@ggui-ai/cli 0.2.0-alpha.4 → 0.3.0-rc.0

package/dist/provider-key-command.js

@@ -0,0 +1,222 @@
+/**
+ * `ggui provider-key set` — push a provider API key to a cloud ggui app.
+ *
+ * Resolves the target provider either from:
+ *   - `--provider <name>` flag (explicit, validated against BYOK set)
+ *   - `ggui.json#generation.model` (via `parseAnyLlmRoute` from @ggui-ai/protocol)
+ *
+ * Then reads the key from the appropriate environment variable and
+ * POSTs it to `POST /v1/apps/{appId}/provider-keys`.
+ */
+/* eslint-disable no-console */
+import process from 'node:process';
+import { parseAnyLlmRoute } from '@ggui-ai/protocol';
+import { z } from 'zod';
+import { setAppProviderKey } from './api-client.js';
+import { findGguiJson, readGguiJson } from './internal/ggui-json.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// BYOK provider set — bedrock is excluded (IAM-only, no plaintext key to push)
+// ─────────────────────────────────────────────────────────────────────────────
+/** Providers that accept a user-supplied plaintext API key. */
+export const BYOK_PROVIDERS = ['anthropic', 'openai', 'google', 'openrouter'];
+function isByokProvider(s) {
+    return BYOK_PROVIDERS.includes(s);
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// inferProvider
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Resolve which LLM provider to push a key for.
+ *
+ * Priority:
+ *   1. `flagProvider` (explicit `--provider` flag) — validated against BYOK set.
+ *      Bedrock → descriptive error. Unknown provider → error.
+ *   2. `ggui.json#generation.model` — parsed via `parseAnyLlmRoute` from
+ *      `@ggui-ai/protocol`. Bedrock → error. Unparseable / absent → error.
+ *
+ * **Does NOT hand-roll a provider parser.** All model-string parsing goes
+ * through `parseAnyLlmRoute` (covers both canonical `provider:model` and
+ * LiteLLM `provider/model` forms).
+ */
+export function inferProvider(gguiJson, flagProvider) {
+    if (flagProvider !== undefined) {
+        if (flagProvider === 'bedrock') {
+            return { error: 'bedrock is platform/IAM-only — no BYOK key to push' };
+        }
+        if (!isByokProvider(flagProvider)) {
+            return {
+                error: `"${flagProvider}" is not a supported BYOK provider — must be one of: ${BYOK_PROVIDERS.join(', ')}`,
+            };
+        }
+        return flagProvider;
+    }
+    // No flag — derive from ggui.json#generation.model via parseAnyLlmRoute.
+    const schema = z.object({
+        generation: z
+            .object({
+            model: z.string().optional(),
+        })
+            .optional(),
+    });
+    const parsed = schema.safeParse(gguiJson);
+    const modelString = parsed.success ? parsed.data.generation?.model : undefined;
+    if (!modelString) {
+        return { error: 'no provider — pass --provider or set generation.model in ggui.json' };
+    }
+    const route = parseAnyLlmRoute(modelString);
+    if (!route) {
+        return { error: 'no provider — pass --provider or set generation.model in ggui.json' };
+    }
+    const provider = route.provider;
+    if (provider === 'bedrock') {
+        return { error: 'bedrock is platform/IAM-only — no BYOK key to push' };
+    }
+    if (!isByokProvider(provider)) {
+        // Defensive: covers any future LlmProvider added before BYOK_PROVIDERS is updated.
+        return { error: `"${provider}" is not a supported BYOK provider — pass --provider explicitly` };
+    }
+    return provider;
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Env-var helpers
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Return the primary env-var name for a BYOK provider.
+ * For google the primary is `GOOGLE_API_KEY` (with `GEMINI_API_KEY` as
+ * fallback checked in `readKeyFromEnv`). Order matches `byok-resolver.ts`
+ * so that the local-dev key and the pushed key always agree.
+ */
+export function envVarForProvider(provider) {
+    switch (provider) {
+        case 'anthropic':
+            return 'ANTHROPIC_API_KEY';
+        case 'openai':
+            return 'OPENAI_API_KEY';
+        case 'google':
+            return 'GOOGLE_API_KEY';
+        case 'openrouter':
+            return 'OPENROUTER_API_KEY';
+    }
+}
+/**
+ * Read the API key for a BYOK provider from the given env.
+ *
+ * - `anthropic`   → `ANTHROPIC_API_KEY`
+ * - `openai`      → `OPENAI_API_KEY`
+ * - `google`      → `GOOGLE_API_KEY` (primary), then `GEMINI_API_KEY` (fallback)
+ * - `openrouter`  → `OPENROUTER_API_KEY`
+ *
+ * Order matches `byok-resolver.ts` so that the key the cloud receives is
+ * always the same one local generation uses.
+ *
+ * Returns `undefined` when no non-empty value is found.
+ */
+export function readKeyFromEnv(provider, env = process.env) {
+    const candidates = provider === 'google'
+        ? ['GOOGLE_API_KEY', 'GEMINI_API_KEY']
+        : [envVarForProvider(provider)];
+    for (const name of candidates) {
+        const val = env[name];
+        if (val && val.length > 0)
+            return val;
+    }
+    return undefined;
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Command runner
+// ─────────────────────────────────────────────────────────────────────────────
+export const PROVIDER_KEY_HELP = `ggui provider-key — manage cloud provider API keys for a ggui app
+
+Usage:
+  ggui provider-key set --app <appId> [--provider <name>]
+
+Subcommands:
+  set   Push a provider API key from the appropriate env var to the cloud app.
+        The provider is derived from ggui.json#generation.model unless
+        --provider is given explicitly.
+
+        Supported providers: anthropic, openai, google, openrouter.
+        (bedrock is IAM-only — no plaintext key to push.)
+
+        Reads the key from env:
+          ANTHROPIC_API_KEY  (anthropic)
+          OPENAI_API_KEY     (openai)
+          GOOGLE_API_KEY     (google, primary); GEMINI_API_KEY (fallback)
+          OPENROUTER_API_KEY (openrouter)
+
+Options:
+  --app <appId>       Target app ID (required).
+  --provider <name>   Override provider (default: derived from ggui.json).
+  --help, -h          Show this help.
+`;
+/**
+ * Entry point for `ggui provider-key <subcommand> [options]`.
+ *
+ * @param args - argv slice after `provider-key` (e.g. `['set', '--app', 'app123']`)
+ * @param startDir - optional cwd override (primarily for tests)
+ * @returns exit code (0 = success, 1 = error)
+ */
+export async function runProviderKeyCommand(args, startDir = process.cwd()) {
+    if (args.includes('--help') || args.includes('-h') || args.length === 0) {
+        process.stdout.write(PROVIDER_KEY_HELP);
+        return 0;
+    }
+    const [subcommand, ...rest] = args;
+    if (subcommand !== 'set') {
+        process.stderr.write(`ggui provider-key: unknown subcommand "${subcommand}"\n` +
+            `  Run \`ggui provider-key --help\` for usage.\n`);
+        return 1;
+    }
+    // ── Parse flags ─────────────────────────────────────────────────────────
+    let appId;
+    let flagProvider;
+    for (let i = 0; i < rest.length; i++) {
+        const arg = rest[i];
+        if (arg === '--app' && i + 1 < rest.length) {
+            appId = rest[++i];
+        }
+        else if (arg === '--provider' && i + 1 < rest.length) {
+            flagProvider = rest[++i];
+        }
+    }
+    if (!appId) {
+        process.stderr.write('ggui provider-key set: --app <appId> is required.\n');
+        return 1;
+    }
+    // ── Load ggui.json ───────────────────────────────────────────────────────
+    const gguiJsonPath = findGguiJson(startDir);
+    let gguiJson = {};
+    if (gguiJsonPath) {
+        const readResult = readGguiJson(gguiJsonPath);
+        if ('value' in readResult) {
+            gguiJson = readResult.value;
+        }
+    }
+    // ── Resolve provider ─────────────────────────────────────────────────────
+    const providerResult = inferProvider(gguiJson, flagProvider);
+    if (typeof providerResult === 'object' && 'error' in providerResult) {
+        process.stderr.write(`ggui provider-key set: ${providerResult.error}\n`);
+        return 1;
+    }
+    const provider = providerResult;
+    // ── Read key from env ────────────────────────────────────────────────────
+    const key = readKeyFromEnv(provider);
+    if (!key) {
+        const primaryVar = envVarForProvider(provider);
+        const hint = provider === 'google'
+            ? `${primaryVar} (or GEMINI_API_KEY)`
+            : primaryVar;
+        process.stderr.write(`ggui provider-key set: no key found for provider "${provider}" — set ${hint} and retry.\n`);
+        return 1;
+    }
+    // ── Push to cloud ────────────────────────────────────────────────────────
+    try {
+        const result = await setAppProviderKey(appId, provider, key);
+        process.stdout.write(`  provider key set (••••${result.lastFour}) for ${provider}\n`);
+        return 0;
+    }
+    catch (err) {
+        process.stderr.write(`ggui provider-key set: ${err instanceof Error ? err.message : String(err)}\n`);
+        return 1;
+    }
+}

package/dist/push-command.d.ts

@@ -0,0 +1,47 @@
+import type { DataContract } from '@ggui-ai/protocol';
+/** One entry in the push payload accepted by POST /v1/apps/{appId}/blueprints. */
+export interface PushRecord {
+    /** `${contractHash}-${variantKey}` — deterministic, no truncation → idempotent re-push. */
+    readonly artifactId: string;
+    /** Schema version for the blueprint format (always '1'). */
+    readonly version: '1';
+    readonly manifest: {
+        readonly contract: DataContract;
+        readonly description?: string;
+        /** Generator era this blueprint was built against — feeds the import gate. */
+        readonly generatorProtocolVersion?: string;
+        /** Tool-identity catalog hash at export — feeds the import gate's re-key check. */
+        readonly toolIdentityCatalogHash?: string;
+    };
+    /** Compiled ESM JS, ready for the pod to evaluate directly (no pod-side esbuild). */
+    readonly compiledBytes: string;
+}
+export interface ParsedPushFlags {
+    readonly appId?: string;
+    readonly from?: string;
+    readonly error?: string;
+}
+export declare function parsePushFlags(args: readonly string[]): ParsedPushFlags;
+/**
+ * Compile a TSX source string to an ESM JS string using esbuild.
+ *
+ * The compiled output is browser-targeted ESM with the same external set
+ * the dev-stack sandbox compiler uses (`SANDBOX_EXTERNALS` — React family
+ * + `@ggui-ai/{design,wire,react}`), so stored blueprint code that imports
+ * any of those resolves against the iframe runtime's shared instances
+ * instead of getting bundled (which would risk a second React copy).
+ * esbuild writes to a temp file because the `.tsx` extension drives the
+ * right JSX loader (stdin mode wouldn't).
+ */
+export declare function compileTsx(code: string): Promise<string>;
+/**
+ * Read a pool artifact from `artifactDir` and compile each blueprint's
+ * component code to ESM JS, returning push-ready records.
+ *
+ * Returns an empty array if the artifact contains no records (the caller
+ * should treat this as "nothing to push").
+ */
+export declare function buildBlueprintPushPayload(artifactDir: string): Promise<PushRecord[]>;
+export declare const PUSH_HELP = "ggui push \u2014 compile + bulk-push this deployment's blueprints to a cloud app\n\nExports the local blueprint pool, compiles each blueprint's component code\nto ESM JS, and uploads them to the given ggui.ai app.\n\nUsage:\n  ggui push [--app <appId>] [--from <poolDir>]\n\nOptions:\n  --app <appId>   Target app ID. Defaults to ggui.json#appId.\n  --from <dir>    Read blueprints from an existing pool artifact directory\n                  (created by `ggui export-pool`). When omitted, the pool\n                  is exported on the fly from the local vectors store.\n\nRequires authentication: run `ggui login` first.\n";
+export declare function runPushCommand(args: readonly string[]): Promise<number>;
+//# sourceMappingURL=push-command.d.ts.map

package/dist/push-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push-command.d.ts","sourceRoot":"","sources":["../src/push-command.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAWtD,kFAAkF;AAClF,MAAM,WAAW,UAAU;IACzB,2FAA2F;IAC3F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;QAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,8EAA8E;QAC9E,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAC3C,mFAAmF;QACnF,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;KAC3C,CAAC;IACF,qFAAqF;IACrF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAMD,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,eAAe,CA+BvE;AAMD;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA0B9D;AAMD;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAwC1F;AAMD,eAAO,MAAM,SAAS,onBAerB,CAAC;AAEF,wBAAsB,cAAc,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA4E7E"}

package/dist/push-command.js

@@ -0,0 +1,230 @@
+import { writeFile, rm } from 'node:fs/promises';
+import { randomUUID } from 'node:crypto';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { build as esbuild } from 'esbuild';
+import { SANDBOX_EXTERNALS } from '@ggui-ai/dev-stack';
+import { fromPortableBlueprint } from '@ggui-ai/protocol/blueprint-key';
+import { readPoolArtifact } from './pool-artifact.js';
+import { findGguiJson, readGguiJson } from './internal/ggui-json.js';
+import { exportLocalPool } from './export-pool-command.js';
+import { pushAppBlueprints } from './api-client.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Flag parsing
+// ─────────────────────────────────────────────────────────────────────────────
+export function parsePushFlags(args) {
+    let appId;
+    let from;
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a === '--app') {
+            const v = args[i + 1];
+            if (v === undefined || v.startsWith('-')) {
+                return { error: '--app requires a value' };
+            }
+            appId = v;
+            i += 1;
+        }
+        else if (a === '--from') {
+            const v = args[i + 1];
+            if (v === undefined || v.startsWith('-')) {
+                return { error: '--from requires a path' };
+            }
+            from = v;
+            i += 1;
+        }
+        else if (a === '--help' || a === '-h') {
+            return { error: '__help__' };
+        }
+        else {
+            return { error: `unknown flag: ${String(a)}` };
+        }
+    }
+    return {
+        ...(appId !== undefined ? { appId } : {}),
+        ...(from !== undefined ? { from } : {}),
+    };
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Compile TSX → ESM JS
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Compile a TSX source string to an ESM JS string using esbuild.
+ *
+ * The compiled output is browser-targeted ESM with the same external set
+ * the dev-stack sandbox compiler uses (`SANDBOX_EXTERNALS` — React family
+ * + `@ggui-ai/{design,wire,react}`), so stored blueprint code that imports
+ * any of those resolves against the iframe runtime's shared instances
+ * instead of getting bundled (which would risk a second React copy).
+ * esbuild writes to a temp file because the `.tsx` extension drives the
+ * right JSX loader (stdin mode wouldn't).
+ */
+export async function compileTsx(code) {
+    const tmpFile = join(tmpdir(), `ggui-push-${randomUUID()}.tsx`);
+    try {
+        await writeFile(tmpFile, code, 'utf-8');
+        const result = await esbuild({
+            entryPoints: [tmpFile],
+            bundle: true,
+            format: 'esm',
+            target: 'es2020',
+            jsx: 'automatic',
+            jsxImportSource: 'react',
+            platform: 'browser',
+            minify: false,
+            write: false,
+            external: SANDBOX_EXTERNALS,
+            logLevel: 'silent',
+        });
+        if (result.outputFiles.length !== 1) {
+            throw new Error(`esbuild produced ${result.outputFiles.length} output files; expected 1`);
+        }
+        return result.outputFiles[0].text;
+    }
+    finally {
+        await rm(tmpFile, { force: true });
+    }
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Payload builder
+// ─────────────────────────────────────────────────────────────────────────────
+/**
+ * Read a pool artifact from `artifactDir` and compile each blueprint's
+ * component code to ESM JS, returning push-ready records.
+ *
+ * Returns an empty array if the artifact contains no records (the caller
+ * should treat this as "nothing to push").
+ */
+export async function buildBlueprintPushPayload(artifactDir) {
+    const { records } = await readPoolArtifact(artifactDir);
+    const payload = [];
+    for (const raw of records) {
+        // Artifact trust boundary — raw records validate through
+        // `fromPortableBlueprint` before anything is compiled or pushed.
+        // Pool posture: skip-with-log; one rejected record never aborts
+        // the bulk push.
+        const parsed = fromPortableBlueprint(raw);
+        if (!parsed.ok) {
+            // eslint-disable-next-line no-console -- operator-visible integrity warning
+            console.warn(`[ggui] push: skipped a blueprint record — ${parsed.reason}`);
+            continue;
+        }
+        const r = parsed.record;
+        const compiledBytes = await compileTsx(r.componentCode);
+        // Full artifactId: contractHash-variantKey (no truncation — different
+        // variantKeys on the same contractHash would collide on a prefix).
+        const artifactId = `${r.contractHash}-${r.variantKey}`;
+        payload.push({
+            artifactId,
+            version: '1',
+            manifest: {
+                contract: r.contract,
+                ...(r.variance.seedPrompt !== undefined
+                    ? { description: r.variance.seedPrompt }
+                    : {}),
+                // Carry the PortableBlueprint stamp fields so the cloud import gate
+                // can verify generator era + tool-identity catalog at load time.
+                // v2 records always carry the era stamp; the catalog hash stays
+                // optional (offline export cannot compute one).
+                generatorProtocolVersion: r.generatorProtocolVersion,
+                ...(r.toolIdentityCatalogHash !== undefined
+                    ? { toolIdentityCatalogHash: r.toolIdentityCatalogHash }
+                    : {}),
+            },
+            compiledBytes,
+        });
+    }
+    return payload;
+}
+// ─────────────────────────────────────────────────────────────────────────────
+// Command runner
+// ─────────────────────────────────────────────────────────────────────────────
+export const PUSH_HELP = `ggui push — compile + bulk-push this deployment's blueprints to a cloud app
+
+Exports the local blueprint pool, compiles each blueprint's component code
+to ESM JS, and uploads them to the given ggui.ai app.
+
+Usage:
+  ggui push [--app <appId>] [--from <poolDir>]
+
+Options:
+  --app <appId>   Target app ID. Defaults to ggui.json#appId.
+  --from <dir>    Read blueprints from an existing pool artifact directory
+                  (created by \`ggui export-pool\`). When omitted, the pool
+                  is exported on the fly from the local vectors store.
+
+Requires authentication: run \`ggui login\` first.
+`;
+export async function runPushCommand(args) {
+    const flags = parsePushFlags(args);
+    if (flags.error === '__help__') {
+        process.stdout.write(PUSH_HELP);
+        return 0;
+    }
+    if (flags.error) {
+        process.stderr.write(`ggui push: ${flags.error}\n`);
+        return 1;
+    }
+    // Resolve appId: --app flag > ggui.json#appId
+    let appId = flags.appId;
+    if (appId === undefined) {
+        const jsonPath = findGguiJson(process.cwd());
+        if (jsonPath) {
+            const result = readGguiJson(jsonPath);
+            if ('value' in result) {
+                const val = result.value['appId'];
+                if (typeof val === 'string' && val.length > 0) {
+                    appId = val;
+                }
+            }
+        }
+    }
+    if (appId === undefined) {
+        process.stderr.write('ggui push: no app ID. Pass --app <appId> or set appId in ggui.json.\n');
+        return 2;
+    }
+    // Resolve artifact directory: --from flag or on-the-fly export.
+    // The on-the-fly export does NOT error on an empty pool (it writes an
+    // empty artifact dir); the empty case is handled gracefully below after
+    // the payload build, so `ggui push` on an empty pool exits 0 with
+    // "nothing to push." rather than failing.
+    let artifactDir;
+    if (flags.from !== undefined) {
+        artifactDir = flags.from;
+    }
+    else {
+        try {
+            // exportLocalPool creates a temp dir when no outDir is given.
+            const exported = await exportLocalPool();
+            artifactDir = exported.dir;
+        }
+        catch (err) {
+            process.stderr.write(`ggui push: export failed — ${err instanceof Error ? err.message : String(err)}\n`);
+            return 1;
+        }
+    }
+    // Build the push payload (compile all TSX → ESM)
+    let records;
+    try {
+        records = await buildBlueprintPushPayload(artifactDir);
+    }
+    catch (err) {
+        process.stderr.write(`ggui push: failed to build payload — ${err instanceof Error ? err.message : String(err)}\n`);
+        return 1;
+    }
+    if (records.length === 0) {
+        process.stdout.write('ggui push: nothing to push.\n');
+        return 0;
+    }
+    // Push to the cloud
+    let result;
+    try {
+        result = await pushAppBlueprints(appId, records);
+    }
+    catch (err) {
+        process.stderr.write(`ggui push: ${err instanceof Error ? err.message : String(err)}\n`);
+        return 1;
+    }
+    process.stdout.write(`Pushed ${result.pushed} blueprint(s) to app ${result.appId}.\n`);
+    return 0;
+}

package/dist/serve-command.d.ts

@@ -70,20 +70,6 @@ export interface ParsedServeFlags {
      * scheme with `ws`/`wss`.
      */
     publicBaseUrl?: string;
-    /**
-     * When true, auto-spawn a cloudflared quick-tunnel pointed at the
-     * local listen port and treat the assigned URL as
-     * {@link publicBaseUrl}. Mutually exclusive with `--public-base-url`
-     * (operator gets EITHER explicit URL OR auto-tunnel).
-     *
-     * `--public + --dev-allow-all` combination is rejected at parse
-     * time unless `--i-know-its-public` is also set — exposing
-     * any-bearer auth to the open internet via cloudflared takes a
-     * deliberate flag.
-     */
-    publicAutoTunnel?: boolean;
-    /** Acknowledgement flag — see {@link publicAutoTunnel}. */
-    iKnowItsPublic?: boolean;
     /**
      * Mount the OAuth 2.1 + PKCE + Dynamic Client Registration routes
      * required by MCP custom-connector hosts (claude.ai, ChatGPT) whose
@@ -193,7 +179,7 @@ export interface ParsedServeFlags {
     /**
      * Disable the cross-restart persistence bundle. Without this flag,
      * `ggui serve` reads or mints the HMAC secrets (and, in later
-     * slices, RenderStore + ShortCodeIndex + VectorStore + paired
+     * slices, GguiSessionStore + ShortCodeIndex + VectorStore + paired
      * bearers) under `getPersistentDir(projectRoot)` so a server
      * restart doesn't invalidate cached `_meta["ai.ggui/render"].wsToken`
      * envelopes — claude.ai chat-history revisits keep working.
@@ -215,6 +201,19 @@ export interface ParsedServeFlags {
      * Surface = `--admin-token <token>`.
      */
     adminToken?: string;
+    /**
+     * Paths to read-only shared blueprint pool directories. Each entry
+     * was supplied via a `--seed-pool <dir>` flag (repeatable). At boot,
+     * each path is loaded as a `FileSystemBlueprintSource` and passed to
+     * `buildSeedPool` so its blueprints are available for exact-contract
+     * reuse behind the operator's own discovered set.
+     *
+     * Defaults to `[]` (no shared pools). Shared pools are checked
+     * AFTER the operator's own blueprints — local declarations always win.
+     *
+     * Surface = `--seed-pool <dir>` (repeatable).
+     */
+    seedPools: string[];
     /** Populated when parsing failed; caller renders + bails with exit code 1. */
     error?: string;
 }
@@ -329,7 +328,7 @@ export interface ServeBannerInputs {
     /**
      * Embedding model id surfaced for the local RAG layer. When set,
      * the banner shows a `rag` line so operators see which model is
-     * wired (and that bge-small downloads lazily on first push). Absent
+     * wired (and that bge-small downloads lazily on first render). Absent
      * when no embedding is wired (e.g. tests, programmatic embeds that
      * fall back to MockEmbeddingProvider).
      */
@@ -448,8 +447,13 @@ export interface ServeShutdownSignal {
     }): void;
 }
 export interface RunServeOptions {
-    /** Parsed flags. The `error` field must already be handled upstream. */
-    readonly flags: Readonly<Omit<ParsedServeFlags, 'error'>>;
+    /**
+     * Parsed flags. The `error` field must already be handled upstream.
+     * `seedPools` is omitted too — it's parse output the CLI consumes to
+     * build the shared `BlueprintPool[]` (fed straight into the backend
+     * factory), NOT a `runServe` lifecycle input.
+     */
+    readonly flags: Readonly<Omit<ParsedServeFlags, 'error' | 'seedPools'>>;
     /** Build the backend. Called once, after flag parsing. */
     readonly backendFactory: ServeBackendFactory;
     /**
@@ -496,5 +500,5 @@ export interface RunServeOptions {
  * {@link describeServeBanner} / {@link describeAgentStatus}.
  */
 export declare function runServe(opts: RunServeOptions): Promise<number>;
-export declare const SERVE_HELP = "ggui serve \u2014 run the open self-hosted personal-mode app\n\nBoots the @ggui-ai/mcp-server binding with persistent defaults AND\n(by default) supervises your agent alongside it. The current MCP\nhandler surface is the blueprint-read family (search / list_featured\n/ render); more tools come online as @ggui-ai/mcp-server-handlers\ngrows.\n\nFirst-run bundle (all on by default):\n  - Landing page at /          \u2014 operator opens a browser and sees\n                                  server identity + pair-code card.\n  - Render viewer at /r/<code>  \u2014 same-origin viewer for renders\n                                  minted by ggui_render; same-origin\n                                  HTTP-only cookie authenticates the\n                                  live-channel /ws upgrade.\n  - POST /pair + POST /admin/pair/init \u2014 pairing endpoint for MCP\n                                  hosts and third-party clients.\n  - Live-channel /ws            \u2014 live render plane for MCP Apps\n                                  iframes and the console.\n\nEmbedding hosts that want a different shape (no landing page, no\npairing, programmatic control) should compose createGguiServer()\ndirectly in code rather than invoking `ggui serve`.\n\nUsage:\n  ggui serve [options]\n\nOptions:\n  --port <n>             Bind port (default: 6781, 0 = OS-assigned).\n  --host <addr>          Bind host (default: 127.0.0.1).\n  --mcp-only             Run just the MCP server; do not supervise an agent.\n  --dev-allow-all        Accept any non-empty bearer (incl. no bearer) as\n                         builder. Local-dev / tunnel smoke ONLY \u2014 never\n                         expose to the open internet.\n  --public-demo          Public-facing demo posture: same any-bearer auth\n                         as --dev-allow-all, plus per-IP rate limit on\n                         ggui_render (30 generations / 10 min) and a\n                         \"PUBLIC DEMO \u2014 operator pays\" banner. Mutually\n                         exclusive with --dev-allow-all.\n  --multi-tenant         Multi-tenant posture: switches the /settings LLM-\n                         keys gate from admin-token to auth-adapter so\n                         each authenticated end-user manages their OWN\n                         key plane (scope = userId/appId). kind:'builder'\n                         identities are rejected at the gate. Strict-auth\n                         only; mutually exclusive with --dev-allow-all\n                         and --public-demo. (Generation-time BYOK still\n                         resolves at the operator 'global' scope \u2014 a\n                         follow-up will thread per-user BYOK through\n                         ggui_render.)\n  --public-base-url <u>  Override the public base URL used to compose\n                         iframe-runtime + shortCode URLs. Set this to a\n                         tunnel URL (https://<random>.trycloudflare.com)\n                         when testing against a remote MCP host so URLs\n                         resolve from the host's perspective. Without\n                         this, URLs derive from --host:--port and only\n                         work from the same machine.\n  --oauth                Mount OAuth 2.1 + PKCE + Dynamic Client\n                         Registration routes (.well-known/oauth-* +\n                         /oauth/{authorize,token,register}). Required\n                         for MCP custom-connector hosts (claude.ai,\n                         ChatGPT) whose Add Connector form has no field\n                         for a pre-shared bearer; OAuth lets them do\n                         a discovery \u2192 DCR \u2192 consent dance ending in\n                         the same paired bearer the strict-auth flow\n                         already mints. Pure-bearer clients (Claude\n                         Desktop with bearer in config) work without it.\n  --admin-token <t>      Pin the admin bearer that gates the console\n                         /keys plane (list / mint / revoke pairings +\n                         /admin-login route). Without this, the server\n                         mints a fresh ggui_admin_* token per boot and\n                         prints it on the banner. Pin a stable value\n                         when you want the bearer to survive restarts\n                         (e.g. paste once into a password manager).\n  --ephemeral            Disable cross-restart persistence. Without\n                         this flag, the HMAC secrets that sign MCP\n                         Apps bootstrap tokens and signed render URLs\n                         are read or minted under .ggui/persistent/\n                         (project-local if a ggui.json was resolved,\n                         else ~/.ggui/persistent/) so cached tokens\n                         survive a server restart. Pass this flag to\n                         keep restarts ephemeral (tests / CI / nuclear-\n                         revoke). Override the dir via GGUI_PERSISTENT_DIR.\n  --help, -h             Show this help.\n\nAgent runtime:\n  The default boots your agent alongside MCP. The agent's entry file\n  comes from ggui.json:\n\n    { \"agent\": { \"entry\": \"./agent.ts\" } }\n\n  Supported extensions: .js / .mjs / .cjs (node), .ts / .tsx / .mts\n  (node --import=tsx). No ggui.json, or no agent.entry, falls back\n  to MCP-only with a warning. Malformed ggui.json or a bad entry\n  is a hard error.\n\n  Agent crashes after startup are logged; the MCP server keeps\n  running. No auto-restart \u2014 compose that with your own supervisor.\n\nPersistent storage (default-on; opt-out via --ephemeral):\n  By default `ggui serve` writes a small bundle under .ggui/persistent/\n  (project-local if a ggui.json was resolved, else ~/.ggui/persistent/)\n  so cached MCP Apps tokens, signed render URLs, shortCodes, renders,\n  vectors, and paired bearers survive a restart \u2014 claude.ai chat-history\n  revisits keep working.\n\n  Bundle layout:\n\n    .ggui/persistent/\n      \u251C\u2500\u2500 ws-token-secret.hex       (HMAC, 0600)\n      \u251C\u2500\u2500 render-signer-secret.hex  (HMAC, 0600)\n      \u251C\u2500\u2500 short-codes.sqlite        (signed render-URL resolution)\n      \u251C\u2500\u2500 renders.sqlite            (RenderStore \u2014 renders + event history)\n      \u251C\u2500\u2500 vectors.sqlite            (RAG corpus)\n      \u2514\u2500\u2500 keys.json                 (paired bearers)\n\n  Override the dir with `GGUI_PERSISTENT_DIR`. Pass `--ephemeral` to\n  skip the bundle entirely (tests, CI loops, nuclear-revoke).\n\n  Explicit ggui.json#storage declarations always win \u2014 declare\n  `{ \"renders\": { \"driver\": \"memory\" } }` to opt renders back to\n  in-memory while keeping other surfaces persistent. Custom sqlite\n  paths via ggui.json#storage are honored verbatim:\n\n    {\n      \"storage\": {\n        \"renders\": { \"driver\": \"sqlite\", \"path\": \"./ggui-renders.sqlite\" },\n        \"vectors\": { \"driver\": \"sqlite\", \"path\": \"./ggui-vectors.sqlite\" },\n        \"threads\": { \"driver\": \"sqlite\", \"path\": \"./ggui-threads.sqlite\" }\n      }\n    }\n\n  Threads: the persistent-chat route family (/threads) is opt-in.\n  Absent `storage.threads` leaves the routes unmounted \u2014 pairs\n  with Portal's self-hosted origins only when declared. Driver\n  semantics:\n    - `driver: \"sqlite\"` \u2014 durable. Threads survive restart.\n      /ggui/health reports `threads.durability: \"durable\"`;\n      Portal hides its non-durable caveat.\n    - `driver: \"memory\"` \u2014 routes mount but data is lost on\n      restart. /ggui/health reports `threads.durability:\n      \"ephemeral\"`; Portal shows its caveat.\n\n  Paths resolve relative to the ggui.json directory. The sqlite\n  driver needs `better-sqlite3` installed in your project.\n\nRecommended setups:\n\n  Local-only smoke (no tunnel, no remote MCP host):\n    ggui serve\n\n  claude.ai custom connector (over a public tunnel):\n    1. Tunnel: cloudflared tunnel --url http://localhost:6781\n    2. ggui serve --oauth \\\n                  --public-base-url https://<tunnel>.trycloudflare.com\n    3. Note PAIR_CODE from boot. Visit the landing page (the public URL\n       above), complete pairing, save the bearer.\n    4. claude.ai \u2192 Settings \u2192 Connectors \u2192 Add custom connector.\n       URL: https://<tunnel>.trycloudflare.com/mcp\n       Client ID / Secret: leave empty (server uses Dynamic Client\n       Registration; no pre-shared secret needed).\n    5. Click Connect \u2192 claude.ai redirects you to a paste-key page.\n       Paste the bearer from step 3. Done.\n\n  Quick local-dev WITHOUT auth (NEVER over a public tunnel):\n    ggui serve --dev-allow-all\n\nCurrent limits:\n  - Strict-auth only: /mcp rejects any bearer that isn't pair-minted.\n    The CLI pre-mints one pairing code on boot (printed as\n    `PAIR_CODE <code>` and shown in the banner + on the landing\n    page). Complete `POST /pair {code, deviceName}` to receive a\n    bearer you can use with MCP. Embed @ggui-ai/mcp-server in your\n    own entrypoint to inject a different AuthAdapter (OIDC, Cognito,\n    etc.) for production.\n  - Single-tenant: every request scopes to one `builder` app id.\n";
+export declare const SERVE_HELP = "ggui serve \u2014 run the open self-hosted personal-mode app\n\nBoots the @ggui-ai/mcp-server binding with persistent defaults AND\n(by default) supervises your agent alongside it. The current MCP\nhandler surface is the blueprint-read family (search / list_featured\n/ render); more tools come online as @ggui-ai/mcp-server-handlers\ngrows.\n\nFirst-run bundle (all on by default):\n  - Landing page at /          \u2014 operator opens a browser and sees\n                                  server identity + pair-code card.\n  - Render viewer at /r/<code>  \u2014 same-origin viewer for renders\n                                  minted by ggui_render; same-origin\n                                  HTTP-only cookie authenticates the\n                                  live-channel /ws upgrade.\n  - POST /pair + POST /admin/pair/init \u2014 pairing endpoint for MCP\n                                  hosts and third-party clients.\n  - Live-channel /ws            \u2014 live render plane for MCP Apps\n                                  iframes and the console.\n\nEmbedding hosts that want a different shape (no landing page, no\npairing, programmatic control) should compose createGguiServer()\ndirectly in code rather than invoking `ggui serve`.\n\nUsage:\n  ggui serve [options]\n\nOptions:\n  --port <n>             Bind port (default: 6781, 0 = OS-assigned).\n  --host <addr>          Bind host (default: 127.0.0.1).\n  --mcp-only             Run just the MCP server; do not supervise an agent.\n  --dev-allow-all        Accept any non-empty bearer (incl. no bearer) as\n                         builder. Local-dev / tunnel smoke ONLY \u2014 never\n                         expose to the open internet.\n  --public-demo          Public-facing demo posture: same any-bearer auth\n                         as --dev-allow-all, plus per-IP rate limit on\n                         ggui_render (30 generations / 10 min) and a\n                         \"PUBLIC DEMO \u2014 operator pays\" banner. Mutually\n                         exclusive with --dev-allow-all.\n  --multi-tenant         Multi-tenant posture: switches the /settings LLM-\n                         keys gate from admin-token to auth-adapter so\n                         each authenticated end-user manages their OWN\n                         key plane (scope = userId/appId). kind:'builder'\n                         identities are rejected at the gate. Strict-auth\n                         only; mutually exclusive with --dev-allow-all\n                         and --public-demo. (Generation-time BYOK still\n                         resolves at the operator 'global' scope \u2014 a\n                         follow-up will thread per-user BYOK through\n                         ggui_render.)\n  --public-base-url <u>  Override the public base URL used to compose\n                         iframe-runtime + shortCode URLs. Set this to a\n                         tunnel URL (https://<random>.trycloudflare.com)\n                         when testing against a remote MCP host so URLs\n                         resolve from the host's perspective. Without\n                         this, URLs derive from --host:--port and only\n                         work from the same machine.\n  --oauth                Mount OAuth 2.1 + PKCE + Dynamic Client\n                         Registration routes (.well-known/oauth-* +\n                         /oauth/{authorize,token,register}). Required\n                         for MCP custom-connector hosts (claude.ai,\n                         ChatGPT) whose Add Connector form has no field\n                         for a pre-shared bearer; OAuth lets them do\n                         a discovery \u2192 DCR \u2192 consent dance ending in\n                         the same paired bearer the strict-auth flow\n                         already mints. Pure-bearer clients (Claude\n                         Desktop with bearer in config) work without it.\n  --admin-token <t>      Pin the admin bearer that gates the console\n                         /keys plane (list / mint / revoke pairings +\n                         /admin-login route). Without this, the server\n                         mints a fresh ggui_admin_* token per boot and\n                         prints it on the banner. Pin a stable value\n                         when you want the bearer to survive restarts\n                         (e.g. paste once into a password manager).\n  --ephemeral            Disable cross-restart persistence. Without\n                         this flag, the HMAC secrets that sign MCP\n                         Apps bootstrap tokens and signed render URLs\n                         are read or minted under .ggui/persistent/\n                         (project-local if a ggui.json was resolved,\n                         else ~/.ggui/persistent/) so cached tokens\n                         survive a server restart. Pass this flag to\n                         keep restarts ephemeral (tests / CI / nuclear-\n                         revoke). Override the dir via GGUI_PERSISTENT_DIR.\n  --seed-pool <dir>      Load a read-only shared blueprint pool from a\n                         directory artifact (repeatable). Blueprints in it\n                         are reused by exact contract match, after your own.\n  --help, -h             Show this help.\n\nAgent runtime:\n  The default boots your agent alongside MCP. The agent's entry file\n  comes from ggui.json:\n\n    { \"agent\": { \"entry\": \"./agent.ts\" } }\n\n  Supported extensions: .js / .mjs / .cjs (node), .ts / .tsx / .mts\n  (node --import=tsx). No ggui.json, or no agent.entry, falls back\n  to MCP-only with a warning. Malformed ggui.json or a bad entry\n  is a hard error.\n\n  Agent crashes after startup are logged; the MCP server keeps\n  running. No auto-restart \u2014 compose that with your own supervisor.\n\nPersistent storage (default-on; opt-out via --ephemeral):\n  By default `ggui serve` writes a small bundle under .ggui/persistent/\n  (project-local if a ggui.json was resolved, else ~/.ggui/persistent/)\n  so cached MCP Apps tokens, signed render URLs, shortCodes, renders,\n  vectors, and paired bearers survive a restart \u2014 claude.ai chat-history\n  revisits keep working.\n\n  Bundle layout:\n\n    .ggui/persistent/\n      \u251C\u2500\u2500 ws-token-secret.hex       (HMAC, 0600)\n      \u251C\u2500\u2500 render-signer-secret.hex  (HMAC, 0600)\n      \u251C\u2500\u2500 short-codes.sqlite        (signed render-URL resolution)\n      \u251C\u2500\u2500 sessions.sqlite            (GguiSessionStore \u2014 renders + event history)\n      \u251C\u2500\u2500 vectors.sqlite            (RAG corpus)\n      \u2514\u2500\u2500 keys.json                 (paired bearers)\n\n  Override the dir with `GGUI_PERSISTENT_DIR`. Pass `--ephemeral` to\n  skip the bundle entirely (tests, CI loops, nuclear-revoke).\n\n  Explicit ggui.json#storage declarations always win \u2014 declare\n  `{ \"renders\": { \"driver\": \"memory\" } }` to opt renders back to\n  in-memory while keeping other surfaces persistent. Custom sqlite\n  paths via ggui.json#storage are honored verbatim:\n\n    {\n      \"storage\": {\n        \"renders\": { \"driver\": \"sqlite\", \"path\": \"./ggui-sessions.sqlite\" },\n        \"vectors\": { \"driver\": \"sqlite\", \"path\": \"./ggui-vectors.sqlite\" },\n        \"threads\": { \"driver\": \"sqlite\", \"path\": \"./ggui-threads.sqlite\" }\n      }\n    }\n\n  Threads: the persistent-chat route family (/threads) is opt-in.\n  Absent `storage.threads` leaves the routes unmounted \u2014 pairs\n  with Portal's self-hosted origins only when declared. Driver\n  semantics:\n    - `driver: \"sqlite\"` \u2014 durable. Threads survive restart.\n      /ggui/health reports `threads.durability: \"durable\"`;\n      Portal hides its non-durable caveat.\n    - `driver: \"memory\"` \u2014 routes mount but data is lost on\n      restart. /ggui/health reports `threads.durability:\n      \"ephemeral\"`; Portal shows its caveat.\n\n  Paths resolve relative to the ggui.json directory. The sqlite\n  driver needs `better-sqlite3` installed in your project.\n\nRecommended setups:\n\n  Local-only smoke (no tunnel, no remote MCP host):\n    ggui serve\n\n  claude.ai custom connector (over a public tunnel):\n    1. Tunnel: cloudflared tunnel --url http://localhost:6781\n    2. ggui serve --oauth \\\n                  --public-base-url https://<tunnel>.trycloudflare.com\n    3. Note PAIR_CODE from boot. Visit the landing page (the public URL\n       above), complete pairing, save the bearer.\n    4. claude.ai \u2192 Settings \u2192 Connectors \u2192 Add custom connector.\n       URL: https://<tunnel>.trycloudflare.com/mcp\n       Client ID / Secret: leave empty (server uses Dynamic Client\n       Registration; no pre-shared secret needed).\n    5. Click Connect \u2192 claude.ai redirects you to a paste-key page.\n       Paste the bearer from step 3. Done.\n\n  Quick local-dev WITHOUT auth (NEVER over a public tunnel):\n    ggui serve --dev-allow-all\n\nCurrent limits:\n  - Strict-auth only: /mcp rejects any bearer that isn't pair-minted.\n    The CLI pre-mints one pairing code on boot (printed as\n    `PAIR_CODE <code>` and shown in the banner + on the landing\n    page). Complete `POST /pair {code, deviceName}` to receive a\n    bearer you can use with MCP. Embed @ggui-ai/mcp-server in your\n    own entrypoint to inject a different AuthAdapter (OIDC, Cognito,\n    etc.) for production.\n  - Single-tenant: every request scopes to one `builder` app id.\n";
 //# sourceMappingURL=serve-command.d.ts.map

package/dist/serve-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve-command.d.ts","sourceRoot":"","sources":["../src/serve-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EACV,mBAAmB,EACnB,iBAAiB,EAEjB,sBAAsB,EACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG1D;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,OAAO,CAAC;AAEvC,6DAA6D;AAC7D,eAAO,MAAM,kBAAkB,cAAc,CAAC;AAE9C,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;;;;;OAUG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,2DAA2D;IAC3D,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,KAAK,EAAE,OAAO,CAAC;IACf;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;;;;;;OAeG;IACH,eAAe,CAAC,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAC;IAC1E;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,CAkLzE;AAED;;;;GAIG;AACH,MAAM,MAAM,WAAW,GACnB;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;CAChC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;CACtC,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAC3B,YAAY,GACZ,cAAc,GACd,8BAA8B,CAAC;AAEnC;;;;;;;;;;GAUG;AACH,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oCAAoC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uCAAuC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAgHtE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAa/D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,+DAA+D;IAC/D,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,yCAAyC;IACzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,qDAAqD;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oCAAoC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uCAAuC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;IACpD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IAC/C;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;;;;;OAOG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,YAAY,CAAC;AAErD;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAC5C;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;CACvD;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,gBAAgB,CACd,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,IAAI,EACnB,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GACxB,IAAI,CAAC;CACT;AAED,MAAM,WAAW,eAAe;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,0DAA0D;IAC1D,QAAQ,CAAC,cAAc,EAAE,mBAAmB,CAAC;IAC7C;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IACvC,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,iCAAiC;IACjC,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAChD;;;OAGG;IACH,QAAQ,CAAC,cAAc,EAAE,mBAAmB,CAAC;CAC9C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAsJrE;AAED,eAAO,MAAM,UAAU,qpSA+KtB,CAAC"}
+{"version":3,"file":"serve-command.d.ts","sourceRoot":"","sources":["../src/serve-command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EACV,mBAAmB,EACnB,iBAAiB,EAEjB,sBAAsB,EACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG1D;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,OAAO,CAAC;AAEvC,6DAA6D;AAC7D,eAAO,MAAM,kBAAkB,cAAc,CAAC;AAE9C,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;;;;;OAUG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,KAAK,EAAE,OAAO,CAAC;IACf;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB;;;;;;;;;;;;;;;OAeG;IACH,eAAe,CAAC,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAC;IAC1E;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;;;;OAWG;IACH,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB,CA+JzE;AAED;;;;GAIG;AACH,MAAM,MAAM,WAAW,GACnB;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;CAChC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;CACtC,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAC3B,YAAY,GACZ,cAAc,GACd,8BAA8B,CAAC;AAEnC;;;;;;;;;;GAUG;AACH,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oCAAoC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uCAAuC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAgHtE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAa/D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,+DAA+D;IAC/D,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,yCAAyC;IACzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,qDAAqD;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oCAAoC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uCAAuC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,WAAW,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;IACpD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IAC/C;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;;;;;OAOG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,YAAY,CAAC;AAErD;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAC5C;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;CACvD;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,gBAAgB,CACd,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,IAAI,EACnB,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GACxB,IAAI,CAAC;CACT;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC;IACxE,0DAA0D;IAC1D,QAAQ,CAAC,cAAc,EAAE,mBAAmB,CAAC;IAC7C;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IACvC,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,iCAAiC;IACjC,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAChD;;;OAGG;IACH,QAAQ,CAAC,cAAc,EAAE,mBAAmB,CAAC;CAC9C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAsJrE;AAED,eAAO,MAAM,UAAU,83SAkLtB,CAAC"}