hermes-action-bridge 0.4.0 → 0.5.0

package/dist/execution-gate.js

@@ -0,0 +1,20 @@
+import { positiveInteger } from "./validation.js";
+/** Reject excess direct MCP work immediately; asynchronous jobs use their own bounded queue. */
+export function createExecutionGate(maxConcurrent = 4) {
+    const limit = positiveInteger(maxConcurrent, 4, "maxConcurrent");
+    let active = 0;
+    return {
+        async run(operation) {
+            if (active >= limit)
+                throw new Error(`Hermes direct execution limit reached (${limit})`);
+            active += 1;
+            try {
+                return await operation();
+            }
+            finally {
+                active -= 1;
+            }
+        },
+    };
+}
+//# sourceMappingURL=execution-gate.js.map

package/dist/execution-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-gate.js","sourceRoot":"","sources":["../src/execution-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAMlD,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CAAC,gBAAwB,CAAC;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,aAAa,EAAE,CAAC,EAAE,eAAe,CAAC,CAAC;IACjE,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO;QACL,KAAK,CAAC,GAAG,CAAI,SAA2B;YACtC,IAAI,MAAM,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,GAAG,CAAC,CAAC;YACzF,MAAM,IAAI,CAAC,CAAC;YACZ,IAAI,CAAC;gBACH,OAAO,MAAM,SAAS,EAAE,CAAC;YAC3B,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,CAAC,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/http-server.d.ts

@@ -0,0 +1,18 @@
+import type { BridgeConfig } from "./types.js";
+export interface BridgeHttpOptions {
+    config: BridgeConfig;
+    listen: string;
+    port: number;
+    allowTailnet: boolean;
+    tokenEnv?: string | undefined;
+    maxBodyBytes?: number | undefined;
+    maxSessions?: number | undefined;
+    sessionTtlMs?: number | undefined;
+}
+export interface BridgeHttpHandle {
+    host: string;
+    port: number;
+    close(): Promise<void>;
+}
+export declare function startBridgeHttpServer(options: BridgeHttpOptions): Promise<BridgeHttpHandle>;
+export declare function isTailscaleIpv4(address: string | undefined): boolean;

package/dist/http-server.js

@@ -0,0 +1,310 @@
+import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
+import { createServer } from "node:http";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
+import { createBridgeMcpServer, createBridgeRuntime } from "./mcp-server.js";
+import { positiveInteger } from "./validation.js";
+const defaultMaxBodyBytes = 1024 * 1024;
+const defaultMaxSessions = 64;
+const defaultSessionTtlMs = 30 * 60 * 1000;
+const tokenNamePattern = /^[A-Za-z_][A-Za-z0-9_]*$/;
+export async function startBridgeHttpServer(options) {
+    validateNetworkOptions(options);
+    const token = readBearerToken(options.tokenEnv);
+    const tailnetMode = !isLoopback(options.listen);
+    if (tailnetMode && !token)
+        throw new Error("A bearer token is required for direct tailnet listening.");
+    const principalId = token ? `token:${createHash("sha256").update(token).digest("hex").slice(0, 16)}` : "loopback";
+    const maxBodyBytes = positiveInteger(options.maxBodyBytes, defaultMaxBodyBytes, "maxBodyBytes");
+    const maxSessions = positiveInteger(options.maxSessions, defaultMaxSessions, "maxSessions");
+    const sessionTtlMs = positiveInteger(options.sessionTtlMs, defaultSessionTtlMs, "sessionTtlMs");
+    const sessions = new Map();
+    const runtime = createBridgeRuntime(options.config);
+    const context = {
+        options,
+        token,
+        tailnetMode,
+        principalId,
+        maxBodyBytes,
+        maxSessions,
+        sessionTtlMs,
+        sessions,
+        pendingInitializations: 0,
+        runtime,
+    };
+    const server = createServer((request, response) => void handleRequest(request, response, context));
+    const sessionCleanupTimer = setInterval(() => expireSessions(context), Math.min(sessionTtlMs, 60_000));
+    sessionCleanupTimer.unref();
+    await listen(server, options.listen, options.port);
+    const address = server.address();
+    if (!address || typeof address === "string")
+        throw new Error("Could not determine the HTTP listener address.");
+    return {
+        host: options.listen,
+        port: address.port,
+        close: async () => {
+            clearInterval(sessionCleanupTimer);
+            try {
+                await Promise.allSettled([...sessions.values()].map(closeSession));
+                sessions.clear();
+                await closeServer(server);
+            }
+            finally {
+                await runtime.dispose();
+            }
+        },
+    };
+}
+async function handleRequest(request, response, context) {
+    try {
+        if (request.url !== "/mcp")
+            return sendStatus(response, 404, "Not Found");
+        const host = requestHost(request);
+        if (!host || !validHost(host, context.options.listen))
+            return sendStatus(response, 421, "Misdirected Request");
+        if (context.tailnetMode && !isTailscaleIpv4(normalizeRemoteAddress(request.socket.remoteAddress))) {
+            return sendStatus(response, 403, "Forbidden");
+        }
+        if (isTailscaleServeHost(host) && !context.token) {
+            response.setHeader("WWW-Authenticate", "Bearer");
+            return sendStatus(response, 401, "Tailscale Serve forwarding requires bearer authentication");
+        }
+        if (context.token && !validBearer(request.headers.authorization, context.token)) {
+            response.setHeader("WWW-Authenticate", "Bearer");
+            return sendStatus(response, 401, "Unauthorized");
+        }
+        const sessionId = singleHeader(request.headers["mcp-session-id"]);
+        if (request.method === "POST") {
+            const body = await readJsonBody(request, context.maxBodyBytes);
+            if (sessionId) {
+                const session = context.sessions.get(sessionId);
+                if (!session)
+                    return sendMcpError(response, 404, "Unknown MCP session");
+                await handleSessionRequest(session, () => session.transport.handleRequest(request, response, body));
+                return;
+            }
+            if (!isInitializeRequest(body))
+                return sendMcpError(response, 400, "MCP initialization required");
+            expireSessions(context);
+            if (context.sessions.size + context.pendingInitializations >= context.maxSessions) {
+                return sendMcpError(response, 503, "MCP session limit reached");
+            }
+            context.pendingInitializations += 1;
+            try {
+                await initializeSession(request, response, body, context);
+            }
+            finally {
+                context.pendingInitializations -= 1;
+            }
+            return;
+        }
+        if (request.method === "GET" || request.method === "DELETE") {
+            if (!sessionId)
+                return sendMcpError(response, 400, "MCP session ID required");
+            const session = context.sessions.get(sessionId);
+            if (!session)
+                return sendMcpError(response, 404, "Unknown MCP session");
+            await handleSessionRequest(session, () => session.transport.handleRequest(request, response));
+            return;
+        }
+        response.setHeader("Allow", "GET, POST, DELETE");
+        sendStatus(response, 405, "Method Not Allowed");
+    }
+    catch (error) {
+        const status = error instanceof RequestError ? error.status : 500;
+        if (!response.headersSent)
+            sendMcpError(response, status, status === 500 ? "Internal server error" : errorMessage(error));
+        else
+            response.end();
+    }
+}
+async function initializeSession(request, response, body, context) {
+    const server = createBridgeMcpServer(context.options.config, {
+        transport: "http",
+        principalId: context.principalId,
+        runtime: context.runtime,
+    });
+    const transport = new StreamableHTTPServerTransport({
+        sessionIdGenerator: randomUUID,
+        onsessioninitialized: (sessionId) => {
+            context.sessions.set(sessionId, { transport, server, lastActivityAt: Date.now(), activeRequests: 1 });
+        },
+    });
+    transport.onclose = () => {
+        const sessionId = transport.sessionId;
+        if (sessionId)
+            context.sessions.delete(sessionId);
+    };
+    // SDK 1.x exposes `onclose` as an accessor returning `undefined`, which is
+    // structurally narrower than `Transport` under exactOptionalPropertyTypes.
+    await server.connect(transport);
+    try {
+        await transport.handleRequest(request, response, body);
+    }
+    finally {
+        const sessionId = transport.sessionId;
+        const session = sessionId ? context.sessions.get(sessionId) : undefined;
+        if (session) {
+            session.activeRequests = Math.max(0, session.activeRequests - 1);
+            session.lastActivityAt = Date.now();
+        }
+    }
+}
+function expireSessions(context) {
+    const cutoff = Date.now() - context.sessionTtlMs;
+    for (const [sessionId, session] of context.sessions) {
+        if (session.activeRequests > 0 || session.lastActivityAt > cutoff)
+            continue;
+        context.sessions.delete(sessionId);
+        void closeSession(session).catch(() => undefined);
+    }
+}
+async function handleSessionRequest(session, handle) {
+    session.activeRequests += 1;
+    session.lastActivityAt = Date.now();
+    try {
+        await handle();
+    }
+    finally {
+        session.activeRequests = Math.max(0, session.activeRequests - 1);
+        session.lastActivityAt = Date.now();
+    }
+}
+async function closeSession(session) {
+    try {
+        await session.transport.close();
+    }
+    finally {
+        await session.server.close();
+    }
+}
+function validateNetworkOptions(options) {
+    if (!Number.isInteger(options.port) || options.port < 0 || options.port > 65_535) {
+        throw new Error("port must be an integer between 0 and 65535");
+    }
+    if (isLoopback(options.listen))
+        return;
+    if (!options.allowTailnet)
+        throw new Error("Non-loopback listening requires --allow-tailnet.");
+    if (!isTailscaleIpv4(options.listen)) {
+        throw new Error("Direct remote listening is restricted to a Tailscale IPv4 address in 100.64.0.0/10.");
+    }
+    if (!options.tokenEnv)
+        throw new Error("Direct tailnet listening requires --token-env.");
+}
+function readBearerToken(name) {
+    if (!name)
+        return undefined;
+    if (!tokenNamePattern.test(name))
+        throw new Error(`Invalid token environment variable name: ${name}`);
+    const token = process.env[name];
+    if (!token)
+        throw new Error(`Bearer token environment variable is unset: ${name}`);
+    if (Buffer.byteLength(token, "utf8") < 32)
+        throw new Error("Bearer token must contain at least 32 bytes.");
+    return token;
+}
+function validBearer(header, expected) {
+    if (!header?.startsWith("Bearer "))
+        return false;
+    const supplied = Buffer.from(header.slice("Bearer ".length), "utf8");
+    const target = Buffer.from(expected, "utf8");
+    return supplied.length === target.length && timingSafeEqual(supplied, target);
+}
+function requestHost(request) {
+    const header = singleHeader(request.headers.host);
+    if (!header)
+        return undefined;
+    if (header.startsWith("[")) {
+        const closingBracket = header.indexOf("]");
+        return closingBracket > 1 ? header.slice(1, closingBracket) : undefined;
+    }
+    return header.split(":")[0] || undefined;
+}
+function validHost(host, listenAddress) {
+    if (isLoopback(listenAddress))
+        return host === "localhost" || isLoopback(host) || isTailscaleServeHost(host);
+    return host === listenAddress;
+}
+function isTailscaleServeHost(host) {
+    return /^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+ts\.net$/i.test(host);
+}
+function isLoopback(address) {
+    if (address === "localhost" || address === "::1")
+        return true;
+    const octets = parseIpv4(address);
+    return octets?.[0] === 127;
+}
+export function isTailscaleIpv4(address) {
+    const octets = address ? parseIpv4(address) : undefined;
+    if (!octets)
+        return false;
+    return octets[0] === 100 && octets[1] >= 64 && octets[1] <= 127;
+}
+function parseIpv4(address) {
+    const parts = address.split(".");
+    if (parts.length !== 4)
+        return undefined;
+    const octets = parts.map((part) => Number(part));
+    if (octets.some((part, index) => !Number.isInteger(part) || part < 0 || part > 255 || String(part) !== parts[index])) {
+        return undefined;
+    }
+    return octets;
+}
+function normalizeRemoteAddress(address) {
+    return address?.startsWith("::ffff:") ? address.slice("::ffff:".length) : address;
+}
+function singleHeader(value) {
+    return Array.isArray(value) ? value[0] : value;
+}
+async function readJsonBody(request, maxBytes) {
+    const chunks = [];
+    let bytes = 0;
+    for await (const chunk of request) {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        bytes += buffer.length;
+        if (bytes > maxBytes)
+            throw new RequestError(413, "Request body too large");
+        chunks.push(buffer);
+    }
+    try {
+        return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+    }
+    catch {
+        throw new RequestError(400, "Request body is not valid JSON");
+    }
+}
+function sendStatus(response, status, message) {
+    response.writeHead(status, { "content-type": "text/plain; charset=utf-8" });
+    response.end(message);
+}
+function sendMcpError(response, status, message) {
+    response.writeHead(status, { "content-type": "application/json" });
+    response.end(JSON.stringify({ jsonrpc: "2.0", error: { code: -32000, message }, id: null }));
+}
+function listen(server, host, port) {
+    return new Promise((resolve, reject) => {
+        const onError = (error) => reject(error);
+        server.once("error", onError);
+        server.listen(port, host, () => {
+            server.off("error", onError);
+            resolve();
+        });
+    });
+}
+function closeServer(server) {
+    return new Promise((resolve, reject) => {
+        server.close((error) => (error ? reject(error) : resolve()));
+    });
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+class RequestError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+    }
+}
+//# sourceMappingURL=http-server.js.map

package/dist/http-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.js","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,YAAY,EAAwE,MAAM,WAAW,CAAC;AAC/G,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAGzE,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE7E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AA0BpD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAA0B;IACpE,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,WAAW,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACvG,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;IAClH,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,YAAY,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC;IAChG,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;IAC5F,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,YAAY,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC;IAChG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,OAAO,GAAmB;QAC9B,OAAO;QACP,KAAK;QACL,WAAW;QACX,WAAW;QACX,YAAY;QACZ,WAAW;QACX,YAAY;QACZ,QAAQ;QACR,sBAAsB,EAAE,CAAC;QACzB,OAAO;KACR,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACnG,MAAM,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IACvG,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAE5B,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAE/G,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,MAAM;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,aAAa,CAAC,mBAAmB,CAAC,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;gBACnE,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;oBAAS,CAAC;gBACT,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAeD,KAAK,UAAU,aAAa,CAAC,OAAwB,EAAE,QAAwB,EAAE,OAAuB;IACtG,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM;YAAE,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;QAC/G,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,eAAe,CAAC,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YAClG,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACjD,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YACjD,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,2DAA2D,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChF,QAAQ,CAAC,SAAS,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YACjD,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;YAC/D,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAChD,IAAI,CAAC,OAAO;oBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;gBACxE,MAAM,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;gBACpG,OAAO;YACT,CAAC;YACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;gBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,6BAA6B,CAAC,CAAC;YAClG,cAAc,CAAC,OAAO,CAAC,CAAC;YACxB,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC,sBAAsB,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBAClF,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,CAAC,sBAAsB,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC5D,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,sBAAsB,IAAI,CAAC,CAAC;YACtC,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5D,IAAI,CAAC,SAAS;gBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;YAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO;gBAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;YACxE,MAAM,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC9F,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QACjD,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,WAAW;YAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;;YACrH,QAAQ,CAAC,GAAG,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,OAAwB,EACxB,QAAwB,EACxB,IAAa,EACb,OAAuB;IAEvB,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE;QAC3D,SAAS,EAAE,MAAM;QACjB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;QAClD,kBAAkB,EAAE,UAAU;QAC9B,oBAAoB,EAAE,CAAC,SAAS,EAAE,EAAE;YAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;QACxG,CAAC;KACF,CAAC,CAAC;IACH,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;QACvB,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;QACtC,IAAI,SAAS;YAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC,CAAC;IACF,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,MAAM,CAAC,OAAO,CAAC,SAAiC,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;YAAS,CAAC;QACT,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;QACtC,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;YACjE,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAAuB;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IACjD,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACpD,IAAI,OAAO,CAAC,cAAc,GAAG,CAAC,IAAI,OAAO,CAAC,cAAc,GAAG,MAAM;YAAE,SAAS;QAC5E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,OAAgB,EAAE,MAA2B;IAC/E,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,EAAE,CAAC;IACjB,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAgB;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA0B;IACxD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO;IACvC,IAAI,CAAC,OAAO,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC/F,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,eAAe,CAAC,IAAwB;IAC/C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;IACtG,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,EAAE,CAAC,CAAC;IACnF,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC3G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,MAA0B,EAAE,QAAgB;IAC/D,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,WAAW,CAAC,OAAwB;IAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,aAAqB;IACpD,IAAI,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,KAAK,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC7G,OAAO,IAAI,KAAK,aAAa,CAAC;AAChC,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,oEAAoE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAA2B;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;AAClE,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACrH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAA0C,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA2B;IACzD,OAAO,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACpF,CAAC;AAED,SAAS,YAAY,CAAC,KAAoC;IACxD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAwB,EAAE,QAAgB;IACpE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC;QACvB,IAAI,KAAK,GAAG,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAwB,EAAE,MAAc,EAAE,OAAe;IAC3E,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;IAC5E,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,QAAwB,EAAE,MAAc,EAAE,OAAe;IAC7E,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACnE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,MAAM,CAAC,MAAkB,EAAE,IAAY,EAAE,IAAY;IAC5D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,CAAC,KAAY,EAAQ,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,MAAkB;IACrC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,YAAa,SAAQ,KAAK;IAEnB;IADX,YACW,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;IAIzB,CAAC;CACF"}

package/dist/install/launcher.d.ts

@@ -0,0 +1,3 @@
+import type { McpLauncher } from "./mcp-service.js";
+/** Windows MCP clients need Node plus the CLI script; Unix can execute the shebang-enabled script directly. */
+export declare function bridgeMcpLauncher(scriptPath: string, platform?: NodeJS.Platform, nodePath?: string): McpLauncher;

package/dist/install/launcher.js

@@ -0,0 +1,7 @@
+/** Windows MCP clients need Node plus the CLI script; Unix can execute the shebang-enabled script directly. */
+export function bridgeMcpLauncher(scriptPath, platform = process.platform, nodePath = process.execPath) {
+    return platform === "win32"
+        ? { command: nodePath, args: [scriptPath, "mcp"] }
+        : { command: scriptPath, args: ["mcp"] };
+}
+//# sourceMappingURL=launcher.js.map

package/dist/install/launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../../src/install/launcher.ts"],"names":[],"mappings":"AAEA,+GAA+G;AAC/G,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,WAA4B,OAAO,CAAC,QAAQ,EAC5C,WAAmB,OAAO,CAAC,QAAQ;IAEnC,OAAO,QAAQ,KAAK,OAAO;QACzB,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE;QAClD,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7C,CAAC"}

package/dist/install/mcp-service.d.ts

@@ -0,0 +1,44 @@
+import type { FileChange, McpTarget, SkillAgent } from "./types.js";
+interface CommandError {
+    code?: string | undefined;
+    message: string;
+}
+export interface McpCommandResult {
+    status: number | null;
+    stdout: string;
+    stderr: string;
+    error?: CommandError | undefined;
+}
+/** Injectable process boundary: tests never invoke the real Codex or Claude binaries. */
+export type McpCommandRunner = (command: string, args: string[]) => McpCommandResult;
+export interface McpLauncher {
+    command: string;
+    args: string[];
+}
+export interface McpServiceOptions {
+    launcher: McpLauncher;
+    dryRun: boolean;
+    runner?: McpCommandRunner | undefined;
+}
+export interface McpTargetResult {
+    agent: SkillAgent;
+    ok: boolean;
+    dryRun: boolean;
+    change: FileChange;
+}
+export type McpRegistrationState = "absent" | "current" | "conflict" | "unavailable" | "error";
+export interface McpRegistration {
+    agent: SkillAgent;
+    state: McpRegistrationState;
+    detail?: string | undefined;
+}
+/**
+ * Register the stdio bridge via each agent's supported CLI instead of editing
+ * implementation-owned TOML/JSON. This preserves unrelated user servers.
+ */
+export declare function installMcp(target: McpTarget, options: McpServiceOptions): McpTargetResult[];
+/** Remove only the named bridge registration through the owning agent CLI. */
+export declare function uninstallMcp(target: McpTarget, options: McpServiceOptions): McpTargetResult[];
+/** Public inspection used by doctor and setup reporting. It never mutates agent configuration. */
+export declare function inspectMcp(agent: SkillAgent, launcher: McpLauncher, runner?: McpCommandRunner): McpRegistration;
+export {};

package/dist/install/mcp-service.js

@@ -0,0 +1,172 @@
+import { spawnSync } from "node:child_process";
+import { isAbsolute } from "node:path";
+import { versionProbeTimeoutMs } from "../status.js";
+const mcpServerName = "hermes-action";
+const allAgents = ["codex", "claude-code"];
+/**
+ * Register the stdio bridge via each agent's supported CLI instead of editing
+ * implementation-owned TOML/JSON. This preserves unrelated user servers.
+ */
+export function installMcp(target, options) {
+    const agents = agentsFor(target);
+    const runner = options.runner ?? systemRunner;
+    const planned = agents.map((agent) => planInstall(agent, options, runner));
+    if (options.dryRun || planned.some((entry) => !entry.ok))
+        return planned;
+    const applied = [];
+    for (const plan of planned) {
+        if (plan.change.action === "unchanged") {
+            applied.push(plan);
+            continue;
+        }
+        const installed = installOne(plan.agent, options);
+        applied.push(installed);
+        if (installed.ok)
+            continue;
+        const failure = installed.change.reason ?? "registration failed";
+        return [
+            ...rollbackCreated(applied, options, runner, failure),
+            ...planned.slice(applied.length).map((entry) => result(entry.agent, "refused", false, `registration not attempted because another agent failed: ${failure}`)),
+        ];
+    }
+    return applied;
+}
+/** Remove only the named bridge registration through the owning agent CLI. */
+export function uninstallMcp(target, options) {
+    return forAgents(target, (agent) => uninstallOne(agent, options));
+}
+/** Public inspection used by doctor and setup reporting. It never mutates agent configuration. */
+export function inspectMcp(agent, launcher, runner = systemRunner) {
+    if (!isAbsolute(launcher.command))
+        return { agent, state: "error", detail: "bridge launcher command must be absolute" };
+    const result = runner(agentCommand(agent), getArgs(agent));
+    if (result.error?.code === "ENOENT")
+        return { agent, state: "unavailable", detail: `${agentCommand(agent)} is not available on PATH` };
+    if (result.error)
+        return { agent, state: "error", detail: result.error.message };
+    const output = `${result.stdout}\n${result.stderr}`;
+    if (result.status !== 0) {
+        return isMissingServerOutput(output)
+            ? { agent, state: "absent" }
+            : { agent, state: "error", detail: commandFailure(agentCommand(agent), "inspect", result) };
+    }
+    const fields = registrationFields(output);
+    const expectedScope = agent !== "claude-code" || fields.get("scope")?.startsWith("User") === true;
+    const expectedHealth = agent !== "claude-code" || /\bConnected$/i.test(fields.get("status") ?? "");
+    const expectedTransport = (fields.get(agent === "claude-code" ? "type" : "transport") ?? "").toLowerCase() === "stdio";
+    const expectedCommand = fields.get("command") === launcher.command;
+    const expectedArgs = fields.get("args") === launcher.args.join(" ");
+    return expectedScope && expectedHealth && expectedTransport && expectedCommand && expectedArgs
+        ? { agent, state: "current" }
+        : { agent, state: "conflict", detail: `existing ${mcpServerName} registration differs from the requested user-level bridge command` };
+}
+function installOne(agent, options) {
+    const runner = options.runner ?? systemRunner;
+    const planned = planInstall(agent, options, runner);
+    if (planned.change.action !== "created" || options.dryRun)
+        return planned;
+    const command = agentCommand(agent);
+    const added = runner(command, addArgs(agent, options.launcher));
+    if (added.error)
+        return result(agent, "refused", false, added.error.message);
+    if (added.status !== 0)
+        return result(agent, "refused", false, commandFailure(command, "register", added));
+    const verified = inspectMcp(agent, options.launcher, runner);
+    if (verified.state !== "current") {
+        const removed = runner(command, removeArgs(agent));
+        const verificationFailure = verified.detail ?? "registration could not be verified";
+        if (removed.error)
+            return result(agent, "refused", false, `${verificationFailure}; rollback failed: ${removed.error.message}`);
+        if (removed.status !== 0) {
+            return result(agent, "refused", false, `${verificationFailure}; ${commandFailure(command, "roll back", removed)}`);
+        }
+        return result(agent, "refused", false, `${verificationFailure}; newly added registration was rolled back`);
+    }
+    return result(agent, "created", false);
+}
+function planInstall(agent, options, runner) {
+    const registration = inspectMcp(agent, options.launcher, runner);
+    if (registration.state === "current")
+        return result(agent, "unchanged", options.dryRun);
+    if (registration.state === "absent")
+        return result(agent, "created", options.dryRun);
+    return result(agent, "refused", options.dryRun, registration.detail ?? `could not inspect ${mcpServerName}`);
+}
+function rollbackCreated(applied, options, runner, failure) {
+    const rollbackOptions = { ...options, dryRun: false, runner };
+    return applied.map((entry) => {
+        if (!entry.ok || entry.change.action !== "created")
+            return entry;
+        const rolledBack = uninstallOne(entry.agent, rollbackOptions);
+        const reason = rolledBack.ok
+            ? `registration rolled back because another agent failed: ${failure}`
+            : `registration rollback failed after another agent failed: ${rolledBack.change.reason ?? failure}`;
+        return result(entry.agent, "refused", false, reason);
+    });
+}
+function uninstallOne(agent, options) {
+    const runner = options.runner ?? systemRunner;
+    const registration = inspectMcp(agent, options.launcher, runner);
+    if (registration.state === "absent")
+        return result(agent, "unchanged", options.dryRun);
+    if (registration.state !== "current")
+        return result(agent, "refused", options.dryRun, registration.detail ?? `could not inspect ${mcpServerName}`);
+    if (options.dryRun)
+        return result(agent, "removed", true);
+    const command = agentCommand(agent);
+    const removed = runner(command, removeArgs(agent));
+    if (removed.error)
+        return result(agent, "refused", false, removed.error.message);
+    if (removed.status !== 0)
+        return result(agent, "refused", false, commandFailure(command, "remove", removed));
+    const verified = inspectMcp(agent, options.launcher, runner);
+    if (verified.state !== "absent")
+        return result(agent, "refused", false, verified.detail ?? "removal could not be verified");
+    return result(agent, "removed", false);
+}
+function forAgents(target, operation) {
+    return agentsFor(target).map(operation);
+}
+function agentsFor(target) {
+    return target === "all" ? allAgents : [target];
+}
+function result(agent, action, dryRun, reason) {
+    return { agent, ok: action !== "refused", dryRun, change: { path: `${agent} MCP registration (${mcpServerName})`, action, ...(reason ? { reason } : {}) } };
+}
+function agentCommand(agent) {
+    return agent === "codex" ? "codex" : "claude";
+}
+function getArgs(_agent) {
+    return ["mcp", "get", mcpServerName];
+}
+function addArgs(agent, launcher) {
+    return agent === "codex"
+        ? ["mcp", "add", mcpServerName, "--", launcher.command, ...launcher.args]
+        : ["mcp", "add", "--scope", "user", "--transport", "stdio", mcpServerName, "--", launcher.command, ...launcher.args];
+}
+function removeArgs(agent) {
+    return agent === "codex" ? ["mcp", "remove", mcpServerName] : ["mcp", "remove", "--scope", "user", mcpServerName];
+}
+function commandFailure(command, action, result) {
+    const output = `${result.stderr}\n${result.stdout}`.trim();
+    return output === "" ? `${command} failed to ${action} ${mcpServerName}` : `${command} failed to ${action} ${mcpServerName}: ${output}`;
+}
+function registrationFields(output) {
+    const fields = new Map();
+    for (const line of output.split(/\r?\n/)) {
+        const match = line.match(/^\s*([A-Za-z]+):\s*(.*?)\s*$/);
+        if (match?.[1] && match[2] !== undefined)
+            fields.set(match[1].toLowerCase(), match[2]);
+    }
+    return fields;
+}
+function isMissingServerOutput(output) {
+    return /(?:^|\n)(?:Error:\s*)?No MCP server named ['"]hermes-action['"](?: found)?\./i.test(output)
+        || /(?:^|\n)(?:Error:\s*)?MCP server ['"]hermes-action['"] not found\b/i.test(output);
+}
+function systemRunner(command, args) {
+    const process = spawnSync(command, args, { encoding: "utf8", timeout: versionProbeTimeoutMs });
+    const error = process.error ? { code: process.error.code, message: process.error.message } : undefined;
+    return { status: process.status, stdout: process.stdout ?? "", stderr: process.stderr ?? "", ...(error ? { error } : {}) };
+}
+//# sourceMappingURL=mcp-service.js.map

package/dist/install/mcp-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-service.js","sourceRoot":"","sources":["../../src/install/mcp-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAGrD,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,SAAS,GAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;AA2CzD;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,MAAiB,EAAE,OAA0B;IACtE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,OAAO,OAAO,CAAC;IAEzE,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,IAAI,SAAS,CAAC,EAAE;YAAE,SAAS;QAC3B,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,IAAI,qBAAqB,CAAC;QACjE,OAAO;YACL,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;YACrD,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7C,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,4DAA4D,OAAO,EAAE,CAAC,CAC7G;SACF,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,YAAY,CAAC,MAAiB,EAAE,OAA0B;IACxE,OAAO,SAAS,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,UAAU,CAAC,KAAiB,EAAE,QAAqB,EAAE,SAA2B,YAAY;IAC1G,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IACxH,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,KAAK,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,2BAA2B,EAAE,CAAC;IACvI,IAAI,MAAM,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IACjF,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;IACpD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,qBAAqB,CAAC,MAAM,CAAC;YAClC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE;YAC5B,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;IAChG,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,KAAK,KAAK,aAAa,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAClG,MAAM,cAAc,GAAG,KAAK,KAAK,aAAa,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACnG,MAAM,iBAAiB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;IACvH,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC;IACnE,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpE,OAAO,aAAa,IAAI,cAAc,IAAI,iBAAiB,IAAI,eAAe,IAAI,YAAY;QAC5F,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE;QAC7B,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,aAAa,oEAAoE,EAAE,CAAC;AAC1I,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB,EAAE,OAA0B;IAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC;IAC9C,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAE1E,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3G,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,MAAM,mBAAmB,GAAG,QAAQ,CAAC,MAAM,IAAI,oCAAoC,CAAC;QACpF,IAAI,OAAO,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,mBAAmB,sBAAsB,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/H,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,mBAAmB,KAAK,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QACrH,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,mBAAmB,4CAA4C,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB,EAAE,OAA0B,EAAE,MAAwB;IAC1F,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,YAAY,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxF,IAAI,YAAY,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,IAAI,qBAAqB,aAAa,EAAE,CAAC,CAAC;AAC/G,CAAC;AAED,SAAS,eAAe,CACtB,OAA0B,EAC1B,OAA0B,EAC1B,MAAwB,EACxB,OAAe;IAEf,MAAM,eAAe,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC9D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3B,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACjE,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE;YAC1B,CAAC,CAAC,0DAA0D,OAAO,EAAE;YACrE,CAAC,CAAC,4DAA4D,UAAU,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC;QACtG,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB,EAAE,OAA0B;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC;IAC9C,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,YAAY,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACvF,IAAI,YAAY,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,IAAI,qBAAqB,aAAa,EAAE,CAAC,CAAC;IACnJ,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7G,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,IAAI,+BAA+B,CAAC,CAAC;IAC5H,OAAO,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,SAAS,CAAC,MAAiB,EAAE,SAAiD;IACrF,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,MAAiB;IAClC,OAAO,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,MAAM,CAAC,KAAiB,EAAE,MAA4B,EAAE,MAAe,EAAE,MAAe;IAC/F,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,KAAK,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,sBAAsB,aAAa,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;AAC9J,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB;IACrC,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAChD,CAAC;AAED,SAAS,OAAO,CAAC,MAAkB;IACjC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,OAAO,CAAC,KAAiB,EAAE,QAAqB;IACvD,OAAO,KAAK,KAAK,OAAO;QACtB,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;QACzE,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;AACzH,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;AACpH,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,MAAc,EAAE,MAAwB;IAC/E,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAC3D,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,cAAc,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,cAAc,MAAM,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;AAC1I,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACzD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc;IAC3C,OAAO,+EAA+E,CAAC,IAAI,CAAC,MAAM,CAAC;WAC9F,qEAAqE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,IAAc;IACnD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAG,OAAO,CAAC,KAA+B,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAClI,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7H,CAAC"}