@agentwares/agentguard 0.1.6 → 0.1.9

package/dist/chunk-3O6KWT3E.js

@@ -0,0 +1,345 @@
+import {
+  PROXY_PACKAGE
+} from "./chunk-TW5KJREH.js";
+import {
+  flagBool,
+  flagList,
+  flagNumber,
+  flagString,
+  homeFrom,
+  version
+} from "./chunk-SUXQTT3X.js";
+
+// src/hooks/clients.ts
+import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { dirname, join } from "path";
+var MATCHERS = {
+  "claude-code": "^(Bash|PowerShell|Write|Edit|MultiEdit|NotebookEdit)$|^mcp__",
+  codex: "^(Bash|apply_patch)$|^mcp__",
+  "gemini-cli": "^(run_shell_command|write_file|replace)$|^mcp_"
+};
+var CLIENT_ALIASES = {
+  claude: "claude-code",
+  "claude-code": "claude-code",
+  codex: "codex",
+  gemini: "gemini-cli",
+  "gemini-cli": "gemini-cli"
+};
+function hookTarget(client, scope, where, command, timeoutS = 30) {
+  const root = scope === "project" ? where.cwd : where.home;
+  if (client === "claude-code")
+    return {
+      client,
+      label: "Claude Code",
+      scope,
+      settingsPath: join(root, ".claude", "settings.json"),
+      event: "PreToolUse",
+      matcher: MATCHERS[client],
+      handler: { type: "command", command, timeout: timeoutS, statusMessage: "agentguard" }
+    };
+  if (client === "codex")
+    return {
+      client,
+      label: "Codex CLI",
+      scope,
+      settingsPath: join(root, ".codex", "hooks.json"),
+      event: "PreToolUse",
+      matcher: MATCHERS[client],
+      handler: { type: "command", command, timeout: timeoutS, statusMessage: "agentguard" },
+      note: "Codex runs a new hook only after you trust it: open /hooks in Codex and trust the agentguard entry."
+    };
+  return {
+    client,
+    label: "Gemini CLI",
+    scope,
+    settingsPath: join(root, ".gemini", "settings.json"),
+    event: "BeforeTool",
+    matcher: MATCHERS[client],
+    handler: {
+      name: "agentguard",
+      type: "command",
+      command,
+      timeout: timeoutS * 1e3,
+      description: "agentguard: one rulebook for shell commands and file edits"
+    },
+    note: scope === "project" ? "Gemini CLI fingerprints project hooks: confirm the agentguard hook the first time it asks." : void 0
+  };
+}
+function isAgentguardHookCommand(command) {
+  return typeof command === "string" && /agentguard/.test(command) && /\bhook\s+pre-tool-use\b/.test(command);
+}
+function readSettings(path) {
+  if (!existsSync(path)) return {};
+  const text = readFileSync(path, "utf8");
+  if (!text.trim()) return {};
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch (err) {
+    throw new Error(
+      `${path} is not valid JSON (${err instanceof Error ? err.message : String(err)}); fix it or move it aside \u2014 agentguard will not overwrite it`,
+      { cause: err }
+    );
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+    throw new Error(`${path} is not a JSON object; agentguard will not overwrite it`);
+  return parsed;
+}
+function groupsOf(settings, event) {
+  const hooks = settings.hooks;
+  if (!hooks || typeof hooks !== "object") return [];
+  const groups = hooks[event];
+  return Array.isArray(groups) ? groups : [];
+}
+function installedHandlers(target) {
+  const settings = readSettings(target.settingsPath);
+  return groupsOf(settings, target.event).flatMap(
+    (g) => (g.hooks ?? []).filter((h) => isAgentguardHookCommand(h.command))
+  );
+}
+function installHook(target) {
+  const existed = existsSync(target.settingsPath);
+  const settings = readSettings(target.settingsPath);
+  const hooks = settings.hooks && typeof settings.hooks === "object" ? settings.hooks : {};
+  const groups = groupsOf(settings, target.event);
+  const isOurs = (h) => isAgentguardHookCommand(h.command);
+  const ours = groups.flatMap((g) => (g.hooks ?? []).filter(isOurs));
+  const exact = groups.some(
+    (g) => g.matcher === target.matcher && g.hooks?.length === 1 && JSON.stringify(g.hooks[0]) === JSON.stringify(target.handler)
+  );
+  if (exact && ours.length === 1) return { status: "unchanged" };
+  const kept = [];
+  for (const group of groups) {
+    if (!(group.hooks ?? []).some(isOurs)) {
+      kept.push(group);
+      continue;
+    }
+    const others = (group.hooks ?? []).filter((h) => !isOurs(h));
+    if (others.length > 0) kept.push({ ...group, hooks: others });
+  }
+  kept.push({ matcher: target.matcher, hooks: [target.handler] });
+  const status = ours.length > 0 ? "updated" : "added";
+  hooks[target.event] = kept;
+  settings.hooks = hooks;
+  let backup;
+  if (existed) {
+    backup = `${target.settingsPath}.agentguard-backup`;
+    if (!existsSync(backup)) copyFileSync(target.settingsPath, backup);
+  }
+  mkdirSync(dirname(target.settingsPath), { recursive: true });
+  writeFileSync(target.settingsPath, JSON.stringify(settings, null, 2) + "\n");
+  return { status, backup };
+}
+function uninstallHook(target) {
+  if (!existsSync(target.settingsPath)) return 0;
+  const settings = readSettings(target.settingsPath);
+  const groups = groupsOf(settings, target.event);
+  let removed = 0;
+  const kept = [];
+  for (const group of groups) {
+    const others = (group.hooks ?? []).filter((h) => !isAgentguardHookCommand(h.command));
+    removed += (group.hooks ?? []).length - others.length;
+    if (others.length > 0) kept.push({ ...group, hooks: others });
+  }
+  if (removed === 0) return 0;
+  const hooks = settings.hooks;
+  if (kept.length > 0) hooks[target.event] = kept;
+  else delete hooks[target.event];
+  if (Object.keys(hooks).length === 0) delete settings.hooks;
+  writeFileSync(target.settingsPath, JSON.stringify(settings, null, 2) + "\n");
+  return removed;
+}
+function hookSettingsFiles(where) {
+  const out = [];
+  for (const root of [where.cwd, where.home]) {
+    out.push(
+      join(root, ".claude", "settings.json"),
+      join(root, ".claude", "settings.local.json"),
+      join(root, ".codex", "hooks.json"),
+      join(root, ".codex", "config.toml"),
+      join(root, ".gemini", "settings.json")
+    );
+  }
+  out.push(join(where.home, ".agentguard", "agentguard.yaml"));
+  return out;
+}
+
+// src/commands/hooks.ts
+import { appendFileSync, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { dirname as dirname2, join as join2, relative, resolve } from "path";
+var HOOKS_POLICY_BLOCK = `
+# Hook mode: your coding agent's own shell commands and file edits (Claude Code, Codex, Gemini CLI),
+# checked before they run. \`agentguard hooks install\` wired it; \`agentguard report\` shows the decisions.
+hooks:
+  # dry-run: every decision is logged and nothing is blocked. Read \`agentguard report\`, then set
+  # enforce. The kill switch (\`agentguard kill\`) stops guarded calls in both modes.
+  mode: dry-run
+  # Irreversible commands run only on a turn a person typed: after the session's previous
+  # irreversible command, recent, and naming the action ("push it", or "yes" to "shall I push?").
+  # Text the model writes, tool output and injected messages never count. Otherwise the agent
+  # gets APPROVAL_REQUIRED and an id; \`agentguard approve <id>\` lets that exact command run once.
+  # Built in: git-push, merge, tag-delete, rm-outside-workspace, publish, send, guard-config.
+  irreversible:
+    builtins: true
+    window_s: 1800          # the authorizing turn is at most 30 minutes old
+    require_mention: true   # ...and names the action
+    require_origin: false   # true: only entries Claude Code labels as typed by a person
+    mentions: {}            # extra words per class, e.g. { git-push: [deploy] }
+    rules: []
+    #  - name: deploy
+    #    shell: ["vercel --prod*", "fly deploy*"]
+    #    mentions: [deploy]
+  shell:
+    deny: []                # e.g. ["terraform destroy*", "curl * | sh"]
+    approval: []            # e.g. ["kubectl delete *"]
+  paths:
+    deny: []                # e.g. [".env", "*.pem"]
+    approval: []            # e.g. ["**/migrations/**"]
+`;
+function renderHooksStarterPolicy(generatedAt = /* @__PURE__ */ new Date()) {
+  return `# agentguard.yaml \u2014 generated by \`agentguard hooks install\` on ${generatedAt.toISOString().slice(0, 10)}
+# Docs: https://github.com/agentwares/agentguard/tree/main/apps/agentguard-cli#hook-mode-a-coding-agents-own-commands
+version: 1
+
+# MCP proxy mode (agentguard init) reads upstreams; hook mode needs none.
+mode: dry-run
+upstreams: []
+${HOOKS_POLICY_BLOCK}
+# Kill switch: \`agentguard kill\` creates this file; every guarded call is refused until
+# \`agentguard resume\`. AGENTGUARD_KILL=1 in the environment does the same.
+kill:
+  file: .agentguard/KILL
+
+# Hash-chained JSONL of every decision; \`agentguard verify\` proves it was not edited.
+audit:
+  path: .agentguard/audit.jsonl
+  redact: true
+`;
+}
+function quoteArg(arg) {
+  return /^[A-Za-z0-9_@%+=:,./-]+$/.test(arg) ? arg : JSON.stringify(arg);
+}
+function clientsFrom(args) {
+  const names = flagList(args, "client");
+  if (names.length === 0) return ["claude-code"];
+  if (names.includes("all")) return ["claude-code", "codex", "gemini-cli"];
+  return names.map((n) => {
+    const c = CLIENT_ALIASES[n.trim()];
+    if (!c) throw new Error(`unknown --client "${n}" (claude, codex, gemini or all)`);
+    return c;
+  });
+}
+function hasTopLevelHooks(yamlText) {
+  return /^hooks\s*:/m.test(yamlText);
+}
+async function hooksCommand(args, io) {
+  const sub = args.positionals[0] ?? "status";
+  const scope = flagBool(args, "user") ? "user" : "project";
+  const home = homeFrom(io);
+  const where = { cwd: io.cwd, home };
+  const rel = (p) => {
+    const r = relative(io.cwd, p);
+    return r.startsWith("..") ? p : r || ".";
+  };
+  const clients = clientsFrom(args);
+  const policyPath = resolve(
+    io.cwd,
+    flagString(args, "config") ?? (scope === "user" ? join2(home, ".agentguard", "agentguard.yaml") : "agentguard.yaml")
+  );
+  const base = flagString(args, "command") ?? `npx -y ${PROXY_PACKAGE}@${version()}`;
+  const commandFor = (client) => {
+    let cmd = `${base} hook pre-tool-use --client ${client === "claude-code" ? "claude" : client === "gemini-cli" ? "gemini" : "codex"}`;
+    if (flagString(args, "config")) cmd += ` --config ${quoteArg(policyPath)}`;
+    else if (scope === "user") cmd += ` --fallback-config ${quoteArg(policyPath)}`;
+    return cmd;
+  };
+  const timeoutS = Math.max(30, flagNumber(args, "timeout") ?? 30);
+  if (sub === "install") {
+    if (!existsSync2(policyPath)) {
+      mkdirSync2(dirname2(policyPath), { recursive: true });
+      writeFileSync2(policyPath, renderHooksStarterPolicy());
+      io.out(`wrote   ${rel(policyPath)} (hooks.mode: dry-run)`);
+    } else if (!hasTopLevelHooks(readFileSync2(policyPath, "utf8"))) {
+      appendFileSync(policyPath, HOOKS_POLICY_BLOCK);
+      io.out(`added   a hooks: block to ${rel(policyPath)} (hooks.mode: dry-run)`);
+    } else io.out(`kept    ${rel(policyPath)} (it already has a hooks: block)`);
+    for (const client of clients) {
+      const target = hookTarget(client, scope, where, commandFor(client), timeoutS);
+      const { status, backup } = installHook(target);
+      const verb = status === "unchanged" ? "kept   " : status === "updated" ? "updated" : "added  ";
+      io.out(
+        `${verb} ${target.label} ${target.event} hook in ${rel(target.settingsPath)}${backup ? ` (backup: ${rel(backup)})` : ""}`
+      );
+      if (target.note) io.out(`        ${target.note}`);
+    }
+    if (scope === "project" && existsSync2(join2(io.cwd, ".git"))) {
+      const gitignore = join2(io.cwd, ".gitignore");
+      const text = existsSync2(gitignore) ? readFileSync2(gitignore, "utf8") : "";
+      if (!/^\/?\.agentguard\/?$/m.test(text)) {
+        appendFileSync(gitignore, `${text && !text.endsWith("\n") ? "\n" : ""}.agentguard/
+`);
+        io.out(
+          `added   .agentguard/ to .gitignore (approvals, counters and the audit log stay local)`
+        );
+      }
+    }
+    io.out("");
+    io.out("Next:");
+    io.out("  1. start a new session of your coding agent (hooks are read at start)");
+    io.out("  2. work as usual \u2014 hooks.mode is dry-run: decisions are logged, nothing is blocked");
+    io.out("  3. agentguard report        # what enforce mode would have stopped, and why");
+    io.out(`  4. set \`hooks.mode: enforce\` in ${rel(policyPath)} when it looks right`);
+    io.out("  undo: agentguard hooks uninstall" + (scope === "user" ? " --user" : ""));
+    return 0;
+  }
+  if (sub === "uninstall") {
+    let total = 0;
+    for (const client of flagString(args, "client") ? clients : ["claude-code", "codex", "gemini-cli"]) {
+      const target = hookTarget(client, scope, where, commandFor(client), timeoutS);
+      const removed = uninstallHook(target);
+      total += removed;
+      if (removed) io.out(`removed ${target.label} hook from ${rel(target.settingsPath)}`);
+    }
+    if (total === 0) io.out(`no agentguard hooks in ${scope}-level settings`);
+    else
+      io.out(
+        `kept    ${rel(policyPath)} and .agentguard/ (delete them yourself if you want them gone)`
+      );
+    return 0;
+  }
+  if (sub === "status") {
+    for (const s of ["project", "user"]) {
+      for (const client of ["claude-code", "codex", "gemini-cli"]) {
+        const target = hookTarget(client, s, where, "", timeoutS);
+        let handlers;
+        try {
+          handlers = installedHandlers(target);
+        } catch (err) {
+          io.out(
+            `${s.padEnd(7)} ${target.label.padEnd(11)} unreadable: ${err instanceof Error ? err.message : String(err)}`
+          );
+          continue;
+        }
+        io.out(
+          `${s.padEnd(7)} ${target.label.padEnd(11)} ${handlers.length ? `installed: ${String(handlers[0].command)}` : "\u2014"}  (${rel(target.settingsPath)})`
+        );
+      }
+    }
+    return 0;
+  }
+  io.err(
+    "usage: agentguard hooks install|uninstall|status [--project|--user] [--client claude|codex|gemini|all] [--command cmd] [--config path]"
+  );
+  return 1;
+}
+
+export {
+  CLIENT_ALIASES,
+  hookTarget,
+  installedHandlers,
+  hookSettingsFiles,
+  HOOKS_POLICY_BLOCK,
+  renderHooksStarterPolicy,
+  hooksCommand
+};
+//# sourceMappingURL=chunk-3O6KWT3E.js.map

package/dist/chunk-3O6KWT3E.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/hooks/clients.ts","../src/commands/hooks.ts"],"sourcesContent":["/**\n * Where each coding agent reads its pre-execution hooks, and the entry agentguard writes there.\n * Verified 7 October 2026 against:\n *\n * - Claude Code: https://code.claude.com/docs/en/hooks — `hooks.PreToolUse[]` in\n *   `.claude/settings.json` (project) or `~/.claude/settings.json` (user); a matcher with\n *   characters beyond letters, digits, `_`, `-`, `,` and `|` is an unanchored regex; `timeout`\n *   in seconds.\n * - Codex CLI: https://developers.openai.com/codex/hooks — `hooks.PreToolUse[]` in\n *   `.codex/hooks.json` or `~/.codex/hooks.json`; the matcher is a regex over the tool name\n *   (`Bash`, `apply_patch`, `mcp__…`); `timeout` in seconds; a new hook runs only after the user\n *   trusts it in `/hooks`.\n * - Gemini CLI: https://github.com/google-gemini/gemini-cli/blob/main/docs/hooks/reference.md —\n *   `hooks.BeforeTool[]` in `.gemini/settings.json` or `~/.gemini/settings.json`; regex matcher\n *   over `run_shell_command`, `write_file`, `replace`, `mcp_…`; `timeout` in milliseconds.\n */\nimport { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport type { HookClient } from \"@agentwares/agentguard-core\";\n\nexport type InstallScope = \"project\" | \"user\";\n\nexport interface HookTarget {\n  client: HookClient;\n  label: string;\n  scope: InstallScope;\n  settingsPath: string;\n  event: \"PreToolUse\" | \"BeforeTool\";\n  matcher: string;\n  handler: Record<string, unknown>;\n  /** what the user has to do in the client before the hook runs */\n  note?: string;\n}\n\n/** Tools worth a check: the shell, file writes and MCP tools. Reads are left alone. */\nexport const MATCHERS: Record<HookClient, string> = {\n  \"claude-code\": \"^(Bash|PowerShell|Write|Edit|MultiEdit|NotebookEdit)$|^mcp__\",\n  codex: \"^(Bash|apply_patch)$|^mcp__\",\n  \"gemini-cli\": \"^(run_shell_command|write_file|replace)$|^mcp_\",\n};\n\nexport const CLIENT_ALIASES: Record<string, HookClient> = {\n  claude: \"claude-code\",\n  \"claude-code\": \"claude-code\",\n  codex: \"codex\",\n  gemini: \"gemini-cli\",\n  \"gemini-cli\": \"gemini-cli\",\n};\n\nexport function hookTarget(\n  client: HookClient,\n  scope: InstallScope,\n  where: { cwd: string; home: string },\n  command: string,\n  timeoutS = 30,\n): HookTarget {\n  const root = scope === \"project\" ? where.cwd : where.home;\n  if (client === \"claude-code\")\n    return {\n      client,\n      label: \"Claude Code\",\n      scope,\n      settingsPath: join(root, \".claude\", \"settings.json\"),\n      event: \"PreToolUse\",\n      matcher: MATCHERS[client],\n      handler: { type: \"command\", command, timeout: timeoutS, statusMessage: \"agentguard\" },\n    };\n  if (client === \"codex\")\n    return {\n      client,\n      label: \"Codex CLI\",\n      scope,\n      settingsPath: join(root, \".codex\", \"hooks.json\"),\n      event: \"PreToolUse\",\n      matcher: MATCHERS[client],\n      handler: { type: \"command\", command, timeout: timeoutS, statusMessage: \"agentguard\" },\n      note: \"Codex runs a new hook only after you trust it: open /hooks in Codex and trust the agentguard entry.\",\n    };\n  return {\n    client,\n    label: \"Gemini CLI\",\n    scope,\n    settingsPath: join(root, \".gemini\", \"settings.json\"),\n    event: \"BeforeTool\",\n    matcher: MATCHERS[client],\n    handler: {\n      name: \"agentguard\",\n      type: \"command\",\n      command,\n      timeout: timeoutS * 1000,\n      description: \"agentguard: one rulebook for shell commands and file edits\",\n    },\n    note:\n      scope === \"project\"\n        ? \"Gemini CLI fingerprints project hooks: confirm the agentguard hook the first time it asks.\"\n        : undefined,\n  };\n}\n\n/** Is this hook command one agentguard wrote? */\nexport function isAgentguardHookCommand(command: unknown): boolean {\n  return (\n    typeof command === \"string\" &&\n    /agentguard/.test(command) &&\n    /\\bhook\\s+pre-tool-use\\b/.test(command)\n  );\n}\n\ntype Json = Record<string, unknown>;\ninterface MatcherGroup {\n  matcher?: string;\n  hooks?: Json[];\n  [k: string]: unknown;\n}\n\nfunction readSettings(path: string): Json {\n  if (!existsSync(path)) return {};\n  const text = readFileSync(path, \"utf8\");\n  if (!text.trim()) return {};\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text);\n  } catch (err) {\n    throw new Error(\n      `${path} is not valid JSON (${err instanceof Error ? err.message : String(err)}); fix it or move it aside — agentguard will not overwrite it`,\n      { cause: err },\n    );\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed))\n    throw new Error(`${path} is not a JSON object; agentguard will not overwrite it`);\n  return parsed as Json;\n}\n\nfunction groupsOf(settings: Json, event: string): MatcherGroup[] {\n  const hooks = settings.hooks;\n  if (!hooks || typeof hooks !== \"object\") return [];\n  const groups = (hooks as Json)[event];\n  return Array.isArray(groups) ? (groups as MatcherGroup[]) : [];\n}\n\n/** The agentguard handlers currently in a settings file. */\nexport function installedHandlers(target: HookTarget): Json[] {\n  const settings = readSettings(target.settingsPath);\n  return groupsOf(settings, target.event).flatMap((g) =>\n    (g.hooks ?? []).filter((h) => isAgentguardHookCommand(h.command)),\n  );\n}\n\n/**\n * Write (or update in place) the agentguard entry, keeping every other setting and hook. The\n * first change to an existing file leaves a `*.agentguard-backup` next to it.\n */\nexport function installHook(target: HookTarget): {\n  status: \"added\" | \"updated\" | \"unchanged\";\n  backup?: string;\n} {\n  const existed = existsSync(target.settingsPath);\n  const settings = readSettings(target.settingsPath);\n  const hooks = (\n    settings.hooks && typeof settings.hooks === \"object\" ? settings.hooks : {}\n  ) as Json;\n  const groups = groupsOf(settings, target.event);\n  const isOurs = (h: Json): boolean => isAgentguardHookCommand(h.command);\n  const ours = groups.flatMap((g) => (g.hooks ?? []).filter(isOurs));\n  const exact = groups.some(\n    (g) =>\n      g.matcher === target.matcher &&\n      g.hooks?.length === 1 &&\n      JSON.stringify(g.hooks[0]) === JSON.stringify(target.handler),\n  );\n  if (exact && ours.length === 1) return { status: \"unchanged\" };\n  const kept: MatcherGroup[] = [];\n  for (const group of groups) {\n    if (!(group.hooks ?? []).some(isOurs)) {\n      kept.push(group);\n      continue;\n    }\n    const others = (group.hooks ?? []).filter((h) => !isOurs(h));\n    if (others.length > 0) kept.push({ ...group, hooks: others });\n  }\n  kept.push({ matcher: target.matcher, hooks: [target.handler] });\n  const status = ours.length > 0 ? \"updated\" : \"added\";\n  hooks[target.event] = kept;\n  settings.hooks = hooks;\n  let backup: string | undefined;\n  if (existed) {\n    backup = `${target.settingsPath}.agentguard-backup`;\n    if (!existsSync(backup)) copyFileSync(target.settingsPath, backup);\n  }\n  mkdirSync(dirname(target.settingsPath), { recursive: true });\n  writeFileSync(target.settingsPath, JSON.stringify(settings, null, 2) + \"\\n\");\n  return { status, backup };\n}\n\n/** Remove agentguard's entries; other hooks and settings stay. Returns how many were removed. */\nexport function uninstallHook(target: HookTarget): number {\n  if (!existsSync(target.settingsPath)) return 0;\n  const settings = readSettings(target.settingsPath);\n  const groups = groupsOf(settings, target.event);\n  let removed = 0;\n  const kept: MatcherGroup[] = [];\n  for (const group of groups) {\n    const others = (group.hooks ?? []).filter((h) => !isAgentguardHookCommand(h.command));\n    removed += (group.hooks ?? []).length - others.length;\n    if (others.length > 0) kept.push({ ...group, hooks: others });\n  }\n  if (removed === 0) return 0;\n  const hooks = settings.hooks as Json;\n  if (kept.length > 0) hooks[target.event] = kept;\n  else delete hooks[target.event];\n  if (Object.keys(hooks).length === 0) delete settings.hooks;\n  writeFileSync(target.settingsPath, JSON.stringify(settings, null, 2) + \"\\n\");\n  return removed;\n}\n\n/** Every settings file that can hold a hook, project and user level: edits to them are guard-config. */\nexport function hookSettingsFiles(where: { cwd: string; home: string }): string[] {\n  const out: string[] = [];\n  for (const root of [where.cwd, where.home]) {\n    out.push(\n      join(root, \".claude\", \"settings.json\"),\n      join(root, \".claude\", \"settings.local.json\"),\n      join(root, \".codex\", \"hooks.json\"),\n      join(root, \".codex\", \"config.toml\"),\n      join(root, \".gemini\", \"settings.json\"),\n    );\n  }\n  out.push(join(where.home, \".agentguard\", \"agentguard.yaml\"));\n  return out;\n}\n","/**\n * `agentguard hooks install|uninstall|status [--project|--user] [--client claude|codex|gemini]`\n *\n * Install writes the coding agent's pre-execution hook entry (Claude Code `PreToolUse`, Codex\n * `PreToolUse`, Gemini CLI `BeforeTool`) pointing at `agentguard hook pre-tool-use`, and makes\n * sure the policy has a `hooks:` block in dry-run. Uninstall removes only agentguard's entries.\n */\nimport { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join, relative, resolve } from \"node:path\";\nimport type { HookClient } from \"@agentwares/agentguard-core\";\nimport { flagBool, flagList, flagNumber, flagString, type ParsedArgs } from \"../args.js\";\nimport { homeFrom, type Io } from \"../context.js\";\nimport {\n  CLIENT_ALIASES,\n  hookTarget,\n  installHook,\n  installedHandlers,\n  uninstallHook,\n  type InstallScope,\n} from \"../hooks/clients.js\";\nimport { PROXY_PACKAGE } from \"../configs.js\";\nimport { version } from \"../version.js\";\n\n/** The commented `hooks:` block: the file people read, so every knob explains itself. */\nexport const HOOKS_POLICY_BLOCK = `\n# Hook mode: your coding agent's own shell commands and file edits (Claude Code, Codex, Gemini CLI),\n# checked before they run. \\`agentguard hooks install\\` wired it; \\`agentguard report\\` shows the decisions.\nhooks:\n  # dry-run: every decision is logged and nothing is blocked. Read \\`agentguard report\\`, then set\n  # enforce. The kill switch (\\`agentguard kill\\`) stops guarded calls in both modes.\n  mode: dry-run\n  # Irreversible commands run only on a turn a person typed: after the session's previous\n  # irreversible command, recent, and naming the action (\"push it\", or \"yes\" to \"shall I push?\").\n  # Text the model writes, tool output and injected messages never count. Otherwise the agent\n  # gets APPROVAL_REQUIRED and an id; \\`agentguard approve <id>\\` lets that exact command run once.\n  # Built in: git-push, merge, tag-delete, rm-outside-workspace, publish, send, guard-config.\n  irreversible:\n    builtins: true\n    window_s: 1800          # the authorizing turn is at most 30 minutes old\n    require_mention: true   # ...and names the action\n    require_origin: false   # true: only entries Claude Code labels as typed by a person\n    mentions: {}            # extra words per class, e.g. { git-push: [deploy] }\n    rules: []\n    #  - name: deploy\n    #    shell: [\"vercel --prod*\", \"fly deploy*\"]\n    #    mentions: [deploy]\n  shell:\n    deny: []                # e.g. [\"terraform destroy*\", \"curl * | sh\"]\n    approval: []            # e.g. [\"kubectl delete *\"]\n  paths:\n    deny: []                # e.g. [\".env\", \"*.pem\"]\n    approval: []            # e.g. [\"**/migrations/**\"]\n`;\n\n/** A policy for a project that has no agentguard.yaml yet: hooks only, no MCP upstreams. */\nexport function renderHooksStarterPolicy(generatedAt = new Date()): string {\n  return `# agentguard.yaml — generated by \\`agentguard hooks install\\` on ${generatedAt.toISOString().slice(0, 10)}\n# Docs: https://github.com/agentwares/agentguard/tree/main/apps/agentguard-cli#hook-mode-a-coding-agents-own-commands\nversion: 1\n\n# MCP proxy mode (agentguard init) reads upstreams; hook mode needs none.\nmode: dry-run\nupstreams: []\n${HOOKS_POLICY_BLOCK}\n# Kill switch: \\`agentguard kill\\` creates this file; every guarded call is refused until\n# \\`agentguard resume\\`. AGENTGUARD_KILL=1 in the environment does the same.\nkill:\n  file: .agentguard/KILL\n\n# Hash-chained JSONL of every decision; \\`agentguard verify\\` proves it was not edited.\naudit:\n  path: .agentguard/audit.jsonl\n  redact: true\n`;\n}\n\nfunction quoteArg(arg: string): string {\n  return /^[A-Za-z0-9_@%+=:,./-]+$/.test(arg) ? arg : JSON.stringify(arg);\n}\n\nfunction clientsFrom(args: ParsedArgs): HookClient[] {\n  const names = flagList(args, \"client\");\n  if (names.length === 0) return [\"claude-code\"];\n  if (names.includes(\"all\")) return [\"claude-code\", \"codex\", \"gemini-cli\"];\n  return names.map((n) => {\n    const c = CLIENT_ALIASES[n.trim()];\n    if (!c) throw new Error(`unknown --client \"${n}\" (claude, codex, gemini or all)`);\n    return c;\n  });\n}\n\nfunction hasTopLevelHooks(yamlText: string): boolean {\n  return /^hooks\\s*:/m.test(yamlText);\n}\n\nexport async function hooksCommand(args: ParsedArgs, io: Io): Promise<number> {\n  const sub = args.positionals[0] ?? \"status\";\n  const scope: InstallScope = flagBool(args, \"user\") ? \"user\" : \"project\";\n  const home = homeFrom(io);\n  const where = { cwd: io.cwd, home };\n  const rel = (p: string): string => {\n    const r = relative(io.cwd, p);\n    return r.startsWith(\"..\") ? p : r || \".\";\n  };\n  const clients = clientsFrom(args);\n  const policyPath = resolve(\n    io.cwd,\n    flagString(args, \"config\") ??\n      (scope === \"user\" ? join(home, \".agentguard\", \"agentguard.yaml\") : \"agentguard.yaml\"),\n  );\n  const base = flagString(args, \"command\") ?? `npx -y ${PROXY_PACKAGE}@${version()}`;\n  const commandFor = (client: HookClient): string => {\n    let cmd = `${base} hook pre-tool-use --client ${client === \"claude-code\" ? \"claude\" : client === \"gemini-cli\" ? \"gemini\" : \"codex\"}`;\n    if (flagString(args, \"config\")) cmd += ` --config ${quoteArg(policyPath)}`;\n    else if (scope === \"user\") cmd += ` --fallback-config ${quoteArg(policyPath)}`;\n    return cmd;\n  };\n  const timeoutS = Math.max(30, flagNumber(args, \"timeout\") ?? 30);\n\n  if (sub === \"install\") {\n    // the policy first: a hook with no policy to read guards nothing\n    if (!existsSync(policyPath)) {\n      mkdirSync(dirname(policyPath), { recursive: true });\n      writeFileSync(policyPath, renderHooksStarterPolicy());\n      io.out(`wrote   ${rel(policyPath)} (hooks.mode: dry-run)`);\n    } else if (!hasTopLevelHooks(readFileSync(policyPath, \"utf8\"))) {\n      appendFileSync(policyPath, HOOKS_POLICY_BLOCK);\n      io.out(`added   a hooks: block to ${rel(policyPath)} (hooks.mode: dry-run)`);\n    } else io.out(`kept    ${rel(policyPath)} (it already has a hooks: block)`);\n\n    for (const client of clients) {\n      const target = hookTarget(client, scope, where, commandFor(client), timeoutS);\n      const { status, backup } = installHook(target);\n      const verb =\n        status === \"unchanged\" ? \"kept   \" : status === \"updated\" ? \"updated\" : \"added  \";\n      io.out(\n        `${verb} ${target.label} ${target.event} hook in ${rel(target.settingsPath)}${backup ? ` (backup: ${rel(backup)})` : \"\"}`,\n      );\n      if (target.note) io.out(`        ${target.note}`);\n    }\n\n    if (scope === \"project\" && existsSync(join(io.cwd, \".git\"))) {\n      const gitignore = join(io.cwd, \".gitignore\");\n      const text = existsSync(gitignore) ? readFileSync(gitignore, \"utf8\") : \"\";\n      if (!/^\\/?\\.agentguard\\/?$/m.test(text)) {\n        appendFileSync(gitignore, `${text && !text.endsWith(\"\\n\") ? \"\\n\" : \"\"}.agentguard/\\n`);\n        io.out(\n          `added   .agentguard/ to .gitignore (approvals, counters and the audit log stay local)`,\n        );\n      }\n    }\n\n    io.out(\"\");\n    io.out(\"Next:\");\n    io.out(\"  1. start a new session of your coding agent (hooks are read at start)\");\n    io.out(\"  2. work as usual — hooks.mode is dry-run: decisions are logged, nothing is blocked\");\n    io.out(\"  3. agentguard report        # what enforce mode would have stopped, and why\");\n    io.out(`  4. set \\`hooks.mode: enforce\\` in ${rel(policyPath)} when it looks right`);\n    io.out(\"  undo: agentguard hooks uninstall\" + (scope === \"user\" ? \" --user\" : \"\"));\n    return 0;\n  }\n\n  if (sub === \"uninstall\") {\n    let total = 0;\n    for (const client of flagString(args, \"client\")\n      ? clients\n      : ([\"claude-code\", \"codex\", \"gemini-cli\"] as HookClient[])) {\n      const target = hookTarget(client, scope, where, commandFor(client), timeoutS);\n      const removed = uninstallHook(target);\n      total += removed;\n      if (removed) io.out(`removed ${target.label} hook from ${rel(target.settingsPath)}`);\n    }\n    if (total === 0) io.out(`no agentguard hooks in ${scope}-level settings`);\n    else\n      io.out(\n        `kept    ${rel(policyPath)} and .agentguard/ (delete them yourself if you want them gone)`,\n      );\n    return 0;\n  }\n\n  if (sub === \"status\") {\n    for (const s of [\"project\", \"user\"] as InstallScope[]) {\n      for (const client of [\"claude-code\", \"codex\", \"gemini-cli\"] as HookClient[]) {\n        const target = hookTarget(client, s, where, \"\", timeoutS);\n        let handlers: Record<string, unknown>[];\n        try {\n          handlers = installedHandlers(target);\n        } catch (err) {\n          io.out(\n            `${s.padEnd(7)} ${target.label.padEnd(11)} unreadable: ${err instanceof Error ? err.message : String(err)}`,\n          );\n          continue;\n        }\n        io.out(\n          `${s.padEnd(7)} ${target.label.padEnd(11)} ${handlers.length ? `installed: ${String(handlers[0]!.command)}` : \"—\"}  (${rel(target.settingsPath)})`,\n        );\n      }\n    }\n    return 0;\n  }\n\n  io.err(\n    \"usage: agentguard hooks install|uninstall|status [--project|--user] [--client claude|codex|gemini|all] [--command cmd] [--config path]\",\n  );\n  return 1;\n}\n"],"mappings":";;;;;;;;;;;;;AAgBA,SAAS,cAAc,YAAY,WAAW,cAAc,qBAAqB;AACjF,SAAS,SAAS,YAAY;AAkBvB,IAAM,WAAuC;AAAA,EAClD,eAAe;AAAA,EACf,OAAO;AAAA,EACP,cAAc;AAChB;AAEO,IAAM,iBAA6C;AAAA,EACxD,QAAQ;AAAA,EACR,eAAe;AAAA,EACf,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,cAAc;AAChB;AAEO,SAAS,WACd,QACA,OACA,OACA,SACA,WAAW,IACC;AACZ,QAAM,OAAO,UAAU,YAAY,MAAM,MAAM,MAAM;AACrD,MAAI,WAAW;AACb,WAAO;AAAA,MACL;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA,cAAc,KAAK,MAAM,WAAW,eAAe;AAAA,MACnD,OAAO;AAAA,MACP,SAAS,SAAS,MAAM;AAAA,MACxB,SAAS,EAAE,MAAM,WAAW,SAAS,SAAS,UAAU,eAAe,aAAa;AAAA,IACtF;AACF,MAAI,WAAW;AACb,WAAO;AAAA,MACL;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA,cAAc,KAAK,MAAM,UAAU,YAAY;AAAA,MAC/C,OAAO;AAAA,MACP,SAAS,SAAS,MAAM;AAAA,MACxB,SAAS,EAAE,MAAM,WAAW,SAAS,SAAS,UAAU,eAAe,aAAa;AAAA,MACpF,MAAM;AAAA,IACR;AACF,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA,cAAc,KAAK,MAAM,WAAW,eAAe;AAAA,IACnD,OAAO;AAAA,IACP,SAAS,SAAS,MAAM;AAAA,IACxB,SAAS;AAAA,MACP,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,MACA,SAAS,WAAW;AAAA,MACpB,aAAa;AAAA,IACf;AAAA,IACA,MACE,UAAU,YACN,+FACA;AAAA,EACR;AACF;AAGO,SAAS,wBAAwB,SAA2B;AACjE,SACE,OAAO,YAAY,YACnB,aAAa,KAAK,OAAO,KACzB,0BAA0B,KAAK,OAAO;AAE1C;AASA,SAAS,aAAa,MAAoB;AACxC,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO,CAAC;AAC/B,QAAM,OAAO,aAAa,MAAM,MAAM;AACtC,MAAI,CAAC,KAAK,KAAK,EAAG,QAAO,CAAC;AAC1B,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,IAAI;AAAA,EAC1B,SAAS,KAAK;AACZ,UAAM,IAAI;AAAA,MACR,GAAG,IAAI,uBAAuB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,MAC9E,EAAE,OAAO,IAAI;AAAA,IACf;AAAA,EACF;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM;AAC/D,UAAM,IAAI,MAAM,GAAG,IAAI,yDAAyD;AAClF,SAAO;AACT;AAEA,SAAS,SAAS,UAAgB,OAA+B;AAC/D,QAAM,QAAQ,SAAS;AACvB,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO,CAAC;AACjD,QAAM,SAAU,MAAe,KAAK;AACpC,SAAO,MAAM,QAAQ,MAAM,IAAK,SAA4B,CAAC;AAC/D;AAGO,SAAS,kBAAkB,QAA4B;AAC5D,QAAM,WAAW,aAAa,OAAO,YAAY;AACjD,SAAO,SAAS,UAAU,OAAO,KAAK,EAAE;AAAA,IAAQ,CAAC,OAC9C,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,wBAAwB,EAAE,OAAO,CAAC;AAAA,EAClE;AACF;AAMO,SAAS,YAAY,QAG1B;AACA,QAAM,UAAU,WAAW,OAAO,YAAY;AAC9C,QAAM,WAAW,aAAa,OAAO,YAAY;AACjD,QAAM,QACJ,SAAS,SAAS,OAAO,SAAS,UAAU,WAAW,SAAS,QAAQ,CAAC;AAE3E,QAAM,SAAS,SAAS,UAAU,OAAO,KAAK;AAC9C,QAAM,SAAS,CAAC,MAAqB,wBAAwB,EAAE,OAAO;AACtE,QAAM,OAAO,OAAO,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,OAAO,MAAM,CAAC;AACjE,QAAM,QAAQ,OAAO;AAAA,IACnB,CAAC,MACC,EAAE,YAAY,OAAO,WACrB,EAAE,OAAO,WAAW,KACpB,KAAK,UAAU,EAAE,MAAM,CAAC,CAAC,MAAM,KAAK,UAAU,OAAO,OAAO;AAAA,EAChE;AACA,MAAI,SAAS,KAAK,WAAW,EAAG,QAAO,EAAE,QAAQ,YAAY;AAC7D,QAAM,OAAuB,CAAC;AAC9B,aAAW,SAAS,QAAQ;AAC1B,QAAI,EAAE,MAAM,SAAS,CAAC,GAAG,KAAK,MAAM,GAAG;AACrC,WAAK,KAAK,KAAK;AACf;AAAA,IACF;AACA,UAAM,UAAU,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3D,QAAI,OAAO,SAAS,EAAG,MAAK,KAAK,EAAE,GAAG,OAAO,OAAO,OAAO,CAAC;AAAA,EAC9D;AACA,OAAK,KAAK,EAAE,SAAS,OAAO,SAAS,OAAO,CAAC,OAAO,OAAO,EAAE,CAAC;AAC9D,QAAM,SAAS,KAAK,SAAS,IAAI,YAAY;AAC7C,QAAM,OAAO,KAAK,IAAI;AACtB,WAAS,QAAQ;AACjB,MAAI;AACJ,MAAI,SAAS;AACX,aAAS,GAAG,OAAO,YAAY;AAC/B,QAAI,CAAC,WAAW,MAAM,EAAG,cAAa,OAAO,cAAc,MAAM;AAAA,EACnE;AACA,YAAU,QAAQ,OAAO,YAAY,GAAG,EAAE,WAAW,KAAK,CAAC;AAC3D,gBAAc,OAAO,cAAc,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,IAAI;AAC3E,SAAO,EAAE,QAAQ,OAAO;AAC1B;AAGO,SAAS,cAAc,QAA4B;AACxD,MAAI,CAAC,WAAW,OAAO,YAAY,EAAG,QAAO;AAC7C,QAAM,WAAW,aAAa,OAAO,YAAY;AACjD,QAAM,SAAS,SAAS,UAAU,OAAO,KAAK;AAC9C,MAAI,UAAU;AACd,QAAM,OAAuB,CAAC;AAC9B,aAAW,SAAS,QAAQ;AAC1B,UAAM,UAAU,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,OAAO,CAAC;AACpF,gBAAY,MAAM,SAAS,CAAC,GAAG,SAAS,OAAO;AAC/C,QAAI,OAAO,SAAS,EAAG,MAAK,KAAK,EAAE,GAAG,OAAO,OAAO,OAAO,CAAC;AAAA,EAC9D;AACA,MAAI,YAAY,EAAG,QAAO;AAC1B,QAAM,QAAQ,SAAS;AACvB,MAAI,KAAK,SAAS,EAAG,OAAM,OAAO,KAAK,IAAI;AAAA,MACtC,QAAO,MAAM,OAAO,KAAK;AAC9B,MAAI,OAAO,KAAK,KAAK,EAAE,WAAW,EAAG,QAAO,SAAS;AACrD,gBAAc,OAAO,cAAc,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,IAAI;AAC3E,SAAO;AACT;AAGO,SAAS,kBAAkB,OAAgD;AAChF,QAAM,MAAgB,CAAC;AACvB,aAAW,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG;AAC1C,QAAI;AAAA,MACF,KAAK,MAAM,WAAW,eAAe;AAAA,MACrC,KAAK,MAAM,WAAW,qBAAqB;AAAA,MAC3C,KAAK,MAAM,UAAU,YAAY;AAAA,MACjC,KAAK,MAAM,UAAU,aAAa;AAAA,MAClC,KAAK,MAAM,WAAW,eAAe;AAAA,IACvC;AAAA,EACF;AACA,MAAI,KAAK,KAAK,MAAM,MAAM,eAAe,iBAAiB,CAAC;AAC3D,SAAO;AACT;;;AC9NA,SAAS,gBAAgB,cAAAA,aAAY,aAAAC,YAAW,gBAAAC,eAAc,iBAAAC,sBAAqB;AACnF,SAAS,WAAAC,UAAS,QAAAC,OAAM,UAAU,eAAe;AAgB1C,IAAM,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA+B3B,SAAS,yBAAyB,cAAc,oBAAI,KAAK,GAAW;AACzE,SAAO,yEAAoE,YAAY,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOjH,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWpB;AAEA,SAAS,SAAS,KAAqB;AACrC,SAAO,2BAA2B,KAAK,GAAG,IAAI,MAAM,KAAK,UAAU,GAAG;AACxE;AAEA,SAAS,YAAY,MAAgC;AACnD,QAAM,QAAQ,SAAS,MAAM,QAAQ;AACrC,MAAI,MAAM,WAAW,EAAG,QAAO,CAAC,aAAa;AAC7C,MAAI,MAAM,SAAS,KAAK,EAAG,QAAO,CAAC,eAAe,SAAS,YAAY;AACvE,SAAO,MAAM,IAAI,CAAC,MAAM;AACtB,UAAM,IAAI,eAAe,EAAE,KAAK,CAAC;AACjC,QAAI,CAAC,EAAG,OAAM,IAAI,MAAM,qBAAqB,CAAC,kCAAkC;AAChF,WAAO;AAAA,EACT,CAAC;AACH;AAEA,SAAS,iBAAiB,UAA2B;AACnD,SAAO,cAAc,KAAK,QAAQ;AACpC;AAEA,eAAsB,aAAa,MAAkB,IAAyB;AAC5E,QAAM,MAAM,KAAK,YAAY,CAAC,KAAK;AACnC,QAAM,QAAsB,SAAS,MAAM,MAAM,IAAI,SAAS;AAC9D,QAAM,OAAO,SAAS,EAAE;AACxB,QAAM,QAAQ,EAAE,KAAK,GAAG,KAAK,KAAK;AAClC,QAAM,MAAM,CAAC,MAAsB;AACjC,UAAM,IAAI,SAAS,GAAG,KAAK,CAAC;AAC5B,WAAO,EAAE,WAAW,IAAI,IAAI,IAAI,KAAK;AAAA,EACvC;AACA,QAAM,UAAU,YAAY,IAAI;AAChC,QAAM,aAAa;AAAA,IACjB,GAAG;AAAA,IACH,WAAW,MAAM,QAAQ,MACtB,UAAU,SAASC,MAAK,MAAM,eAAe,iBAAiB,IAAI;AAAA,EACvE;AACA,QAAM,OAAO,WAAW,MAAM,SAAS,KAAK,UAAU,aAAa,IAAI,QAAQ,CAAC;AAChF,QAAM,aAAa,CAAC,WAA+B;AACjD,QAAI,MAAM,GAAG,IAAI,+BAA+B,WAAW,gBAAgB,WAAW,WAAW,eAAe,WAAW,OAAO;AAClI,QAAI,WAAW,MAAM,QAAQ,EAAG,QAAO,aAAa,SAAS,UAAU,CAAC;AAAA,aAC/D,UAAU,OAAQ,QAAO,sBAAsB,SAAS,UAAU,CAAC;AAC5E,WAAO;AAAA,EACT;AACA,QAAM,WAAW,KAAK,IAAI,IAAI,WAAW,MAAM,SAAS,KAAK,EAAE;AAE/D,MAAI,QAAQ,WAAW;AAErB,QAAI,CAACC,YAAW,UAAU,GAAG;AAC3B,MAAAC,WAAUC,SAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAClD,MAAAC,eAAc,YAAY,yBAAyB,CAAC;AACpD,SAAG,IAAI,WAAW,IAAI,UAAU,CAAC,wBAAwB;AAAA,IAC3D,WAAW,CAAC,iBAAiBC,cAAa,YAAY,MAAM,CAAC,GAAG;AAC9D,qBAAe,YAAY,kBAAkB;AAC7C,SAAG,IAAI,6BAA6B,IAAI,UAAU,CAAC,wBAAwB;AAAA,IAC7E,MAAO,IAAG,IAAI,WAAW,IAAI,UAAU,CAAC,kCAAkC;AAE1E,eAAW,UAAU,SAAS;AAC5B,YAAM,SAAS,WAAW,QAAQ,OAAO,OAAO,WAAW,MAAM,GAAG,QAAQ;AAC5E,YAAM,EAAE,QAAQ,OAAO,IAAI,YAAY,MAAM;AAC7C,YAAM,OACJ,WAAW,cAAc,YAAY,WAAW,YAAY,YAAY;AAC1E,SAAG;AAAA,QACD,GAAG,IAAI,IAAI,OAAO,KAAK,IAAI,OAAO,KAAK,YAAY,IAAI,OAAO,YAAY,CAAC,GAAG,SAAS,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE;AAAA,MACzH;AACA,UAAI,OAAO,KAAM,IAAG,IAAI,WAAW,OAAO,IAAI,EAAE;AAAA,IAClD;AAEA,QAAI,UAAU,aAAaJ,YAAWD,MAAK,GAAG,KAAK,MAAM,CAAC,GAAG;AAC3D,YAAM,YAAYA,MAAK,GAAG,KAAK,YAAY;AAC3C,YAAM,OAAOC,YAAW,SAAS,IAAII,cAAa,WAAW,MAAM,IAAI;AACvE,UAAI,CAAC,wBAAwB,KAAK,IAAI,GAAG;AACvC,uBAAe,WAAW,GAAG,QAAQ,CAAC,KAAK,SAAS,IAAI,IAAI,OAAO,EAAE;AAAA,CAAgB;AACrF,WAAG;AAAA,UACD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,OAAG,IAAI,EAAE;AACT,OAAG,IAAI,OAAO;AACd,OAAG,IAAI,yEAAyE;AAChF,OAAG,IAAI,2FAAsF;AAC7F,OAAG,IAAI,+EAA+E;AACtF,OAAG,IAAI,uCAAuC,IAAI,UAAU,CAAC,sBAAsB;AACnF,OAAG,IAAI,wCAAwC,UAAU,SAAS,YAAY,GAAG;AACjF,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ,aAAa;AACvB,QAAI,QAAQ;AACZ,eAAW,UAAU,WAAW,MAAM,QAAQ,IAC1C,UACC,CAAC,eAAe,SAAS,YAAY,GAAoB;AAC5D,YAAM,SAAS,WAAW,QAAQ,OAAO,OAAO,WAAW,MAAM,GAAG,QAAQ;AAC5E,YAAM,UAAU,cAAc,MAAM;AACpC,eAAS;AACT,UAAI,QAAS,IAAG,IAAI,WAAW,OAAO,KAAK,cAAc,IAAI,OAAO,YAAY,CAAC,EAAE;AAAA,IACrF;AACA,QAAI,UAAU,EAAG,IAAG,IAAI,0BAA0B,KAAK,iBAAiB;AAAA;AAEtE,SAAG;AAAA,QACD,WAAW,IAAI,UAAU,CAAC;AAAA,MAC5B;AACF,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ,UAAU;AACpB,eAAW,KAAK,CAAC,WAAW,MAAM,GAAqB;AACrD,iBAAW,UAAU,CAAC,eAAe,SAAS,YAAY,GAAmB;AAC3E,cAAM,SAAS,WAAW,QAAQ,GAAG,OAAO,IAAI,QAAQ;AACxD,YAAI;AACJ,YAAI;AACF,qBAAW,kBAAkB,MAAM;AAAA,QACrC,SAAS,KAAK;AACZ,aAAG;AAAA,YACD,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,OAAO,MAAM,OAAO,EAAE,CAAC,gBAAgB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,UAC3G;AACA;AAAA,QACF;AACA,WAAG;AAAA,UACD,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,OAAO,MAAM,OAAO,EAAE,CAAC,IAAI,SAAS,SAAS,cAAc,OAAO,SAAS,CAAC,EAAG,OAAO,CAAC,KAAK,QAAG,MAAM,IAAI,OAAO,YAAY,CAAC;AAAA,QACjJ;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,KAAG;AAAA,IACD;AAAA,EACF;AACA,SAAO;AACT;","names":["existsSync","mkdirSync","readFileSync","writeFileSync","dirname","join","join","existsSync","mkdirSync","dirname","writeFileSync","readFileSync"]}

package/dist/chunk-5WRI5ZAA.js

@@ -0,0 +1,31 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __commonJS = (cb, mod) => function __require() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+export {
+  __commonJS,
+  __toESM
+};
+//# sourceMappingURL=chunk-5WRI5ZAA.js.map

package/dist/chunk-5WRI5ZAA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}