@agent-native/core 0.17.1 → 0.18.0

package/dist/cli/mcp.js

@@ -0,0 +1,583 @@
+/**
+ * `agent-native mcp <subcommand>` — connect external coding agents (Claude
+ * Code desktop & CLI, Claude Cowork, Codex) to this agent-native app/workspace
+ * over MCP.
+ *
+ *   serve      Run the MCP stdio transport (this is what client configs spawn).
+ *   install    Provision a token + write the client's MCP config idempotently.
+ *   uninstall  Remove the named entry from a client's MCP config.
+ *   status     Print resolved MCP URL/port, token state, and per-client entries.
+ *   token      Print or rotate the local ACCESS_TOKEN in the workspace .env.
+ *
+ * Node-only CLI module. Hand-rolled `.env` upsert + minimal TOML block merge
+ * keep this dependency-free (no new npm deps).
+ */
+import crypto from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { runMCPStdio } from "../mcp/stdio.js";
+import { findWorkspaceRoot, resolveLocalAppOrigin, resolveWorkspace, } from "../mcp/workspace-resolve.js";
+const SERVER_NAME_PREFIX = "agent-native";
+const CLIENTS = [
+    "claude-code",
+    "claude-code-cli",
+    "codex",
+    "cowork",
+];
+function parseArgs(argv) {
+    const out = { _: [], standalone: false, rotate: false };
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        const eat = (flag) => {
+            if (a === flag)
+                return argv[++i];
+            if (a.startsWith(`${flag}=`))
+                return a.slice(flag.length + 1);
+            return undefined;
+        };
+        let v;
+        if ((v = eat("--client")) !== undefined)
+            out.client = v;
+        else if ((v = eat("--app")) !== undefined)
+            out.app = v;
+        else if ((v = eat("--port")) !== undefined)
+            out.port = Number(v);
+        else if ((v = eat("--scope")) !== undefined)
+            out.scope = v;
+        else if (a === "--standalone")
+            out.standalone = true;
+        else if (a === "--rotate")
+            out.rotate = true;
+        else if (!a.startsWith("-"))
+            out._.push(a);
+    }
+    return out;
+}
+function logErr(msg) {
+    process.stderr.write(`${msg}\n`);
+}
+function logOut(msg) {
+    process.stdout.write(`${msg}\n`);
+}
+// ---------------------------------------------------------------------------
+// .env token provisioning (local dev) — hand-rolled idempotent upsert
+// ---------------------------------------------------------------------------
+/** Workspace root (or cwd for a standalone app) — where .env lives. */
+function envBaseDir(cwd = process.cwd()) {
+    return findWorkspaceRoot(cwd) ?? path.resolve(cwd);
+}
+/** Prefer .env.local, else .env. Returns the path we should write to. */
+function envFilePath(baseDir) {
+    const local = path.join(baseDir, ".env.local");
+    if (fs.existsSync(local))
+        return local;
+    return path.join(baseDir, ".env");
+}
+function readEnvFile(file) {
+    try {
+        return fs.readFileSync(file, "utf-8");
+    }
+    catch {
+        return "";
+    }
+}
+/** Read a single key from a dotenv-format string (last assignment wins). */
+function getEnvValue(content, key) {
+    let found;
+    for (const line of content.split(/\r?\n/)) {
+        const m = line.match(/^\s*([A-Z0-9_]+)\s*=\s*(.*)\s*$/i);
+        if (m && m[1] === key) {
+            found = m[2].replace(/^["']|["']$/g, "");
+        }
+    }
+    return found;
+}
+/**
+ * Idempotently set `key=value` in the dotenv file. If the key already exists
+ * we leave it untouched unless `force` is set (used by `token --rotate`).
+ * Never clobbers an existing token implicitly.
+ */
+function upsertEnv(file, key, value, force = false) {
+    const content = readEnvFile(file);
+    const existing = getEnvValue(content, key);
+    if (existing && !force)
+        return { changed: false, value: existing };
+    const line = `${key}=${value}`;
+    let next;
+    if (new RegExp(`^\\s*${key}\\s*=`, "m").test(content)) {
+        next = content.replace(new RegExp(`^\\s*${key}\\s*=.*$`, "m"), line);
+    }
+    else {
+        next =
+            content.length === 0
+                ? `${line}\n`
+                : `${content.replace(/\n*$/, "")}\n${line}\n`;
+    }
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, next, "utf-8");
+    return { changed: true, value };
+}
+function generateToken() {
+    return crypto.randomBytes(24).toString("base64url");
+}
+/**
+ * Ensure a local ACCESS_TOKEN exists in the workspace .env and return it.
+ * Existing tokens are reused (never clobbered). Set `rotate` to replace it.
+ */
+function ensureLocalToken(cwd, rotate = false) {
+    const baseDir = envBaseDir(cwd);
+    const file = envFilePath(baseDir);
+    const content = readEnvFile(file);
+    const existing = getEnvValue(content, "ACCESS_TOKEN");
+    if (existing && !rotate) {
+        return { token: existing, file, created: false };
+    }
+    const token = generateToken();
+    upsertEnv(file, "ACCESS_TOKEN", token, true);
+    return { token, file, created: true };
+}
+// ---------------------------------------------------------------------------
+// Hosted vs local detection
+// ---------------------------------------------------------------------------
+/**
+ * Detect a hosted deployment URL. When the workspace .env points at a hosted
+ * origin (APP_URL / BETTER_AUTH_URL with a non-localhost host) we write an
+ * `http` client entry pointing at `<origin>/_agent-native/mcp` with a JWT
+ * bearer instead of a stdio entry.
+ */
+function detectHostedUrl(cwd) {
+    const baseDir = envBaseDir(cwd);
+    const content = readEnvFile(path.join(baseDir, ".env.local")) +
+        "\n" +
+        readEnvFile(path.join(baseDir, ".env"));
+    for (const key of ["AGENT_NATIVE_MCP_URL", "APP_URL", "BETTER_AUTH_URL"]) {
+        const v = getEnvValue(content, key);
+        if (!v)
+            continue;
+        try {
+            const u = new URL(v);
+            if (!/^(localhost|127\.0\.0\.1|\[::1\])$/.test(u.hostname)) {
+                return `${u.origin}/_agent-native/mcp`;
+            }
+        }
+        catch {
+            // not a URL — skip
+        }
+    }
+    return undefined;
+}
+async function mintHostedJwt(cwd) {
+    // Reuse the existing A2A signer — do not reinvent JWT minting.
+    const owner = process.env.AGENT_NATIVE_OWNER_EMAIL ||
+        process.env.OWNER_EMAIL ||
+        "owner@localhost";
+    if (!process.env.A2A_SECRET) {
+        const baseDir = envBaseDir(cwd);
+        const content = readEnvFile(path.join(baseDir, ".env.local")) +
+            "\n" +
+            readEnvFile(path.join(baseDir, ".env"));
+        const secret = getEnvValue(content, "A2A_SECRET");
+        if (secret)
+            process.env.A2A_SECRET = secret;
+    }
+    try {
+        const { signA2AToken } = await import("../a2a/client.js");
+        return await signA2AToken(owner, undefined, undefined, {
+            preferGlobalSecret: true,
+            expiresIn: "30d",
+        });
+    }
+    catch (err) {
+        logErr(`  Could not mint a hosted JWT (${err?.message ?? err}). ` +
+            `Set A2A_SECRET in your workspace .env, or use the local stdio entry.`);
+        return undefined;
+    }
+}
+// ---------------------------------------------------------------------------
+// Client config file locations + writers
+// ---------------------------------------------------------------------------
+/**
+ * Cowork consumes MCP exactly like Claude Code (same JSON server-entry
+ * shape). The exact on-disk config path for Cowork may differ across builds —
+ * this is the best-known location. **Confirm before relying on it in
+ * production.** It is validated against the Claude Code JSON format below.
+ *
+ * Resolved lazily (not as a module-level constant) so `os.homedir()` reflects
+ * the current `$HOME` rather than the value at module-load time.
+ */
+function coworkConfigPath() {
+    return path.join(os.homedir(), ".cowork", "mcp.json");
+}
+function claudeCodeProjectConfig(cwd) {
+    return path.join(envBaseDir(cwd), ".mcp.json");
+}
+function claudeCodeUserConfig() {
+    return path.join(os.homedir(), ".claude.json");
+}
+function codexConfigPath() {
+    return path.join(os.homedir(), ".codex", "config.toml");
+}
+/** The stdio (or http) server entry — shared by Claude Code & Cowork JSON. */
+function buildJsonServerEntry(i) {
+    if (i.hostedUrl) {
+        return {
+            type: "http",
+            url: i.hostedUrl,
+            ...(i.token ? { headers: { Authorization: `Bearer ${i.token}` } } : {}),
+        };
+    }
+    const args = ["mcp", "serve"];
+    if (i.appId)
+        args.push("--app", i.appId);
+    if (i.standalone)
+        args.push("--standalone");
+    const env = {};
+    if (i.token)
+        env.ACCESS_TOKEN = i.token;
+    if (i.ownerEmail)
+        env.AGENT_NATIVE_OWNER_EMAIL = i.ownerEmail;
+    return {
+        command: "agent-native",
+        args,
+        ...(Object.keys(env).length ? { env } : {}),
+    };
+}
+function readJsonFile(file) {
+    try {
+        const raw = fs.readFileSync(file, "utf-8");
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed === "object" ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+/** Idempotently write `mcpServers[name] = entry` into a JSON config file. */
+function writeJsonMcpEntry(file, name, entry) {
+    const config = readJsonFile(file);
+    if (!config.mcpServers || typeof config.mcpServers !== "object") {
+        config.mcpServers = {};
+    }
+    if (entry === null) {
+        delete config.mcpServers[name];
+    }
+    else {
+        config.mcpServers[name] = entry;
+    }
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, JSON.stringify(config, null, 2) + "\n", "utf-8");
+}
+function hasJsonMcpEntry(file, name) {
+    const config = readJsonFile(file);
+    return !!config?.mcpServers && name in config.mcpServers;
+}
+// --- Codex TOML (hand-rolled minimal block merge, no new dep) -------------
+function tomlQuote(s) {
+    return `"${s.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+function buildCodexBlock(name, i) {
+    const lines = [`[mcp_servers.${name}]`];
+    const args = ["mcp", "serve"];
+    if (i.appId)
+        args.push("--app", i.appId);
+    if (i.standalone)
+        args.push("--standalone");
+    lines.push(`command = "agent-native"`);
+    lines.push(`args = [${args.map(tomlQuote).join(", ")}]`);
+    const env = {};
+    if (i.token)
+        env.ACCESS_TOKEN = i.token;
+    if (i.ownerEmail)
+        env.AGENT_NATIVE_OWNER_EMAIL = i.ownerEmail;
+    if (Object.keys(env).length) {
+        const inline = Object.entries(env)
+            .map(([k, v]) => `${k} = ${tomlQuote(v)}`)
+            .join(", ");
+        lines.push(`env = { ${inline} }`);
+    }
+    return lines.join("\n") + "\n";
+}
+/**
+ * Replace (or append) the `[mcp_servers.<name>]` block in a TOML file
+ * without disturbing other content. We treat a block as the header line plus
+ * every following line until the next top-level `[` table header or EOF.
+ */
+function writeCodexBlock(file, name, block) {
+    let content = "";
+    try {
+        content = fs.readFileSync(file, "utf-8");
+    }
+    catch {
+        content = "";
+    }
+    const header = `[mcp_servers.${name}]`;
+    const lines = content.split(/\r?\n/);
+    const out = [];
+    let i = 0;
+    let removed = false;
+    while (i < lines.length) {
+        const line = lines[i];
+        if (line.trim() === header) {
+            // Skip this block entirely (header + body until next table header).
+            removed = true;
+            i++;
+            while (i < lines.length && !/^\s*\[/.test(lines[i]))
+                i++;
+            continue;
+        }
+        out.push(line);
+        i++;
+    }
+    let next = out
+        .join("\n")
+        .replace(/\n{3,}/g, "\n\n")
+        .replace(/\n*$/, "\n");
+    if (block !== null) {
+        next = next.replace(/\n*$/, "\n");
+        if (next.trim().length)
+            next += "\n";
+        next += block;
+    }
+    if (block === null && !removed)
+        return; // nothing to do
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, next, "utf-8");
+}
+function codexHasBlock(file, name) {
+    try {
+        const content = fs.readFileSync(file, "utf-8");
+        return new RegExp(`^\\s*\\[mcp_servers\\.${name}\\]\\s*$`, "m").test(content);
+    }
+    catch {
+        return false;
+    }
+}
+// ---------------------------------------------------------------------------
+// Per-client install/uninstall/status
+// ---------------------------------------------------------------------------
+function configPathFor(client, cwd, scope) {
+    switch (client) {
+        case "claude-code":
+        case "claude-code-cli":
+            return scope === "user"
+                ? claudeCodeUserConfig()
+                : claudeCodeProjectConfig(cwd);
+        case "cowork":
+            return coworkConfigPath();
+        case "codex":
+            return codexConfigPath();
+    }
+}
+function serverNameFor(appId) {
+    return `${SERVER_NAME_PREFIX}-${appId}`;
+}
+function installForClient(client, inputs, cwd, scope) {
+    const name = inputs.serverName;
+    const file = configPathFor(client, cwd, scope);
+    if (client === "codex") {
+        writeCodexBlock(file, name, buildCodexBlock(name, inputs));
+    }
+    else {
+        writeJsonMcpEntry(file, name, buildJsonServerEntry(inputs));
+    }
+    return file;
+}
+function uninstallForClient(client, appId, cwd, scope) {
+    const name = serverNameFor(appId);
+    const file = configPathFor(client, cwd, scope);
+    if (client === "codex") {
+        const had = codexHasBlock(file, name);
+        if (had)
+            writeCodexBlock(file, name, null);
+        return { file, removed: had };
+    }
+    const had = hasJsonMcpEntry(file, name);
+    if (had)
+        writeJsonMcpEntry(file, name, null);
+    return { file, removed: had };
+}
+function clientHasEntry(client, appId, cwd) {
+    const name = serverNameFor(appId);
+    // Check both scopes for Claude Code so `status` is informative.
+    if (client === "claude-code" || client === "claude-code-cli") {
+        return (hasJsonMcpEntry(claudeCodeProjectConfig(cwd), name) ||
+            hasJsonMcpEntry(claudeCodeUserConfig(), name));
+    }
+    if (client === "cowork")
+        return hasJsonMcpEntry(coworkConfigPath(), name);
+    return codexHasBlock(codexConfigPath(), name);
+}
+// ---------------------------------------------------------------------------
+// Subcommands
+// ---------------------------------------------------------------------------
+async function cmdServe(p) {
+    await runMCPStdio({
+        appId: p.app,
+        port: p.port,
+        standalone: p.standalone,
+    });
+}
+async function cmdInstall(p) {
+    const client = (p.client ?? "").toLowerCase();
+    if (!CLIENTS.includes(client)) {
+        logErr(`Usage: agent-native mcp install --client ${CLIENTS.join("|")} ` +
+            `[--app <id>] [--scope user|project]`);
+        process.exit(1);
+    }
+    const cwd = process.cwd();
+    // Resolve which app this entry targets (default = workspace default app).
+    let appId = p.app;
+    if (!appId) {
+        try {
+            const resolved = await resolveLocalAppOrigin({ cwd });
+            appId = resolved.appId;
+        }
+        catch {
+            appId = "app";
+        }
+    }
+    const serverName = serverNameFor(appId);
+    const hostedUrl = detectHostedUrl(cwd);
+    const ownerEmail = process.env.AGENT_NATIVE_OWNER_EMAIL;
+    let token;
+    if (hostedUrl) {
+        token = await mintHostedJwt(cwd);
+        logOut(`Detected hosted deployment: ${hostedUrl}`);
+    }
+    else {
+        const t = ensureLocalToken(cwd, false);
+        token = t.token;
+        logOut(t.created
+            ? `Provisioned ACCESS_TOKEN in ${t.file}`
+            : `Reusing existing ACCESS_TOKEN from ${t.file}`);
+    }
+    const inputs = {
+        serverName,
+        appId: appId,
+        token,
+        ownerEmail,
+        hostedUrl,
+        standalone: p.standalone,
+    };
+    const file = installForClient(client, inputs, cwd, p.scope);
+    logOut(`Installed "${serverName}" for ${client} → ${file}`);
+    logOut(hostedUrl
+        ? `  Mode: http (${hostedUrl})`
+        : `  Mode: stdio (agent-native mcp serve --app ${appId}${p.standalone ? " --standalone" : ""})`);
+    logOut(`  Restart ${client} to pick up the new MCP server.`);
+}
+function cmdUninstall(p) {
+    const client = (p.client ?? "").toLowerCase();
+    if (!CLIENTS.includes(client)) {
+        logErr(`Usage: agent-native mcp uninstall --client ${CLIENTS.join("|")} ` +
+            `[--app <id>]`);
+        process.exit(1);
+    }
+    const cwd = process.cwd();
+    const appId = p.app ?? "app";
+    const { file, removed } = uninstallForClient(client, appId, cwd, p.scope);
+    logOut(removed
+        ? `Removed "${serverNameFor(appId)}" from ${client} → ${file}`
+        : `No "${serverNameFor(appId)}" entry found for ${client} (${file}) — nothing to do.`);
+}
+async function cmdStatus() {
+    const cwd = process.cwd();
+    let appId = "app";
+    let origin = "(app not running)";
+    let port;
+    try {
+        const resolved = await resolveLocalAppOrigin({ cwd });
+        appId = resolved.appId;
+        origin = resolved.origin;
+        const ws = await resolveWorkspace(cwd);
+        port = ws.apps.find((a) => a.id === appId)?.port;
+    }
+    catch (err) {
+        logErr(`  Could not resolve app: ${err?.message ?? err}`);
+    }
+    const hostedUrl = detectHostedUrl(cwd);
+    const baseDir = envBaseDir(cwd);
+    const envContent = readEnvFile(path.join(baseDir, ".env.local")) +
+        "\n" +
+        readEnvFile(path.join(baseDir, ".env"));
+    const hasToken = !!getEnvValue(envContent, "ACCESS_TOKEN");
+    const hasA2A = !!process.env.A2A_SECRET || !!getEnvValue(envContent, "A2A_SECRET");
+    logOut(`Agent-Native MCP status`);
+    logOut(`  App:        ${appId}`);
+    logOut(hostedUrl
+        ? `  MCP URL:    ${hostedUrl} (hosted)`
+        : `  MCP URL:    ${origin}/_agent-native/mcp${port ? ` (port ${port})` : ""}`);
+    logOut(`  ACCESS_TOKEN: ${hasToken ? "set" : "not set"} (.env)`);
+    logOut(`  A2A_SECRET:   ${hasA2A ? "set" : "not set"}`);
+    logOut(`  Clients:`);
+    for (const client of CLIENTS) {
+        const present = clientHasEntry(client, appId, cwd);
+        logOut(`    ${client.padEnd(18)} ${present ? "configured" : "—"}`);
+    }
+}
+function cmdToken(p) {
+    const cwd = process.cwd();
+    const t = ensureLocalToken(cwd, p.rotate);
+    logOut(p.rotate
+        ? `Rotated ACCESS_TOKEN in ${t.file}`
+        : t.created
+            ? `Provisioned ACCESS_TOKEN in ${t.file}`
+            : `ACCESS_TOKEN (${t.file}):`);
+    logOut(t.token);
+    if (p.rotate) {
+        logOut(`  Re-run \`agent-native mcp install --client <c>\` so client configs ` +
+            `pick up the new token.`);
+    }
+}
+const HELP = `agent-native mcp — connect external coding agents over MCP
+
+Usage:
+  agent-native mcp serve [--app <id>] [--port <n>] [--standalone]
+      Run the MCP stdio transport (what client configs spawn).
+      Default: proxy to the running local app; --standalone builds from disk.
+
+  agent-native mcp install --client <c> [--app <id>] [--scope user|project]
+      Provision a token and write the client's MCP config (idempotent).
+      Clients: claude-code, claude-code-cli, codex, cowork
+
+  agent-native mcp uninstall --client <c> [--app <id>]
+      Remove the named MCP entry from a client's config (idempotent).
+
+  agent-native mcp status
+      Show resolved MCP URL/port, token state, and per-client entries.
+
+  agent-native mcp token [--rotate]
+      Print (or rotate) the local ACCESS_TOKEN in the workspace .env.`;
+export async function runMcp(args) {
+    const p = parseArgs(args);
+    const sub = p._[0];
+    switch (sub) {
+        case "serve":
+            await cmdServe(p);
+            return;
+        case "install":
+            await cmdInstall(p);
+            return;
+        case "uninstall":
+            cmdUninstall(p);
+            return;
+        case "status":
+            await cmdStatus();
+            return;
+        case "token":
+            cmdToken(p);
+            return;
+        case undefined:
+        case "--help":
+        case "-h":
+        case "help":
+            logOut(HELP);
+            return;
+        default:
+            logErr(`Unknown mcp subcommand: ${sub}`);
+            logOut(HELP);
+            process.exit(1);
+    }
+}
+//# sourceMappingURL=mcp.js.map

package/dist/cli/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/cli/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,6BAA6B,CAAC;AAErC,MAAM,kBAAkB,GAAG,cAAc,CAAC;AAG1C,MAAM,OAAO,GAAe;IAC1B,aAAa;IACb,iBAAiB;IACjB,OAAO;IACP,QAAQ;CACT,CAAC;AAYF,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,GAAG,GAAe,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACpE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,GAAG,GAAG,CAAC,IAAY,EAAsB,EAAE;YAC/C,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;gBAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC9D,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,IAAI,CAAqB,CAAC;QAC1B,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;aACnD,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;aAClD,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;aAC5D,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;aACtD,IAAI,CAAC,KAAK,cAAc;YAAE,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;aAChD,IAAI,CAAC,KAAK,UAAU;YAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;aACxC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;AACnC,CAAC;AACD,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAE9E,uEAAuE;AACvE,SAAS,UAAU,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACrC,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,yEAAyE;AACzE,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,WAAW,CAAC,OAAe,EAAE,GAAW;IAC/C,IAAI,KAAyB,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAChB,IAAY,EACZ,GAAW,EACX,KAAa,EACb,KAAK,GAAG,KAAK;IAEb,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAEnE,MAAM,IAAI,GAAG,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,IAAI,IAAY,CAAC;IACjB,IAAI,IAAI,MAAM,CAAC,QAAQ,GAAG,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,GAAG,UAAU,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,IAAI;YACF,OAAO,CAAC,MAAM,KAAK,CAAC;gBAClB,CAAC,CAAC,GAAG,IAAI,IAAI;gBACb,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC;IACpD,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CACvB,GAAW,EACX,MAAM,GAAG,KAAK;IAEd,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACtD,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACxC,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,OAAO,GACX,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC7C,IAAI;QACJ,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,CAAC,sBAAsB,EAAE,SAAS,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACzE,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3D,OAAO,GAAG,CAAC,CAAC,MAAM,oBAAoB,CAAC;YACzC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAW;IACtC,+DAA+D;IAC/D,MAAM,KAAK,GACT,OAAO,CAAC,GAAG,CAAC,wBAAwB;QACpC,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,iBAAiB,CAAC;IACpB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,OAAO,GACX,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAC7C,IAAI;YACJ,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAClD,IAAI,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC1D,OAAO,MAAM,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE;YACrD,kBAAkB,EAAE,IAAI;YACxB,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,CACJ,kCAAkC,GAAG,EAAE,OAAO,IAAI,GAAG,KAAK;YACxD,sEAAsE,CACzE,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,yCAAyC;AACzC,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,SAAS,gBAAgB;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAW;IAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;AACjD,CAAC;AACD,SAAS,oBAAoB;IAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AACjD,CAAC;AACD,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC1D,CAAC;AAWD,8EAA8E;AAC9E,SAAS,oBAAoB,CAAC,CAAoB;IAChD,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,CAAC,CAAC,SAAS;YAChB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,CAAC,CAAC,KAAK;QAAE,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC;IACxC,IAAI,CAAC,CAAC,UAAU;QAAE,GAAG,CAAC,wBAAwB,GAAG,CAAC,CAAC,UAAU,CAAC;IAC9D,OAAO;QACL,OAAO,EAAE,cAAc;QACvB,IAAI;QACJ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,iBAAiB,CACxB,IAAY,EACZ,IAAY,EACZ,KAAqC;IAErC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAClC,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,CAAC,MAAM,EAAE,UAAU,IAAI,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC;AAC3D,CAAC;AAED,6EAA6E;AAE7E,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAC9D,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,CAAoB;IACzD,MAAM,KAAK,GAAa,CAAC,gBAAgB,IAAI,GAAG,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,CAAC,CAAC,KAAK;QAAE,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC;IACxC,IAAI,CAAC,CAAC,UAAU;QAAE,GAAG,CAAC,wBAAwB,GAAG,CAAC,CAAC,UAAU,CAAC;IAC9D,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;aAC/B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;aACzC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CACtB,IAAY,EACZ,IAAY,EACZ,KAAoB;IAEpB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,EAAE,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,IAAI,GAAG,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAC3B,oEAAoE;YACpE,OAAO,GAAG,IAAI,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC;YACzD,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,EAAE,CAAC;IACN,CAAC;IAED,IAAI,IAAI,GAAG,GAAG;SACX,IAAI,CAAC,IAAI,CAAC;SACV,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM;YAAE,IAAI,IAAI,IAAI,CAAC;QACrC,IAAI,IAAI,KAAK,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,gBAAgB;IAExD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY;IAC/C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,MAAM,CAAC,yBAAyB,IAAI,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,CAClE,OAAO,CACR,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E,SAAS,aAAa,CACpB,MAAgB,EAChB,GAAW,EACX,KAAyB;IAEzB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,aAAa,CAAC;QACnB,KAAK,iBAAiB;YACpB,OAAO,KAAK,KAAK,MAAM;gBACrB,CAAC,CAAC,oBAAoB,EAAE;gBACxB,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;QACnC,KAAK,QAAQ;YACX,OAAO,gBAAgB,EAAE,CAAC;QAC5B,KAAK,OAAO;YACV,OAAO,eAAe,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,GAAG,kBAAkB,IAAI,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAgB,EAChB,MAAyB,EACzB,GAAW,EACX,KAAyB;IAEzB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAgB,EAChB,KAAa,EACb,GAAW,EACX,KAAyB;IAEzB,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,GAAG;YAAE,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IACD,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,GAAG;QAAE,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,cAAc,CAAC,MAAgB,EAAE,KAAa,EAAE,GAAW;IAClE,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAClC,gEAAgE;IAChE,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC7D,OAAO,CACL,eAAe,CAAC,uBAAuB,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;YACnD,eAAe,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAC9C,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1E,OAAO,aAAa,CAAC,eAAe,EAAE,EAAE,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,KAAK,UAAU,QAAQ,CAAC,CAAa;IACnC,MAAM,WAAW,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,GAAG;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,CAAa;IACrC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAc,CAAC;IAC1D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,CACJ,4CAA4C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YAC9D,qCAAqC,CACxC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1B,0EAA0E;IAC1E,IAAI,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC;IAClB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YACtD,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAExC,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAExD,IAAI,KAAyB,CAAC;IAC9B,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,+BAA+B,SAAS,EAAE,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QAChB,MAAM,CACJ,CAAC,CAAC,OAAO;YACP,CAAC,CAAC,+BAA+B,CAAC,CAAC,IAAI,EAAE;YACzC,CAAC,CAAC,sCAAsC,CAAC,CAAC,IAAI,EAAE,CACnD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAsB;QAChC,UAAU;QACV,KAAK,EAAE,KAAM;QACb,KAAK;QACL,UAAU;QACV,SAAS;QACT,UAAU,EAAE,CAAC,CAAC,UAAU;KACzB,CAAC;IAEF,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,cAAc,UAAU,SAAS,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,CACJ,SAAS;QACP,CAAC,CAAC,iBAAiB,SAAS,GAAG;QAC/B,CAAC,CAAC,+CAA+C,KAAK,GAClD,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EACnC,GAAG,CACR,CAAC;IACF,MAAM,CAAC,aAAa,MAAM,iCAAiC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,YAAY,CAAC,CAAa;IACjC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAc,CAAC;IAC1D,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,CACJ,8CAA8C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YAChE,cAAc,CACjB,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC;IAC7B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1E,MAAM,CACJ,OAAO;QACL,CAAC,CAAC,YAAY,aAAa,CAAC,KAAK,CAAC,UAAU,MAAM,MAAM,IAAI,EAAE;QAC9D,CAAC,CAAC,OAAO,aAAa,CAAC,KAAK,CAAC,qBAAqB,MAAM,KAAK,IAAI,oBAAoB,CACxF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,MAAM,GAAG,mBAAmB,CAAC;IACjC,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QACvB,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,CAAC;IACnD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,CAAC,4BAA4B,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,UAAU,GACd,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC7C,IAAI;QACJ,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAC3D,MAAM,MAAM,GACV,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAEtE,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAClC,MAAM,CAAC,iBAAiB,KAAK,EAAE,CAAC,CAAC;IACjC,MAAM,CACJ,SAAS;QACP,CAAC,CAAC,iBAAiB,SAAS,WAAW;QACvC,CAAC,CAAC,iBAAiB,MAAM,qBACrB,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,EAC7B,EAAE,CACP,CAAC;IACF,MAAM,CAAC,mBAAmB,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,SAAS,CAAC,CAAC;IACjE,MAAM,CAAC,mBAAmB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACxD,MAAM,CAAC,YAAY,CAAC,CAAC;IACrB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAa;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,CACJ,CAAC,CAAC,MAAM;QACN,CAAC,CAAC,2BAA2B,CAAC,CAAC,IAAI,EAAE;QACrC,CAAC,CAAC,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,+BAA+B,CAAC,CAAC,IAAI,EAAE;YACzC,CAAC,CAAC,iBAAiB,CAAC,CAAC,IAAI,IAAI,CAClC,CAAC;IACF,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,CACJ,uEAAuE;YACrE,wBAAwB,CAC3B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;sEAkByD,CAAC;AAEvE,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IACzC,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEnB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO;YACV,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO;QACT,KAAK,SAAS;YACZ,MAAM,UAAU,CAAC,CAAC,CAAC,CAAC;YACpB,OAAO;QACT,KAAK,WAAW;YACd,YAAY,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,KAAK,QAAQ;YACX,MAAM,SAAS,EAAE,CAAC;YAClB,OAAO;QACT,KAAK,OAAO;YACV,QAAQ,CAAC,CAAC,CAAC,CAAC;YACZ,OAAO;QACT,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI,CAAC;QACV,KAAK,MAAM;YACT,MAAM,CAAC,IAAI,CAAC,CAAC;YACb,OAAO;QACT;YACE,MAAM,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC","sourcesContent":["/**\n * `agent-native mcp <subcommand>` — connect external coding agents (Claude\n * Code desktop & CLI, Claude Cowork, Codex) to this agent-native app/workspace\n * over MCP.\n *\n *   serve      Run the MCP stdio transport (this is what client configs spawn).\n *   install    Provision a token + write the client's MCP config idempotently.\n *   uninstall  Remove the named entry from a client's MCP config.\n *   status     Print resolved MCP URL/port, token state, and per-client entries.\n *   token      Print or rotate the local ACCESS_TOKEN in the workspace .env.\n *\n * Node-only CLI module. Hand-rolled `.env` upsert + minimal TOML block merge\n * keep this dependency-free (no new npm deps).\n */\n\nimport crypto from \"node:crypto\";\nimport fs from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\n\nimport { runMCPStdio } from \"../mcp/stdio.js\";\nimport {\n  findWorkspaceRoot,\n  resolveLocalAppOrigin,\n  resolveWorkspace,\n} from \"../mcp/workspace-resolve.js\";\n\nconst SERVER_NAME_PREFIX = \"agent-native\";\n\ntype ClientId = \"claude-code\" | \"claude-code-cli\" | \"codex\" | \"cowork\";\nconst CLIENTS: ClientId[] = [\n  \"claude-code\",\n  \"claude-code-cli\",\n  \"codex\",\n  \"cowork\",\n];\n\ninterface ParsedArgs {\n  _: string[];\n  client?: string;\n  app?: string;\n  port?: number;\n  scope?: string;\n  standalone: boolean;\n  rotate: boolean;\n}\n\nfunction parseArgs(argv: string[]): ParsedArgs {\n  const out: ParsedArgs = { _: [], standalone: false, rotate: false };\n  for (let i = 0; i < argv.length; i++) {\n    const a = argv[i];\n    const eat = (flag: string): string | undefined => {\n      if (a === flag) return argv[++i];\n      if (a.startsWith(`${flag}=`)) return a.slice(flag.length + 1);\n      return undefined;\n    };\n    let v: string | undefined;\n    if ((v = eat(\"--client\")) !== undefined) out.client = v;\n    else if ((v = eat(\"--app\")) !== undefined) out.app = v;\n    else if ((v = eat(\"--port\")) !== undefined) out.port = Number(v);\n    else if ((v = eat(\"--scope\")) !== undefined) out.scope = v;\n    else if (a === \"--standalone\") out.standalone = true;\n    else if (a === \"--rotate\") out.rotate = true;\n    else if (!a.startsWith(\"-\")) out._.push(a);\n  }\n  return out;\n}\n\nfunction logErr(msg: string): void {\n  process.stderr.write(`${msg}\\n`);\n}\nfunction logOut(msg: string): void {\n  process.stdout.write(`${msg}\\n`);\n}\n\n// ---------------------------------------------------------------------------\n// .env token provisioning (local dev) — hand-rolled idempotent upsert\n// ---------------------------------------------------------------------------\n\n/** Workspace root (or cwd for a standalone app) — where .env lives. */\nfunction envBaseDir(cwd = process.cwd()): string {\n  return findWorkspaceRoot(cwd) ?? path.resolve(cwd);\n}\n\n/** Prefer .env.local, else .env. Returns the path we should write to. */\nfunction envFilePath(baseDir: string): string {\n  const local = path.join(baseDir, \".env.local\");\n  if (fs.existsSync(local)) return local;\n  return path.join(baseDir, \".env\");\n}\n\nfunction readEnvFile(file: string): string {\n  try {\n    return fs.readFileSync(file, \"utf-8\");\n  } catch {\n    return \"\";\n  }\n}\n\n/** Read a single key from a dotenv-format string (last assignment wins). */\nfunction getEnvValue(content: string, key: string): string | undefined {\n  let found: string | undefined;\n  for (const line of content.split(/\\r?\\n/)) {\n    const m = line.match(/^\\s*([A-Z0-9_]+)\\s*=\\s*(.*)\\s*$/i);\n    if (m && m[1] === key) {\n      found = m[2].replace(/^[\"']|[\"']$/g, \"\");\n    }\n  }\n  return found;\n}\n\n/**\n * Idempotently set `key=value` in the dotenv file. If the key already exists\n * we leave it untouched unless `force` is set (used by `token --rotate`).\n * Never clobbers an existing token implicitly.\n */\nfunction upsertEnv(\n  file: string,\n  key: string,\n  value: string,\n  force = false,\n): { changed: boolean; value: string } {\n  const content = readEnvFile(file);\n  const existing = getEnvValue(content, key);\n  if (existing && !force) return { changed: false, value: existing };\n\n  const line = `${key}=${value}`;\n  let next: string;\n  if (new RegExp(`^\\\\s*${key}\\\\s*=`, \"m\").test(content)) {\n    next = content.replace(new RegExp(`^\\\\s*${key}\\\\s*=.*$`, \"m\"), line);\n  } else {\n    next =\n      content.length === 0\n        ? `${line}\\n`\n        : `${content.replace(/\\n*$/, \"\")}\\n${line}\\n`;\n  }\n  fs.mkdirSync(path.dirname(file), { recursive: true });\n  fs.writeFileSync(file, next, \"utf-8\");\n  return { changed: true, value };\n}\n\nfunction generateToken(): string {\n  return crypto.randomBytes(24).toString(\"base64url\");\n}\n\n/**\n * Ensure a local ACCESS_TOKEN exists in the workspace .env and return it.\n * Existing tokens are reused (never clobbered). Set `rotate` to replace it.\n */\nfunction ensureLocalToken(\n  cwd: string,\n  rotate = false,\n): { token: string; file: string; created: boolean } {\n  const baseDir = envBaseDir(cwd);\n  const file = envFilePath(baseDir);\n  const content = readEnvFile(file);\n  const existing = getEnvValue(content, \"ACCESS_TOKEN\");\n  if (existing && !rotate) {\n    return { token: existing, file, created: false };\n  }\n  const token = generateToken();\n  upsertEnv(file, \"ACCESS_TOKEN\", token, true);\n  return { token, file, created: true };\n}\n\n// ---------------------------------------------------------------------------\n// Hosted vs local detection\n// ---------------------------------------------------------------------------\n\n/**\n * Detect a hosted deployment URL. When the workspace .env points at a hosted\n * origin (APP_URL / BETTER_AUTH_URL with a non-localhost host) we write an\n * `http` client entry pointing at `<origin>/_agent-native/mcp` with a JWT\n * bearer instead of a stdio entry.\n */\nfunction detectHostedUrl(cwd: string): string | undefined {\n  const baseDir = envBaseDir(cwd);\n  const content =\n    readEnvFile(path.join(baseDir, \".env.local\")) +\n    \"\\n\" +\n    readEnvFile(path.join(baseDir, \".env\"));\n  for (const key of [\"AGENT_NATIVE_MCP_URL\", \"APP_URL\", \"BETTER_AUTH_URL\"]) {\n    const v = getEnvValue(content, key);\n    if (!v) continue;\n    try {\n      const u = new URL(v);\n      if (!/^(localhost|127\\.0\\.0\\.1|\\[::1\\])$/.test(u.hostname)) {\n        return `${u.origin}/_agent-native/mcp`;\n      }\n    } catch {\n      // not a URL — skip\n    }\n  }\n  return undefined;\n}\n\nasync function mintHostedJwt(cwd: string): Promise<string | undefined> {\n  // Reuse the existing A2A signer — do not reinvent JWT minting.\n  const owner =\n    process.env.AGENT_NATIVE_OWNER_EMAIL ||\n    process.env.OWNER_EMAIL ||\n    \"owner@localhost\";\n  if (!process.env.A2A_SECRET) {\n    const baseDir = envBaseDir(cwd);\n    const content =\n      readEnvFile(path.join(baseDir, \".env.local\")) +\n      \"\\n\" +\n      readEnvFile(path.join(baseDir, \".env\"));\n    const secret = getEnvValue(content, \"A2A_SECRET\");\n    if (secret) process.env.A2A_SECRET = secret;\n  }\n  try {\n    const { signA2AToken } = await import(\"../a2a/client.js\");\n    return await signA2AToken(owner, undefined, undefined, {\n      preferGlobalSecret: true,\n      expiresIn: \"30d\",\n    });\n  } catch (err: any) {\n    logErr(\n      `  Could not mint a hosted JWT (${err?.message ?? err}). ` +\n        `Set A2A_SECRET in your workspace .env, or use the local stdio entry.`,\n    );\n    return undefined;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Client config file locations + writers\n// ---------------------------------------------------------------------------\n\n/**\n * Cowork consumes MCP exactly like Claude Code (same JSON server-entry\n * shape). The exact on-disk config path for Cowork may differ across builds —\n * this is the best-known location. **Confirm before relying on it in\n * production.** It is validated against the Claude Code JSON format below.\n *\n * Resolved lazily (not as a module-level constant) so `os.homedir()` reflects\n * the current `$HOME` rather than the value at module-load time.\n */\nfunction coworkConfigPath(): string {\n  return path.join(os.homedir(), \".cowork\", \"mcp.json\");\n}\n\nfunction claudeCodeProjectConfig(cwd: string): string {\n  return path.join(envBaseDir(cwd), \".mcp.json\");\n}\nfunction claudeCodeUserConfig(): string {\n  return path.join(os.homedir(), \".claude.json\");\n}\nfunction codexConfigPath(): string {\n  return path.join(os.homedir(), \".codex\", \"config.toml\");\n}\n\ninterface ServerEntryInputs {\n  serverName: string;\n  appId: string;\n  token?: string;\n  ownerEmail?: string;\n  hostedUrl?: string;\n  standalone: boolean;\n}\n\n/** The stdio (or http) server entry — shared by Claude Code & Cowork JSON. */\nfunction buildJsonServerEntry(i: ServerEntryInputs): Record<string, unknown> {\n  if (i.hostedUrl) {\n    return {\n      type: \"http\",\n      url: i.hostedUrl,\n      ...(i.token ? { headers: { Authorization: `Bearer ${i.token}` } } : {}),\n    };\n  }\n  const args = [\"mcp\", \"serve\"];\n  if (i.appId) args.push(\"--app\", i.appId);\n  if (i.standalone) args.push(\"--standalone\");\n  const env: Record<string, string> = {};\n  if (i.token) env.ACCESS_TOKEN = i.token;\n  if (i.ownerEmail) env.AGENT_NATIVE_OWNER_EMAIL = i.ownerEmail;\n  return {\n    command: \"agent-native\",\n    args,\n    ...(Object.keys(env).length ? { env } : {}),\n  };\n}\n\nfunction readJsonFile(file: string): Record<string, any> {\n  try {\n    const raw = fs.readFileSync(file, \"utf-8\");\n    const parsed = JSON.parse(raw);\n    return parsed && typeof parsed === \"object\" ? parsed : {};\n  } catch {\n    return {};\n  }\n}\n\n/** Idempotently write `mcpServers[name] = entry` into a JSON config file. */\nfunction writeJsonMcpEntry(\n  file: string,\n  name: string,\n  entry: Record<string, unknown> | null,\n): void {\n  const config = readJsonFile(file);\n  if (!config.mcpServers || typeof config.mcpServers !== \"object\") {\n    config.mcpServers = {};\n  }\n  if (entry === null) {\n    delete config.mcpServers[name];\n  } else {\n    config.mcpServers[name] = entry;\n  }\n  fs.mkdirSync(path.dirname(file), { recursive: true });\n  fs.writeFileSync(file, JSON.stringify(config, null, 2) + \"\\n\", \"utf-8\");\n}\n\nfunction hasJsonMcpEntry(file: string, name: string): boolean {\n  const config = readJsonFile(file);\n  return !!config?.mcpServers && name in config.mcpServers;\n}\n\n// --- Codex TOML (hand-rolled minimal block merge, no new dep) -------------\n\nfunction tomlQuote(s: string): string {\n  return `\"${s.replace(/\\\\/g, \"\\\\\\\\\").replace(/\"/g, '\\\\\"')}\"`;\n}\n\nfunction buildCodexBlock(name: string, i: ServerEntryInputs): string {\n  const lines: string[] = [`[mcp_servers.${name}]`];\n  const args = [\"mcp\", \"serve\"];\n  if (i.appId) args.push(\"--app\", i.appId);\n  if (i.standalone) args.push(\"--standalone\");\n  lines.push(`command = \"agent-native\"`);\n  lines.push(`args = [${args.map(tomlQuote).join(\", \")}]`);\n  const env: Record<string, string> = {};\n  if (i.token) env.ACCESS_TOKEN = i.token;\n  if (i.ownerEmail) env.AGENT_NATIVE_OWNER_EMAIL = i.ownerEmail;\n  if (Object.keys(env).length) {\n    const inline = Object.entries(env)\n      .map(([k, v]) => `${k} = ${tomlQuote(v)}`)\n      .join(\", \");\n    lines.push(`env = { ${inline} }`);\n  }\n  return lines.join(\"\\n\") + \"\\n\";\n}\n\n/**\n * Replace (or append) the `[mcp_servers.<name>]` block in a TOML file\n * without disturbing other content. We treat a block as the header line plus\n * every following line until the next top-level `[` table header or EOF.\n */\nfunction writeCodexBlock(\n  file: string,\n  name: string,\n  block: string | null,\n): void {\n  let content = \"\";\n  try {\n    content = fs.readFileSync(file, \"utf-8\");\n  } catch {\n    content = \"\";\n  }\n\n  const header = `[mcp_servers.${name}]`;\n  const lines = content.split(/\\r?\\n/);\n  const out: string[] = [];\n  let i = 0;\n  let removed = false;\n  while (i < lines.length) {\n    const line = lines[i];\n    if (line.trim() === header) {\n      // Skip this block entirely (header + body until next table header).\n      removed = true;\n      i++;\n      while (i < lines.length && !/^\\s*\\[/.test(lines[i])) i++;\n      continue;\n    }\n    out.push(line);\n    i++;\n  }\n\n  let next = out\n    .join(\"\\n\")\n    .replace(/\\n{3,}/g, \"\\n\\n\")\n    .replace(/\\n*$/, \"\\n\");\n  if (block !== null) {\n    next = next.replace(/\\n*$/, \"\\n\");\n    if (next.trim().length) next += \"\\n\";\n    next += block;\n  }\n  if (block === null && !removed) return; // nothing to do\n\n  fs.mkdirSync(path.dirname(file), { recursive: true });\n  fs.writeFileSync(file, next, \"utf-8\");\n}\n\nfunction codexHasBlock(file: string, name: string): boolean {\n  try {\n    const content = fs.readFileSync(file, \"utf-8\");\n    return new RegExp(`^\\\\s*\\\\[mcp_servers\\\\.${name}\\\\]\\\\s*$`, \"m\").test(\n      content,\n    );\n  } catch {\n    return false;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Per-client install/uninstall/status\n// ---------------------------------------------------------------------------\n\nfunction configPathFor(\n  client: ClientId,\n  cwd: string,\n  scope: string | undefined,\n): string {\n  switch (client) {\n    case \"claude-code\":\n    case \"claude-code-cli\":\n      return scope === \"user\"\n        ? claudeCodeUserConfig()\n        : claudeCodeProjectConfig(cwd);\n    case \"cowork\":\n      return coworkConfigPath();\n    case \"codex\":\n      return codexConfigPath();\n  }\n}\n\nfunction serverNameFor(appId: string): string {\n  return `${SERVER_NAME_PREFIX}-${appId}`;\n}\n\nfunction installForClient(\n  client: ClientId,\n  inputs: ServerEntryInputs,\n  cwd: string,\n  scope: string | undefined,\n): string {\n  const name = inputs.serverName;\n  const file = configPathFor(client, cwd, scope);\n  if (client === \"codex\") {\n    writeCodexBlock(file, name, buildCodexBlock(name, inputs));\n  } else {\n    writeJsonMcpEntry(file, name, buildJsonServerEntry(inputs));\n  }\n  return file;\n}\n\nfunction uninstallForClient(\n  client: ClientId,\n  appId: string,\n  cwd: string,\n  scope: string | undefined,\n): { file: string; removed: boolean } {\n  const name = serverNameFor(appId);\n  const file = configPathFor(client, cwd, scope);\n  if (client === \"codex\") {\n    const had = codexHasBlock(file, name);\n    if (had) writeCodexBlock(file, name, null);\n    return { file, removed: had };\n  }\n  const had = hasJsonMcpEntry(file, name);\n  if (had) writeJsonMcpEntry(file, name, null);\n  return { file, removed: had };\n}\n\nfunction clientHasEntry(client: ClientId, appId: string, cwd: string): boolean {\n  const name = serverNameFor(appId);\n  // Check both scopes for Claude Code so `status` is informative.\n  if (client === \"claude-code\" || client === \"claude-code-cli\") {\n    return (\n      hasJsonMcpEntry(claudeCodeProjectConfig(cwd), name) ||\n      hasJsonMcpEntry(claudeCodeUserConfig(), name)\n    );\n  }\n  if (client === \"cowork\") return hasJsonMcpEntry(coworkConfigPath(), name);\n  return codexHasBlock(codexConfigPath(), name);\n}\n\n// ---------------------------------------------------------------------------\n// Subcommands\n// ---------------------------------------------------------------------------\n\nasync function cmdServe(p: ParsedArgs): Promise<void> {\n  await runMCPStdio({\n    appId: p.app,\n    port: p.port,\n    standalone: p.standalone,\n  });\n}\n\nasync function cmdInstall(p: ParsedArgs): Promise<void> {\n  const client = (p.client ?? \"\").toLowerCase() as ClientId;\n  if (!CLIENTS.includes(client)) {\n    logErr(\n      `Usage: agent-native mcp install --client ${CLIENTS.join(\"|\")} ` +\n        `[--app <id>] [--scope user|project]`,\n    );\n    process.exit(1);\n  }\n  const cwd = process.cwd();\n\n  // Resolve which app this entry targets (default = workspace default app).\n  let appId = p.app;\n  if (!appId) {\n    try {\n      const resolved = await resolveLocalAppOrigin({ cwd });\n      appId = resolved.appId;\n    } catch {\n      appId = \"app\";\n    }\n  }\n  const serverName = serverNameFor(appId);\n\n  const hostedUrl = detectHostedUrl(cwd);\n  const ownerEmail = process.env.AGENT_NATIVE_OWNER_EMAIL;\n\n  let token: string | undefined;\n  if (hostedUrl) {\n    token = await mintHostedJwt(cwd);\n    logOut(`Detected hosted deployment: ${hostedUrl}`);\n  } else {\n    const t = ensureLocalToken(cwd, false);\n    token = t.token;\n    logOut(\n      t.created\n        ? `Provisioned ACCESS_TOKEN in ${t.file}`\n        : `Reusing existing ACCESS_TOKEN from ${t.file}`,\n    );\n  }\n\n  const inputs: ServerEntryInputs = {\n    serverName,\n    appId: appId!,\n    token,\n    ownerEmail,\n    hostedUrl,\n    standalone: p.standalone,\n  };\n\n  const file = installForClient(client, inputs, cwd, p.scope);\n  logOut(`Installed \"${serverName}\" for ${client} → ${file}`);\n  logOut(\n    hostedUrl\n      ? `  Mode: http (${hostedUrl})`\n      : `  Mode: stdio (agent-native mcp serve --app ${appId}${\n          p.standalone ? \" --standalone\" : \"\"\n        })`,\n  );\n  logOut(`  Restart ${client} to pick up the new MCP server.`);\n}\n\nfunction cmdUninstall(p: ParsedArgs): void {\n  const client = (p.client ?? \"\").toLowerCase() as ClientId;\n  if (!CLIENTS.includes(client)) {\n    logErr(\n      `Usage: agent-native mcp uninstall --client ${CLIENTS.join(\"|\")} ` +\n        `[--app <id>]`,\n    );\n    process.exit(1);\n  }\n  const cwd = process.cwd();\n  const appId = p.app ?? \"app\";\n  const { file, removed } = uninstallForClient(client, appId, cwd, p.scope);\n  logOut(\n    removed\n      ? `Removed \"${serverNameFor(appId)}\" from ${client} → ${file}`\n      : `No \"${serverNameFor(appId)}\" entry found for ${client} (${file}) — nothing to do.`,\n  );\n}\n\nasync function cmdStatus(): Promise<void> {\n  const cwd = process.cwd();\n  let appId = \"app\";\n  let origin = \"(app not running)\";\n  let port: number | undefined;\n  try {\n    const resolved = await resolveLocalAppOrigin({ cwd });\n    appId = resolved.appId;\n    origin = resolved.origin;\n    const ws = await resolveWorkspace(cwd);\n    port = ws.apps.find((a) => a.id === appId)?.port;\n  } catch (err: any) {\n    logErr(`  Could not resolve app: ${err?.message ?? err}`);\n  }\n\n  const hostedUrl = detectHostedUrl(cwd);\n  const baseDir = envBaseDir(cwd);\n  const envContent =\n    readEnvFile(path.join(baseDir, \".env.local\")) +\n    \"\\n\" +\n    readEnvFile(path.join(baseDir, \".env\"));\n  const hasToken = !!getEnvValue(envContent, \"ACCESS_TOKEN\");\n  const hasA2A =\n    !!process.env.A2A_SECRET || !!getEnvValue(envContent, \"A2A_SECRET\");\n\n  logOut(`Agent-Native MCP status`);\n  logOut(`  App:        ${appId}`);\n  logOut(\n    hostedUrl\n      ? `  MCP URL:    ${hostedUrl} (hosted)`\n      : `  MCP URL:    ${origin}/_agent-native/mcp${\n          port ? ` (port ${port})` : \"\"\n        }`,\n  );\n  logOut(`  ACCESS_TOKEN: ${hasToken ? \"set\" : \"not set\"} (.env)`);\n  logOut(`  A2A_SECRET:   ${hasA2A ? \"set\" : \"not set\"}`);\n  logOut(`  Clients:`);\n  for (const client of CLIENTS) {\n    const present = clientHasEntry(client, appId, cwd);\n    logOut(`    ${client.padEnd(18)} ${present ? \"configured\" : \"—\"}`);\n  }\n}\n\nfunction cmdToken(p: ParsedArgs): void {\n  const cwd = process.cwd();\n  const t = ensureLocalToken(cwd, p.rotate);\n  logOut(\n    p.rotate\n      ? `Rotated ACCESS_TOKEN in ${t.file}`\n      : t.created\n        ? `Provisioned ACCESS_TOKEN in ${t.file}`\n        : `ACCESS_TOKEN (${t.file}):`,\n  );\n  logOut(t.token);\n  if (p.rotate) {\n    logOut(\n      `  Re-run \\`agent-native mcp install --client <c>\\` so client configs ` +\n        `pick up the new token.`,\n    );\n  }\n}\n\nconst HELP = `agent-native mcp — connect external coding agents over MCP\n\nUsage:\n  agent-native mcp serve [--app <id>] [--port <n>] [--standalone]\n      Run the MCP stdio transport (what client configs spawn).\n      Default: proxy to the running local app; --standalone builds from disk.\n\n  agent-native mcp install --client <c> [--app <id>] [--scope user|project]\n      Provision a token and write the client's MCP config (idempotent).\n      Clients: claude-code, claude-code-cli, codex, cowork\n\n  agent-native mcp uninstall --client <c> [--app <id>]\n      Remove the named MCP entry from a client's config (idempotent).\n\n  agent-native mcp status\n      Show resolved MCP URL/port, token state, and per-client entries.\n\n  agent-native mcp token [--rotate]\n      Print (or rotate) the local ACCESS_TOKEN in the workspace .env.`;\n\nexport async function runMcp(args: string[]): Promise<void> {\n  const p = parseArgs(args);\n  const sub = p._[0];\n\n  switch (sub) {\n    case \"serve\":\n      await cmdServe(p);\n      return;\n    case \"install\":\n      await cmdInstall(p);\n      return;\n    case \"uninstall\":\n      cmdUninstall(p);\n      return;\n    case \"status\":\n      await cmdStatus();\n      return;\n    case \"token\":\n      cmdToken(p);\n      return;\n    case undefined:\n    case \"--help\":\n    case \"-h\":\n    case \"help\":\n      logOut(HELP);\n      return;\n    default:\n      logErr(`Unknown mcp subcommand: ${sub}`);\n      logOut(HELP);\n      process.exit(1);\n  }\n}\n"]}