mcp-use-compat 0.3.0

package/dist/oauth.js

@@ -0,0 +1,287 @@
+import { spawn } from "node:child_process";
+import { randomBytes } from "node:crypto";
+import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { createServer } from "node:http";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { auth } from "@modelcontextprotocol/sdk/client/auth.js";
+import { TOOL_NAME, VERSION } from "./version.js";
+/** Credentials per MCP server URL in ~/.config/mcp-use-compat/oauth.json (mode 0600). */
+export class CredentialStore {
+    path;
+    constructor(path = defaultStorePath()) {
+        this.path = path;
+    }
+    all() {
+        if (!existsSync(this.path))
+            return {};
+        try {
+            return JSON.parse(readFileSync(this.path, "utf8"));
+        }
+        catch {
+            return {};
+        }
+    }
+    get(url) {
+        return this.all()[url] ?? {};
+    }
+    update(url, change) {
+        const data = this.all();
+        const next = change(data[url] ?? {});
+        if (next)
+            data[url] = next;
+        else
+            delete data[url];
+        mkdirSync(dirname(this.path), { recursive: true, mode: 0o700 });
+        writeFileSync(this.path, JSON.stringify(data, null, 2) + "\n", { mode: 0o600 });
+        chmodSync(this.path, 0o600);
+    }
+}
+export function defaultStorePath() {
+    const base = process.env.XDG_CONFIG_HOME || join(homedir(), ".config");
+    return join(base, TOOL_NAME, "oauth.json");
+}
+/** SDK OAuthClientProvider backed by the credential store. */
+export class StoredOAuthProvider {
+    serverUrl;
+    store;
+    options;
+    clientMetadataUrl;
+    stateValue = randomBytes(16).toString("hex");
+    constructor(serverUrl, store, options = {}) {
+        this.serverUrl = serverUrl;
+        this.store = store;
+        this.options = options;
+        this.clientMetadataUrl = options.clientMetadataUrl;
+    }
+    /**
+     * Non-interactive providers (no onRedirect) still report a redirect URL so the SDK
+     * takes the authorization-code path and reaches redirectToAuthorization, which
+     * explains how to log in, instead of attempting a client-credentials grant.
+     */
+    get redirectUrl() {
+        return this.options.redirectUrl ?? (this.options.onRedirect ? undefined : "http://127.0.0.1/not-logged-in");
+    }
+    get clientMetadata() {
+        return {
+            client_name: TOOL_NAME,
+            software_id: TOOL_NAME,
+            software_version: VERSION,
+            redirect_uris: this.options.redirectUrl ? [this.options.redirectUrl] : [],
+            grant_types: ["authorization_code", "refresh_token"],
+            response_types: ["code"],
+            token_endpoint_auth_method: this.options.clientSecret ? "client_secret_post" : "none",
+            ...(this.options.scope ? { scope: this.options.scope } : {}),
+            // Required by protocol 2026-07-28 for DCR; ignored by older servers. Not in the SDK's type yet.
+            ...{ application_type: "native" },
+        };
+    }
+    state() {
+        return this.stateValue;
+    }
+    clientInformation() {
+        if (this.options.clientId) {
+            return { client_id: this.options.clientId, ...(this.options.clientSecret ? { client_secret: this.options.clientSecret } : {}) };
+        }
+        const info = this.store.get(this.serverUrl).clientInformation;
+        if (info)
+            return info;
+        // Never register a new client from a non-interactive run.
+        if (!this.options.onRedirect)
+            throw this.notLoggedIn();
+        return undefined;
+    }
+    notLoggedIn() {
+        return new Error(`Not logged in to ${this.serverUrl} (or the session can't be refreshed). Run: ${TOOL_NAME} oauth login --url ${this.serverUrl}`);
+    }
+    saveClientInformation(info) {
+        const registration = info.client_id === this.clientMetadataUrl ? "cimd" : "dcr";
+        this.store.update(this.serverUrl, (c) => ({ ...c, clientInformation: info, registration }));
+    }
+    tokens() {
+        return this.store.get(this.serverUrl).tokens;
+    }
+    saveTokens(tokens) {
+        const registration = this.options.clientId
+            ? "preregistered"
+            : this.store.get(this.serverUrl).registration ?? (this.clientMetadataUrl ? "cimd" : undefined);
+        this.store.update(this.serverUrl, (c) => ({ ...c, tokens, tokensSavedAt: Date.now(), registration }));
+    }
+    async redirectToAuthorization(url) {
+        if (!this.options.onRedirect)
+            throw this.notLoggedIn();
+        await this.options.onRedirect(url);
+    }
+    saveCodeVerifier(codeVerifier) {
+        this.store.update(this.serverUrl, (c) => ({ ...c, codeVerifier }));
+    }
+    codeVerifier() {
+        const verifier = this.store.get(this.serverUrl).codeVerifier;
+        if (!verifier)
+            throw new Error("No PKCE code verifier saved; restart the login.");
+        return verifier;
+    }
+    saveDiscoveryState(state) {
+        this.store.update(this.serverUrl, (c) => ({ ...c, discoveryState: state }));
+    }
+    discoveryState() {
+        return this.store.get(this.serverUrl).discoveryState;
+    }
+    invalidateCredentials(scope) {
+        this.store.update(this.serverUrl, (c) => {
+            if (scope === "all")
+                return undefined;
+            const next = { ...c };
+            if (scope === "client")
+                delete next.clientInformation;
+            if (scope === "tokens")
+                delete next.tokens;
+            if (scope === "verifier")
+                delete next.codeVerifier;
+            if (scope === "discovery")
+                delete next.discoveryState;
+            return next;
+        });
+    }
+}
+/** Runs the full browser login and records each step. Throws only on programmer errors. */
+export async function oauthLogin(options) {
+    const store = options.store ?? new CredentialStore();
+    const steps = [];
+    const record = (step, ok, detail) => {
+        steps.push({ step, ok, detail });
+        options.log(`${ok ? "✔" : "✖"} ${step}: ${detail}`);
+        return ok;
+    };
+    // Start fresh: a DCR client registered earlier is tied to an old redirect port.
+    store.update(options.url, () => undefined);
+    const callback = await startCallbackServer(options.callbackPort);
+    const redirectUrl = `http://127.0.0.1:${callback.port}/callback`;
+    let authorizationUrl;
+    const provider = new StoredOAuthProvider(options.url, store, {
+        redirectUrl,
+        clientId: options.clientId,
+        clientSecret: options.clientSecret,
+        clientMetadataUrl: options.clientMetadataUrl,
+        scope: options.scope,
+        onRedirect: (url) => {
+            authorizationUrl = url;
+        },
+    });
+    try {
+        let first;
+        try {
+            first = await auth(provider, { serverUrl: options.url, scope: options.scope });
+        }
+        catch (err) {
+            record("Discovery and client registration", false, err.message);
+            return steps;
+        }
+        const discovery = provider.discoveryState();
+        record("Discovery", true, `authorization server ${discovery?.authorizationServerUrl ?? "(unknown)"}${discovery?.resourceMetadata ? ", protected resource metadata found" : ", no protected resource metadata (fell back to the server origin)"}`);
+        const registration = options.clientId ? "preregistered" : store.get(options.url).registration ?? (options.clientMetadataUrl ? "cimd" : "dcr");
+        record("Client registration", true, { preregistered: "pre-registered client id", cimd: "Client ID Metadata Document", dcr: "Dynamic Client Registration" }[registration]);
+        if (first === "AUTHORIZED") {
+            record("Authorization", true, "already authorized");
+        }
+        else {
+            const url = authorizationUrl;
+            const pkce = url.searchParams.get("code_challenge_method");
+            const resource = url.searchParams.get("resource");
+            record("Authorization request", pkce === "S256", `PKCE ${pkce ?? "missing"}, resource=${resource ?? "(none)"}`);
+            options.log(`\nOpen this URL to log in${options.openBrowser ? " (opening your browser)" : ""}:\n  ${url.href}\n`);
+            if (options.openBrowser)
+                (options.browser ?? openInBrowser)(url.href);
+            const result = await callback.waitForCode(options.timeoutMs);
+            if ("error" in result) {
+                record("Authorization", false, result.error);
+                return steps;
+            }
+            if (result.state !== provider.state()) {
+                record("Authorization", false, "state parameter mismatch (possible CSRF); aborting");
+                return steps;
+            }
+            if (result.iss && discovery?.authorizationServerMetadata?.issuer && result.iss !== discovery.authorizationServerMetadata.issuer) {
+                record("Authorization", false, `iss ${result.iss} doesn't match the issuer ${discovery.authorizationServerMetadata.issuer} (RFC 9207)`);
+                return steps;
+            }
+            record("Authorization", true, `code received${result.iss ? ", iss matches issuer" : ""}`);
+            try {
+                await auth(provider, { serverUrl: options.url, authorizationCode: result.code, scope: options.scope });
+            }
+            catch (err) {
+                record("Token exchange", false, err.message);
+                return steps;
+            }
+        }
+        const tokens = provider.tokens();
+        record("Token exchange", !!tokens?.access_token, tokens
+            ? `${tokens.token_type} token${tokens.expires_in ? `, expires in ${tokens.expires_in}s` : ""}${tokens.refresh_token ? ", refresh token issued" : ", no refresh token"}${tokens.scope ? `, scope "${tokens.scope}"` : ""}`
+            : "no tokens");
+        if (!tokens?.access_token)
+            return steps;
+        try {
+            record("Authenticated MCP request", true, await options.verify(provider));
+        }
+        catch (err) {
+            record("Authenticated MCP request", false, `${err.message} (token issued but rejected: check audience/resource and scopes)`);
+        }
+        return steps;
+    }
+    finally {
+        callback.close();
+    }
+}
+async function startCallbackServer(port) {
+    let resolveResult;
+    const result = new Promise((r) => (resolveResult = r));
+    const server = createServer((req, res) => {
+        const url = new URL(req.url ?? "/", "http://127.0.0.1");
+        if (url.pathname !== "/callback") {
+            res.writeHead(404).end();
+            return;
+        }
+        const error = url.searchParams.get("error");
+        const code = url.searchParams.get("code");
+        res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
+        res.end(`<!doctype html><title>${TOOL_NAME}</title><p>${error ? "Login failed. You can close this tab." : "Logged in. You can close this tab and return to the terminal."}</p>`);
+        if (error)
+            resolveResult({ error: `${error}${url.searchParams.get("error_description") ? `: ${url.searchParams.get("error_description")}` : ""}` });
+        else if (code)
+            resolveResult({ code, state: url.searchParams.get("state") ?? undefined, iss: url.searchParams.get("iss") ?? undefined });
+        else
+            resolveResult({ error: "callback without code or error" });
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(port, "127.0.0.1", () => resolve());
+    });
+    const address = server.address();
+    return {
+        port: typeof address === "object" && address ? address.port : port,
+        waitForCode: (timeoutMs) => Promise.race([result, new Promise((r) => setTimeout(() => r({ error: `no callback within ${Math.round(timeoutMs / 1000)}s` }), timeoutMs).unref())]),
+        close: () => server.close(),
+    };
+}
+function openInBrowser(url) {
+    const [cmd, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
+    try {
+        spawn(cmd, args, { stdio: "ignore", detached: true }).on("error", () => { }).unref();
+    }
+    catch {
+        // The URL is printed too.
+    }
+}
+/** Human summary of stored credentials, without secrets. */
+export function describeCredentials(url, c) {
+    const expires = c.tokens?.expires_in && c.tokensSavedAt ? new Date(c.tokensSavedAt + c.tokens.expires_in * 1000) : undefined;
+    const state = !c.tokens
+        ? "no tokens"
+        : expires
+            ? expires.getTime() > Date.now()
+                ? `valid until ${expires.toISOString()}`
+                : `expired ${expires.toISOString()}${c.tokens.refresh_token ? " (will refresh)" : ""}`
+            : "no expiry given";
+    return `${url}\n  ${c.registration ?? "unknown"} client ${c.clientInformation?.client_id ?? "-"} · ${state}`;
+}
+//# sourceMappingURL=oauth.js.map

package/dist/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAsD,MAAM,0CAA0C,CAAC;AAMpH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAalD,yFAAyF;AACzF,MAAM,OAAO,eAAe;IACL;IAArB,YAAqB,OAAe,gBAAgB,EAAE;QAAjC,SAAI,GAAJ,IAAI,CAA6B;IAAG,CAAC;IAE1D,GAAG;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAsC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,GAAW,EAAE,MAAqE;QACvF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACrC,IAAI,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;;YACtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AAC7C,CAAC;AAaD,8DAA8D;AAC9D,MAAM,OAAO,mBAAmB;IAKX;IACA;IACA;IANV,iBAAiB,CAAU;IACnB,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE9D,YACmB,SAAiB,EACjB,KAAsB,EACtB,UAA2B,EAAE;QAF7B,cAAS,GAAT,SAAS,CAAQ;QACjB,UAAK,GAAL,KAAK,CAAiB;QACtB,YAAO,GAAP,OAAO,CAAsB;QAE9C,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACH,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC;IAC9G,CAAC;IAED,IAAI,cAAc;QAChB,OAAO;YACL,WAAW,EAAE,SAAS;YACtB,WAAW,EAAE,SAAS;YACtB,gBAAgB,EAAE,OAAO;YACzB,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;YACzE,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YACpD,cAAc,EAAE,CAAC,MAAM,CAAC;YACxB,0BAA0B,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM;YACrF,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,gGAAgG;YAChG,GAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAa;SAC9C,CAAC;IACJ,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,iBAAiB;QACf,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC1B,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAClI,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,iBAAiB,CAAC;QAC9D,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACtB,0DAA0D;QAC1D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU;YAAE,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACvD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,WAAW;QACjB,OAAO,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,8CAA8C,SAAS,sBAAsB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACpJ,CAAC;IAED,qBAAqB,CAAC,IAAiC;QACrD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QAChF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;IAC/C,CAAC;IAED,UAAU,CAAC,MAAmB;QAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ;YACxC,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACjG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IACxG,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,GAAQ;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU;YAAE,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACvD,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAED,gBAAgB,CAAC,YAAoB;QACnC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,YAAY;QACV,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC;QAC7D,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAClF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,kBAAkB,CAAC,KAA0B;QAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC;IACvD,CAAC;IAED,qBAAqB,CAAC,KAA6D;QACjF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;YACtC,IAAI,KAAK,KAAK,KAAK;gBAAE,OAAO,SAAS,CAAC;YACtC,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YACtB,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC;YACtD,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC;YAC3C,IAAI,KAAK,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC,YAAY,CAAC;YACnD,IAAI,KAAK,KAAK,WAAW;gBAAE,OAAO,IAAI,CAAC,cAAc,CAAC;YACtD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAyBD,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAqB;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,eAAe,EAAE,CAAC;IACrD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAW,EAAE,MAAc,EAAE,EAAE;QAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;QACpD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,gFAAgF;IAChF,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE3C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,oBAAoB,QAAQ,CAAC,IAAI,WAAW,CAAC;IACjE,IAAI,gBAAiC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE;QAC3D,WAAW;QACX,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;YAClB,gBAAgB,GAAG,GAAG,CAAC;QACzB,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,mCAAmC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YAC3E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC5C,MAAM,CACJ,WAAW,EACX,IAAI,EACJ,wBAAwB,SAAS,EAAE,sBAAsB,IAAI,WAAW,GAAG,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,mEAAmE,EAAE,CACvN,CAAC;QACF,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9I,MAAM,CAAC,qBAAqB,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,0BAA0B,EAAE,IAAI,EAAE,6BAA6B,EAAE,GAAG,EAAE,6BAA6B,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAE1K,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAC3B,MAAM,CAAC,eAAe,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,gBAAiB,CAAC;YAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,CAAC,uBAAuB,EAAE,IAAI,KAAK,MAAM,EAAE,QAAQ,IAAI,IAAI,SAAS,cAAc,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;YAChH,OAAO,CAAC,GAAG,CAAC,4BAA4B,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;YAClH,IAAI,OAAO,CAAC,WAAW;gBAAE,CAAC,OAAO,CAAC,OAAO,IAAI,aAAa,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAEtE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;gBACtB,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC7C,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;gBACtC,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,oDAAoD,CAAC,CAAC;gBACrF,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,MAAM,CAAC,GAAG,IAAI,SAAS,EAAE,2BAA2B,EAAE,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,2BAA2B,CAAC,MAAM,EAAE,CAAC;gBAChI,MAAM,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,MAAM,CAAC,GAAG,6BAA6B,SAAS,CAAC,2BAA2B,CAAC,MAAM,aAAa,CAAC,CAAC;gBACxI,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,CAAC,eAAe,EAAE,IAAI,EAAE,gBAAgB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAE1F,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YACzG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,gBAAgB,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;gBACxD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,CACJ,gBAAgB,EAChB,CAAC,CAAC,MAAM,EAAE,YAAY,EACtB,MAAM;YACJ,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,SAAS,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACzN,CAAC,CAAC,WAAW,CAChB,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,YAAY;YAAE,OAAO,KAAK,CAAC;QAExC,IAAI,CAAC;YACH,MAAM,CAAC,2BAA2B,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAI,GAAa,CAAC,OAAO,kEAAkE,CAAC,CAAC;QAC1I,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAID,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAK7C,IAAI,aAA2C,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,OAAO,CAAiB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,GAAG,CACL,yBAAyB,SAAS,cAAc,KAAK,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,+DAA+D,MAAM,CACxK,CAAC;QACF,IAAI,KAAK;YAAE,aAAa,CAAC,EAAE,KAAK,EAAE,GAAG,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aAC/I,IAAI,IAAI;YAAE,aAAa,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;;YACpI,aAAa,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,OAAO;QACL,IAAI,EAAE,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAClE,WAAW,EAAE,CAAC,SAAS,EAAE,EAAE,CACzB,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,OAAO,CAAiB,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,sBAAsB,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACtK,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GACf,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3I,IAAI,CAAC;QACH,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,CAAoB;IACnE,MAAM,OAAO,GACX,CAAC,CAAC,MAAM,EAAE,UAAU,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/G,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM;QACrB,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,OAAO;YACP,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;gBAC9B,CAAC,CAAC,eAAe,OAAO,CAAC,WAAW,EAAE,EAAE;gBACxC,CAAC,CAAC,WAAW,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE;YACxF,CAAC,CAAC,iBAAiB,CAAC;IACxB,OAAO,GAAG,GAAG,OAAO,CAAC,CAAC,YAAY,IAAI,SAAS,WAAW,CAAC,CAAC,iBAAiB,EAAE,SAAS,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC;AAC/G,CAAC"}

package/dist/policy.d.ts

@@ -0,0 +1,29 @@
+import type { CheckArea } from "./checks/types.js";
+import type { Report } from "./evaluate.js";
+export declare const EXIT: {
+    readonly ok: 0;
+    readonly failed: 1;
+    readonly usage: 2;
+    readonly connectFailed: 3;
+};
+export declare class PolicyError extends Error {
+}
+type Policy = {
+    kind: "none";
+} | {
+    kind: "severity";
+    includeWarn: boolean;
+} | {
+    kind: "match";
+    patterns: RegExp[];
+};
+/**
+ * --fail-on: "error" (default), "warn", "none", or a comma list of check ids,
+ * id globs (TOOL_*) and areas (auth). A list fails on matching errors only.
+ */
+export declare function parsePolicy(spec: string, knownIds: string[], knownAreas: CheckArea[]): Policy;
+/** Findings that make the run fail, as "CLIENT CHECK_ID" strings (for the log). */
+export declare function failures(report: Report, policy: Policy): string[];
+export declare function exitCode(report: Report, policy: Policy, snapshotConnectFailed: boolean): number;
+export {};
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,eAAO,MAAM,IAAI;;;;;CAA4D,CAAC;AAE9E,qBAAa,WAAY,SAAQ,KAAK;CAAG;AAEzC,KAAK,MAAM,GACP;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE1C;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,CAkB7F;AAED,mFAAmF;AACnF,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CA4BjE;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,GAAG,MAAM,CAG/F"}

package/dist/policy.js

@@ -0,0 +1,63 @@
+export const EXIT = { ok: 0, failed: 1, usage: 2, connectFailed: 3 };
+export class PolicyError extends Error {
+}
+/**
+ * --fail-on: "error" (default), "warn", "none", or a comma list of check ids,
+ * id globs (TOOL_*) and areas (auth). A list fails on matching errors only.
+ */
+export function parsePolicy(spec, knownIds, knownAreas) {
+    const value = spec.trim().toLowerCase();
+    if (value === "none")
+        return { kind: "none" };
+    if (value === "error" || value === "")
+        return { kind: "severity", includeWarn: false };
+    if (value === "warn")
+        return { kind: "severity", includeWarn: true };
+    const patterns = spec.split(",").map((raw) => {
+        const token = raw.trim();
+        if (knownAreas.includes(token.toLowerCase())) {
+            return new RegExp(`^area:${token.toLowerCase()}$`);
+        }
+        const re = new RegExp(`^${token.toUpperCase().replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*")}$`);
+        if (!knownIds.some((id) => re.test(id))) {
+            throw new PolicyError(`--fail-on: "${token}" matches no check id or area. See --list-checks.`);
+        }
+        return re;
+    });
+    return { kind: "match", patterns };
+}
+/** Findings that make the run fail, as "CLIENT CHECK_ID" strings (for the log). */
+export function failures(report, policy) {
+    if (policy.kind === "none")
+        return [];
+    const failing = new Set();
+    const matches = (checkId, area) => policy.kind === "match" && policy.patterns.some((re) => re.test(checkId) || re.test(`area:${area}`));
+    const consider = (label, checkId, area, status) => {
+        const bad = policy.kind === "severity"
+            ? status === "fail" || (policy.includeWarn && status === "warn")
+            : status === "fail" && matches(checkId, area);
+        if (bad)
+            failing.add(`${label} ${checkId}`);
+    };
+    if (report.clients.length > 0) {
+        for (const client of report.clients) {
+            for (const row of client.rows)
+                consider(client.client, row.checkId, row.area, row.status);
+        }
+    }
+    else {
+        // No client profiles selected: judge client-independent findings by severity.
+        const areaOf = new Map(report.checks.map((c) => [c.id, c.area]));
+        for (const f of report.findings.filter((f) => !f.client)) {
+            const status = f.severity === "error" ? "fail" : f.severity;
+            consider("server", f.checkId, areaOf.get(f.checkId) ?? "", status);
+        }
+    }
+    return [...failing];
+}
+export function exitCode(report, policy, snapshotConnectFailed) {
+    if (policy.kind !== "none" && snapshotConnectFailed)
+        return EXIT.connectFailed;
+    return failures(report, policy).length > 0 ? EXIT.failed : EXIT.ok;
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAW,CAAC;AAE9E,MAAM,OAAO,WAAY,SAAQ,KAAK;CAAG;AAOzC;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,QAAkB,EAAE,UAAuB;IACnF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9C,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACvF,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAErE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACzB,IAAK,UAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC3D,OAAO,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7G,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,WAAW,CAAC,eAAe,KAAK,mDAAmD,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,MAAc;IACrD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,IAAY,EAAE,EAAE,CAChD,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IAEvG,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,OAAe,EAAE,IAAY,EAAE,MAAc,EAAE,EAAE;QAChF,MAAM,GAAG,GACP,MAAM,CAAC,IAAI,KAAK,UAAU;YACxB,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,KAAK,MAAM,CAAC;YAChE,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC;IAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI;gBAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;SAAM,CAAC;QACN,8EAA8E;QAC9E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC5D,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,MAAc,EAAE,qBAA8B;IACrF,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,qBAAqB;QAAE,OAAO,IAAI,CAAC,aAAa,CAAC;IAC/E,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACrE,CAAC"}

package/dist/profiles/chatgpt.d.ts

@@ -0,0 +1,3 @@
+import type { ClientProfile } from "./types.js";
+export declare const chatgpt: ClientProfile;
+//# sourceMappingURL=chatgpt.d.ts.map

package/dist/profiles/chatgpt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatgpt.d.ts","sourceRoot":"","sources":["../../src/profiles/chatgpt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAOhD,eAAO,MAAM,OAAO,EAAE,aAuBrB,CAAC"}

package/dist/profiles/chatgpt.js

@@ -0,0 +1,29 @@
+const REFERENCE = "https://developers.openai.com/apps-sdk/reference";
+const CONNECT = "https://developers.openai.com/apps-sdk/deploy/connect-chatgpt";
+const AUTH = "https://developers.openai.com/apps-sdk/build/auth";
+const verifiedOn = "2026-09-26";
+export const chatgpt = {
+    id: "chatgpt",
+    aliases: ["openai", "chatgpt-apps"],
+    displayName: "ChatGPT (Apps SDK / connectors)",
+    supports: {
+        streamableHttp: { value: true, source: CONNECT, verifiedOn },
+        stdio: { value: "partial", source: CONNECT, verifiedOn, note: "Only through a Secure MCP Tunnel in developer mode." },
+        toolsListChanged: {
+            value: false,
+            source: CONNECT,
+            verifiedOn,
+            note: "Inferred: after tool changes the docs require pressing Refresh on the connection and starting a new conversation.",
+        },
+        elicitation: { value: true, source: "https://developers.openai.com/apps-sdk/build/mcp-server", verifiedOn },
+        oauth: { value: true, source: AUTH, verifiedOn, note: "Requires code_challenge_methods_supported with S256." },
+        dcr: { value: true, source: AUTH, verifiedOn },
+        cimd: { value: true, source: AUTH, verifiedOn, note: "Preferred when available." },
+        uiResources: { value: true, source: REFERENCE, verifiedOn },
+        structuredContent: { value: true, source: REFERENCE, verifiedOn },
+    },
+    limits: {
+        structuredContent: { value: "alongsideText", source: REFERENCE, verifiedOn },
+    },
+};
+//# sourceMappingURL=chatgpt.js.map

package/dist/profiles/chatgpt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatgpt.js","sourceRoot":"","sources":["../../src/profiles/chatgpt.ts"],"names":[],"mappings":"AAEA,MAAM,SAAS,GAAG,kDAAkD,CAAC;AACrE,MAAM,OAAO,GAAG,+DAA+D,CAAC;AAChF,MAAM,IAAI,GAAG,mDAAmD,CAAC;AACjE,MAAM,UAAU,GAAG,YAAY,CAAC;AAEhC,MAAM,CAAC,MAAM,OAAO,GAAkB;IACpC,EAAE,EAAE,SAAS;IACb,OAAO,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC;IACnC,WAAW,EAAE,iCAAiC;IAC9C,QAAQ,EAAE;QACR,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE;QAC5D,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,qDAAqD,EAAE;QACrH,gBAAgB,EAAE;YAChB,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,OAAO;YACf,UAAU;YACV,IAAI,EAAE,mHAAmH;SAC1H;QACD,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,yDAAyD,EAAE,UAAU,EAAE;QAC3G,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,sDAAsD,EAAE;QAC9G,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAC9C,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,2BAA2B,EAAE;QAClF,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE;QAC3D,iBAAiB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE;KAClE;IACD,MAAM,EAAE;QACN,iBAAiB,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE;KAC7E;CACF,CAAC"}

package/dist/profiles/claude-code.d.ts

@@ -0,0 +1,3 @@
+import type { ClientProfile } from "./types.js";
+export declare const claudeCode: ClientProfile;
+//# sourceMappingURL=claude-code.d.ts.map

package/dist/profiles/claude-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../src/profiles/claude-code.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAKhD,eAAO,MAAM,UAAU,EAAE,aA0DxB,CAAC"}

package/dist/profiles/claude-code.js

@@ -0,0 +1,62 @@
+const DOCS = "https://code.claude.com/docs/en/mcp";
+const verifiedOn = "2026-09-26";
+export const claudeCode = {
+    id: "claude-code",
+    aliases: [],
+    displayName: "Claude Code",
+    versionTested: "docs up to v2.1.283",
+    supports: {
+        stdio: { value: true, source: DOCS, verifiedOn },
+        streamableHttp: { value: true, source: DOCS, verifiedOn },
+        sse: { value: true, source: DOCS, verifiedOn, note: "Deprecated." },
+        toolsListChanged: { value: true, source: DOCS, verifiedOn },
+        resourcesListChanged: { value: true, source: DOCS, verifiedOn },
+        promptsListChanged: { value: true, source: DOCS, verifiedOn },
+        resources: { value: true, source: DOCS, verifiedOn },
+        prompts: { value: true, source: DOCS, verifiedOn },
+        elicitation: { value: true, source: DOCS, verifiedOn },
+        oauth: { value: true, source: DOCS, verifiedOn },
+        dcr: { value: true, source: DOCS, verifiedOn },
+        cimd: { value: true, source: DOCS, verifiedOn },
+        uiResources: {
+            value: false,
+            source: DOCS,
+            verifiedOn,
+            note: "UI resources are hidden from @-mentions and the resource list; no rendering is documented.",
+        },
+    },
+    limits: {
+        toolNamePrefix: { value: { format: "mcp__{server}__" }, source: "https://code.claude.com/docs/en/permissions", verifiedOn },
+        toolNameChars: {
+            value: { allowed: "A-Za-z0-9_-", onInvalid: "unknown" },
+            source: "https://platform.claude.com/docs/en/agents-and-tools/tool-use/implement-tool-use",
+            verifiedOn,
+            note: "Claude API tool-name rule; how Claude Code maps other characters is not documented.",
+        },
+        maxToolNameLength: {
+            value: { max: 128, onExceed: "unknown" },
+            source: "https://platform.claude.com/docs/en/agents-and-tools/tool-use/implement-tool-use",
+            verifiedOn,
+            note: "Claude API limit, applied to the prefixed name; handling of longer names is not documented.",
+        },
+        maxDescriptionLength: {
+            value: 2048,
+            source: DOCS,
+            verifiedOn,
+            note: "Tool descriptions and server instructions (CLAUDE_CODE_MAX_MCP_DESCRIPTION_LENGTH, v2.1.280+).",
+        },
+        inputPropertyNamePattern: {
+            value: "^[A-Za-z0-9_.-]{1,64}$",
+            source: DOCS,
+            verifiedOn,
+            note: "Tools with other top-level property names are excluded (flag-gated, v2.1.216+).",
+        },
+        maxToolResult: {
+            value: { max: 25000, unit: "tokens", onExceed: "file" },
+            source: "https://code.claude.com/docs/en/mcp#mcp-output-limits-and-warnings",
+            verifiedOn: "2026-09-27",
+            note: "MAX_MCP_OUTPUT_TOKENS default; larger results are saved to disk and replaced by a file reference.",
+        },
+    },
+};
+//# sourceMappingURL=claude-code.js.map

package/dist/profiles/claude-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.js","sourceRoot":"","sources":["../../src/profiles/claude-code.ts"],"names":[],"mappings":"AAEA,MAAM,IAAI,GAAG,qCAAqC,CAAC;AACnD,MAAM,UAAU,GAAG,YAAY,CAAC;AAEhC,MAAM,CAAC,MAAM,UAAU,GAAkB;IACvC,EAAE,EAAE,aAAa;IACjB,OAAO,EAAE,EAAE;IACX,WAAW,EAAE,aAAa;IAC1B,aAAa,EAAE,qBAAqB;IACpC,QAAQ,EAAE;QACR,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAChD,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QACzD,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE;QACnE,gBAAgB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAC3D,oBAAoB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAC/D,kBAAkB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAC7D,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QACpD,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAClD,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QACtD,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAChD,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAC9C,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAC/C,WAAW,EAAE;YACX,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,IAAI;YACZ,UAAU;YACV,IAAI,EAAE,4FAA4F;SACnG;KACF;IACD,MAAM,EAAE;QACN,cAAc,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,MAAM,EAAE,6CAA6C,EAAE,UAAU,EAAE;QAC3H,aAAa,EAAE;YACb,KAAK,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE;YACvD,MAAM,EAAE,kFAAkF;YAC1F,UAAU;YACV,IAAI,EAAE,qFAAqF;SAC5F;QACD,iBAAiB,EAAE;YACjB,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE;YACxC,MAAM,EAAE,kFAAkF;YAC1F,UAAU;YACV,IAAI,EAAE,6FAA6F;SACpG;QACD,oBAAoB,EAAE;YACpB,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,UAAU;YACV,IAAI,EAAE,gGAAgG;SACvG;QACD,wBAAwB,EAAE;YACxB,KAAK,EAAE,wBAAwB;YAC/B,MAAM,EAAE,IAAI;YACZ,UAAU;YACV,IAAI,EAAE,iFAAiF;SACxF;QACD,aAAa,EAAE;YACb,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE;YACvD,MAAM,EAAE,oEAAoE;YAC5E,UAAU,EAAE,YAAY;YACxB,IAAI,EAAE,mGAAmG;SAC1G;KACF;CACF,CAAC"}

package/dist/profiles/claude-desktop.d.ts

@@ -0,0 +1,3 @@
+import type { ClientProfile } from "./types.js";
+export declare const claudeDesktop: ClientProfile;
+//# sourceMappingURL=claude-desktop.d.ts.map

package/dist/profiles/claude-desktop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-desktop.d.ts","sourceRoot":"","sources":["../../src/profiles/claude-desktop.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAKhD,eAAO,MAAM,aAAa,EAAE,aA+C3B,CAAC"}

package/dist/profiles/claude-desktop.js

@@ -0,0 +1,51 @@
+const DOCS = "https://claude.com/docs/connectors/building/index";
+const verifiedOn = "2026-09-26";
+export const claudeDesktop = {
+    id: "claude-desktop",
+    aliases: ["claude", "claude-ai", "claude.ai"],
+    displayName: "Claude Desktop / claude.ai",
+    supports: {
+        stdio: { value: true, source: "https://claude.com/docs/connectors/building/mcpb", verifiedOn },
+        streamableHttp: {
+            value: true,
+            source: DOCS,
+            verifiedOn,
+            note: "Remote connectors are reached from Anthropic's cloud, so the server must be publicly reachable.",
+        },
+        sse: { value: true, source: DOCS, verifiedOn, note: "Legacy HTTP+SSE, being deprecated." },
+        resources: { value: true, source: DOCS, verifiedOn },
+        prompts: { value: true, source: DOCS, verifiedOn },
+        sampling: { value: false, source: DOCS, verifiedOn },
+        oauth: { value: true, source: DOCS, verifiedOn },
+        dcr: { value: true, source: "https://claude.com/docs/connectors/building/authentication", verifiedOn },
+        cimd: {
+            value: true,
+            source: "https://claude.com/docs/connectors/building/authentication",
+            verifiedOn,
+            note: "Preferred when AS metadata has client_id_metadata_document_supported and 'none' in token_endpoint_auth_methods_supported.",
+        },
+        uiResources: { value: true, source: "https://claude.com/docs/connectors/building/mcp-apps/getting-started", verifiedOn },
+    },
+    limits: {
+        toolNameChars: {
+            value: { allowed: "A-Za-z0-9_-", onInvalid: "unknown" },
+            source: "https://platform.claude.com/docs/en/agents-and-tools/tool-use/implement-tool-use",
+            verifiedOn,
+            note: "Claude API tool-name rule; how MCP names with other characters are mapped is not documented.",
+        },
+        maxToolResult: {
+            value: { max: 150000, unit: "chars", onExceed: "unknown" },
+            source: "https://claude.com/docs/connectors/building/index",
+            verifiedOn: "2026-09-27",
+            note: "Approximate limit for claude.ai and Desktop; behaviour beyond it isn't documented.",
+        },
+        toolTimeoutMs: { value: 240000, source: "https://claude.com/docs/connectors/building/index", verifiedOn: "2026-09-27" },
+        readOnlySkipsApproval: {
+            value: true,
+            source: "https://claude.com/docs/connectors/building/review-criteria",
+            verifiedOn: "2026-09-27",
+            note: "Read-only tools can run without per-call confirmation; destructive tools always prompt.",
+        },
+    },
+};
+//# sourceMappingURL=claude-desktop.js.map

package/dist/profiles/claude-desktop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-desktop.js","sourceRoot":"","sources":["../../src/profiles/claude-desktop.ts"],"names":[],"mappings":"AAEA,MAAM,IAAI,GAAG,mDAAmD,CAAC;AACjE,MAAM,UAAU,GAAG,YAAY,CAAC;AAEhC,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,EAAE,EAAE,gBAAgB;IACpB,OAAO,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;IAC7C,WAAW,EAAE,4BAA4B;IACzC,QAAQ,EAAE;QACR,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,kDAAkD,EAAE,UAAU,EAAE;QAC9F,cAAc,EAAE;YACd,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,UAAU;YACV,IAAI,EAAE,iGAAiG;SACxG;QACD,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,oCAAoC,EAAE;QAC1F,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QACpD,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAClD,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QACpD,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;QAChD,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,4DAA4D,EAAE,UAAU,EAAE;QACtG,IAAI,EAAE;YACJ,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,4DAA4D;YACpE,UAAU;YACV,IAAI,EAAE,2HAA2H;SAClI;QACD,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,sEAAsE,EAAE,UAAU,EAAE;KACzH;IACD,MAAM,EAAE;QACN,aAAa,EAAE;YACb,KAAK,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE;YACvD,MAAM,EAAE,kFAAkF;YAC1F,UAAU;YACV,IAAI,EAAE,8FAA8F;SACrG;QACD,aAAa,EAAE;YACb,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC1D,MAAM,EAAE,mDAAmD;YAC3D,UAAU,EAAE,YAAY;YACxB,IAAI,EAAE,oFAAoF;SAC3F;QACD,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,mDAAmD,EAAE,UAAU,EAAE,YAAY,EAAE;QACvH,qBAAqB,EAAE;YACrB,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,6DAA6D;YACrE,UAAU,EAAE,YAAY;YACxB,IAAI,EAAE,yFAAyF;SAChG;KACF;CACF,CAAC"}

package/dist/profiles/cline.d.ts

@@ -0,0 +1,4 @@
+import type { ClientProfile } from "./types.js";
+/** Generated from research notes (2026-09-27); every fact links to its source. */
+export declare const cline: ClientProfile;
+//# sourceMappingURL=cline.d.ts.map

package/dist/profiles/cline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cline.d.ts","sourceRoot":"","sources":["../../src/profiles/cline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,kFAAkF;AAClF,eAAO,MAAM,KAAK,EAAE,aAmHnB,CAAC"}