@agentwares/agentguard 0.1.9 → 0.1.10

package/llms.txt

@@ -1,14 +1,16 @@
-# agentguard
+# okgate
 
-> MCP policy proxy for AI agents: hard spend limits, destructive-action gating with approvals, kill switch, scoped agent keys, dry-run writes with mutation diffs, semantic loop breaker, blast-radius caps, hash-chained audit log. CLI `npx @agentwares/agentguard`; SDK `@agentwares/agentguard-sdk`. No LLM calls, no phone-home, no account.
+> Nothing irreversible without an OK. okgate (formerly agentguard) is an MCP policy proxy and coding-agent hook: hard spend limits, destructive-action gating with approvals, kill switch, scoped agent keys, dry-run writes with mutation diffs, semantic loop breaker, blast-radius caps, hash-chained audit log. CLI `npx -p @agentwares/agentguard okgate`; SDK `@agentwares/agentguard-sdk`. No LLM calls, no phone-home, no account.
 
-Set up: `npx -y @agentwares/agentguard init` in the project directory writes agentguard.yaml (dry-run) and routes the project's MCP servers through the proxy. The same command ships as a Claude Code plugin (`/plugin marketplace add agentwares/agentguard`, then `/plugin install agentguard@agentwares`) and a Gemini CLI extension (`gemini extensions install https://github.com/agentwares/agentguard`).
+Set up: `npx -y -p @agentwares/agentguard okgate init` in the project directory writes okgate.yaml (dry-run) and routes the project's MCP servers through the proxy. The same command ships as a Claude Code plugin (`/plugin marketplace add agentwares/agentguard`, then `/plugin install agentguard@agentwares`) and a Gemini CLI extension (`gemini extensions install https://github.com/agentwares/agentguard`).
 
-Started with no agentguard.yaml (an editor install button, a registry install, the repo's Dockerfile), the proxy fronts no servers and serves three read-only tools of its own: `agentguard_get_status` (what it guards, caps used and remaining, kill switch, pending approvals), `agentguard_get_report` (what a run did, or would have done in dry-run) and `agentguard_verify_audit_log` (the hash chain). With upstreams configured, the agent sees only the upstreams' tools.
+Started with no okgate.yaml (an editor install button, a registry install, the repo's Dockerfile), the proxy fronts no servers and serves three read-only tools of its own: `okgate_get_status` (what it guards, caps used and remaining, kill switch, pending approvals), `okgate_get_report` (what a run did, or would have done in dry-run) and `okgate_verify_audit_log` (the hash chain). The agentguard_* names they had before the rename still work until 2027-01-15. With upstreams configured, the agent sees only the upstreams' tools.
 
-Hook mode: `npx -y @agentwares/agentguard hooks install` (add `--client codex`, `--client gemini` or `--client all`) writes a pre-execution hook (Claude Code PreToolUse, Codex PreToolUse, Gemini CLI BeforeTool) that checks the coding agent's own shell commands, file edits and MCP calls against the same agentguard.yaml. Irreversible commands (git push, merges, tag deletion, rm outside the workspace, package publish, sending mail or messages, edits to the guard itself) run only on a recent turn a person typed that names the action; in Claude Code that is read from the session transcript, and text the model writes never counts. Otherwise the agent gets APPROVAL_REQUIRED with an id, and `agentguard approve <id>` lets the identical command run once. Dry-run (log only) until `hooks.mode: enforce`.
+Renamed from agentguard on 8 Oct 2026: agentguard.yaml, an existing .agentguard/ directory, AGENTGUARD_* variables, the `agentguard` bin and the agentguard_* tool names keep working; npm serves the `okgate` bin from @agentwares/agentguard until @agentwares/okgate is published.
 
-Audit: `npx -y @agentwares/agentguard audit [--since 7d|30d|all] [--json]` reads the repository's CLAUDE.md, AGENTS.md, GEMINI.md and .cursor/rules (and `audit.rules` in agentguard.yaml) and this machine's Claude Code and Codex sessions in it, and reports per rule how many sessions broke it and when. Rules are recognised by a pattern library with no LLM (never push to main, never force-push, never --no-verify, run X before pushing, use pnpm not npm, do not edit or commit a path, no new dependencies without asking, never rm outside the repo, never publish, never deploy, never run a named command), or stated with an inline `<!-- agentguard: <check> -->`. It runs locally and sends nothing; `--json` carries counts, rule ids and dates only. `--enforce` writes the checkable rules into agentguard.yaml as hook-mode rules in dry-run and installs the hook. The plugin's `/agentguard:audit` has your own agent judge the rules no script can check.
+Hook mode: `npx -y -p @agentwares/agentguard okgate hooks install` (add `--client codex`, `--client gemini` or `--client all`) writes a pre-execution hook (Claude Code PreToolUse, Codex PreToolUse, Gemini CLI BeforeTool) that checks the coding agent's own shell commands, file edits and MCP calls against the same okgate.yaml. Irreversible commands (git push, merges, tag deletion, rm outside the workspace, package publish, sending mail or messages, edits to the guard itself) run only on a recent turn a person typed that names the action; in Claude Code that is read from the session transcript, and text the model writes never counts. Otherwise the agent gets APPROVAL_REQUIRED with an id, and `npx -p @agentwares/agentguard okgate approve <id>` lets the identical command run once. Dry-run (log only) until `hooks.mode: enforce`.
+
+Audit: `npx -y -p @agentwares/agentguard okgate audit [--since 7d|30d|all] [--json]` reads the repository's CLAUDE.md, AGENTS.md, GEMINI.md and .cursor/rules (and `audit.rules` in okgate.yaml) and this machine's Claude Code and Codex sessions in it, and reports per rule how many sessions broke it and when. Rules are recognised by a pattern library with no LLM (never push to main, never force-push, never --no-verify, run X before pushing, use pnpm not npm, do not edit or commit a path, no new dependencies without asking, never rm outside the repo, never publish, never deploy, never run a named command), or stated with an inline `<!-- okgate: <check> -->` (`<!-- agentguard: … -->` still works). It runs locally and sends nothing; `--json` carries counts, rule ids and dates only. `--enforce` writes the checkable rules into okgate.yaml as hook-mode rules in dry-run and installs the hook. The plugin's `/agentguard:audit` has your own agent judge the rules no script can check.
 
 ## Links
 

package/package.json

@@ -1,10 +1,11 @@
 {
   "name": "@agentwares/agentguard",
-  "version": "0.1.9",
-  "description": "MCP policy proxy for AI agents: hard spend limits, destructive-action gating with approvals, a kill switch, scoped credentials, dry-run writes with mutation diffs, loop breaker, blast-radius caps and a hash-chained audit log. Hook mode applies the same policy to Claude Code, Codex and Gemini CLI shell commands and file edits, and runs irreversible commands only on a turn a person typed. Audit mode reports which CLAUDE.md / AGENTS.md rules your coding agents broke, from your own sessions, locally. No LLM calls, no phone-home, no account.",
+  "version": "0.1.10",
+  "description": "okgate (formerly agentguard): nothing irreversible without an OK. MCP policy proxy for AI agents: hard spend limits, destructive-action gating with approvals, a kill switch, scoped credentials, dry-run writes with mutation diffs, loop breaker, blast-radius caps and a hash-chained audit log. Hook mode applies the same policy to Claude Code, Codex and Gemini CLI shell commands and file edits, and runs irreversible commands only on a turn a person typed. Audit mode reports which CLAUDE.md / AGENTS.md rules your coding agents broke, from your own sessions, locally. No LLM calls, no phone-home, no account. Runs as `okgate`; the `agentguard` bin, agentguard.yaml, .agentguard/ and AGENTGUARD_* keep working.",
   "license": "MIT",
   "type": "module",
   "bin": {
+    "okgate": "./dist/cli.js",
     "agentguard": "./dist/cli.js"
   },
   "main": "./dist/index.js",
@@ -13,6 +14,9 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./cli": {
+      "import": "./dist/cli.js"
     }
   },
   "files": [
@@ -25,7 +29,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "mcpName": "io.github.agentwares/agentguard",
+  "mcpName": "io.github.agentwares/okgate",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/agentwares/agentguard.git",
@@ -33,6 +37,8 @@
   },
   "homepage": "https://github.com/agentwares/agentguard#readme",
   "keywords": [
+    "okgate",
+    "agentguard",
     "mcp",
     "mcp-proxy",
     "model-context-protocol",
@@ -68,7 +74,7 @@
     "conformance": "node scripts/conformance.mjs"
   },
   "dependencies": {
-    "@agentwares/agentguard-core": "^0.1.5",
+    "@agentwares/agentguard-core": "^0.1.6",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "yaml": "^2.9.0",
     "zod": "^4.5.4"

package/server.json

@@ -1,35 +1,35 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
-  "name": "io.github.agentwares/agentguard",
-  "description": "MCP policy proxy: spend caps, approvals for destructive tools, kill switch, dry-run, audit log.",
-  "version": "0.1.9",
+  "name": "io.github.agentwares/okgate",
+  "description": "Nothing irreversible without an OK: MCP policy proxy with spend caps, approvals, kill switch.",
+  "version": "0.1.10",
   "repository": {
     "url": "https://github.com/agentwares/agentguard",
     "source": "github",
     "subfolder": "apps/agentguard-cli"
   },
-  "title": "agentguard",
+  "title": "okgate",
   "websiteUrl": "https://github.com/agentwares/agentguard/tree/main/apps/agentguard-cli",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@agentwares/agentguard",
-      "version": "0.1.9",
+      "version": "0.1.10",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"
       },
       "environmentVariables": [
         {
-          "name": "AGENTGUARD_CONFIG",
-          "description": "Path to agentguard.yaml (default ./agentguard.yaml). If unset and that file does not exist, agentguard serves only its own read-only tools: agentguard_get_status, agentguard_get_report, agentguard_verify_audit_log",
+          "name": "OKGATE_CONFIG",
+          "description": "Path to okgate.yaml (default ./okgate.yaml, else ./agentguard.yaml; AGENTGUARD_CONFIG also works). With neither file, okgate serves only its own read-only tools: okgate_get_status, okgate_get_report, okgate_verify_audit_log",
           "isRequired": false,
           "format": "filepath"
         },
         {
-          "name": "AGENTGUARD_KILL",
-          "description": "Set to 1 to halt every tool call (kill switch)",
+          "name": "OKGATE_KILL",
+          "description": "Set to 1 to halt every tool call (kill switch); AGENTGUARD_KILL=1 does the same",
           "isRequired": false
         }
       ]

package/dist/audit-2YCMHMCP.js

@@ -1,17 +0,0 @@
-import {
-  TEAM_HISTORY_LINE,
-  TEAM_HISTORY_URL,
-  auditCommand,
-  parseSince
-} from "./chunk-6S7LYVOC.js";
-import "./chunk-3O6KWT3E.js";
-import "./chunk-TW5KJREH.js";
-import "./chunk-SUXQTT3X.js";
-import "./chunk-5WRI5ZAA.js";
-export {
-  TEAM_HISTORY_LINE,
-  TEAM_HISTORY_URL,
-  auditCommand,
-  parseSince
-};
-//# sourceMappingURL=audit-2YCMHMCP.js.map

package/dist/chunk-3O6KWT3E.js

@@ -1,345 +0,0 @@
-import {
-  PROXY_PACKAGE
-} from "./chunk-TW5KJREH.js";
-import {
-  flagBool,
-  flagList,
-  flagNumber,
-  flagString,
-  homeFrom,
-  version
-} from "./chunk-SUXQTT3X.js";
-
-// src/hooks/clients.ts
-import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
-import { dirname, join } from "path";
-var MATCHERS = {
-  "claude-code": "^(Bash|PowerShell|Write|Edit|MultiEdit|NotebookEdit)$|^mcp__",
-  codex: "^(Bash|apply_patch)$|^mcp__",
-  "gemini-cli": "^(run_shell_command|write_file|replace)$|^mcp_"
-};
-var CLIENT_ALIASES = {
-  claude: "claude-code",
-  "claude-code": "claude-code",
-  codex: "codex",
-  gemini: "gemini-cli",
-  "gemini-cli": "gemini-cli"
-};
-function hookTarget(client, scope, where, command, timeoutS = 30) {
-  const root = scope === "project" ? where.cwd : where.home;
-  if (client === "claude-code")
-    return {
-      client,
-      label: "Claude Code",
-      scope,
-      settingsPath: join(root, ".claude", "settings.json"),
-      event: "PreToolUse",
-      matcher: MATCHERS[client],
-      handler: { type: "command", command, timeout: timeoutS, statusMessage: "agentguard" }
-    };
-  if (client === "codex")
-    return {
-      client,
-      label: "Codex CLI",
-      scope,
-      settingsPath: join(root, ".codex", "hooks.json"),
-      event: "PreToolUse",
-      matcher: MATCHERS[client],
-      handler: { type: "command", command, timeout: timeoutS, statusMessage: "agentguard" },
-      note: "Codex runs a new hook only after you trust it: open /hooks in Codex and trust the agentguard entry."
-    };
-  return {
-    client,
-    label: "Gemini CLI",
-    scope,
-    settingsPath: join(root, ".gemini", "settings.json"),
-    event: "BeforeTool",
-    matcher: MATCHERS[client],
-    handler: {
-      name: "agentguard",
-      type: "command",
-      command,
-      timeout: timeoutS * 1e3,
-      description: "agentguard: one rulebook for shell commands and file edits"
-    },
-    note: scope === "project" ? "Gemini CLI fingerprints project hooks: confirm the agentguard hook the first time it asks." : void 0
-  };
-}
-function isAgentguardHookCommand(command) {
-  return typeof command === "string" && /agentguard/.test(command) && /\bhook\s+pre-tool-use\b/.test(command);
-}
-function readSettings(path) {
-  if (!existsSync(path)) return {};
-  const text = readFileSync(path, "utf8");
-  if (!text.trim()) return {};
-  let parsed;
-  try {
-    parsed = JSON.parse(text);
-  } catch (err) {
-    throw new Error(
-      `${path} is not valid JSON (${err instanceof Error ? err.message : String(err)}); fix it or move it aside \u2014 agentguard will not overwrite it`,
-      { cause: err }
-    );
-  }
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
-    throw new Error(`${path} is not a JSON object; agentguard will not overwrite it`);
-  return parsed;
-}
-function groupsOf(settings, event) {
-  const hooks = settings.hooks;
-  if (!hooks || typeof hooks !== "object") return [];
-  const groups = hooks[event];
-  return Array.isArray(groups) ? groups : [];
-}
-function installedHandlers(target) {
-  const settings = readSettings(target.settingsPath);
-  return groupsOf(settings, target.event).flatMap(
-    (g) => (g.hooks ?? []).filter((h) => isAgentguardHookCommand(h.command))
-  );
-}
-function installHook(target) {
-  const existed = existsSync(target.settingsPath);
-  const settings = readSettings(target.settingsPath);
-  const hooks = settings.hooks && typeof settings.hooks === "object" ? settings.hooks : {};
-  const groups = groupsOf(settings, target.event);
-  const isOurs = (h) => isAgentguardHookCommand(h.command);
-  const ours = groups.flatMap((g) => (g.hooks ?? []).filter(isOurs));
-  const exact = groups.some(
-    (g) => g.matcher === target.matcher && g.hooks?.length === 1 && JSON.stringify(g.hooks[0]) === JSON.stringify(target.handler)
-  );
-  if (exact && ours.length === 1) return { status: "unchanged" };
-  const kept = [];
-  for (const group of groups) {
-    if (!(group.hooks ?? []).some(isOurs)) {
-      kept.push(group);
-      continue;
-    }
-    const others = (group.hooks ?? []).filter((h) => !isOurs(h));
-    if (others.length > 0) kept.push({ ...group, hooks: others });
-  }
-  kept.push({ matcher: target.matcher, hooks: [target.handler] });
-  const status = ours.length > 0 ? "updated" : "added";
-  hooks[target.event] = kept;
-  settings.hooks = hooks;
-  let backup;
-  if (existed) {
-    backup = `${target.settingsPath}.agentguard-backup`;
-    if (!existsSync(backup)) copyFileSync(target.settingsPath, backup);
-  }
-  mkdirSync(dirname(target.settingsPath), { recursive: true });
-  writeFileSync(target.settingsPath, JSON.stringify(settings, null, 2) + "\n");
-  return { status, backup };
-}
-function uninstallHook(target) {
-  if (!existsSync(target.settingsPath)) return 0;
-  const settings = readSettings(target.settingsPath);
-  const groups = groupsOf(settings, target.event);
-  let removed = 0;
-  const kept = [];
-  for (const group of groups) {
-    const others = (group.hooks ?? []).filter((h) => !isAgentguardHookCommand(h.command));
-    removed += (group.hooks ?? []).length - others.length;
-    if (others.length > 0) kept.push({ ...group, hooks: others });
-  }
-  if (removed === 0) return 0;
-  const hooks = settings.hooks;
-  if (kept.length > 0) hooks[target.event] = kept;
-  else delete hooks[target.event];
-  if (Object.keys(hooks).length === 0) delete settings.hooks;
-  writeFileSync(target.settingsPath, JSON.stringify(settings, null, 2) + "\n");
-  return removed;
-}
-function hookSettingsFiles(where) {
-  const out = [];
-  for (const root of [where.cwd, where.home]) {
-    out.push(
-      join(root, ".claude", "settings.json"),
-      join(root, ".claude", "settings.local.json"),
-      join(root, ".codex", "hooks.json"),
-      join(root, ".codex", "config.toml"),
-      join(root, ".gemini", "settings.json")
-    );
-  }
-  out.push(join(where.home, ".agentguard", "agentguard.yaml"));
-  return out;
-}
-
-// src/commands/hooks.ts
-import { appendFileSync, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
-import { dirname as dirname2, join as join2, relative, resolve } from "path";
-var HOOKS_POLICY_BLOCK = `
-# Hook mode: your coding agent's own shell commands and file edits (Claude Code, Codex, Gemini CLI),
-# checked before they run. \`agentguard hooks install\` wired it; \`agentguard report\` shows the decisions.
-hooks:
-  # dry-run: every decision is logged and nothing is blocked. Read \`agentguard report\`, then set
-  # enforce. The kill switch (\`agentguard kill\`) stops guarded calls in both modes.
-  mode: dry-run
-  # Irreversible commands run only on a turn a person typed: after the session's previous
-  # irreversible command, recent, and naming the action ("push it", or "yes" to "shall I push?").
-  # Text the model writes, tool output and injected messages never count. Otherwise the agent
-  # gets APPROVAL_REQUIRED and an id; \`agentguard approve <id>\` lets that exact command run once.
-  # Built in: git-push, merge, tag-delete, rm-outside-workspace, publish, send, guard-config.
-  irreversible:
-    builtins: true
-    window_s: 1800          # the authorizing turn is at most 30 minutes old
-    require_mention: true   # ...and names the action
-    require_origin: false   # true: only entries Claude Code labels as typed by a person
-    mentions: {}            # extra words per class, e.g. { git-push: [deploy] }
-    rules: []
-    #  - name: deploy
-    #    shell: ["vercel --prod*", "fly deploy*"]
-    #    mentions: [deploy]
-  shell:
-    deny: []                # e.g. ["terraform destroy*", "curl * | sh"]
-    approval: []            # e.g. ["kubectl delete *"]
-  paths:
-    deny: []                # e.g. [".env", "*.pem"]
-    approval: []            # e.g. ["**/migrations/**"]
-`;
-function renderHooksStarterPolicy(generatedAt = /* @__PURE__ */ new Date()) {
-  return `# agentguard.yaml \u2014 generated by \`agentguard hooks install\` on ${generatedAt.toISOString().slice(0, 10)}
-# Docs: https://github.com/agentwares/agentguard/tree/main/apps/agentguard-cli#hook-mode-a-coding-agents-own-commands
-version: 1
-
-# MCP proxy mode (agentguard init) reads upstreams; hook mode needs none.
-mode: dry-run
-upstreams: []
-${HOOKS_POLICY_BLOCK}
-# Kill switch: \`agentguard kill\` creates this file; every guarded call is refused until
-# \`agentguard resume\`. AGENTGUARD_KILL=1 in the environment does the same.
-kill:
-  file: .agentguard/KILL
-
-# Hash-chained JSONL of every decision; \`agentguard verify\` proves it was not edited.
-audit:
-  path: .agentguard/audit.jsonl
-  redact: true
-`;
-}
-function quoteArg(arg) {
-  return /^[A-Za-z0-9_@%+=:,./-]+$/.test(arg) ? arg : JSON.stringify(arg);
-}
-function clientsFrom(args) {
-  const names = flagList(args, "client");
-  if (names.length === 0) return ["claude-code"];
-  if (names.includes("all")) return ["claude-code", "codex", "gemini-cli"];
-  return names.map((n) => {
-    const c = CLIENT_ALIASES[n.trim()];
-    if (!c) throw new Error(`unknown --client "${n}" (claude, codex, gemini or all)`);
-    return c;
-  });
-}
-function hasTopLevelHooks(yamlText) {
-  return /^hooks\s*:/m.test(yamlText);
-}
-async function hooksCommand(args, io) {
-  const sub = args.positionals[0] ?? "status";
-  const scope = flagBool(args, "user") ? "user" : "project";
-  const home = homeFrom(io);
-  const where = { cwd: io.cwd, home };
-  const rel = (p) => {
-    const r = relative(io.cwd, p);
-    return r.startsWith("..") ? p : r || ".";
-  };
-  const clients = clientsFrom(args);
-  const policyPath = resolve(
-    io.cwd,
-    flagString(args, "config") ?? (scope === "user" ? join2(home, ".agentguard", "agentguard.yaml") : "agentguard.yaml")
-  );
-  const base = flagString(args, "command") ?? `npx -y ${PROXY_PACKAGE}@${version()}`;
-  const commandFor = (client) => {
-    let cmd = `${base} hook pre-tool-use --client ${client === "claude-code" ? "claude" : client === "gemini-cli" ? "gemini" : "codex"}`;
-    if (flagString(args, "config")) cmd += ` --config ${quoteArg(policyPath)}`;
-    else if (scope === "user") cmd += ` --fallback-config ${quoteArg(policyPath)}`;
-    return cmd;
-  };
-  const timeoutS = Math.max(30, flagNumber(args, "timeout") ?? 30);
-  if (sub === "install") {
-    if (!existsSync2(policyPath)) {
-      mkdirSync2(dirname2(policyPath), { recursive: true });
-      writeFileSync2(policyPath, renderHooksStarterPolicy());
-      io.out(`wrote   ${rel(policyPath)} (hooks.mode: dry-run)`);
-    } else if (!hasTopLevelHooks(readFileSync2(policyPath, "utf8"))) {
-      appendFileSync(policyPath, HOOKS_POLICY_BLOCK);
-      io.out(`added   a hooks: block to ${rel(policyPath)} (hooks.mode: dry-run)`);
-    } else io.out(`kept    ${rel(policyPath)} (it already has a hooks: block)`);
-    for (const client of clients) {
-      const target = hookTarget(client, scope, where, commandFor(client), timeoutS);
-      const { status, backup } = installHook(target);
-      const verb = status === "unchanged" ? "kept   " : status === "updated" ? "updated" : "added  ";
-      io.out(
-        `${verb} ${target.label} ${target.event} hook in ${rel(target.settingsPath)}${backup ? ` (backup: ${rel(backup)})` : ""}`
-      );
-      if (target.note) io.out(`        ${target.note}`);
-    }
-    if (scope === "project" && existsSync2(join2(io.cwd, ".git"))) {
-      const gitignore = join2(io.cwd, ".gitignore");
-      const text = existsSync2(gitignore) ? readFileSync2(gitignore, "utf8") : "";
-      if (!/^\/?\.agentguard\/?$/m.test(text)) {
-        appendFileSync(gitignore, `${text && !text.endsWith("\n") ? "\n" : ""}.agentguard/
-`);
-        io.out(
-          `added   .agentguard/ to .gitignore (approvals, counters and the audit log stay local)`
-        );
-      }
-    }
-    io.out("");
-    io.out("Next:");
-    io.out("  1. start a new session of your coding agent (hooks are read at start)");
-    io.out("  2. work as usual \u2014 hooks.mode is dry-run: decisions are logged, nothing is blocked");
-    io.out("  3. agentguard report        # what enforce mode would have stopped, and why");
-    io.out(`  4. set \`hooks.mode: enforce\` in ${rel(policyPath)} when it looks right`);
-    io.out("  undo: agentguard hooks uninstall" + (scope === "user" ? " --user" : ""));
-    return 0;
-  }
-  if (sub === "uninstall") {
-    let total = 0;
-    for (const client of flagString(args, "client") ? clients : ["claude-code", "codex", "gemini-cli"]) {
-      const target = hookTarget(client, scope, where, commandFor(client), timeoutS);
-      const removed = uninstallHook(target);
-      total += removed;
-      if (removed) io.out(`removed ${target.label} hook from ${rel(target.settingsPath)}`);
-    }
-    if (total === 0) io.out(`no agentguard hooks in ${scope}-level settings`);
-    else
-      io.out(
-        `kept    ${rel(policyPath)} and .agentguard/ (delete them yourself if you want them gone)`
-      );
-    return 0;
-  }
-  if (sub === "status") {
-    for (const s of ["project", "user"]) {
-      for (const client of ["claude-code", "codex", "gemini-cli"]) {
-        const target = hookTarget(client, s, where, "", timeoutS);
-        let handlers;
-        try {
-          handlers = installedHandlers(target);
-        } catch (err) {
-          io.out(
-            `${s.padEnd(7)} ${target.label.padEnd(11)} unreadable: ${err instanceof Error ? err.message : String(err)}`
-          );
-          continue;
-        }
-        io.out(
-          `${s.padEnd(7)} ${target.label.padEnd(11)} ${handlers.length ? `installed: ${String(handlers[0].command)}` : "\u2014"}  (${rel(target.settingsPath)})`
-        );
-      }
-    }
-    return 0;
-  }
-  io.err(
-    "usage: agentguard hooks install|uninstall|status [--project|--user] [--client claude|codex|gemini|all] [--command cmd] [--config path]"
-  );
-  return 1;
-}
-
-export {
-  CLIENT_ALIASES,
-  hookTarget,
-  installedHandlers,
-  hookSettingsFiles,
-  HOOKS_POLICY_BLOCK,
-  renderHooksStarterPolicy,
-  hooksCommand
-};
-//# sourceMappingURL=chunk-3O6KWT3E.js.map

package/dist/chunk-3O6KWT3E.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/hooks/clients.ts","../src/commands/hooks.ts"],"sourcesContent":["/**\n * Where each coding agent reads its pre-execution hooks, and the entry agentguard writes there.\n * Verified 7 October 2026 against:\n *\n * - Claude Code: https://code.claude.com/docs/en/hooks — `hooks.PreToolUse[]` in\n *   `.claude/settings.json` (project) or `~/.claude/settings.json` (user); a matcher with\n *   characters beyond letters, digits, `_`, `-`, `,` and `|` is an unanchored regex; `timeout`\n *   in seconds.\n * - Codex CLI: https://developers.openai.com/codex/hooks — `hooks.PreToolUse[]` in\n *   `.codex/hooks.json` or `~/.codex/hooks.json`; the matcher is a regex over the tool name\n *   (`Bash`, `apply_patch`, `mcp__…`); `timeout` in seconds; a new hook runs only after the user\n *   trusts it in `/hooks`.\n * - Gemini CLI: https://github.com/google-gemini/gemini-cli/blob/main/docs/hooks/reference.md —\n *   `hooks.BeforeTool[]` in `.gemini/settings.json` or `~/.gemini/settings.json`; regex matcher\n *   over `run_shell_command`, `write_file`, `replace`, `mcp_…`; `timeout` in milliseconds.\n */\nimport { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport type { HookClient } from \"@agentwares/agentguard-core\";\n\nexport type InstallScope = \"project\" | \"user\";\n\nexport interface HookTarget {\n  client: HookClient;\n  label: string;\n  scope: InstallScope;\n  settingsPath: string;\n  event: \"PreToolUse\" | \"BeforeTool\";\n  matcher: string;\n  handler: Record<string, unknown>;\n  /** what the user has to do in the client before the hook runs */\n  note?: string;\n}\n\n/** Tools worth a check: the shell, file writes and MCP tools. Reads are left alone. */\nexport const MATCHERS: Record<HookClient, string> = {\n  \"claude-code\": \"^(Bash|PowerShell|Write|Edit|MultiEdit|NotebookEdit)$|^mcp__\",\n  codex: \"^(Bash|apply_patch)$|^mcp__\",\n  \"gemini-cli\": \"^(run_shell_command|write_file|replace)$|^mcp_\",\n};\n\nexport const CLIENT_ALIASES: Record<string, HookClient> = {\n  claude: \"claude-code\",\n  \"claude-code\": \"claude-code\",\n  codex: \"codex\",\n  gemini: \"gemini-cli\",\n  \"gemini-cli\": \"gemini-cli\",\n};\n\nexport function hookTarget(\n  client: HookClient,\n  scope: InstallScope,\n  where: { cwd: string; home: string },\n  command: string,\n  timeoutS = 30,\n): HookTarget {\n  const root = scope === \"project\" ? where.cwd : where.home;\n  if (client === \"claude-code\")\n    return {\n      client,\n      label: \"Claude Code\",\n      scope,\n      settingsPath: join(root, \".claude\", \"settings.json\"),\n      event: \"PreToolUse\",\n      matcher: MATCHERS[client],\n      handler: { type: \"command\", command, timeout: timeoutS, statusMessage: \"agentguard\" },\n    };\n  if (client === \"codex\")\n    return {\n      client,\n      label: \"Codex CLI\",\n      scope,\n      settingsPath: join(root, \".codex\", \"hooks.json\"),\n      event: \"PreToolUse\",\n      matcher: MATCHERS[client],\n      handler: { type: \"command\", command, timeout: timeoutS, statusMessage: \"agentguard\" },\n      note: \"Codex runs a new hook only after you trust it: open /hooks in Codex and trust the agentguard entry.\",\n    };\n  return {\n    client,\n    label: \"Gemini CLI\",\n    scope,\n    settingsPath: join(root, \".gemini\", \"settings.json\"),\n    event: \"BeforeTool\",\n    matcher: MATCHERS[client],\n    handler: {\n      name: \"agentguard\",\n      type: \"command\",\n      command,\n      timeout: timeoutS * 1000,\n      description: \"agentguard: one rulebook for shell commands and file edits\",\n    },\n    note:\n      scope === \"project\"\n        ? \"Gemini CLI fingerprints project hooks: confirm the agentguard hook the first time it asks.\"\n        : undefined,\n  };\n}\n\n/** Is this hook command one agentguard wrote? */\nexport function isAgentguardHookCommand(command: unknown): boolean {\n  return (\n    typeof command === \"string\" &&\n    /agentguard/.test(command) &&\n    /\\bhook\\s+pre-tool-use\\b/.test(command)\n  );\n}\n\ntype Json = Record<string, unknown>;\ninterface MatcherGroup {\n  matcher?: string;\n  hooks?: Json[];\n  [k: string]: unknown;\n}\n\nfunction readSettings(path: string): Json {\n  if (!existsSync(path)) return {};\n  const text = readFileSync(path, \"utf8\");\n  if (!text.trim()) return {};\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text);\n  } catch (err) {\n    throw new Error(\n      `${path} is not valid JSON (${err instanceof Error ? err.message : String(err)}); fix it or move it aside — agentguard will not overwrite it`,\n      { cause: err },\n    );\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed))\n    throw new Error(`${path} is not a JSON object; agentguard will not overwrite it`);\n  return parsed as Json;\n}\n\nfunction groupsOf(settings: Json, event: string): MatcherGroup[] {\n  const hooks = settings.hooks;\n  if (!hooks || typeof hooks !== \"object\") return [];\n  const groups = (hooks as Json)[event];\n  return Array.isArray(groups) ? (groups as MatcherGroup[]) : [];\n}\n\n/** The agentguard handlers currently in a settings file. */\nexport function installedHandlers(target: HookTarget): Json[] {\n  const settings = readSettings(target.settingsPath);\n  return groupsOf(settings, target.event).flatMap((g) =>\n    (g.hooks ?? []).filter((h) => isAgentguardHookCommand(h.command)),\n  );\n}\n\n/**\n * Write (or update in place) the agentguard entry, keeping every other setting and hook. The\n * first change to an existing file leaves a `*.agentguard-backup` next to it.\n */\nexport function installHook(target: HookTarget): {\n  status: \"added\" | \"updated\" | \"unchanged\";\n  backup?: string;\n} {\n  const existed = existsSync(target.settingsPath);\n  const settings = readSettings(target.settingsPath);\n  const hooks = (\n    settings.hooks && typeof settings.hooks === \"object\" ? settings.hooks : {}\n  ) as Json;\n  const groups = groupsOf(settings, target.event);\n  const isOurs = (h: Json): boolean => isAgentguardHookCommand(h.command);\n  const ours = groups.flatMap((g) => (g.hooks ?? []).filter(isOurs));\n  const exact = groups.some(\n    (g) =>\n      g.matcher === target.matcher &&\n      g.hooks?.length === 1 &&\n      JSON.stringify(g.hooks[0]) === JSON.stringify(target.handler),\n  );\n  if (exact && ours.length === 1) return { status: \"unchanged\" };\n  const kept: MatcherGroup[] = [];\n  for (const group of groups) {\n    if (!(group.hooks ?? []).some(isOurs)) {\n      kept.push(group);\n      continue;\n    }\n    const others = (group.hooks ?? []).filter((h) => !isOurs(h));\n    if (others.length > 0) kept.push({ ...group, hooks: others });\n  }\n  kept.push({ matcher: target.matcher, hooks: [target.handler] });\n  const status = ours.length > 0 ? \"updated\" : \"added\";\n  hooks[target.event] = kept;\n  settings.hooks = hooks;\n  let backup: string | undefined;\n  if (existed) {\n    backup = `${target.settingsPath}.agentguard-backup`;\n    if (!existsSync(backup)) copyFileSync(target.settingsPath, backup);\n  }\n  mkdirSync(dirname(target.settingsPath), { recursive: true });\n  writeFileSync(target.settingsPath, JSON.stringify(settings, null, 2) + \"\\n\");\n  return { status, backup };\n}\n\n/** Remove agentguard's entries; other hooks and settings stay. Returns how many were removed. */\nexport function uninstallHook(target: HookTarget): number {\n  if (!existsSync(target.settingsPath)) return 0;\n  const settings = readSettings(target.settingsPath);\n  const groups = groupsOf(settings, target.event);\n  let removed = 0;\n  const kept: MatcherGroup[] = [];\n  for (const group of groups) {\n    const others = (group.hooks ?? []).filter((h) => !isAgentguardHookCommand(h.command));\n    removed += (group.hooks ?? []).length - others.length;\n    if (others.length > 0) kept.push({ ...group, hooks: others });\n  }\n  if (removed === 0) return 0;\n  const hooks = settings.hooks as Json;\n  if (kept.length > 0) hooks[target.event] = kept;\n  else delete hooks[target.event];\n  if (Object.keys(hooks).length === 0) delete settings.hooks;\n  writeFileSync(target.settingsPath, JSON.stringify(settings, null, 2) + \"\\n\");\n  return removed;\n}\n\n/** Every settings file that can hold a hook, project and user level: edits to them are guard-config. */\nexport function hookSettingsFiles(where: { cwd: string; home: string }): string[] {\n  const out: string[] = [];\n  for (const root of [where.cwd, where.home]) {\n    out.push(\n      join(root, \".claude\", \"settings.json\"),\n      join(root, \".claude\", \"settings.local.json\"),\n      join(root, \".codex\", \"hooks.json\"),\n      join(root, \".codex\", \"config.toml\"),\n      join(root, \".gemini\", \"settings.json\"),\n    );\n  }\n  out.push(join(where.home, \".agentguard\", \"agentguard.yaml\"));\n  return out;\n}\n","/**\n * `agentguard hooks install|uninstall|status [--project|--user] [--client claude|codex|gemini]`\n *\n * Install writes the coding agent's pre-execution hook entry (Claude Code `PreToolUse`, Codex\n * `PreToolUse`, Gemini CLI `BeforeTool`) pointing at `agentguard hook pre-tool-use`, and makes\n * sure the policy has a `hooks:` block in dry-run. Uninstall removes only agentguard's entries.\n */\nimport { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join, relative, resolve } from \"node:path\";\nimport type { HookClient } from \"@agentwares/agentguard-core\";\nimport { flagBool, flagList, flagNumber, flagString, type ParsedArgs } from \"../args.js\";\nimport { homeFrom, type Io } from \"../context.js\";\nimport {\n  CLIENT_ALIASES,\n  hookTarget,\n  installHook,\n  installedHandlers,\n  uninstallHook,\n  type InstallScope,\n} from \"../hooks/clients.js\";\nimport { PROXY_PACKAGE } from \"../configs.js\";\nimport { version } from \"../version.js\";\n\n/** The commented `hooks:` block: the file people read, so every knob explains itself. */\nexport const HOOKS_POLICY_BLOCK = `\n# Hook mode: your coding agent's own shell commands and file edits (Claude Code, Codex, Gemini CLI),\n# checked before they run. \\`agentguard hooks install\\` wired it; \\`agentguard report\\` shows the decisions.\nhooks:\n  # dry-run: every decision is logged and nothing is blocked. Read \\`agentguard report\\`, then set\n  # enforce. The kill switch (\\`agentguard kill\\`) stops guarded calls in both modes.\n  mode: dry-run\n  # Irreversible commands run only on a turn a person typed: after the session's previous\n  # irreversible command, recent, and naming the action (\"push it\", or \"yes\" to \"shall I push?\").\n  # Text the model writes, tool output and injected messages never count. Otherwise the agent\n  # gets APPROVAL_REQUIRED and an id; \\`agentguard approve <id>\\` lets that exact command run once.\n  # Built in: git-push, merge, tag-delete, rm-outside-workspace, publish, send, guard-config.\n  irreversible:\n    builtins: true\n    window_s: 1800          # the authorizing turn is at most 30 minutes old\n    require_mention: true   # ...and names the action\n    require_origin: false   # true: only entries Claude Code labels as typed by a person\n    mentions: {}            # extra words per class, e.g. { git-push: [deploy] }\n    rules: []\n    #  - name: deploy\n    #    shell: [\"vercel --prod*\", \"fly deploy*\"]\n    #    mentions: [deploy]\n  shell:\n    deny: []                # e.g. [\"terraform destroy*\", \"curl * | sh\"]\n    approval: []            # e.g. [\"kubectl delete *\"]\n  paths:\n    deny: []                # e.g. [\".env\", \"*.pem\"]\n    approval: []            # e.g. [\"**/migrations/**\"]\n`;\n\n/** A policy for a project that has no agentguard.yaml yet: hooks only, no MCP upstreams. */\nexport function renderHooksStarterPolicy(generatedAt = new Date()): string {\n  return `# agentguard.yaml — generated by \\`agentguard hooks install\\` on ${generatedAt.toISOString().slice(0, 10)}\n# Docs: https://github.com/agentwares/agentguard/tree/main/apps/agentguard-cli#hook-mode-a-coding-agents-own-commands\nversion: 1\n\n# MCP proxy mode (agentguard init) reads upstreams; hook mode needs none.\nmode: dry-run\nupstreams: []\n${HOOKS_POLICY_BLOCK}\n# Kill switch: \\`agentguard kill\\` creates this file; every guarded call is refused until\n# \\`agentguard resume\\`. AGENTGUARD_KILL=1 in the environment does the same.\nkill:\n  file: .agentguard/KILL\n\n# Hash-chained JSONL of every decision; \\`agentguard verify\\` proves it was not edited.\naudit:\n  path: .agentguard/audit.jsonl\n  redact: true\n`;\n}\n\nfunction quoteArg(arg: string): string {\n  return /^[A-Za-z0-9_@%+=:,./-]+$/.test(arg) ? arg : JSON.stringify(arg);\n}\n\nfunction clientsFrom(args: ParsedArgs): HookClient[] {\n  const names = flagList(args, \"client\");\n  if (names.length === 0) return [\"claude-code\"];\n  if (names.includes(\"all\")) return [\"claude-code\", \"codex\", \"gemini-cli\"];\n  return names.map((n) => {\n    const c = CLIENT_ALIASES[n.trim()];\n    if (!c) throw new Error(`unknown --client \"${n}\" (claude, codex, gemini or all)`);\n    return c;\n  });\n}\n\nfunction hasTopLevelHooks(yamlText: string): boolean {\n  return /^hooks\\s*:/m.test(yamlText);\n}\n\nexport async function hooksCommand(args: ParsedArgs, io: Io): Promise<number> {\n  const sub = args.positionals[0] ?? \"status\";\n  const scope: InstallScope = flagBool(args, \"user\") ? \"user\" : \"project\";\n  const home = homeFrom(io);\n  const where = { cwd: io.cwd, home };\n  const rel = (p: string): string => {\n    const r = relative(io.cwd, p);\n    return r.startsWith(\"..\") ? p : r || \".\";\n  };\n  const clients = clientsFrom(args);\n  const policyPath = resolve(\n    io.cwd,\n    flagString(args, \"config\") ??\n      (scope === \"user\" ? join(home, \".agentguard\", \"agentguard.yaml\") : \"agentguard.yaml\"),\n  );\n  const base = flagString(args, \"command\") ?? `npx -y ${PROXY_PACKAGE}@${version()}`;\n  const commandFor = (client: HookClient): string => {\n    let cmd = `${base} hook pre-tool-use --client ${client === \"claude-code\" ? \"claude\" : client === \"gemini-cli\" ? \"gemini\" : \"codex\"}`;\n    if (flagString(args, \"config\")) cmd += ` --config ${quoteArg(policyPath)}`;\n    else if (scope === \"user\") cmd += ` --fallback-config ${quoteArg(policyPath)}`;\n    return cmd;\n  };\n  const timeoutS = Math.max(30, flagNumber(args, \"timeout\") ?? 30);\n\n  if (sub === \"install\") {\n    // the policy first: a hook with no policy to read guards nothing\n    if (!existsSync(policyPath)) {\n      mkdirSync(dirname(policyPath), { recursive: true });\n      writeFileSync(policyPath, renderHooksStarterPolicy());\n      io.out(`wrote   ${rel(policyPath)} (hooks.mode: dry-run)`);\n    } else if (!hasTopLevelHooks(readFileSync(policyPath, \"utf8\"))) {\n      appendFileSync(policyPath, HOOKS_POLICY_BLOCK);\n      io.out(`added   a hooks: block to ${rel(policyPath)} (hooks.mode: dry-run)`);\n    } else io.out(`kept    ${rel(policyPath)} (it already has a hooks: block)`);\n\n    for (const client of clients) {\n      const target = hookTarget(client, scope, where, commandFor(client), timeoutS);\n      const { status, backup } = installHook(target);\n      const verb =\n        status === \"unchanged\" ? \"kept   \" : status === \"updated\" ? \"updated\" : \"added  \";\n      io.out(\n        `${verb} ${target.label} ${target.event} hook in ${rel(target.settingsPath)}${backup ? ` (backup: ${rel(backup)})` : \"\"}`,\n      );\n      if (target.note) io.out(`        ${target.note}`);\n    }\n\n    if (scope === \"project\" && existsSync(join(io.cwd, \".git\"))) {\n      const gitignore = join(io.cwd, \".gitignore\");\n      const text = existsSync(gitignore) ? readFileSync(gitignore, \"utf8\") : \"\";\n      if (!/^\\/?\\.agentguard\\/?$/m.test(text)) {\n        appendFileSync(gitignore, `${text && !text.endsWith(\"\\n\") ? \"\\n\" : \"\"}.agentguard/\\n`);\n        io.out(\n          `added   .agentguard/ to .gitignore (approvals, counters and the audit log stay local)`,\n        );\n      }\n    }\n\n    io.out(\"\");\n    io.out(\"Next:\");\n    io.out(\"  1. start a new session of your coding agent (hooks are read at start)\");\n    io.out(\"  2. work as usual — hooks.mode is dry-run: decisions are logged, nothing is blocked\");\n    io.out(\"  3. agentguard report        # what enforce mode would have stopped, and why\");\n    io.out(`  4. set \\`hooks.mode: enforce\\` in ${rel(policyPath)} when it looks right`);\n    io.out(\"  undo: agentguard hooks uninstall\" + (scope === \"user\" ? \" --user\" : \"\"));\n    return 0;\n  }\n\n  if (sub === \"uninstall\") {\n    let total = 0;\n    for (const client of flagString(args, \"client\")\n      ? clients\n      : ([\"claude-code\", \"codex\", \"gemini-cli\"] as HookClient[])) {\n      const target = hookTarget(client, scope, where, commandFor(client), timeoutS);\n      const removed = uninstallHook(target);\n      total += removed;\n      if (removed) io.out(`removed ${target.label} hook from ${rel(target.settingsPath)}`);\n    }\n    if (total === 0) io.out(`no agentguard hooks in ${scope}-level settings`);\n    else\n      io.out(\n        `kept    ${rel(policyPath)} and .agentguard/ (delete them yourself if you want them gone)`,\n      );\n    return 0;\n  }\n\n  if (sub === \"status\") {\n    for (const s of [\"project\", \"user\"] as InstallScope[]) {\n      for (const client of [\"claude-code\", \"codex\", \"gemini-cli\"] as HookClient[]) {\n        const target = hookTarget(client, s, where, \"\", timeoutS);\n        let handlers: Record<string, unknown>[];\n        try {\n          handlers = installedHandlers(target);\n        } catch (err) {\n          io.out(\n            `${s.padEnd(7)} ${target.label.padEnd(11)} unreadable: ${err instanceof Error ? err.message : String(err)}`,\n          );\n          continue;\n        }\n        io.out(\n          `${s.padEnd(7)} ${target.label.padEnd(11)} ${handlers.length ? `installed: ${String(handlers[0]!.command)}` : \"—\"}  (${rel(target.settingsPath)})`,\n        );\n      }\n    }\n    return 0;\n  }\n\n  io.err(\n    \"usage: agentguard hooks install|uninstall|status [--project|--user] [--client claude|codex|gemini|all] [--command cmd] [--config path]\",\n  );\n  return 1;\n}\n"],"mappings":";;;;;;;;;;;;;AAgBA,SAAS,cAAc,YAAY,WAAW,cAAc,qBAAqB;AACjF,SAAS,SAAS,YAAY;AAkBvB,IAAM,WAAuC;AAAA,EAClD,eAAe;AAAA,EACf,OAAO;AAAA,EACP,cAAc;AAChB;AAEO,IAAM,iBAA6C;AAAA,EACxD,QAAQ;AAAA,EACR,eAAe;AAAA,EACf,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,cAAc;AAChB;AAEO,SAAS,WACd,QACA,OACA,OACA,SACA,WAAW,IACC;AACZ,QAAM,OAAO,UAAU,YAAY,MAAM,MAAM,MAAM;AACrD,MAAI,WAAW;AACb,WAAO;AAAA,MACL;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA,cAAc,KAAK,MAAM,WAAW,eAAe;AAAA,MACnD,OAAO;AAAA,MACP,SAAS,SAAS,MAAM;AAAA,MACxB,SAAS,EAAE,MAAM,WAAW,SAAS,SAAS,UAAU,eAAe,aAAa;AAAA,IACtF;AACF,MAAI,WAAW;AACb,WAAO;AAAA,MACL;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA,cAAc,KAAK,MAAM,UAAU,YAAY;AAAA,MAC/C,OAAO;AAAA,MACP,SAAS,SAAS,MAAM;AAAA,MACxB,SAAS,EAAE,MAAM,WAAW,SAAS,SAAS,UAAU,eAAe,aAAa;AAAA,MACpF,MAAM;AAAA,IACR;AACF,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA,cAAc,KAAK,MAAM,WAAW,eAAe;AAAA,IACnD,OAAO;AAAA,IACP,SAAS,SAAS,MAAM;AAAA,IACxB,SAAS;AAAA,MACP,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,MACA,SAAS,WAAW;AAAA,MACpB,aAAa;AAAA,IACf;AAAA,IACA,MACE,UAAU,YACN,+FACA;AAAA,EACR;AACF;AAGO,SAAS,wBAAwB,SAA2B;AACjE,SACE,OAAO,YAAY,YACnB,aAAa,KAAK,OAAO,KACzB,0BAA0B,KAAK,OAAO;AAE1C;AASA,SAAS,aAAa,MAAoB;AACxC,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO,CAAC;AAC/B,QAAM,OAAO,aAAa,MAAM,MAAM;AACtC,MAAI,CAAC,KAAK,KAAK,EAAG,QAAO,CAAC;AAC1B,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,IAAI;AAAA,EAC1B,SAAS,KAAK;AACZ,UAAM,IAAI;AAAA,MACR,GAAG,IAAI,uBAAuB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,MAC9E,EAAE,OAAO,IAAI;AAAA,IACf;AAAA,EACF;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM;AAC/D,UAAM,IAAI,MAAM,GAAG,IAAI,yDAAyD;AAClF,SAAO;AACT;AAEA,SAAS,SAAS,UAAgB,OAA+B;AAC/D,QAAM,QAAQ,SAAS;AACvB,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO,CAAC;AACjD,QAAM,SAAU,MAAe,KAAK;AACpC,SAAO,MAAM,QAAQ,MAAM,IAAK,SAA4B,CAAC;AAC/D;AAGO,SAAS,kBAAkB,QAA4B;AAC5D,QAAM,WAAW,aAAa,OAAO,YAAY;AACjD,SAAO,SAAS,UAAU,OAAO,KAAK,EAAE;AAAA,IAAQ,CAAC,OAC9C,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,wBAAwB,EAAE,OAAO,CAAC;AAAA,EAClE;AACF;AAMO,SAAS,YAAY,QAG1B;AACA,QAAM,UAAU,WAAW,OAAO,YAAY;AAC9C,QAAM,WAAW,aAAa,OAAO,YAAY;AACjD,QAAM,QACJ,SAAS,SAAS,OAAO,SAAS,UAAU,WAAW,SAAS,QAAQ,CAAC;AAE3E,QAAM,SAAS,SAAS,UAAU,OAAO,KAAK;AAC9C,QAAM,SAAS,CAAC,MAAqB,wBAAwB,EAAE,OAAO;AACtE,QAAM,OAAO,OAAO,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,OAAO,MAAM,CAAC;AACjE,QAAM,QAAQ,OAAO;AAAA,IACnB,CAAC,MACC,EAAE,YAAY,OAAO,WACrB,EAAE,OAAO,WAAW,KACpB,KAAK,UAAU,EAAE,MAAM,CAAC,CAAC,MAAM,KAAK,UAAU,OAAO,OAAO;AAAA,EAChE;AACA,MAAI,SAAS,KAAK,WAAW,EAAG,QAAO,EAAE,QAAQ,YAAY;AAC7D,QAAM,OAAuB,CAAC;AAC9B,aAAW,SAAS,QAAQ;AAC1B,QAAI,EAAE,MAAM,SAAS,CAAC,GAAG,KAAK,MAAM,GAAG;AACrC,WAAK,KAAK,KAAK;AACf;AAAA,IACF;AACA,UAAM,UAAU,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3D,QAAI,OAAO,SAAS,EAAG,MAAK,KAAK,EAAE,GAAG,OAAO,OAAO,OAAO,CAAC;AAAA,EAC9D;AACA,OAAK,KAAK,EAAE,SAAS,OAAO,SAAS,OAAO,CAAC,OAAO,OAAO,EAAE,CAAC;AAC9D,QAAM,SAAS,KAAK,SAAS,IAAI,YAAY;AAC7C,QAAM,OAAO,KAAK,IAAI;AACtB,WAAS,QAAQ;AACjB,MAAI;AACJ,MAAI,SAAS;AACX,aAAS,GAAG,OAAO,YAAY;AAC/B,QAAI,CAAC,WAAW,MAAM,EAAG,cAAa,OAAO,cAAc,MAAM;AAAA,EACnE;AACA,YAAU,QAAQ,OAAO,YAAY,GAAG,EAAE,WAAW,KAAK,CAAC;AAC3D,gBAAc,OAAO,cAAc,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,IAAI;AAC3E,SAAO,EAAE,QAAQ,OAAO;AAC1B;AAGO,SAAS,cAAc,QAA4B;AACxD,MAAI,CAAC,WAAW,OAAO,YAAY,EAAG,QAAO;AAC7C,QAAM,WAAW,aAAa,OAAO,YAAY;AACjD,QAAM,SAAS,SAAS,UAAU,OAAO,KAAK;AAC9C,MAAI,UAAU;AACd,QAAM,OAAuB,CAAC;AAC9B,aAAW,SAAS,QAAQ;AAC1B,UAAM,UAAU,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,OAAO,CAAC;AACpF,gBAAY,MAAM,SAAS,CAAC,GAAG,SAAS,OAAO;AAC/C,QAAI,OAAO,SAAS,EAAG,MAAK,KAAK,EAAE,GAAG,OAAO,OAAO,OAAO,CAAC;AAAA,EAC9D;AACA,MAAI,YAAY,EAAG,QAAO;AAC1B,QAAM,QAAQ,SAAS;AACvB,MAAI,KAAK,SAAS,EAAG,OAAM,OAAO,KAAK,IAAI;AAAA,MACtC,QAAO,MAAM,OAAO,KAAK;AAC9B,MAAI,OAAO,KAAK,KAAK,EAAE,WAAW,EAAG,QAAO,SAAS;AACrD,gBAAc,OAAO,cAAc,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,IAAI;AAC3E,SAAO;AACT;AAGO,SAAS,kBAAkB,OAAgD;AAChF,QAAM,MAAgB,CAAC;AACvB,aAAW,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG;AAC1C,QAAI;AAAA,MACF,KAAK,MAAM,WAAW,eAAe;AAAA,MACrC,KAAK,MAAM,WAAW,qBAAqB;AAAA,MAC3C,KAAK,MAAM,UAAU,YAAY;AAAA,MACjC,KAAK,MAAM,UAAU,aAAa;AAAA,MAClC,KAAK,MAAM,WAAW,eAAe;AAAA,IACvC;AAAA,EACF;AACA,MAAI,KAAK,KAAK,MAAM,MAAM,eAAe,iBAAiB,CAAC;AAC3D,SAAO;AACT;;;AC9NA,SAAS,gBAAgB,cAAAA,aAAY,aAAAC,YAAW,gBAAAC,eAAc,iBAAAC,sBAAqB;AACnF,SAAS,WAAAC,UAAS,QAAAC,OAAM,UAAU,eAAe;AAgB1C,IAAM,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA+B3B,SAAS,yBAAyB,cAAc,oBAAI,KAAK,GAAW;AACzE,SAAO,yEAAoE,YAAY,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOjH,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWpB;AAEA,SAAS,SAAS,KAAqB;AACrC,SAAO,2BAA2B,KAAK,GAAG,IAAI,MAAM,KAAK,UAAU,GAAG;AACxE;AAEA,SAAS,YAAY,MAAgC;AACnD,QAAM,QAAQ,SAAS,MAAM,QAAQ;AACrC,MAAI,MAAM,WAAW,EAAG,QAAO,CAAC,aAAa;AAC7C,MAAI,MAAM,SAAS,KAAK,EAAG,QAAO,CAAC,eAAe,SAAS,YAAY;AACvE,SAAO,MAAM,IAAI,CAAC,MAAM;AACtB,UAAM,IAAI,eAAe,EAAE,KAAK,CAAC;AACjC,QAAI,CAAC,EAAG,OAAM,IAAI,MAAM,qBAAqB,CAAC,kCAAkC;AAChF,WAAO;AAAA,EACT,CAAC;AACH;AAEA,SAAS,iBAAiB,UAA2B;AACnD,SAAO,cAAc,KAAK,QAAQ;AACpC;AAEA,eAAsB,aAAa,MAAkB,IAAyB;AAC5E,QAAM,MAAM,KAAK,YAAY,CAAC,KAAK;AACnC,QAAM,QAAsB,SAAS,MAAM,MAAM,IAAI,SAAS;AAC9D,QAAM,OAAO,SAAS,EAAE;AACxB,QAAM,QAAQ,EAAE,KAAK,GAAG,KAAK,KAAK;AAClC,QAAM,MAAM,CAAC,MAAsB;AACjC,UAAM,IAAI,SAAS,GAAG,KAAK,CAAC;AAC5B,WAAO,EAAE,WAAW,IAAI,IAAI,IAAI,KAAK;AAAA,EACvC;AACA,QAAM,UAAU,YAAY,IAAI;AAChC,QAAM,aAAa;AAAA,IACjB,GAAG;AAAA,IACH,WAAW,MAAM,QAAQ,MACtB,UAAU,SAASC,MAAK,MAAM,eAAe,iBAAiB,IAAI;AAAA,EACvE;AACA,QAAM,OAAO,WAAW,MAAM,SAAS,KAAK,UAAU,aAAa,IAAI,QAAQ,CAAC;AAChF,QAAM,aAAa,CAAC,WAA+B;AACjD,QAAI,MAAM,GAAG,IAAI,+BAA+B,WAAW,gBAAgB,WAAW,WAAW,eAAe,WAAW,OAAO;AAClI,QAAI,WAAW,MAAM,QAAQ,EAAG,QAAO,aAAa,SAAS,UAAU,CAAC;AAAA,aAC/D,UAAU,OAAQ,QAAO,sBAAsB,SAAS,UAAU,CAAC;AAC5E,WAAO;AAAA,EACT;AACA,QAAM,WAAW,KAAK,IAAI,IAAI,WAAW,MAAM,SAAS,KAAK,EAAE;AAE/D,MAAI,QAAQ,WAAW;AAErB,QAAI,CAACC,YAAW,UAAU,GAAG;AAC3B,MAAAC,WAAUC,SAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAClD,MAAAC,eAAc,YAAY,yBAAyB,CAAC;AACpD,SAAG,IAAI,WAAW,IAAI,UAAU,CAAC,wBAAwB;AAAA,IAC3D,WAAW,CAAC,iBAAiBC,cAAa,YAAY,MAAM,CAAC,GAAG;AAC9D,qBAAe,YAAY,kBAAkB;AAC7C,SAAG,IAAI,6BAA6B,IAAI,UAAU,CAAC,wBAAwB;AAAA,IAC7E,MAAO,IAAG,IAAI,WAAW,IAAI,UAAU,CAAC,kCAAkC;AAE1E,eAAW,UAAU,SAAS;AAC5B,YAAM,SAAS,WAAW,QAAQ,OAAO,OAAO,WAAW,MAAM,GAAG,QAAQ;AAC5E,YAAM,EAAE,QAAQ,OAAO,IAAI,YAAY,MAAM;AAC7C,YAAM,OACJ,WAAW,cAAc,YAAY,WAAW,YAAY,YAAY;AAC1E,SAAG;AAAA,QACD,GAAG,IAAI,IAAI,OAAO,KAAK,IAAI,OAAO,KAAK,YAAY,IAAI,OAAO,YAAY,CAAC,GAAG,SAAS,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE;AAAA,MACzH;AACA,UAAI,OAAO,KAAM,IAAG,IAAI,WAAW,OAAO,IAAI,EAAE;AAAA,IAClD;AAEA,QAAI,UAAU,aAAaJ,YAAWD,MAAK,GAAG,KAAK,MAAM,CAAC,GAAG;AAC3D,YAAM,YAAYA,MAAK,GAAG,KAAK,YAAY;AAC3C,YAAM,OAAOC,YAAW,SAAS,IAAII,cAAa,WAAW,MAAM,IAAI;AACvE,UAAI,CAAC,wBAAwB,KAAK,IAAI,GAAG;AACvC,uBAAe,WAAW,GAAG,QAAQ,CAAC,KAAK,SAAS,IAAI,IAAI,OAAO,EAAE;AAAA,CAAgB;AACrF,WAAG;AAAA,UACD;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,OAAG,IAAI,EAAE;AACT,OAAG,IAAI,OAAO;AACd,OAAG,IAAI,yEAAyE;AAChF,OAAG,IAAI,2FAAsF;AAC7F,OAAG,IAAI,+EAA+E;AACtF,OAAG,IAAI,uCAAuC,IAAI,UAAU,CAAC,sBAAsB;AACnF,OAAG,IAAI,wCAAwC,UAAU,SAAS,YAAY,GAAG;AACjF,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ,aAAa;AACvB,QAAI,QAAQ;AACZ,eAAW,UAAU,WAAW,MAAM,QAAQ,IAC1C,UACC,CAAC,eAAe,SAAS,YAAY,GAAoB;AAC5D,YAAM,SAAS,WAAW,QAAQ,OAAO,OAAO,WAAW,MAAM,GAAG,QAAQ;AAC5E,YAAM,UAAU,cAAc,MAAM;AACpC,eAAS;AACT,UAAI,QAAS,IAAG,IAAI,WAAW,OAAO,KAAK,cAAc,IAAI,OAAO,YAAY,CAAC,EAAE;AAAA,IACrF;AACA,QAAI,UAAU,EAAG,IAAG,IAAI,0BAA0B,KAAK,iBAAiB;AAAA;AAEtE,SAAG;AAAA,QACD,WAAW,IAAI,UAAU,CAAC;AAAA,MAC5B;AACF,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ,UAAU;AACpB,eAAW,KAAK,CAAC,WAAW,MAAM,GAAqB;AACrD,iBAAW,UAAU,CAAC,eAAe,SAAS,YAAY,GAAmB;AAC3E,cAAM,SAAS,WAAW,QAAQ,GAAG,OAAO,IAAI,QAAQ;AACxD,YAAI;AACJ,YAAI;AACF,qBAAW,kBAAkB,MAAM;AAAA,QACrC,SAAS,KAAK;AACZ,aAAG;AAAA,YACD,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,OAAO,MAAM,OAAO,EAAE,CAAC,gBAAgB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,UAC3G;AACA;AAAA,QACF;AACA,WAAG;AAAA,UACD,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,OAAO,MAAM,OAAO,EAAE,CAAC,IAAI,SAAS,SAAS,cAAc,OAAO,SAAS,CAAC,EAAG,OAAO,CAAC,KAAK,QAAG,MAAM,IAAI,OAAO,YAAY,CAAC;AAAA,QACjJ;AAAA,MACF;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,KAAG;AAAA,IACD;AAAA,EACF;AACA,SAAO;AACT;","names":["existsSync","mkdirSync","readFileSync","writeFileSync","dirname","join","join","existsSync","mkdirSync","dirname","writeFileSync","readFileSync"]}