octoflow-core 1.0.0

package/dist/capabilities/index.js

@@ -0,0 +1,71 @@
+import {
+  AgentContextBuilder,
+  buildBridgeAgentContext,
+  buildBridgeSystemPrompt,
+  createNativeToolDeliveryMiddleware,
+  renderContext,
+  renderGuardrails,
+  renderSection
+} from "./agent-context/index.js";
+import { buildCapabilityState } from "./context-composer.js";
+import { prepareSkillDelivery } from "./skill-delivery.js";
+import { resolveSkillActions } from "./skill-injector.js";
+import { SkillRegistry } from "./skill-registry.js";
+import { classifyBackendForSkills } from "./skill-types.js";
+import {
+  loadSkillBundle,
+  loadSkillBundles,
+  loadSkillPath,
+  loadSkillPaths
+} from "./skills/bundle-loader.js";
+import { discoverLocalSkills } from "./skills/discovery.js";
+import {
+  loadSkillFromGithub,
+  parseSkillGithubSource
+} from "./skills/github-loader.js";
+import { extractCapabilityToolCalls } from "./tool-calls.js";
+import {
+  activateSkillByName,
+  buildSkillCatalog,
+  createActivateSkillTool,
+  createReadSkillTool,
+  createSkillRunner,
+  discoverSkillsFromPaths,
+  discoverWellKnownSkillLocations,
+  isSkillResourcePathInside,
+  parseFrontmatterLoose,
+  readSkill
+} from "octoflow-skill-runner";
+export {
+  AgentContextBuilder,
+  SkillRegistry,
+  activateSkillByName,
+  buildBridgeAgentContext,
+  buildBridgeSystemPrompt,
+  buildCapabilityState,
+  buildSkillCatalog,
+  classifyBackendForSkills,
+  createActivateSkillTool,
+  createNativeToolDeliveryMiddleware,
+  createReadSkillTool,
+  createSkillRunner,
+  discoverLocalSkills,
+  discoverSkillsFromPaths,
+  discoverWellKnownSkillLocations,
+  extractCapabilityToolCalls,
+  isSkillResourcePathInside,
+  loadSkillBundle,
+  loadSkillBundles,
+  loadSkillFromGithub,
+  loadSkillPath,
+  loadSkillPaths,
+  parseFrontmatterLoose,
+  parseSkillGithubSource,
+  prepareSkillDelivery,
+  readSkill,
+  renderContext,
+  renderGuardrails,
+  renderSection,
+  resolveSkillActions
+};
+//# sourceMappingURL=index.js.map

package/dist/capabilities/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/capabilities/index.ts"],
+  "sourcesContent": ["export type {\n  AgentContext,\n  AgentContextMeta,\n  AgentContextSection,\n  AgentContextSectionSource,\n  AgentGuardrail,\n  AgentGuardrailEnforcement,\n  BuildBridgeAgentContextOptions,\n  ContextMiddleware,\n  InheritOptions,\n  ToolEntry,\n  ToolEntryPermission,\n  ToolEntrySource,\n} from './agent-context/index.js';\nexport {\n  AgentContextBuilder,\n  buildBridgeAgentContext,\n  buildBridgeSystemPrompt,\n  createNativeToolDeliveryMiddleware,\n  renderContext,\n  renderGuardrails,\n  renderSection,\n} from './agent-context/index.js';\nexport { buildCapabilityState } from './context-composer.js';\nexport { prepareSkillDelivery } from './skill-delivery.js';\nexport { resolveSkillActions } from './skill-injector.js';\nexport { SkillRegistry } from './skill-registry.js';\nexport type {\n  SkillBackendFamily,\n  SkillDefinition,\n  SkillDeliveryResult,\n  SkillDeliveryStrategy,\n} from './skill-types.js';\nexport { classifyBackendForSkills } from './skill-types.js';\nexport type {\n  SkillBundleLoaderOptions,\n  SkillBundleMetadata,\n} from './skills/bundle-loader.js';\nexport {\n  loadSkillBundle,\n  loadSkillBundles,\n  loadSkillPath,\n  loadSkillPaths,\n} from './skills/bundle-loader.js';\nexport type {\n  DiscoveredSkill,\n  DiscoveredSkillOrigin,\n  DiscoverLocalSkillsOptions,\n  DiscoverLocalSkillsResult,\n  RelativePathDiscovery,\n} from './skills/discovery.js';\nexport { discoverLocalSkills } from './skills/discovery.js';\nexport type {\n  LoadSkillFromGithubOptions,\n  ParsedGithubSource,\n  SkillFetcher,\n  SkillFetcherRunArgs,\n  SkillFetcherRunner,\n} from './skills/github-loader.js';\nexport {\n  loadSkillFromGithub,\n  parseSkillGithubSource,\n} from './skills/github-loader.js';\nexport { extractCapabilityToolCalls } from './tool-calls.js';\nexport type {\n  AgentLoopOptions,\n  BridgeMcpLoadOptions,\n  BridgeMcpServerConfig,\n  CapabilityContextOptions,\n  CapabilityContextSection,\n  CapabilityMiddleware,\n  CapabilitySkill,\n  CapabilityState,\n  CapabilityToolCall,\n} from './types.js';\nexport type {\n  DiscoverSkillsFromPathsOptions,\n  ReadSkillInput,\n  ReadSkillOptions,\n  SkillCatalogSection,\n  SkillMetadata,\n  SkillRecord,\n  SkillRunnerOptions,\n  SkillToolDefinition,\n  WellKnownSkillLocationsOptions,\n} from 'octoflow-skill-runner';\nexport {\n  activateSkillByName,\n  buildSkillCatalog,\n  createActivateSkillTool,\n  createReadSkillTool,\n  createSkillRunner,\n  discoverSkillsFromPaths,\n  discoverWellKnownSkillLocations,\n  isSkillResourcePathInside,\n  parseFrontmatterLoose,\n  readSkill,\n} from 'octoflow-skill-runner';\n"],
+  "mappings": "AAcA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC,SAAS,4BAA4B;AACrC,SAAS,2BAA2B;AACpC,SAAS,qBAAqB;AAO9B,SAAS,gCAAgC;AAKzC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAQP,SAAS,2BAA2B;AAQpC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,kCAAkC;AAuB3C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;",
+  "names": []
+}

package/dist/capabilities/local-context/harness.d.ts

@@ -0,0 +1,11 @@
+import type { LocalContextOptions, LocalContextVendorId } from '../../runtime/sessions/local-context-types.js';
+import type { VendorDescriptor } from './vendors/descriptor.js';
+export interface HarnessResolution {
+    vendors: Set<LocalContextVendorId>;
+    matches: Map<LocalContextVendorId, {
+        envVar: string;
+        verified: boolean;
+    }>;
+}
+export declare function resolveIgnoreHarness(opt: LocalContextOptions['ignoreHarness'], descriptors: ReadonlyMap<LocalContextVendorId, VendorDescriptor>, env?: NodeJS.ProcessEnv): HarnessResolution;
+//# sourceMappingURL=harness.d.ts.map

package/dist/capabilities/local-context/harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../../../src/capabilities/local-context/harness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,+CAA+C,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACnC,OAAO,EAAE,GAAG,CAAC,oBAAoB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC3E;AAED,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,mBAAmB,CAAC,eAAe,CAAC,EACzC,WAAW,EAAE,WAAW,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,EAChE,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,iBAAiB,CAwCnB"}

package/dist/capabilities/local-context/harness.js

@@ -0,0 +1,41 @@
+function resolveIgnoreHarness(opt, descriptors, env = process.env) {
+  const vendors = /* @__PURE__ */ new Set();
+  const matches = /* @__PURE__ */ new Map();
+  if (opt === false || opt == null) return { vendors, matches };
+  if (Array.isArray(opt)) {
+    for (const id of opt) {
+      const d = descriptors.get(id);
+      if (!d) continue;
+      const fired = d.harnessMarkers?.find((m) => markerMatches(m, env));
+      if (fired) {
+        vendors.add(id);
+        matches.set(id, { envVar: fired.envVar, verified: fired.verified });
+      } else {
+        vendors.add(id);
+        matches.set(id, { envVar: "", verified: false });
+      }
+    }
+    return { vendors, matches };
+  }
+  for (const [id, d] of descriptors) {
+    if (!d.harnessMarkers?.length) continue;
+    const fired = d.harnessMarkers.find(
+      (m) => m.verified && markerMatches(m, env)
+    );
+    if (fired) {
+      vendors.add(id);
+      matches.set(id, { envVar: fired.envVar, verified: true });
+    }
+  }
+  return { vendors, matches };
+}
+function markerMatches(marker, env) {
+  const v = env[marker.envVar];
+  if (marker.equals !== void 0) return v === marker.equals;
+  if (marker.present) return v !== void 0 && v !== "";
+  return v !== void 0;
+}
+export {
+  resolveIgnoreHarness
+};
+//# sourceMappingURL=harness.js.map

package/dist/capabilities/local-context/harness.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/capabilities/local-context/harness.ts"],
+  "sourcesContent": ["import type {\n  LocalContextOptions,\n  LocalContextVendorId,\n} from '../../runtime/sessions/local-context-types.js';\nimport type { VendorDescriptor } from './vendors/descriptor.js';\n\nexport interface HarnessResolution {\n  vendors: Set<LocalContextVendorId>;\n  matches: Map<LocalContextVendorId, { envVar: string; verified: boolean }>;\n}\n\nexport function resolveIgnoreHarness(\n  opt: LocalContextOptions['ignoreHarness'],\n  descriptors: ReadonlyMap<LocalContextVendorId, VendorDescriptor>,\n  env: NodeJS.ProcessEnv = process.env\n): HarnessResolution {\n  const vendors = new Set<LocalContextVendorId>();\n  const matches = new Map<\n    LocalContextVendorId,\n    { envVar: string; verified: boolean }\n  >();\n\n  if (opt === false || opt == null) return { vendors, matches };\n\n  if (Array.isArray(opt)) {\n    // Explicit list: use all markers (verified or not).\n    for (const id of opt) {\n      const d = descriptors.get(id);\n      if (!d) continue;\n      const fired = d.harnessMarkers?.find((m) => markerMatches(m, env));\n      if (fired) {\n        vendors.add(id);\n        matches.set(id, { envVar: fired.envVar, verified: fired.verified });\n      } else {\n        // Explicit opt-in wins even without a marker \u2014 user said \"always treat\n        // this vendor as the surrounding harness\".\n        vendors.add(id);\n        matches.set(id, { envVar: '', verified: false });\n      }\n    }\n    return { vendors, matches };\n  }\n\n  // 'auto' / true \u2014 scan env for verified markers only.\n  for (const [id, d] of descriptors) {\n    if (!d.harnessMarkers?.length) continue;\n    const fired = d.harnessMarkers.find(\n      (m) => m.verified && markerMatches(m, env)\n    );\n    if (fired) {\n      vendors.add(id);\n      matches.set(id, { envVar: fired.envVar, verified: true });\n    }\n  }\n  return { vendors, matches };\n}\n\nfunction markerMatches(\n  marker: { envVar: string; equals?: string; present?: boolean },\n  env: NodeJS.ProcessEnv\n): boolean {\n  const v = env[marker.envVar];\n  if (marker.equals !== undefined) return v === marker.equals;\n  if (marker.present) return v !== undefined && v !== '';\n  return v !== undefined;\n}\n"],
+  "mappings": "AAWO,SAAS,qBACd,KACA,aACA,MAAyB,QAAQ,KACd;AACnB,QAAM,UAAU,oBAAI,IAA0B;AAC9C,QAAM,UAAU,oBAAI,IAGlB;AAEF,MAAI,QAAQ,SAAS,OAAO,KAAM,QAAO,EAAE,SAAS,QAAQ;AAE5D,MAAI,MAAM,QAAQ,GAAG,GAAG;AAEtB,eAAW,MAAM,KAAK;AACpB,YAAM,IAAI,YAAY,IAAI,EAAE;AAC5B,UAAI,CAAC,EAAG;AACR,YAAM,QAAQ,EAAE,gBAAgB,KAAK,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AACjE,UAAI,OAAO;AACT,gBAAQ,IAAI,EAAE;AACd,gBAAQ,IAAI,IAAI,EAAE,QAAQ,MAAM,QAAQ,UAAU,MAAM,SAAS,CAAC;AAAA,MACpE,OAAO;AAGL,gBAAQ,IAAI,EAAE;AACd,gBAAQ,IAAI,IAAI,EAAE,QAAQ,IAAI,UAAU,MAAM,CAAC;AAAA,MACjD;AAAA,IACF;AACA,WAAO,EAAE,SAAS,QAAQ;AAAA,EAC5B;AAGA,aAAW,CAAC,IAAI,CAAC,KAAK,aAAa;AACjC,QAAI,CAAC,EAAE,gBAAgB,OAAQ;AAC/B,UAAM,QAAQ,EAAE,eAAe;AAAA,MAC7B,CAAC,MAAM,EAAE,YAAY,cAAc,GAAG,GAAG;AAAA,IAC3C;AACA,QAAI,OAAO;AACT,cAAQ,IAAI,EAAE;AACd,cAAQ,IAAI,IAAI,EAAE,QAAQ,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,IAC1D;AAAA,EACF;AACA,SAAO,EAAE,SAAS,QAAQ;AAC5B;AAEA,SAAS,cACP,QACA,KACS;AACT,QAAM,IAAI,IAAI,OAAO,MAAM;AAC3B,MAAI,OAAO,WAAW,OAAW,QAAO,MAAM,OAAO;AACrD,MAAI,OAAO,QAAS,QAAO,MAAM,UAAa,MAAM;AACpD,SAAO,MAAM;AACf;",
+  "names": []
+}

package/dist/capabilities/local-context/index.d.ts

@@ -0,0 +1,19 @@
+import type { LocalContextOptions } from '../../runtime/sessions/local-context-types.js';
+import type { BridgeMcpServerConfig } from '../types.js';
+import { type HarnessResolution } from './harness.js';
+import type { LocalContextResult } from './types.js';
+export { resolveIgnoreHarness } from './harness.js';
+export type { LocalContextResult, LocalContextSource } from './types.js';
+export { VENDOR_DESCRIPTORS } from './vendors/index.js';
+export interface DiscoverLocalContextOptions extends LocalContextOptions {
+    home?: string;
+    platform?: NodeJS.Platform;
+    onEvent?: (name: string, payload: Record<string, unknown>) => void;
+}
+export declare function discoverLocalContext(opts?: DiscoverLocalContextOptions): Promise<LocalContextResult>;
+/**
+ * Merge locally-discovered MCP servers with explicit bridge config.
+ */
+export declare function mergeLocalContextMcp(explicit: Record<string, BridgeMcpServerConfig> | undefined, discovered: LocalContextResult['mcpServers'], priority?: 'explicit-first' | 'local-first'): Record<string, BridgeMcpServerConfig>;
+export type { HarnessResolution };
+//# sourceMappingURL=index.d.ts.map

package/dist/capabilities/local-context/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/capabilities/local-context/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,mBAAmB,EAEpB,MAAM,+CAA+C,CAAC;AAKvD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,KAAK,iBAAiB,EAAwB,MAAM,cAAc,CAAC;AAC5E,OAAO,KAAK,EAAE,kBAAkB,EAAsB,MAAM,YAAY,CAAC;AAIzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,WAAW,2BAA4B,SAAQ,mBAAmB;IACtE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACpE;AA0BD,wBAAsB,oBAAoB,CACxC,IAAI,GAAE,2BAAgC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAuG7B;AA0JD;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,GAAG,SAAS,EAC3D,UAAU,EAAE,kBAAkB,CAAC,YAAY,CAAC,EAC5C,QAAQ,GAAE,gBAAgB,GAAG,aAAgC,GAC5D,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAQvC;AAED,YAAY,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/capabilities/local-context/index.js

@@ -0,0 +1,262 @@
+import { promises as fs, realpathSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { getOctoFlowHome } from "../../utils/octoflow-home.js";
+import { isSafeKey } from "../../utils/safe-key.js";
+import { scanSkillDirs } from "../skills/scanner.js";
+import { resolveIgnoreHarness } from "./harness.js";
+import { VENDOR_DESCRIPTORS } from "./vendors/index.js";
+import { resolveIgnoreHarness as resolveIgnoreHarness2 } from "./harness.js";
+import { VENDOR_DESCRIPTORS as VENDOR_DESCRIPTORS2 } from "./vendors/index.js";
+const DEFAULT_VENDOR_ORDER = [
+  "claude-code",
+  "claude-desktop",
+  "cursor",
+  "vscode",
+  "copilot",
+  "codex",
+  "gemini",
+  "windsurf",
+  "zed",
+  "opencode",
+  "continue",
+  "goose",
+  "amp",
+  "crush",
+  "roo-code",
+  "kilo-code",
+  "junie",
+  "cline",
+  "qwen-code",
+  "trae",
+  "octoflow"
+];
+async function discoverLocalContext(opts = {}) {
+  const home = opts.home ?? os.homedir();
+  const cwd = opts.cwd ?? process.cwd();
+  const platform = opts.platform ?? process.platform;
+  const wantMcp = opts.mcp !== false;
+  const wantSkills = opts.skills !== false;
+  const scopes = new Set(opts.scopes ?? ["project", "user"]);
+  const enabled = resolveEnabledVendors(opts);
+  const harness = resolveIgnoreHarness(
+    opts.ignoreHarness,
+    VENDOR_DESCRIPTORS,
+    process.env
+  );
+  const ignoreKinds = opts.ignoreHarnessKinds ?? { mcp: true, skills: true };
+  const mcpServers = {};
+  const skills = [];
+  const sources = [];
+  const warnings = [];
+  for (const vendorId of enabled) {
+    const d = VENDOR_DESCRIPTORS.get(vendorId);
+    const hit = harness.matches.get(vendorId);
+    if (hit) {
+      opts.onEvent?.(
+        hit.verified ? "local-context:harness:detected" : "local-context:harness:detected:unverified",
+        {
+          vendor: vendorId,
+          matchedEnvVar: hit.envVar,
+          ignoredKinds: ignoreKinds,
+          reason: hit.verified ? void 0 : "unverified-marker-opted-in-by-user"
+        }
+      );
+    }
+    const skipMcp = hit && ignoreKinds.mcp !== false;
+    const skipSkills = hit && ignoreKinds.skills !== false;
+    if (wantMcp && !skipMcp) {
+      for (const conf of d.mcpConfigPaths(cwd, home, platform)) {
+        if (!scopes.has(conf.scope)) continue;
+        await readMcpFile(
+          conf,
+          d,
+          mcpServers,
+          sources,
+          warnings,
+          vendorId,
+          opts
+        );
+      }
+    }
+    if (wantSkills && !skipSkills) {
+      const dirs = d.skillDirs(cwd, home);
+      for (const sd of dirs) {
+        if (!scopes.has(sd.scope)) continue;
+        if (!sd.verified) {
+          opts.onEvent?.("local-context:path:unverified", {
+            vendor: vendorId,
+            path: sd.path
+          });
+        }
+        const parent = path.dirname(sd.path);
+        const rel = path.basename(sd.path);
+        const prefixRel = path.relative(
+          sd.scope === "project" ? cwd : home,
+          sd.path
+        );
+        const scanned = await scanSkillDirs({
+          basePath: parent,
+          scope: sd.scope,
+          vendorPaths: [rel],
+          vendorByPath: () => vendorId
+        });
+        for (const s of scanned) {
+          s._source = { vendor: vendorId, scope: sd.scope, path: s.location };
+          s.source = `${sd.scope}:${prefixRel}`;
+        }
+        if (scanned.length > 0) {
+          sources.push({
+            vendor: vendorId,
+            path: sd.path,
+            scope: sd.scope,
+            type: "skill"
+          });
+          skills.push(...scanned);
+        }
+      }
+    }
+  }
+  opts.onEvent?.("local-context:discovered", {
+    mcpServerCount: Object.keys(mcpServers).length,
+    skillCount: skills.length,
+    sources
+  });
+  return { mcpServers, skills, sources, warnings };
+}
+function resolveEnabledVendors(opts) {
+  const include = opts.vendors && opts.vendors.length > 0 ? new Set(opts.vendors) : null;
+  const exclude = new Set(opts.excludeVendors ?? []);
+  const out = [];
+  for (const id of DEFAULT_VENDOR_ORDER) {
+    const d = VENDOR_DESCRIPTORS.get(id);
+    if (!d) continue;
+    if (include && !include.has(id)) continue;
+    if (exclude.has(id)) continue;
+    if (!d.verified && !(opts.vendors ?? []).includes(id)) continue;
+    out.push(id);
+  }
+  return out;
+}
+async function readMcpFile(conf, d, mcpServers, sources, warnings, vendorId, opts) {
+  let raw;
+  try {
+    let resolved;
+    try {
+      resolved = await fs.realpath(conf.path);
+    } catch {
+      return;
+    }
+    if (!pathIsSafe(resolved, opts.home, opts.cwd)) {
+      opts.onEvent?.("local-context:security:reject", {
+        vendor: vendorId,
+        path: conf.path,
+        reason: "outside-home"
+      });
+      return;
+    }
+    raw = await fs.readFile(resolved, "utf8");
+  } catch {
+    return;
+  }
+  let parsed = raw;
+  if (conf.format === "json") {
+    try {
+      parsed = JSON.parse(raw);
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      warnings.push(`${vendorId} ${conf.path}: ${msg}`);
+      opts.onEvent?.("local-context:parse:warning", {
+        vendor: vendorId,
+        path: conf.path,
+        reason: msg
+      });
+      return;
+    }
+  } else if (conf.format === "yaml") {
+    if (opts.yamlParser) {
+      try {
+        parsed = opts.yamlParser(raw);
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        warnings.push(`${vendorId} ${conf.path}: ${msg}`);
+        opts.onEvent?.("local-context:parse:warning", {
+          vendor: vendorId,
+          path: conf.path,
+          reason: msg
+        });
+        return;
+      }
+    } else {
+      warnings.push(
+        `${vendorId} ${conf.path}: YAML parser not injected \u2014 skipping`
+      );
+      return;
+    }
+  } else if (conf.format === "toml") {
+    if (opts.tomlParser) {
+      try {
+        parsed = opts.tomlParser(raw);
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        warnings.push(`${vendorId} ${conf.path}: ${msg}`);
+        opts.onEvent?.("local-context:parse:warning", {
+          vendor: vendorId,
+          path: conf.path,
+          reason: msg
+        });
+        return;
+      }
+    }
+  }
+  const normalized = d.normalizeMcpConfig(parsed);
+  let added = 0;
+  for (const server of normalized) {
+    const namedServer = server;
+    const name = namedServer._serverName ?? `${vendorId}-${added}`;
+    delete namedServer._serverName;
+    if (!isSafeKey(name)) continue;
+    if (Object.hasOwn(mcpServers, name)) continue;
+    mcpServers[name] = {
+      ...server,
+      _source: { vendor: vendorId, scope: conf.scope, path: conf.path }
+    };
+    added += 1;
+  }
+  if (added > 0) {
+    sources.push({
+      vendor: vendorId,
+      path: conf.path,
+      scope: conf.scope,
+      type: "mcp"
+    });
+  }
+}
+function pathIsSafe(resolved, home, cwd) {
+  const h = home ?? os.homedir();
+  const c = cwd ?? process.cwd();
+  const candidates = [h, c].map((p) => {
+    try {
+      return realpathSync(p);
+    } catch {
+      return p;
+    }
+  });
+  const octoFlowHome = getOctoFlowHome({ home: h });
+  return candidates.some((c2) => resolved.startsWith(c2)) || resolved.startsWith(h) || resolved.startsWith(c) || resolved.startsWith(octoFlowHome);
+}
+function mergeLocalContextMcp(explicit, discovered, priority = "explicit-first") {
+  const out = {};
+  const base = priority === "explicit-first" ? discovered : explicit ?? {};
+  const override = priority === "explicit-first" ? explicit ?? {} : discovered;
+  for (const [k, v] of Object.entries(base)) out[k] = v;
+  for (const [k, v] of Object.entries(override)) out[k] = v;
+  return out;
+}
+export {
+  VENDOR_DESCRIPTORS2 as VENDOR_DESCRIPTORS,
+  discoverLocalContext,
+  mergeLocalContextMcp,
+  resolveIgnoreHarness2 as resolveIgnoreHarness
+};
+//# sourceMappingURL=index.js.map

package/dist/capabilities/local-context/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/capabilities/local-context/index.ts"],
+  "sourcesContent": ["import { promises as fs, realpathSync } from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\n\nimport type {\n  LocalContextOptions,\n  LocalContextVendorId,\n} from '../../runtime/sessions/local-context-types.js';\nimport { getOctoFlowHome } from '../../utils/octoflow-home.js';\nimport { isSafeKey } from '../../utils/safe-key.js';\nimport { scanSkillDirs } from '../skills/scanner.js';\nimport type { AgentSkillMetadata } from '../skills/types.js';\nimport type { BridgeMcpServerConfig } from '../types.js';\nimport { type HarnessResolution, resolveIgnoreHarness } from './harness.js';\nimport type { LocalContextResult, LocalContextSource } from './types.js';\nimport type { McpConfigPath, VendorDescriptor } from './vendors/descriptor.js';\nimport { VENDOR_DESCRIPTORS } from './vendors/index.js';\n\nexport { resolveIgnoreHarness } from './harness.js';\nexport type { LocalContextResult, LocalContextSource } from './types.js';\nexport { VENDOR_DESCRIPTORS } from './vendors/index.js';\n\nexport interface DiscoverLocalContextOptions extends LocalContextOptions {\n  home?: string;\n  platform?: NodeJS.Platform;\n  onEvent?: (name: string, payload: Record<string, unknown>) => void;\n}\n\nconst DEFAULT_VENDOR_ORDER: LocalContextVendorId[] = [\n  'claude-code',\n  'claude-desktop',\n  'cursor',\n  'vscode',\n  'copilot',\n  'codex',\n  'gemini',\n  'windsurf',\n  'zed',\n  'opencode',\n  'continue',\n  'goose',\n  'amp',\n  'crush',\n  'roo-code',\n  'kilo-code',\n  'junie',\n  'cline',\n  'qwen-code',\n  'trae',\n  'octoflow',\n];\n\nexport async function discoverLocalContext(\n  opts: DiscoverLocalContextOptions = {}\n): Promise<LocalContextResult> {\n  const home = opts.home ?? os.homedir();\n  const cwd = opts.cwd ?? process.cwd();\n  const platform = opts.platform ?? process.platform;\n  const wantMcp = opts.mcp !== false;\n  const wantSkills = opts.skills !== false;\n  const scopes = new Set(opts.scopes ?? ['project', 'user']);\n\n  const enabled = resolveEnabledVendors(opts);\n  const harness = resolveIgnoreHarness(\n    opts.ignoreHarness,\n    VENDOR_DESCRIPTORS,\n    process.env\n  );\n  const ignoreKinds = opts.ignoreHarnessKinds ?? { mcp: true, skills: true };\n\n  const mcpServers: LocalContextResult['mcpServers'] = {};\n  const skills: AgentSkillMetadata[] = [];\n  const sources: LocalContextSource[] = [];\n  const warnings: string[] = [];\n\n  for (const vendorId of enabled) {\n    const d = VENDOR_DESCRIPTORS.get(vendorId)!;\n    const hit = harness.matches.get(vendorId);\n    if (hit) {\n      opts.onEvent?.(\n        hit.verified\n          ? 'local-context:harness:detected'\n          : 'local-context:harness:detected:unverified',\n        {\n          vendor: vendorId,\n          matchedEnvVar: hit.envVar,\n          ignoredKinds: ignoreKinds,\n          reason: hit.verified\n            ? undefined\n            : 'unverified-marker-opted-in-by-user',\n        }\n      );\n    }\n    const skipMcp = hit && ignoreKinds.mcp !== false;\n    const skipSkills = hit && ignoreKinds.skills !== false;\n\n    if (wantMcp && !skipMcp) {\n      for (const conf of d.mcpConfigPaths(cwd, home, platform)) {\n        if (!scopes.has(conf.scope)) continue;\n        await readMcpFile(\n          conf,\n          d,\n          mcpServers,\n          sources,\n          warnings,\n          vendorId,\n          opts\n        );\n      }\n    }\n\n    if (wantSkills && !skipSkills) {\n      const dirs = d.skillDirs(cwd, home);\n      for (const sd of dirs) {\n        if (!scopes.has(sd.scope)) continue;\n        if (!sd.verified) {\n          opts.onEvent?.('local-context:path:unverified', {\n            vendor: vendorId,\n            path: sd.path,\n          });\n        }\n        const parent = path.dirname(sd.path);\n        const rel = path.basename(sd.path);\n        const prefixRel = path.relative(\n          sd.scope === 'project' ? cwd : home,\n          sd.path\n        );\n        const scanned = await scanSkillDirs({\n          basePath: parent,\n          scope: sd.scope,\n          vendorPaths: [rel],\n          vendorByPath: () => vendorId,\n        });\n        for (const s of scanned) {\n          s._source = { vendor: vendorId, scope: sd.scope, path: s.location };\n          s.source = `${sd.scope}:${prefixRel}`;\n        }\n        if (scanned.length > 0) {\n          sources.push({\n            vendor: vendorId,\n            path: sd.path,\n            scope: sd.scope,\n            type: 'skill',\n          });\n          skills.push(...scanned);\n        }\n      }\n    }\n  }\n\n  opts.onEvent?.('local-context:discovered', {\n    mcpServerCount: Object.keys(mcpServers).length,\n    skillCount: skills.length,\n    sources,\n  });\n\n  return { mcpServers, skills, sources, warnings };\n}\n\nfunction resolveEnabledVendors(\n  opts: LocalContextOptions\n): LocalContextVendorId[] {\n  const include =\n    opts.vendors && opts.vendors.length > 0 ? new Set(opts.vendors) : null;\n  const exclude = new Set(opts.excludeVendors ?? []);\n  const out: LocalContextVendorId[] = [];\n  for (const id of DEFAULT_VENDOR_ORDER) {\n    const d = VENDOR_DESCRIPTORS.get(id);\n    if (!d) continue;\n    if (include && !include.has(id)) continue;\n    if (exclude.has(id)) continue;\n    // Unverified vendors ship gated: only active when user explicitly lists them.\n    if (!d.verified && !(opts.vendors ?? []).includes(id)) continue;\n    out.push(id);\n  }\n  return out;\n}\n\nasync function readMcpFile(\n  conf: McpConfigPath,\n  d: VendorDescriptor,\n  mcpServers: LocalContextResult['mcpServers'],\n  sources: LocalContextSource[],\n  warnings: string[],\n  vendorId: LocalContextVendorId,\n  opts: DiscoverLocalContextOptions\n): Promise<void> {\n  let raw: string;\n  try {\n    let resolved: string;\n    try {\n      resolved = await fs.realpath(conf.path);\n    } catch {\n      return;\n    }\n    if (!pathIsSafe(resolved, opts.home, opts.cwd)) {\n      opts.onEvent?.('local-context:security:reject', {\n        vendor: vendorId,\n        path: conf.path,\n        reason: 'outside-home',\n      });\n      return;\n    }\n    raw = await fs.readFile(resolved, 'utf8');\n  } catch {\n    return;\n  }\n\n  let parsed: unknown = raw;\n  if (conf.format === 'json') {\n    try {\n      parsed = JSON.parse(raw) as unknown;\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      warnings.push(`${vendorId} ${conf.path}: ${msg}`);\n      opts.onEvent?.('local-context:parse:warning', {\n        vendor: vendorId,\n        path: conf.path,\n        reason: msg,\n      });\n      return;\n    }\n  } else if (conf.format === 'yaml') {\n    if (opts.yamlParser) {\n      try {\n        parsed = opts.yamlParser(raw);\n      } catch (err) {\n        const msg = err instanceof Error ? err.message : String(err);\n        warnings.push(`${vendorId} ${conf.path}: ${msg}`);\n        opts.onEvent?.('local-context:parse:warning', {\n          vendor: vendorId,\n          path: conf.path,\n          reason: msg,\n        });\n        return;\n      }\n    } else {\n      warnings.push(\n        `${vendorId} ${conf.path}: YAML parser not injected \u2014 skipping`\n      );\n      return;\n    }\n  } else if (conf.format === 'toml') {\n    if (opts.tomlParser) {\n      try {\n        parsed = opts.tomlParser(raw);\n      } catch (err) {\n        const msg = err instanceof Error ? err.message : String(err);\n        warnings.push(`${vendorId} ${conf.path}: ${msg}`);\n        opts.onEvent?.('local-context:parse:warning', {\n          vendor: vendorId,\n          path: conf.path,\n          reason: msg,\n        });\n        return;\n      }\n    }\n    // Default Codex TOML parser consumes the raw string.\n  }\n\n  const normalized = d.normalizeMcpConfig(parsed);\n  let added = 0;\n  for (const server of normalized) {\n    const namedServer = server as BridgeMcpServerConfig & {\n      _serverName?: string;\n    };\n    const name = namedServer._serverName ?? `${vendorId}-${added}`;\n    delete namedServer._serverName;\n    if (!isSafeKey(name)) continue;\n    if (Object.hasOwn(mcpServers, name)) continue;\n    mcpServers[name] = {\n      ...server,\n      _source: { vendor: vendorId, scope: conf.scope, path: conf.path },\n    };\n    added += 1;\n  }\n  if (added > 0) {\n    sources.push({\n      vendor: vendorId,\n      path: conf.path,\n      scope: conf.scope,\n      type: 'mcp',\n    });\n  }\n}\n\nfunction pathIsSafe(\n  resolved: string,\n  home: string | undefined,\n  cwd: string | undefined\n): boolean {\n  const h = home ?? os.homedir();\n  const c = cwd ?? process.cwd();\n  // Resolve symlinks in the boundaries too so /tmp vs /private/tmp on macOS\n  // doesn't spuriously reject.\n  const candidates = [h, c].map((p) => {\n    try {\n      return realpathSync(p);\n    } catch {\n      return p;\n    }\n  });\n  const octoFlowHome = getOctoFlowHome({ home: h });\n  return (\n    candidates.some((c2) => resolved.startsWith(c2)) ||\n    resolved.startsWith(h) ||\n    resolved.startsWith(c) ||\n    resolved.startsWith(octoFlowHome)\n  );\n}\n\n/**\n * Merge locally-discovered MCP servers with explicit bridge config.\n */\nexport function mergeLocalContextMcp(\n  explicit: Record<string, BridgeMcpServerConfig> | undefined,\n  discovered: LocalContextResult['mcpServers'],\n  priority: 'explicit-first' | 'local-first' = 'explicit-first'\n): Record<string, BridgeMcpServerConfig> {\n  const out: Record<string, BridgeMcpServerConfig> = {};\n  const base = priority === 'explicit-first' ? discovered : (explicit ?? {});\n  const override =\n    priority === 'explicit-first' ? (explicit ?? {}) : discovered;\n  for (const [k, v] of Object.entries(base)) out[k] = v;\n  for (const [k, v] of Object.entries(override)) out[k] = v;\n  return out;\n}\n\nexport type { HarnessResolution };\n"],
+  "mappings": "AAAA,SAAS,YAAY,IAAI,oBAAoB;AAC7C,OAAO,QAAQ;AACf,OAAO,UAAU;AAMjB,SAAS,uBAAuB;AAChC,SAAS,iBAAiB;AAC1B,SAAS,qBAAqB;AAG9B,SAAiC,4BAA4B;AAG7D,SAAS,0BAA0B;AAEnC,SAAS,wBAAAA,6BAA4B;AAErC,SAAS,sBAAAC,2BAA0B;AAQnC,MAAM,uBAA+C;AAAA,EACnD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,eAAsB,qBACpB,OAAoC,CAAC,GACR;AAC7B,QAAM,OAAO,KAAK,QAAQ,GAAG,QAAQ;AACrC,QAAM,MAAM,KAAK,OAAO,QAAQ,IAAI;AACpC,QAAM,WAAW,KAAK,YAAY,QAAQ;AAC1C,QAAM,UAAU,KAAK,QAAQ;AAC7B,QAAM,aAAa,KAAK,WAAW;AACnC,QAAM,SAAS,IAAI,IAAI,KAAK,UAAU,CAAC,WAAW,MAAM,CAAC;AAEzD,QAAM,UAAU,sBAAsB,IAAI;AAC1C,QAAM,UAAU;AAAA,IACd,KAAK;AAAA,IACL;AAAA,IACA,QAAQ;AAAA,EACV;AACA,QAAM,cAAc,KAAK,sBAAsB,EAAE,KAAK,MAAM,QAAQ,KAAK;AAEzE,QAAM,aAA+C,CAAC;AACtD,QAAM,SAA+B,CAAC;AACtC,QAAM,UAAgC,CAAC;AACvC,QAAM,WAAqB,CAAC;AAE5B,aAAW,YAAY,SAAS;AAC9B,UAAM,IAAI,mBAAmB,IAAI,QAAQ;AACzC,UAAM,MAAM,QAAQ,QAAQ,IAAI,QAAQ;AACxC,QAAI,KAAK;AACP,WAAK;AAAA,QACH,IAAI,WACA,mCACA;AAAA,QACJ;AAAA,UACE,QAAQ;AAAA,UACR,eAAe,IAAI;AAAA,UACnB,cAAc;AAAA,UACd,QAAQ,IAAI,WACR,SACA;AAAA,QACN;AAAA,MACF;AAAA,IACF;AACA,UAAM,UAAU,OAAO,YAAY,QAAQ;AAC3C,UAAM,aAAa,OAAO,YAAY,WAAW;AAEjD,QAAI,WAAW,CAAC,SAAS;AACvB,iBAAW,QAAQ,EAAE,eAAe,KAAK,MAAM,QAAQ,GAAG;AACxD,YAAI,CAAC,OAAO,IAAI,KAAK,KAAK,EAAG;AAC7B,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,cAAc,CAAC,YAAY;AAC7B,YAAM,OAAO,EAAE,UAAU,KAAK,IAAI;AAClC,iBAAW,MAAM,MAAM;AACrB,YAAI,CAAC,OAAO,IAAI,GAAG,KAAK,EAAG;AAC3B,YAAI,CAAC,GAAG,UAAU;AAChB,eAAK,UAAU,iCAAiC;AAAA,YAC9C,QAAQ;AAAA,YACR,MAAM,GAAG;AAAA,UACX,CAAC;AAAA,QACH;AACA,cAAM,SAAS,KAAK,QAAQ,GAAG,IAAI;AACnC,cAAM,MAAM,KAAK,SAAS,GAAG,IAAI;AACjC,cAAM,YAAY,KAAK;AAAA,UACrB,GAAG,UAAU,YAAY,MAAM;AAAA,UAC/B,GAAG;AAAA,QACL;AACA,cAAM,UAAU,MAAM,cAAc;AAAA,UAClC,UAAU;AAAA,UACV,OAAO,GAAG;AAAA,UACV,aAAa,CAAC,GAAG;AAAA,UACjB,cAAc,MAAM;AAAA,QACtB,CAAC;AACD,mBAAW,KAAK,SAAS;AACvB,YAAE,UAAU,EAAE,QAAQ,UAAU,OAAO,GAAG,OAAO,MAAM,EAAE,SAAS;AAClE,YAAE,SAAS,GAAG,GAAG,KAAK,IAAI,SAAS;AAAA,QACrC;AACA,YAAI,QAAQ,SAAS,GAAG;AACtB,kBAAQ,KAAK;AAAA,YACX,QAAQ;AAAA,YACR,MAAM,GAAG;AAAA,YACT,OAAO,GAAG;AAAA,YACV,MAAM;AAAA,UACR,CAAC;AACD,iBAAO,KAAK,GAAG,OAAO;AAAA,QACxB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,OAAK,UAAU,4BAA4B;AAAA,IACzC,gBAAgB,OAAO,KAAK,UAAU,EAAE;AAAA,IACxC,YAAY,OAAO;AAAA,IACnB;AAAA,EACF,CAAC;AAED,SAAO,EAAE,YAAY,QAAQ,SAAS,SAAS;AACjD;AAEA,SAAS,sBACP,MACwB;AACxB,QAAM,UACJ,KAAK,WAAW,KAAK,QAAQ,SAAS,IAAI,IAAI,IAAI,KAAK,OAAO,IAAI;AACpE,QAAM,UAAU,IAAI,IAAI,KAAK,kBAAkB,CAAC,CAAC;AACjD,QAAM,MAA8B,CAAC;AACrC,aAAW,MAAM,sBAAsB;AACrC,UAAM,IAAI,mBAAmB,IAAI,EAAE;AACnC,QAAI,CAAC,EAAG;AACR,QAAI,WAAW,CAAC,QAAQ,IAAI,EAAE,EAAG;AACjC,QAAI,QAAQ,IAAI,EAAE,EAAG;AAErB,QAAI,CAAC,EAAE,YAAY,EAAE,KAAK,WAAW,CAAC,GAAG,SAAS,EAAE,EAAG;AACvD,QAAI,KAAK,EAAE;AAAA,EACb;AACA,SAAO;AACT;AAEA,eAAe,YACb,MACA,GACA,YACA,SACA,UACA,UACA,MACe;AACf,MAAI;AACJ,MAAI;AACF,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,GAAG,SAAS,KAAK,IAAI;AAAA,IACxC,QAAQ;AACN;AAAA,IACF;AACA,QAAI,CAAC,WAAW,UAAU,KAAK,MAAM,KAAK,GAAG,GAAG;AAC9C,WAAK,UAAU,iCAAiC;AAAA,QAC9C,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX,QAAQ;AAAA,MACV,CAAC;AACD;AAAA,IACF;AACA,UAAM,MAAM,GAAG,SAAS,UAAU,MAAM;AAAA,EAC1C,QAAQ;AACN;AAAA,EACF;AAEA,MAAI,SAAkB;AACtB,MAAI,KAAK,WAAW,QAAQ;AAC1B,QAAI;AACF,eAAS,KAAK,MAAM,GAAG;AAAA,IACzB,SAAS,KAAK;AACZ,YAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,eAAS,KAAK,GAAG,QAAQ,IAAI,KAAK,IAAI,KAAK,GAAG,EAAE;AAChD,WAAK,UAAU,+BAA+B;AAAA,QAC5C,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX,QAAQ;AAAA,MACV,CAAC;AACD;AAAA,IACF;AAAA,EACF,WAAW,KAAK,WAAW,QAAQ;AACjC,QAAI,KAAK,YAAY;AACnB,UAAI;AACF,iBAAS,KAAK,WAAW,GAAG;AAAA,MAC9B,SAAS,KAAK;AACZ,cAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,iBAAS,KAAK,GAAG,QAAQ,IAAI,KAAK,IAAI,KAAK,GAAG,EAAE;AAChD,aAAK,UAAU,+BAA+B;AAAA,UAC5C,QAAQ;AAAA,UACR,MAAM,KAAK;AAAA,UACX,QAAQ;AAAA,QACV,CAAC;AACD;AAAA,MACF;AAAA,IACF,OAAO;AACL,eAAS;AAAA,QACP,GAAG,QAAQ,IAAI,KAAK,IAAI;AAAA,MAC1B;AACA;AAAA,IACF;AAAA,EACF,WAAW,KAAK,WAAW,QAAQ;AACjC,QAAI,KAAK,YAAY;AACnB,UAAI;AACF,iBAAS,KAAK,WAAW,GAAG;AAAA,MAC9B,SAAS,KAAK;AACZ,cAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,iBAAS,KAAK,GAAG,QAAQ,IAAI,KAAK,IAAI,KAAK,GAAG,EAAE;AAChD,aAAK,UAAU,+BAA+B;AAAA,UAC5C,QAAQ;AAAA,UACR,MAAM,KAAK;AAAA,UACX,QAAQ;AAAA,QACV,CAAC;AACD;AAAA,MACF;AAAA,IACF;AAAA,EAEF;AAEA,QAAM,aAAa,EAAE,mBAAmB,MAAM;AAC9C,MAAI,QAAQ;AACZ,aAAW,UAAU,YAAY;AAC/B,UAAM,cAAc;AAGpB,UAAM,OAAO,YAAY,eAAe,GAAG,QAAQ,IAAI,KAAK;AAC5D,WAAO,YAAY;AACnB,QAAI,CAAC,UAAU,IAAI,EAAG;AACtB,QAAI,OAAO,OAAO,YAAY,IAAI,EAAG;AACrC,eAAW,IAAI,IAAI;AAAA,MACjB,GAAG;AAAA,MACH,SAAS,EAAE,QAAQ,UAAU,OAAO,KAAK,OAAO,MAAM,KAAK,KAAK;AAAA,IAClE;AACA,aAAS;AAAA,EACX;AACA,MAAI,QAAQ,GAAG;AACb,YAAQ,KAAK;AAAA,MACX,QAAQ;AAAA,MACR,MAAM,KAAK;AAAA,MACX,OAAO,KAAK;AAAA,MACZ,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AACF;AAEA,SAAS,WACP,UACA,MACA,KACS;AACT,QAAM,IAAI,QAAQ,GAAG,QAAQ;AAC7B,QAAM,IAAI,OAAO,QAAQ,IAAI;AAG7B,QAAM,aAAa,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM;AACnC,QAAI;AACF,aAAO,aAAa,CAAC;AAAA,IACvB,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,CAAC;AACD,QAAM,eAAe,gBAAgB,EAAE,MAAM,EAAE,CAAC;AAChD,SACE,WAAW,KAAK,CAAC,OAAO,SAAS,WAAW,EAAE,CAAC,KAC/C,SAAS,WAAW,CAAC,KACrB,SAAS,WAAW,CAAC,KACrB,SAAS,WAAW,YAAY;AAEpC;AAKO,SAAS,qBACd,UACA,YACA,WAA6C,kBACN;AACvC,QAAM,MAA6C,CAAC;AACpD,QAAM,OAAO,aAAa,mBAAmB,aAAc,YAAY,CAAC;AACxE,QAAM,WACJ,aAAa,mBAAoB,YAAY,CAAC,IAAK;AACrD,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAAI,EAAG,KAAI,CAAC,IAAI;AACpD,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,QAAQ,EAAG,KAAI,CAAC,IAAI;AACxD,SAAO;AACT;",
+  "names": ["resolveIgnoreHarness", "VENDOR_DESCRIPTORS"]
+}

package/dist/capabilities/local-context/toml-parser.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Scoped TOML parser — supports the exact subset Codex `config.toml` uses:
+ *   - [mcp_servers.<name>]             server headers
+ *   - [mcp_servers.<name>.env]         env sub-tables
+ *   - quoted strings, integers, booleans
+ *   - inline string arrays: `args = ["--foo", "bar"]`
+ *   - comments (#) and blank lines
+ *
+ * Anything outside this grammar emits a warning and the offending server is
+ * skipped — callers get `local-context:parse:warning`. Users needing full
+ * TOML can install `smol-toml` and inject it via `localContext.tomlParser`.
+ */
+interface ParsedMcpServers {
+    servers: Record<string, ParsedMcpServer>;
+    warnings: string[];
+}
+interface ParsedMcpServer {
+    command?: string;
+    args?: string[];
+    url?: string;
+    transport?: string;
+    env?: Record<string, string>;
+}
+export declare function parseCodexMcpToml(raw: string): ParsedMcpServers;
+export {};
+//# sourceMappingURL=toml-parser.d.ts.map

package/dist/capabilities/local-context/toml-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toml-parser.d.ts","sourceRoot":"","sources":["../../../src/capabilities/local-context/toml-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,UAAU,gBAAgB;IACxB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACzC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,UAAU,eAAe;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAOD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAkE/D"}

package/dist/capabilities/local-context/toml-parser.js

@@ -0,0 +1,158 @@
+import { isSafeKey } from "../../utils/safe-key.js";
+const SERVER_HEADER_RE = /^\[mcp_servers\.([A-Za-z0-9_-]+)\]$/;
+const SERVER_ENV_HEADER_RE = /^\[mcp_servers\.([A-Za-z0-9_-]+)\.env\]$/;
+function parseCodexMcpToml(raw) {
+  const lines = raw.split(/\r?\n/);
+  const servers = {};
+  const warnings = [];
+  let current = null;
+  for (let i = 0; i < lines.length; i += 1) {
+    const rawLine = lines[i] ?? "";
+    const line = stripInlineComment(rawLine).trim();
+    if (!line) continue;
+    if (line.startsWith("[")) {
+      const serverMatch = SERVER_HEADER_RE.exec(line);
+      if (serverMatch) {
+        const name = serverMatch[1];
+        if (!isSafeKey(name)) {
+          current = null;
+          continue;
+        }
+        if (!Object.hasOwn(servers, name)) servers[name] = {};
+        current = { name, target: servers[name] };
+        continue;
+      }
+      const envMatch = SERVER_ENV_HEADER_RE.exec(line);
+      if (envMatch) {
+        const name = envMatch[1];
+        if (!isSafeKey(name)) {
+          current = null;
+          continue;
+        }
+        if (!Object.hasOwn(servers, name)) servers[name] = {};
+        const server = servers[name];
+        if (!server.env) server.env = {};
+        current = { name, target: server.env };
+        continue;
+      }
+      current = null;
+      continue;
+    }
+    if (!current) continue;
+    const eq = line.indexOf("=");
+    if (eq < 0) {
+      warnings.push(
+        `toml: unparseable line in [mcp_servers.${current.name}]: "${rawLine.trim()}"`
+      );
+      continue;
+    }
+    const key = line.slice(0, eq).trim();
+    const rawValue = line.slice(eq + 1).trim();
+    if (!key) continue;
+    const value = parseValue(rawValue);
+    if (value === void 0) {
+      warnings.push(
+        `toml: unsupported value for "${key}" in [mcp_servers.${current.name}]`
+      );
+      continue;
+    }
+    assign(current.target, key, value);
+  }
+  return { servers, warnings };
+}
+function assign(target, key, value) {
+  if (!isSafeKey(key)) return;
+  const plain = target;
+  if (key === "args") {
+    if (Array.isArray(value)) {
+      target.args = value;
+    }
+    return;
+  }
+  if (key === "command" || key === "url" || key === "transport") {
+    if (typeof value === "string") target[key] = value;
+    return;
+  }
+  if (typeof value === "string") {
+    plain[key] = value;
+  } else if (typeof value === "number" || typeof value === "boolean") {
+    plain[key] = String(value);
+  }
+}
+function parseValue(raw) {
+  if (!raw) return void 0;
+  if (raw.startsWith("[")) {
+    if (!raw.endsWith("]")) return void 0;
+    return parseInlineArray(raw);
+  }
+  if (raw.startsWith('"') && raw.endsWith('"') || raw.startsWith("'") && raw.endsWith("'")) {
+    return raw.slice(1, -1);
+  }
+  if (raw === "true") return true;
+  if (raw === "false") return false;
+  if (/^-?\d+(\.\d+)?$/.test(raw)) return Number(raw);
+  return raw;
+}
+function parseInlineArray(raw) {
+  const inner = raw.slice(1, -1).trim();
+  if (!inner) return [];
+  const out = [];
+  let buf = "";
+  let inSingle = false;
+  let inDouble = false;
+  for (let i = 0; i < inner.length; i += 1) {
+    const ch = inner[i];
+    if (ch === "\\") {
+      buf += ch + (inner[i + 1] ?? "");
+      i += 1;
+      continue;
+    }
+    if (ch === "'" && !inDouble) {
+      inSingle = !inSingle;
+      buf += ch;
+      continue;
+    }
+    if (ch === '"' && !inSingle) {
+      inDouble = !inDouble;
+      buf += ch;
+      continue;
+    }
+    if (ch === "," && !inSingle && !inDouble) {
+      const item = stripQuotes(buf.trim());
+      if (item !== void 0) out.push(item);
+      buf = "";
+      continue;
+    }
+    buf += ch;
+  }
+  if (buf.trim()) {
+    const item = stripQuotes(buf.trim());
+    if (item !== void 0) out.push(item);
+  }
+  return out;
+}
+function stripQuotes(s) {
+  if (s.startsWith('"') && s.endsWith('"') || s.startsWith("'") && s.endsWith("'")) {
+    return s.slice(1, -1);
+  }
+  return s || void 0;
+}
+function stripInlineComment(line) {
+  let inSingle = false;
+  let inDouble = false;
+  for (let i = 0; i < line.length; i += 1) {
+    const ch = line[i];
+    if (ch === "\\") {
+      i += 1;
+      continue;
+    }
+    if (ch === "'" && !inDouble) inSingle = !inSingle;
+    else if (ch === '"' && !inSingle) inDouble = !inDouble;
+    else if (ch === "#" && !inSingle && !inDouble) return line.slice(0, i);
+  }
+  return line;
+}
+export {
+  parseCodexMcpToml
+};
+//# sourceMappingURL=toml-parser.js.map