@hooklink/cli 0.1.68 → 0.1.70

package/dist/__tests__/json-events.test.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const json_events_1 = require("../utils/json-events");
+const logger_1 = require("../utils/logger");
+describe('json-events', () => {
+    let writeSpy;
+    beforeEach(() => {
+        writeSpy = jest.spyOn(process.stdout, 'write').mockImplementation(() => true);
+    });
+    afterEach(() => {
+        (0, json_events_1.setJsonMode)(false);
+        (0, json_events_1.stopAliveHeartbeat)();
+        writeSpy.mockRestore();
+        logger_1.Logger.setSilent(false);
+    });
+    it('is off by default', () => {
+        expect((0, json_events_1.isJsonMode)()).toBe(false);
+    });
+    it('no-ops emit when json mode is off', () => {
+        (0, json_events_1.emitEvent)('starting');
+        expect(writeSpy).not.toHaveBeenCalled();
+    });
+    it('emits NDJSON with timestamp and event name when enabled', () => {
+        (0, json_events_1.setJsonMode)(true);
+        (0, json_events_1.emitEvent)('starting', { mode: 'connect' });
+        expect(writeSpy).toHaveBeenCalledTimes(1);
+        const line = writeSpy.mock.calls[0][0];
+        expect(line.endsWith('\n')).toBe(true);
+        const parsed = JSON.parse(line.trim());
+        expect(parsed.event).toBe('starting');
+        expect(parsed.mode).toBe('connect');
+        expect(typeof parsed.timestamp).toBe('string');
+        expect(Number.isNaN(Date.parse(parsed.timestamp))).toBe(false);
+    });
+    it('silences Logger when json mode is on', () => {
+        const logSpy = jest.spyOn(console, 'log').mockImplementation();
+        (0, json_events_1.setJsonMode)(true);
+        logger_1.Logger.info('hidden');
+        logger_1.Logger.success('hidden');
+        logger_1.Logger.log('hidden');
+        expect(logSpy).not.toHaveBeenCalled();
+        logSpy.mockRestore();
+    });
+    it('restores Logger output when json mode is turned off', () => {
+        const logSpy = jest.spyOn(console, 'log').mockImplementation();
+        (0, json_events_1.setJsonMode)(true);
+        (0, json_events_1.setJsonMode)(false);
+        logger_1.Logger.info('visible');
+        expect(logSpy).toHaveBeenCalled();
+        logSpy.mockRestore();
+    });
+    it('startAliveHeartbeat emits alive on the interval', () => {
+        jest.useFakeTimers();
+        (0, json_events_1.setJsonMode)(true);
+        (0, json_events_1.startAliveHeartbeat)(50);
+        // No alive until the first tick
+        expect(writeSpy).not.toHaveBeenCalled();
+        jest.advanceTimersByTime(50);
+        expect(writeSpy).toHaveBeenCalledTimes(1);
+        const parsed = JSON.parse(writeSpy.mock.calls[0][0].trim());
+        expect(parsed.event).toBe('alive');
+        jest.advanceTimersByTime(50);
+        expect(writeSpy).toHaveBeenCalledTimes(2);
+        (0, json_events_1.stopAliveHeartbeat)();
+        jest.advanceTimersByTime(200);
+        expect(writeSpy).toHaveBeenCalledTimes(2);
+        jest.useRealTimers();
+    });
+    it('startAliveHeartbeat with extra callback emits usage alongside alive', () => {
+        jest.useFakeTimers();
+        (0, json_events_1.setJsonMode)(true);
+        (0, json_events_1.startAliveHeartbeat)(50, () => ({ requests: 7 }));
+        jest.advanceTimersByTime(50);
+        expect(writeSpy).toHaveBeenCalledTimes(2);
+        const first = JSON.parse(writeSpy.mock.calls[0][0].trim());
+        const second = JSON.parse(writeSpy.mock.calls[1][0].trim());
+        expect(first.event).toBe('alive');
+        expect(second.event).toBe('usage');
+        expect(second.requests).toBe(7);
+        (0, json_events_1.stopAliveHeartbeat)();
+        jest.useRealTimers();
+    });
+    it('does not start a second heartbeat while one is running', () => {
+        jest.useFakeTimers();
+        (0, json_events_1.setJsonMode)(true);
+        (0, json_events_1.startAliveHeartbeat)(50);
+        (0, json_events_1.startAliveHeartbeat)(50); // second call is a no-op
+        jest.advanceTimersByTime(50);
+        expect(writeSpy).toHaveBeenCalledTimes(1);
+        (0, json_events_1.stopAliveHeartbeat)();
+        jest.useRealTimers();
+    });
+    it('ignores startAliveHeartbeat when json mode is off', () => {
+        jest.useFakeTimers();
+        (0, json_events_1.startAliveHeartbeat)(50);
+        jest.advanceTimersByTime(200);
+        expect(writeSpy).not.toHaveBeenCalled();
+        jest.useRealTimers();
+    });
+});
+//# sourceMappingURL=json-events.test.js.map

package/dist/__tests__/json-events.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-events.test.js","sourceRoot":"","sources":["../../src/__tests__/json-events.test.ts"],"names":[],"mappings":";;AAAA,sDAM8B;AAC9B,4CAAyC;AAEzC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAI,QAA0B,CAAC;IAE/B,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAA,yBAAW,EAAC,KAAK,CAAC,CAAC;QACnB,IAAA,gCAAkB,GAAE,CAAC;QACrB,QAAQ,CAAC,WAAW,EAAE,CAAC;QACvB,eAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,CAAC,IAAA,wBAAU,GAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,IAAA,uBAAS,EAAC,UAAU,CAAC,CAAC;QACtB,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,IAAA,yBAAW,EAAC,IAAI,CAAC,CAAC;QAClB,IAAA,uBAAS,EAAC,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAE3C,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC;QAC/D,IAAA,yBAAW,EAAC,IAAI,CAAC,CAAC;QAClB,eAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtB,eAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzB,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC;QAC/D,IAAA,yBAAW,EAAC,IAAI,CAAC,CAAC;QAClB,IAAA,yBAAW,EAAC,KAAK,CAAC,CAAC;QACnB,eAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAClC,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAA,yBAAW,EAAC,IAAI,CAAC,CAAC;QAClB,IAAA,iCAAmB,EAAC,EAAE,CAAC,CAAC;QAExB,gCAAgC;QAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAExC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEnC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAE1C,IAAA,gCAAkB,GAAE,CAAC;QACrB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAE1C,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAA,yBAAW,EAAC,IAAI,CAAC,CAAC;QAClB,IAAA,iCAAmB,EAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAEjD,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAE1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEhC,IAAA,gCAAkB,GAAE,CAAC;QACrB,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAA,yBAAW,EAAC,IAAI,CAAC,CAAC;QAClB,IAAA,iCAAmB,EAAC,EAAE,CAAC,CAAC;QACxB,IAAA,iCAAmB,EAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB;QAClD,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAA,gCAAkB,GAAE,CAAC;QACrB,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAA,iCAAmB,EAAC,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/agent/endpoint-resolver.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Find-or-create a tunnel-type endpoint against the Hooklink REST API
+ * on behalf of a paying user. The agent calls this when a plugin
+ * sends `POST /v1/tunnels` with an API key header.
+ *
+ * Matching key: `local_target_url` + `endpoint_type === 'tunnel'` +
+ * `is_active`. Simpler than tracking endpoint IDs and survives
+ * plugin reinstalls. See docs/planning/WP_TUNNEL_PLUGIN.md §
+ * "Internal endpoint management".
+ */
+import { AxiosInstance } from 'axios';
+export interface ResolvedEndpoint {
+    id: string;
+    keyword: string;
+    local_target_url: string;
+    endpoint_type: string;
+    reused: boolean;
+}
+export type ResolveErrorCode = 'hooklink_auth_failed' | 'quota_exceeded' | 'keyword_collision' | 'target_port_rejected' | 'hooklink_unreachable' | 'invalid_request';
+export declare class ResolveError extends Error {
+    code: ResolveErrorCode;
+    extra: Record<string, unknown>;
+    constructor(code: ResolveErrorCode, message: string, extra?: Record<string, unknown>);
+}
+export interface ResolveOptions {
+    apiKey: string;
+    apiUrl: string;
+    localTarget: string;
+    /** Override axios instance for tests. */
+    client?: AxiosInstance;
+    /** Max attempts to retry on transient network failures. */
+    maxRetries?: number;
+}
+export declare function resolveEndpoint(opts: ResolveOptions): Promise<ResolvedEndpoint>;
+//# sourceMappingURL=endpoint-resolver.d.ts.map

package/dist/agent/endpoint-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-resolver.d.ts","sourceRoot":"","sources":["../../src/agent/endpoint-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAc,EAAc,aAAa,EAAE,MAAM,OAAO,CAAC;AAGzD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,GACxB,sBAAsB,GACtB,gBAAgB,GAChB,mBAAmB,GACnB,sBAAsB,GACtB,sBAAsB,GACtB,iBAAiB,CAAC;AAEtB,qBAAa,YAAa,SAAQ,KAAK;IAE5B,IAAI,EAAE,gBAAgB;IAEtB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAF9B,IAAI,EAAE,gBAAgB,EAC7B,OAAO,EAAE,MAAM,EACR,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAK7C;AA+CD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,gBAAgB,CAAC,CAqE3B"}

package/dist/agent/endpoint-resolver.js

@@ -0,0 +1,181 @@
+"use strict";
+/**
+ * Find-or-create a tunnel-type endpoint against the Hooklink REST API
+ * on behalf of a paying user. The agent calls this when a plugin
+ * sends `POST /v1/tunnels` with an API key header.
+ *
+ * Matching key: `local_target_url` + `endpoint_type === 'tunnel'` +
+ * `is_active`. Simpler than tracking endpoint IDs and survives
+ * plugin reinstalls. See docs/planning/WP_TUNNEL_PLUGIN.md §
+ * "Internal endpoint management".
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResolveError = void 0;
+exports.resolveEndpoint = resolveEndpoint;
+const axios_1 = __importDefault(require("axios"));
+const crypto_1 = __importDefault(require("crypto"));
+class ResolveError extends Error {
+    constructor(code, message, extra = {}) {
+        super(message);
+        this.code = code;
+        this.extra = extra;
+        this.name = 'ResolveError';
+    }
+}
+exports.ResolveError = ResolveError;
+function randomBase32Suffix(len = 5) {
+    // Crockford-ish alphabet (no ambiguous 0/O, 1/I/L).
+    const alphabet = 'abcdefghjkmnpqrstuvwxyz23456789';
+    const bytes = crypto_1.default.randomBytes(len);
+    let out = '';
+    for (let i = 0; i < len; i++) {
+        out += alphabet[bytes[i] % alphabet.length];
+    }
+    return out;
+}
+function generateKeyword() {
+    return `wp-${randomBase32Suffix(5)}`;
+}
+function humanizeTarget(target) {
+    try {
+        const u = new URL(target);
+        const host = u.hostname;
+        const port = u.port ? `:${u.port}` : '';
+        return `Hooklink: ${host}${port}`;
+    }
+    catch {
+        return `Hooklink: ${target}`;
+    }
+}
+function portFromTarget(target) {
+    try {
+        const u = new URL(target);
+        if (u.port)
+            return parseInt(u.port, 10);
+        return u.protocol === 'https:' ? 443 : 80;
+    }
+    catch {
+        return 80;
+    }
+}
+async function resolveEndpoint(opts) {
+    const client = opts.client ??
+        axios_1.default.create({
+            baseURL: `${opts.apiUrl}/api`,
+            headers: {
+                'Content-Type': 'application/json',
+                Authorization: `Bearer ${opts.apiKey}`,
+            },
+            timeout: 10000,
+        });
+    // 1. Look up existing tunnel endpoints.
+    const existing = await withRetry(() => listTunnelEndpoints(client, opts.localTarget), opts.maxRetries ?? 2);
+    if (existing.length > 0) {
+        // Multiple matches: pick the most recently updated.
+        existing.sort((a, b) => (b.updated_at ?? '').localeCompare(a.updated_at ?? ''));
+        const match = existing[0];
+        return {
+            id: match.id,
+            keyword: match.keyword,
+            local_target_url: match.local_target_url ?? opts.localTarget,
+            endpoint_type: match.endpoint_type,
+            reused: true,
+        };
+    }
+    // 2. Create. Retry once on 409 (keyword collision).
+    const port = portFromTarget(opts.localTarget);
+    for (let attempt = 0; attempt < 2; attempt++) {
+        try {
+            const keyword = generateKeyword();
+            const payload = {
+                keyword,
+                name: humanizeTarget(opts.localTarget),
+                description: 'hooklink-agent',
+                local_target_url: opts.localTarget,
+                endpoint_type: 'tunnel',
+                allowed_ports: [port],
+            };
+            const { data } = await client.post('/endpoints', payload);
+            const ep = data.endpoint;
+            return {
+                id: ep.id,
+                keyword: ep.keyword,
+                local_target_url: ep.local_target_url ?? opts.localTarget,
+                endpoint_type: ep.endpoint_type,
+                reused: false,
+            };
+        }
+        catch (err) {
+            const mapped = mapError(err);
+            if (mapped.code === 'keyword_collision' && attempt === 0) {
+                continue;
+            }
+            throw mapped;
+        }
+    }
+    throw new ResolveError('keyword_collision', 'Persistent keyword collision when creating endpoint.');
+}
+async function listTunnelEndpoints(client, localTarget) {
+    try {
+        const { data } = await client.get('/endpoints');
+        return (data.endpoints ?? []).filter((ep) => ep.endpoint_type === 'tunnel' &&
+            ep.is_active &&
+            ep.local_target_url === localTarget);
+    }
+    catch (err) {
+        throw mapError(err);
+    }
+}
+async function withRetry(fn, maxRetries) {
+    let lastErr;
+    for (let attempt = 0; attempt <= maxRetries; attempt++) {
+        try {
+            return await fn();
+        }
+        catch (err) {
+            lastErr = err;
+            if (!(err instanceof ResolveError) || err.code !== 'hooklink_unreachable') {
+                throw err;
+            }
+            if (attempt < maxRetries) {
+                await new Promise((r) => setTimeout(r, 300 * (attempt + 1)));
+            }
+        }
+    }
+    throw lastErr;
+}
+function mapError(err) {
+    const axiosErr = err;
+    if (!axiosErr.response) {
+        return new ResolveError('hooklink_unreachable', axiosErr.message || 'Failed to reach Hooklink backend');
+    }
+    const status = axiosErr.response.status;
+    const body = axiosErr.response.data ?? {};
+    if (status === 401) {
+        return new ResolveError('hooklink_auth_failed', 'API key rejected');
+    }
+    if (status === 403) {
+        if (body.code === 'ENDPOINT_LIMIT_REACHED') {
+            return new ResolveError('quota_exceeded', body.message || 'Endpoint limit reached', { upstream_code: body.code });
+        }
+        return new ResolveError('quota_exceeded', body.message || body.error || 'Forbidden');
+    }
+    if (status === 409) {
+        return new ResolveError('keyword_collision', body.message || body.error || 'Keyword already taken');
+    }
+    if (status === 400) {
+        const msg = body.message || body.error || '';
+        if (/port/i.test(msg)) {
+            return new ResolveError('target_port_rejected', msg);
+        }
+        return new ResolveError('invalid_request', msg || 'Bad request');
+    }
+    if (status >= 500) {
+        return new ResolveError('hooklink_unreachable', body.message || `Backend returned ${status}`);
+    }
+    return new ResolveError('invalid_request', body.message || body.error || `Unexpected status ${status}`);
+}
+//# sourceMappingURL=endpoint-resolver.js.map

package/dist/agent/endpoint-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-resolver.js","sourceRoot":"","sources":["../../src/agent/endpoint-resolver.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;AAuFH,0CAuEC;AA5JD,kDAAyD;AACzD,oDAA4B;AAkB5B,MAAa,YAAa,SAAQ,KAAK;IACrC,YACS,IAAsB,EAC7B,OAAe,EACR,QAAiC,EAAE;QAE1C,KAAK,CAAC,OAAO,CAAC,CAAC;QAJR,SAAI,GAAJ,IAAI,CAAkB;QAEtB,UAAK,GAAL,KAAK,CAA8B;QAG1C,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AATD,oCASC;AAWD,SAAS,kBAAkB,CAAC,GAAG,GAAG,CAAC;IACjC,oDAAoD;IACpD,MAAM,QAAQ,GAAG,iCAAiC,CAAC;IACnD,MAAM,KAAK,GAAG,gBAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,MAAM,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,OAAO,aAAa,IAAI,GAAG,IAAI,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,MAAM,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAYM,KAAK,UAAU,eAAe,CACnC,IAAoB;IAEpB,MAAM,MAAM,GACV,IAAI,CAAC,MAAM;QACX,eAAK,CAAC,MAAM,CAAC;YACX,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,MAAM;YAC7B,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;aACvC;YACD,OAAO,EAAE,KAAM;SAChB,CAAC,CAAC;IAEL,wCAAwC;IACxC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,GAAG,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,EACnD,IAAI,CAAC,UAAU,IAAI,CAAC,CACrB,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,oDAAoD;QACpD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACrB,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CACvD,CAAC;QACF,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC,WAAW;YAC5D,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG;gBACd,OAAO;gBACP,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC;gBACtC,WAAW,EAAE,gBAAgB;gBAC7B,gBAAgB,EAAE,IAAI,CAAC,WAAW;gBAClC,aAAa,EAAE,QAAQ;gBACvB,aAAa,EAAE,CAAC,IAAI,CAAC;aACtB,CAAC;YACF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,YAAY,EACZ,OAAO,CACR,CAAC;YACF,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;YACzB,OAAO;gBACL,EAAE,EAAE,EAAE,CAAC,EAAE;gBACT,OAAO,EAAE,EAAE,CAAC,OAAO;gBACnB,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,IAAI,IAAI,CAAC,WAAW;gBACzD,aAAa,EAAE,EAAE,CAAC,aAAa;gBAC/B,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,mBAAmB,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBACzD,SAAS;YACX,CAAC;YACD,MAAM,MAAM,CAAC;QACf,CAAC;IACH,CAAC;IACD,MAAM,IAAI,YAAY,CACpB,mBAAmB,EACnB,sDAAsD,CACvD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,MAAqB,EACrB,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,GAAG,CAC/B,YAAY,CACb,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAClC,CAAC,EAAE,EAAE,EAAE,CACL,EAAE,CAAC,aAAa,KAAK,QAAQ;YAC7B,EAAE,CAAC,SAAS;YACZ,EAAE,CAAC,gBAAgB,KAAK,WAAW,CACtC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,EAAoB,EACpB,UAAkB;IAElB,IAAI,OAAgB,CAAC;IACrB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAG,CAAC;YACd,IAAI,CAAC,CAAC,GAAG,YAAY,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAC1E,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;gBACzB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,MAAM,QAAQ,GAAG,GAAsE,CAAC;IACxF,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,IAAI,YAAY,CACrB,sBAAsB,EACtB,QAAQ,CAAC,OAAO,IAAI,kCAAkC,CACvD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;IAC1C,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,YAAY,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YAC3C,OAAO,IAAI,YAAY,CACrB,gBAAgB,EAChB,IAAI,CAAC,OAAO,IAAI,wBAAwB,EACxC,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,CAC7B,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,YAAY,CACrB,gBAAgB,EAChB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,WAAW,CAC1C,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,YAAY,CACrB,mBAAmB,EACnB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,uBAAuB,CACtD,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,YAAY,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,IAAI,YAAY,CAAC,iBAAiB,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,OAAO,IAAI,YAAY,CACrB,sBAAsB,EACtB,IAAI,CAAC,OAAO,IAAI,oBAAoB,MAAM,EAAE,CAC7C,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,YAAY,CACrB,iBAAiB,EACjB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,qBAAqB,MAAM,EAAE,CAC5D,CAAC;AACJ,CAAC"}

package/dist/agent/lease.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Per-tunnel lease with a 30s TTL refreshed on every `GET /v1/status`
+ * from the owner. If a plugin stops polling (tab closed, deactivation,
+ * network flap) the lease expires and the supervisor terminates the
+ * child. This is how the agent collects garbage without needing
+ * explicit DELETE calls.
+ */
+export declare class LeaseManager {
+    private leases;
+    private ttlMs;
+    constructor(ttlMs?: number);
+    refresh(tunnelId: string, now?: number): void;
+    release(tunnelId: string): void;
+    isAlive(tunnelId: string, now?: number): boolean;
+    getExpired(now?: number): string[];
+    has(tunnelId: string): boolean;
+}
+//# sourceMappingURL=lease.d.ts.map

package/dist/agent/lease.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.d.ts","sourceRoot":"","sources":["../../src/agent/lease.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,KAAK,CAAS;gBAEV,KAAK,SAAiB;IAIlC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,IAAI;IAIjD,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAI/B,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,OAAO;IAKpD,UAAU,CAAC,GAAG,SAAa,GAAG,MAAM,EAAE;IAQtC,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;CAG/B"}

package/dist/agent/lease.js

@@ -0,0 +1,40 @@
+"use strict";
+/**
+ * Per-tunnel lease with a 30s TTL refreshed on every `GET /v1/status`
+ * from the owner. If a plugin stops polling (tab closed, deactivation,
+ * network flap) the lease expires and the supervisor terminates the
+ * child. This is how the agent collects garbage without needing
+ * explicit DELETE calls.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LeaseManager = void 0;
+const DEFAULT_TTL_MS = 30000;
+class LeaseManager {
+    constructor(ttlMs = DEFAULT_TTL_MS) {
+        this.leases = new Map();
+        this.ttlMs = ttlMs;
+    }
+    refresh(tunnelId, now = Date.now()) {
+        this.leases.set(tunnelId, now + this.ttlMs);
+    }
+    release(tunnelId) {
+        this.leases.delete(tunnelId);
+    }
+    isAlive(tunnelId, now = Date.now()) {
+        const expires = this.leases.get(tunnelId);
+        return expires !== undefined && expires > now;
+    }
+    getExpired(now = Date.now()) {
+        const expired = [];
+        for (const [id, expires] of this.leases) {
+            if (expires <= now)
+                expired.push(id);
+        }
+        return expired;
+    }
+    has(tunnelId) {
+        return this.leases.has(tunnelId);
+    }
+}
+exports.LeaseManager = LeaseManager;
+//# sourceMappingURL=lease.js.map

package/dist/agent/lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.js","sourceRoot":"","sources":["../../src/agent/lease.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAEH,MAAM,cAAc,GAAG,KAAM,CAAC;AAE9B,MAAa,YAAY;IAIvB,YAAY,KAAK,GAAG,cAAc;QAH1B,WAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QAIzC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,OAAO,CAAC,QAAgB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACxC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,CAAC,QAAgB;QACtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,CAAC,QAAgB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,GAAG,CAAC;IAChD,CAAC;IAED,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACzB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACxC,IAAI,OAAO,IAAI,GAAG;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;CACF;AAhCD,oCAgCC"}

package/dist/agent/local-server.d.ts

@@ -0,0 +1,69 @@
+/**
+ * The agent's localhost HTTP surface. Binds 127.0.0.1:7878 by default
+ * (override via HOOKLINK_AGENT_PORT). On port collision the server
+ * exits with an actionable error rather than silently falling back to
+ * a random port, because the WP plugin probes by fixed port and a
+ * random fallback would leave it unable to find us.
+ *
+ * Routes:
+ *   GET  /v1/health                 (no auth; used for discovery)
+ *   GET  /v1/status                 (local token)
+ *   POST /v1/tunnels                (local token)
+ *   DELETE /v1/tunnels              (local token)
+ *   DELETE /v1/tunnels/:id          (local token)
+ *   GET  /v1/tunnels/:id/recent     (local token)
+ *
+ * `Authorization: Bearer <local-token>` gates every non-health route.
+ * Identity for tunnel ownership comes from either
+ *   - `X-Hooklink-Api-Key` header (authenticated tunnels), or
+ *   - `X-Hooklink-Owner-Id` header (trial tunnels, plugin-generated ULID).
+ */
+import { Supervisor } from './supervisor';
+import { LeaseManager } from './lease';
+import { resolveEndpoint } from './endpoint-resolver';
+export interface LocalServerOptions {
+    port?: number;
+    host?: string;
+    localToken: string;
+    supervisor: Supervisor;
+    apiUrl: string;
+    version: string;
+    /** Inject a custom resolver for tests. */
+    resolver?: typeof resolveEndpoint;
+}
+export declare class LocalServer {
+    private server;
+    private port;
+    private host;
+    private supervisor;
+    private lease;
+    private localToken;
+    private apiUrl;
+    private version;
+    private resolver;
+    /** Track public_url per tunnel so authenticated-mode responses can
+     *  include it even before the subprocess emits tunnel_ready. */
+    private publicUrlById;
+    constructor(opts: LocalServerOptions);
+    listen(): Promise<number>;
+    close(): Promise<void>;
+    private handle;
+    private authorize;
+    private ownerKey;
+    private isOwner;
+    private handleStatus;
+    private handleCreateTunnel;
+    private sendSpawnError;
+    private handleDeleteOne;
+    private handleDeleteAll;
+    private handleRecent;
+    private findExistingTunnel;
+    private sweepExpired;
+    private publicUrlFor;
+    private publicTunnel;
+    private sendJson;
+    /** Test-only hooks. */
+    getLeaseManager(): LeaseManager;
+    getPort(): number;
+}
+//# sourceMappingURL=local-server.d.ts.map

package/dist/agent/local-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-server.d.ts","sourceRoot":"","sources":["../../src/agent/local-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,EAAE,UAAU,EAAc,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,EACL,eAAe,EAGhB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,OAAO,eAAe,CAAC;CACnC;AAID,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAyB;IACzC;oEACgE;IAChE,OAAO,CAAC,aAAa,CAA6B;gBAEtC,IAAI,EAAE,kBAAkB;IA6B9B,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAsBzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAId,MAAM;IAoCpB,OAAO,CAAC,SAAS;IAcjB,OAAO,CAAC,QAAQ;IAchB,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,YAAY;YAaN,kBAAkB;IA+EhC,OAAO,CAAC,cAAc;YA6CR,eAAe;YAwBf,eAAe;IAgB7B,OAAO,CAAC,YAAY;IAwBpB,OAAO,CAAC,kBAAkB;IAU1B,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,YAAY;IAkCpB,OAAO,CAAC,QAAQ;IAUhB,uBAAuB;IACvB,eAAe,IAAI,YAAY;IAG/B,OAAO,IAAI,MAAM;CAGlB"}