dirname(fileURLToPath(import.meta.url));
+        // Walk up from src/http/ to packages/server/
+        const pkgPath = join(thisDir, '..', '..', 'package.json');
+        const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+        return pkg.version ?? '0.0.0';
+    }
+    catch {
+        return '0.0.0';
+    }
+}
+export const SERVER_VERSION = readServerVersion();
+/** Routes where the loopback guard is enforced. */
+const LOOPBACK_ONLY_PATHS = new Set(['/health', '/status']);
+/** Routes that do NOT require bearer auth. */
+const AUTH_EXEMPT_PATHS = new Set(['/health']);
+/** Routes that require a `cwd` query parameter (validated by cwd-validator middleware). */
+const CWD_REQUIRED_PATHS = new Set([
+    '/delegate', '/audit', '/review', '/debug', '/execute-plan', '/retry', '/investigate', '/research', '/journal-record', '/journal-recall',
+    '/control/batch-slice', '/context-blocks',
+]);
+/** Routes that require the X-MMA-Main-Model header. Enforced at request boundary
+ *  so wire telemetry's main_model column is never null for billed runs. The
+ *  tool routes need it; the introspection / batch-polling / context-block
+ *  utility routes do not. */
+const MAIN_MODEL_REQUIRED_PATHS = new Set([
+    '/delegate', '/audit', '/review', '/debug', '/execute-plan', '/retry', '/investigate', '/research', '/journal-record', '/journal-recall',
+]);
+/**
+ * Registers tool handlers (POST /delegate, /audit, /review, /debug, /execute-plan, /retry).
+ * Builds a ToolSurfaceRegistry by calling each tool-config's registerXxx, then
+ * iterates `registry.list()` filtered to `surface: 'tool'` entries to drive
+ * route registration. The registry is the canonical source for tool surface
+ * metadata (httpMethod, httpPath, schema, toolCategory).
+ */
+async function registerToolHandlers(router, config, batchRegistry, projectRegistry) {
+    const { buildToolSurfaceRegistry } = await import('@zhixuan92/multi-model-agent-core');
+    const surface = buildToolSurfaceRegistry();
+    // For tool handlers, we need MultiModelConfig which is part of ServerConfig only
+    // when the full mmagent.config.json is loaded. In test/minimal configs that only
+    // have `server:`, we create a stub config. Real CLI startup will load full config.
+    const multiModelConfig = config.agents
+        ? config
+        : undefined;
+    if (!multiModelConfig) {
+        // Server started with server-only config (e.g. tests): register stubs that return 503.
+        // Drive registration from the registry so adding a tool only requires a tool-config edit.
+        for (const entry of surface.list()) {
+            if (entry.surface !== 'tool')
+                continue;
+            router.register(entry.httpMethod, entry.httpPath, (_req, res, _params, _ctx) => {
+                sendError(res, 503, 'no_agent_config', 'Server started without agent configuration; provide a full mmagent.config.json');
+            });
+        }
+        return;
+    }
+    const bus = new EnvelopeBus();
+    const logWriter = new LogWriter({ diagnosticsLog: multiModelConfig.diagnostics?.log ?? false, logDir: multiModelConfig.diagnostics?.logDir });
+    bus.subscribe(logWriter);
+    // Always-on stderr log stream — no quiet mode and no --verbose flag (4.7.3+).
+    bus.subscribe(new StderrLogSubscriber());
+    let recorderForBus = null;
+    try {
+        recorderForBus = getRecorder();
+    }
+    catch { /* not initialized */ }
+    // decideConsent signature: read from packages/server/src/telemetry/consent.ts. Today it reads
+    // process.env.MMAGENT_TELEMETRY + a config.json. Replicate that call here:
+    const decideConsentForUploader = () => {
+        const envVal = process.env.MMAGENT_TELEMETRY;
+        let configState = undefined;
+        try {
+            const cfgPath = join(homedir(), '.multi-model', 'config.json');
+            const cfg = JSON.parse(readFileSync(cfgPath, 'utf8'));
+            if (cfg && typeof cfg === 'object' && cfg.telemetry && typeof cfg.telemetry === 'object' && typeof cfg.telemetry.enabled === 'boolean') {
+                configState = { enabled: cfg.telemetry.enabled };
+            }
+        }
+        catch (e) {
+            if (e.code !== 'ENOENT') {
+                configState = { kind: 'unreadable' };
+            }
+        }
+        return decideConsent({ env: envVal, config: configState });
+    };
+    const uploader = new TelemetryUploader({
+        recorder: recorderForBus,
+        consent: { decide: decideConsentForUploader },
+        buildOpts: (env) => ({
+            toolMode: 'full', // default
+            implementerModel: env.stages[0]?.model ?? env.mainModel,
+            implementerTier: env.stages[0]?.tier ?? env.agentType,
+            mainModelFamily: env.mainModel.split('-')[0] ?? 'unknown',
+        }),
+    });
+    bus.subscribe(uploader);
+    const deps = { config: multiModelConfig, bus, logWriter, projectRegistry, batchRegistry };
+    // Per-tool handler builders, keyed by registry routeName. The registry tells
+    // us WHICH route to register and at WHICH path/method; this map answers HOW
+    // to build the per-tool handler.
+    const { buildDelegateHandler } = await import('./handlers/tools/delegate.js');
+    const { buildAuditHandler } = await import('./handlers/tools/audit.js');
+    const { buildReviewHandler } = await import('./handlers/tools/review.js');
+    const { buildDebugHandler } = await import('./handlers/tools/debug.js');
+    const { buildExecutePlanHandler } = await import('./handlers/tools/execute-plan.js');
+    const { buildRetryHandler } = await import('./handlers/tools/retry.js');
+    const { buildInvestigateHandler } = await import('./handlers/tools/investigate.js');
+    const { buildResearchHandler } = await import('./handlers/tools/research.js');
+    const { buildJournalRecordHandler } = await import('./handlers/tools/journal-record.js');
+    const { buildJournalRecallHandler } = await import('./handlers/tools/journal-recall.js');
+    const builders = {
+        delegate: buildDelegateHandler,
+        audit: buildAuditHandler,
+        review: buildReviewHandler,
+        debug: buildDebugHandler,
+        execute_plan: buildExecutePlanHandler,
+        retry_tasks: buildRetryHandler,
+        investigate: buildInvestigateHandler,
+        research: buildResearchHandler,
+        'journal-record': buildJournalRecordHandler,
+        'journal-recall': buildJournalRecallHandler,
+    };
+    for (const entry of surface.list()) {
+        if (entry.surface !== 'tool')
+            continue;
+        const builder = builders[entry.routeName];
+        if (!builder) {
+            // Route is in the registry but its handler hasn't been wired yet
+            // (e.g. /research added in a prior task, handler lands in a later one).
+            // Skip silently — the next task wires the handler and enables the route.
+            continue;
+        }
+        router.register(entry.httpMethod, entry.httpPath, builder(deps));
+    }
+}
+/**
+ * Registers control handlers (GET /batch/:batchId, POST/DELETE /context-blocks).
+ */
+async function registerControlHandlers(router, config, batchRegistry, projectRegistry) {
+    const { buildBatchHandler } = await import('./handlers/control/batch.js');
+    const { buildBatchSliceHandler } = await import('./handlers/control/batch-slice.js');
+    const { buildCreateContextBlockHandler, buildDeleteContextBlockHandler } = await import('./handlers/control/context-blocks.js');
+    const multiModelConfig = config.agents
+        ? config
+        : undefined;
+    router.register('GET', '/batch/:batchId', buildBatchHandler({ batchRegistry }));
+    if (multiModelConfig) {
+        const bus = new EnvelopeBus();
+        const logWriter = new LogWriter({ diagnosticsLog: multiModelConfig.diagnostics?.log ?? false, logDir: multiModelConfig.diagnostics?.logDir });
+        bus.subscribe(logWriter);
+        bus.subscribe(new StderrLogSubscriber());
+        let recorderForBus = null;
+        try {
+            recorderForBus = getRecorder();
+        }
+        catch { /* not initialized */ }
+        const decideConsentForUploader = () => {
+            const envVal = process.env.MMAGENT_TELEMETRY;
+            let configState = undefined;
+            try {
+                const cfgPath = join(homedir(), '.multi-model', 'config.json');
+                const cfg = JSON.parse(readFileSync(cfgPath, 'utf8'));
+                if (cfg && typeof cfg === 'object' && cfg.telemetry && typeof cfg.telemetry === 'object' && typeof cfg.telemetry.enabled === 'boolean') {
+                    configState = { enabled: cfg.telemetry.enabled };
+                }
+            }
+            catch (e) {
+                if (e.code !== 'ENOENT') {
+                    configState = { kind: 'unreadable' };
+                }
+            }
+            return decideConsent({ env: envVal, config: configState });
+        };
+        const uploader = new TelemetryUploader({
+            recorder: recorderForBus,
+            consent: { decide: decideConsentForUploader },
+            buildOpts: (env) => ({
+                toolMode: 'full', // default
+                implementerModel: env.stages[0]?.model ?? env.mainModel,
+                implementerTier: env.stages[0]?.tier ?? env.agentType,
+                mainModelFamily: env.mainModel.split('-')[0] ?? 'unknown',
+            }),
+        });
+        bus.subscribe(uploader);
+        const deps = { config: multiModelConfig, bus, logWriter, projectRegistry, batchRegistry };
+        router.register('POST', '/control/batch-slice', buildBatchSliceHandler(deps));
+        router.register('POST', '/context-blocks', buildCreateContextBlockHandler({
+            projectRegistry,
+            maxContextBlockBytes: multiModelConfig.server.limits.maxContextBlockBytes,
+            maxContextBlocksPerProject: multiModelConfig.server.limits.maxContextBlocksPerProject,
+        }));
+        router.register('DELETE', '/context-blocks/:blockId', buildDeleteContextBlockHandler({ projectRegistry }));
+    }
+    else {
+        router.register('POST', '/control/batch-slice', (_req, res) => {
+            sendError(res, 503, 'no_agent_config', 'Server started without agent configuration; provide a full mmagent.config.json');
+        });
+        router.register('POST', '/context-blocks', (_req, res) => {
+            sendError(res, 503, 'no_agent_config', 'Server started without agent configuration; provide a full mmagent.config.json');
+        });
+        router.register('DELETE', '/context-blocks/:blockId', buildDeleteContextBlockHandler({ projectRegistry }));
+    }
+}
+export async function startServer(config, injectedManifestSync) {
+    const token = loadToken(config.server.auth.tokenFile);
+    const router = new RouteDispatcher();
+    // ── Create shared registries ───────────────────────────────────────────────
+    const { BatchRegistry } = await import('@zhixuan92/multi-model-agent-core');
+    const { ProjectRegistry } = await import('./project-registry.js');
+    const batchRegistry = new BatchRegistry({
+        batchTtlMs: config.server.limits.batchTtlMs,
+    });
+    const projectRegistry = new ProjectRegistry({
+        cap: config.server.limits.projectCap,
+        idleEvictionMs: config.server.limits.idleProjectTimeoutMs,
+        evictionIntervalMs: Math.min(config.server.limits.idleProjectTimeoutMs, 60_000),
+    });
+    // Capture serverStartedAt before health registration so /health can expose it.
+    const serverStartedAt = Date.now();
+    // GET /health — unauthenticated liveness + skill manifest drift check
+    const { buildHealthHandler } = await import('./handlers/introspection/health.js');
+    let skillManifestSync;
+    if (injectedManifestSync) {
+        skillManifestSync = injectedManifestSync;
+    }
+    else {
+        try {
+            const { makeSkillManifestSync } = await import('../skill-install/skill-manifest-sync.js');
+            const { discoverPerClientInstallDirs } = await import('../skill-install/discover.js');
+            skillManifestSync = makeSkillManifestSync(discoverPerClientInstallDirs());
+        }
+        catch {
+            skillManifestSync = { driftReport: () => [] };
+        }
+    }
+    router.register('GET', '/health', buildHealthHandler({ manifestSync: skillManifestSync }));
+    // Register tool handlers (Phase 6)
+    await registerToolHandlers(router, config, batchRegistry, projectRegistry);
+    // Register control handlers (Phase 7)
+    await registerControlHandlers(router, config, batchRegistry, projectRegistry);
+    // GET /status — operator introspection (registered after registries are ready)
+    const { buildStatusHandler } = await import('./handlers/introspection/status.js');
+    router.register('GET', '/status', buildStatusHandler({
+        batchRegistry,
+        projectRegistry,
+        serverStartedAt,
+        bind: config.server.bind,
+        version: SERVER_VERSION,
+    }));
+    // Test-only: enumerates registered routes. Guarded by env; zero impact on production.
+    if (process.env.MMAGENT_TEST_INTROSPECTION === '1') {
+        router.register('GET', '/__routes', (_req, res) => {
+            sendJson(res, 200, router.listRoutes().map((route) => ({
+                method: route.method.toUpperCase(),
+                path: route.path,
+            })));
+        });
+    }
+    const listener = new HTTPListener({
+        bind: config.server.bind,
+        port: config.server.port,
+        handler: (req, res) => handleRequest(router, token, req, res, config, PIPELINE_CFG),
+    });
+    const { port, address: serverAddress } = await listener.start();
+    return {
+        port,
+        serverAddress,
+        stop: () => listener.stop(),
+        batchRegistry,
+        projectRegistry,
+        serverStartedAt,
+    };
+}
+// Per-request pipeline lives in request-pipeline.ts. server.ts owns routing
+// table + bootstrap; the pipeline owns body-cap → route → loopback → auth →
+// JSON parse → cwd → dispatch.
+const PIPELINE_CFG = {
+    loopbackOnlyPaths: LOOPBACK_ONLY_PATHS,
+    authExemptPaths: AUTH_EXEMPT_PATHS,
+    cwdRequiredPaths: CWD_REQUIRED_PATHS,
+    mainModelRequiredPaths: MAIN_MODEL_REQUIRED_PATHS,
+};
+//# sourceMappingURL=server.js.map

package/dist/http/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/http/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGlC,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,MAAM,qDAAqD,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,6DAA6D,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,MAAM,gEAAgE,CAAC;AACrG,OAAO,EAAE,aAAa,EAAE,MAAM,wDAAwD,CAAC;AAEvF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,gFAAgF;AAChF,SAAS,iBAAiB;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,6CAA6C;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC9E,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;AAelD,mDAAmD;AACnD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAE5D,8CAA8C;AAC9C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAE/C,2FAA2F;AAC3F,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB;IACxI,sBAAsB,EAAE,iBAAiB;CAC1C,CAAC,CAAC;AAEH;;;6BAG6B;AAC7B,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB;CACzI,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,KAAK,UAAU,oBAAoB,CACjC,MAAmC,EACnC,MAAoB,EACpB,aAA4B,EAC5B,eAAgC;IAEhC,MAAM,EAAE,wBAAwB,EAAE,GAChC,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC;IAEpD,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAE3C,iFAAiF;IACjF,iFAAiF;IACjF,mFAAmF;IACnF,MAAM,gBAAgB,GAAI,MAA0C,CAAC,MAAM;QACzE,CAAC,CAAE,MAAuE;QAC1E,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,uFAAuF;QACvF,0FAA0F;QAC1F,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM;gBAAE,SAAS;YACvC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;gBAC7E,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,gFAAgF,CAAC,CAAC;YAC3H,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,cAAc,EAAE,gBAAgB,CAAC,WAAW,EAAE,GAAG,IAAI,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9I,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACzB,8EAA8E;IAC9E,GAAG,CAAC,SAAS,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC;IAEzC,IAAI,cAAc,GAAoB,IAAI,CAAC;IAC3C,IAAI,CAAC;QAAC,cAAc,GAAG,WAAW,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;IACvE,8FAA8F;IAC9F,2EAA2E;IAC3E,MAAM,wBAAwB,GAAG,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC7C,IAAI,WAAW,GAA8D,SAAS,CAAC;QACvF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;YAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACtD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACvI,WAAW,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACnD,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnD,WAAW,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YACvC,CAAC;QACH,CAAC;QACD,OAAO,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC;QACrC,QAAQ,EAAE,cAAc;QACxB,OAAO,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE;QAC7C,SAAS,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC;YACxB,QAAQ,EAAE,MAAM,EAAsB,UAAU;YAChD,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,GAAG,CAAC,SAAS;YACvD,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,GAAG,CAAC,SAAS;YACrD,eAAe,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS;SAC1D,CAAC;KACH,CAAC,CAAC;IACH,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAExB,MAAM,IAAI,GAA4C,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC;IAEnI,6EAA6E;IAC7E,4EAA4E;IAC5E,iCAAiC;IACjC,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;IAC9E,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACxE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IAC1E,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACxE,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;IACrF,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACxE,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IACpF,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;IAC9E,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;IACzF,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;IAEzF,MAAM,QAAQ,GAA+E;QAC3F,QAAQ,EAAE,oBAAoB;QAC9B,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,kBAAkB;QAC1B,KAAK,EAAE,iBAAiB;QACxB,YAAY,EAAE,uBAAuB;QACrC,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,oBAAoB;QAC9B,gBAAgB,EAAE,yBAAyB;QAC3C,gBAAgB,EAAE,yBAAyB;KAC5C,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM;YAAE,SAAS;QACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,iEAAiE;YACjE,wEAAwE;YACxE,yEAAyE;YACzE,SAAS;QACX,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,uBAAuB,CACpC,MAAmC,EACnC,MAAoB,EACpB,aAA4B,EAC5B,eAAgC;IAEhC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;IAC1E,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC;IACrF,MAAM,EAAE,8BAA8B,EAAE,8BAA8B,EAAE,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;IAEhI,MAAM,gBAAgB,GAAI,MAA0C,CAAC,MAAM;QACzE,CAAC,CAAE,MAAuE;QAC1E,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IAChF,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,EAAE,cAAc,EAAE,gBAAgB,CAAC,WAAW,EAAE,GAAG,IAAI,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9I,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACzB,GAAG,CAAC,SAAS,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC;QAEzC,IAAI,cAAc,GAAoB,IAAI,CAAC;QAC3C,IAAI,CAAC;YAAC,cAAc,GAAG,WAAW,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;QACvE,MAAM,wBAAwB,GAAG,GAAG,EAAE;YACpC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAC7C,IAAI,WAAW,GAA8D,SAAS,CAAC;YACvF,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;gBAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;gBACtD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBACvI,WAAW,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACnD,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACnD,WAAW,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;gBACvC,CAAC;YACH,CAAC;YACD,OAAO,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC;YACrC,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE;YAC7C,SAAS,EAAE,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC;gBACxB,QAAQ,EAAE,MAAM,EAAsB,UAAU;gBAChD,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,GAAG,CAAC,SAAS;gBACvD,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,GAAG,CAAC,SAAS;gBACrD,eAAe,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS;aAC1D,CAAC;SACH,CAAC,CAAC;QACH,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAExB,MAAM,IAAI,GAA4C,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,SAAS,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC;QACnI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,8BAA8B,CAAC;YACxE,eAAe;YACf,oBAAoB,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB;YACzE,0BAA0B,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,0BAA0B;SACtF,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;IAC7G,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC5D,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,gFAAgF,CAAC,CAAC;QAC3H,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YACvD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,gFAAgF,CAAC,CAAC;QAC3H,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,EAAE,8BAA8B,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAoB,EACpB,oBAA0F;IAE1F,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEtD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAc,CAAC;IAEjD,8EAA8E;IAC9E,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC;IAC5E,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAElE,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC;QACtC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU;KAC5C,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC;QAC1C,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU;QACpC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB;QACzD,kBAAkB,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC;KAChF,CAAC,CAAC;IAEH,+EAA+E;IAC/E,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEnC,sEAAsE;IACtE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;IAClF,IAAI,iBAAsF,CAAC;IAC3F,IAAI,oBAAoB,EAAE,CAAC;QACzB,iBAAiB,GAAG,oBAAoB,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;YAC1F,MAAM,EAAE,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;YACtF,iBAAiB,GAAG,qBAAqB,CAAC,4BAA4B,EAAE,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IACD,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,kBAAkB,CAAC,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;IAE3F,mCAAmC;IACnC,MAAM,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;IAE3E,sCAAsC;IACtC,MAAM,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;IAE9E,+EAA+E;IAC/E,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAC;IAClF,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,kBAAkB,CAAC;QACnD,aAAa;QACb,eAAe;QACf,eAAe;QACf,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;QACxB,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC,CAAC;IAEJ,sFAAsF;IACtF,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,EAAE,CAAC;QACnD,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAChD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACrD,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;gBAClC,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC;QAChC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;QACxB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;QACxB,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC;KACpF,CAAC,CAAC;IACH,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAEhE,OAAO;QACL,IAAI;QACJ,aAAa;QACb,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE;QAC3B,aAAa;QACb,eAAe;QACf,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,4EAA4E;AAC5E,+BAA+B;AAC/B,MAAM,YAAY,GAAG;IACnB,iBAAiB,EAAE,mBAAmB;IACtC,eAAe,EAAE,iBAAiB;IAClC,gBAAgB,EAAE,kBAAkB;IACpC,sBAAsB,EAAE,yBAAyB;CAClD,CAAC"}

package/dist/http/types.d.ts

@@ -0,0 +1,20 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { CallerClient } from './middleware/caller-identity.js';
+export interface RequestContext {
+    url: URL;
+    cwd?: string;
+    body?: unknown;
+    authed: boolean;
+    callerClient: CallerClient;
+    /** Calling agent's model id from x-mma-main-model header (null if absent). */
+    mainModel: string | null;
+}
+export type Handler = (ctx: RequestContext, res: ServerResponse, params: Record<string, string>) => Promise<void> | void;
+/**
+ * Raw handler shape used by the C1 RouteDispatcher inside the server.
+ * Server-specific because it carries RequestContext (caller identity, cwd, body).
+ * The core RouteDispatcher is generic; this is the concrete H instantiation
+ * the server registers.
+ */
+export type RawHandler = (req: IncomingMessage, res: ServerResponse, params: Record<string, string>, ctx: RequestContext) => Promise<void> | void;
+//# sourceMappingURL=types.d.ts.map

package/dist/http/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/http/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAEpE,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,GAAG,CAAC;IACT,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,YAAY,CAAC;IAC3B,8EAA8E;IAC9E,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAEzH;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,CACvB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,GAAG,EAAE,cAAc,KAChB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC"}

package/dist/http/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/http/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/http/types.ts"],"names":[],"mappings":""}

package/dist/skill-install/disabled-state.d.ts

@@ -0,0 +1,35 @@
+import { z } from 'zod';
+import { type Client } from './manifest.js';
+declare const disabledStateSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    disabledAt: z.ZodNumber;
+    cliVersion: z.ZodString;
+    targets: z.ZodArray<z.ZodEnum<{
+        gemini: "gemini";
+        "claude-code": "claude-code";
+        cursor: "cursor";
+        codex: "codex";
+    }>>;
+}, z.core.$strip>;
+export type DisabledState = z.infer<typeof disabledStateSchema>;
+/** Full path to the sentinel file. */
+export declare function disabledStatePath(homeDir?: string): string;
+/**
+ * Read and validate the sentinel. Returns null when absent, unreadable, or
+ * structurally invalid — a malformed sentinel must never wedge sync-skills.
+ */
+export declare function readDisabledState(homeDir?: string): DisabledState | null;
+/** The set of currently-disabled clients (empty when the sentinel is absent). */
+export declare function disabledTargets(homeDir?: string): Client[];
+/**
+ * Mark `targets` as disabled, unioned with any already-disabled clients.
+ * Returns the resulting disabled set (stable ALL_CLIENTS order).
+ */
+export declare function addDisabledTargets(homeDir: string | undefined, targets: Client[], cliVersion: string): Client[];
+/**
+ * Clear `targets` from the disabled set. Deletes the sentinel file entirely
+ * once nothing remains disabled. Returns the still-disabled set.
+ */
+export declare function clearDisabledTargets(homeDir: string | undefined, targets: Client[]): Client[];
+export {};
+//# sourceMappingURL=disabled-state.d.ts.map

package/dist/skill-install/disabled-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disabled-state.d.ts","sourceRoot":"","sources":["../../src/skill-install/disabled-state.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAA4B,KAAK,MAAM,EAAE,MAAM,eAAe,CAAC;AAQtE,QAAA,MAAM,mBAAmB;;;;;;;;;;iBAKvB,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,sCAAsC;AACtC,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAQxE;AAED,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAE1D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,EAAE,MAAM,EAAE,EACjB,UAAU,EAAE,MAAM,GACjB,MAAM,EAAE,CAWV;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAgB7F"}

package/dist/skill-install/disabled-state.js

@@ -0,0 +1,96 @@
+/**
+ * disabled-state.ts — the persistent "skills disabled" sentinel.
+ *
+ * `mmagent disable` writes this file; `sync-skills` (and the npm postinstall
+ * hook that shells out to it) consults it so an upgrade never silently
+ * reinstalls skills the user deliberately turned off. `mmagent enable` clears
+ * the relevant targets and, when none remain, deletes the file.
+ *
+ * Stored at ~/.multi-model/skills-disabled.json — the same directory as the
+ * install manifest and auth token, with matching 0o700/0o600 permissions.
+ *
+ * The sentinel is target-aware: it records *which* clients are disabled so a
+ * `disable --target=cursor` does not block syncing claude-code.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { z } from 'zod';
+import { ALL_CLIENTS, manifestDir } from './manifest.js';
+const DISABLED_NAME = 'skills-disabled.json';
+// Derive the client enum from ALL_CLIENTS so a new client never silently
+// fails sentinel validation. z.enum needs a non-empty literal tuple.
+const clientEnum = z.enum(ALL_CLIENTS);
+const disabledStateSchema = z.object({
+    version: z.literal(1),
+    disabledAt: z.number().int().nonnegative(),
+    cliVersion: z.string(),
+    targets: z.array(clientEnum),
+});
+/** Full path to the sentinel file. */
+export function disabledStatePath(homeDir) {
+    return path.join(manifestDir(homeDir), DISABLED_NAME);
+}
+/**
+ * Read and validate the sentinel. Returns null when absent, unreadable, or
+ * structurally invalid — a malformed sentinel must never wedge sync-skills.
+ */
+export function readDisabledState(homeDir) {
+    try {
+        const raw = fs.readFileSync(disabledStatePath(homeDir), 'utf-8');
+        const parsed = disabledStateSchema.safeParse(JSON.parse(raw));
+        return parsed.success ? parsed.data : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** The set of currently-disabled clients (empty when the sentinel is absent). */
+export function disabledTargets(homeDir) {
+    return readDisabledState(homeDir)?.targets ?? [];
+}
+/**
+ * Mark `targets` as disabled, unioned with any already-disabled clients.
+ * Returns the resulting disabled set (stable ALL_CLIENTS order).
+ */
+export function addDisabledTargets(homeDir, targets, cliVersion) {
+    const current = new Set(disabledTargets(homeDir));
+    for (const t of targets)
+        current.add(t);
+    const merged = ALL_CLIENTS.filter((c) => current.has(c));
+    writeDisabledState(homeDir, {
+        version: 1,
+        disabledAt: Date.now(),
+        cliVersion,
+        targets: merged,
+    });
+    return merged;
+}
+/**
+ * Clear `targets` from the disabled set. Deletes the sentinel file entirely
+ * once nothing remains disabled. Returns the still-disabled set.
+ */
+export function clearDisabledTargets(homeDir, targets) {
+    const existing = readDisabledState(homeDir);
+    if (existing === null)
+        return [];
+    const remaining = existing.targets.filter((t) => !targets.includes(t));
+    if (remaining.length === 0) {
+        try {
+            fs.rmSync(disabledStatePath(homeDir), { force: true });
+        }
+        catch {
+            /* best effort — an absent file is the desired end state anyway */
+        }
+        return [];
+    }
+    writeDisabledState(homeDir, { ...existing, targets: remaining });
+    return remaining;
+}
+function writeDisabledState(homeDir, state) {
+    fs.mkdirSync(manifestDir(homeDir), { recursive: true, mode: 0o700 });
+    fs.writeFileSync(disabledStatePath(homeDir), JSON.stringify(state, null, 2) + '\n', {
+        encoding: 'utf-8',
+        mode: 0o600,
+    });
+}
+//# sourceMappingURL=disabled-state.js.map

package/dist/skill-install/disabled-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disabled-state.js","sourceRoot":"","sources":["../../src/skill-install/disabled-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAe,MAAM,eAAe,CAAC;AAEtE,MAAM,aAAa,GAAG,sBAAsB,CAAC;AAE7C,yEAAyE;AACzE,qEAAqE;AACrE,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,WAA+C,CAAC,CAAC;AAE3E,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;CAC7B,CAAC,CAAC;AAIH,sCAAsC;AACtC,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,OAAO,iBAAiB,CAAC,OAAO,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA2B,EAC3B,OAAiB,EACjB,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,kBAAkB,CAAC,OAAO,EAAE;QAC1B,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;QACtB,UAAU;QACV,OAAO,EAAE,MAAM;KAChB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA2B,EAAE,OAAiB;IACjF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAEjC,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,kBAAkB,CAAC,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACjE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA2B,EAAE,KAAoB;IAC3E,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,EAAE,CAAC,aAAa,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAClF,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC"}

package/dist/skill-install/discover.d.ts

@@ -0,0 +1,29 @@
+import type { Client } from './manifest.js';
+export declare const SUPPORTED_SKILLS: readonly ["multi-model-agent", "mma-delegate", "mma-audit", "mma-review", "mma-debug", "mma-execute-plan", "mma-retry", "mma-context-blocks", "mma-investigate", "mma-research", "mma-explore", "mma-journal-record", "mma-journal-recall"];
+/** Thrown when a skill's SKILL.md cannot be read from the bundled skills directory. */
+export declare class SkillNotFoundError extends Error {
+    readonly code: "skill_not_found";
+    constructor(skillName: string, checkedPath: string);
+}
+export declare function skillsRootCandidates(here: string): string[];
+export declare function pickSkillsRoot(here: string, exists?: (p: string) => boolean): string;
+/**
+ * Return the absolute path to the skills root directory. Production: the
+ * bundled `packages/server/src/skills/` (or its dist mirror). Tests pass
+ * a fixture path explicitly.
+ */
+export declare function getSkillsRoot(skillsRoot?: string): string;
+/**
+ * Read the content of a skill's SKILL.md file. Returns null if the file
+ * does not exist; propagates other I/O errors so callers can distinguish
+ * "skill not found" from "can't access skill".
+ */
+export declare function readSkillContent(skillName: string, skillsRoot?: string): string | null;
+/**
+ * Return the per-client install directories where skills are written as
+ * subdirectories. Only includes clients that use the per-skill directory
+ * model (claude-code and codex). Gemini and Cursor bundle skills into a
+ * single file/extension and are not included.
+ */
+export declare function discoverPerClientInstallDirs(homeDir?: string): Partial<Record<Client, string>>;
+//# sourceMappingURL=discover.d.ts.map

package/dist/skill-install/discover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.d.ts","sourceRoot":"","sources":["../../src/skill-install/discover.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,eAAO,MAAM,gBAAgB,6OAcnB,CAAC;AAEX,uFAAuF;AACvF,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAG,iBAAiB,CAAU;gBAC/B,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAOnD;AAYD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAgB3D;AAED,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAuB,GAC7C,MAAM,CAMR;AAID;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQtF;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAM9F"}

package/dist/skill-install/discover.js

@@ -0,0 +1,104 @@
+// Skill discovery — locates packaged SKILL.md files on disk and reads them.
+// Extracted from cli/install-skill.ts as part of Ch 7 Task 39.
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+export const SUPPORTED_SKILLS = [
+    'multi-model-agent',
+    'mma-delegate',
+    'mma-audit',
+    'mma-review',
+    'mma-debug',
+    'mma-execute-plan',
+    'mma-retry',
+    'mma-context-blocks',
+    'mma-investigate',
+    'mma-research',
+    'mma-explore',
+    'mma-journal-record',
+    'mma-journal-recall',
+];
+/** Thrown when a skill's SKILL.md cannot be read from the bundled skills directory. */
+export class SkillNotFoundError extends Error {
+    code = 'skill_not_found';
+    constructor(skillName, checkedPath) {
+        super(`Skill '${skillName}' not found. ` +
+            `Checked: ${checkedPath}. ` +
+            `Available skills: ${SUPPORTED_SKILLS.join(', ')}`);
+    }
+}
+// Discover.ts lives in `packages/core/src/tool-surface/` (or its dist mirror).
+// Skills are bundled by the server package at `packages/server/src/skills/`
+// (copied to `packages/server/dist/skills/` at build time, then shipped on
+// the `@zhixuan92/multi-model-agent` npm package as `dist/skills/`).
+// Probe candidates for both monorepo dev layouts and the two npm-installed
+// layouts (hoisted siblings, or core nested under server).
+//
+// Exported (and parameterized on `here` + `exists`) so the candidate logic
+// can be unit-tested against fixtures that mimic each layout — the v4.0.1
+// regression was a missing prod candidate.
+export function skillsRootCandidates(here) {
+    return [
+        // Dev source: packages/core/src/tool-surface -> packages/server/src/skills
+        path.resolve(here, '..', '..', '..', 'server', 'src', 'skills'),
+        // Dev built: packages/core/dist/tool-surface -> packages/server/dist/skills
+        path.resolve(here, '..', '..', '..', 'server', 'dist', 'skills'),
+        // npm install (hoisted): node_modules/@zhixuan92/multi-model-agent-core/dist/tool-surface
+        //                     -> node_modules/@zhixuan92/multi-model-agent/dist/skills
+        path.resolve(here, '..', '..', '..', 'multi-model-agent', 'dist', 'skills'),
+        // npm install (core nested under server):
+        //   .../multi-model-agent/node_modules/@zhixuan92/multi-model-agent-core/dist/tool-surface
+        // -> .../multi-model-agent/dist/skills
+        path.resolve(here, '..', '..', '..', '..', '..', 'dist', 'skills'),
+        // Last-resort fallback for any caller that bundles skills inside core.
+        path.resolve(here, '..', 'skills'),
+    ];
+}
+export function pickSkillsRoot(here, exists = fs.existsSync) {
+    const candidates = skillsRootCandidates(here);
+    for (const c of candidates) {
+        if (exists(c))
+            return c;
+    }
+    return candidates[0];
+}
+const DEFAULT_SKILLS_ROOT = pickSkillsRoot(path.dirname(fileURLToPath(import.meta.url)));
+/**
+ * Return the absolute path to the skills root directory. Production: the
+ * bundled `packages/server/src/skills/` (or its dist mirror). Tests pass
+ * a fixture path explicitly.
+ */
+export function getSkillsRoot(skillsRoot) {
+    return skillsRoot ?? DEFAULT_SKILLS_ROOT;
+}
+/**
+ * Read the content of a skill's SKILL.md file. Returns null if the file
+ * does not exist; propagates other I/O errors so callers can distinguish
+ * "skill not found" from "can't access skill".
+ */
+export function readSkillContent(skillName, skillsRoot) {
+    const skillFile = path.join(getSkillsRoot(skillsRoot), skillName, 'SKILL.md');
+    try {
+        return fs.readFileSync(skillFile, 'utf-8');
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return null;
+        throw err;
+    }
+}
+/**
+ * Return the per-client install directories where skills are written as
+ * subdirectories. Only includes clients that use the per-skill directory
+ * model (claude-code and codex). Gemini and Cursor bundle skills into a
+ * single file/extension and are not included.
+ */
+export function discoverPerClientInstallDirs(homeDir) {
+    const h = homeDir ?? os.homedir();
+    return {
+        'claude-code': path.join(h, '.claude', 'skills'),
+        'codex': path.join(h, '.codex', 'skills'),
+    };
+}
+//# sourceMappingURL=discover.js.map

package/dist/skill-install/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../src/skill-install/discover.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,+DAA+D;AAC/D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,mBAAmB;IACnB,cAAc;IACd,WAAW;IACX,YAAY;IACZ,WAAW;IACX,kBAAkB;IAClB,WAAW;IACX,oBAAoB;IACpB,iBAAiB;IACjB,cAAc;IACd,aAAa;IACb,oBAAoB;IACpB,oBAAoB;CACZ,CAAC;AAEX,uFAAuF;AACvF,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,IAAI,GAAG,iBAA0B,CAAC;IAC3C,YAAY,SAAiB,EAAE,WAAmB;QAChD,KAAK,CACH,UAAU,SAAS,eAAe;YAClC,YAAY,WAAW,IAAI;YAC3B,qBAAqB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnD,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,4EAA4E;AAC5E,2EAA2E;AAC3E,qEAAqE;AACrE,2EAA2E;AAC3E,2DAA2D;AAC3D,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,2CAA2C;AAC3C,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO;QACL,2EAA2E;QAC3E,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC;QAC/D,4EAA4E;QAC5E,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;QAChE,0FAA0F;QAC1F,+EAA+E;QAC/E,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,CAAC;QAC3E,0CAA0C;QAC1C,2FAA2F;QAC3F,uCAAuC;QACvC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC;QAClE,uEAAuE;QACvE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,SAAiC,EAAE,CAAC,UAAU;IAE9C,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAE,CAAC;AACxB,CAAC;AAED,MAAM,mBAAmB,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEzF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,UAAmB;IAC/C,OAAO,UAAU,IAAI,mBAAmB,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,UAAmB;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,OAAgB;IAC3D,MAAM,CAAC,GAAG,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAClC,OAAO;QACL,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC;QAChD,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC;KAC1C,CAAC;AACJ,CAAC"}