bfi-cli 0.1.99 → 0.1.100

package/dist/_chunks/manager.mjs

@@ -0,0 +1,436 @@
+import { mapStrings, normalizeConfig, object, resolveVariables, validName, variablePattern, variables } from "./model.mjs";
+import { identity, readConfig, writeConfig } from "./files.mjs";
+import { isDeepStrictEqual } from "node:util";
+import { existsSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { homedir } from "node:os";
+import { applyEdits, getNodeValue, modify, parseTree } from "jsonc-parser";
+import { parse as parse$1, stringify } from "smol-toml";
+const agentIds = [
+	"claude-code",
+	"codex",
+	"cursor",
+	"qwen-code",
+	"gemini-cli",
+	"zcode",
+	"codebuddy",
+	"kimi-code",
+	"opencode"
+];
+const aliases = {
+	claude: "claude-code",
+	qwen: "qwen-code",
+	gemini: "gemini-cli",
+	kimi: "kimi-code",
+	"kimi-cli": "kimi-code",
+	"codebuddy-code": "codebuddy"
+};
+function preferred(paths) {
+	return paths.find((filename) => existsSync(filename)) ?? paths[0];
+}
+function targetFor(name, scope = "user", options = {}) {
+	const agent = aliases[name] ?? name;
+	if (!agentIds.includes(agent)) throw new Error(`尚未支持该 Agent 的自动配置。支持：${agentIds.join(", ")}。WorkBuddy/IDE 专有配置请使用原生导入，不猜测路径。`);
+	const home = options.home ?? homedir();
+	const cwd = options.cwd ?? process.cwd();
+	const env = options.env ?? process.env;
+	const user = scope === "user";
+	const paths = {
+		"claude-code": [user ? join(home, ".claude.json") : join(cwd, ".mcp.json")],
+		codex: [user ? join(env.CODEX_HOME ?? join(home, ".codex"), "config.toml") : join(cwd, ".codex/config.toml")],
+		cursor: [join(user ? home : cwd, ".cursor/mcp.json")],
+		"qwen-code": [join(user ? home : cwd, ".qwen/settings.json")],
+		"gemini-cli": [join(user ? home : cwd, ".gemini/settings.json")],
+		zcode: [join(user ? home : cwd, user ? ".zcode/cli/config.json" : ".zcode/config.json")],
+		codebuddy: user ? [
+			join(home, ".codebuddy/.mcp.json"),
+			join(home, ".codebuddy/mcp.json"),
+			join(home, ".codebuddy.json")
+		] : [join(cwd, ".mcp.json"), join(cwd, "mcp.json")],
+		"kimi-code": [join(user ? env.KIMI_CODE_HOME ?? join(home, ".kimi-code") : join(cwd, ".kimi-code"), "mcp.json")],
+		opencode: [join(user ? env.XDG_CONFIG_HOME ? join(env.XDG_CONFIG_HOME, "opencode") : join(home, ".config/opencode") : cwd, "opencode.jsonc"), join(user ? env.XDG_CONFIG_HOME ? join(env.XDG_CONFIG_HOME, "opencode") : join(home, ".config/opencode") : cwd, "opencode.json")]
+	};
+	if (agent === "claude-code" && env.CLAUDE_CONFIG_DIR && !options.config) throw new Error("设置了 CLAUDE_CONFIG_DIR；请用 --config 明确 MCP 文件，避免改错作用域。");
+	if (agent === "kimi-code" && user && !env.KIMI_CODE_HOME && !existsSync(join(home, ".kimi-code")) && existsSync(join(home, ".kimi/mcp.json")) && !options.config) throw new Error("检测到旧版 Kimi 配置，请核对版本后用 --config 明确文件；本适配器面向 .kimi-code 布局。");
+	return {
+		agent,
+		scope,
+		path: resolve(options.config ?? preferred(paths[agent])),
+		format: agent === "codex" ? "toml" : "jsonc",
+		key: agent === "codex" ? ["mcp_servers"] : agent === "opencode" ? ["mcp"] : agent === "zcode" ? ["mcp", "servers"] : ["mcpServers"]
+	};
+}
+function hasLiteralSecrets(config) {
+	const literal = (value) => !/^Bearer \$\{(?:user_config\.)?[A-Za-z_][A-Za-z0-9_]*\}$/i.test(value) && Boolean(value.replace(variablePattern, (_whole, _name, fallback) => fallback ?? "").trim());
+	const sensitive = /token|secret|password|api.?key|authorization|credential|private.?key|x-pm-(ak|sk)/i;
+	if (Object.entries(config.headers ?? {}).some(([key, value]) => !/^(accept|content-type|user-agent|x-pm-env|x-pm-product-line)$/i.test(key) && literal(value))) return true;
+	if (Object.entries(config.env ?? {}).some(([key, value]) => sensitive.test(key) && literal(value))) return true;
+	if ((config.args ?? []).some((value, index, args) => /^--?(token|password|secret|api-key)(=|$)/i.test(value) && literal(value.includes("=") ? value.split("=").slice(1).join("=") : args[index + 1] ?? ""))) return true;
+	if (config.url) {
+		if ([...new URL(config.url.replace(variablePattern, "__BFI_VARIABLE__")).searchParams].some(([key, value]) => sensitive.test(key) && value.replaceAll("__BFI_VARIABLE__", ""))) return true;
+	}
+	return false;
+}
+function encodeServer(config, target, bindings = {}, materialize = false, environment = process.env) {
+	if (config.cwd && ![
+		"codex",
+		"qwen-code",
+		"gemini-cli",
+		"kimi-code"
+	].includes(target.agent)) throw new Error("此宿主的 MCP cwd 字段未支持或未确证；请提供不依赖 cwd 的启动配置。");
+	if (Object.values(bindings).some((name) => !/^[A-Za-z_][A-Za-z0-9_]*$/.test(name))) throw new Error("环境变量绑定名称无效。");
+	if (materialize && target.scope !== "user") throw new Error("凭据物化仅允许用户级配置，项目级配置只能保存引用。");
+	if (hasLiteralSecrets(config) && !materialize) throw new Error("源配置可能含明文凭据；请改为环境变量占位符，或显式选择用户级 --materialize-inputs。");
+	let value = materialize ? resolveVariables(config, bindings, environment) : config;
+	if (variables(value).length && ["zcode", "kimi-code"].includes(target.agent)) throw new Error("该宿主的通用变量插值未确证。请使用用户级 --materialize-inputs，或原生秘密配置；不会保存无效占位符。");
+	if (!materialize && target.agent !== "codex") value = mapStrings(value, (text) => text.replace(variablePattern, (_whole, key, fallback) => {
+		const name = bindings[key] ?? key;
+		if (fallback !== void 0 && !["claude-code", "codebuddy"].includes(target.agent)) throw new Error("此宿主不支持带默认值的变量引用。");
+		if (target.agent === "cursor") return `\${env:${name}}`;
+		if (target.agent === "opencode") return `{env:${name}}`;
+		return `\${${name}${fallback === void 0 ? "" : `:-${fallback}`}}`;
+	}));
+	const { type, ...rest } = value;
+	if (target.agent === "codex") {
+		if (type === "sse") throw new Error("Codex 不支持旧 SSE 配置；请提供 Streamable HTTP 服务。");
+		const result = {};
+		if (type === "stdio") {
+			result.command = value.command;
+			if (value.args) result.args = value.args;
+			if (value.cwd) result.cwd = value.cwd;
+			const env = {};
+			const inherited = [];
+			for (const [name, text] of Object.entries(value.env ?? {})) {
+				const match = /^\$\{(?:user_config\.)?([A-Za-z_][A-Za-z0-9_]*)\}$/.exec(text);
+				if (match && (bindings[match[1]] ?? match[1]) === name) inherited.push(name);
+				else if (text.includes("${")) throw new Error("Codex env_vars 不能重命名或拼接变量；请使用同名环境变量或用户级物化。");
+				else env[name] = text;
+			}
+			if (Object.keys(env).length) result.env = env;
+			if (inherited.length) result.env_vars = inherited;
+			if ([
+				value.command,
+				value.cwd,
+				...value.args ?? []
+			].some((item) => item?.includes("${"))) throw new Error("Codex command/args/cwd 不支持变量插值。");
+		} else {
+			result.url = value.url;
+			if (value.url?.includes("${")) throw new Error("Codex URL 不支持变量插值。");
+			const literal = {};
+			const inherited = {};
+			for (const [header, text] of Object.entries(value.headers ?? {})) {
+				const match = /^\$\{(?:user_config\.)?([A-Za-z_][A-Za-z0-9_]*)\}$/.exec(text);
+				const bearer = /^Bearer \$\{(?:user_config\.)?([A-Za-z_][A-Za-z0-9_]*)\}$/.exec(text);
+				if (match) inherited[header] = bindings[match[1]] ?? match[1];
+				else if (header.toLowerCase() === "authorization" && bearer) result.bearer_token_env_var = bindings[bearer[1]] ?? bearer[1];
+				else if (text.includes("${")) throw new Error("Codex header 只支持整值环境引用或 Bearer 引用，不支持拼接。");
+				else literal[header] = text;
+			}
+			if (Object.keys(literal).length) result.http_headers = literal;
+			if (Object.keys(inherited).length) result.env_http_headers = inherited;
+		}
+		return result;
+	}
+	if (target.agent === "opencode") {
+		if (value.cwd) throw new Error("OpenCode MCP 无独立 cwd 字段；请提供绝对启动路径。");
+		return type === "stdio" ? {
+			type: "local",
+			command: [value.command, ...value.args ?? []],
+			...value.env ? { environment: value.env } : {}
+		} : {
+			type: "remote",
+			url: value.url,
+			...value.headers ? { headers: value.headers } : {}
+		};
+	}
+	if (["qwen-code", "gemini-cli"].includes(target.agent)) {
+		const { url, ...fields } = rest;
+		return {
+			...fields,
+			...url ? { [type === "http" ? "httpUrl" : "url"]: url } : {}
+		};
+	}
+	if (target.agent === "cursor") return rest;
+	if (target.agent === "kimi-code") return {
+		...rest,
+		...type === "sse" ? { transport: "sse" } : {}
+	};
+	return {
+		type,
+		...rest
+	};
+}
+const managedKeys = /* @__PURE__ */ new Set([
+	"type",
+	"transport",
+	"command",
+	"args",
+	"env",
+	"environment",
+	"cwd",
+	"url",
+	"httpUrl",
+	"headers",
+	"http_headers",
+	"env_http_headers",
+	"env_vars",
+	"bearer_token_env_var"
+]);
+function mergeServer(existing, desired) {
+	if (existing === void 0) return desired;
+	const previous = object(existing, "已有 MCP");
+	const extras = Object.fromEntries(Object.entries(previous).filter(([key]) => !managedKeys.has(key)));
+	if ([
+		"oauth",
+		"auth",
+		"headersHelper",
+		"http_headers_helper",
+		"bearerTokenEnvVar",
+		"bearer_token"
+	].some((key) => extras[key] !== void 0) && [
+		"url",
+		"httpUrl",
+		"command",
+		"type",
+		"transport"
+	].some((key) => previous[key] !== desired[key])) throw new Error("已有服务器包含宿主专有认证设置，不能安全更换启动目标；请在客户端中处理。");
+	return {
+		...extras,
+		...desired
+	};
+}
+function decodeServer(raw, target) {
+	const source = object(raw, "MCP");
+	if (source.cwd && ![
+		"codex",
+		"qwen-code",
+		"gemini-cli",
+		"kimi-code"
+	].includes(target.agent)) throw new Error("此宿主 cwd 语义未确证，请使用客户端原生测试。");
+	if (source.enabled === false || source.disabled === true) throw new Error("此 MCP 已在客户端停用；测试不会绕过停用设置。");
+	if ([
+		"oauth",
+		"auth",
+		"headersHelper",
+		"http_headers_helper",
+		"bearer_token",
+		"bearerTokenEnvVar"
+	].some((key) => source[key] !== void 0)) throw new Error("此服务器使用宿主专有认证；请用客户端原生连接测试。");
+	let result = Object.fromEntries(Object.entries(source).filter(([key]) => managedKeys.has(key)));
+	if (target.agent === "codex") {
+		const { env_vars, env_http_headers, http_headers, bearer_token_env_var, ...rest } = result;
+		result = rest;
+		if (source.command) {
+			const env = { ...object(source.env ?? {}) };
+			if (env_vars !== void 0 && (!Array.isArray(env_vars) || !env_vars.every((item) => typeof item === "string"))) throw new Error("不支持的 Codex env_vars 结构。");
+			for (const name of env_vars ?? []) env[name] = `\${${name}}`;
+			if (Object.keys(env).length) result.env = env;
+		} else {
+			const headers = { ...object(http_headers ?? {}) };
+			for (const [name, variable] of Object.entries(object(env_http_headers ?? {}))) {
+				if (typeof variable !== "string" || !/^[A-Za-z_][A-Za-z0-9_]*$/.test(variable)) throw new Error("无效环境变量引用。");
+				headers[name] = `\${${variable}}`;
+			}
+			if (typeof bearer_token_env_var === "string") headers.Authorization = `Bearer \${${bearer_token_env_var}}`;
+			if (Object.keys(headers).length) result.headers = headers;
+		}
+	} else if (target.agent === "opencode") {
+		if (source.type === "local") {
+			if (!Array.isArray(source.command) || !source.command.length) throw new Error("OpenCode command 必须为非空数组。");
+			result = {
+				type: "stdio",
+				command: source.command[0],
+				args: source.command.slice(1),
+				...source.environment ? { env: source.environment } : {}
+			};
+		} else result = {
+			type: "http",
+			url: source.url,
+			...source.headers ? { headers: source.headers } : {}
+		};
+		result = mapStrings(result, (text) => text.replace(/\{env:([A-Za-z_][A-Za-z0-9_]*)\}/g, "${$1}"));
+	} else if (["qwen-code", "gemini-cli"].includes(target.agent)) {
+		const { httpUrl, ...rest } = result;
+		result = {
+			...rest,
+			...httpUrl ? {
+				type: "http",
+				url: httpUrl
+			} : source.url ? { type: "sse" } : {}
+		};
+	} else if (target.agent === "cursor") result = mapStrings(result, (text) => text.replace(/\$\{env:([A-Za-z_][A-Za-z0-9_]*)\}/g, "${$1}"));
+	return normalizeConfig(result);
+}
+function checkNode(node) {
+	if (node.type === "object") {
+		const keys = (node.children ?? []).map((child) => String(child.children?.[0]?.value));
+		if (keys.length !== new Set(keys).size || keys.some((key) => [
+			"__proto__",
+			"prototype",
+			"constructor"
+		].includes(key))) throw new Error("配置包含重复键或不安全键，拒绝修改。");
+	}
+	node.children?.forEach(checkNode);
+}
+function readDocument(text, format) {
+	if (!text.trim()) return {};
+	try {
+		if (format === "toml") return object(parse$1(text));
+		const errors = [];
+		const tree = parseTree(text, errors, {
+			allowTrailingComma: true,
+			disallowComments: false
+		});
+		if (!tree || errors.length) throw new Error();
+		checkNode(tree);
+		return object(JSON.parse(JSON.stringify(getNodeValue(tree))));
+	} catch {
+		throw new Error("现有配置解析失败，未修改任何内容。请先修复配置格式或重复键。");
+	}
+}
+function serversIn(document, path) {
+	let current = document;
+	for (const key of path) {
+		if (current[key] === void 0) return {};
+		current = object(current[key], "MCP 配置节点");
+	}
+	return current;
+}
+function tablePath(line) {
+	if (!/^\s*\[[^[]/.test(line)) return;
+	try {
+		let value = parse$1(`${line}\n__bfi_table_marker__ = true\n`);
+		const path = [];
+		while (value && typeof value === "object") {
+			const entries = Object.entries(value);
+			if (entries.length !== 1) return;
+			const [key, next] = entries[0];
+			if (key === "__bfi_table_marker__") return path;
+			path.push(key);
+			value = next;
+		}
+	} catch {
+		return;
+	}
+}
+function editToml(text, replacements) {
+	const lines = text.split(/(?<=\n)/);
+	const starts = [];
+	let offset = 0;
+	for (const line of lines) {
+		if (/^\s*\[/.test(line)) starts.push({
+			offset,
+			path: tablePath(line.trim())
+		});
+		offset += line.length;
+	}
+	const existing = serversIn(readDocument(text, "toml"), ["mcp_servers"]);
+	const ranges = [];
+	for (const name of Object.keys(replacements)) {
+		const matches = starts.flatMap((start, index) => start.path?.[0] === "mcp_servers" && start.path[1] === name ? [[start.offset, starts[index + 1]?.offset ?? text.length]] : []);
+		if (existing[name] !== void 0 && !matches.length) throw new Error("目标 MCP 使用内联或复杂 TOML 定义，无法安全增量更新；请先改为独立 [mcp_servers.\"name\"] 表。");
+		ranges.push(...matches);
+	}
+	let result = text;
+	for (const [start, end] of ranges.sort((left, right) => right[0] - left[0])) result = result.slice(0, start) + result.slice(end);
+	for (const [name, config] of Object.entries(replacements)) if (config !== void 0) result += `${result.endsWith("\n") || !result ? "" : "\n"}\n${stringify({ mcp_servers: { [name]: config } }).replace(/^\[mcp_servers\]\r?\n/m, "")}`;
+	if (!readDocument(result, "toml").mcp_servers) result += "\n[mcp_servers]\n";
+	return result;
+}
+function editDocument(text, format, path, replacements) {
+	serversIn(readDocument(text, format), path);
+	const expected = readDocument(text, format);
+	let parent = expected;
+	for (const key of path) parent = object(parent[key] ?? (parent[key] = {}));
+	for (const [name, value] of Object.entries(replacements)) if (value === void 0) delete parent[name];
+	else parent[name] = value;
+	let result = text.trim() ? text : format === "jsonc" ? "{}\n" : "";
+	if (format === "toml") result = editToml(result, replacements);
+	else for (const [name, value] of Object.entries(replacements)) result = applyEdits(result, modify(result, [...path, name], value, { formattingOptions: {
+		insertSpaces: true,
+		tabSize: 2,
+		eol: text.includes("\r\n") ? "\r\n" : "\n"
+	} }));
+	if (!isDeepStrictEqual(readDocument(result, format), expected)) throw new Error("配置保留校验失败，未写入；请使用客户端原生配置处理复杂结构。");
+	return result;
+}
+async function loadTarget(target) {
+	const fileIdentity = await identity(target.path);
+	const text = await readConfig(target.path);
+	if (await identity(target.path) !== fileIdentity) throw new Error("读取时配置发生变化，请重试。");
+	return {
+		text,
+		fileIdentity,
+		servers: serversIn(readDocument(text ?? "", target.format), target.key)
+	};
+}
+async function planInstall(target, entries, options = {}) {
+	if (!entries.length || entries.length > 100) throw new Error("每次需要选择 1–100 个 MCP。");
+	const names = entries.map((entry) => validName(entry.registrationName));
+	if (new Set(names).size !== names.length) throw new Error("安装列表包含重复名称。");
+	const knownVariables = new Set(entries.flatMap((entry) => variables(entry.config)));
+	if (Object.keys(options.bindings ?? {}).some((key) => !knownVariables.has(key))) throw new Error("环境绑定包含未使用的变量名，请检查 --input-env。");
+	for (const [server, bindings] of Object.entries(options.bindingsByServer ?? {})) {
+		const entry = entries.find((candidate) => candidate.registrationName === server);
+		if (!entry || Object.keys(bindings).some((key) => !variables(entry.config).includes(key))) throw new Error("服务器环境绑定包含未使用的名称。");
+	}
+	const { text, fileIdentity, servers } = await loadTarget(target);
+	const replacements = {};
+	const changes = [];
+	for (const entry of entries) {
+		if (entry.runtime?.source === "upload") throw new Error(`MCP ${entry.registrationName} 需要上传运行包。请先下载检查并准备本地启动路径，再用 --file 安装本地配置。`);
+		const name = entry.registrationName;
+		const bindings = {
+			...options.bindings,
+			...options.bindingsByServer?.[name]
+		};
+		const desired = encodeServer(entry.config, target, bindings, options.materialize, options.environment);
+		const merged = mergeServer(servers[name], desired);
+		const action = servers[name] === void 0 ? "add" : isDeepStrictEqual(servers[name], merged) ? "unchanged" : "replace";
+		if (action === "replace" && !options.replace) throw new Error(`同名 MCP ${name} 配置不同；未修改任何服务器。确认要替换其连接配置时使用 --replace。`);
+		if (action !== "unchanged") replacements[name] = merged;
+		changes.push({
+			name,
+			action,
+			transport: entry.config.type,
+			variables: variables(entry.config).map((key) => bindings[key] ?? key)
+		});
+	}
+	return {
+		target,
+		previous: text,
+		next: Object.keys(replacements).length ? editDocument(text ?? "", target.format, target.key, replacements) : text,
+		fileIdentity,
+		changes
+	};
+}
+async function planRemove(target, names) {
+	if (!names.length || names.length > 100) throw new Error("请明确指定 1–100 个要移除的 MCP。");
+	const { text, fileIdentity, servers } = await loadTarget(target);
+	const replacements = {};
+	const changes = [...new Set(names)].map((name) => {
+		validName(name);
+		const action = Object.hasOwn(servers, name) ? "remove" : "absent";
+		if (action === "remove") replacements[name] = void 0;
+		return {
+			name,
+			action
+		};
+	});
+	return {
+		target,
+		previous: text,
+		next: Object.keys(replacements).length ? editDocument(text ?? "", target.format, target.key, replacements) : text,
+		fileIdentity,
+		changes
+	};
+}
+async function applyPlan(plan) {
+	if (plan.previous === plan.next || plan.next === void 0) return { changed: false };
+	if (await identity(plan.target.path) !== plan.fileIdentity) throw new Error("配置在预览后发生变化，请重新运行；未写入。");
+	return {
+		changed: true,
+		backup: await writeConfig(plan.target.path, plan.previous, plan.next, plan.fileIdentity)
+	};
+}
+export { agentIds, applyPlan, decodeServer, loadTarget, planInstall, planRemove, readDocument, serversIn, targetFor };