agent-mcp-hub 0.5.2

package/dist/registry.js

@@ -0,0 +1,159 @@
+import { accessSync, constants, statSync } from "node:fs";
+import { delimiter, isAbsolute, join } from "node:path";
+import { claudeAdapter } from "./adapters/claude.js";
+import { codexAdapter } from "./adapters/codex.js";
+import { cursorAdapter } from "./adapters/cursor.js";
+import { opencodeAdapter } from "./adapters/opencode.js";
+import { classifyFailure } from "./failure.js";
+export function allAdapters() {
+    return [codexAdapter, cursorAdapter, opencodeAdapter, claudeAdapter];
+}
+/**
+ * Union of every adapter's credential env var, DERIVED from the adapter list so a
+ * new agent's key is covered automatically — there is no hand-maintained
+ * duplicate to forget (forgetting one silently leaked the new key to every other
+ * agent). This is the set of secrets that must be isolated between agents.
+ */
+export function allCredentialEnvVars() {
+    return [
+        ...new Set(allAdapters()
+            .map((a) => a.apiKeyEnv)
+            .filter((k) => Boolean(k))),
+    ];
+}
+/**
+ * The credential keys to STRIP from `adapter`'s child environment: every OTHER
+ * agent's key. An adapter with its own `apiKeyEnv` keeps exactly that one. A
+ * provider-agnostic adapter (no `apiKeyEnv`, e.g. opencode) owns none, so ALL
+ * tracked keys are stripped — it must never inherit a sibling's secret. Applied
+ * to real runs AND to availability probes, so no spawn path leaks a key.
+ */
+export function credentialStripKeys(adapter) {
+    return allCredentialEnvVars().filter((k) => k !== adapter.apiKeyEnv);
+}
+/**
+ * Selects which adapters to expose based on MCP_AGENTS (comma-separated,
+ * whitespace-tolerant, case-sensitive). Unset or empty-after-parse yields all
+ * adapters (never an empty server). Unknown names fail fast with an actionable
+ * message so typos are surfaced at wiring time rather than silently dropped.
+ */
+export function enabledAdapters(agentsSpec = process.env.MCP_AGENTS) {
+    const requested = [
+        ...new Set((agentsSpec ?? "")
+            .split(",")
+            .map((name) => name.trim())
+            .filter(Boolean)),
+    ];
+    if (requested.length === 0)
+        return allAdapters();
+    const known = new Set(allAdapters().map((a) => a.name));
+    for (const name of requested) {
+        if (!known.has(name)) {
+            throw new Error(`Unknown agent "${name}" in MCP_AGENTS. Valid agents: ${allAdapters()
+                .map((a) => a.name)
+                .join(", ")}`);
+        }
+    }
+    const set = new Set(requested);
+    return allAdapters().filter((a) => set.has(a.name));
+}
+/**
+ * A probe may exit 0 and still be announcing that the CLI cannot function.
+ * These are read against combined stdout+stderr, not the exit code.
+ */
+const FATAL_PROBE_SIGNATURES = [
+    /read-only file system/i,
+    /permission denied/i,
+    /\bEACCES\b/,
+    /\bEROFS\b/,
+    /\bENOSPC\b/,
+];
+const PROBE_TIMEOUT_MS = 10_000;
+function isExecutableFile(candidate) {
+    try {
+        if (!statSync(candidate).isFile())
+            return false;
+        accessSync(candidate, constants.X_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Resolves a binary the way spawn will: absolute paths as-is, otherwise the first
+ * executable match walking PATH. Returns undefined when nothing matches, which is
+ * the ONLY thing that may set `installed: false`.
+ */
+export function resolveOnPath(binary, pathEnv = process.env.PATH) {
+    if (isAbsolute(binary))
+        return isExecutableFile(binary) ? binary : undefined;
+    for (const dir of (pathEnv ?? "").split(delimiter).filter(Boolean)) {
+        const candidate = join(dir, binary);
+        if (isExecutableFile(candidate))
+            return candidate;
+    }
+    return undefined;
+}
+/**
+ * Identifier-shaped lines only. A CLI can exit 0 while emitting a banner, an
+ * update notice, or "you are not logged in" prose — none of which are ids. Lines
+ * containing whitespace are prose; lines without it are candidate ids.
+ */
+export function parseProbeIds(stdout) {
+    return stdout
+        .split("\n")
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0 && !/\s/.test(line));
+}
+function firstFatalLine(output) {
+    for (const line of output.split("\n")) {
+        if (FATAL_PROBE_SIGNATURES.some((re) => re.test(line)))
+            return line.trim();
+    }
+    return undefined;
+}
+function result(name, installed, usable, reason) {
+    return reason === undefined
+        ? { name, installed, usable, available: usable }
+        : { name, installed, usable, available: usable, reason };
+}
+/**
+ * Probes one adapter. Never throws: a probe failure is data, not an exception.
+ * The probe command is per-adapter because the CLIs disagree — `opencode models`
+ * lists models, `codex models` is not a subcommand at all — so there is no single
+ * command that proves usability across all four.
+ */
+export async function checkAvailability(adapter, exec, resolve = resolveOnPath) {
+    if (resolve(adapter.binary) === undefined) {
+        return result(adapter.name, false, false, `${adapter.binary} was not found on PATH. Fix: install the CLI and ensure it is on PATH.`);
+    }
+    const probeArgs = adapter.probeArgs ?? ["--version"];
+    let outcome;
+    try {
+        // Same credential isolation as a real run: a probe spawns the CLI, so it
+        // must not hand it a sibling agent's key either.
+        outcome = await exec(adapter.binary, probeArgs, {
+            timeoutMs: PROBE_TIMEOUT_MS,
+            stripEnvKeys: credentialStripKeys(adapter),
+        });
+    }
+    catch (error) {
+        // Installed (we just resolved it), but the probe could not complete.
+        return result(adapter.name, true, false, classifyFailure(adapter, { error }).message);
+    }
+    if (outcome.exitCode !== 0) {
+        return result(adapter.name, true, false, classifyFailure(adapter, { result: outcome }).message);
+    }
+    // Exit 0 is not a pass. Check what it actually said.
+    const fatal = firstFatalLine(`${outcome.stdout}\n${outcome.stderr}`);
+    if (fatal !== undefined) {
+        return result(adapter.name, true, false, `${adapter.name} exited 0 but reported a fatal condition: ${fatal}`);
+    }
+    if (adapter.probeRequiresOutput === true && parseProbeIds(outcome.stdout).length === 0) {
+        return result(adapter.name, true, false, `${adapter.name} probe (\`${adapter.binary} ${probeArgs.join(" ")}\`) exited 0 but listed nothing. ` +
+            `Fix: run \`${adapter.loginCommand}\`.`);
+    }
+    return result(adapter.name, true, true);
+}
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG/C,MAAM,UAAU,WAAW;IACzB,OAAO,CAAC,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,GAAG,IAAI,GAAG,CACR,WAAW,EAAE;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;aACvB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAC1C;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAqB;IACvD,OAAO,oBAAoB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU;IACjE,MAAM,SAAS,GAAG;QAChB,GAAG,IAAI,GAAG,CACR,CAAC,UAAU,IAAI,EAAE,CAAC;aACf,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC,CACnB;KACF,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,WAAW,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,kBAAkB,IAAI,kCAAkC,WAAW,EAAE;iBAClE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAClB,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,OAAO,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AA2BD;;;GAGG;AACH,MAAM,sBAAsB,GAAsB;IAChD,wBAAwB;IACxB,oBAAoB;IACpB,YAAY;IACZ,WAAW;IACX,YAAY;CACb,CAAC;AAEF,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,SAAS,gBAAgB,CAAC,SAAiB;IACzC,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,KAAK,CAAC;QAChD,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI;IACtE,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,gBAAgB,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IACpD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IAC7E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CACb,IAAY,EACZ,SAAkB,EAClB,MAAe,EACf,MAAe;IAEf,OAAO,MAAM,KAAK,SAAS;QACzB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;QAChD,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC7D,CAAC;AAKD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAqB,EACrB,IAAU,EACV,UAAyB,aAAa;IAEtC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,MAAM,CACX,OAAO,CAAC,IAAI,EACZ,KAAK,EACL,KAAK,EACL,GAAG,OAAO,CAAC,MAAM,wEAAwE,CAC1F,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,OAAoE,CAAC;IACzE,IAAI,CAAC;QACH,yEAAyE;QACzE,iDAAiD;QACjD,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE;YAC9C,SAAS,EAAE,gBAAgB;YAC3B,YAAY,EAAE,mBAAmB,CAAC,OAAO,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qEAAqE;QACrE,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAClG,CAAC;IAED,qDAAqD;IACrD,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,MAAM,CACX,OAAO,CAAC,IAAI,EACZ,IAAI,EACJ,KAAK,EACL,GAAG,OAAO,CAAC,IAAI,6CAA6C,KAAK,EAAE,CACpE,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,mBAAmB,KAAK,IAAI,IAAI,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvF,OAAO,MAAM,CACX,OAAO,CAAC,IAAI,EACZ,IAAI,EACJ,KAAK,EACL,GAAG,OAAO,CAAC,IAAI,aAAa,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,mCAAmC;YAClG,cAAc,OAAO,CAAC,YAAY,KAAK,CAC1C,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,15 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { type Exec } from "./exec.js";
+import { type ResolveBinary } from "./registry.js";
+import type { AgentAdapter } from "./types.js";
+/**
+ * Model id, forwarded to the CLI as `--model <value>`. Validated with a positive
+ * allowlist (letters/digits then `. _ : / -`, ≤128 chars) so a flag-shaped value
+ * — anything starting with `-`, e.g. `--dir=/` or `--share` — is REJECTED. A CLI
+ * parses a hyphen-leading token in that position as another flag, not the model,
+ * which is argument injection even without a shell; the allowlist closes it and
+ * also bounds length. `o3`, `gpt-5.3-codex-high`, `openai/gpt-5`, `sonnet-4-thinking`
+ * all pass.
+ */
+export declare const MODEL_RE: RegExp;
+export declare function buildServer(adapters: AgentAdapter[], exec?: Exec, resolve?: ResolveBinary): McpServer;