opensquid 0.5.395

package/dist/setup/wizard/codex-hooks-writer.js

@@ -0,0 +1,104 @@
+/**
+ * T-CODEX-HOST-SHELL CHS.1 — pure projection of opensquid's hook entries
+ * into codex's `~/.codex/hooks.json` (the user layer).
+ *
+ * Codex 0.139's hook engine is deliberately Claude Code-compatible
+ * (`ClaudeHooksEngine`, codex-rs/hooks/src/registry.rs): same JSON shape,
+ * same stdin payload family, same permissionDecision outputs — so the shell
+ * is CONFIG, not adapter code. Two codex-specific disciplines live here:
+ *
+ *   1. NO SessionEnd entry EVER: codex has no SessionEnd event and its Stop
+ *      is TURN-scoped ("Stop run at turn scope", developers.openai.com/codex/
+ *      hooks) — wiring opensquid-hook-sessionend to Stop would clear the
+ *      coding-flow FSM every turn.
+ *   2. ABSOLUTE bin paths: Claude Code resolves PATH for bare names
+ *      (settings-writer writes them bare); codex hook spawns carry no PATH
+ *      guarantee, so `resolveHookBinDir()` is a hard deliverable here.
+ *
+ * Idempotency = the 0.5.378 ownership discipline: `isOpensquidHookEntry`
+ * (shared predicate) + per-entry surgery — re-runs replace ours, preserve
+ * foreign groups byte-intact, excise ours from mixed groups keeping foreign
+ * siblings.
+ *
+ * Imports from: node:fs, node:path, ./settings-writer.js.
+ * Imported by: src/setup/cli/codex_hooks.ts, src/setup/cli/doctor.ts.
+ */
+import { existsSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { OPENSQUID_BIN_FOR_EVENT, isOpensquidHookEntry } from './settings-writer.js';
+/** The five codex events we wire (NO SessionEnd — see header). */
+export const CODEX_EVENTS = [
+    'PreToolUse',
+    'PostToolUse',
+    'UserPromptSubmit',
+    'Stop',
+    'SessionStart',
+];
+const TIMEOUT_S = {
+    PreToolUse: 360, // the 0.5.376 audit-window sizing
+    PostToolUse: 60,
+    UserPromptSubmit: 60,
+    Stop: 60,
+    SessionStart: 60,
+};
+/** The 0.5.378 per-entry surgery: wholly-ours group → drop; wholly-foreign →
+ *  untouched; mixed → excise ours, keep foreign siblings. */
+export function pruneOpensquidFromGroup(group) {
+    const foreign = group.hooks.filter((h) => !isOpensquidHookEntry(h));
+    if (foreign.length === 0)
+        return null;
+    if (foreign.length === group.hooks.length)
+        return group;
+    return { ...group, hooks: foreign };
+}
+/** The dir holding the opensquid-hook-* shims: npm/pnpm install every bin of
+ *  this package into ONE dir, and process.argv[1] is the running `opensquid`
+ *  shim — its dirname is that dir. Throws (fail-loud; the wizard step turns
+ *  it into a cancel) when the sibling shim is missing — bare names are NOT
+ *  an acceptable fallback for codex (no PATH guarantee at hook spawn). */
+export function resolveHookBinDir() {
+    const dir = dirname(process.argv[1] ?? '');
+    if (!existsSync(join(dir, 'opensquid-hook-pretooluse'))) {
+        throw new Error(`codex-hooks: opensquid-hook-* shims not found beside the CLI (${dir}) — re-run npm/pnpm install/link`);
+    }
+    return dir;
+}
+export function projectCodexHooks(input) {
+    const next = { ...input.current, hooks: { ...(input.current.hooks ?? {}) } };
+    let added = 0;
+    let replaced = 0;
+    let preserved = 0;
+    const hooks = next.hooks ?? {};
+    for (const event of CODEX_EVENTS) {
+        const groups = hooks[event] ?? [];
+        // Replacement is counted at the ENTRY level (did pruning remove any of
+        // ours?), NOT group-drop level — the mixed-group case (ours excised,
+        // foreign siblings kept) modifies a group without dropping it.
+        const oursBefore = groups.reduce((n, g) => n + g.hooks.filter((h) => isOpensquidHookEntry(h)).length, 0);
+        const foreign = groups
+            .map((g) => pruneOpensquidFromGroup(g))
+            .filter((g) => g !== null);
+        if (oursBefore > 0)
+            replaced += 1;
+        else
+            added += 1;
+        preserved += foreign.length;
+        foreign.push({
+            // codex matchers are REGEX — anchored catch-all (delta-4 anchoring
+            // discipline; pinned by a fixture).
+            matcher: '^.*$',
+            hooks: [
+                {
+                    type: 'command',
+                    command: join(input.binDir, OPENSQUID_BIN_FOR_EVENT[event]),
+                    timeout: TIMEOUT_S[event],
+                    '@opensquid': true,
+                },
+            ],
+        });
+        hooks[event] = foreign;
+    }
+    next.hooks = hooks;
+    return { next, added, replaced, preserved };
+}
+//# sourceMappingURL=codex-hooks-writer.js.map

package/dist/setup/wizard/codex-hooks-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-hooks-writer.js","sourceRoot":"","sources":["../../../src/setup/wizard/codex-hooks-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAErF,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,MAAM;IACN,cAAc;CACN,CAAC;AAGX,MAAM,SAAS,GAA+B;IAC5C,UAAU,EAAE,GAAG,EAAE,kCAAkC;IACnD,WAAW,EAAE,EAAE;IACf,gBAAgB,EAAE,EAAE;IACpB,IAAI,EAAE,EAAE;IACR,YAAY,EAAE,EAAE;CACjB,CAAC;AAsBF;6DAC6D;AAC7D,MAAM,UAAU,uBAAuB,CAAC,KAAwB;IAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxD,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED;;;;0EAI0E;AAC1E,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,iEAAiE,GAAG,kCAAkC,CACvG,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,MAAM,UAAU,iBAAiB,CAAC,KAGjC;IACC,MAAM,IAAI,GAAmB,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;IAC7F,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClC,uEAAuE;QACvE,qEAAqE;QACrE,+DAA+D;QAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EACnE,CAAC,CACF,CAAC;QACF,MAAM,OAAO,GAAG,MAAM;aACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;aACtC,MAAM,CAAC,CAAC,CAAC,EAA0B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACrD,IAAI,UAAU,GAAG,CAAC;YAAE,QAAQ,IAAI,CAAC,CAAC;;YAC7B,KAAK,IAAI,CAAC,CAAC;QAChB,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC;YACX,mEAAmE;YACnE,oCAAoC;YACpC,OAAO,EAAE,MAAM;YACf,KAAK,EAAE;gBACL;oBACE,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,KAAK,CAAC,CAAC;oBAC3D,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC;oBACzB,YAAY,EAAE,IAAI;iBACnB;aACF;SACF,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACnB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC9C,CAAC"}

package/dist/setup/wizard/git-hooks.d.ts

@@ -0,0 +1,49 @@
+/**
+ * GF.2 — install / check the opensquid-managed git `pre-commit` + `pre-push` hooks.
+ *
+ * PGB.1 (T-fix-pushgate-bypass): installation is a pure GATE-FIRST composition.
+ * The previous installer APPENDED the gate call to a foreign hook — unsound for any
+ * foreign hook that ends in `exec`/`exit` (the repo's own PP.1 quality hook does:
+ * `exec pnpm prepush` made the appended gate block unreachable dead code, which is
+ * how a code push bypassed the flow gate on 2026-06-10). `composeHook` now prepends
+ * the managed block directly after the shebang, so the gate ALWAYS runs first and
+ * the foreign body keeps its exact semantics afterward. It also REPAIRS any layout
+ * where managed lines exist elsewhere (today's dead-block file), idempotently.
+ *
+ * The hooks carry the `@opensquid managed hook` MARKER so `opensquid doctor git-hooks`
+ * can recognise them. `checkGitHooks` additionally detects `unreachable` — marker
+ * present but a process-terminating line (`exec`/`exit`) precedes it. Installation is
+ * OPT-IN (explicit `opensquid gate install`), never automatic; a foreign hook body is
+ * preserved verbatim, never clobbered.
+ *
+ * Imported by: src/setup/cli/gate.ts (install), src/setup/cli/doctor.ts (check).
+ */
+export declare const OPENSQUID_HOOK_MARKER = "@opensquid managed hook";
+type HookBoundary = 'commit' | 'push' | 'attest';
+export type GitHookState = 'installed' | 'missing' | 'foreign' | 'unreachable';
+export interface GitHookStatus {
+    name: string;
+    state: GitHookState;
+}
+/**
+ * Pure: compose an existing hook body (or null/empty) into the canonical gate-first
+ * layout: shebang → managed block → foreign body verbatim. Strips ALL prior managed
+ * lines wherever they sit, so it both installs and repairs (e.g. a gate block left
+ * dead below a foreign `exec`). A foreign line that itself invokes `opensquid gate
+ * <boundary>` is treated as managed and stripped — keeping it would double-run the
+ * gate. Idempotent: composeHook(composeHook(x)) === composeHook(x).
+ */
+export declare function composeHook(existing: string | null, boundary: HookBoundary): string;
+/** Marker present but a terminal line precedes it → the managed gate can never run. */
+export declare function isMarkerUnreachable(content: string): boolean;
+/** Install (idempotent) both hooks into `<repoRoot>/.git/hooks` via gate-first
+ *  composition. A foreign body is preserved verbatim BELOW the gate; a broken layout
+ *  (dead managed block) is repaired. `installed` = the file is purely managed;
+ *  `foreign` = a user body rides below the gate. */
+export declare function installGitHooks(repoRoot: string): Promise<GitHookStatus[]>;
+/** Report installation state without writing. `missing` = no hook; `foreign` = a hook
+ *  exists but carries no opensquid marker; `unreachable` = the marker exists but a
+ *  preceding `exec`/`exit` makes the gate dead code; `installed` = the gate runs. */
+export declare function checkGitHooks(repoRoot: string): Promise<GitHookStatus[]>;
+export {};
+//# sourceMappingURL=git-hooks.d.ts.map

package/dist/setup/wizard/git-hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-hooks.d.ts","sourceRoot":"","sources":["../../../src/setup/wizard/git-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAE/D,KAAK,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;AAejD,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;AAC/E,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,YAAY,CAAC;CACrB;AAOD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,QAAQ,EAAE,YAAY,GAAG,MAAM,CAanF;AAED,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAK5D;AAED;;;oDAGoD;AACpD,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAchF;AAED;;qFAEqF;AACrF,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAW9E"}

package/dist/setup/wizard/git-hooks.js

@@ -0,0 +1,106 @@
+/**
+ * GF.2 — install / check the opensquid-managed git `pre-commit` + `pre-push` hooks.
+ *
+ * PGB.1 (T-fix-pushgate-bypass): installation is a pure GATE-FIRST composition.
+ * The previous installer APPENDED the gate call to a foreign hook — unsound for any
+ * foreign hook that ends in `exec`/`exit` (the repo's own PP.1 quality hook does:
+ * `exec pnpm prepush` made the appended gate block unreachable dead code, which is
+ * how a code push bypassed the flow gate on 2026-06-10). `composeHook` now prepends
+ * the managed block directly after the shebang, so the gate ALWAYS runs first and
+ * the foreign body keeps its exact semantics afterward. It also REPAIRS any layout
+ * where managed lines exist elsewhere (today's dead-block file), idempotently.
+ *
+ * The hooks carry the `@opensquid managed hook` MARKER so `opensquid doctor git-hooks`
+ * can recognise them. `checkGitHooks` additionally detects `unreachable` — marker
+ * present but a process-terminating line (`exec`/`exit`) precedes it. Installation is
+ * OPT-IN (explicit `opensquid gate install`), never automatic; a foreign hook body is
+ * preserved verbatim, never clobbered.
+ *
+ * Imported by: src/setup/cli/gate.ts (install), src/setup/cli/doctor.ts (check).
+ */
+import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+export const OPENSQUID_HOOK_MARKER = '@opensquid managed hook';
+const HOOKS = [
+    { name: 'pre-commit', boundary: 'commit' },
+    { name: 'pre-push', boundary: 'push' },
+    // PGB.2 — post-commit records flow provenance (attestations.jsonl) so a later
+    // session can push these commits without re-proving the flow. `gate attest`
+    // always exits 0; the `|| exit $?` from gateLine is harmless here.
+    { name: 'post-commit', boundary: 'attest' },
+];
+const gateLine = (boundary) => `opensquid gate ${boundary} || exit $?`;
+const managedBlock = (boundary) => `# ${OPENSQUID_HOOK_MARKER}\n${gateLine(boundary)}`;
+const hooksDir = (repoRoot) => join(repoRoot, '.git', 'hooks');
+/** A line after which nothing else in the script can run (process-replace or hard exit). */
+const isTerminalLine = (l) => /^\s*(exec\s|exit\b)/.test(l);
+/**
+ * Pure: compose an existing hook body (or null/empty) into the canonical gate-first
+ * layout: shebang → managed block → foreign body verbatim. Strips ALL prior managed
+ * lines wherever they sit, so it both installs and repairs (e.g. a gate block left
+ * dead below a foreign `exec`). A foreign line that itself invokes `opensquid gate
+ * <boundary>` is treated as managed and stripped — keeping it would double-run the
+ * gate. Idempotent: composeHook(composeHook(x)) === composeHook(x).
+ */
+export function composeHook(existing, boundary) {
+    if (existing === null || existing.trim() === '') {
+        return `#!/bin/sh\n${managedBlock(boundary)}\n`;
+    }
+    const lines = existing
+        .split('\n')
+        .filter((l) => !l.includes(OPENSQUID_HOOK_MARKER) && !l.includes(`opensquid gate ${boundary}`));
+    const shebang = lines[0]?.startsWith('#!') === true ? lines.shift() : '#!/bin/sh';
+    const body = lines.join('\n').replace(/^\n+/, '').replace(/\n*$/, '\n');
+    if (body.trim() === '') {
+        return `${shebang}\n${managedBlock(boundary)}\n`;
+    }
+    return `${shebang}\n${managedBlock(boundary)}\n${body}`;
+}
+/** Marker present but a terminal line precedes it → the managed gate can never run. */
+export function isMarkerUnreachable(content) {
+    const lines = content.split('\n');
+    const marker = lines.findIndex((l) => l.includes(OPENSQUID_HOOK_MARKER));
+    if (marker === -1)
+        return false;
+    return lines.slice(0, marker).some(isTerminalLine);
+}
+/** Install (idempotent) both hooks into `<repoRoot>/.git/hooks` via gate-first
+ *  composition. A foreign body is preserved verbatim BELOW the gate; a broken layout
+ *  (dead managed block) is repaired. `installed` = the file is purely managed;
+ *  `foreign` = a user body rides below the gate. */
+export async function installGitHooks(repoRoot) {
+    const dir = hooksDir(repoRoot);
+    await mkdir(dir, { recursive: true });
+    const out = [];
+    for (const { name, boundary } of HOOKS) {
+        const path = join(dir, name);
+        const existing = await readFile(path, 'utf8').catch(() => null);
+        const next = composeHook(existing, boundary);
+        if (next !== existing)
+            await writeFile(path, next, 'utf8');
+        await chmod(path, 0o755);
+        const pureManaged = next === composeHook(null, boundary);
+        out.push({ name, state: pureManaged ? 'installed' : 'foreign' });
+    }
+    return out;
+}
+/** Report installation state without writing. `missing` = no hook; `foreign` = a hook
+ *  exists but carries no opensquid marker; `unreachable` = the marker exists but a
+ *  preceding `exec`/`exit` makes the gate dead code; `installed` = the gate runs. */
+export async function checkGitHooks(repoRoot) {
+    const dir = hooksDir(repoRoot);
+    const out = [];
+    for (const { name } of HOOKS) {
+        const existing = await readFile(join(dir, name), 'utf8').catch(() => null);
+        if (existing === null)
+            out.push({ name, state: 'missing' });
+        else if (!existing.includes(OPENSQUID_HOOK_MARKER))
+            out.push({ name, state: 'foreign' });
+        else if (isMarkerUnreachable(existing))
+            out.push({ name, state: 'unreachable' });
+        else
+            out.push({ name, state: 'installed' });
+    }
+    return out;
+}
+//# sourceMappingURL=git-hooks.js.map

package/dist/setup/wizard/git-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-hooks.js","sourceRoot":"","sources":["../../../src/setup/wizard/git-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAI/D,MAAM,KAAK,GAAwD;IACjE,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAC1C,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE;IACtC,8EAA8E;IAC9E,4EAA4E;IAC5E,mEAAmE;IACnE,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE;CAC5C,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,QAAsB,EAAU,EAAE,CAAC,kBAAkB,QAAQ,aAAa,CAAC;AAC7F,MAAM,YAAY,GAAG,CAAC,QAAsB,EAAU,EAAE,CACtD,KAAK,qBAAqB,KAAK,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AAQtD,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAE/E,4FAA4F;AAC5F,MAAM,cAAc,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE7E;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,QAAuB,EAAE,QAAsB;IACzE,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChD,OAAO,cAAc,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ;SACnB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,QAAQ,EAAE,CAAC,CAAC,CAAC;IAClG,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAG,CAAC,CAAC,CAAC,WAAW,CAAC;IACnF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvB,OAAO,GAAG,OAAO,KAAK,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,OAAO,KAAK,YAAY,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACzE,IAAI,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AACrD,CAAC;AAED;;;oDAGoD;AACpD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB;IACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,KAAK,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzB,MAAM,WAAW,GAAG,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACzD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;qFAEqF;AACrF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAgB;IAClD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,QAAQ,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;aACvD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;aACpF,IAAI,mBAAmB,CAAC,QAAQ,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;;YAC5E,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/setup/wizard/mcp-hosts.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Host resolution for `setup wizard mcp` multi-host registration (Track MMH.1).
+ *
+ * The opensquid MCP writer (`mcp-writer.ts`) is host-generic — it merges the
+ * opensquid entries into any `{ "mcpServers": { … } }` JSON file and preserves
+ * every other key. The ONLY host-specific knowledge is each host's config-file
+ * path, which differs per platform. This module owns that mapping + the
+ * `--hosts` flag parsing. Everything here is pure (no I/O) so it's trivially
+ * testable across platforms.
+ *
+ * Hosts in the "Claude ecosystem" on one machine each read a SEPARATE config —
+ * registering one does not cover another (the 2026-05-27 "Desktop wasn't aware
+ * of opensquid" gap). See the reference memory on per-host MCP config files.
+ *
+ * Imported by: src/setup/cli/mcp.ts.
+ */
+export type HostId = 'claude-code' | 'claude-desktop' | 'cursor';
+export declare const ALL_HOSTS: readonly HostId[];
+export interface HostTarget {
+    id: HostId;
+    /** Absolute config-file path for this host on this platform. */
+    configPath: string;
+    /** Human label for output + restart reminders. */
+    label: string;
+    /** Whether the app must be restarted to load the servers (binds MCP at start). */
+    needsRestart: boolean;
+}
+export interface HostResolveEnv {
+    platform: NodeJS.Platform;
+    home: string;
+    env: NodeJS.ProcessEnv;
+}
+/** Default resolution context from the live process. */
+export declare function liveResolveEnv(): HostResolveEnv;
+/** Resolve a host id to its per-platform config path. Pure. */
+export declare function resolveHost(id: HostId, e: HostResolveEnv): HostTarget;
+/**
+ * Parse the `--hosts` flag value. Default (undefined/empty) = claude-code ONLY
+ * (D1: no behavior change for existing callers). `all` = every host. A
+ * comma-list selects by id; unknown ids are dropped with a warn (error only
+ * surfaces later if NO valid host remains). De-duplicates, preserves order.
+ */
+export declare function parseHosts(raw: string | undefined, warn: (m: string) => void): HostId[];
+//# sourceMappingURL=mcp-hosts.d.ts.map

package/dist/setup/wizard/mcp-hosts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-hosts.d.ts","sourceRoot":"","sources":["../../../src/setup/wizard/mcp-hosts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,MAAM,MAAM,MAAM,GAAG,aAAa,GAAG,gBAAgB,GAAG,QAAQ,CAAC;AAEjE,eAAO,MAAM,SAAS,EAAE,SAAS,MAAM,EAAgD,CAAC;AAExF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED,wDAAwD;AACxD,wBAAgB,cAAc,IAAI,cAAc,CAE/C;AAED,+DAA+D;AAC/D,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,cAAc,GAAG,UAAU,CAiCrE;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,EAAE,CAevF"}

package/dist/setup/wizard/mcp-hosts.js

@@ -0,0 +1,87 @@
+/**
+ * Host resolution for `setup wizard mcp` multi-host registration (Track MMH.1).
+ *
+ * The opensquid MCP writer (`mcp-writer.ts`) is host-generic — it merges the
+ * opensquid entries into any `{ "mcpServers": { … } }` JSON file and preserves
+ * every other key. The ONLY host-specific knowledge is each host's config-file
+ * path, which differs per platform. This module owns that mapping + the
+ * `--hosts` flag parsing. Everything here is pure (no I/O) so it's trivially
+ * testable across platforms.
+ *
+ * Hosts in the "Claude ecosystem" on one machine each read a SEPARATE config —
+ * registering one does not cover another (the 2026-05-27 "Desktop wasn't aware
+ * of opensquid" gap). See the reference memory on per-host MCP config files.
+ *
+ * Imported by: src/setup/cli/mcp.ts.
+ */
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+export const ALL_HOSTS = ['claude-code', 'claude-desktop', 'cursor'];
+/** Default resolution context from the live process. */
+export function liveResolveEnv() {
+    return { platform: process.platform, home: homedir(), env: process.env };
+}
+/** Resolve a host id to its per-platform config path. Pure. */
+export function resolveHost(id, e) {
+    switch (id) {
+        case 'claude-code':
+            return {
+                id,
+                configPath: join(e.home, '.claude.json'),
+                label: 'Claude Code',
+                needsRestart: false,
+            };
+        case 'claude-desktop': {
+            let dir;
+            if (e.platform === 'darwin') {
+                dir = join(e.home, 'Library', 'Application Support', 'Claude');
+            }
+            else if (e.platform === 'win32') {
+                dir = join(e.env.APPDATA ?? join(e.home, 'AppData', 'Roaming'), 'Claude');
+            }
+            else {
+                dir = join(e.env.XDG_CONFIG_HOME ?? join(e.home, '.config'), 'Claude');
+            }
+            return {
+                id,
+                configPath: join(dir, 'claude_desktop_config.json'),
+                label: 'Claude Desktop',
+                needsRestart: true,
+            };
+        }
+        case 'cursor':
+            return {
+                id,
+                configPath: join(e.home, '.cursor', 'mcp.json'),
+                label: 'Cursor',
+                needsRestart: true,
+            };
+    }
+}
+/**
+ * Parse the `--hosts` flag value. Default (undefined/empty) = claude-code ONLY
+ * (D1: no behavior change for existing callers). `all` = every host. A
+ * comma-list selects by id; unknown ids are dropped with a warn (error only
+ * surfaces later if NO valid host remains). De-duplicates, preserves order.
+ */
+export function parseHosts(raw, warn) {
+    if (raw === undefined || raw.trim() === '')
+        return ['claude-code'];
+    if (raw.trim() === 'all')
+        return [...ALL_HOSTS];
+    const out = [];
+    for (const tok of raw
+        .split(',')
+        .map((s) => s.trim())
+        .filter((s) => s !== '')) {
+        if (ALL_HOSTS.includes(tok)) {
+            if (!out.includes(tok))
+                out.push(tok);
+        }
+        else {
+            warn(`setup wizard mcp: unknown host '${tok}' — skipping (valid: ${ALL_HOSTS.join(', ')})`);
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=mcp-hosts.js.map

package/dist/setup/wizard/mcp-hosts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-hosts.js","sourceRoot":"","sources":["../../../src/setup/wizard/mcp-hosts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,MAAM,CAAC,MAAM,SAAS,GAAsB,CAAC,aAAa,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;AAkBxF,wDAAwD;AACxD,MAAM,UAAU,cAAc;IAC5B,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;AAC3E,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,WAAW,CAAC,EAAU,EAAE,CAAiB;IACvD,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,aAAa;YAChB,OAAO;gBACL,EAAE;gBACF,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,cAAc,CAAC;gBACxC,KAAK,EAAE,aAAa;gBACpB,YAAY,EAAE,KAAK;aACpB,CAAC;QACJ,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC5B,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,CAAC,CAAC;YACjE,CAAC;iBAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC5E,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;YACzE,CAAC;YACD,OAAO;gBACL,EAAE;gBACF,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,4BAA4B,CAAC;gBACnD,KAAK,EAAE,gBAAgB;gBACvB,YAAY,EAAE,IAAI;aACnB,CAAC;QACJ,CAAC;QACD,KAAK,QAAQ;YACX,OAAO;gBACL,EAAE;gBACF,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;gBAC/C,KAAK,EAAE,QAAQ;gBACf,YAAY,EAAE,IAAI;aACnB,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,GAAuB,EAAE,IAAyB;IAC3E,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACnE,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,KAAK;QAAE,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;IAChD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,GAAG;SAClB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;QAC3B,IAAK,SAA+B,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAa,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAa,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,mCAAmC,GAAG,wBAAwB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/setup/wizard/mcp-writer.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Idempotent writer for Claude Code's USER-level MCP server registry (G.8).
+ *
+ * Writes two entries into `~/.claude.json` (or whatever path the caller
+ * supplies — tests inject a tmpdir path):
+ *
+ *   - `opensquid`       → `node <root>/dist/mcp/server.js`
+ *   - `opensquid-chat`  → `node <root>/dist/mcp/chat-bridge-server.js`
+ *
+ * Both entries are tagged `'@opensquid': true` — the marker contract is the
+ * SAME shape as G.1's `settings-writer.ts` hook entries, which lets future
+ * wizard passes (and `opensquid doctor`) distinguish entries this writer
+ * owns from third-party MCP entries (claude.ai-Figma, Notion, Vercel, etc.).
+ *
+ * Every non-`mcpServers` key in `~/.claude.json` is preserved verbatim via
+ * spread round-trip — that file holds tons of per-project state in the
+ * real-world install and MUST NOT get clobbered.
+ *
+ * Legacy detection: an existing `opensquid` entry pointing at the broken
+ * `node <abs>/opensquid/dist/index.js` shape (which silently no-ops — see
+ * memory `opensquid-dist-index-entrypoint-gotcha`) is replaced with the
+ * correct `dist/mcp/server.js` path. Detection trips on (a) the
+ * `'@opensquid': true` marker OR (b) command='node' AND any arg ending in
+ * `dist/index.js` under an `opensquid` path segment — same conservative
+ * stance G.1's `LEGACY_OPENSQUID_PATTERN` takes.
+ *
+ * A `.bak` snapshot is written BEFORE any mutation. The marker contract is
+ * the first line of defense; .bak is the last.
+ *
+ * Engine-vocabulary discipline: this module is the ONLY G.8 file that
+ * names Claude Code's `~/.claude.json` layout. The CLI surface in
+ * `../cli/mcp.ts` is harness-agnostic input/output plumbing only.
+ *
+ * Imported by: src/setup/cli/mcp.ts.
+ */
+export interface McpServerEntry {
+    type?: 'stdio' | 'http';
+    command?: string;
+    args?: string[];
+    env?: Record<string, string>;
+    '@opensquid'?: boolean;
+    [k: string]: unknown;
+}
+interface ClaudeUserConfig {
+    mcpServers?: Record<string, McpServerEntry>;
+    [k: string]: unknown;
+}
+export declare function isLegacyOpensquidEntry(entry: McpServerEntry | undefined): boolean;
+export interface DesiredEntries {
+    opensquid: McpServerEntry;
+    'opensquid-chat': McpServerEntry;
+}
+export declare function buildDesiredEntries(opensquidRepoRoot: string): DesiredEntries;
+export interface McpWriteResult {
+    /** Entry names added fresh (no prior entry under that key). */
+    added: string[];
+    /** Entry names replaced (prior entry existed — opensquid-owned or legacy). */
+    replaced: string[];
+    /** Number of unrelated mcpServers entries preserved verbatim. */
+    preserved: number;
+    /** Path to the `.bak` snapshot. */
+    backupPath: string;
+}
+/** Pure projection. Disk-untouched. Used by both writer and `--dry-run`. */
+export declare function projectOpensquidMcp(input: ClaudeUserConfig, opensquidRepoRoot: string): {
+    output: ClaudeUserConfig;
+    added: string[];
+    replaced: string[];
+    preserved: number;
+};
+/**
+ * Write opensquid's two MCP entries into `~/.claude.json` (path injected).
+ * Creates a `.bak` snapshot (`{}` when the file did not exist). 2-space
+ * JSON indentation matches Claude Code's own format, so `diff <file>.bak
+ * <file>` highlights only the mcpServers delta.
+ */
+export declare function writeOpensquidMcp(claudeConfigPath: string, opensquidRepoRoot: string): Promise<McpWriteResult>;
+/** ENOENT → `{}` (first-run case). All other errors propagate. */
+export declare function readClaudeUserConfig(path: string): Promise<ClaudeUserConfig>;
+export {};
+//# sourceMappingURL=mcp-writer.d.ts.map

package/dist/setup/wizard/mcp-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-writer.d.ts","sourceRoot":"","sources":["../../../src/setup/wizard/mcp-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAMH,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,UAAU,gBAAgB;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5C,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAMD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,SAAS,GAAG,OAAO,CAMjF;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,cAAc,CAAC;IAC1B,gBAAgB,EAAE,cAAc,CAAC;CAClC;AAED,wBAAgB,mBAAmB,CAAC,iBAAiB,EAAE,MAAM,GAAG,cAAc,CAiB7E;AAED,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,4EAA4E;AAC5E,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,gBAAgB,EACvB,iBAAiB,EAAE,MAAM,GACxB;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAqBtF;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,gBAAgB,EAAE,MAAM,EACxB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,cAAc,CAAC,CAQzB;AAED,kEAAkE;AAClE,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAQlF"}

package/dist/setup/wizard/mcp-writer.js

@@ -0,0 +1,115 @@
+/**
+ * Idempotent writer for Claude Code's USER-level MCP server registry (G.8).
+ *
+ * Writes two entries into `~/.claude.json` (or whatever path the caller
+ * supplies — tests inject a tmpdir path):
+ *
+ *   - `opensquid`       → `node <root>/dist/mcp/server.js`
+ *   - `opensquid-chat`  → `node <root>/dist/mcp/chat-bridge-server.js`
+ *
+ * Both entries are tagged `'@opensquid': true` — the marker contract is the
+ * SAME shape as G.1's `settings-writer.ts` hook entries, which lets future
+ * wizard passes (and `opensquid doctor`) distinguish entries this writer
+ * owns from third-party MCP entries (claude.ai-Figma, Notion, Vercel, etc.).
+ *
+ * Every non-`mcpServers` key in `~/.claude.json` is preserved verbatim via
+ * spread round-trip — that file holds tons of per-project state in the
+ * real-world install and MUST NOT get clobbered.
+ *
+ * Legacy detection: an existing `opensquid` entry pointing at the broken
+ * `node <abs>/opensquid/dist/index.js` shape (which silently no-ops — see
+ * memory `opensquid-dist-index-entrypoint-gotcha`) is replaced with the
+ * correct `dist/mcp/server.js` path. Detection trips on (a) the
+ * `'@opensquid': true` marker OR (b) command='node' AND any arg ending in
+ * `dist/index.js` under an `opensquid` path segment — same conservative
+ * stance G.1's `LEGACY_OPENSQUID_PATTERN` takes.
+ *
+ * A `.bak` snapshot is written BEFORE any mutation. The marker contract is
+ * the first line of defense; .bak is the last.
+ *
+ * Engine-vocabulary discipline: this module is the ONLY G.8 file that
+ * names Claude Code's `~/.claude.json` layout. The CLI surface in
+ * `../cli/mcp.ts` is harness-agnostic input/output plumbing only.
+ *
+ * Imported by: src/setup/cli/mcp.ts.
+ */
+import { promises as fs } from 'node:fs';
+// Legacy detector — narrow on purpose. We want to recognise the broken
+// `node /abs/opensquid/dist/index.js` shape ONLY when it lives under the
+// `opensquid` MCP key (the only key this writer manages). Third-party
+// entries with unrelated commands never trip this.
+export function isLegacyOpensquidEntry(entry) {
+    if (entry === undefined)
+        return false;
+    if (entry['@opensquid'] === true)
+        return true;
+    if (entry.command !== 'node')
+        return false;
+    const args = entry.args ?? [];
+    return args.some((a) => typeof a === 'string' && /opensquid\/.*dist\/index\.js$/.test(a));
+}
+export function buildDesiredEntries(opensquidRepoRoot) {
+    return {
+        opensquid: {
+            type: 'stdio',
+            command: 'node',
+            args: [`${opensquidRepoRoot}/dist/mcp/server.js`],
+            env: {},
+            '@opensquid': true,
+        },
+        'opensquid-chat': {
+            type: 'stdio',
+            command: 'node',
+            args: [`${opensquidRepoRoot}/dist/mcp/chat-bridge-server.js`],
+            env: {},
+            '@opensquid': true,
+        },
+    };
+}
+/** Pure projection. Disk-untouched. Used by both writer and `--dry-run`. */
+export function projectOpensquidMcp(input, opensquidRepoRoot) {
+    const output = JSON.parse(JSON.stringify(input));
+    output.mcpServers ??= {};
+    const desired = buildDesiredEntries(opensquidRepoRoot);
+    const added = [];
+    const replaced = [];
+    for (const [name, entry] of Object.entries(desired)) {
+        const existing = output.mcpServers[name];
+        if (existing === undefined)
+            added.push(name);
+        else
+            replaced.push(name);
+        output.mcpServers[name] = entry;
+    }
+    // Anything in mcpServers that is NOT one of the two opensquid keys is
+    // preserved verbatim (it was already there before the spread+overwrite).
+    const preserved = Object.keys(output.mcpServers).filter((k) => k !== 'opensquid' && k !== 'opensquid-chat').length;
+    return { output, added, replaced, preserved };
+}
+/**
+ * Write opensquid's two MCP entries into `~/.claude.json` (path injected).
+ * Creates a `.bak` snapshot (`{}` when the file did not exist). 2-space
+ * JSON indentation matches Claude Code's own format, so `diff <file>.bak
+ * <file>` highlights only the mcpServers delta.
+ */
+export async function writeOpensquidMcp(claudeConfigPath, opensquidRepoRoot) {
+    const input = await readClaudeUserConfig(claudeConfigPath);
+    const backupPath = `${claudeConfigPath}.bak`;
+    await fs.writeFile(backupPath, JSON.stringify(input, null, 2));
+    const { output, added, replaced, preserved } = projectOpensquidMcp(input, opensquidRepoRoot);
+    await fs.writeFile(claudeConfigPath, JSON.stringify(output, null, 2));
+    return { added, replaced, preserved, backupPath };
+}
+/** ENOENT → `{}` (first-run case). All other errors propagate. */
+export async function readClaudeUserConfig(path) {
+    try {
+        const raw = await fs.readFile(path, 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch (e) {
+        if (e.code === 'ENOENT')
+            return {};
+        throw e;
+    }
+}
+//# sourceMappingURL=mcp-writer.js.map

package/dist/setup/wizard/mcp-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-writer.js","sourceRoot":"","sources":["../../../src/setup/wizard/mcp-writer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AAkBzC,uEAAuE;AACvE,yEAAyE;AACzE,sEAAsE;AACtE,mDAAmD;AACnD,MAAM,UAAU,sBAAsB,CAAC,KAAiC;IACtE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAOD,MAAM,UAAU,mBAAmB,CAAC,iBAAyB;IAC3D,OAAO;QACL,SAAS,EAAE;YACT,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,CAAC,GAAG,iBAAiB,qBAAqB,CAAC;YACjD,GAAG,EAAE,EAAE;YACP,YAAY,EAAE,IAAI;SACnB;QACD,gBAAgB,EAAE;YAChB,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,CAAC,GAAG,iBAAiB,iCAAiC,CAAC;YAC7D,GAAG,EAAE,EAAE;YACP,YAAY,EAAE,IAAI;SACnB;KACF,CAAC;AACJ,CAAC;AAaD,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CACjC,KAAuB,EACvB,iBAAyB;IAEzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAqB,CAAC;IACrE,MAAM,CAAC,UAAU,KAAK,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAA6C,EAAE,CAAC;QAChG,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACxC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAClC,CAAC;IAED,sEAAsE;IACtE,yEAAyE;IACzE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CACrD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,gBAAgB,CACnD,CAAC,MAAM,CAAC;IAET,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,gBAAwB,EACxB,iBAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,GAAG,gBAAgB,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE/D,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAC7F,MAAM,EAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACpD,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC9D,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}