context-gatekeeper 0.3.0

package/dist/scripts/agents/continue.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Continue adapter.
+ *
+ * Continue.dev reads `.continue/config.json`. This adapter exercises the same
+ * MCP server configuration shape that Continue uses (`experimental.modelContextProtocolServers`).
+ */
+import { BaseAgentAdapter, AgentConfig } from './base.ts';
+export declare class ContinueAdapter extends BaseAgentAdapter {
+    get name(): string;
+    buildSpawnCommand(): {
+        command: string;
+        args: string[];
+        env: Record<string, string | undefined>;
+    };
+    static buildMcpConfig(mcpBin: {
+        command: string;
+        args: string[];
+    }): AgentConfig['mcpConfig'];
+}
+//# sourceMappingURL=continue.d.ts.map

package/dist/scripts/agents/continue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"continue.d.ts","sourceRoot":"","sources":["continue.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE1D,qBAAa,eAAgB,SAAQ,gBAAgB;IACnD,IAAa,IAAI,IAAI,MAAM,CAE1B;IAEQ,iBAAiB,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;KAAE;IAS1G,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,WAAW,CAAC,WAAW,CAAC;CAc7F"}

package/dist/scripts/agents/continue.js

@@ -0,0 +1,35 @@
+/**
+ * Continue adapter.
+ *
+ * Continue.dev reads `.continue/config.json`. This adapter exercises the same
+ * MCP server configuration shape that Continue uses (`experimental.modelContextProtocolServers`).
+ */
+import { BaseAgentAdapter } from './base.ts';
+export class ContinueAdapter extends BaseAgentAdapter {
+    get name() {
+        return 'continue';
+    }
+    buildSpawnCommand() {
+        const cliPath = this.config.cliPath ?? 'cn';
+        return {
+            command: cliPath,
+            args: ['--config', this.mcpConfigPath, 'test-mcp'],
+            env: this.buildMcpServerEnv(),
+        };
+    }
+    static buildMcpConfig(mcpBin) {
+        return {
+            experimental: {
+                modelContextProtocolServers: [
+                    {
+                        name: 'context-gatekeeper',
+                        command: mcpBin.command,
+                        args: mcpBin.args,
+                        transport: 'stdio',
+                    },
+                ],
+            },
+        };
+    }
+}
+//# sourceMappingURL=continue.js.map

package/dist/scripts/agents/continue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"continue.js","sourceRoot":"","sources":["continue.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAe,MAAM,WAAW,CAAC;AAE1D,MAAM,OAAO,eAAgB,SAAQ,gBAAgB;IACnD,IAAa,IAAI;QACf,OAAO,UAAU,CAAC;IACpB,CAAC;IAEQ,iBAAiB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC;QAC5C,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC;YAClD,GAAG,EAAE,IAAI,CAAC,iBAAiB,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,MAA2C;QAC/D,OAAO;YACL,YAAY,EAAE;gBACZ,2BAA2B,EAAE;oBAC3B;wBACE,IAAI,EAAE,oBAAoB;wBAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,SAAS,EAAE,OAAO;qBACnB;iBACF;aACF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/scripts/agents/continue.ts

@@ -0,0 +1,38 @@
+/**
+ * Continue adapter.
+ *
+ * Continue.dev reads `.continue/config.json`. This adapter exercises the same
+ * MCP server configuration shape that Continue uses (`experimental.modelContextProtocolServers`).
+ */
+
+import { BaseAgentAdapter, AgentConfig } from './base.ts';
+
+export class ContinueAdapter extends BaseAgentAdapter {
+  override get name(): string {
+    return 'continue';
+  }
+
+  override buildSpawnCommand(): { command: string; args: string[]; env: Record<string, string | undefined> } {
+    const cliPath = this.config.cliPath ?? 'cn';
+    return {
+      command: cliPath,
+      args: ['--config', this.mcpConfigPath, 'test-mcp'],
+      env: this.buildMcpServerEnv(),
+    };
+  }
+
+  static buildMcpConfig(mcpBin: { command: string; args: string[] }): AgentConfig['mcpConfig'] {
+    return {
+      experimental: {
+        modelContextProtocolServers: [
+          {
+            name: 'context-gatekeeper',
+            command: mcpBin.command,
+            args: mcpBin.args,
+            transport: 'stdio',
+          },
+        ],
+      },
+    };
+  }
+}

package/dist/scripts/agents/cursor.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Cursor adapter.
+ *
+ * Cursor reads `.cursor/mcp.json` from the workspace root and uses the
+ * `context-gatekeeper` server definition. This adapter exercises the same
+ * configuration shape that Cursor itself reads: the MCP server binary is
+ * invoked via stdio using the exact command/args Cursor would use.
+ *
+ * Since the Cursor desktop app is not scriptable in this environment, the
+ * adapter instead spawns the MCP server with the same stdio contract Cursor
+ * uses and validates the JSON-RPC handshake against the SDK reference client.
+ */
+import { BaseAgentAdapter, AgentConfig } from './base.ts';
+export declare class CursorAdapter extends BaseAgentAdapter {
+    get name(): string;
+    buildSpawnCommand(): {
+        command: string;
+        args: string[];
+        env: Record<string, string | undefined>;
+    };
+    /** Build the standard `.cursor/mcp.json` configuration for documentation purposes. */
+    static buildMcpConfig(mcpBin: {
+        command: string;
+        args: string[];
+    }): AgentConfig['mcpConfig'];
+}
+//# sourceMappingURL=cursor.d.ts.map

package/dist/scripts/agents/cursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.d.ts","sourceRoot":"","sources":["cursor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE1D,qBAAa,aAAc,SAAQ,gBAAgB;IACjD,IAAa,IAAI,IAAI,MAAM,CAE1B;IAEQ,iBAAiB,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;KAAE;IAS1G,sFAAsF;IACtF,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,WAAW,CAAC,WAAW,CAAC;CAU7F"}

package/dist/scripts/agents/cursor.js

@@ -0,0 +1,38 @@
+/**
+ * Cursor adapter.
+ *
+ * Cursor reads `.cursor/mcp.json` from the workspace root and uses the
+ * `context-gatekeeper` server definition. This adapter exercises the same
+ * configuration shape that Cursor itself reads: the MCP server binary is
+ * invoked via stdio using the exact command/args Cursor would use.
+ *
+ * Since the Cursor desktop app is not scriptable in this environment, the
+ * adapter instead spawns the MCP server with the same stdio contract Cursor
+ * uses and validates the JSON-RPC handshake against the SDK reference client.
+ */
+import { BaseAgentAdapter } from './base.ts';
+export class CursorAdapter extends BaseAgentAdapter {
+    get name() {
+        return 'cursor';
+    }
+    buildSpawnCommand() {
+        const cg = this.getMcpServerCommand();
+        return {
+            command: cg.command,
+            args: cg.args,
+            env: this.buildMcpServerEnv(),
+        };
+    }
+    /** Build the standard `.cursor/mcp.json` configuration for documentation purposes. */
+    static buildMcpConfig(mcpBin) {
+        return {
+            mcpServers: {
+                'context-gatekeeper': {
+                    command: mcpBin.command,
+                    args: mcpBin.args,
+                },
+            },
+        };
+    }
+}
+//# sourceMappingURL=cursor.js.map

package/dist/scripts/agents/cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor.js","sourceRoot":"","sources":["cursor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,gBAAgB,EAAe,MAAM,WAAW,CAAC;AAE1D,MAAM,OAAO,aAAc,SAAQ,gBAAgB;IACjD,IAAa,IAAI;QACf,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEQ,iBAAiB;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACtC,OAAO;YACL,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,GAAG,EAAE,IAAI,CAAC,iBAAiB,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED,sFAAsF;IACtF,MAAM,CAAC,cAAc,CAAC,MAA2C;QAC/D,OAAO;YACL,UAAU,EAAE;gBACV,oBAAoB,EAAE;oBACpB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,IAAI,EAAE,MAAM,CAAC,IAAI;iBAClB;aACF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/scripts/agents/cursor.ts

@@ -0,0 +1,41 @@
+/**
+ * Cursor adapter.
+ *
+ * Cursor reads `.cursor/mcp.json` from the workspace root and uses the
+ * `context-gatekeeper` server definition. This adapter exercises the same
+ * configuration shape that Cursor itself reads: the MCP server binary is
+ * invoked via stdio using the exact command/args Cursor would use.
+ *
+ * Since the Cursor desktop app is not scriptable in this environment, the
+ * adapter instead spawns the MCP server with the same stdio contract Cursor
+ * uses and validates the JSON-RPC handshake against the SDK reference client.
+ */
+
+import { BaseAgentAdapter, AgentConfig } from './base.ts';
+
+export class CursorAdapter extends BaseAgentAdapter {
+  override get name(): string {
+    return 'cursor';
+  }
+
+  override buildSpawnCommand(): { command: string; args: string[]; env: Record<string, string | undefined> } {
+    const cg = this.getMcpServerCommand();
+    return {
+      command: cg.command,
+      args: cg.args,
+      env: this.buildMcpServerEnv(),
+    };
+  }
+
+  /** Build the standard `.cursor/mcp.json` configuration for documentation purposes. */
+  static buildMcpConfig(mcpBin: { command: string; args: string[] }): AgentConfig['mcpConfig'] {
+    return {
+      mcpServers: {
+        'context-gatekeeper': {
+          command: mcpBin.command,
+          args: mcpBin.args,
+        },
+      },
+    };
+  }
+}

package/dist/scripts/cli/config-gen.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Build the MCP config block that will be merged into the user's agent
+ * config file. This is a thin wrapper that picks the right adapter for
+ * the target agent and forwards a fixed `mcpBin` pointing at the
+ * published npm package.
+ */
+import { AgentName } from './detect.ts';
+import type { AgentConfig } from '../agents/base.ts';
+/**
+ * Build the launch command the user's agent will run to start the MCP
+ * server. The form is platform-aware and depends on whether the package
+ * has been globally installed:
+ *
+ *  - Global install present (any platform):
+ *      command = <absolute path to system node>
+ *      args    = [<absolute path to dist/mcp/server.js>]
+ *    This avoids the `npx` dance entirely, sidesteps the Windows
+ *    npx-cli.js relative-path bug, and does not require network access.
+ *
+ *  - No global install (e.g. running from source only):
+ *      POSIX: `npx -y context-gatekeeper`
+ *      Windows: `cmd /c npx -y context-gatekeeper`
+ *    This is a fallback that only works once the package is published
+ *    to a registry the host can reach.
+ */
+export declare function buildMcpBin(): {
+    command: string;
+    args: string[];
+};
+export declare const PUBLISHED_PACKAGE = "context-gatekeeper";
+/**
+ * The launch command the user's agent will run to start the MCP server.
+ * Computed at import time via {@link buildMcpBin}. Kept as a constant
+ * for backward compatibility with code that still imports it; new code
+ * should call `buildMcpBin()` directly.
+ */
+export declare const PUBLISHED_MCP_BIN: {
+    command: string;
+    args: string[];
+};
+/**
+ * Build the config block for a given agent. The result is a partial config
+ * object (e.g. `{ mcpServers: { 'context-gatekeeper': {...} } }`) that will
+ * be merged into the existing file.
+ */
+export declare function buildConfigBlock(agent: AgentName): AgentConfig['mcpConfig'];
+/**
+ * The key the agent stores our server under. Used by install/uninstall
+ * to find and remove the entry. The value is the same regardless of
+ * agent because we always register under the canonical
+ * `context-gatekeeper` name.
+ *
+ * - Cursor / Claude Desktop / Cline / Claude Code: top-level key under
+ *   `mcpServers`.
+ * - Continue: entry inside `experimental.modelContextProtocolServers`,
+ *   identified by the entry's `name` field (not a key).
+ */
+export declare const GATEKEEPER_KEY = "context-gatekeeper";
+//# sourceMappingURL=config-gen.d.ts.map

package/dist/scripts/cli/config-gen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-gen.d.ts","sourceRoot":"","sources":["config-gen.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAMxC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAwErD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,WAAW,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CASjE;AAED,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AAEtD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAkB,CAAC;AAkBpF;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,GAAG,WAAW,CAAC,WAAW,CAAC,CAE3E;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc,uBAAuB,CAAC"}

package/dist/scripts/cli/config-gen.js

@@ -0,0 +1,156 @@
+/**
+ * Build the MCP config block that will be merged into the user's agent
+ * config file. This is a thin wrapper that picks the right adapter for
+ * the target agent and forwards a fixed `mcpBin` pointing at the
+ * published npm package.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join, resolve as resolvePath } from 'node:path';
+import { createRequire } from 'node:module';
+import { CursorAdapter } from '../agents/cursor.ts';
+import { ClaudeDesktopAdapter } from '../agents/claude-desktop.ts';
+import { ClineAdapter } from '../agents/cline.ts';
+import { ContinueAdapter } from '../agents/continue.ts';
+import { ClaudeCodeAdapter } from '../agents/claude-code.ts';
+/**
+ * `createRequire` from `node:module` is the canonical way to use CJS
+ * `require()` from ESM sources. Direct `require('node:fs')` works in CJS
+ * but throws `require is not defined` when this file is loaded via
+ * tsx/Node's ESM loader (which is the path used by `scripts/cli.ts`).
+ */
+const cjs = createRequire(import.meta.url);
+const childProcess = cjs('node:child_process');
+/**
+ * Resolve an absolute, system-level `node` binary path. Cursor ships its
+ * own bundled node at `resources/helpers/node.exe`; we want to avoid
+ * baking that path into a user's `mcp.json`, because:
+ *   1. It pins the install to this specific Cursor install directory.
+ *   2. The bundled node lacks a few npm modules a published
+ *      context-gatekeeper may rely on (e.g. sql.js native bindings).
+ *
+ * Strategy: parse `where node` (Windows) or `which node` (POSIX) and
+ * take the first result that is NOT the Cursor bundle. Fall back to
+ * `process.execPath` only if both lookups fail — for non-Windows or
+ * when no `where`/`which` is available (rare).
+ */
+function resolveSystemNode() {
+    const isWin = process.platform === 'win32';
+    const cmd = isWin ? 'where node' : 'which node';
+    try {
+        const out = childProcess.execSync(cmd, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim();
+        const lines = out.split(/\r?\n/).map((l) => l.trim()).filter(Boolean);
+        // Reject anything that lives under Cursor's installation.
+        const nonCursor = lines.find((p) => !/cursor/i.test(p) && !/helpers\/node(\.exe)?$/i.test(p));
+        if (nonCursor)
+            return nonCursor;
+        if (lines.length > 0)
+            return lines[0];
+    }
+    catch {
+        // `where`/`which` failed; fall through to the safe default below.
+    }
+    // As a last resort, use this process's node. On POSIX this is correct;
+    // on Windows it may be the Cursor bundle, but at that point the user
+    // likely has no system node at all and this is the best we can do.
+    return process.execPath;
+}
+/**
+ * Resolve the absolute path to the *published* context-gatekeeper's
+ * `dist/mcp/server.js`. We rely on `npm root -g` because the recommended
+ * install path for end users is `npm i -g context-gatekeeper`, which
+ * puts a real directory under the global modules root.
+ *
+ * Returns `null` when no global install exists (e.g. the user has only
+ * run the package from source). Callers fall back to `npx` in that case.
+ */
+function resolveGlobalServerBin() {
+    try {
+        const root = childProcess.execSync('npm root -g', { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim();
+        const pkgRoot = resolvePath(root, PUBLISHED_PACKAGE);
+        const pkgJsonPath = join(pkgRoot, 'package.json');
+        if (!existsSync(pkgJsonPath))
+            return null;
+        const pkg = JSON.parse(readFileSync(pkgJsonPath, 'utf8'));
+        if (pkg.name !== PUBLISHED_PACKAGE)
+            return null;
+        const relBin = pkg.bin?.[PUBLISHED_PACKAGE];
+        if (!relBin)
+            return null;
+        return resolvePath(pkgRoot, relBin);
+    }
+    catch (err) {
+        console.error('[config-gen] resolveGlobalServerBin failed:', err.message);
+        return null;
+    }
+}
+/**
+ * Build the launch command the user's agent will run to start the MCP
+ * server. The form is platform-aware and depends on whether the package
+ * has been globally installed:
+ *
+ *  - Global install present (any platform):
+ *      command = <absolute path to system node>
+ *      args    = [<absolute path to dist/mcp/server.js>]
+ *    This avoids the `npx` dance entirely, sidesteps the Windows
+ *    npx-cli.js relative-path bug, and does not require network access.
+ *
+ *  - No global install (e.g. running from source only):
+ *      POSIX: `npx -y context-gatekeeper`
+ *      Windows: `cmd /c npx -y context-gatekeeper`
+ *    This is a fallback that only works once the package is published
+ *    to a registry the host can reach.
+ */
+export function buildMcpBin() {
+    const globalBin = resolveGlobalServerBin();
+    if (globalBin) {
+        return { command: resolveSystemNode(), args: [globalBin] };
+    }
+    if (process.platform === 'win32') {
+        return { command: 'cmd', args: ['/c', 'npx', '-y', PUBLISHED_PACKAGE] };
+    }
+    return { command: 'npx', args: ['-y', PUBLISHED_PACKAGE] };
+}
+export const PUBLISHED_PACKAGE = 'context-gatekeeper';
+/**
+ * The launch command the user's agent will run to start the MCP server.
+ * Computed at import time via {@link buildMcpBin}. Kept as a constant
+ * for backward compatibility with code that still imports it; new code
+ * should call `buildMcpBin()` directly.
+ */
+export const PUBLISHED_MCP_BIN = buildMcpBin();
+/** Map agent name to the adapter class whose `buildMcpConfig` we want. */
+function pickAdapter(agent) {
+    switch (agent) {
+        case 'cursor':
+            return CursorAdapter.buildMcpConfig.bind(CursorAdapter);
+        case 'claude-desktop':
+            return ClaudeDesktopAdapter.buildMcpConfig.bind(ClaudeDesktopAdapter);
+        case 'cline':
+            return ClineAdapter.buildMcpConfig.bind(ClineAdapter);
+        case 'continue':
+            return ContinueAdapter.buildMcpConfig.bind(ContinueAdapter);
+        case 'claude-code':
+            return ClaudeCodeAdapter.buildMcpConfig.bind(ClaudeCodeAdapter);
+    }
+}
+/**
+ * Build the config block for a given agent. The result is a partial config
+ * object (e.g. `{ mcpServers: { 'context-gatekeeper': {...} } }`) that will
+ * be merged into the existing file.
+ */
+export function buildConfigBlock(agent) {
+    return pickAdapter(agent)(PUBLISHED_MCP_BIN);
+}
+/**
+ * The key the agent stores our server under. Used by install/uninstall
+ * to find and remove the entry. The value is the same regardless of
+ * agent because we always register under the canonical
+ * `context-gatekeeper` name.
+ *
+ * - Cursor / Claude Desktop / Cline / Claude Code: top-level key under
+ *   `mcpServers`.
+ * - Continue: entry inside `experimental.modelContextProtocolServers`,
+ *   identified by the entry's `name` field (not a key).
+ */
+export const GATEKEEPER_KEY = 'context-gatekeeper';
+//# sourceMappingURL=config-gen.js.map

package/dist/scripts/cli/config-gen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-gen.js","sourceRoot":"","sources":["config-gen.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D;;;;;GAKG;AACH,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3C,MAAM,YAAY,GAAG,GAAG,CAAC,oBAAoB,CAAwC,CAAC;AAEtF;;;;;;;;;;;;GAYG;AACH,SAAS,iBAAiB;IACxB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzG,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtE,0DAA0D;QAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;IACD,uEAAuE;IACvE,qEAAqE;IACrE,mEAAmE;IACnE,OAAO,OAAO,CAAC,QAAQ,CAAC;AAC1B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpH,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAGvD,CAAC;QACF,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,CAAC,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAwC,WAAW,EAAE,CAAC;AAEpF,0EAA0E;AAC1E,SAAS,WAAW,CAAC,KAAgB;IACnC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1D,KAAK,gBAAgB;YACnB,OAAO,oBAAoB,CAAC,cAAc,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxE,KAAK,OAAO;YACV,OAAO,YAAY,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACxD,KAAK,UAAU;YACb,OAAO,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9D,KAAK,aAAa;YAChB,OAAO,iBAAiB,CAAC,cAAc,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAgB;IAC/C,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,oBAAoB,CAAC"}

package/dist/scripts/cli/config-gen.ts

@@ -0,0 +1,164 @@
+/**
+ * Build the MCP config block that will be merged into the user's agent
+ * config file. This is a thin wrapper that picks the right adapter for
+ * the target agent and forwards a fixed `mcpBin` pointing at the
+ * published npm package.
+ */
+
+import { existsSync, readFileSync } from 'node:fs';
+import { join, resolve as resolvePath } from 'node:path';
+import { createRequire } from 'node:module';
+
+import { AgentName } from './detect.ts';
+import { CursorAdapter } from '../agents/cursor.ts';
+import { ClaudeDesktopAdapter } from '../agents/claude-desktop.ts';
+import { ClineAdapter } from '../agents/cline.ts';
+import { ContinueAdapter } from '../agents/continue.ts';
+import { ClaudeCodeAdapter } from '../agents/claude-code.ts';
+import type { AgentConfig } from '../agents/base.ts';
+
+/**
+ * `createRequire` from `node:module` is the canonical way to use CJS
+ * `require()` from ESM sources. Direct `require('node:fs')` works in CJS
+ * but throws `require is not defined` when this file is loaded via
+ * tsx/Node's ESM loader (which is the path used by `scripts/cli.ts`).
+ */
+const cjs = createRequire(import.meta.url);
+const childProcess = cjs('node:child_process') as typeof import('node:child_process');
+
+/**
+ * Resolve an absolute, system-level `node` binary path. Cursor ships its
+ * own bundled node at `resources/helpers/node.exe`; we want to avoid
+ * baking that path into a user's `mcp.json`, because:
+ *   1. It pins the install to this specific Cursor install directory.
+ *   2. The bundled node lacks a few npm modules a published
+ *      context-gatekeeper may rely on (e.g. sql.js native bindings).
+ *
+ * Strategy: parse `where node` (Windows) or `which node` (POSIX) and
+ * take the first result that is NOT the Cursor bundle. Fall back to
+ * `process.execPath` only if both lookups fail — for non-Windows or
+ * when no `where`/`which` is available (rare).
+ */
+function resolveSystemNode(): string {
+  const isWin = process.platform === 'win32';
+  const cmd = isWin ? 'where node' : 'which node';
+  try {
+    const out = childProcess.execSync(cmd, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim();
+    const lines = out.split(/\r?\n/).map((l) => l.trim()).filter(Boolean);
+    // Reject anything that lives under Cursor's installation.
+    const nonCursor = lines.find((p) => !/cursor/i.test(p) && !/helpers\/node(\.exe)?$/i.test(p));
+    if (nonCursor) return nonCursor;
+    if (lines.length > 0) return lines[0];
+  } catch {
+    // `where`/`which` failed; fall through to the safe default below.
+  }
+  // As a last resort, use this process's node. On POSIX this is correct;
+  // on Windows it may be the Cursor bundle, but at that point the user
+  // likely has no system node at all and this is the best we can do.
+  return process.execPath;
+}
+
+/**
+ * Resolve the absolute path to the *published* context-gatekeeper's
+ * `dist/mcp/server.js`. We rely on `npm root -g` because the recommended
+ * install path for end users is `npm i -g context-gatekeeper`, which
+ * puts a real directory under the global modules root.
+ *
+ * Returns `null` when no global install exists (e.g. the user has only
+ * run the package from source). Callers fall back to `npx` in that case.
+ */
+function resolveGlobalServerBin(): string | null {
+  try {
+    const root = childProcess.execSync('npm root -g', { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim();
+    const pkgRoot = resolvePath(root, PUBLISHED_PACKAGE);
+    const pkgJsonPath = join(pkgRoot, 'package.json');
+    if (!existsSync(pkgJsonPath)) return null;
+    const pkg = JSON.parse(readFileSync(pkgJsonPath, 'utf8')) as {
+      name?: string;
+      bin?: Record<string, string>;
+    };
+    if (pkg.name !== PUBLISHED_PACKAGE) return null;
+    const relBin = pkg.bin?.[PUBLISHED_PACKAGE];
+    if (!relBin) return null;
+    return resolvePath(pkgRoot, relBin);
+  } catch (err) {
+    console.error('[config-gen] resolveGlobalServerBin failed:', (err as Error).message);
+    return null;
+  }
+}
+
+/**
+ * Build the launch command the user's agent will run to start the MCP
+ * server. The form is platform-aware and depends on whether the package
+ * has been globally installed:
+ *
+ *  - Global install present (any platform):
+ *      command = <absolute path to system node>
+ *      args    = [<absolute path to dist/mcp/server.js>]
+ *    This avoids the `npx` dance entirely, sidesteps the Windows
+ *    npx-cli.js relative-path bug, and does not require network access.
+ *
+ *  - No global install (e.g. running from source only):
+ *      POSIX: `npx -y context-gatekeeper`
+ *      Windows: `cmd /c npx -y context-gatekeeper`
+ *    This is a fallback that only works once the package is published
+ *    to a registry the host can reach.
+ */
+export function buildMcpBin(): { command: string; args: string[] } {
+  const globalBin = resolveGlobalServerBin();
+  if (globalBin) {
+    return { command: resolveSystemNode(), args: [globalBin] };
+  }
+  if (process.platform === 'win32') {
+    return { command: 'cmd', args: ['/c', 'npx', '-y', PUBLISHED_PACKAGE] };
+  }
+  return { command: 'npx', args: ['-y', PUBLISHED_PACKAGE] };
+}
+
+export const PUBLISHED_PACKAGE = 'context-gatekeeper';
+
+/**
+ * The launch command the user's agent will run to start the MCP server.
+ * Computed at import time via {@link buildMcpBin}. Kept as a constant
+ * for backward compatibility with code that still imports it; new code
+ * should call `buildMcpBin()` directly.
+ */
+export const PUBLISHED_MCP_BIN: { command: string; args: string[] } = buildMcpBin();
+
+/** Map agent name to the adapter class whose `buildMcpConfig` we want. */
+function pickAdapter(agent: AgentName): (mcpBin: { command: string; args: string[] }) => AgentConfig['mcpConfig'] {
+  switch (agent) {
+    case 'cursor':
+      return CursorAdapter.buildMcpConfig.bind(CursorAdapter);
+    case 'claude-desktop':
+      return ClaudeDesktopAdapter.buildMcpConfig.bind(ClaudeDesktopAdapter);
+    case 'cline':
+      return ClineAdapter.buildMcpConfig.bind(ClineAdapter);
+    case 'continue':
+      return ContinueAdapter.buildMcpConfig.bind(ContinueAdapter);
+    case 'claude-code':
+      return ClaudeCodeAdapter.buildMcpConfig.bind(ClaudeCodeAdapter);
+  }
+}
+
+/**
+ * Build the config block for a given agent. The result is a partial config
+ * object (e.g. `{ mcpServers: { 'context-gatekeeper': {...} } }`) that will
+ * be merged into the existing file.
+ */
+export function buildConfigBlock(agent: AgentName): AgentConfig['mcpConfig'] {
+  return pickAdapter(agent)(PUBLISHED_MCP_BIN);
+}
+
+/**
+ * The key the agent stores our server under. Used by install/uninstall
+ * to find and remove the entry. The value is the same regardless of
+ * agent because we always register under the canonical
+ * `context-gatekeeper` name.
+ *
+ * - Cursor / Claude Desktop / Cline / Claude Code: top-level key under
+ *   `mcpServers`.
+ * - Continue: entry inside `experimental.modelContextProtocolServers`,
+ *   identified by the entry's `name` field (not a key).
+ */
+export const GATEKEEPER_KEY = 'context-gatekeeper';

package/dist/scripts/cli/detect.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Agent config-file path detection.
+ *
+ * Each supported MCP agent has its own global config path (and most also
+ * support a project-local override). This module maps agent names to the
+ * absolute path of the config file the agent will actually read, taking
+ * the current platform into account.
+ */
+export type AgentName = 'cursor' | 'claude-desktop' | 'cline' | 'continue' | 'claude-code';
+export type Scope = 'global' | 'project';
+export interface AgentDetection {
+    agent: AgentName;
+    scope: Scope;
+    configPath: string;
+    exists: boolean;
+    /** True if the config file already references context-gatekeeper. */
+    installed: boolean;
+}
+export declare const SUPPORTED_AGENTS: AgentName[];
+export declare function isValidAgent(name: string): name is AgentName;
+/**
+ * Detect where the agent's config file lives. Prefers project-level when
+ * `scope === 'project'`, otherwise global. If `scope` is omitted, returns
+ * the path that exists (or would be written), preferring project-level.
+ */
+export declare function detectAgent(agent: AgentName, options?: {
+    scope?: Scope;
+    cwd?: string;
+}): AgentDetection;
+/**
+ * Probe all supported agents for their detection state.
+ */
+export declare function detectAll(options?: {
+    scope?: Scope;
+    cwd?: string;
+}): AgentDetection[];
+/**
+ * Filter a list of detections to those whose config file currently exists.
+ * Used by `--all` to skip agents that are not installed on this machine.
+ */
+export declare function filterDetected(detections: AgentDetection[]): AgentDetection[];
+//# sourceMappingURL=detect.d.ts.map

package/dist/scripts/cli/detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["detect.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,gBAAgB,GAAG,OAAO,GAAG,UAAU,GAAG,aAAa,CAAC;AAE3F,MAAM,MAAM,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEzC,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,qEAAqE;IACrE,SAAS,EAAE,OAAO,CAAC;CACpB;AA0DD,eAAO,MAAM,gBAAgB,EAAE,SAAS,EAMvC,CAAC;AAEF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,SAAS,CAE5D;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,SAAS,EAChB,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAC5C,cAAc,CAahB;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,KAAK,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,cAAc,EAAE,CAEzF;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,CAE7E"}