@keeperhub/wallet 0.1.12 → 0.1.13

package/README.md

@@ -5,18 +5,18 @@ Agentic wallet for AI agents. Auto-pays x402 (Base USDC) and MPP (Tempo USDC.e)
 ## Install
 
 ```bash
-npx @keeperhub/wallet skill install
-npx @keeperhub/wallet add
+npx -p @keeperhub/wallet keeperhub-wallet skill install
+npx -p @keeperhub/wallet keeperhub-wallet add
 ```
 
-`skill install` writes the skill file into every detected agent directory AND registers the `keeperhub-wallet-hook` PreToolUse safety hook in `~/.claude/settings.json`. The alternate `npx skills add keeperhub/agentic-wallet-skills` path installs the skill file only — if you use it, follow up with `npx @keeperhub/wallet skill install` to activate the safety hook.
+`skill install` writes the skill file into every detected agent directory AND registers the `keeperhub-wallet-hook` PreToolUse safety hook in `~/.claude/settings.json`. The alternate `npx skills add keeperhub/agentic-wallet-skills` path installs the skill file only — if you use it, follow up with `npx -p @keeperhub/wallet keeperhub-wallet skill install` to activate the safety hook.
 
 The installer probes `PATH` and chooses the form that will resolve later when your shell fires the hook:
 
 - If `keeperhub-wallet-hook` is on `PATH` (global install or `npm link`), the installer writes the bare command for lowest startup latency.
-- Otherwise (the typical `npx @keeperhub/wallet skill install` flow, where the bin is only inside an `npx` cache), it writes `npx -y -p @keeperhub/wallet@<version> keeperhub-wallet-hook` so the hook resolves on every fire without a global install.
+- Otherwise (the typical `npx -p @keeperhub/wallet keeperhub-wallet skill install` flow, where the bin is only inside an `npx` cache), it writes `npx -y -p @keeperhub/wallet@<version> keeperhub-wallet-hook` so the hook resolves on every fire without a global install.
 
-The `npx` form is **pinned to the installer's own version** — never `@latest`. Pinning bounds supply-chain risk: `npx -y` runs whatever is in the registry, so a `latest`-pulling hook would execute new code on every tool call after any future scope compromise. To upgrade, re-run `skill install` from a fresh `npx @keeperhub/wallet@<new-version>`.
+The `npx` form is **pinned to the installer's own version** — never `@latest`. Pinning bounds supply-chain risk: `npx -y` runs whatever is in the registry, so a `latest`-pulling hook would execute new code on every tool call after any future scope compromise. To upgrade, re-run `skill install` from a fresh `npx -p @keeperhub/wallet@<new-version> keeperhub-wallet skill install`.
 
 Override with `KEEPERHUB_WALLET_HOOK_COMMAND` if you need a different command (monorepo bin path, wrapper script, etc.) — it is written verbatim into `settings.json`, so treat it as trusted input. Re-running `skill install` is idempotent across either form: switching between global, npx, or version-bumped npx replaces the existing entry rather than duplicating it. The de-dup matcher only inspects the `command` field of each hook, so unrelated entries that mention `keeperhub-wallet-hook` in their `matcher` or args are preserved.
 

package/dist/cli.cjs

@@ -111,8 +111,36 @@ function fund(walletAddress) {
   };
 }
 
-// src/storage.ts
+// src/hmac.ts
 var import_node_crypto = require("crypto");
+function computeSignature(secret, method, path, subOrgId, body, timestamp) {
+  const bodyDigest = (0, import_node_crypto.createHash)("sha256").update(body).digest("hex");
+  const signingString = `${method}
+${path}
+${subOrgId}
+${bodyDigest}
+${timestamp}`;
+  return (0, import_node_crypto.createHmac)("sha256", secret).update(signingString).digest("hex");
+}
+function buildHmacHeaders(secret, method, path, subOrgId, body) {
+  const timestamp = String(Math.floor(Date.now() / 1e3));
+  const signature = computeSignature(
+    secret,
+    method,
+    path,
+    subOrgId,
+    body,
+    timestamp
+  );
+  return {
+    "X-KH-Sub-Org": subOrgId,
+    "X-KH-Timestamp": timestamp,
+    "X-KH-Signature": signature
+  };
+}
+
+// src/storage.ts
+var import_node_crypto2 = require("crypto");
 var import_promises = require("fs/promises");
 var import_node_os = require("os");
 var import_node_path = require("path");
@@ -164,7 +192,7 @@ async function readWalletConfig() {
 async function writeWalletConfig(config) {
   const walletPath = (0, import_node_path.join)((0, import_node_os.homedir)(), ".keeperhub", "wallet.json");
   await (0, import_promises.mkdir)((0, import_node_path.dirname)(walletPath), { recursive: true, mode: 448 });
-  const suffix = (0, import_node_crypto.randomBytes)(8).toString("hex");
+  const suffix = (0, import_node_crypto2.randomBytes)(8).toString("hex");
   const tmpPath = `${walletPath}.${process.pid}.${suffix}.tmp`;
   await (0, import_promises.writeFile)(tmpPath, JSON.stringify(config, null, 2), { mode: 384 });
   await (0, import_promises.chmod)(tmpPath, 384);
@@ -245,7 +273,7 @@ async function provisionWallet(options = {}) {
 }
 
 // src/skill-install.ts
-var import_node_crypto3 = require("crypto");
+var import_node_crypto4 = require("crypto");
 var import_promises3 = require("fs/promises");
 var import_node_path5 = require("path");
 var import_node_url2 = require("url");
@@ -337,7 +365,7 @@ function detectAgents(homeOverride) {
 }
 
 // src/mcp-register.ts
-var import_node_crypto2 = require("crypto");
+var import_node_crypto3 = require("crypto");
 var import_promises2 = require("fs/promises");
 var import_node_os3 = require("os");
 var import_node_path4 = require("path");
@@ -472,7 +500,7 @@ async function readJsonOrEmpty(path) {
 }
 async function writeJsonAtomic(path, payload) {
   await (0, import_promises2.mkdir)((0, import_node_path4.dirname)(path), { recursive: true, mode: 448 });
-  const suffix = (0, import_node_crypto2.randomBytes)(8).toString("hex");
+  const suffix = (0, import_node_crypto3.randomBytes)(8).toString("hex");
   const tmpPath = `${path}.${process.pid}.${suffix}.tmp`;
   try {
     await (0, import_promises2.writeFile)(tmpPath, payload, { mode: 384 });
@@ -603,7 +631,7 @@ async function registerClaudeCodeHook(settingsPath, options = {}) {
   await (0, import_promises3.mkdir)((0, import_node_path5.dirname)(settingsPath), { recursive: true, mode: 448 });
   const payload = `${JSON.stringify(config, null, 2)}
 `;
-  const suffix = (0, import_node_crypto3.randomBytes)(8).toString("hex");
+  const suffix = (0, import_node_crypto4.randomBytes)(8).toString("hex");
   const tmpPath = `${settingsPath}.${process.pid}.${suffix}.tmp`;
   try {
     await (0, import_promises3.writeFile)(tmpPath, payload, { mode: 384 });
@@ -756,6 +784,58 @@ async function cmdInfo() {
   process.stdout.write(`walletAddress: ${wallet.walletAddress}
 `);
 }
+var FEEDBACK_DEFAULT_BASE_URL = "https://app.keeperhub.com";
+async function cmdFeedback(opts) {
+  const wallet = await readWalletConfig();
+  const baseUrl = (opts.baseUrl ?? FEEDBACK_DEFAULT_BASE_URL).replace(
+    /\/$/,
+    ""
+  );
+  const path = "/api/agentic-wallet/feedback";
+  const body = {
+    executionId: opts.executionId,
+    value: Number.parseInt(opts.value, 10),
+    valueDecimals: Number.parseInt(opts.decimals ?? "0", 10)
+  };
+  if (opts.comment !== void 0) {
+    body.comment = opts.comment;
+  }
+  if (opts.agentId !== void 0) {
+    body.agentId = opts.agentId;
+  }
+  if (opts.chainId !== void 0) {
+    body.agentChainId = Number.parseInt(opts.chainId, 10);
+  }
+  const bodyJson = JSON.stringify(body);
+  const headers = buildHmacHeaders(
+    wallet.hmacSecret,
+    "POST",
+    path,
+    wallet.subOrgId,
+    bodyJson
+  );
+  const response = await fetch(`${baseUrl}${path}`, {
+    method: "POST",
+    headers: {
+      "content-type": "application/json",
+      ...headers
+    },
+    body: bodyJson
+  });
+  const text = await response.text();
+  if (!response.ok) {
+    process.stderr.write(`HTTP ${response.status}: ${text}
+`);
+    process.exit(1);
+  }
+  const parsed = JSON.parse(text);
+  process.stdout.write(`feedbackId: ${parsed.feedbackId ?? ""}
+`);
+  process.stdout.write(`txHash: ${parsed.txHash ?? ""}
+`);
+  process.stdout.write(`publicUrl: ${parsed.publicUrl ?? ""}
+`);
+}
 async function runCli(argv = process.argv) {
   const program = new import_commander.Command();
   program.name("keeperhub-wallet").description(
@@ -775,6 +855,27 @@ async function runCli(argv = process.argv) {
   program.command("info").description("Print subOrgId and walletAddress from local config").action(async () => {
     await cmdInfo();
   });
+  program.command("feedback").description(
+    "Submit ERC-8004 ReputationRegistry feedback for a workflow execution this wallet paid for. Signs giveFeedback() via Turnkey and broadcasts on Ethereum mainnet. Caller wallet pays gas natively."
+  ).requiredOption(
+    "--execution-id <id>",
+    "workflow execution id to leave feedback for"
+  ).requiredOption(
+    "--value <int>",
+    "raw int128 rating value (e.g. 5 with --decimals 0 for a 5-star rating)"
+  ).option(
+    "--decimals <int>",
+    "decimals for value (0..18); 0 for integer scores, 1 for 0.1-step",
+    "0"
+  ).option("--comment <text>", "optional plaintext comment").option(
+    "--agent-id <id>",
+    "rated agent NFT id (uint256 decimal); defaults to KeeperHub agent 31875"
+  ).option(
+    "--chain-id <int>",
+    "agent chain id; defaults to 1 (Ethereum mainnet, only chain supported today)"
+  ).option("--base-url <url>", "KeeperHub API base URL").action(async (opts) => {
+    await cmdFeedback(opts);
+  });
   program.command("skill").description(
     "Install the KeeperHub skill file into detected agent directories"
   ).addCommand(

package/dist/cli.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli.ts","../src/balance.ts","../src/chains.ts","../src/fund.ts","../src/storage.ts","../src/types.ts","../src/provision.ts","../src/skill-install.ts","../src/agent-detect.ts","../src/mcp-register.ts","../src/runtime-detect.ts"],"sourcesContent":["// CLI dispatcher for `npx @keeperhub/wallet <cmd>`. Ships 4 subcommands:\n// add (provision -- NO auth), fund (pure string-build Coinbase Onramp +\n// Tempo address), balance (Base USDC + Tempo USDC.e), info (print subOrgId\n// + walletAddress from ~/.keeperhub/wallet.json).\n//\n// v0.1.4 removed the `link` subcommand. /api/agentic-wallet/link still\n// exists server-side but the UX (copy-paste session cookie) was not fit\n// for real users; the server-approval ask tier that required linking\n// also collapsed into an inline ask in this release. See KEEP-307 and\n// KEEP-308 for the long-term design decisions.\n//\n// @security The HMAC secret written to wallet.json is NEVER printed to stdout\n// or stderr. `add` prints only subOrgId + walletAddress + the config path so\n// users can inspect perms. `info` never references the secret at all. Grep\n// rule: no process.stdout/process.stderr line in this file should include\n// wallet.hmacSecret or data.hmacSecret.\n//\n// Exit codes: 0 on success, 1 on any error (WalletConfigMissingError,\n// HTTP failure, validation error). Uncaught errors are written to stderr.\n\nimport { Command } from \"commander\";\nimport { checkBalance } from \"./balance.js\";\nimport { fund } from \"./fund.js\";\nimport { ProvisionHttpError, provisionWallet } from \"./provision.js\";\nimport { installSkill } from \"./skill-install.js\";\nimport { getWalletConfigPath, readWalletConfig } from \"./storage.js\";\nimport { WalletConfigMissingError } from \"./types.js\";\n\nasync function cmdAdd(opts: { baseUrl?: string } = {}): Promise<void> {\n\ttry {\n\t\tconst data = await provisionWallet({ baseUrl: opts.baseUrl });\n\t\t// Intentionally print only public fields. The hmacSecret is written to\n\t\t// wallet.json (chmod 0o600) but never printed -- T-34-cli-02 mitigation.\n\t\tprocess.stdout.write(`subOrgId: ${data.subOrgId}\\n`);\n\t\tprocess.stdout.write(`walletAddress: ${data.walletAddress}\\n`);\n\t\tprocess.stdout.write(`config written to ${getWalletConfigPath()}\\n`);\n\t} catch (err) {\n\t\tif (err instanceof ProvisionHttpError) {\n\t\t\tprocess.stderr.write(\n\t\t\t\t`[keeperhub-wallet] provision failed: HTTP ${err.status}: ${err.body}\\n`,\n\t\t\t);\n\t\t\tprocess.exit(1);\n\t\t}\n\t\tthrow err;\n\t}\n}\n\nasync function cmdFund(): Promise<void> {\n\tconst wallet = await readWalletConfig();\n\tconst out = fund(wallet.walletAddress);\n\tprocess.stdout.write(`${out.coinbaseOnrampUrl}\\n`);\n\tprocess.stdout.write(`Tempo address: ${out.tempoAddress}\\n`);\n\tprocess.stdout.write(`${out.disclaimer}\\n`);\n}\n\nasync function cmdBalance(): Promise<void> {\n\tconst wallet = await readWalletConfig();\n\tconst snap = await checkBalance(wallet);\n\tprocess.stdout.write(`Base USDC:    ${snap.base.amount}\\n`);\n\tprocess.stdout.write(`Tempo USDC.e: ${snap.tempo.amount}\\n`);\n}\n\nasync function cmdInfo(): Promise<void> {\n\tconst wallet = await readWalletConfig();\n\tprocess.stdout.write(`subOrgId: ${wallet.subOrgId}\\n`);\n\tprocess.stdout.write(`walletAddress: ${wallet.walletAddress}\\n`);\n}\n\nexport async function runCli(argv: string[] = process.argv): Promise<void> {\n\tconst program = new Command();\n\tprogram\n\t\t.name(\"keeperhub-wallet\")\n\t\t.description(\n\t\t\t\"KeeperHub agentic wallet CLI (auto-pay x402 + MPP 402 responses)\",\n\t\t)\n\t\t.version(\"0.1.3\");\n\n\tprogram\n\t\t.command(\"add\")\n\t\t.description(\"Provision a new agentic wallet (no account required)\")\n\t\t.option(\"--base-url <url>\", \"KeeperHub API base URL\")\n\t\t.action(async (opts: { baseUrl?: string }) => {\n\t\t\tawait cmdAdd(opts);\n\t\t});\n\n\tprogram\n\t\t.command(\"fund\")\n\t\t.description(\n\t\t\t\"Print Coinbase Onramp URL (Base USDC) and Tempo deposit address\",\n\t\t)\n\t\t.action(async () => {\n\t\t\tawait cmdFund();\n\t\t});\n\n\tprogram\n\t\t.command(\"balance\")\n\t\t.description(\"Print on-chain balance: Base USDC + Tempo USDC.e\")\n\t\t.action(async () => {\n\t\t\tawait cmdBalance();\n\t\t});\n\n\tprogram\n\t\t.command(\"info\")\n\t\t.description(\"Print subOrgId and walletAddress from local config\")\n\t\t.action(async () => {\n\t\t\tawait cmdInfo();\n\t\t});\n\n\tprogram\n\t\t.command(\"skill\")\n\t\t.description(\n\t\t\t\"Install the KeeperHub skill file into detected agent directories\",\n\t\t)\n\t\t.addCommand(\n\t\t\tnew Command(\"install\")\n\t\t\t\t.description(\n\t\t\t\t\t\"Write skill file + register PreToolUse hook in all detected agents\",\n\t\t\t\t)\n\t\t\t\t.action(async () => {\n\t\t\t\t\tconst result = await installSkill();\n\t\t\t\t\tfor (const write of result.skillWrites) {\n\t\t\t\t\t\tprocess.stdout.write(\n\t\t\t\t\t\t\t`skill: ${write.agent} -> ${write.path} (${write.status})\\n`,\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\tfor (const reg of result.hookRegistrations) {\n\t\t\t\t\t\tif (reg.status === \"registered\") {\n\t\t\t\t\t\t\tprocess.stdout.write(\n\t\t\t\t\t\t\t\t`hook: ${reg.agent} -> PreToolUse registered\\n`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} else if (reg.status === \"notice\") {\n\t\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\t`notice: ${reg.agent} -> ${reg.message ?? \"\"}\\n`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} else if (reg.status === \"failed\") {\n\t\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\t`hook: ${reg.agent} -> FAILED (${reg.message ?? \"unknown error\"})\\n`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\tfor (const reg of result.mcpRegistrations) {\n\t\t\t\t\t\tif (reg.status === \"registered\") {\n\t\t\t\t\t\t\tprocess.stdout.write(\n\t\t\t\t\t\t\t\t`mcp: ${reg.agent} -> registered at ${reg.path ?? \"(unknown path)\"}\\n`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} else if (reg.status === \"notice\") {\n\t\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\t`notice: ${reg.agent} mcp -> ${reg.message ?? \"\"}\\n`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} else if (reg.status === \"failed\") {\n\t\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\t`mcp: ${reg.agent} -> FAILED (${reg.message ?? \"unknown error\"})\\n`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\tif (result.skillWrites.length === 0) {\n\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\"No supported agent skill directories detected under $HOME. Create ~/.claude/, ~/.cursor/, ~/.cline/, ~/.windsurf/, or ~/.config/opencode/ and re-run.\\n\",\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}),\n\t\t);\n\n\ttry {\n\t\tawait program.parseAsync(argv);\n\t} catch (err) {\n\t\tif (err instanceof WalletConfigMissingError) {\n\t\t\tprocess.stderr.write(`[keeperhub-wallet] ${err.message}\\n`);\n\t\t\tprocess.exit(1);\n\t\t}\n\t\tprocess.stderr.write(\n\t\t\t`[keeperhub-wallet] ${(err as Error).message ?? String(err)}\\n`,\n\t\t);\n\t\tprocess.exit(1);\n\t}\n}\n","// checkBalance() unified view (PAY-05):\n//   - Base USDC balanceOf  (viem publicClient on Base)\n//   - Tempo USDC.e balanceOf (viem publicClient on Tempo)\n//\n// Both legs are fetched in parallel via Promise.all. The on-chain reads\n// touch only the canonical USDC contract on their respective chains\n// (read-only ERC-20 balanceOf with no state mutation).\n//\n// The /api/agentic-wallet/credit ledger is intentionally NOT read here:\n// the server endpoint exists but no debit path is wired, so surfacing the\n// balance to users implied a capability that has not shipped. Restore the\n// leg here when KEEP-305/306 lands.\n//\n// @security balance.ts does not emit balance data to stdout/stderr via the\n// global console object or util.inspect (T-34-bal-02 mitigation). Any\n// stdout emitter added here is a privacy regression; grep-enforced in\n// acceptance criteria.\nimport {\n  createPublicClient,\n  erc20Abi,\n  formatUnits,\n  http,\n  type PublicClient,\n} from \"viem\";\nimport { BASE_USDC, base, TEMPO_USDC_E, tempo } from \"./chains.js\";\nimport type { WalletConfig } from \"./types.js\";\n\n// USDC and USDC.e both use 6 decimals on Base + Tempo respectively.\nconst USDC_DECIMALS = 6;\n\nexport type BalanceSnapshot = {\n  base: {\n    chain: \"base\";\n    token: \"USDC\";\n    amount: string;\n    address: `0x${string}`;\n  };\n  tempo: {\n    chain: \"tempo\";\n    token: \"USDC.e\";\n    amount: string;\n    address: `0x${string}`;\n  };\n};\n\nexport type CheckBalanceOptions = {\n  /** Injectable viem client for Base (tests mock readContract). */\n  baseClient?: PublicClient;\n  /** Injectable viem client for Tempo (tests mock readContract). */\n  tempoClient?: PublicClient;\n};\n\n/**\n * Read the wallet's on-chain balance across Base + Tempo in parallel. Both\n * legs must resolve; any single failure rejects the Promise.\n *\n * Amounts are formatted as decimal strings (6-decimal USDC precision) so the\n * caller can render them without BigInt math.\n */\nexport async function checkBalance(\n  wallet: WalletConfig,\n  opts: CheckBalanceOptions = {}\n): Promise<BalanceSnapshot> {\n  const baseClient =\n    opts.baseClient ??\n    (createPublicClient({\n      chain: base,\n      transport: http(),\n    }) as unknown as PublicClient);\n  const tempoClient =\n    opts.tempoClient ??\n    (createPublicClient({\n      chain: tempo,\n      transport: http(),\n    }) as unknown as PublicClient);\n\n  // Promise.all fires both reads concurrently. Total elapsed ~= max(leg)\n  // rather than sum(leg); SC-3 (<2s) test asserts this.\n  const [baseRaw, tempoRaw] = await Promise.all([\n    baseClient.readContract({\n      address: BASE_USDC,\n      abi: erc20Abi,\n      functionName: \"balanceOf\",\n      args: [wallet.walletAddress],\n    }) as Promise<bigint>,\n    tempoClient.readContract({\n      address: TEMPO_USDC_E,\n      abi: erc20Abi,\n      functionName: \"balanceOf\",\n      args: [wallet.walletAddress],\n    }) as Promise<bigint>,\n  ]);\n\n  return {\n    base: {\n      chain: \"base\",\n      token: \"USDC\",\n      amount: formatUnits(baseRaw, USDC_DECIMALS),\n      address: wallet.walletAddress,\n    },\n    tempo: {\n      chain: \"tempo\",\n      token: \"USDC.e\",\n      amount: formatUnits(tempoRaw, USDC_DECIMALS),\n      address: wallet.walletAddress,\n    },\n  };\n}\n","// Sources (truth):\n// - lib/agentic-wallet/sign.ts:56  -- Base USDC at\n//   0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 (chainId 8453).\n// - lib/mpp/server.ts:3            -- Tempo USDC.e at\n//   0x20c000000000000000000000b9537d11c60e8b50 (chainId 4217).\n//\n// Tempo is not in viem/chains core as of viem 2.48.1 (the version pinned in\n// this package). Define it inline via defineChain so the only dependency is\n// viem itself. TEMPO_RPC_URL overrides the default RPC for heavy readers who\n// want to point at their own node (T-34-bal-01 mitigation).\nimport { defineChain } from \"viem\";\n\nexport { base } from \"viem/chains\";\n\nexport const tempo = defineChain({\n  id: 4217,\n  name: \"Tempo\",\n  nativeCurrency: { decimals: 18, name: \"Ether\", symbol: \"ETH\" },\n  rpcUrls: {\n    default: {\n      http: [process.env.TEMPO_RPC_URL ?? \"https://rpc.tempo.xyz\"],\n    },\n  },\n  blockExplorers: {\n    default: { name: \"Tempo Explorer\", url: \"https://explorer.tempo.xyz\" },\n  },\n});\n\n/** Circle-issued USDC on Base mainnet. */\nexport const BASE_USDC = \"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913\" as const;\n\n/** Bridged USDC (USDC.e) on Tempo mainnet. NOT the same contract as BASE_USDC. */\nexport const TEMPO_USDC_E =\n  \"0x20c000000000000000000000b9537d11c60e8b50\" as const;\n","// Source: 34-RESEARCH Pattern 5 + Pitfall 5.\n// Coinbase deprecated the query-param pay.coinbase.com flow in favour of\n// sessionToken URLs on 2025-07-31, but the legacy endpoint still returns a\n// working Onramp page (it just may not pre-fill the asset/network/address\n// fields). We print the legacy URL for zero-dependency ergonomics and a\n// follow-up disclaimer so users know to paste manually if prefill is dropped.\n//\n// fund() is a pure string-build: no HTTP, no process spawn, no browser\n// invocation. Callers (the CLI `keeperhub-wallet fund` subcommand, the\n// `check_balance` skill in Phase 35) decide how to display the result.\n//\n// T-34-fund-01 mitigation: the host is hard-coded (pay.coinbase.com) and the\n// only user-supplied input is the wallet address, which is regex-validated\n// against the canonical 0x-prefixed 40-hex-char EVM format before any string\n// interpolation.\n\nexport type FundInstructions = {\n  /** Coinbase Onramp deeplink (legacy query-param form). */\n  coinbaseOnrampUrl: string;\n  /** Tempo deposit address — same as the input wallet (EVM address shared). */\n  tempoAddress: `0x${string}`;\n  /** Plain-ASCII guidance string; no emojis (CLAUDE.md rule). */\n  disclaimer: string;\n};\n\n// 0x followed by exactly 40 hex chars, case-insensitive. Kept at module scope\n// so the regex literal is compiled once (biome/ultracite useTopLevelRegex).\nconst EVM_ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;\n\n// Coinbase Onramp legacy deeplink. The host + path pair is the documented\n// entry point for query-param-style Onramp sessions.\nconst COINBASE_HOST = \"pay.coinbase.com\";\nconst COINBASE_PATH = \"/buy/select-asset\";\n\n/**\n * Build Coinbase Onramp URL + Tempo deposit address for the given wallet.\n *\n * No HTTP calls are performed. The caller is expected to either print the\n * resulting URL (CLI) or render it in a chat bubble (skill). The returned\n * `disclaimer` explains the Onramp deprecation + the Tempo external-transfer\n * fallback in plain ASCII so terminal clients with ASCII-only fonts render\n * identically to emoji-capable clients.\n *\n * @throws if `walletAddress` does not match /^0x[0-9a-fA-F]{40}$/.\n */\nexport function fund(walletAddress: string): FundInstructions {\n  if (!EVM_ADDRESS_RE.test(walletAddress)) {\n    throw new Error(`Invalid EVM wallet address: ${walletAddress}`);\n  }\n\n  // addresses is a JSON-encoded map {walletAddress: [\"base\"]} per Coinbase\n  // Onramp docs. Encoding into URLSearchParams guarantees the colon,\n  // brackets, and quotes are percent-escaped correctly.\n  const params = new URLSearchParams({\n    defaultNetwork: \"base\",\n    defaultAsset: \"USDC\",\n    addresses: JSON.stringify({ [walletAddress]: [\"base\"] }),\n    presetCryptoAmount: \"5\",\n  });\n\n  const coinbaseOnrampUrl = `https://${COINBASE_HOST}${COINBASE_PATH}?${params.toString()}`;\n\n  const disclaimer =\n    \"If the Coinbase page does not pre-fill, paste your address manually. \" +\n    \"For Tempo USDC.e, transfer from an exchange or another wallet to the \" +\n    \"address above -- Onramp does not support Tempo directly. Coinbase \" +\n    \"sessionToken URLs are the 2025+ canonical form; legacy query-param \" +\n    \"URLs may drop prefill on some accounts.\";\n\n  return {\n    coinbaseOnrampUrl,\n    tempoAddress: walletAddress as `0x${string}`,\n    disclaimer,\n  };\n}\n","import { randomBytes } from \"node:crypto\";\nimport { chmod, mkdir, readFile, rename, writeFile } from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport {\n\ttype WalletConfig,\n\tWalletConfigCorruptError,\n\tWalletConfigMissingError,\n} from \"./types.js\";\n\n// NOTE: Every function calls `join(homedir(), \".keeperhub\", \"wallet.json\")`\n// itself. Do NOT hoist to a module-level `const WALLET_PATH` -- tests\n// override `process.env.HOME` in `beforeEach` and `homedir()` must re-read\n// that on each call. A hoisted constant would freeze the harness's original\n// HOME at import time and every test would write into the real\n// ~/.keeperhub/ directory.\n\nexport async function readWalletConfig(): Promise<WalletConfig> {\n\tconst walletPath = join(homedir(), \".keeperhub\", \"wallet.json\");\n\tlet raw: string;\n\ttry {\n\t\traw = await readFile(walletPath, \"utf-8\");\n\t} catch (err) {\n\t\tif ((err as NodeJS.ErrnoException).code === \"ENOENT\") {\n\t\t\tthrow new WalletConfigMissingError();\n\t\t}\n\t\tthrow err;\n\t}\n\t// The file's PRESENCE means it was created on purpose. Distinguish parse\n\t// failures (malformed JSON, truncated write) and field-shape failures\n\t// (missing required keys) from \"missing entirely\" so callers — including\n\t// the MCP server's auto-provision path — can refuse to silently mint a\n\t// replacement wallet over an existing-but-broken one.\n\tlet parsed: Partial<WalletConfig>;\n\ttry {\n\t\tparsed = JSON.parse(raw) as Partial<WalletConfig>;\n\t} catch (err) {\n\t\tconst reason = err instanceof Error ? err.message : String(err);\n\t\tthrow new WalletConfigCorruptError(walletPath, reason);\n\t}\n\tif (!(parsed.subOrgId && parsed.walletAddress && parsed.hmacSecret)) {\n\t\tthrow new WalletConfigCorruptError(walletPath, \"missing required fields\");\n\t}\n\treturn parsed as WalletConfig;\n}\n\n/**\n * Atomic write: serialise to a sibling tmp file, fsync via the close, then\n * rename(2) into place. Concurrent provisioning races (two MCP sessions\n * spawning at once on a fresh install) collapse to last-rename-wins on the\n * final path rather than torn-write-wins. Combined with the in-process\n * promise cache in mcp-server.ts:ensureWallet this gates duplicate-mint\n * within a single process AND keeps disk consistent across multiple.\n *\n * The tmp filename includes 16 bytes of randomness so two writers don't\n * stomp each other's tmp files mid-write either.\n */\nexport async function writeWalletConfig(config: WalletConfig): Promise<void> {\n\tconst walletPath = join(homedir(), \".keeperhub\", \"wallet.json\");\n\tawait mkdir(dirname(walletPath), { recursive: true, mode: 0o700 });\n\tconst suffix = randomBytes(8).toString(\"hex\");\n\tconst tmpPath = `${walletPath}.${process.pid}.${suffix}.tmp`;\n\tawait writeFile(tmpPath, JSON.stringify(config, null, 2), { mode: 0o600 });\n\t// chmod again on the tmp before rename: writeFile honours the mode on\n\t// creation but a pre-existing tmp (extremely unlikely thanks to the\n\t// randomness) might keep looser perms.\n\tawait chmod(tmpPath, 0o600);\n\tawait rename(tmpPath, walletPath);\n}\n\nexport function getWalletConfigPath(): string {\n\treturn join(homedir(), \".keeperhub\", \"wallet.json\");\n}\n","// Shared types across the package. Phase 34.\nexport type WalletConfig = {\n\t/** Turnkey sub-org ID returned by POST /api/agentic-wallet/provision */\n\tsubOrgId: string;\n\t/** EVM-shared wallet address (same for Base chainId 8453 and Tempo chainId 4217) */\n\twalletAddress: `0x${string}`;\n\t/** 64-char lowercase hex HMAC secret, minted server-side at provision; never logged */\n\thmacSecret: string;\n};\n\nexport type HmacHeaders = {\n\t\"X-KH-Sub-Org\": string;\n\t\"X-KH-Timestamp\": string;\n\t\"X-KH-Signature\": string;\n};\n\nexport type HookDecision = {\n\tdecision: \"allow\" | \"deny\" | \"ask\";\n\treason?: string;\n};\n\nexport class KeeperHubError extends Error {\n\treadonly code: string;\n\n\tconstructor(code: string, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"KeeperHubError\";\n\t\tthis.code = code;\n\t}\n}\n\n/** Protocol preference for a single pay() or fetch() call. \"auto\" preserves\n *  the x402-first default when both challenges are offered. */\nexport type PaymentHint = \"x402\" | \"mpp\" | \"auto\";\n\nexport class WalletConfigMissingError extends Error {\n\tconstructor() {\n\t\tsuper(\n\t\t\t\"Wallet config not found at ~/.keeperhub/wallet.json. Run `npx @keeperhub/wallet add` to provision.\",\n\t\t);\n\t\tthis.name = \"WalletConfigMissingError\";\n\t}\n}\n\n/**\n * Thrown when ~/.keeperhub/wallet.json exists but is unreadable as a wallet\n * config (malformed JSON, truncated write, missing required fields, hand-edit\n * gone wrong). Distinct from WalletConfigMissingError — the file's PRESENCE\n * means the user (or a prior install) intentionally created it, so the MCP\n * server MUST NOT silently auto-provision a replacement and abandon any funds\n * held in the existing wallet. Surface a structured error with the path so\n * the user can repair or delete the file deliberately.\n */\nexport class WalletConfigCorruptError extends Error {\n\treadonly path: string;\n\n\tconstructor(path: string, reason: string) {\n\t\tsuper(\n\t\t\t`Wallet config at ${path} is unreadable: ${reason}. Repair the file by hand or delete it to re-provision a new wallet (this will abandon any funds held in the current wallet).`,\n\t\t);\n\t\tthis.name = \"WalletConfigCorruptError\";\n\t\tthis.path = path;\n\t}\n}\n","// Wallet provisioning: shared between `keeperhub-wallet add` (CLI) and the\n// MCP server's auto-provision-on-first-call path.\n//\n// Why a shared module: the user-facing UX target is \"install the wallet\n// package and start calling paid workflows\" — manual `keeperhub-wallet add`\n// ceremony is an unnecessary speed bump. The MCP server therefore reuses\n// this exact provision flow on the first tool call when ~/.keeperhub/wallet.json\n// is missing. Keeping the call site in one module avoids the obvious\n// drift hazard of two divergent provision implementations.\n//\n// @security The HMAC secret minted by /api/agentic-wallet/provision is\n// returned to the caller AND written to ~/.keeperhub/wallet.json (chmod 0o600\n// via writeWalletConfig). Callers MUST NOT log the returned secret to stdout\n// or stderr. The CLI's `cmdAdd` and the MCP server's auto-provision branch\n// both honour this — every printed/serialised path uses only `subOrgId` and\n// `walletAddress`.\n\nimport { writeWalletConfig } from \"./storage.js\";\nimport type { WalletConfig } from \"./types.js\";\n\nconst TRAILING_SLASH = /\\/$/;\nconst WALLET_ADDRESS_PATTERN = /^0x[a-fA-F0-9]{40}$/;\n\nexport type ProvisionOptions = {\n\t/** Override KEEPERHUB_API_URL. Defaults to env var or app.keeperhub.com. */\n\tbaseUrl?: string;\n\t/** Injectable fetch for tests. */\n\tfetchImpl?: typeof fetch;\n};\n\nexport class ProvisionResponseInvalidError extends Error {\n\treadonly code = \"PROVISION_RESPONSE_INVALID\" as const;\n\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"ProvisionResponseInvalidError\";\n\t}\n}\n\nexport class ProvisionHttpError extends Error {\n\treadonly code = \"PROVISION_HTTP_ERROR\" as const;\n\treadonly status: number;\n\treadonly body: string;\n\n\tconstructor(status: number, body: string) {\n\t\tsuper(`provision failed: HTTP ${status}: ${body}`);\n\t\tthis.name = \"ProvisionHttpError\";\n\t\tthis.status = status;\n\t\tthis.body = body;\n\t}\n}\n\nfunction resolveBaseUrl(override: string | undefined): string {\n\tconst candidate =\n\t\toverride ?? process.env.KEEPERHUB_API_URL ?? \"https://app.keeperhub.com\";\n\treturn candidate.replace(TRAILING_SLASH, \"\");\n}\n\nfunction isNonEmptyString(value: unknown): value is string {\n\treturn typeof value === \"string\" && value.length > 0;\n}\n\nfunction validateProvisionResponse(data: unknown): WalletConfig {\n\tif (typeof data !== \"object\" || data === null) {\n\t\tthrow new ProvisionResponseInvalidError(\n\t\t\t\"provision response is not an object\",\n\t\t);\n\t}\n\tconst { subOrgId, walletAddress, hmacSecret } = data as Record<\n\t\tstring,\n\t\tunknown\n\t>;\n\tif (\n\t\t!(\n\t\t\tisNonEmptyString(subOrgId) &&\n\t\t\tisNonEmptyString(walletAddress) &&\n\t\t\tisNonEmptyString(hmacSecret)\n\t\t)\n\t) {\n\t\tthrow new ProvisionResponseInvalidError(\n\t\t\t\"provision response missing subOrgId, walletAddress, or hmacSecret\",\n\t\t);\n\t}\n\tif (!WALLET_ADDRESS_PATTERN.test(walletAddress)) {\n\t\tthrow new ProvisionResponseInvalidError(\n\t\t\t`provision response walletAddress is not a valid 0x-prefixed 40-hex address: ${walletAddress}`,\n\t\t);\n\t}\n\treturn {\n\t\tsubOrgId,\n\t\twalletAddress: walletAddress as `0x${string}`,\n\t\thmacSecret,\n\t};\n}\n\n/**\n * Mint a new agentic wallet via POST /api/agentic-wallet/provision and\n * persist the result to ~/.keeperhub/wallet.json (chmod 0o600). Returns the\n * provisioned WalletConfig. Throws ProvisionHttpError on non-2xx and\n * ProvisionResponseInvalidError on malformed payloads.\n *\n * Used by:\n *  - `keeperhub-wallet add` (manual provisioning).\n *  - The MCP server's auto-provision-on-first-call path (no manual ceremony).\n */\nexport async function provisionWallet(\n\toptions: ProvisionOptions = {},\n): Promise<WalletConfig> {\n\tconst baseUrl = resolveBaseUrl(options.baseUrl);\n\tconst fetchImpl = options.fetchImpl ?? globalThis.fetch;\n\t// Bound the wedged-upstream failure mode so a hung provision endpoint\n\t// can't freeze the MCP tool call indefinitely. AbortError surfaces as\n\t// UPSTREAM_TIMEOUT in the MCP envelope; CLI users see the raw cause.\n\tconst response = await fetchImpl(`${baseUrl}/api/agentic-wallet/provision`, {\n\t\tmethod: \"POST\",\n\t\theaders: { \"content-type\": \"application/json\" },\n\t\tbody: \"{}\",\n\t\tsignal: AbortSignal.timeout(30_000),\n\t});\n\tif (!response.ok) {\n\t\tconst text = await response.text();\n\t\tthrow new ProvisionHttpError(response.status, text);\n\t}\n\tconst raw = (await response.json()) as unknown;\n\tconst data = validateProvisionResponse(raw);\n\tawait writeWalletConfig(data);\n\treturn data;\n}\n","// Idempotent skill installer for @keeperhub/wallet.\n//\n// Two public entry points:\n//   - installSkill(options?) -- writes keeperhub-wallet.skill.md into every\n//     detected agent's skills directory and, for Claude Code, registers a\n//     PreToolUse hook pointing at `keeperhub-wallet-hook` in\n//     ~/.claude/settings.json. For non-claude agents, emits a stderr notice.\n//   - registerClaudeCodeHook(settingsPath, options?) -- pure settings.json\n//     patcher used internally; exported so tests can drive it directly.\n//\n// Hook command resolution: the README's recommended install path is\n// `npx @keeperhub/wallet skill install`, which does not put the bin on the\n// system PATH. If we wrote a bare `keeperhub-wallet-hook` command in that\n// case, the hook would fire `command not found` on every tool call. So at\n// install time we probe PATH; if the bin resolves we keep the bare command\n// (lowest startup latency), otherwise we fall back to an `npx` invocation\n// that resolves regardless of where future shells run.\n//\n// Idempotency rule: re-running the installer MUST NOT create a duplicate\n// hook entry. We filter any existing array element whose serialised form\n// contains `keeperhub-wallet-hook` before appending a single fresh record.\n// The marker substring is present in BOTH the bare and npx forms, so the\n// de-dup survives a global-install → npx-install transition (and back).\n//\n// Preservation rule: all top-level keys in settings.json other than\n// hooks.PreToolUse MUST be byte-preserved. We only ever touch\n// hooks.PreToolUse; any foreign hooks.PostToolUse entries survive verbatim.\n\nimport { randomBytes } from \"node:crypto\";\nimport {\n\tchmod,\n\tcopyFile,\n\tmkdir,\n\treadFile,\n\trename,\n\tunlink,\n\twriteFile,\n} from \"node:fs/promises\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { type AgentTarget, detectAgents } from \"./agent-detect.js\";\nimport {\n\ttype RegisterMcpServerOptions,\n\tregisterMcpServer,\n\tresolveMcpCommand,\n} from \"./mcp-register.js\";\nimport { resolveBinCommand } from \"./runtime-detect.js\";\n\nconst HOOK_BIN = \"keeperhub-wallet-hook\";\n\n// Match rule for de-dup: any existing PreToolUse entry whose `command`\n// string contains this substring is considered \"ours\" and is removed\n// before append. The marker is present in BOTH the bare and pinned-npx\n// forms, so the de-dup survives a global-install <-> npx-install\n// transition (and across version bumps).\n//\n// Why match on the `command` field rather than JSON.stringify(entry):\n// the wider marker would silently delete an unrelated hook whose args\n// or matcher happen to mention the bin name (e.g. a logger). Scoping\n// to `command` is narrower and equally idempotent for our writes since\n// we always write the marker into `command`.\nconst KEEPERHUB_HOOK_MARKER = HOOK_BIN;\n\ntype PreToolUseLikeEntry = {\n\thooks?: Array<{ command?: unknown }>;\n};\n\n/**\n * Drop only the `hooks[]` items that reference the keeperhub bin, leaving\n * sibling commands inside the same `PreToolUse` element intact. Returns\n * the (possibly modified) entry, or null when every `hooks[]` item was\n * keeperhub-related and the whole element should be removed.\n *\n * Why per-item: a user may merge our hook into a single `PreToolUse`\n * element alongside their own commands, e.g.:\n *\n *   { matcher: \"*\", hooks: [\n *       { type: \"command\", command: \"/usr/local/bin/audit-logger\" },\n *       { type: \"command\", command: \"keeperhub-wallet-hook\" } ] }\n *\n * Dropping the whole element on re-install would silently delete the\n * audit-logger sibling. Dropping only matching items preserves it.\n *\n * Non-object entries and entries without a `hooks[]` array are returned\n * unchanged — we never inspect or mutate shapes we don't recognise.\n */\nfunction filterKeeperhubHooksFromEntry(entry: unknown): unknown {\n\tif (typeof entry !== \"object\" || entry === null) {\n\t\treturn entry;\n\t}\n\tconst candidate = entry as PreToolUseLikeEntry;\n\tif (!Array.isArray(candidate.hooks)) {\n\t\treturn entry;\n\t}\n\tconst survivors = candidate.hooks.filter((h) => {\n\t\tconst cmd = h?.command;\n\t\treturn !(typeof cmd === \"string\" && cmd.includes(KEEPERHUB_HOOK_MARKER));\n\t});\n\tif (survivors.length === candidate.hooks.length) {\n\t\t// No keeperhub hooks present in this entry — return original byte-for-byte.\n\t\treturn entry;\n\t}\n\tif (survivors.length === 0) {\n\t\t// Every hook in this element was ours; drop the whole element so we\n\t\t// don't leave a `{matcher, hooks: []}` shell behind.\n\t\treturn null;\n\t}\n\treturn { ...candidate, hooks: survivors };\n}\n\n/**\n * Pick the hook command to write into settings.json.\n *\n * Returns the bare bin name if it resolves to a STABLE install on PATH\n * (global install, brew, distro pkg, dev-time `npm link`), otherwise a\n * version-pinned `npx` invocation that pulls the installer's own version\n * of `@keeperhub/wallet` on demand. Implementation lives in\n * runtime-detect.ts so the hook + MCP installers share a single decision.\n *\n * Override-able via the env var `KEEPERHUB_WALLET_HOOK_COMMAND` for test\n * fixtures and unusual deployments (env input is trusted — it is written\n * verbatim into settings.json and executed by the user's shell).\n */\nexport function resolveHookCommand(): string {\n\tconst envOverride = process.env.KEEPERHUB_WALLET_HOOK_COMMAND;\n\tif (envOverride && envOverride.length > 0) {\n\t\treturn envOverride;\n\t}\n\treturn resolveBinCommand(HOOK_BIN).commandString;\n}\n\nexport type InstallResult = {\n\tskillWrites: Array<{\n\t\tagent: string;\n\t\tpath: string;\n\t\tstatus: \"written\" | \"skipped\";\n\t}>;\n\thookRegistrations: Array<{\n\t\tagent: string;\n\t\tstatus: \"registered\" | \"notice\" | \"skipped\" | \"failed\";\n\t\tmessage?: string;\n\t}>;\n\tmcpRegistrations: Array<{\n\t\tagent: string;\n\t\tstatus: \"registered\" | \"notice\" | \"skipped\" | \"failed\";\n\t\tpath?: string;\n\t\tmessage?: string;\n\t}>;\n};\n\nexport type InstallOptions = {\n\thomeOverride?: string;\n\tskillSourcePath?: string;\n\tonNotice?: (msg: string) => void;\n\t/**\n\t * Hook command to write into settings.json (and reference in stderr\n\t * notices for non-Claude agents). Defaults to {@link resolveHookCommand}.\n\t * Override for tests, monorepo setups, or unusual deployments.\n\t */\n\thookCommand?: string;\n\t/**\n\t * MCP command + args to register with each detected agent. Defaults to\n\t * {@link resolveMcpCommand}. Tests pass an explicit value to pin\n\t * assertions regardless of host PATH.\n\t */\n\tmcpCommand?: RegisterMcpServerOptions[\"command\"];\n};\n\nexport type RegisterClaudeCodeHookOptions = {\n\t/**\n\t * Hook command to write. Defaults to {@link resolveHookCommand}. Tests\n\t * pass a deterministic value to keep assertions stable across host\n\t * environments (CI may or may not have the bin on PATH).\n\t */\n\thookCommand?: string;\n};\n\ntype ClaudeHookEntry = {\n\tmatcher: string;\n\thooks: Array<{ type: string; command: string }>;\n};\n\ntype ClaudeSettings = {\n\thooks?: {\n\t\tPreToolUse?: unknown[];\n\t\t[k: string]: unknown;\n\t};\n\t[k: string]: unknown;\n};\n\nfunction buildKeeperhubEntry(command: string): ClaudeHookEntry {\n\treturn {\n\t\tmatcher: \"*\",\n\t\thooks: [{ type: \"command\", command }],\n\t};\n}\n\nfunction resolveDefaultSkillSource(): string {\n\t// Resolve the module's own directory in a way that works in both ESM\n\t// (import.meta.url) and CJS (__dirname shim emitted by tsup). At runtime\n\t// the module lives inside dist/, so `../skill/` points at the sibling\n\t// skill/ directory shipped via pkg.files. During vitest tests the module\n\t// executes from src/, and `../skill/` resolves to packages/wallet/skill/.\n\tconst here = dirname(fileURLToPath(import.meta.url));\n\treturn join(here, \"..\", \"skill\", \"keeperhub-wallet.skill.md\");\n}\n\nfunction defaultNotice(msg: string): void {\n\tprocess.stderr.write(`${msg}\\n`);\n}\n\nexport async function registerClaudeCodeHook(\n\tsettingsPath: string,\n\toptions: RegisterClaudeCodeHookOptions = {},\n): Promise<void> {\n\tconst command = options.hookCommand ?? resolveHookCommand();\n\n\tlet raw: string | null = null;\n\ttry {\n\t\traw = await readFile(settingsPath, \"utf-8\");\n\t} catch (err) {\n\t\tif ((err as NodeJS.ErrnoException).code !== \"ENOENT\") {\n\t\t\tthrow err;\n\t\t}\n\t}\n\n\tlet config: ClaudeSettings = {};\n\tif (raw !== null) {\n\t\ttry {\n\t\t\tconfig = JSON.parse(raw) as ClaudeSettings;\n\t\t} catch {\n\t\t\tthrow new Error(\n\t\t\t\t`settings.json at ${settingsPath} is not valid JSON; aborting hook registration`,\n\t\t\t);\n\t\t}\n\t}\n\n\tconst hooks: Record<string, unknown> =\n\t\ttypeof config.hooks === \"object\" && config.hooks !== null\n\t\t\t? (config.hooks as Record<string, unknown>)\n\t\t\t: {};\n\n\tconst existingPreToolUse = Array.isArray(hooks.PreToolUse)\n\t\t? (hooks.PreToolUse as unknown[])\n\t\t: [];\n\n\t// De-dup: drop only the hooks[] items whose `command` field references\n\t// the keeperhub-wallet-hook bin, leaving sibling commands within the\n\t// same PreToolUse element untouched. Scoped to the `command` field (not\n\t// the full serialised entry) so an unrelated hook that mentions the bin\n\t// name in its matcher or args isn't silently deleted. Covers both the\n\t// bare-bin and version-pinned npx forms, and older versions of this\n\t// installer.\n\tconst filtered: unknown[] = [];\n\tfor (const entry of existingPreToolUse) {\n\t\tconst survivor = filterKeeperhubHooksFromEntry(entry);\n\t\tif (survivor !== null) {\n\t\t\tfiltered.push(survivor);\n\t\t}\n\t}\n\tfiltered.push(buildKeeperhubEntry(command));\n\n\thooks.PreToolUse = filtered;\n\tconfig.hooks = hooks as ClaudeSettings[\"hooks\"];\n\n\tawait mkdir(dirname(settingsPath), { recursive: true, mode: 0o700 });\n\tconst payload = `${JSON.stringify(config, null, 2)}\\n`;\n\t// Atomic write: tmp + rename so a crash mid-write cannot truncate the\n\t// user's settings.json (which on Claude Code typically holds many\n\t// unrelated PreToolUse/PostToolUse entries plus mcpServers, theme, etc.).\n\t// rename(2) is the atomic step on every POSIX filesystem and on Windows\n\t// NTFS — the live file is either the old contents or the full new\n\t// contents, never partial. chmod the tmp before rename so the live\n\t// permissions are correct from the first readable byte.\n\tconst suffix = randomBytes(8).toString(\"hex\");\n\tconst tmpPath = `${settingsPath}.${process.pid}.${suffix}.tmp`;\n\ttry {\n\t\tawait writeFile(tmpPath, payload, { mode: 0o600 });\n\t\tawait chmod(tmpPath, 0o600);\n\t\tawait rename(tmpPath, settingsPath);\n\t} catch (err) {\n\t\tawait unlink(tmpPath).catch(() => {\n\t\t\t// best-effort cleanup; ignore ENOENT and other failures\n\t\t});\n\t\tthrow err;\n\t}\n}\n\nasync function writeSkillToAgent(\n\tagent: AgentTarget,\n\tskillSource: string,\n): Promise<{ agent: string; path: string; status: \"written\" | \"skipped\" }> {\n\tawait mkdir(agent.skillsDir, { recursive: true, mode: 0o755 });\n\tconst target = join(agent.skillsDir, \"keeperhub-wallet.skill.md\");\n\tawait copyFile(skillSource, target);\n\tawait chmod(target, 0o644);\n\treturn { agent: agent.agent, path: target, status: \"written\" };\n}\n\nfunction buildHookNoticeMessage(agent: AgentTarget, command: string): string {\n\treturn `${agent.agent} does not support auto-registered PreToolUse hooks; run \\`${command}\\` on every tool use via ${agent.agent}'s settings file at ${agent.settingsFile}`;\n}\n\nfunction buildMcpNoticeMessage(\n\tagent: AgentTarget,\n\tcommand: { command: string; args: string[] },\n): string {\n\tconst cmd = [command.command, ...command.args].join(\" \");\n\treturn `${agent.agent} does not support auto-registered MCP servers; add an entry named \\`keeperhub-wallet\\` running \\`${cmd}\\` to your MCP config manually`;\n}\n\n/**\n * Install the keeperhub-wallet skill plus the PreToolUse safety hook plus\n * the keeperhub-wallet MCP server into every detected agent.\n *\n * Per-agent flow:\n *  1. Copy `keeperhub-wallet.skill.md` into the agent's `skills/` dir.\n *  2. If the agent supports PreToolUse hooks (claude-code), register the\n *     safety hook in `settings.json`. Otherwise print a stderr notice.\n *  3. If the agent supports MCP server registration (claude-code, cursor,\n *     windsurf, opencode), register the keeperhub-wallet MCP server in the\n *     agent's MCP config file (claude.json / mcp.json / opencode.json).\n *     Otherwise print a stderr notice.\n *\n * MCP idempotency is automatic: each agent's MCP config keys servers by name,\n * so a re-run overwrites the existing `keeperhub-wallet` entry rather than\n * appending a duplicate. All other keys are byte-preserved.\n */\nexport async function installSkill(\n\toptions: InstallOptions = {},\n): Promise<InstallResult> {\n\tconst agents = detectAgents(options.homeOverride);\n\tconst skillSource = options.skillSourcePath ?? resolveDefaultSkillSource();\n\tconst onNotice = options.onNotice ?? defaultNotice;\n\t// Resolve once per install run so the bare-vs-npx decision stays\n\t// consistent across every detected agent. Tests pass an explicit value to\n\t// pin the assertion shape regardless of host PATH.\n\tconst hookCommand = options.hookCommand ?? resolveHookCommand();\n\tconst mcpCommand = options.mcpCommand ?? resolveMcpCommand();\n\n\tconst skillWrites: InstallResult[\"skillWrites\"] = [];\n\tconst hookRegistrations: InstallResult[\"hookRegistrations\"] = [];\n\tconst mcpRegistrations: InstallResult[\"mcpRegistrations\"] = [];\n\n\t// Per-agent error isolation. A single agent's settings file being\n\t// permission-locked or otherwise unwritable used to abort the whole\n\t// install loop with a raw stack trace, leaving the user in a partial\n\t// state (skill copied, hook maybe registered, MCP maybe not) and\n\t// without a returned `InstallResult` to inspect. Catch at the per-step\n\t// boundary so the loop completes for every agent and the caller gets\n\t// a structured `failed` entry with the error message.\n\tfor (const agent of agents) {\n\t\ttry {\n\t\t\tconst write = await writeSkillToAgent(agent, skillSource);\n\t\t\tskillWrites.push(write);\n\t\t} catch (err) {\n\t\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\t\tskillWrites.push({\n\t\t\t\tagent: agent.agent,\n\t\t\t\tpath: \"\",\n\t\t\t\tstatus: \"skipped\",\n\t\t\t});\n\t\t\tonNotice(`${agent.agent}: skill copy failed (${message})`);\n\t\t\t// If we couldn't even write the skill, the rest of the agent's\n\t\t\t// install is meaningless. Skip to the next agent.\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (agent.hookSupport === \"claude-code\") {\n\t\t\ttry {\n\t\t\t\tawait registerClaudeCodeHook(agent.settingsFile, { hookCommand });\n\t\t\t\thookRegistrations.push({\n\t\t\t\t\tagent: agent.agent,\n\t\t\t\t\tstatus: \"registered\",\n\t\t\t\t});\n\t\t\t} catch (err) {\n\t\t\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\t\t\thookRegistrations.push({\n\t\t\t\t\tagent: agent.agent,\n\t\t\t\t\tstatus: \"failed\",\n\t\t\t\t\tmessage,\n\t\t\t\t});\n\t\t\t\tonNotice(`${agent.agent}: hook registration failed (${message})`);\n\t\t\t}\n\t\t} else {\n\t\t\tconst noticeMessage = buildHookNoticeMessage(agent, hookCommand);\n\t\t\thookRegistrations.push({\n\t\t\t\tagent: agent.agent,\n\t\t\t\tstatus: \"notice\",\n\t\t\t\tmessage: noticeMessage,\n\t\t\t});\n\t\t\tonNotice(noticeMessage);\n\t\t}\n\n\t\tif (agent.mcpSupport === \"notice\") {\n\t\t\tconst noticeMessage = buildMcpNoticeMessage(agent, mcpCommand);\n\t\t\tmcpRegistrations.push({\n\t\t\t\tagent: agent.agent,\n\t\t\t\tstatus: \"notice\",\n\t\t\t\tmessage: noticeMessage,\n\t\t\t});\n\t\t\tonNotice(noticeMessage);\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\tconst mcpResult = await registerMcpServer(agent, {\n\t\t\t\thomeOverride: options.homeOverride,\n\t\t\t\tcommand: mcpCommand,\n\t\t\t});\n\t\t\tmcpRegistrations.push({\n\t\t\t\tagent: agent.agent,\n\t\t\t\tstatus: \"registered\",\n\t\t\t\tpath: mcpResult.path,\n\t\t\t});\n\t\t} catch (err) {\n\t\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\t\tmcpRegistrations.push({\n\t\t\t\tagent: agent.agent,\n\t\t\t\tstatus: \"failed\",\n\t\t\t\tmessage,\n\t\t\t});\n\t\t\tonNotice(`${agent.agent}: MCP registration failed (${message})`);\n\t\t}\n\t}\n\n\treturn { skillWrites, hookRegistrations, mcpRegistrations };\n}\n","// Cross-agent skill/settings directory discovery.\n//\n// Probes canonical paths under $HOME and returns one AgentTarget record per\n// agent whose parent directory exists. The `skills/` leaf may be absent --\n// installSkill() creates it.\n//\n// NOTE: `homedir()` is called per-invocation (via `homeOverride ?? homedir()`)\n// and NEVER hoisted to a module-level constant. Tests override\n// `process.env.HOME` in `beforeEach`; hoisting would freeze the harness's\n// original HOME at import time and detection would run against the real $HOME.\n\nimport { existsSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\n\nexport type AgentTarget = {\n\tagent: \"claude-code\" | \"cursor\" | \"cline\" | \"windsurf\" | \"opencode\";\n\tskillsDir: string;\n\tsettingsFile: string;\n\thookSupport: \"claude-code\" | \"notice\";\n\t/**\n\t * Path-segments under $HOME where the agent stores its MCP server registry.\n\t * `undefined` for agents without a known MCP config location (cline today\n\t * stores per-VS-Code-variant globalStorage state that is too fragile to\n\t * auto-detect, so we ship \"notice\" instead).\n\t */\n\tmcpConfigRel?: string[];\n\t/**\n\t * Which MCP config shape to write. `claude-code`, `cursor`, and `windsurf`\n\t * all use the standard `{ mcpServers: { name: { command, args, env } } }`\n\t * shape. `opencode` uses a divergent `{ mcp: { name: { type:\"local\",\n\t * command:[...], enabled, environment } } }` shape. `notice` agents get\n\t * a copy-paste hint instead of an auto-registered entry.\n\t */\n\tmcpSupport: \"claude-code\" | \"cursor\" | \"windsurf\" | \"opencode\" | \"notice\";\n};\n\ntype AgentSpec = {\n\tagent: AgentTarget[\"agent\"];\n\tskillsRel: string[];\n\tsettingsRel: string[];\n\thookSupport: AgentTarget[\"hookSupport\"];\n\tmcpConfigRel?: string[];\n\tmcpSupport: AgentTarget[\"mcpSupport\"];\n\t/**\n\t * Optional extra path segments — when present, the agent is detected only\n\t * if AT LEAST ONE of `[skillsRel.dirname, ...extraDetect]` exists under\n\t * $HOME. Used by windsurf, which keeps state under both `.windsurf/` and\n\t * the legacy `.codeium/windsurf/`.\n\t */\n\textraDetect?: Array<string[]>;\n};\n\n// Deterministic order: claude-code first (only agent with hook support),\n// then cursor, cline, windsurf, opencode.\nconst AGENT_SPECS: readonly AgentSpec[] = [\n\t{\n\t\tagent: \"claude-code\",\n\t\tskillsRel: [\".claude\", \"skills\"],\n\t\tsettingsRel: [\".claude\", \"settings.json\"],\n\t\thookSupport: \"claude-code\",\n\t\t// ~/.claude.json is at HOME root (not under .claude/) and is large\n\t\t// (100+KB on real installs). registerMcpServer reads/parses/rewrites it\n\t\t// while preserving every other top-level key byte-for-byte.\n\t\tmcpConfigRel: [\".claude.json\"],\n\t\tmcpSupport: \"claude-code\",\n\t},\n\t{\n\t\tagent: \"cursor\",\n\t\tskillsRel: [\".cursor\", \"skills\"],\n\t\tsettingsRel: [\".cursor\", \"settings.json\"],\n\t\thookSupport: \"notice\",\n\t\tmcpConfigRel: [\".cursor\", \"mcp.json\"],\n\t\tmcpSupport: \"cursor\",\n\t},\n\t{\n\t\tagent: \"cline\",\n\t\tskillsRel: [\".cline\", \"skills\"],\n\t\tsettingsRel: [\".cline\", \"settings.json\"],\n\t\thookSupport: \"notice\",\n\t\t// Cline keeps MCP state in a per-VS-Code-variant globalStorage path\n\t\t// (e.g. ~/Library/Application Support/Code/User/globalStorage/\n\t\t// saoudrizwan.claude-dev/settings/cline_mcp_settings.json) that is too\n\t\t// fragile to auto-detect. Ship \"notice\" with a copy-paste entry shape\n\t\t// instead of guessing the variant.\n\t\tmcpSupport: \"notice\",\n\t},\n\t{\n\t\tagent: \"windsurf\",\n\t\tskillsRel: [\".windsurf\", \"skills\"],\n\t\tsettingsRel: [\".windsurf\", \"settings.json\"],\n\t\thookSupport: \"notice\",\n\t\tmcpConfigRel: [\".codeium\", \"windsurf\", \"mcp_config.json\"],\n\t\tmcpSupport: \"windsurf\",\n\t\t// Windsurf historically ships under both `.windsurf/` and the legacy\n\t\t// `.codeium/windsurf/`; detect either.\n\t\textraDetect: [[\".codeium\", \"windsurf\"]],\n\t},\n\t{\n\t\tagent: \"opencode\",\n\t\tskillsRel: [\".config\", \"opencode\", \"skills\"],\n\t\tsettingsRel: [\".config\", \"opencode\", \"settings.json\"],\n\t\thookSupport: \"notice\",\n\t\tmcpConfigRel: [\".config\", \"opencode\", \"opencode.json\"],\n\t\tmcpSupport: \"opencode\",\n\t},\n];\n\nexport function detectAgents(homeOverride?: string): AgentTarget[] {\n\tconst home = homeOverride ?? homedir();\n\tconst results: AgentTarget[] = [];\n\tfor (const spec of AGENT_SPECS) {\n\t\tconst skillsDir = join(home, ...spec.skillsRel);\n\t\tconst settingsFile = join(home, ...spec.settingsRel);\n\t\t// \"Detected\" iff the parent of skills/ exists (e.g. ~/.claude/) OR any\n\t\t// of the spec's extra-detect paths exist (windsurf's legacy location).\n\t\tlet detected = existsSync(dirname(skillsDir));\n\t\tif (!detected && spec.extraDetect) {\n\t\t\tfor (const seg of spec.extraDetect) {\n\t\t\t\tif (existsSync(join(home, ...seg))) {\n\t\t\t\t\tdetected = true;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tif (!detected) {\n\t\t\tcontinue;\n\t\t}\n\t\tresults.push({\n\t\t\tagent: spec.agent,\n\t\t\tskillsDir,\n\t\t\tsettingsFile,\n\t\t\thookSupport: spec.hookSupport,\n\t\t\tmcpConfigRel: spec.mcpConfigRel,\n\t\t\tmcpSupport: spec.mcpSupport,\n\t\t});\n\t}\n\treturn results;\n}\n","// MCP server registration: writes a `keeperhub-wallet` entry into each\n// detected agent's MCP config file. Mirrors the patterns in skill-install.ts\n// (registerClaudeCodeHook), with two important divergences:\n//\n//   1. Idempotency is automatic. MCP entries are NAME-keyed objects\n//      (`{ mcpServers: { \"keeperhub-wallet\": {...} } }`), not positional\n//      arrays like PreToolUse. Re-running overwrites the existing entry; we\n//      never need a de-dup matcher.\n//\n//   2. The opencode shape is divergent: instead of\n//      `{command, args, env}` it stores\n//      `{type:\"local\", command:[command,...args], enabled:true, environment}`\n//      under a top-level `mcp` key. We branch on `target.mcpSupport` and\n//      write the appropriate shape.\n//\n// Preservation rule: every other top-level key in the config file MUST be\n// byte-preserved. We read the file, parse, mutate only our slot, and write\n// back. Same chmod 0o600 semantics as registerClaudeCodeHook.\n\nimport { randomBytes } from \"node:crypto\";\nimport {\n\tchmod,\n\tmkdir,\n\treadFile,\n\trename,\n\tunlink,\n\twriteFile,\n} from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport type { AgentTarget } from \"./agent-detect.js\";\nimport { resolveBinCommand } from \"./runtime-detect.js\";\n\nconst MCP_BIN = \"keeperhub-wallet-mcp\";\n\n/** The literal name our MCP server registers under. Stable across all agents. */\nexport const MCP_SERVER_NAME = \"keeperhub-wallet\";\n\nexport type McpCommand = {\n\tcommand: string;\n\targs: string[];\n\t/** Optional environment overrides. Currently unused but reserved for future flags. */\n\tenv?: Record<string, string>;\n};\n\n/**\n * Resolve the MCP launch command. Returns the bare bin if it lives at a\n * stable PATH location, otherwise a version-pinned npx fallback. Identical\n * decision logic to {@link resolveHookCommand} — both flows go through\n * runtime-detect.ts.\n *\n * Override-able via `KEEPERHUB_WALLET_MCP_COMMAND` (env-var input is trusted\n * — it is written verbatim into the MCP config and executed by the agent).\n */\nexport function resolveMcpCommand(): McpCommand {\n\tconst envOverride = process.env.KEEPERHUB_WALLET_MCP_COMMAND;\n\tif (envOverride && envOverride.length > 0) {\n\t\t// Env override is a single string; split on whitespace into command + args.\n\t\tconst parts = envOverride.trim().split(/\\s+/);\n\t\tconst head = parts[0] ?? envOverride;\n\t\treturn { command: head, args: parts.slice(1) };\n\t}\n\tconst resolved = resolveBinCommand(MCP_BIN);\n\treturn { command: resolved.command, args: resolved.args };\n}\n\nexport type RegisterMcpServerOptions = {\n\t/** Override $HOME (tests). */\n\thomeOverride?: string;\n\t/** Override the launch command (tests, monorepo setups). */\n\tcommand?: McpCommand;\n};\n\nexport type RegisterMcpServerResult = {\n\t/** Absolute path of the MCP config file that was written. */\n\tpath: string;\n\t/** Server name written into the config. */\n\tname: typeof MCP_SERVER_NAME;\n};\n\ntype StandardMcpEntry = {\n\tcommand: string;\n\targs: string[];\n\tenv?: Record<string, string>;\n};\n\ntype StandardMcpConfig = {\n\tmcpServers?: Record<string, unknown>;\n\t[k: string]: unknown;\n};\n\ntype OpencodeMcpEntry = {\n\ttype: \"local\";\n\tcommand: string[];\n\tenabled: true;\n\tenvironment: Record<string, string>;\n};\n\ntype OpencodeMcpConfig = {\n\tmcp?: Record<string, unknown>;\n\t[k: string]: unknown;\n};\n\nfunction buildStandardEntry(cmd: McpCommand): StandardMcpEntry {\n\tconst entry: StandardMcpEntry = {\n\t\tcommand: cmd.command,\n\t\targs: cmd.args,\n\t};\n\tif (cmd.env && Object.keys(cmd.env).length > 0) {\n\t\tentry.env = cmd.env;\n\t}\n\treturn entry;\n}\n\nfunction buildOpencodeEntry(cmd: McpCommand): OpencodeMcpEntry {\n\treturn {\n\t\ttype: \"local\",\n\t\tcommand: [cmd.command, ...cmd.args],\n\t\tenabled: true,\n\t\tenvironment: cmd.env ?? {},\n\t};\n}\n\nasync function readJsonOrEmpty<T>(path: string): Promise<T> {\n\tlet raw: string | null = null;\n\ttry {\n\t\traw = await readFile(path, \"utf-8\");\n\t} catch (err) {\n\t\tif ((err as NodeJS.ErrnoException).code !== \"ENOENT\") {\n\t\t\tthrow err;\n\t\t}\n\t}\n\tif (raw === null) {\n\t\treturn {} as T;\n\t}\n\ttry {\n\t\treturn JSON.parse(raw) as T;\n\t} catch {\n\t\tthrow new Error(\n\t\t\t`MCP config at ${path} is not valid JSON; aborting MCP registration`,\n\t\t);\n\t}\n}\n\n/**\n * Truly-atomic write to a config file. Writes to a randomly-suffixed sibling\n * tmp file then `rename(2)`s into place — the rename is the atomic step on\n * every POSIX filesystem and on Windows NTFS, so a crash, signal, ENOSPC,\n * or EIO mid-write CANNOT leave the live config truncated. Critical for\n * `~/.claude.json` (100KB+, holds the user's MCP allowlist + project state)\n * and for any settings.json where a torn write would brick Claude Code.\n *\n * Best-effort cleanup of the tmp file on rename failure so we don't\n * accumulate `*.tmp` siblings. The chmod happens on the tmp before rename\n * so the live file's permissions are correct from the first byte readable.\n */\nasync function writeJsonAtomic(path: string, payload: string): Promise<void> {\n\tawait mkdir(dirname(path), { recursive: true, mode: 0o700 });\n\tconst suffix = randomBytes(8).toString(\"hex\");\n\tconst tmpPath = `${path}.${process.pid}.${suffix}.tmp`;\n\ttry {\n\t\tawait writeFile(tmpPath, payload, { mode: 0o600 });\n\t\tawait chmod(tmpPath, 0o600);\n\t\tawait rename(tmpPath, path);\n\t} catch (err) {\n\t\tawait unlink(tmpPath).catch(() => {\n\t\t\t// best-effort cleanup; ignore ENOENT and other failures\n\t\t});\n\t\tthrow err;\n\t}\n}\n\nasync function writeStandardMcp(\n\tpath: string,\n\tentry: StandardMcpEntry,\n): Promise<void> {\n\tconst config = await readJsonOrEmpty<StandardMcpConfig>(path);\n\tconst servers: Record<string, unknown> =\n\t\ttypeof config.mcpServers === \"object\" && config.mcpServers !== null\n\t\t\t? (config.mcpServers as Record<string, unknown>)\n\t\t\t: {};\n\tservers[MCP_SERVER_NAME] = entry;\n\tconfig.mcpServers = servers;\n\tconst payload = `${JSON.stringify(config, null, 2)}\\n`;\n\tawait writeJsonAtomic(path, payload);\n}\n\nasync function writeOpencodeMcp(\n\tpath: string,\n\tentry: OpencodeMcpEntry,\n): Promise<void> {\n\tconst config = await readJsonOrEmpty<OpencodeMcpConfig>(path);\n\tconst servers: Record<string, unknown> =\n\t\ttypeof config.mcp === \"object\" && config.mcp !== null\n\t\t\t? (config.mcp as Record<string, unknown>)\n\t\t\t: {};\n\tservers[MCP_SERVER_NAME] = entry;\n\tconfig.mcp = servers;\n\tconst payload = `${JSON.stringify(config, null, 2)}\\n`;\n\tawait writeJsonAtomic(path, payload);\n}\n\n/**\n * Register the keeperhub-wallet MCP server with one detected agent.\n *\n * Behavior by `target.mcpSupport`:\n *  - `claude-code` / `cursor` / `windsurf` — write the standard\n *    `{ mcpServers: { \"keeperhub-wallet\": {command, args, env?} } }` shape\n *    into the agent's MCP config file. All other top-level keys preserved.\n *  - `opencode` — write the divergent\n *    `{ mcp: { \"keeperhub-wallet\": {type:\"local\", command:[...], enabled,\n *    environment} } }` shape.\n *  - `notice` — throws. installSkill handles the notice path before calling\n *    this function.\n *\n * Idempotent by construction: the `keeperhub-wallet` slot is name-keyed, so\n * re-running overwrites rather than duplicates.\n */\nexport async function registerMcpServer(\n\ttarget: AgentTarget,\n\toptions: RegisterMcpServerOptions = {},\n): Promise<RegisterMcpServerResult> {\n\tif (target.mcpSupport === \"notice\") {\n\t\tthrow new Error(\n\t\t\t`agent ${target.agent} does not support auto-registered MCP servers; surface a notice instead`,\n\t\t);\n\t}\n\tif (!target.mcpConfigRel) {\n\t\tthrow new Error(\n\t\t\t`agent ${target.agent} has mcpSupport=${target.mcpSupport} but no mcpConfigRel path`,\n\t\t);\n\t}\n\tconst home = options.homeOverride ?? homedir();\n\tconst path = join(home, ...target.mcpConfigRel);\n\tconst cmd = options.command ?? resolveMcpCommand();\n\n\tif (target.mcpSupport === \"opencode\") {\n\t\tawait writeOpencodeMcp(path, buildOpencodeEntry(cmd));\n\t} else {\n\t\tawait writeStandardMcp(path, buildStandardEntry(cmd));\n\t}\n\n\treturn { path, name: MCP_SERVER_NAME };\n}\n","// Shared runtime / environment detection used by skill-install (hook\n// command resolution) and mcp-register (MCP command resolution).\n//\n// Why split out: both flows need to decide whether the package's bin lives\n// at a stable PATH location (global install, brew, distro pkg, npm link) or\n// inside a transient package-runner cache (npx _npx, pnpm dlx, yarn dlx,\n// bun x). The bare-bin-vs-npx decision is identical between hook and MCP\n// registrations — keep one source of truth so hook and MCP cannot drift.\n\nimport { execFileSync } from \"node:child_process\";\nimport { readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nexport const PACKAGE_NAME = \"@keeperhub/wallet\";\n\n/**\n * Read this package's own version from package.json. Both the hook and\n * MCP installers pin npx invocations to the installer's version so that\n * upgrades are explicit (re-run skill install) and the supply-chain blast\n * radius is bounded to \"code that was already trusted enough to install\".\n *\n * Falls back to \"latest\" only when package.json cannot be located, which\n * should never happen in published builds (dist/ sits next to package.json\n * via pkg.files).\n */\nexport function readPackageVersion(): string {\n\ttry {\n\t\tconst here = dirname(fileURLToPath(import.meta.url));\n\t\tconst pkgPath = join(here, \"..\", \"package.json\");\n\t\tconst raw = readFileSync(pkgPath, \"utf-8\");\n\t\tconst parsed = JSON.parse(raw) as { version?: string };\n\t\tif (typeof parsed.version === \"string\" && parsed.version.length > 0) {\n\t\t\treturn parsed.version;\n\t\t}\n\t} catch {\n\t\t// Fall through.\n\t}\n\treturn \"latest\";\n}\n\n/**\n * Detect whether the current process is being driven by `npx`. npm/npx set\n * `npm_execpath` to the path of the CLI binary that spawned the process; for\n * `npx` invocations that path ends in `npx-cli.js` (or, on Windows, an `npx`\n * shim in node_modules/.bin).\n *\n * Why this matters: when the user runs `npx @keeperhub/wallet skill install`,\n * npx prepends its transient cache dir to PATH for the lifetime of the\n * installer. `command -v <bin>` therefore succeeds inside the installer, but\n * the cache dir disappears from PATH the moment npx exits — and any later\n * spawn (hook fire / MCP launch) would crash with `command not found`.\n */\nexport function isNpxExecution(): boolean {\n\tconst execPath = process.env.npm_execpath;\n\tif (typeof execPath !== \"string\" || execPath.length === 0) {\n\t\treturn false;\n\t}\n\tif (/(?:^|[\\\\/])npx-cli\\.(?:js|cjs|mjs)$/i.test(execPath)) {\n\t\treturn true;\n\t}\n\tif (/(?:^|[\\\\/])npx(?:\\.cmd|\\.exe|\\.ps1)?$/i.test(execPath)) {\n\t\treturn true;\n\t}\n\treturn false;\n}\n\n// Recognise a path that lives inside any transient package-runner cache.\n// Patterns:\n//   _npx        — npm/npx cache\n//   dlx-<hash>  — pnpm dlx staging\n//   xfs-<hash>  — yarn dlx (Berry) temp project\n//   .bun/install/cache — bun x / bunx package cache\nconst TRANSIENT_CACHE_PATTERNS: ReadonlyArray<RegExp> = [\n\t/[\\\\/]_npx[\\\\/]/,\n\t/[\\\\/]dlx-[A-Za-z0-9]+[\\\\/]/,\n\t/[\\\\/]xfs-[A-Za-z0-9]+[\\\\/]/,\n\t/[\\\\/]\\.bun[\\\\/]install[\\\\/]cache[\\\\/]/,\n];\n\nexport function isPathUnderTransientCache(resolvedPath: string): boolean {\n\tfor (const re of TRANSIENT_CACHE_PATTERNS) {\n\t\tif (re.test(resolvedPath)) {\n\t\t\treturn true;\n\t\t}\n\t}\n\treturn false;\n}\n\nexport type ResolvedCommand = {\n\t/** The literal string that will be written into settings.json's `command` field. */\n\tcommandString: string;\n\t/** Split form (command + args[]) for MCP entry shapes that require it. */\n\tcommand: string;\n\targs: string[];\n};\n\n/**\n * Resolve a bin name to a stable command form. Returns the bare bin if it\n * lives at a durable PATH location, otherwise a version-pinned npx fallback.\n *\n * The single decision logic is shared between the PreToolUse hook installer\n * and the MCP registration installer.\n */\nexport function resolveBinCommand(binName: string): ResolvedCommand {\n\tconst version = readPackageVersion();\n\tconst npxArgs = [\"-y\", \"-p\", `${PACKAGE_NAME}@${version}`, binName];\n\tconst npxCommandString = `npx ${npxArgs.join(\" \")}`;\n\n\tif (isNpxExecution()) {\n\t\treturn {\n\t\t\tcommandString: npxCommandString,\n\t\t\tcommand: \"npx\",\n\t\t\targs: npxArgs,\n\t\t};\n\t}\n\n\ttry {\n\t\tconst resolved = execFileSync(\"/bin/sh\", [\"-c\", `command -v ${binName}`], {\n\t\t\tstdio: [\"ignore\", \"pipe\", \"ignore\"],\n\t\t})\n\t\t\t.toString()\n\t\t\t.trim();\n\t\tif (resolved.length > 0 && !isPathUnderTransientCache(resolved)) {\n\t\t\treturn {\n\t\t\t\tcommandString: binName,\n\t\t\t\tcommand: binName,\n\t\t\t\targs: [],\n\t\t\t};\n\t\t}\n\t} catch {\n\t\t// command -v failed: bin not on PATH at all. Fall through.\n\t}\n\n\treturn {\n\t\tcommandString: npxCommandString,\n\t\tcommand: \"npx\",\n\t\targs: npxArgs,\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAoBA,uBAAwB;;;ACHxB,IAAAA,eAMO;;;ACbP,kBAA4B;AAE5B,oBAAqB;AAEd,IAAM,YAAQ,yBAAY;AAAA,EAC/B,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,gBAAgB,EAAE,UAAU,IAAI,MAAM,SAAS,QAAQ,MAAM;AAAA,EAC7D,SAAS;AAAA,IACP,SAAS;AAAA,MACP,MAAM,CAAC,QAAQ,IAAI,iBAAiB,uBAAuB;AAAA,IAC7D;AAAA,EACF;AAAA,EACA,gBAAgB;AAAA,IACd,SAAS,EAAE,MAAM,kBAAkB,KAAK,6BAA6B;AAAA,EACvE;AACF,CAAC;AAGM,IAAM,YAAY;AAGlB,IAAM,eACX;;;ADLF,IAAM,gBAAgB;AA+BtB,eAAsB,aACpB,QACA,OAA4B,CAAC,GACH;AAC1B,QAAM,aACJ,KAAK,kBACJ,iCAAmB;AAAA,IAClB,OAAO;AAAA,IACP,eAAW,mBAAK;AAAA,EAClB,CAAC;AACH,QAAM,cACJ,KAAK,mBACJ,iCAAmB;AAAA,IAClB,OAAO;AAAA,IACP,eAAW,mBAAK;AAAA,EAClB,CAAC;AAIH,QAAM,CAAC,SAAS,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC5C,WAAW,aAAa;AAAA,MACtB,SAAS;AAAA,MACT,KAAK;AAAA,MACL,cAAc;AAAA,MACd,MAAM,CAAC,OAAO,aAAa;AAAA,IAC7B,CAAC;AAAA,IACD,YAAY,aAAa;AAAA,MACvB,SAAS;AAAA,MACT,KAAK;AAAA,MACL,cAAc;AAAA,MACd,MAAM,CAAC,OAAO,aAAa;AAAA,IAC7B,CAAC;AAAA,EACH,CAAC;AAED,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,YAAQ,0BAAY,SAAS,aAAa;AAAA,MAC1C,SAAS,OAAO;AAAA,IAClB;AAAA,IACA,OAAO;AAAA,MACL,OAAO;AAAA,MACP,OAAO;AAAA,MACP,YAAQ,0BAAY,UAAU,aAAa;AAAA,MAC3C,SAAS,OAAO;AAAA,IAClB;AAAA,EACF;AACF;;;AEhFA,IAAM,iBAAiB;AAIvB,IAAM,gBAAgB;AACtB,IAAM,gBAAgB;AAaf,SAAS,KAAK,eAAyC;AAC5D,MAAI,CAAC,eAAe,KAAK,aAAa,GAAG;AACvC,UAAM,IAAI,MAAM,+BAA+B,aAAa,EAAE;AAAA,EAChE;AAKA,QAAM,SAAS,IAAI,gBAAgB;AAAA,IACjC,gBAAgB;AAAA,IAChB,cAAc;AAAA,IACd,WAAW,KAAK,UAAU,EAAE,CAAC,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC;AAAA,IACvD,oBAAoB;AAAA,EACtB,CAAC;AAED,QAAM,oBAAoB,WAAW,aAAa,GAAG,aAAa,IAAI,OAAO,SAAS,CAAC;AAEvF,QAAM,aACJ;AAMF,SAAO;AAAA,IACL;AAAA,IACA,cAAc;AAAA,IACd;AAAA,EACF;AACF;;;AC1EA,yBAA4B;AAC5B,sBAA0D;AAC1D,qBAAwB;AACxB,uBAA8B;;;ACgCvB,IAAM,2BAAN,cAAuC,MAAM;AAAA,EACnD,cAAc;AACb;AAAA,MACC;AAAA,IACD;AACA,SAAK,OAAO;AAAA,EACb;AACD;AAWO,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAC1C;AAAA,EAET,YAAY,MAAc,QAAgB;AACzC;AAAA,MACC,oBAAoB,IAAI,mBAAmB,MAAM;AAAA,IAClD;AACA,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACb;AACD;;;AD9CA,eAAsB,mBAA0C;AAC/D,QAAM,iBAAa,2BAAK,wBAAQ,GAAG,cAAc,aAAa;AAC9D,MAAI;AACJ,MAAI;AACH,UAAM,UAAM,0BAAS,YAAY,OAAO;AAAA,EACzC,SAAS,KAAK;AACb,QAAK,IAA8B,SAAS,UAAU;AACrD,YAAM,IAAI,yBAAyB;AAAA,IACpC;AACA,UAAM;AAAA,EACP;AAMA,MAAI;AACJ,MAAI;AACH,aAAS,KAAK,MAAM,GAAG;AAAA,EACxB,SAAS,KAAK;AACb,UAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC9D,UAAM,IAAI,yBAAyB,YAAY,MAAM;AAAA,EACtD;AACA,MAAI,EAAE,OAAO,YAAY,OAAO,iBAAiB,OAAO,aAAa;AACpE,UAAM,IAAI,yBAAyB,YAAY,yBAAyB;AAAA,EACzE;AACA,SAAO;AACR;AAaA,eAAsB,kBAAkB,QAAqC;AAC5E,QAAM,iBAAa,2BAAK,wBAAQ,GAAG,cAAc,aAAa;AAC9D,YAAM,2BAAM,0BAAQ,UAAU,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACjE,QAAM,aAAS,gCAAY,CAAC,EAAE,SAAS,KAAK;AAC5C,QAAM,UAAU,GAAG,UAAU,IAAI,QAAQ,GAAG,IAAI,MAAM;AACtD,YAAM,2BAAU,SAAS,KAAK,UAAU,QAAQ,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AAIzE,YAAM,uBAAM,SAAS,GAAK;AAC1B,YAAM,wBAAO,SAAS,UAAU;AACjC;AAEO,SAAS,sBAA8B;AAC7C,aAAO,2BAAK,wBAAQ,GAAG,cAAc,aAAa;AACnD;;;AEpDA,IAAM,iBAAiB;AACvB,IAAM,yBAAyB;AASxB,IAAM,gCAAN,cAA4C,MAAM;AAAA,EAC/C,OAAO;AAAA,EAEhB,YAAY,SAAiB;AAC5B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACb;AACD;AAEO,IAAM,qBAAN,cAAiC,MAAM;AAAA,EACpC,OAAO;AAAA,EACP;AAAA,EACA;AAAA,EAET,YAAY,QAAgB,MAAc;AACzC,UAAM,0BAA0B,MAAM,KAAK,IAAI,EAAE;AACjD,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACb;AACD;AAEA,SAAS,eAAe,UAAsC;AAC7D,QAAM,YACL,YAAY,QAAQ,IAAI,qBAAqB;AAC9C,SAAO,UAAU,QAAQ,gBAAgB,EAAE;AAC5C;AAEA,SAAS,iBAAiB,OAAiC;AAC1D,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS;AACpD;AAEA,SAAS,0BAA0B,MAA6B;AAC/D,MAAI,OAAO,SAAS,YAAY,SAAS,MAAM;AAC9C,UAAM,IAAI;AAAA,MACT;AAAA,IACD;AAAA,EACD;AACA,QAAM,EAAE,UAAU,eAAe,WAAW,IAAI;AAIhD,MACC,EACC,iBAAiB,QAAQ,KACzB,iBAAiB,aAAa,KAC9B,iBAAiB,UAAU,IAE3B;AACD,UAAM,IAAI;AAAA,MACT;AAAA,IACD;AAAA,EACD;AACA,MAAI,CAAC,uBAAuB,KAAK,aAAa,GAAG;AAChD,UAAM,IAAI;AAAA,MACT,+EAA+E,aAAa;AAAA,IAC7F;AAAA,EACD;AACA,SAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,EACD;AACD;AAYA,eAAsB,gBACrB,UAA4B,CAAC,GACL;AACxB,QAAM,UAAU,eAAe,QAAQ,OAAO;AAC9C,QAAM,YAAY,QAAQ,aAAa,WAAW;AAIlD,QAAM,WAAW,MAAM,UAAU,GAAG,OAAO,iCAAiC;AAAA,IAC3E,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C,MAAM;AAAA,IACN,QAAQ,YAAY,QAAQ,GAAM;AAAA,EACnC,CAAC;AACD,MAAI,CAAC,SAAS,IAAI;AACjB,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,UAAM,IAAI,mBAAmB,SAAS,QAAQ,IAAI;AAAA,EACnD;AACA,QAAM,MAAO,MAAM,SAAS,KAAK;AACjC,QAAM,OAAO,0BAA0B,GAAG;AAC1C,QAAM,kBAAkB,IAAI;AAC5B,SAAO;AACR;;;ACnGA,IAAAC,sBAA4B;AAC5B,IAAAC,mBAQO;AACP,IAAAC,oBAA8B;AAC9B,IAAAC,mBAA8B;;;AC5B9B,qBAA2B;AAC3B,IAAAC,kBAAwB;AACxB,IAAAC,oBAA8B;AA0C9B,IAAM,cAAoC;AAAA,EACzC;AAAA,IACC,OAAO;AAAA,IACP,WAAW,CAAC,WAAW,QAAQ;AAAA,IAC/B,aAAa,CAAC,WAAW,eAAe;AAAA,IACxC,aAAa;AAAA;AAAA;AAAA;AAAA,IAIb,cAAc,CAAC,cAAc;AAAA,IAC7B,YAAY;AAAA,EACb;AAAA,EACA;AAAA,IACC,OAAO;AAAA,IACP,WAAW,CAAC,WAAW,QAAQ;AAAA,IAC/B,aAAa,CAAC,WAAW,eAAe;AAAA,IACxC,aAAa;AAAA,IACb,cAAc,CAAC,WAAW,UAAU;AAAA,IACpC,YAAY;AAAA,EACb;AAAA,EACA;AAAA,IACC,OAAO;AAAA,IACP,WAAW,CAAC,UAAU,QAAQ;AAAA,IAC9B,aAAa,CAAC,UAAU,eAAe;AAAA,IACvC,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMb,YAAY;AAAA,EACb;AAAA,EACA;AAAA,IACC,OAAO;AAAA,IACP,WAAW,CAAC,aAAa,QAAQ;AAAA,IACjC,aAAa,CAAC,aAAa,eAAe;AAAA,IAC1C,aAAa;AAAA,IACb,cAAc,CAAC,YAAY,YAAY,iBAAiB;AAAA,IACxD,YAAY;AAAA;AAAA;AAAA,IAGZ,aAAa,CAAC,CAAC,YAAY,UAAU,CAAC;AAAA,EACvC;AAAA,EACA;AAAA,IACC,OAAO;AAAA,IACP,WAAW,CAAC,WAAW,YAAY,QAAQ;AAAA,IAC3C,aAAa,CAAC,WAAW,YAAY,eAAe;AAAA,IACpD,aAAa;AAAA,IACb,cAAc,CAAC,WAAW,YAAY,eAAe;AAAA,IACrD,YAAY;AAAA,EACb;AACD;AAEO,SAAS,aAAa,cAAsC;AAClE,QAAM,OAAO,oBAAgB,yBAAQ;AACrC,QAAM,UAAyB,CAAC;AAChC,aAAW,QAAQ,aAAa;AAC/B,UAAM,gBAAY,wBAAK,MAAM,GAAG,KAAK,SAAS;AAC9C,UAAM,mBAAe,wBAAK,MAAM,GAAG,KAAK,WAAW;AAGnD,QAAI,eAAW,+BAAW,2BAAQ,SAAS,CAAC;AAC5C,QAAI,CAAC,YAAY,KAAK,aAAa;AAClC,iBAAW,OAAO,KAAK,aAAa;AACnC,gBAAI,+BAAW,wBAAK,MAAM,GAAG,GAAG,CAAC,GAAG;AACnC,qBAAW;AACX;AAAA,QACD;AAAA,MACD;AAAA,IACD;AACA,QAAI,CAAC,UAAU;AACd;AAAA,IACD;AACA,YAAQ,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ;AAAA,MACA;AAAA,MACA,aAAa,KAAK;AAAA,MAClB,cAAc,KAAK;AAAA,MACnB,YAAY,KAAK;AAAA,IAClB,CAAC;AAAA,EACF;AACA,SAAO;AACR;;;ACvHA,IAAAC,sBAA4B;AAC5B,IAAAC,mBAOO;AACP,IAAAC,kBAAwB;AACxB,IAAAC,oBAA8B;;;ACpB9B,gCAA6B;AAC7B,IAAAC,kBAA6B;AAC7B,IAAAC,oBAA8B;AAC9B,sBAA8B;AAEvB,IAAM,eAAe;AAYrB,SAAS,qBAA6B;AAC5C,MAAI;AACH,UAAM,WAAO,+BAAQ,+BAAc,UAAe,CAAC;AACnD,UAAM,cAAU,wBAAK,MAAM,MAAM,cAAc;AAC/C,UAAM,UAAM,8BAAa,SAAS,OAAO;AACzC,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QAAI,OAAO,OAAO,YAAY,YAAY,OAAO,QAAQ,SAAS,GAAG;AACpE,aAAO,OAAO;AAAA,IACf;AAAA,EACD,QAAQ;AAAA,EAER;AACA,SAAO;AACR;AAcO,SAAS,iBAA0B;AACzC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,OAAO,aAAa,YAAY,SAAS,WAAW,GAAG;AAC1D,WAAO;AAAA,EACR;AACA,MAAI,uCAAuC,KAAK,QAAQ,GAAG;AAC1D,WAAO;AAAA,EACR;AACA,MAAI,yCAAyC,KAAK,QAAQ,GAAG;AAC5D,WAAO;AAAA,EACR;AACA,SAAO;AACR;AAQA,IAAM,2BAAkD;AAAA,EACvD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;AAEO,SAAS,0BAA0B,cAA+B;AACxE,aAAW,MAAM,0BAA0B;AAC1C,QAAI,GAAG,KAAK,YAAY,GAAG;AAC1B,aAAO;AAAA,IACR;AAAA,EACD;AACA,SAAO;AACR;AAiBO,SAAS,kBAAkB,SAAkC;AACnE,QAAM,UAAU,mBAAmB;AACnC,QAAM,UAAU,CAAC,MAAM,MAAM,GAAG,YAAY,IAAI,OAAO,IAAI,OAAO;AAClE,QAAM,mBAAmB,OAAO,QAAQ,KAAK,GAAG,CAAC;AAEjD,MAAI,eAAe,GAAG;AACrB,WAAO;AAAA,MACN,eAAe;AAAA,MACf,SAAS;AAAA,MACT,MAAM;AAAA,IACP;AAAA,EACD;AAEA,MAAI;AACH,UAAM,eAAW,wCAAa,WAAW,CAAC,MAAM,cAAc,OAAO,EAAE,GAAG;AAAA,MACzE,OAAO,CAAC,UAAU,QAAQ,QAAQ;AAAA,IACnC,CAAC,EACC,SAAS,EACT,KAAK;AACP,QAAI,SAAS,SAAS,KAAK,CAAC,0BAA0B,QAAQ,GAAG;AAChE,aAAO;AAAA,QACN,eAAe;AAAA,QACf,SAAS;AAAA,QACT,MAAM,CAAC;AAAA,MACR;AAAA,IACD;AAAA,EACD,QAAQ;AAAA,EAER;AAEA,SAAO;AAAA,IACN,eAAe;AAAA,IACf,SAAS;AAAA,IACT,MAAM;AAAA,EACP;AACD;;;AD1GA,IAAM,UAAU;AAGT,IAAM,kBAAkB;AAkBxB,SAAS,oBAAgC;AAC/C,QAAM,cAAc,QAAQ,IAAI;AAChC,MAAI,eAAe,YAAY,SAAS,GAAG;AAE1C,UAAM,QAAQ,YAAY,KAAK,EAAE,MAAM,KAAK;AAC5C,UAAM,OAAO,MAAM,CAAC,KAAK;AACzB,WAAO,EAAE,SAAS,MAAM,MAAM,MAAM,MAAM,CAAC,EAAE;AAAA,EAC9C;AACA,QAAM,WAAW,kBAAkB,OAAO;AAC1C,SAAO,EAAE,SAAS,SAAS,SAAS,MAAM,SAAS,KAAK;AACzD;AAuCA,SAAS,mBAAmB,KAAmC;AAC9D,QAAM,QAA0B;AAAA,IAC/B,SAAS,IAAI;AAAA,IACb,MAAM,IAAI;AAAA,EACX;AACA,MAAI,IAAI,OAAO,OAAO,KAAK,IAAI,GAAG,EAAE,SAAS,GAAG;AAC/C,UAAM,MAAM,IAAI;AAAA,EACjB;AACA,SAAO;AACR;AAEA,SAAS,mBAAmB,KAAmC;AAC9D,SAAO;AAAA,IACN,MAAM;AAAA,IACN,SAAS,CAAC,IAAI,SAAS,GAAG,IAAI,IAAI;AAAA,IAClC,SAAS;AAAA,IACT,aAAa,IAAI,OAAO,CAAC;AAAA,EAC1B;AACD;AAEA,eAAe,gBAAmB,MAA0B;AAC3D,MAAI,MAAqB;AACzB,MAAI;AACH,UAAM,UAAM,2BAAS,MAAM,OAAO;AAAA,EACnC,SAAS,KAAK;AACb,QAAK,IAA8B,SAAS,UAAU;AACrD,YAAM;AAAA,IACP;AAAA,EACD;AACA,MAAI,QAAQ,MAAM;AACjB,WAAO,CAAC;AAAA,EACT;AACA,MAAI;AACH,WAAO,KAAK,MAAM,GAAG;AAAA,EACtB,QAAQ;AACP,UAAM,IAAI;AAAA,MACT,iBAAiB,IAAI;AAAA,IACtB;AAAA,EACD;AACD;AAcA,eAAe,gBAAgB,MAAc,SAAgC;AAC5E,YAAM,4BAAM,2BAAQ,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC3D,QAAM,aAAS,iCAAY,CAAC,EAAE,SAAS,KAAK;AAC5C,QAAM,UAAU,GAAG,IAAI,IAAI,QAAQ,GAAG,IAAI,MAAM;AAChD,MAAI;AACH,cAAM,4BAAU,SAAS,SAAS,EAAE,MAAM,IAAM,CAAC;AACjD,cAAM,wBAAM,SAAS,GAAK;AAC1B,cAAM,yBAAO,SAAS,IAAI;AAAA,EAC3B,SAAS,KAAK;AACb,cAAM,yBAAO,OAAO,EAAE,MAAM,MAAM;AAAA,IAElC,CAAC;AACD,UAAM;AAAA,EACP;AACD;AAEA,eAAe,iBACd,MACA,OACgB;AAChB,QAAM,SAAS,MAAM,gBAAmC,IAAI;AAC5D,QAAM,UACL,OAAO,OAAO,eAAe,YAAY,OAAO,eAAe,OAC3D,OAAO,aACR,CAAC;AACL,UAAQ,eAAe,IAAI;AAC3B,SAAO,aAAa;AACpB,QAAM,UAAU,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA;AAClD,QAAM,gBAAgB,MAAM,OAAO;AACpC;AAEA,eAAe,iBACd,MACA,OACgB;AAChB,QAAM,SAAS,MAAM,gBAAmC,IAAI;AAC5D,QAAM,UACL,OAAO,OAAO,QAAQ,YAAY,OAAO,QAAQ,OAC7C,OAAO,MACR,CAAC;AACL,UAAQ,eAAe,IAAI;AAC3B,SAAO,MAAM;AACb,QAAM,UAAU,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA;AAClD,QAAM,gBAAgB,MAAM,OAAO;AACpC;AAkBA,eAAsB,kBACrB,QACA,UAAoC,CAAC,GACF;AACnC,MAAI,OAAO,eAAe,UAAU;AACnC,UAAM,IAAI;AAAA,MACT,SAAS,OAAO,KAAK;AAAA,IACtB;AAAA,EACD;AACA,MAAI,CAAC,OAAO,cAAc;AACzB,UAAM,IAAI;AAAA,MACT,SAAS,OAAO,KAAK,mBAAmB,OAAO,UAAU;AAAA,IAC1D;AAAA,EACD;AACA,QAAM,OAAO,QAAQ,oBAAgB,yBAAQ;AAC7C,QAAM,WAAO,wBAAK,MAAM,GAAG,OAAO,YAAY;AAC9C,QAAM,MAAM,QAAQ,WAAW,kBAAkB;AAEjD,MAAI,OAAO,eAAe,YAAY;AACrC,UAAM,iBAAiB,MAAM,mBAAmB,GAAG,CAAC;AAAA,EACrD,OAAO;AACN,UAAM,iBAAiB,MAAM,mBAAmB,GAAG,CAAC;AAAA,EACrD;AAEA,SAAO,EAAE,MAAM,MAAM,gBAAgB;AACtC;;;AFnMA,IAAM,WAAW;AAajB,IAAM,wBAAwB;AAyB9B,SAAS,8BAA8B,OAAyB;AAC/D,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAChD,WAAO;AAAA,EACR;AACA,QAAM,YAAY;AAClB,MAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,GAAG;AACpC,WAAO;AAAA,EACR;AACA,QAAM,YAAY,UAAU,MAAM,OAAO,CAAC,MAAM;AAC/C,UAAM,MAAM,GAAG;AACf,WAAO,EAAE,OAAO,QAAQ,YAAY,IAAI,SAAS,qBAAqB;AAAA,EACvE,CAAC;AACD,MAAI,UAAU,WAAW,UAAU,MAAM,QAAQ;AAEhD,WAAO;AAAA,EACR;AACA,MAAI,UAAU,WAAW,GAAG;AAG3B,WAAO;AAAA,EACR;AACA,SAAO,EAAE,GAAG,WAAW,OAAO,UAAU;AACzC;AAeO,SAAS,qBAA6B;AAC5C,QAAM,cAAc,QAAQ,IAAI;AAChC,MAAI,eAAe,YAAY,SAAS,GAAG;AAC1C,WAAO;AAAA,EACR;AACA,SAAO,kBAAkB,QAAQ,EAAE;AACpC;AA6DA,SAAS,oBAAoB,SAAkC;AAC9D,SAAO;AAAA,IACN,SAAS;AAAA,IACT,OAAO,CAAC,EAAE,MAAM,WAAW,QAAQ,CAAC;AAAA,EACrC;AACD;AAEA,SAAS,4BAAoC;AAM5C,QAAM,WAAO,+BAAQ,gCAAc,UAAe,CAAC;AACnD,aAAO,wBAAK,MAAM,MAAM,SAAS,2BAA2B;AAC7D;AAEA,SAAS,cAAc,KAAmB;AACzC,UAAQ,OAAO,MAAM,GAAG,GAAG;AAAA,CAAI;AAChC;AAEA,eAAsB,uBACrB,cACA,UAAyC,CAAC,GAC1B;AAChB,QAAM,UAAU,QAAQ,eAAe,mBAAmB;AAE1D,MAAI,MAAqB;AACzB,MAAI;AACH,UAAM,UAAM,2BAAS,cAAc,OAAO;AAAA,EAC3C,SAAS,KAAK;AACb,QAAK,IAA8B,SAAS,UAAU;AACrD,YAAM;AAAA,IACP;AAAA,EACD;AAEA,MAAI,SAAyB,CAAC;AAC9B,MAAI,QAAQ,MAAM;AACjB,QAAI;AACH,eAAS,KAAK,MAAM,GAAG;AAAA,IACxB,QAAQ;AACP,YAAM,IAAI;AAAA,QACT,oBAAoB,YAAY;AAAA,MACjC;AAAA,IACD;AAAA,EACD;AAEA,QAAM,QACL,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,OACjD,OAAO,QACR,CAAC;AAEL,QAAM,qBAAqB,MAAM,QAAQ,MAAM,UAAU,IACrD,MAAM,aACP,CAAC;AASJ,QAAM,WAAsB,CAAC;AAC7B,aAAW,SAAS,oBAAoB;AACvC,UAAM,WAAW,8BAA8B,KAAK;AACpD,QAAI,aAAa,MAAM;AACtB,eAAS,KAAK,QAAQ;AAAA,IACvB;AAAA,EACD;AACA,WAAS,KAAK,oBAAoB,OAAO,CAAC;AAE1C,QAAM,aAAa;AACnB,SAAO,QAAQ;AAEf,YAAM,4BAAM,2BAAQ,YAAY,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACnE,QAAM,UAAU,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA;AAQlD,QAAM,aAAS,iCAAY,CAAC,EAAE,SAAS,KAAK;AAC5C,QAAM,UAAU,GAAG,YAAY,IAAI,QAAQ,GAAG,IAAI,MAAM;AACxD,MAAI;AACH,cAAM,4BAAU,SAAS,SAAS,EAAE,MAAM,IAAM,CAAC;AACjD,cAAM,wBAAM,SAAS,GAAK;AAC1B,cAAM,yBAAO,SAAS,YAAY;AAAA,EACnC,SAAS,KAAK;AACb,cAAM,yBAAO,OAAO,EAAE,MAAM,MAAM;AAAA,IAElC,CAAC;AACD,UAAM;AAAA,EACP;AACD;AAEA,eAAe,kBACd,OACA,aAC0E;AAC1E,YAAM,wBAAM,MAAM,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC7D,QAAM,aAAS,wBAAK,MAAM,WAAW,2BAA2B;AAChE,YAAM,2BAAS,aAAa,MAAM;AAClC,YAAM,wBAAM,QAAQ,GAAK;AACzB,SAAO,EAAE,OAAO,MAAM,OAAO,MAAM,QAAQ,QAAQ,UAAU;AAC9D;AAEA,SAAS,uBAAuB,OAAoB,SAAyB;AAC5E,SAAO,GAAG,MAAM,KAAK,6DAA6D,OAAO,4BAA4B,MAAM,KAAK,uBAAuB,MAAM,YAAY;AAC1K;AAEA,SAAS,sBACR,OACA,SACS;AACT,QAAM,MAAM,CAAC,QAAQ,SAAS,GAAG,QAAQ,IAAI,EAAE,KAAK,GAAG;AACvD,SAAO,GAAG,MAAM,KAAK,oGAAoG,GAAG;AAC7H;AAmBA,eAAsB,aACrB,UAA0B,CAAC,GACF;AACzB,QAAM,SAAS,aAAa,QAAQ,YAAY;AAChD,QAAM,cAAc,QAAQ,mBAAmB,0BAA0B;AACzE,QAAM,WAAW,QAAQ,YAAY;AAIrC,QAAM,cAAc,QAAQ,eAAe,mBAAmB;AAC9D,QAAM,aAAa,QAAQ,cAAc,kBAAkB;AAE3D,QAAM,cAA4C,CAAC;AACnD,QAAM,oBAAwD,CAAC;AAC/D,QAAM,mBAAsD,CAAC;AAS7D,aAAW,SAAS,QAAQ;AAC3B,QAAI;AACH,YAAM,QAAQ,MAAM,kBAAkB,OAAO,WAAW;AACxD,kBAAY,KAAK,KAAK;AAAA,IACvB,SAAS,KAAK;AACb,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,kBAAY,KAAK;AAAA,QAChB,OAAO,MAAM;AAAA,QACb,MAAM;AAAA,QACN,QAAQ;AAAA,MACT,CAAC;AACD,eAAS,GAAG,MAAM,KAAK,wBAAwB,OAAO,GAAG;AAGzD;AAAA,IACD;AAEA,QAAI,MAAM,gBAAgB,eAAe;AACxC,UAAI;AACH,cAAM,uBAAuB,MAAM,cAAc,EAAE,YAAY,CAAC;AAChE,0BAAkB,KAAK;AAAA,UACtB,OAAO,MAAM;AAAA,UACb,QAAQ;AAAA,QACT,CAAC;AAAA,MACF,SAAS,KAAK;AACb,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,0BAAkB,KAAK;AAAA,UACtB,OAAO,MAAM;AAAA,UACb,QAAQ;AAAA,UACR;AAAA,QACD,CAAC;AACD,iBAAS,GAAG,MAAM,KAAK,+BAA+B,OAAO,GAAG;AAAA,MACjE;AAAA,IACD,OAAO;AACN,YAAM,gBAAgB,uBAAuB,OAAO,WAAW;AAC/D,wBAAkB,KAAK;AAAA,QACtB,OAAO,MAAM;AAAA,QACb,QAAQ;AAAA,QACR,SAAS;AAAA,MACV,CAAC;AACD,eAAS,aAAa;AAAA,IACvB;AAEA,QAAI,MAAM,eAAe,UAAU;AAClC,YAAM,gBAAgB,sBAAsB,OAAO,UAAU;AAC7D,uBAAiB,KAAK;AAAA,QACrB,OAAO,MAAM;AAAA,QACb,QAAQ;AAAA,QACR,SAAS;AAAA,MACV,CAAC;AACD,eAAS,aAAa;AACtB;AAAA,IACD;AACA,QAAI;AACH,YAAM,YAAY,MAAM,kBAAkB,OAAO;AAAA,QAChD,cAAc,QAAQ;AAAA,QACtB,SAAS;AAAA,MACV,CAAC;AACD,uBAAiB,KAAK;AAAA,QACrB,OAAO,MAAM;AAAA,QACb,QAAQ;AAAA,QACR,MAAM,UAAU;AAAA,MACjB,CAAC;AAAA,IACF,SAAS,KAAK;AACb,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,uBAAiB,KAAK;AAAA,QACrB,OAAO,MAAM;AAAA,QACb,QAAQ;AAAA,QACR;AAAA,MACD,CAAC;AACD,eAAS,GAAG,MAAM,KAAK,8BAA8B,OAAO,GAAG;AAAA,IAChE;AAAA,EACD;AAEA,SAAO,EAAE,aAAa,mBAAmB,iBAAiB;AAC3D;;;AP9YA,eAAe,OAAO,OAA6B,CAAC,GAAkB;AACrE,MAAI;AACH,UAAM,OAAO,MAAM,gBAAgB,EAAE,SAAS,KAAK,QAAQ,CAAC;AAG5D,YAAQ,OAAO,MAAM,aAAa,KAAK,QAAQ;AAAA,CAAI;AACnD,YAAQ,OAAO,MAAM,kBAAkB,KAAK,aAAa;AAAA,CAAI;AAC7D,YAAQ,OAAO,MAAM,qBAAqB,oBAAoB,CAAC;AAAA,CAAI;AAAA,EACpE,SAAS,KAAK;AACb,QAAI,eAAe,oBAAoB;AACtC,cAAQ,OAAO;AAAA,QACd,6CAA6C,IAAI,MAAM,KAAK,IAAI,IAAI;AAAA;AAAA,MACrE;AACA,cAAQ,KAAK,CAAC;AAAA,IACf;AACA,UAAM;AAAA,EACP;AACD;AAEA,eAAe,UAAyB;AACvC,QAAM,SAAS,MAAM,iBAAiB;AACtC,QAAM,MAAM,KAAK,OAAO,aAAa;AACrC,UAAQ,OAAO,MAAM,GAAG,IAAI,iBAAiB;AAAA,CAAI;AACjD,UAAQ,OAAO,MAAM,kBAAkB,IAAI,YAAY;AAAA,CAAI;AAC3D,UAAQ,OAAO,MAAM,GAAG,IAAI,UAAU;AAAA,CAAI;AAC3C;AAEA,eAAe,aAA4B;AAC1C,QAAM,SAAS,MAAM,iBAAiB;AACtC,QAAM,OAAO,MAAM,aAAa,MAAM;AACtC,UAAQ,OAAO,MAAM,iBAAiB,KAAK,KAAK,MAAM;AAAA,CAAI;AAC1D,UAAQ,OAAO,MAAM,iBAAiB,KAAK,MAAM,MAAM;AAAA,CAAI;AAC5D;AAEA,eAAe,UAAyB;AACvC,QAAM,SAAS,MAAM,iBAAiB;AACtC,UAAQ,OAAO,MAAM,aAAa,OAAO,QAAQ;AAAA,CAAI;AACrD,UAAQ,OAAO,MAAM,kBAAkB,OAAO,aAAa;AAAA,CAAI;AAChE;AAEA,eAAsB,OAAO,OAAiB,QAAQ,MAAqB;AAC1E,QAAM,UAAU,IAAI,yBAAQ;AAC5B,UACE,KAAK,kBAAkB,EACvB;AAAA,IACA;AAAA,EACD,EACC,QAAQ,OAAO;AAEjB,UACE,QAAQ,KAAK,EACb,YAAY,sDAAsD,EAClE,OAAO,oBAAoB,wBAAwB,EACnD,OAAO,OAAO,SAA+B;AAC7C,UAAM,OAAO,IAAI;AAAA,EAClB,CAAC;AAEF,UACE,QAAQ,MAAM,EACd;AAAA,IACA;AAAA,EACD,EACC,OAAO,YAAY;AACnB,UAAM,QAAQ;AAAA,EACf,CAAC;AAEF,UACE,QAAQ,SAAS,EACjB,YAAY,kDAAkD,EAC9D,OAAO,YAAY;AACnB,UAAM,WAAW;AAAA,EAClB,CAAC;AAEF,UACE,QAAQ,MAAM,EACd,YAAY,oDAAoD,EAChE,OAAO,YAAY;AACnB,UAAM,QAAQ;AAAA,EACf,CAAC;AAEF,UACE,QAAQ,OAAO,EACf;AAAA,IACA;AAAA,EACD,EACC;AAAA,IACA,IAAI,yBAAQ,SAAS,EACnB;AAAA,MACA;AAAA,IACD,EACC,OAAO,YAAY;AACnB,YAAM,SAAS,MAAM,aAAa;AAClC,iBAAW,SAAS,OAAO,aAAa;AACvC,gBAAQ,OAAO;AAAA,UACd,UAAU,MAAM,KAAK,OAAO,MAAM,IAAI,KAAK,MAAM,MAAM;AAAA;AAAA,QACxD;AAAA,MACD;AACA,iBAAW,OAAO,OAAO,mBAAmB;AAC3C,YAAI,IAAI,WAAW,cAAc;AAChC,kBAAQ,OAAO;AAAA,YACd,SAAS,IAAI,KAAK;AAAA;AAAA,UACnB;AAAA,QACD,WAAW,IAAI,WAAW,UAAU;AACnC,kBAAQ,OAAO;AAAA,YACd,WAAW,IAAI,KAAK,OAAO,IAAI,WAAW,EAAE;AAAA;AAAA,UAC7C;AAAA,QACD,WAAW,IAAI,WAAW,UAAU;AACnC,kBAAQ,OAAO;AAAA,YACd,SAAS,IAAI,KAAK,eAAe,IAAI,WAAW,eAAe;AAAA;AAAA,UAChE;AAAA,QACD;AAAA,MACD;AACA,iBAAW,OAAO,OAAO,kBAAkB;AAC1C,YAAI,IAAI,WAAW,cAAc;AAChC,kBAAQ,OAAO;AAAA,YACd,QAAQ,IAAI,KAAK,qBAAqB,IAAI,QAAQ,gBAAgB;AAAA;AAAA,UACnE;AAAA,QACD,WAAW,IAAI,WAAW,UAAU;AACnC,kBAAQ,OAAO;AAAA,YACd,WAAW,IAAI,KAAK,WAAW,IAAI,WAAW,EAAE;AAAA;AAAA,UACjD;AAAA,QACD,WAAW,IAAI,WAAW,UAAU;AACnC,kBAAQ,OAAO;AAAA,YACd,QAAQ,IAAI,KAAK,eAAe,IAAI,WAAW,eAAe;AAAA;AAAA,UAC/D;AAAA,QACD;AAAA,MACD;AACA,UAAI,OAAO,YAAY,WAAW,GAAG;AACpC,gBAAQ,OAAO;AAAA,UACd;AAAA,QACD;AAAA,MACD;AAAA,IACD,CAAC;AAAA,EACH;AAED,MAAI;AACH,UAAM,QAAQ,WAAW,IAAI;AAAA,EAC9B,SAAS,KAAK;AACb,QAAI,eAAe,0BAA0B;AAC5C,cAAQ,OAAO,MAAM,sBAAsB,IAAI,OAAO;AAAA,CAAI;AAC1D,cAAQ,KAAK,CAAC;AAAA,IACf;AACA,YAAQ,OAAO;AAAA,MACd,sBAAuB,IAAc,WAAW,OAAO,GAAG,CAAC;AAAA;AAAA,IAC5D;AACA,YAAQ,KAAK,CAAC;AAAA,EACf;AACD;","names":["import_viem","import_node_crypto","import_promises","import_node_path","import_node_url","import_node_os","import_node_path","import_node_crypto","import_promises","import_node_os","import_node_path","import_node_fs","import_node_path"]}
+{"version":3,"sources":["../src/cli.ts","../src/balance.ts","../src/chains.ts","../src/fund.ts","../src/hmac.ts","../src/storage.ts","../src/types.ts","../src/provision.ts","../src/skill-install.ts","../src/agent-detect.ts","../src/mcp-register.ts","../src/runtime-detect.ts"],"sourcesContent":["// CLI dispatcher for `npx @keeperhub/wallet <cmd>`. Ships 4 subcommands:\n// add (provision -- NO auth), fund (pure string-build Coinbase Onramp +\n// Tempo address), balance (Base USDC + Tempo USDC.e), info (print subOrgId\n// + walletAddress from ~/.keeperhub/wallet.json).\n//\n// v0.1.4 removed the `link` subcommand. /api/agentic-wallet/link still\n// exists server-side but the UX (copy-paste session cookie) was not fit\n// for real users; the server-approval ask tier that required linking\n// also collapsed into an inline ask in this release. See KEEP-307 and\n// KEEP-308 for the long-term design decisions.\n//\n// @security The HMAC secret written to wallet.json is NEVER printed to stdout\n// or stderr. `add` prints only subOrgId + walletAddress + the config path so\n// users can inspect perms. `info` never references the secret at all. Grep\n// rule: no process.stdout/process.stderr line in this file should include\n// wallet.hmacSecret or data.hmacSecret.\n//\n// Exit codes: 0 on success, 1 on any error (WalletConfigMissingError,\n// HTTP failure, validation error). Uncaught errors are written to stderr.\n\nimport { Command } from \"commander\";\nimport { checkBalance } from \"./balance.js\";\nimport { fund } from \"./fund.js\";\nimport { buildHmacHeaders } from \"./hmac.js\";\nimport { ProvisionHttpError, provisionWallet } from \"./provision.js\";\nimport { installSkill } from \"./skill-install.js\";\nimport { getWalletConfigPath, readWalletConfig } from \"./storage.js\";\nimport { WalletConfigMissingError } from \"./types.js\";\n\nasync function cmdAdd(opts: { baseUrl?: string } = {}): Promise<void> {\n\ttry {\n\t\tconst data = await provisionWallet({ baseUrl: opts.baseUrl });\n\t\t// Intentionally print only public fields. The hmacSecret is written to\n\t\t// wallet.json (chmod 0o600) but never printed -- T-34-cli-02 mitigation.\n\t\tprocess.stdout.write(`subOrgId: ${data.subOrgId}\\n`);\n\t\tprocess.stdout.write(`walletAddress: ${data.walletAddress}\\n`);\n\t\tprocess.stdout.write(`config written to ${getWalletConfigPath()}\\n`);\n\t} catch (err) {\n\t\tif (err instanceof ProvisionHttpError) {\n\t\t\tprocess.stderr.write(\n\t\t\t\t`[keeperhub-wallet] provision failed: HTTP ${err.status}: ${err.body}\\n`,\n\t\t\t);\n\t\t\tprocess.exit(1);\n\t\t}\n\t\tthrow err;\n\t}\n}\n\nasync function cmdFund(): Promise<void> {\n\tconst wallet = await readWalletConfig();\n\tconst out = fund(wallet.walletAddress);\n\tprocess.stdout.write(`${out.coinbaseOnrampUrl}\\n`);\n\tprocess.stdout.write(`Tempo address: ${out.tempoAddress}\\n`);\n\tprocess.stdout.write(`${out.disclaimer}\\n`);\n}\n\nasync function cmdBalance(): Promise<void> {\n\tconst wallet = await readWalletConfig();\n\tconst snap = await checkBalance(wallet);\n\tprocess.stdout.write(`Base USDC:    ${snap.base.amount}\\n`);\n\tprocess.stdout.write(`Tempo USDC.e: ${snap.tempo.amount}\\n`);\n}\n\nasync function cmdInfo(): Promise<void> {\n\tconst wallet = await readWalletConfig();\n\tprocess.stdout.write(`subOrgId: ${wallet.subOrgId}\\n`);\n\tprocess.stdout.write(`walletAddress: ${wallet.walletAddress}\\n`);\n}\n\ntype FeedbackOpts = {\n\texecutionId: string;\n\tvalue: string;\n\tdecimals?: string;\n\tcomment?: string;\n\tagentId?: string;\n\tchainId?: string;\n\tbaseUrl?: string;\n};\n\nconst FEEDBACK_DEFAULT_BASE_URL = \"https://app.keeperhub.com\";\n\nasync function cmdFeedback(opts: FeedbackOpts): Promise<void> {\n\tconst wallet = await readWalletConfig();\n\tconst baseUrl = (opts.baseUrl ?? FEEDBACK_DEFAULT_BASE_URL).replace(\n\t\t/\\/$/,\n\t\t\"\",\n\t);\n\tconst path = \"/api/agentic-wallet/feedback\";\n\n\t// Build the request body. Server validates int128 range + 0..18 decimals\n\t// + executionId payment ownership; we forward verbatim and let it speak.\n\tconst body: Record<string, unknown> = {\n\t\texecutionId: opts.executionId,\n\t\tvalue: Number.parseInt(opts.value, 10),\n\t\tvalueDecimals: Number.parseInt(opts.decimals ?? \"0\", 10),\n\t};\n\tif (opts.comment !== undefined) {\n\t\tbody.comment = opts.comment;\n\t}\n\tif (opts.agentId !== undefined) {\n\t\tbody.agentId = opts.agentId;\n\t}\n\tif (opts.chainId !== undefined) {\n\t\tbody.agentChainId = Number.parseInt(opts.chainId, 10);\n\t}\n\tconst bodyJson = JSON.stringify(body);\n\n\tconst headers = buildHmacHeaders(\n\t\twallet.hmacSecret,\n\t\t\"POST\",\n\t\tpath,\n\t\twallet.subOrgId,\n\t\tbodyJson,\n\t);\n\n\tconst response = await fetch(`${baseUrl}${path}`, {\n\t\tmethod: \"POST\",\n\t\theaders: {\n\t\t\t\"content-type\": \"application/json\",\n\t\t\t...headers,\n\t\t},\n\t\tbody: bodyJson,\n\t});\n\tconst text = await response.text();\n\tif (!response.ok) {\n\t\tprocess.stderr.write(`HTTP ${response.status}: ${text}\\n`);\n\t\tprocess.exit(1);\n\t}\n\tconst parsed = JSON.parse(text) as {\n\t\tfeedbackId?: string;\n\t\ttxHash?: string;\n\t\tpublicUrl?: string;\n\t};\n\tprocess.stdout.write(`feedbackId: ${parsed.feedbackId ?? \"\"}\\n`);\n\tprocess.stdout.write(`txHash: ${parsed.txHash ?? \"\"}\\n`);\n\tprocess.stdout.write(`publicUrl: ${parsed.publicUrl ?? \"\"}\\n`);\n}\n\nexport async function runCli(argv: string[] = process.argv): Promise<void> {\n\tconst program = new Command();\n\tprogram\n\t\t.name(\"keeperhub-wallet\")\n\t\t.description(\n\t\t\t\"KeeperHub agentic wallet CLI (auto-pay x402 + MPP 402 responses)\",\n\t\t)\n\t\t.version(\"0.1.3\");\n\n\tprogram\n\t\t.command(\"add\")\n\t\t.description(\"Provision a new agentic wallet (no account required)\")\n\t\t.option(\"--base-url <url>\", \"KeeperHub API base URL\")\n\t\t.action(async (opts: { baseUrl?: string }) => {\n\t\t\tawait cmdAdd(opts);\n\t\t});\n\n\tprogram\n\t\t.command(\"fund\")\n\t\t.description(\n\t\t\t\"Print Coinbase Onramp URL (Base USDC) and Tempo deposit address\",\n\t\t)\n\t\t.action(async () => {\n\t\t\tawait cmdFund();\n\t\t});\n\n\tprogram\n\t\t.command(\"balance\")\n\t\t.description(\"Print on-chain balance: Base USDC + Tempo USDC.e\")\n\t\t.action(async () => {\n\t\t\tawait cmdBalance();\n\t\t});\n\n\tprogram\n\t\t.command(\"info\")\n\t\t.description(\"Print subOrgId and walletAddress from local config\")\n\t\t.action(async () => {\n\t\t\tawait cmdInfo();\n\t\t});\n\n\tprogram\n\t\t.command(\"feedback\")\n\t\t.description(\n\t\t\t\"Submit ERC-8004 ReputationRegistry feedback for a workflow execution this wallet paid for. Signs giveFeedback() via Turnkey and broadcasts on Ethereum mainnet. Caller wallet pays gas natively.\",\n\t\t)\n\t\t.requiredOption(\n\t\t\t\"--execution-id <id>\",\n\t\t\t\"workflow execution id to leave feedback for\",\n\t\t)\n\t\t.requiredOption(\n\t\t\t\"--value <int>\",\n\t\t\t\"raw int128 rating value (e.g. 5 with --decimals 0 for a 5-star rating)\",\n\t\t)\n\t\t.option(\n\t\t\t\"--decimals <int>\",\n\t\t\t\"decimals for value (0..18); 0 for integer scores, 1 for 0.1-step\",\n\t\t\t\"0\",\n\t\t)\n\t\t.option(\"--comment <text>\", \"optional plaintext comment\")\n\t\t.option(\n\t\t\t\"--agent-id <id>\",\n\t\t\t\"rated agent NFT id (uint256 decimal); defaults to KeeperHub agent 31875\",\n\t\t)\n\t\t.option(\n\t\t\t\"--chain-id <int>\",\n\t\t\t\"agent chain id; defaults to 1 (Ethereum mainnet, only chain supported today)\",\n\t\t)\n\t\t.option(\"--base-url <url>\", \"KeeperHub API base URL\")\n\t\t.action(async (opts: FeedbackOpts) => {\n\t\t\tawait cmdFeedback(opts);\n\t\t});\n\n\tprogram\n\t\t.command(\"skill\")\n\t\t.description(\n\t\t\t\"Install the KeeperHub skill file into detected agent directories\",\n\t\t)\n\t\t.addCommand(\n\t\t\tnew Command(\"install\")\n\t\t\t\t.description(\n\t\t\t\t\t\"Write skill file + register PreToolUse hook in all detected agents\",\n\t\t\t\t)\n\t\t\t\t.action(async () => {\n\t\t\t\t\tconst result = await installSkill();\n\t\t\t\t\tfor (const write of result.skillWrites) {\n\t\t\t\t\t\tprocess.stdout.write(\n\t\t\t\t\t\t\t`skill: ${write.agent} -> ${write.path} (${write.status})\\n`,\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\tfor (const reg of result.hookRegistrations) {\n\t\t\t\t\t\tif (reg.status === \"registered\") {\n\t\t\t\t\t\t\tprocess.stdout.write(\n\t\t\t\t\t\t\t\t`hook: ${reg.agent} -> PreToolUse registered\\n`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} else if (reg.status === \"notice\") {\n\t\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\t`notice: ${reg.agent} -> ${reg.message ?? \"\"}\\n`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} else if (reg.status === \"failed\") {\n\t\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\t`hook: ${reg.agent} -> FAILED (${reg.message ?? \"unknown error\"})\\n`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\tfor (const reg of result.mcpRegistrations) {\n\t\t\t\t\t\tif (reg.status === \"registered\") {\n\t\t\t\t\t\t\tprocess.stdout.write(\n\t\t\t\t\t\t\t\t`mcp: ${reg.agent} -> registered at ${reg.path ?? \"(unknown path)\"}\\n`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} else if (reg.status === \"notice\") {\n\t\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\t`notice: ${reg.agent} mcp -> ${reg.message ?? \"\"}\\n`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t} else if (reg.status === \"failed\") {\n\t\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\t`mcp: ${reg.agent} -> FAILED (${reg.message ?? \"unknown error\"})\\n`,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\tif (result.skillWrites.length === 0) {\n\t\t\t\t\t\tprocess.stderr.write(\n\t\t\t\t\t\t\t\"No supported agent skill directories detected under $HOME. Create ~/.claude/, ~/.cursor/, ~/.cline/, ~/.windsurf/, or ~/.config/opencode/ and re-run.\\n\",\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}),\n\t\t);\n\n\ttry {\n\t\tawait program.parseAsync(argv);\n\t} catch (err) {\n\t\tif (err instanceof WalletConfigMissingError) {\n\t\t\tprocess.stderr.write(`[keeperhub-wallet] ${err.message}\\n`);\n\t\t\tprocess.exit(1);\n\t\t}\n\t\tprocess.stderr.write(\n\t\t\t`[keeperhub-wallet] ${(err as Error).message ?? String(err)}\\n`,\n\t\t);\n\t\tprocess.exit(1);\n\t}\n}\n","// checkBalance() unified view (PAY-05):\n//   - Base USDC balanceOf  (viem publicClient on Base)\n//   - Tempo USDC.e balanceOf (viem publicClient on Tempo)\n//\n// Both legs are fetched in parallel via Promise.all. The on-chain reads\n// touch only the canonical USDC contract on their respective chains\n// (read-only ERC-20 balanceOf with no state mutation).\n//\n// The /api/agentic-wallet/credit ledger is intentionally NOT read here:\n// the server endpoint exists but no debit path is wired, so surfacing the\n// balance to users implied a capability that has not shipped. Restore the\n// leg here when KEEP-305/306 lands.\n//\n// @security balance.ts does not emit balance data to stdout/stderr via the\n// global console object or util.inspect (T-34-bal-02 mitigation). Any\n// stdout emitter added here is a privacy regression; grep-enforced in\n// acceptance criteria.\nimport {\n  createPublicClient,\n  erc20Abi,\n  formatUnits,\n  http,\n  type PublicClient,\n} from \"viem\";\nimport { BASE_USDC, base, TEMPO_USDC_E, tempo } from \"./chains.js\";\nimport type { WalletConfig } from \"./types.js\";\n\n// USDC and USDC.e both use 6 decimals on Base + Tempo respectively.\nconst USDC_DECIMALS = 6;\n\nexport type BalanceSnapshot = {\n  base: {\n    chain: \"base\";\n    token: \"USDC\";\n    amount: string;\n    address: `0x${string}`;\n  };\n  tempo: {\n    chain: \"tempo\";\n    token: \"USDC.e\";\n    amount: string;\n    address: `0x${string}`;\n  };\n};\n\nexport type CheckBalanceOptions = {\n  /** Injectable viem client for Base (tests mock readContract). */\n  baseClient?: PublicClient;\n  /** Injectable viem client for Tempo (tests mock readContract). */\n  tempoClient?: PublicClient;\n};\n\n/**\n * Read the wallet's on-chain balance across Base + Tempo in parallel. Both\n * legs must resolve; any single failure rejects the Promise.\n *\n * Amounts are formatted as decimal strings (6-decimal USDC precision) so the\n * caller can render them without BigInt math.\n */\nexport async function checkBalance(\n  wallet: WalletConfig,\n  opts: CheckBalanceOptions = {}\n): Promise<BalanceSnapshot> {\n  const baseClient =\n    opts.baseClient ??\n    (createPublicClient({\n      chain: base,\n      transport: http(),\n    }) as unknown as PublicClient);\n  const tempoClient =\n    opts.tempoClient ??\n    (createPublicClient({\n      chain: tempo,\n      transport: http(),\n    }) as unknown as PublicClient);\n\n  // Promise.all fires both reads concurrently. Total elapsed ~= max(leg)\n  // rather than sum(leg); SC-3 (<2s) test asserts this.\n  const [baseRaw, tempoRaw] = await Promise.all([\n    baseClient.readContract({\n      address: BASE_USDC,\n      abi: erc20Abi,\n      functionName: \"balanceOf\",\n      args: [wallet.walletAddress],\n    }) as Promise<bigint>,\n    tempoClient.readContract({\n      address: TEMPO_USDC_E,\n      abi: erc20Abi,\n      functionName: \"balanceOf\",\n      args: [wallet.walletAddress],\n    }) as Promise<bigint>,\n  ]);\n\n  return {\n    base: {\n      chain: \"base\",\n      token: \"USDC\",\n      amount: formatUnits(baseRaw, USDC_DECIMALS),\n      address: wallet.walletAddress,\n    },\n    tempo: {\n      chain: \"tempo\",\n      token: \"USDC.e\",\n      amount: formatUnits(tempoRaw, USDC_DECIMALS),\n      address: wallet.walletAddress,\n    },\n  };\n}\n","// Sources (truth):\n// - lib/agentic-wallet/sign.ts:56  -- Base USDC at\n//   0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 (chainId 8453).\n// - lib/mpp/server.ts:3            -- Tempo USDC.e at\n//   0x20c000000000000000000000b9537d11c60e8b50 (chainId 4217).\n//\n// Tempo is not in viem/chains core as of viem 2.48.1 (the version pinned in\n// this package). Define it inline via defineChain so the only dependency is\n// viem itself. TEMPO_RPC_URL overrides the default RPC for heavy readers who\n// want to point at their own node (T-34-bal-01 mitigation).\nimport { defineChain } from \"viem\";\n\nexport { base } from \"viem/chains\";\n\nexport const tempo = defineChain({\n  id: 4217,\n  name: \"Tempo\",\n  nativeCurrency: { decimals: 18, name: \"Ether\", symbol: \"ETH\" },\n  rpcUrls: {\n    default: {\n      http: [process.env.TEMPO_RPC_URL ?? \"https://rpc.tempo.xyz\"],\n    },\n  },\n  blockExplorers: {\n    default: { name: \"Tempo Explorer\", url: \"https://explorer.tempo.xyz\" },\n  },\n});\n\n/** Circle-issued USDC on Base mainnet. */\nexport const BASE_USDC = \"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913\" as const;\n\n/** Bridged USDC (USDC.e) on Tempo mainnet. NOT the same contract as BASE_USDC. */\nexport const TEMPO_USDC_E =\n  \"0x20c000000000000000000000b9537d11c60e8b50\" as const;\n","// Source: 34-RESEARCH Pattern 5 + Pitfall 5.\n// Coinbase deprecated the query-param pay.coinbase.com flow in favour of\n// sessionToken URLs on 2025-07-31, but the legacy endpoint still returns a\n// working Onramp page (it just may not pre-fill the asset/network/address\n// fields). We print the legacy URL for zero-dependency ergonomics and a\n// follow-up disclaimer so users know to paste manually if prefill is dropped.\n//\n// fund() is a pure string-build: no HTTP, no process spawn, no browser\n// invocation. Callers (the CLI `keeperhub-wallet fund` subcommand, the\n// `check_balance` skill in Phase 35) decide how to display the result.\n//\n// T-34-fund-01 mitigation: the host is hard-coded (pay.coinbase.com) and the\n// only user-supplied input is the wallet address, which is regex-validated\n// against the canonical 0x-prefixed 40-hex-char EVM format before any string\n// interpolation.\n\nexport type FundInstructions = {\n  /** Coinbase Onramp deeplink (legacy query-param form). */\n  coinbaseOnrampUrl: string;\n  /** Tempo deposit address — same as the input wallet (EVM address shared). */\n  tempoAddress: `0x${string}`;\n  /** Plain-ASCII guidance string; no emojis (CLAUDE.md rule). */\n  disclaimer: string;\n};\n\n// 0x followed by exactly 40 hex chars, case-insensitive. Kept at module scope\n// so the regex literal is compiled once (biome/ultracite useTopLevelRegex).\nconst EVM_ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;\n\n// Coinbase Onramp legacy deeplink. The host + path pair is the documented\n// entry point for query-param-style Onramp sessions.\nconst COINBASE_HOST = \"pay.coinbase.com\";\nconst COINBASE_PATH = \"/buy/select-asset\";\n\n/**\n * Build Coinbase Onramp URL + Tempo deposit address for the given wallet.\n *\n * No HTTP calls are performed. The caller is expected to either print the\n * resulting URL (CLI) or render it in a chat bubble (skill). The returned\n * `disclaimer` explains the Onramp deprecation + the Tempo external-transfer\n * fallback in plain ASCII so terminal clients with ASCII-only fonts render\n * identically to emoji-capable clients.\n *\n * @throws if `walletAddress` does not match /^0x[0-9a-fA-F]{40}$/.\n */\nexport function fund(walletAddress: string): FundInstructions {\n  if (!EVM_ADDRESS_RE.test(walletAddress)) {\n    throw new Error(`Invalid EVM wallet address: ${walletAddress}`);\n  }\n\n  // addresses is a JSON-encoded map {walletAddress: [\"base\"]} per Coinbase\n  // Onramp docs. Encoding into URLSearchParams guarantees the colon,\n  // brackets, and quotes are percent-escaped correctly.\n  const params = new URLSearchParams({\n    defaultNetwork: \"base\",\n    defaultAsset: \"USDC\",\n    addresses: JSON.stringify({ [walletAddress]: [\"base\"] }),\n    presetCryptoAmount: \"5\",\n  });\n\n  const coinbaseOnrampUrl = `https://${COINBASE_HOST}${COINBASE_PATH}?${params.toString()}`;\n\n  const disclaimer =\n    \"If the Coinbase page does not pre-fill, paste your address manually. \" +\n    \"For Tempo USDC.e, transfer from an exchange or another wallet to the \" +\n    \"address above -- Onramp does not support Tempo directly. Coinbase \" +\n    \"sessionToken URLs are the 2025+ canonical form; legacy query-param \" +\n    \"URLs may drop prefill on some accounts.\";\n\n  return {\n    coinbaseOnrampUrl,\n    tempoAddress: walletAddress as `0x${string}`,\n    disclaimer,\n  };\n}\n","import { createHash, createHmac } from \"node:crypto\";\nimport type { HmacHeaders } from \"./types.js\";\n\n/**\n * Mirror of lib/agentic-wallet/hmac.ts::computeSignature.\n * Format (byte-for-byte identical to server):\n *   `${method}\\n${path}\\n${subOrgId}\\n${sha256_hex(body)}\\n${timestamp}`\n * Post-HI-05: subOrgId is a signed field.\n *\n * @security Do NOT log the secret or the returned signature. Any stdout\n *   emitter (the global console object or util.inspect) added to this\n *   file is a T-34-08 violation (grep-enforced).\n */\nexport function computeSignature(\n  secret: string,\n  method: string,\n  path: string,\n  subOrgId: string,\n  body: string,\n  timestamp: string\n): string {\n  const bodyDigest = createHash(\"sha256\").update(body).digest(\"hex\");\n  const signingString = `${method}\\n${path}\\n${subOrgId}\\n${bodyDigest}\\n${timestamp}`;\n  return createHmac(\"sha256\", secret).update(signingString).digest(\"hex\");\n}\n\n/**\n * Build the three X-KH-* headers that authenticate every request to\n * /api/agentic-wallet/* (except /provision, which uses the session cookie).\n *\n * Timestamp is unix seconds (Math.floor(Date.now() / 1000)); the server\n * enforces a symmetric 300-second replay window.\n */\nexport function buildHmacHeaders(\n  secret: string,\n  method: string,\n  path: string,\n  subOrgId: string,\n  body: string\n): HmacHeaders {\n  const timestamp = String(Math.floor(Date.now() / 1000));\n  const signature = computeSignature(\n    secret,\n    method,\n    path,\n    subOrgId,\n    body,\n    timestamp\n  );\n  return {\n    \"X-KH-Sub-Org\": subOrgId,\n    \"X-KH-Timestamp\": timestamp,\n    \"X-KH-Signature\": signature,\n  };\n}\n","import { randomBytes } from \"node:crypto\";\nimport { chmod, mkdir, readFile, rename, writeFile } from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport {\n\ttype WalletConfig,\n\tWalletConfigCorruptError,\n\tWalletConfigMissingError,\n} from \"./types.js\";\n\n// NOTE: Every function calls `join(homedir(), \".keeperhub\", \"wallet.json\")`\n// itself. Do NOT hoist to a module-level `const WALLET_PATH` -- tests\n// override `process.env.HOME` in `beforeEach` and `homedir()` must re-read\n// that on each call. A hoisted constant would freeze the harness's original\n// HOME at import time and every test would write into the real\n// ~/.keeperhub/ directory.\n\nexport async function readWalletConfig(): Promise<WalletConfig> {\n\tconst walletPath = join(homedir(), \".keeperhub\", \"wallet.json\");\n\tlet raw: string;\n\ttry {\n\t\traw = await readFile(walletPath, \"utf-8\");\n\t} catch (err) {\n\t\tif ((err as NodeJS.ErrnoException).code === \"ENOENT\") {\n\t\t\tthrow new WalletConfigMissingError();\n\t\t}\n\t\tthrow err;\n\t}\n\t// The file's PRESENCE means it was created on purpose. Distinguish parse\n\t// failures (malformed JSON, truncated write) and field-shape failures\n\t// (missing required keys) from \"missing entirely\" so callers — including\n\t// the MCP server's auto-provision path — can refuse to silently mint a\n\t// replacement wallet over an existing-but-broken one.\n\tlet parsed: Partial<WalletConfig>;\n\ttry {\n\t\tparsed = JSON.parse(raw) as Partial<WalletConfig>;\n\t} catch (err) {\n\t\tconst reason = err instanceof Error ? err.message : String(err);\n\t\tthrow new WalletConfigCorruptError(walletPath, reason);\n\t}\n\tif (!(parsed.subOrgId && parsed.walletAddress && parsed.hmacSecret)) {\n\t\tthrow new WalletConfigCorruptError(walletPath, \"missing required fields\");\n\t}\n\treturn parsed as WalletConfig;\n}\n\n/**\n * Atomic write: serialise to a sibling tmp file, fsync via the close, then\n * rename(2) into place. Concurrent provisioning races (two MCP sessions\n * spawning at once on a fresh install) collapse to last-rename-wins on the\n * final path rather than torn-write-wins. Combined with the in-process\n * promise cache in mcp-server.ts:ensureWallet this gates duplicate-mint\n * within a single process AND keeps disk consistent across multiple.\n *\n * The tmp filename includes 16 bytes of randomness so two writers don't\n * stomp each other's tmp files mid-write either.\n */\nexport async function writeWalletConfig(config: WalletConfig): Promise<void> {\n\tconst walletPath = join(homedir(), \".keeperhub\", \"wallet.json\");\n\tawait mkdir(dirname(walletPath), { recursive: true, mode: 0o700 });\n\tconst suffix = randomBytes(8).toString(\"hex\");\n\tconst tmpPath = `${walletPath}.${process.pid}.${suffix}.tmp`;\n\tawait writeFile(tmpPath, JSON.stringify(config, null, 2), { mode: 0o600 });\n\t// chmod again on the tmp before rename: writeFile honours the mode on\n\t// creation but a pre-existing tmp (extremely unlikely thanks to the\n\t// randomness) might keep looser perms.\n\tawait chmod(tmpPath, 0o600);\n\tawait rename(tmpPath, walletPath);\n}\n\nexport function getWalletConfigPath(): string {\n\treturn join(homedir(), \".keeperhub\", \"wallet.json\");\n}\n","// Shared types across the package. Phase 34.\nexport type WalletConfig = {\n\t/** Turnkey sub-org ID returned by POST /api/agentic-wallet/provision */\n\tsubOrgId: string;\n\t/** EVM-shared wallet address (same for Base chainId 8453 and Tempo chainId 4217) */\n\twalletAddress: `0x${string}`;\n\t/** 64-char lowercase hex HMAC secret, minted server-side at provision; never logged */\n\thmacSecret: string;\n};\n\nexport type HmacHeaders = {\n\t\"X-KH-Sub-Org\": string;\n\t\"X-KH-Timestamp\": string;\n\t\"X-KH-Signature\": string;\n};\n\nexport type HookDecision = {\n\tdecision: \"allow\" | \"deny\" | \"ask\";\n\treason?: string;\n};\n\nexport class KeeperHubError extends Error {\n\treadonly code: string;\n\n\tconstructor(code: string, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"KeeperHubError\";\n\t\tthis.code = code;\n\t}\n}\n\n/** Protocol preference for a single pay() or fetch() call. \"auto\" preserves\n *  the x402-first default when both challenges are offered. */\nexport type PaymentHint = \"x402\" | \"mpp\" | \"auto\";\n\nexport class WalletConfigMissingError extends Error {\n\tconstructor() {\n\t\tsuper(\n\t\t\t\"Wallet config not found at ~/.keeperhub/wallet.json. Run `npx @keeperhub/wallet add` to provision.\",\n\t\t);\n\t\tthis.name = \"WalletConfigMissingError\";\n\t}\n}\n\n/**\n * Thrown when ~/.keeperhub/wallet.json exists but is unreadable as a wallet\n * config (malformed JSON, truncated write, missing required fields, hand-edit\n * gone wrong). Distinct from WalletConfigMissingError — the file's PRESENCE\n * means the user (or a prior install) intentionally created it, so the MCP\n * server MUST NOT silently auto-provision a replacement and abandon any funds\n * held in the existing wallet. Surface a structured error with the path so\n * the user can repair or delete the file deliberately.\n */\nexport class WalletConfigCorruptError extends Error {\n\treadonly path: string;\n\n\tconstructor(path: string, reason: string) {\n\t\tsuper(\n\t\t\t`Wallet config at ${path} is unreadable: ${reason}. Repair the file by hand or delete it to re-provision a new wallet (this will abandon any funds held in the current wallet).`,\n\t\t);\n\t\tthis.name = \"WalletConfigCorruptError\";\n\t\tthis.path = path;\n\t}\n}\n","// Wallet provisioning: shared between `keeperhub-wallet add` (CLI) and the\n// MCP server's auto-provision-on-first-call path.\n//\n// Why a shared module: the user-facing UX target is \"install the wallet\n// package and start calling paid workflows\" — manual `keeperhub-wallet add`\n// ceremony is an unnecessary speed bump. The MCP server therefore reuses\n// this exact provision flow on the first tool call when ~/.keeperhub/wallet.json\n// is missing. Keeping the call site in one module avoids the obvious\n// drift hazard of two divergent provision implementations.\n//\n// @security The HMAC secret minted by /api/agentic-wallet/provision is\n// returned to the caller AND written to ~/.keeperhub/wallet.json (chmod 0o600\n// via writeWalletConfig). Callers MUST NOT log the returned secret to stdout\n// or stderr. The CLI's `cmdAdd` and the MCP server's auto-provision branch\n// both honour this — every printed/serialised path uses only `subOrgId` and\n// `walletAddress`.\n\nimport { writeWalletConfig } from \"./storage.js\";\nimport type { WalletConfig } from \"./types.js\";\n\nconst TRAILING_SLASH = /\\/$/;\nconst WALLET_ADDRESS_PATTERN = /^0x[a-fA-F0-9]{40}$/;\n\nexport type ProvisionOptions = {\n\t/** Override KEEPERHUB_API_URL. Defaults to env var or app.keeperhub.com. */\n\tbaseUrl?: string;\n\t/** Injectable fetch for tests. */\n\tfetchImpl?: typeof fetch;\n};\n\nexport class ProvisionResponseInvalidError extends Error {\n\treadonly code = \"PROVISION_RESPONSE_INVALID\" as const;\n\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"ProvisionResponseInvalidError\";\n\t}\n}\n\nexport class ProvisionHttpError extends Error {\n\treadonly code = \"PROVISION_HTTP_ERROR\" as const;\n\treadonly status: number;\n\treadonly body: string;\n\n\tconstructor(status: number, body: string) {\n\t\tsuper(`provision failed: HTTP ${status}: ${body}`);\n\t\tthis.name = \"ProvisionHttpError\";\n\t\tthis.status = status;\n\t\tthis.body = body;\n\t}\n}\n\nfunction resolveBaseUrl(override: string | undefined): string {\n\tconst candidate =\n\t\toverride ?? process.env.KEEPERHUB_API_URL ?? \"https://app.keeperhub.com\";\n\treturn candidate.replace(TRAILING_SLASH, \"\");\n}\n\nfunction isNonEmptyString(value: unknown): value is string {\n\treturn typeof value === \"string\" && value.length > 0;\n}\n\nfunction validateProvisionResponse(data: unknown): WalletConfig {\n\tif (typeof data !== \"object\" || data === null) {\n\t\tthrow new ProvisionResponseInvalidError(\n\t\t\t\"provision response is not an object\",\n\t\t);\n\t}\n\tconst { subOrgId, walletAddress, hmacSecret } = data as Record<\n\t\tstring,\n\t\tunknown\n\t>;\n\tif (\n\t\t!(\n\t\t\tisNonEmptyString(subOrgId) &&\n\t\t\tisNonEmptyString(walletAddress) &&\n\t\t\tisNonEmptyString(hmacSecret)\n\t\t)\n\t) {\n\t\tthrow new ProvisionResponseInvalidError(\n\t\t\t\"provision response missing subOrgId, walletAddress, or hmacSecret\",\n\t\t);\n\t}\n\tif (!WALLET_ADDRESS_PATTERN.test(walletAddress)) {\n\t\tthrow new ProvisionResponseInvalidError(\n\t\t\t`provision response walletAddress is not a valid 0x-prefixed 40-hex address: ${walletAddress}`,\n\t\t);\n\t}\n\treturn {\n\t\tsubOrgId,\n\t\twalletAddress: walletAddress as `0x${string}`,\n\t\thmacSecret,\n\t};\n}\n\n/**\n * Mint a new agentic wallet via POST /api/agentic-wallet/provision and\n * persist the result to ~/.keeperhub/wallet.json (chmod 0o600). Returns the\n * provisioned WalletConfig. Throws ProvisionHttpError on non-2xx and\n * ProvisionResponseInvalidError on malformed payloads.\n *\n * Used by:\n *  - `keeperhub-wallet add` (manual provisioning).\n *  - The MCP server's auto-provision-on-first-call path (no manual ceremony).\n */\nexport async function provisionWallet(\n\toptions: ProvisionOptions = {},\n): Promise<WalletConfig> {\n\tconst baseUrl = resolveBaseUrl(options.baseUrl);\n\tconst fetchImpl = options.fetchImpl ?? globalThis.fetch;\n\t// Bound the wedged-upstream failure mode so a hung provision endpoint\n\t// can't freeze the MCP tool call indefinitely. AbortError surfaces as\n\t// UPSTREAM_TIMEOUT in the MCP envelope; CLI users see the raw cause.\n\tconst response = await fetchImpl(`${baseUrl}/api/agentic-wallet/provision`, {\n\t\tmethod: \"POST\",\n\t\theaders: { \"content-type\": \"application/json\" },\n\t\tbody: \"{}\",\n\t\tsignal: AbortSignal.timeout(30_000),\n\t});\n\tif (!response.ok) {\n\t\tconst text = await response.text();\n\t\tthrow new ProvisionHttpError(response.status, text);\n\t}\n\tconst raw = (await response.json()) as unknown;\n\tconst data = validateProvisionResponse(raw);\n\tawait writeWalletConfig(data);\n\treturn data;\n}\n","// Idempotent skill installer for @keeperhub/wallet.\n//\n// Two public entry points:\n//   - installSkill(options?) -- writes keeperhub-wallet.skill.md into every\n//     detected agent's skills directory and, for Claude Code, registers a\n//     PreToolUse hook pointing at `keeperhub-wallet-hook` in\n//     ~/.claude/settings.json. For non-claude agents, emits a stderr notice.\n//   - registerClaudeCodeHook(settingsPath, options?) -- pure settings.json\n//     patcher used internally; exported so tests can drive it directly.\n//\n// Hook command resolution: the README's recommended install path is\n// `npx -p @keeperhub/wallet keeperhub-wallet skill install`, which does\n// not put the bin on the system PATH. If we wrote a bare\n// `keeperhub-wallet-hook` command in that case, the hook would fire\n// `command not found` on every tool call. So at install time we probe\n// PATH; if the bin resolves we keep the bare command (lowest startup\n// latency), otherwise we fall back to an `npx` invocation that resolves\n// regardless of where future shells run.\n//\n// Idempotency rule: re-running the installer MUST NOT create a duplicate\n// hook entry. We filter any existing array element whose serialised form\n// contains `keeperhub-wallet-hook` before appending a single fresh record.\n// The marker substring is present in BOTH the bare and npx forms, so the\n// de-dup survives a global-install → npx-install transition (and back).\n//\n// Preservation rule: all top-level keys in settings.json other than\n// hooks.PreToolUse MUST be byte-preserved. We only ever touch\n// hooks.PreToolUse; any foreign hooks.PostToolUse entries survive verbatim.\n\nimport { randomBytes } from \"node:crypto\";\nimport {\n\tchmod,\n\tcopyFile,\n\tmkdir,\n\treadFile,\n\trename,\n\tunlink,\n\twriteFile,\n} from \"node:fs/promises\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { type AgentTarget, detectAgents } from \"./agent-detect.js\";\nimport {\n\ttype RegisterMcpServerOptions,\n\tregisterMcpServer,\n\tresolveMcpCommand,\n} from \"./mcp-register.js\";\nimport { resolveBinCommand } from \"./runtime-detect.js\";\n\nconst HOOK_BIN = \"keeperhub-wallet-hook\";\n\n// Match rule for de-dup: any existing PreToolUse entry whose `command`\n// string contains this substring is considered \"ours\" and is removed\n// before append. The marker is present in BOTH the bare and pinned-npx\n// forms, so the de-dup survives a global-install <-> npx-install\n// transition (and across version bumps).\n//\n// Why match on the `command` field rather than JSON.stringify(entry):\n// the wider marker would silently delete an unrelated hook whose args\n// or matcher happen to mention the bin name (e.g. a logger). Scoping\n// to `command` is narrower and equally idempotent for our writes since\n// we always write the marker into `command`.\nconst KEEPERHUB_HOOK_MARKER = HOOK_BIN;\n\ntype PreToolUseLikeEntry = {\n\thooks?: Array<{ command?: unknown }>;\n};\n\n/**\n * Drop only the `hooks[]` items that reference the keeperhub bin, leaving\n * sibling commands inside the same `PreToolUse` element intact. Returns\n * the (possibly modified) entry, or null when every `hooks[]` item was\n * keeperhub-related and the whole element should be removed.\n *\n * Why per-item: a user may merge our hook into a single `PreToolUse`\n * element alongside their own commands, e.g.:\n *\n *   { matcher: \"*\", hooks: [\n *       { type: \"command\", command: \"/usr/local/bin/audit-logger\" },\n *       { type: \"command\", command: \"keeperhub-wallet-hook\" } ] }\n *\n * Dropping the whole element on re-install would silently delete the\n * audit-logger sibling. Dropping only matching items preserves it.\n *\n * Non-object entries and entries without a `hooks[]` array are returned\n * unchanged — we never inspect or mutate shapes we don't recognise.\n */\nfunction filterKeeperhubHooksFromEntry(entry: unknown): unknown {\n\tif (typeof entry !== \"object\" || entry === null) {\n\t\treturn entry;\n\t}\n\tconst candidate = entry as PreToolUseLikeEntry;\n\tif (!Array.isArray(candidate.hooks)) {\n\t\treturn entry;\n\t}\n\tconst survivors = candidate.hooks.filter((h) => {\n\t\tconst cmd = h?.command;\n\t\treturn !(typeof cmd === \"string\" && cmd.includes(KEEPERHUB_HOOK_MARKER));\n\t});\n\tif (survivors.length === candidate.hooks.length) {\n\t\t// No keeperhub hooks present in this entry — return original byte-for-byte.\n\t\treturn entry;\n\t}\n\tif (survivors.length === 0) {\n\t\t// Every hook in this element was ours; drop the whole element so we\n\t\t// don't leave a `{matcher, hooks: []}` shell behind.\n\t\treturn null;\n\t}\n\treturn { ...candidate, hooks: survivors };\n}\n\n/**\n * Pick the hook command to write into settings.json.\n *\n * Returns the bare bin name if it resolves to a STABLE install on PATH\n * (global install, brew, distro pkg, dev-time `npm link`), otherwise a\n * version-pinned `npx` invocation that pulls the installer's own version\n * of `@keeperhub/wallet` on demand. Implementation lives in\n * runtime-detect.ts so the hook + MCP installers share a single decision.\n *\n * Override-able via the env var `KEEPERHUB_WALLET_HOOK_COMMAND` for test\n * fixtures and unusual deployments (env input is trusted — it is written\n * verbatim into settings.json and executed by the user's shell).\n */\nexport function resolveHookCommand(): string {\n\tconst envOverride = process.env.KEEPERHUB_WALLET_HOOK_COMMAND;\n\tif (envOverride && envOverride.length > 0) {\n\t\treturn envOverride;\n\t}\n\treturn resolveBinCommand(HOOK_BIN).commandString;\n}\n\nexport type InstallResult = {\n\tskillWrites: Array<{\n\t\tagent: string;\n\t\tpath: string;\n\t\tstatus: \"written\" | \"skipped\";\n\t}>;\n\thookRegistrations: Array<{\n\t\tagent: string;\n\t\tstatus: \"registered\" | \"notice\" | \"skipped\" | \"failed\";\n\t\tmessage?: string;\n\t}>;\n\tmcpRegistrations: Array<{\n\t\tagent: string;\n\t\tstatus: \"registered\" | \"notice\" | \"skipped\" | \"failed\";\n\t\tpath?: string;\n\t\tmessage?: string;\n\t}>;\n};\n\nexport type InstallOptions = {\n\thomeOverride?: string;\n\tskillSourcePath?: string;\n\tonNotice?: (msg: string) => void;\n\t/**\n\t * Hook command to write into settings.json (and reference in stderr\n\t * notices for non-Claude agents). Defaults to {@link resolveHookCommand}.\n\t * Override for tests, monorepo setups, or unusual deployments.\n\t */\n\thookCommand?: string;\n\t/**\n\t * MCP command + args to register with each detected agent. Defaults to\n\t * {@link resolveMcpCommand}. Tests pass an explicit value to pin\n\t * assertions regardless of host PATH.\n\t */\n\tmcpCommand?: RegisterMcpServerOptions[\"command\"];\n};\n\nexport type RegisterClaudeCodeHookOptions = {\n\t/**\n\t * Hook command to write. Defaults to {@link resolveHookCommand}. Tests\n\t * pass a deterministic value to keep assertions stable across host\n\t * environments (CI may or may not have the bin on PATH).\n\t */\n\thookCommand?: string;\n};\n\ntype ClaudeHookEntry = {\n\tmatcher: string;\n\thooks: Array<{ type: string; command: string }>;\n};\n\ntype ClaudeSettings = {\n\thooks?: {\n\t\tPreToolUse?: unknown[];\n\t\t[k: string]: unknown;\n\t};\n\t[k: string]: unknown;\n};\n\nfunction buildKeeperhubEntry(command: string): ClaudeHookEntry {\n\treturn {\n\t\tmatcher: \"*\",\n\t\thooks: [{ type: \"command\", command }],\n\t};\n}\n\nfunction resolveDefaultSkillSource(): string {\n\t// Resolve the module's own directory in a way that works in both ESM\n\t// (import.meta.url) and CJS (__dirname shim emitted by tsup). At runtime\n\t// the module lives inside dist/, so `../skill/` points at the sibling\n\t// skill/ directory shipped via pkg.files. During vitest tests the module\n\t// executes from src/, and `../skill/` resolves to packages/wallet/skill/.\n\tconst here = dirname(fileURLToPath(import.meta.url));\n\treturn join(here, \"..\", \"skill\", \"keeperhub-wallet.skill.md\");\n}\n\nfunction defaultNotice(msg: string): void {\n\tprocess.stderr.write(`${msg}\\n`);\n}\n\nexport async function registerClaudeCodeHook(\n\tsettingsPath: string,\n\toptions: RegisterClaudeCodeHookOptions = {},\n): Promise<void> {\n\tconst command = options.hookCommand ?? resolveHookCommand();\n\n\tlet raw: string | null = null;\n\ttry {\n\t\traw = await readFile(settingsPath, \"utf-8\");\n\t} catch (err) {\n\t\tif ((err as NodeJS.ErrnoException).code !== \"ENOENT\") {\n\t\t\tthrow err;\n\t\t}\n\t}\n\n\tlet config: ClaudeSettings = {};\n\tif (raw !== null) {\n\t\ttry {\n\t\t\tconfig = JSON.parse(raw) as ClaudeSettings;\n\t\t} catch {\n\t\t\tthrow new Error(\n\t\t\t\t`settings.json at ${settingsPath} is not valid JSON; aborting hook registration`,\n\t\t\t);\n\t\t}\n\t}\n\n\tconst hooks: Record<string, unknown> =\n\t\ttypeof config.hooks === \"object\" && config.hooks !== null\n\t\t\t? (config.hooks as Record<string, unknown>)\n\t\t\t: {};\n\n\tconst existingPreToolUse = Array.isArray(hooks.PreToolUse)\n\t\t? (hooks.PreToolUse as unknown[])\n\t\t: [];\n\n\t// De-dup: drop only the hooks[] items whose `command` field references\n\t// the keeperhub-wallet-hook bin, leaving sibling commands within the\n\t// same PreToolUse element untouched. Scoped to the `command` field (not\n\t// the full serialised entry) so an unrelated hook that mentions the bin\n\t// name in its matcher or args isn't silently deleted. Covers both the\n\t// bare-bin and version-pinned npx forms, and older versions of this\n\t// installer.\n\tconst filtered: unknown[] = [];\n\tfor (const entry of existingPreToolUse) {\n\t\tconst survivor = filterKeeperhubHooksFromEntry(entry);\n\t\tif (survivor !== null) {\n\t\t\tfiltered.push(survivor);\n\t\t}\n\t}\n\tfiltered.push(buildKeeperhubEntry(command));\n\n\thooks.PreToolUse = filtered;\n\tconfig.hooks = hooks as ClaudeSettings[\"hooks\"];\n\n\tawait mkdir(dirname(settingsPath), { recursive: true, mode: 0o700 });\n\tconst payload = `${JSON.stringify(config, null, 2)}\\n`;\n\t// Atomic write: tmp + rename so a crash mid-write cannot truncate the\n\t// user's settings.json (which on Claude Code typically holds many\n\t// unrelated PreToolUse/PostToolUse entries plus mcpServers, theme, etc.).\n\t// rename(2) is the atomic step on every POSIX filesystem and on Windows\n\t// NTFS — the live file is either the old contents or the full new\n\t// contents, never partial. chmod the tmp before rename so the live\n\t// permissions are correct from the first readable byte.\n\tconst suffix = randomBytes(8).toString(\"hex\");\n\tconst tmpPath = `${settingsPath}.${process.pid}.${suffix}.tmp`;\n\ttry {\n\t\tawait writeFile(tmpPath, payload, { mode: 0o600 });\n\t\tawait chmod(tmpPath, 0o600);\n\t\tawait rename(tmpPath, settingsPath);\n\t} catch (err) {\n\t\tawait unlink(tmpPath).catch(() => {\n\t\t\t// best-effort cleanup; ignore ENOENT and other failures\n\t\t});\n\t\tthrow err;\n\t}\n}\n\nasync function writeSkillToAgent(\n\tagent: AgentTarget,\n\tskillSource: string,\n): Promise<{ agent: string; path: string; status: \"written\" | \"skipped\" }> {\n\tawait mkdir(agent.skillsDir, { recursive: true, mode: 0o755 });\n\tconst target = join(agent.skillsDir, \"keeperhub-wallet.skill.md\");\n\tawait copyFile(skillSource, target);\n\tawait chmod(target, 0o644);\n\treturn { agent: agent.agent, path: target, status: \"written\" };\n}\n\nfunction buildHookNoticeMessage(agent: AgentTarget, command: string): string {\n\treturn `${agent.agent} does not support auto-registered PreToolUse hooks; run \\`${command}\\` on every tool use via ${agent.agent}'s settings file at ${agent.settingsFile}`;\n}\n\nfunction buildMcpNoticeMessage(\n\tagent: AgentTarget,\n\tcommand: { command: string; args: string[] },\n): string {\n\tconst cmd = [command.command, ...command.args].join(\" \");\n\treturn `${agent.agent} does not support auto-registered MCP servers; add an entry named \\`keeperhub-wallet\\` running \\`${cmd}\\` to your MCP config manually`;\n}\n\n/**\n * Install the keeperhub-wallet skill plus the PreToolUse safety hook plus\n * the keeperhub-wallet MCP server into every detected agent.\n *\n * Per-agent flow:\n *  1. Copy `keeperhub-wallet.skill.md` into the agent's `skills/` dir.\n *  2. If the agent supports PreToolUse hooks (claude-code), register the\n *     safety hook in `settings.json`. Otherwise print a stderr notice.\n *  3. If the agent supports MCP server registration (claude-code, cursor,\n *     windsurf, opencode), register the keeperhub-wallet MCP server in the\n *     agent's MCP config file (claude.json / mcp.json / opencode.json).\n *     Otherwise print a stderr notice.\n *\n * MCP idempotency is automatic: each agent's MCP config keys servers by name,\n * so a re-run overwrites the existing `keeperhub-wallet` entry rather than\n * appending a duplicate. All other keys are byte-preserved.\n */\nexport async function installSkill(\n\toptions: InstallOptions = {},\n): Promise<InstallResult> {\n\tconst agents = detectAgents(options.homeOverride);\n\tconst skillSource = options.skillSourcePath ?? resolveDefaultSkillSource();\n\tconst onNotice = options.onNotice ?? defaultNotice;\n\t// Resolve once per install run so the bare-vs-npx decision stays\n\t// consistent across every detected agent. Tests pass an explicit value to\n\t// pin the assertion shape regardless of host PATH.\n\tconst hookCommand = options.hookCommand ?? resolveHookCommand();\n\tconst mcpCommand = options.mcpCommand ?? resolveMcpCommand();\n\n\tconst skillWrites: InstallResult[\"skillWrites\"] = [];\n\tconst hookRegistrations: InstallResult[\"hookRegistrations\"] = [];\n\tconst mcpRegistrations: InstallResult[\"mcpRegistrations\"] = [];\n\n\t// Per-agent error isolation. A single agent's settings file being\n\t// permission-locked or otherwise unwritable used to abort the whole\n\t// install loop with a raw stack trace, leaving the user in a partial\n\t// state (skill copied, hook maybe registered, MCP maybe not) and\n\t// without a returned `InstallResult` to inspect. Catch at the per-step\n\t// boundary so the loop completes for every agent and the caller gets\n\t// a structured `failed` entry with the error message.\n\tfor (const agent of agents) {\n\t\ttry {\n\t\t\tconst write = await writeSkillToAgent(agent, skillSource);\n\t\t\tskillWrites.push(write);\n\t\t} catch (err) {\n\t\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\t\tskillWrites.push({\n\t\t\t\tagent: agent.agent,\n\t\t\t\tpath: \"\",\n\t\t\t\tstatus: \"skipped\",\n\t\t\t});\n\t\t\tonNotice(`${agent.agent}: skill copy failed (${message})`);\n\t\t\t// If we couldn't even write the skill, the rest of the agent's\n\t\t\t// install is meaningless. Skip to the next agent.\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (agent.hookSupport === \"claude-code\") {\n\t\t\ttry {\n\t\t\t\tawait registerClaudeCodeHook(agent.settingsFile, { hookCommand });\n\t\t\t\thookRegistrations.push({\n\t\t\t\t\tagent: agent.agent,\n\t\t\t\t\tstatus: \"registered\",\n\t\t\t\t});\n\t\t\t} catch (err) {\n\t\t\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\t\t\thookRegistrations.push({\n\t\t\t\t\tagent: agent.agent,\n\t\t\t\t\tstatus: \"failed\",\n\t\t\t\t\tmessage,\n\t\t\t\t});\n\t\t\t\tonNotice(`${agent.agent}: hook registration failed (${message})`);\n\t\t\t}\n\t\t} else {\n\t\t\tconst noticeMessage = buildHookNoticeMessage(agent, hookCommand);\n\t\t\thookRegistrations.push({\n\t\t\t\tagent: agent.agent,\n\t\t\t\tstatus: \"notice\",\n\t\t\t\tmessage: noticeMessage,\n\t\t\t});\n\t\t\tonNotice(noticeMessage);\n\t\t}\n\n\t\tif (agent.mcpSupport === \"notice\") {\n\t\t\tconst noticeMessage = buildMcpNoticeMessage(agent, mcpCommand);\n\t\t\tmcpRegistrations.push({\n\t\t\t\tagent: agent.agent,\n\t\t\t\tstatus: \"notice\",\n\t\t\t\tmessage: noticeMessage,\n\t\t\t});\n\t\t\tonNotice(noticeMessage);\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\tconst mcpResult = await registerMcpServer(agent, {\n\t\t\t\thomeOverride: options.homeOverride,\n\t\t\t\tcommand: mcpCommand,\n\t\t\t});\n\t\t\tmcpRegistrations.push({\n\t\t\t\tagent: agent.agent,\n\t\t\t\tstatus: \"registered\",\n\t\t\t\tpath: mcpResult.path,\n\t\t\t});\n\t\t} catch (err) {\n\t\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\t\tmcpRegistrations.push({\n\t\t\t\tagent: agent.agent,\n\t\t\t\tstatus: \"failed\",\n\t\t\t\tmessage,\n\t\t\t});\n\t\t\tonNotice(`${agent.agent}: MCP registration failed (${message})`);\n\t\t}\n\t}\n\n\treturn { skillWrites, hookRegistrations, mcpRegistrations };\n}\n","// Cross-agent skill/settings directory discovery.\n//\n// Probes canonical paths under $HOME and returns one AgentTarget record per\n// agent whose parent directory exists. The `skills/` leaf may be absent --\n// installSkill() creates it.\n//\n// NOTE: `homedir()` is called per-invocation (via `homeOverride ?? homedir()`)\n// and NEVER hoisted to a module-level constant. Tests override\n// `process.env.HOME` in `beforeEach`; hoisting would freeze the harness's\n// original HOME at import time and detection would run against the real $HOME.\n\nimport { existsSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\n\nexport type AgentTarget = {\n\tagent: \"claude-code\" | \"cursor\" | \"cline\" | \"windsurf\" | \"opencode\";\n\tskillsDir: string;\n\tsettingsFile: string;\n\thookSupport: \"claude-code\" | \"notice\";\n\t/**\n\t * Path-segments under $HOME where the agent stores its MCP server registry.\n\t * `undefined` for agents without a known MCP config location (cline today\n\t * stores per-VS-Code-variant globalStorage state that is too fragile to\n\t * auto-detect, so we ship \"notice\" instead).\n\t */\n\tmcpConfigRel?: string[];\n\t/**\n\t * Which MCP config shape to write. `claude-code`, `cursor`, and `windsurf`\n\t * all use the standard `{ mcpServers: { name: { command, args, env } } }`\n\t * shape. `opencode` uses a divergent `{ mcp: { name: { type:\"local\",\n\t * command:[...], enabled, environment } } }` shape. `notice` agents get\n\t * a copy-paste hint instead of an auto-registered entry.\n\t */\n\tmcpSupport: \"claude-code\" | \"cursor\" | \"windsurf\" | \"opencode\" | \"notice\";\n};\n\ntype AgentSpec = {\n\tagent: AgentTarget[\"agent\"];\n\tskillsRel: string[];\n\tsettingsRel: string[];\n\thookSupport: AgentTarget[\"hookSupport\"];\n\tmcpConfigRel?: string[];\n\tmcpSupport: AgentTarget[\"mcpSupport\"];\n\t/**\n\t * Optional extra path segments — when present, the agent is detected only\n\t * if AT LEAST ONE of `[skillsRel.dirname, ...extraDetect]` exists under\n\t * $HOME. Used by windsurf, which keeps state under both `.windsurf/` and\n\t * the legacy `.codeium/windsurf/`.\n\t */\n\textraDetect?: Array<string[]>;\n};\n\n// Deterministic order: claude-code first (only agent with hook support),\n// then cursor, cline, windsurf, opencode.\nconst AGENT_SPECS: readonly AgentSpec[] = [\n\t{\n\t\tagent: \"claude-code\",\n\t\tskillsRel: [\".claude\", \"skills\"],\n\t\tsettingsRel: [\".claude\", \"settings.json\"],\n\t\thookSupport: \"claude-code\",\n\t\t// ~/.claude.json is at HOME root (not under .claude/) and is large\n\t\t// (100+KB on real installs). registerMcpServer reads/parses/rewrites it\n\t\t// while preserving every other top-level key byte-for-byte.\n\t\tmcpConfigRel: [\".claude.json\"],\n\t\tmcpSupport: \"claude-code\",\n\t},\n\t{\n\t\tagent: \"cursor\",\n\t\tskillsRel: [\".cursor\", \"skills\"],\n\t\tsettingsRel: [\".cursor\", \"settings.json\"],\n\t\thookSupport: \"notice\",\n\t\tmcpConfigRel: [\".cursor\", \"mcp.json\"],\n\t\tmcpSupport: \"cursor\",\n\t},\n\t{\n\t\tagent: \"cline\",\n\t\tskillsRel: [\".cline\", \"skills\"],\n\t\tsettingsRel: [\".cline\", \"settings.json\"],\n\t\thookSupport: \"notice\",\n\t\t// Cline keeps MCP state in a per-VS-Code-variant globalStorage path\n\t\t// (e.g. ~/Library/Application Support/Code/User/globalStorage/\n\t\t// saoudrizwan.claude-dev/settings/cline_mcp_settings.json) that is too\n\t\t// fragile to auto-detect. Ship \"notice\" with a copy-paste entry shape\n\t\t// instead of guessing the variant.\n\t\tmcpSupport: \"notice\",\n\t},\n\t{\n\t\tagent: \"windsurf\",\n\t\tskillsRel: [\".windsurf\", \"skills\"],\n\t\tsettingsRel: [\".windsurf\", \"settings.json\"],\n\t\thookSupport: \"notice\",\n\t\tmcpConfigRel: [\".codeium\", \"windsurf\", \"mcp_config.json\"],\n\t\tmcpSupport: \"windsurf\",\n\t\t// Windsurf historically ships under both `.windsurf/` and the legacy\n\t\t// `.codeium/windsurf/`; detect either.\n\t\textraDetect: [[\".codeium\", \"windsurf\"]],\n\t},\n\t{\n\t\tagent: \"opencode\",\n\t\tskillsRel: [\".config\", \"opencode\", \"skills\"],\n\t\tsettingsRel: [\".config\", \"opencode\", \"settings.json\"],\n\t\thookSupport: \"notice\",\n\t\tmcpConfigRel: [\".config\", \"opencode\", \"opencode.json\"],\n\t\tmcpSupport: \"opencode\",\n\t},\n];\n\nexport function detectAgents(homeOverride?: string): AgentTarget[] {\n\tconst home = homeOverride ?? homedir();\n\tconst results: AgentTarget[] = [];\n\tfor (const spec of AGENT_SPECS) {\n\t\tconst skillsDir = join(home, ...spec.skillsRel);\n\t\tconst settingsFile = join(home, ...spec.settingsRel);\n\t\t// \"Detected\" iff the parent of skills/ exists (e.g. ~/.claude/) OR any\n\t\t// of the spec's extra-detect paths exist (windsurf's legacy location).\n\t\tlet detected = existsSync(dirname(skillsDir));\n\t\tif (!detected && spec.extraDetect) {\n\t\t\tfor (const seg of spec.extraDetect) {\n\t\t\t\tif (existsSync(join(home, ...seg))) {\n\t\t\t\t\tdetected = true;\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\tif (!detected) {\n\t\t\tcontinue;\n\t\t}\n\t\tresults.push({\n\t\t\tagent: spec.agent,\n\t\t\tskillsDir,\n\t\t\tsettingsFile,\n\t\t\thookSupport: spec.hookSupport,\n\t\t\tmcpConfigRel: spec.mcpConfigRel,\n\t\t\tmcpSupport: spec.mcpSupport,\n\t\t});\n\t}\n\treturn results;\n}\n","// MCP server registration: writes a `keeperhub-wallet` entry into each\n// detected agent's MCP config file. Mirrors the patterns in skill-install.ts\n// (registerClaudeCodeHook), with two important divergences:\n//\n//   1. Idempotency is automatic. MCP entries are NAME-keyed objects\n//      (`{ mcpServers: { \"keeperhub-wallet\": {...} } }`), not positional\n//      arrays like PreToolUse. Re-running overwrites the existing entry; we\n//      never need a de-dup matcher.\n//\n//   2. The opencode shape is divergent: instead of\n//      `{command, args, env}` it stores\n//      `{type:\"local\", command:[command,...args], enabled:true, environment}`\n//      under a top-level `mcp` key. We branch on `target.mcpSupport` and\n//      write the appropriate shape.\n//\n// Preservation rule: every other top-level key in the config file MUST be\n// byte-preserved. We read the file, parse, mutate only our slot, and write\n// back. Same chmod 0o600 semantics as registerClaudeCodeHook.\n\nimport { randomBytes } from \"node:crypto\";\nimport {\n\tchmod,\n\tmkdir,\n\treadFile,\n\trename,\n\tunlink,\n\twriteFile,\n} from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport type { AgentTarget } from \"./agent-detect.js\";\nimport { resolveBinCommand } from \"./runtime-detect.js\";\n\nconst MCP_BIN = \"keeperhub-wallet-mcp\";\n\n/** The literal name our MCP server registers under. Stable across all agents. */\nexport const MCP_SERVER_NAME = \"keeperhub-wallet\";\n\nexport type McpCommand = {\n\tcommand: string;\n\targs: string[];\n\t/** Optional environment overrides. Currently unused but reserved for future flags. */\n\tenv?: Record<string, string>;\n};\n\n/**\n * Resolve the MCP launch command. Returns the bare bin if it lives at a\n * stable PATH location, otherwise a version-pinned npx fallback. Identical\n * decision logic to {@link resolveHookCommand} — both flows go through\n * runtime-detect.ts.\n *\n * Override-able via `KEEPERHUB_WALLET_MCP_COMMAND` (env-var input is trusted\n * — it is written verbatim into the MCP config and executed by the agent).\n */\nexport function resolveMcpCommand(): McpCommand {\n\tconst envOverride = process.env.KEEPERHUB_WALLET_MCP_COMMAND;\n\tif (envOverride && envOverride.length > 0) {\n\t\t// Env override is a single string; split on whitespace into command + args.\n\t\tconst parts = envOverride.trim().split(/\\s+/);\n\t\tconst head = parts[0] ?? envOverride;\n\t\treturn { command: head, args: parts.slice(1) };\n\t}\n\tconst resolved = resolveBinCommand(MCP_BIN);\n\treturn { command: resolved.command, args: resolved.args };\n}\n\nexport type RegisterMcpServerOptions = {\n\t/** Override $HOME (tests). */\n\thomeOverride?: string;\n\t/** Override the launch command (tests, monorepo setups). */\n\tcommand?: McpCommand;\n};\n\nexport type RegisterMcpServerResult = {\n\t/** Absolute path of the MCP config file that was written. */\n\tpath: string;\n\t/** Server name written into the config. */\n\tname: typeof MCP_SERVER_NAME;\n};\n\ntype StandardMcpEntry = {\n\tcommand: string;\n\targs: string[];\n\tenv?: Record<string, string>;\n};\n\ntype StandardMcpConfig = {\n\tmcpServers?: Record<string, unknown>;\n\t[k: string]: unknown;\n};\n\ntype OpencodeMcpEntry = {\n\ttype: \"local\";\n\tcommand: string[];\n\tenabled: true;\n\tenvironment: Record<string, string>;\n};\n\ntype OpencodeMcpConfig = {\n\tmcp?: Record<string, unknown>;\n\t[k: string]: unknown;\n};\n\nfunction buildStandardEntry(cmd: McpCommand): StandardMcpEntry {\n\tconst entry: StandardMcpEntry = {\n\t\tcommand: cmd.command,\n\t\targs: cmd.args,\n\t};\n\tif (cmd.env && Object.keys(cmd.env).length > 0) {\n\t\tentry.env = cmd.env;\n\t}\n\treturn entry;\n}\n\nfunction buildOpencodeEntry(cmd: McpCommand): OpencodeMcpEntry {\n\treturn {\n\t\ttype: \"local\",\n\t\tcommand: [cmd.command, ...cmd.args],\n\t\tenabled: true,\n\t\tenvironment: cmd.env ?? {},\n\t};\n}\n\nasync function readJsonOrEmpty<T>(path: string): Promise<T> {\n\tlet raw: string | null = null;\n\ttry {\n\t\traw = await readFile(path, \"utf-8\");\n\t} catch (err) {\n\t\tif ((err as NodeJS.ErrnoException).code !== \"ENOENT\") {\n\t\t\tthrow err;\n\t\t}\n\t}\n\tif (raw === null) {\n\t\treturn {} as T;\n\t}\n\ttry {\n\t\treturn JSON.parse(raw) as T;\n\t} catch {\n\t\tthrow new Error(\n\t\t\t`MCP config at ${path} is not valid JSON; aborting MCP registration`,\n\t\t);\n\t}\n}\n\n/**\n * Truly-atomic write to a config file. Writes to a randomly-suffixed sibling\n * tmp file then `rename(2)`s into place — the rename is the atomic step on\n * every POSIX filesystem and on Windows NTFS, so a crash, signal, ENOSPC,\n * or EIO mid-write CANNOT leave the live config truncated. Critical for\n * `~/.claude.json` (100KB+, holds the user's MCP allowlist + project state)\n * and for any settings.json where a torn write would brick Claude Code.\n *\n * Best-effort cleanup of the tmp file on rename failure so we don't\n * accumulate `*.tmp` siblings. The chmod happens on the tmp before rename\n * so the live file's permissions are correct from the first byte readable.\n */\nasync function writeJsonAtomic(path: string, payload: string): Promise<void> {\n\tawait mkdir(dirname(path), { recursive: true, mode: 0o700 });\n\tconst suffix = randomBytes(8).toString(\"hex\");\n\tconst tmpPath = `${path}.${process.pid}.${suffix}.tmp`;\n\ttry {\n\t\tawait writeFile(tmpPath, payload, { mode: 0o600 });\n\t\tawait chmod(tmpPath, 0o600);\n\t\tawait rename(tmpPath, path);\n\t} catch (err) {\n\t\tawait unlink(tmpPath).catch(() => {\n\t\t\t// best-effort cleanup; ignore ENOENT and other failures\n\t\t});\n\t\tthrow err;\n\t}\n}\n\nasync function writeStandardMcp(\n\tpath: string,\n\tentry: StandardMcpEntry,\n): Promise<void> {\n\tconst config = await readJsonOrEmpty<StandardMcpConfig>(path);\n\tconst servers: Record<string, unknown> =\n\t\ttypeof config.mcpServers === \"object\" && config.mcpServers !== null\n\t\t\t? (config.mcpServers as Record<string, unknown>)\n\t\t\t: {};\n\tservers[MCP_SERVER_NAME] = entry;\n\tconfig.mcpServers = servers;\n\tconst payload = `${JSON.stringify(config, null, 2)}\\n`;\n\tawait writeJsonAtomic(path, payload);\n}\n\nasync function writeOpencodeMcp(\n\tpath: string,\n\tentry: OpencodeMcpEntry,\n): Promise<void> {\n\tconst config = await readJsonOrEmpty<OpencodeMcpConfig>(path);\n\tconst servers: Record<string, unknown> =\n\t\ttypeof config.mcp === \"object\" && config.mcp !== null\n\t\t\t? (config.mcp as Record<string, unknown>)\n\t\t\t: {};\n\tservers[MCP_SERVER_NAME] = entry;\n\tconfig.mcp = servers;\n\tconst payload = `${JSON.stringify(config, null, 2)}\\n`;\n\tawait writeJsonAtomic(path, payload);\n}\n\n/**\n * Register the keeperhub-wallet MCP server with one detected agent.\n *\n * Behavior by `target.mcpSupport`:\n *  - `claude-code` / `cursor` / `windsurf` — write the standard\n *    `{ mcpServers: { \"keeperhub-wallet\": {command, args, env?} } }` shape\n *    into the agent's MCP config file. All other top-level keys preserved.\n *  - `opencode` — write the divergent\n *    `{ mcp: { \"keeperhub-wallet\": {type:\"local\", command:[...], enabled,\n *    environment} } }` shape.\n *  - `notice` — throws. installSkill handles the notice path before calling\n *    this function.\n *\n * Idempotent by construction: the `keeperhub-wallet` slot is name-keyed, so\n * re-running overwrites rather than duplicates.\n */\nexport async function registerMcpServer(\n\ttarget: AgentTarget,\n\toptions: RegisterMcpServerOptions = {},\n): Promise<RegisterMcpServerResult> {\n\tif (target.mcpSupport === \"notice\") {\n\t\tthrow new Error(\n\t\t\t`agent ${target.agent} does not support auto-registered MCP servers; surface a notice instead`,\n\t\t);\n\t}\n\tif (!target.mcpConfigRel) {\n\t\tthrow new Error(\n\t\t\t`agent ${target.agent} has mcpSupport=${target.mcpSupport} but no mcpConfigRel path`,\n\t\t);\n\t}\n\tconst home = options.homeOverride ?? homedir();\n\tconst path = join(home, ...target.mcpConfigRel);\n\tconst cmd = options.command ?? resolveMcpCommand();\n\n\tif (target.mcpSupport === \"opencode\") {\n\t\tawait writeOpencodeMcp(path, buildOpencodeEntry(cmd));\n\t} else {\n\t\tawait writeStandardMcp(path, buildStandardEntry(cmd));\n\t}\n\n\treturn { path, name: MCP_SERVER_NAME };\n}\n","// Shared runtime / environment detection used by skill-install (hook\n// command resolution) and mcp-register (MCP command resolution).\n//\n// Why split out: both flows need to decide whether the package's bin lives\n// at a stable PATH location (global install, brew, distro pkg, npm link) or\n// inside a transient package-runner cache (npx _npx, pnpm dlx, yarn dlx,\n// bun x). The bare-bin-vs-npx decision is identical between hook and MCP\n// registrations — keep one source of truth so hook and MCP cannot drift.\n\nimport { execFileSync } from \"node:child_process\";\nimport { readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nexport const PACKAGE_NAME = \"@keeperhub/wallet\";\n\n/**\n * Read this package's own version from package.json. Both the hook and\n * MCP installers pin npx invocations to the installer's version so that\n * upgrades are explicit (re-run skill install) and the supply-chain blast\n * radius is bounded to \"code that was already trusted enough to install\".\n *\n * Falls back to \"latest\" only when package.json cannot be located, which\n * should never happen in published builds (dist/ sits next to package.json\n * via pkg.files).\n */\nexport function readPackageVersion(): string {\n\ttry {\n\t\tconst here = dirname(fileURLToPath(import.meta.url));\n\t\tconst pkgPath = join(here, \"..\", \"package.json\");\n\t\tconst raw = readFileSync(pkgPath, \"utf-8\");\n\t\tconst parsed = JSON.parse(raw) as { version?: string };\n\t\tif (typeof parsed.version === \"string\" && parsed.version.length > 0) {\n\t\t\treturn parsed.version;\n\t\t}\n\t} catch {\n\t\t// Fall through.\n\t}\n\treturn \"latest\";\n}\n\n/**\n * Detect whether the current process is being driven by `npx`. npm/npx set\n * `npm_execpath` to the path of the CLI binary that spawned the process; for\n * `npx` invocations that path ends in `npx-cli.js` (or, on Windows, an `npx`\n * shim in node_modules/.bin).\n *\n * Why this matters: when the user runs the install path\n * (`npx -p @keeperhub/wallet keeperhub-wallet skill install`), npx prepends\n * its transient cache dir to PATH for the lifetime of the installer.\n * `command -v <bin>` therefore succeeds inside the installer, but the cache\n * dir disappears from PATH the moment npx exits — and any later spawn (hook\n * fire / MCP launch) would crash with `command not found`.\n */\nexport function isNpxExecution(): boolean {\n\tconst execPath = process.env.npm_execpath;\n\tif (typeof execPath !== \"string\" || execPath.length === 0) {\n\t\treturn false;\n\t}\n\tif (/(?:^|[\\\\/])npx-cli\\.(?:js|cjs|mjs)$/i.test(execPath)) {\n\t\treturn true;\n\t}\n\tif (/(?:^|[\\\\/])npx(?:\\.cmd|\\.exe|\\.ps1)?$/i.test(execPath)) {\n\t\treturn true;\n\t}\n\treturn false;\n}\n\n// Recognise a path that lives inside any transient package-runner cache.\n// Patterns:\n//   _npx        — npm/npx cache\n//   dlx-<hash>  — pnpm dlx staging\n//   xfs-<hash>  — yarn dlx (Berry) temp project\n//   .bun/install/cache — bun x / bunx package cache\nconst TRANSIENT_CACHE_PATTERNS: ReadonlyArray<RegExp> = [\n\t/[\\\\/]_npx[\\\\/]/,\n\t/[\\\\/]dlx-[A-Za-z0-9]+[\\\\/]/,\n\t/[\\\\/]xfs-[A-Za-z0-9]+[\\\\/]/,\n\t/[\\\\/]\\.bun[\\\\/]install[\\\\/]cache[\\\\/]/,\n];\n\nexport function isPathUnderTransientCache(resolvedPath: string): boolean {\n\tfor (const re of TRANSIENT_CACHE_PATTERNS) {\n\t\tif (re.test(resolvedPath)) {\n\t\t\treturn true;\n\t\t}\n\t}\n\treturn false;\n}\n\nexport type ResolvedCommand = {\n\t/** The literal string that will be written into settings.json's `command` field. */\n\tcommandString: string;\n\t/** Split form (command + args[]) for MCP entry shapes that require it. */\n\tcommand: string;\n\targs: string[];\n};\n\n/**\n * Resolve a bin name to a stable command form. Returns the bare bin if it\n * lives at a durable PATH location, otherwise a version-pinned npx fallback.\n *\n * The single decision logic is shared between the PreToolUse hook installer\n * and the MCP registration installer.\n */\nexport function resolveBinCommand(binName: string): ResolvedCommand {\n\tconst version = readPackageVersion();\n\tconst npxArgs = [\"-y\", \"-p\", `${PACKAGE_NAME}@${version}`, binName];\n\tconst npxCommandString = `npx ${npxArgs.join(\" \")}`;\n\n\tif (isNpxExecution()) {\n\t\treturn {\n\t\t\tcommandString: npxCommandString,\n\t\t\tcommand: \"npx\",\n\t\t\targs: npxArgs,\n\t\t};\n\t}\n\n\ttry {\n\t\tconst resolved = execFileSync(\"/bin/sh\", [\"-c\", `command -v ${binName}`], {\n\t\t\tstdio: [\"ignore\", \"pipe\", \"ignore\"],\n\t\t})\n\t\t\t.toString()\n\t\t\t.trim();\n\t\tif (resolved.length > 0 && !isPathUnderTransientCache(resolved)) {\n\t\t\treturn {\n\t\t\t\tcommandString: binName,\n\t\t\t\tcommand: binName,\n\t\t\t\targs: [],\n\t\t\t};\n\t\t}\n\t} catch {\n\t\t// command -v failed: bin not on PATH at all. Fall through.\n\t}\n\n\treturn {\n\t\tcommandString: npxCommandString,\n\t\tcommand: \"npx\",\n\t\targs: npxArgs,\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAoBA,uBAAwB;;;ACHxB,IAAAA,eAMO;;;ACbP,kBAA4B;AAE5B,oBAAqB;AAEd,IAAM,YAAQ,yBAAY;AAAA,EAC/B,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,gBAAgB,EAAE,UAAU,IAAI,MAAM,SAAS,QAAQ,MAAM;AAAA,EAC7D,SAAS;AAAA,IACP,SAAS;AAAA,MACP,MAAM,CAAC,QAAQ,IAAI,iBAAiB,uBAAuB;AAAA,IAC7D;AAAA,EACF;AAAA,EACA,gBAAgB;AAAA,IACd,SAAS,EAAE,MAAM,kBAAkB,KAAK,6BAA6B;AAAA,EACvE;AACF,CAAC;AAGM,IAAM,YAAY;AAGlB,IAAM,eACX;;;ADLF,IAAM,gBAAgB;AA+BtB,eAAsB,aACpB,QACA,OAA4B,CAAC,GACH;AAC1B,QAAM,aACJ,KAAK,kBACJ,iCAAmB;AAAA,IAClB,OAAO;AAAA,IACP,eAAW,mBAAK;AAAA,EAClB,CAAC;AACH,QAAM,cACJ,KAAK,mBACJ,iCAAmB;AAAA,IAClB,OAAO;AAAA,IACP,eAAW,mBAAK;AAAA,EAClB,CAAC;AAIH,QAAM,CAAC,SAAS,QAAQ,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC5C,WAAW,aAAa;AAAA,MACtB,SAAS;AAAA,MACT,KAAK;AAAA,MACL,cAAc;AAAA,MACd,MAAM,CAAC,OAAO,aAAa;AAAA,IAC7B,CAAC;AAAA,IACD,YAAY,aAAa;AAAA,MACvB,SAAS;AAAA,MACT,KAAK;AAAA,MACL,cAAc;AAAA,MACd,MAAM,CAAC,OAAO,aAAa;AAAA,IAC7B,CAAC;AAAA,EACH,CAAC;AAED,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,OAAO;AAAA,MACP,YAAQ,0BAAY,SAAS,aAAa;AAAA,MAC1C,SAAS,OAAO;AAAA,IAClB;AAAA,IACA,OAAO;AAAA,MACL,OAAO;AAAA,MACP,OAAO;AAAA,MACP,YAAQ,0BAAY,UAAU,aAAa;AAAA,MAC3C,SAAS,OAAO;AAAA,IAClB;AAAA,EACF;AACF;;;AEhFA,IAAM,iBAAiB;AAIvB,IAAM,gBAAgB;AACtB,IAAM,gBAAgB;AAaf,SAAS,KAAK,eAAyC;AAC5D,MAAI,CAAC,eAAe,KAAK,aAAa,GAAG;AACvC,UAAM,IAAI,MAAM,+BAA+B,aAAa,EAAE;AAAA,EAChE;AAKA,QAAM,SAAS,IAAI,gBAAgB;AAAA,IACjC,gBAAgB;AAAA,IAChB,cAAc;AAAA,IACd,WAAW,KAAK,UAAU,EAAE,CAAC,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC;AAAA,IACvD,oBAAoB;AAAA,EACtB,CAAC;AAED,QAAM,oBAAoB,WAAW,aAAa,GAAG,aAAa,IAAI,OAAO,SAAS,CAAC;AAEvF,QAAM,aACJ;AAMF,SAAO;AAAA,IACL;AAAA,IACA,cAAc;AAAA,IACd;AAAA,EACF;AACF;;;AC1EA,yBAAuC;AAahC,SAAS,iBACd,QACA,QACA,MACA,UACA,MACA,WACQ;AACR,QAAM,iBAAa,+BAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AACjE,QAAM,gBAAgB,GAAG,MAAM;AAAA,EAAK,IAAI;AAAA,EAAK,QAAQ;AAAA,EAAK,UAAU;AAAA,EAAK,SAAS;AAClF,aAAO,+BAAW,UAAU,MAAM,EAAE,OAAO,aAAa,EAAE,OAAO,KAAK;AACxE;AASO,SAAS,iBACd,QACA,QACA,MACA,UACA,MACa;AACb,QAAM,YAAY,OAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,CAAC;AACtD,QAAM,YAAY;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,SAAO;AAAA,IACL,gBAAgB;AAAA,IAChB,kBAAkB;AAAA,IAClB,kBAAkB;AAAA,EACpB;AACF;;;ACtDA,IAAAC,sBAA4B;AAC5B,sBAA0D;AAC1D,qBAAwB;AACxB,uBAA8B;;;ACgCvB,IAAM,2BAAN,cAAuC,MAAM;AAAA,EACnD,cAAc;AACb;AAAA,MACC;AAAA,IACD;AACA,SAAK,OAAO;AAAA,EACb;AACD;AAWO,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAC1C;AAAA,EAET,YAAY,MAAc,QAAgB;AACzC;AAAA,MACC,oBAAoB,IAAI,mBAAmB,MAAM;AAAA,IAClD;AACA,SAAK,OAAO;AACZ,SAAK,OAAO;AAAA,EACb;AACD;;;AD9CA,eAAsB,mBAA0C;AAC/D,QAAM,iBAAa,2BAAK,wBAAQ,GAAG,cAAc,aAAa;AAC9D,MAAI;AACJ,MAAI;AACH,UAAM,UAAM,0BAAS,YAAY,OAAO;AAAA,EACzC,SAAS,KAAK;AACb,QAAK,IAA8B,SAAS,UAAU;AACrD,YAAM,IAAI,yBAAyB;AAAA,IACpC;AACA,UAAM;AAAA,EACP;AAMA,MAAI;AACJ,MAAI;AACH,aAAS,KAAK,MAAM,GAAG;AAAA,EACxB,SAAS,KAAK;AACb,UAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC9D,UAAM,IAAI,yBAAyB,YAAY,MAAM;AAAA,EACtD;AACA,MAAI,EAAE,OAAO,YAAY,OAAO,iBAAiB,OAAO,aAAa;AACpE,UAAM,IAAI,yBAAyB,YAAY,yBAAyB;AAAA,EACzE;AACA,SAAO;AACR;AAaA,eAAsB,kBAAkB,QAAqC;AAC5E,QAAM,iBAAa,2BAAK,wBAAQ,GAAG,cAAc,aAAa;AAC9D,YAAM,2BAAM,0BAAQ,UAAU,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACjE,QAAM,aAAS,iCAAY,CAAC,EAAE,SAAS,KAAK;AAC5C,QAAM,UAAU,GAAG,UAAU,IAAI,QAAQ,GAAG,IAAI,MAAM;AACtD,YAAM,2BAAU,SAAS,KAAK,UAAU,QAAQ,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AAIzE,YAAM,uBAAM,SAAS,GAAK;AAC1B,YAAM,wBAAO,SAAS,UAAU;AACjC;AAEO,SAAS,sBAA8B;AAC7C,aAAO,2BAAK,wBAAQ,GAAG,cAAc,aAAa;AACnD;;;AEpDA,IAAM,iBAAiB;AACvB,IAAM,yBAAyB;AASxB,IAAM,gCAAN,cAA4C,MAAM;AAAA,EAC/C,OAAO;AAAA,EAEhB,YAAY,SAAiB;AAC5B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACb;AACD;AAEO,IAAM,qBAAN,cAAiC,MAAM;AAAA,EACpC,OAAO;AAAA,EACP;AAAA,EACA;AAAA,EAET,YAAY,QAAgB,MAAc;AACzC,UAAM,0BAA0B,MAAM,KAAK,IAAI,EAAE;AACjD,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACb;AACD;AAEA,SAAS,eAAe,UAAsC;AAC7D,QAAM,YACL,YAAY,QAAQ,IAAI,qBAAqB;AAC9C,SAAO,UAAU,QAAQ,gBAAgB,EAAE;AAC5C;AAEA,SAAS,iBAAiB,OAAiC;AAC1D,SAAO,OAAO,UAAU,YAAY,MAAM,SAAS;AACpD;AAEA,SAAS,0BAA0B,MAA6B;AAC/D,MAAI,OAAO,SAAS,YAAY,SAAS,MAAM;AAC9C,UAAM,IAAI;AAAA,MACT;AAAA,IACD;AAAA,EACD;AACA,QAAM,EAAE,UAAU,eAAe,WAAW,IAAI;AAIhD,MACC,EACC,iBAAiB,QAAQ,KACzB,iBAAiB,aAAa,KAC9B,iBAAiB,UAAU,IAE3B;AACD,UAAM,IAAI;AAAA,MACT;AAAA,IACD;AAAA,EACD;AACA,MAAI,CAAC,uBAAuB,KAAK,aAAa,GAAG;AAChD,UAAM,IAAI;AAAA,MACT,+EAA+E,aAAa;AAAA,IAC7F;AAAA,EACD;AACA,SAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,EACD;AACD;AAYA,eAAsB,gBACrB,UAA4B,CAAC,GACL;AACxB,QAAM,UAAU,eAAe,QAAQ,OAAO;AAC9C,QAAM,YAAY,QAAQ,aAAa,WAAW;AAIlD,QAAM,WAAW,MAAM,UAAU,GAAG,OAAO,iCAAiC;AAAA,IAC3E,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C,MAAM;AAAA,IACN,QAAQ,YAAY,QAAQ,GAAM;AAAA,EACnC,CAAC;AACD,MAAI,CAAC,SAAS,IAAI;AACjB,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,UAAM,IAAI,mBAAmB,SAAS,QAAQ,IAAI;AAAA,EACnD;AACA,QAAM,MAAO,MAAM,SAAS,KAAK;AACjC,QAAM,OAAO,0BAA0B,GAAG;AAC1C,QAAM,kBAAkB,IAAI;AAC5B,SAAO;AACR;;;AClGA,IAAAC,sBAA4B;AAC5B,IAAAC,mBAQO;AACP,IAAAC,oBAA8B;AAC9B,IAAAC,mBAA8B;;;AC7B9B,qBAA2B;AAC3B,IAAAC,kBAAwB;AACxB,IAAAC,oBAA8B;AA0C9B,IAAM,cAAoC;AAAA,EACzC;AAAA,IACC,OAAO;AAAA,IACP,WAAW,CAAC,WAAW,QAAQ;AAAA,IAC/B,aAAa,CAAC,WAAW,eAAe;AAAA,IACxC,aAAa;AAAA;AAAA;AAAA;AAAA,IAIb,cAAc,CAAC,cAAc;AAAA,IAC7B,YAAY;AAAA,EACb;AAAA,EACA;AAAA,IACC,OAAO;AAAA,IACP,WAAW,CAAC,WAAW,QAAQ;AAAA,IAC/B,aAAa,CAAC,WAAW,eAAe;AAAA,IACxC,aAAa;AAAA,IACb,cAAc,CAAC,WAAW,UAAU;AAAA,IACpC,YAAY;AAAA,EACb;AAAA,EACA;AAAA,IACC,OAAO;AAAA,IACP,WAAW,CAAC,UAAU,QAAQ;AAAA,IAC9B,aAAa,CAAC,UAAU,eAAe;AAAA,IACvC,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMb,YAAY;AAAA,EACb;AAAA,EACA;AAAA,IACC,OAAO;AAAA,IACP,WAAW,CAAC,aAAa,QAAQ;AAAA,IACjC,aAAa,CAAC,aAAa,eAAe;AAAA,IAC1C,aAAa;AAAA,IACb,cAAc,CAAC,YAAY,YAAY,iBAAiB;AAAA,IACxD,YAAY;AAAA;AAAA;AAAA,IAGZ,aAAa,CAAC,CAAC,YAAY,UAAU,CAAC;AAAA,EACvC;AAAA,EACA;AAAA,IACC,OAAO;AAAA,IACP,WAAW,CAAC,WAAW,YAAY,QAAQ;AAAA,IAC3C,aAAa,CAAC,WAAW,YAAY,eAAe;AAAA,IACpD,aAAa;AAAA,IACb,cAAc,CAAC,WAAW,YAAY,eAAe;AAAA,IACrD,YAAY;AAAA,EACb;AACD;AAEO,SAAS,aAAa,cAAsC;AAClE,QAAM,OAAO,oBAAgB,yBAAQ;AACrC,QAAM,UAAyB,CAAC;AAChC,aAAW,QAAQ,aAAa;AAC/B,UAAM,gBAAY,wBAAK,MAAM,GAAG,KAAK,SAAS;AAC9C,UAAM,mBAAe,wBAAK,MAAM,GAAG,KAAK,WAAW;AAGnD,QAAI,eAAW,+BAAW,2BAAQ,SAAS,CAAC;AAC5C,QAAI,CAAC,YAAY,KAAK,aAAa;AAClC,iBAAW,OAAO,KAAK,aAAa;AACnC,gBAAI,+BAAW,wBAAK,MAAM,GAAG,GAAG,CAAC,GAAG;AACnC,qBAAW;AACX;AAAA,QACD;AAAA,MACD;AAAA,IACD;AACA,QAAI,CAAC,UAAU;AACd;AAAA,IACD;AACA,YAAQ,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ;AAAA,MACA;AAAA,MACA,aAAa,KAAK;AAAA,MAClB,cAAc,KAAK;AAAA,MACnB,YAAY,KAAK;AAAA,IAClB,CAAC;AAAA,EACF;AACA,SAAO;AACR;;;ACvHA,IAAAC,sBAA4B;AAC5B,IAAAC,mBAOO;AACP,IAAAC,kBAAwB;AACxB,IAAAC,oBAA8B;;;ACpB9B,gCAA6B;AAC7B,IAAAC,kBAA6B;AAC7B,IAAAC,oBAA8B;AAC9B,sBAA8B;AAEvB,IAAM,eAAe;AAYrB,SAAS,qBAA6B;AAC5C,MAAI;AACH,UAAM,WAAO,+BAAQ,+BAAc,UAAe,CAAC;AACnD,UAAM,cAAU,wBAAK,MAAM,MAAM,cAAc;AAC/C,UAAM,UAAM,8BAAa,SAAS,OAAO;AACzC,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,QAAI,OAAO,OAAO,YAAY,YAAY,OAAO,QAAQ,SAAS,GAAG;AACpE,aAAO,OAAO;AAAA,IACf;AAAA,EACD,QAAQ;AAAA,EAER;AACA,SAAO;AACR;AAeO,SAAS,iBAA0B;AACzC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,OAAO,aAAa,YAAY,SAAS,WAAW,GAAG;AAC1D,WAAO;AAAA,EACR;AACA,MAAI,uCAAuC,KAAK,QAAQ,GAAG;AAC1D,WAAO;AAAA,EACR;AACA,MAAI,yCAAyC,KAAK,QAAQ,GAAG;AAC5D,WAAO;AAAA,EACR;AACA,SAAO;AACR;AAQA,IAAM,2BAAkD;AAAA,EACvD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD;AAEO,SAAS,0BAA0B,cAA+B;AACxE,aAAW,MAAM,0BAA0B;AAC1C,QAAI,GAAG,KAAK,YAAY,GAAG;AAC1B,aAAO;AAAA,IACR;AAAA,EACD;AACA,SAAO;AACR;AAiBO,SAAS,kBAAkB,SAAkC;AACnE,QAAM,UAAU,mBAAmB;AACnC,QAAM,UAAU,CAAC,MAAM,MAAM,GAAG,YAAY,IAAI,OAAO,IAAI,OAAO;AAClE,QAAM,mBAAmB,OAAO,QAAQ,KAAK,GAAG,CAAC;AAEjD,MAAI,eAAe,GAAG;AACrB,WAAO;AAAA,MACN,eAAe;AAAA,MACf,SAAS;AAAA,MACT,MAAM;AAAA,IACP;AAAA,EACD;AAEA,MAAI;AACH,UAAM,eAAW,wCAAa,WAAW,CAAC,MAAM,cAAc,OAAO,EAAE,GAAG;AAAA,MACzE,OAAO,CAAC,UAAU,QAAQ,QAAQ;AAAA,IACnC,CAAC,EACC,SAAS,EACT,KAAK;AACP,QAAI,SAAS,SAAS,KAAK,CAAC,0BAA0B,QAAQ,GAAG;AAChE,aAAO;AAAA,QACN,eAAe;AAAA,QACf,SAAS;AAAA,QACT,MAAM,CAAC;AAAA,MACR;AAAA,IACD;AAAA,EACD,QAAQ;AAAA,EAER;AAEA,SAAO;AAAA,IACN,eAAe;AAAA,IACf,SAAS;AAAA,IACT,MAAM;AAAA,EACP;AACD;;;AD3GA,IAAM,UAAU;AAGT,IAAM,kBAAkB;AAkBxB,SAAS,oBAAgC;AAC/C,QAAM,cAAc,QAAQ,IAAI;AAChC,MAAI,eAAe,YAAY,SAAS,GAAG;AAE1C,UAAM,QAAQ,YAAY,KAAK,EAAE,MAAM,KAAK;AAC5C,UAAM,OAAO,MAAM,CAAC,KAAK;AACzB,WAAO,EAAE,SAAS,MAAM,MAAM,MAAM,MAAM,CAAC,EAAE;AAAA,EAC9C;AACA,QAAM,WAAW,kBAAkB,OAAO;AAC1C,SAAO,EAAE,SAAS,SAAS,SAAS,MAAM,SAAS,KAAK;AACzD;AAuCA,SAAS,mBAAmB,KAAmC;AAC9D,QAAM,QAA0B;AAAA,IAC/B,SAAS,IAAI;AAAA,IACb,MAAM,IAAI;AAAA,EACX;AACA,MAAI,IAAI,OAAO,OAAO,KAAK,IAAI,GAAG,EAAE,SAAS,GAAG;AAC/C,UAAM,MAAM,IAAI;AAAA,EACjB;AACA,SAAO;AACR;AAEA,SAAS,mBAAmB,KAAmC;AAC9D,SAAO;AAAA,IACN,MAAM;AAAA,IACN,SAAS,CAAC,IAAI,SAAS,GAAG,IAAI,IAAI;AAAA,IAClC,SAAS;AAAA,IACT,aAAa,IAAI,OAAO,CAAC;AAAA,EAC1B;AACD;AAEA,eAAe,gBAAmB,MAA0B;AAC3D,MAAI,MAAqB;AACzB,MAAI;AACH,UAAM,UAAM,2BAAS,MAAM,OAAO;AAAA,EACnC,SAAS,KAAK;AACb,QAAK,IAA8B,SAAS,UAAU;AACrD,YAAM;AAAA,IACP;AAAA,EACD;AACA,MAAI,QAAQ,MAAM;AACjB,WAAO,CAAC;AAAA,EACT;AACA,MAAI;AACH,WAAO,KAAK,MAAM,GAAG;AAAA,EACtB,QAAQ;AACP,UAAM,IAAI;AAAA,MACT,iBAAiB,IAAI;AAAA,IACtB;AAAA,EACD;AACD;AAcA,eAAe,gBAAgB,MAAc,SAAgC;AAC5E,YAAM,4BAAM,2BAAQ,IAAI,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC3D,QAAM,aAAS,iCAAY,CAAC,EAAE,SAAS,KAAK;AAC5C,QAAM,UAAU,GAAG,IAAI,IAAI,QAAQ,GAAG,IAAI,MAAM;AAChD,MAAI;AACH,cAAM,4BAAU,SAAS,SAAS,EAAE,MAAM,IAAM,CAAC;AACjD,cAAM,wBAAM,SAAS,GAAK;AAC1B,cAAM,yBAAO,SAAS,IAAI;AAAA,EAC3B,SAAS,KAAK;AACb,cAAM,yBAAO,OAAO,EAAE,MAAM,MAAM;AAAA,IAElC,CAAC;AACD,UAAM;AAAA,EACP;AACD;AAEA,eAAe,iBACd,MACA,OACgB;AAChB,QAAM,SAAS,MAAM,gBAAmC,IAAI;AAC5D,QAAM,UACL,OAAO,OAAO,eAAe,YAAY,OAAO,eAAe,OAC3D,OAAO,aACR,CAAC;AACL,UAAQ,eAAe,IAAI;AAC3B,SAAO,aAAa;AACpB,QAAM,UAAU,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA;AAClD,QAAM,gBAAgB,MAAM,OAAO;AACpC;AAEA,eAAe,iBACd,MACA,OACgB;AAChB,QAAM,SAAS,MAAM,gBAAmC,IAAI;AAC5D,QAAM,UACL,OAAO,OAAO,QAAQ,YAAY,OAAO,QAAQ,OAC7C,OAAO,MACR,CAAC;AACL,UAAQ,eAAe,IAAI;AAC3B,SAAO,MAAM;AACb,QAAM,UAAU,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA;AAClD,QAAM,gBAAgB,MAAM,OAAO;AACpC;AAkBA,eAAsB,kBACrB,QACA,UAAoC,CAAC,GACF;AACnC,MAAI,OAAO,eAAe,UAAU;AACnC,UAAM,IAAI;AAAA,MACT,SAAS,OAAO,KAAK;AAAA,IACtB;AAAA,EACD;AACA,MAAI,CAAC,OAAO,cAAc;AACzB,UAAM,IAAI;AAAA,MACT,SAAS,OAAO,KAAK,mBAAmB,OAAO,UAAU;AAAA,IAC1D;AAAA,EACD;AACA,QAAM,OAAO,QAAQ,oBAAgB,yBAAQ;AAC7C,QAAM,WAAO,wBAAK,MAAM,GAAG,OAAO,YAAY;AAC9C,QAAM,MAAM,QAAQ,WAAW,kBAAkB;AAEjD,MAAI,OAAO,eAAe,YAAY;AACrC,UAAM,iBAAiB,MAAM,mBAAmB,GAAG,CAAC;AAAA,EACrD,OAAO;AACN,UAAM,iBAAiB,MAAM,mBAAmB,GAAG,CAAC;AAAA,EACrD;AAEA,SAAO,EAAE,MAAM,MAAM,gBAAgB;AACtC;;;AFlMA,IAAM,WAAW;AAajB,IAAM,wBAAwB;AAyB9B,SAAS,8BAA8B,OAAyB;AAC/D,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAChD,WAAO;AAAA,EACR;AACA,QAAM,YAAY;AAClB,MAAI,CAAC,MAAM,QAAQ,UAAU,KAAK,GAAG;AACpC,WAAO;AAAA,EACR;AACA,QAAM,YAAY,UAAU,MAAM,OAAO,CAAC,MAAM;AAC/C,UAAM,MAAM,GAAG;AACf,WAAO,EAAE,OAAO,QAAQ,YAAY,IAAI,SAAS,qBAAqB;AAAA,EACvE,CAAC;AACD,MAAI,UAAU,WAAW,UAAU,MAAM,QAAQ;AAEhD,WAAO;AAAA,EACR;AACA,MAAI,UAAU,WAAW,GAAG;AAG3B,WAAO;AAAA,EACR;AACA,SAAO,EAAE,GAAG,WAAW,OAAO,UAAU;AACzC;AAeO,SAAS,qBAA6B;AAC5C,QAAM,cAAc,QAAQ,IAAI;AAChC,MAAI,eAAe,YAAY,SAAS,GAAG;AAC1C,WAAO;AAAA,EACR;AACA,SAAO,kBAAkB,QAAQ,EAAE;AACpC;AA6DA,SAAS,oBAAoB,SAAkC;AAC9D,SAAO;AAAA,IACN,SAAS;AAAA,IACT,OAAO,CAAC,EAAE,MAAM,WAAW,QAAQ,CAAC;AAAA,EACrC;AACD;AAEA,SAAS,4BAAoC;AAM5C,QAAM,WAAO,+BAAQ,gCAAc,UAAe,CAAC;AACnD,aAAO,wBAAK,MAAM,MAAM,SAAS,2BAA2B;AAC7D;AAEA,SAAS,cAAc,KAAmB;AACzC,UAAQ,OAAO,MAAM,GAAG,GAAG;AAAA,CAAI;AAChC;AAEA,eAAsB,uBACrB,cACA,UAAyC,CAAC,GAC1B;AAChB,QAAM,UAAU,QAAQ,eAAe,mBAAmB;AAE1D,MAAI,MAAqB;AACzB,MAAI;AACH,UAAM,UAAM,2BAAS,cAAc,OAAO;AAAA,EAC3C,SAAS,KAAK;AACb,QAAK,IAA8B,SAAS,UAAU;AACrD,YAAM;AAAA,IACP;AAAA,EACD;AAEA,MAAI,SAAyB,CAAC;AAC9B,MAAI,QAAQ,MAAM;AACjB,QAAI;AACH,eAAS,KAAK,MAAM,GAAG;AAAA,IACxB,QAAQ;AACP,YAAM,IAAI;AAAA,QACT,oBAAoB,YAAY;AAAA,MACjC;AAAA,IACD;AAAA,EACD;AAEA,QAAM,QACL,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,OACjD,OAAO,QACR,CAAC;AAEL,QAAM,qBAAqB,MAAM,QAAQ,MAAM,UAAU,IACrD,MAAM,aACP,CAAC;AASJ,QAAM,WAAsB,CAAC;AAC7B,aAAW,SAAS,oBAAoB;AACvC,UAAM,WAAW,8BAA8B,KAAK;AACpD,QAAI,aAAa,MAAM;AACtB,eAAS,KAAK,QAAQ;AAAA,IACvB;AAAA,EACD;AACA,WAAS,KAAK,oBAAoB,OAAO,CAAC;AAE1C,QAAM,aAAa;AACnB,SAAO,QAAQ;AAEf,YAAM,4BAAM,2BAAQ,YAAY,GAAG,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACnE,QAAM,UAAU,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA;AAQlD,QAAM,aAAS,iCAAY,CAAC,EAAE,SAAS,KAAK;AAC5C,QAAM,UAAU,GAAG,YAAY,IAAI,QAAQ,GAAG,IAAI,MAAM;AACxD,MAAI;AACH,cAAM,4BAAU,SAAS,SAAS,EAAE,MAAM,IAAM,CAAC;AACjD,cAAM,wBAAM,SAAS,GAAK;AAC1B,cAAM,yBAAO,SAAS,YAAY;AAAA,EACnC,SAAS,KAAK;AACb,cAAM,yBAAO,OAAO,EAAE,MAAM,MAAM;AAAA,IAElC,CAAC;AACD,UAAM;AAAA,EACP;AACD;AAEA,eAAe,kBACd,OACA,aAC0E;AAC1E,YAAM,wBAAM,MAAM,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAC7D,QAAM,aAAS,wBAAK,MAAM,WAAW,2BAA2B;AAChE,YAAM,2BAAS,aAAa,MAAM;AAClC,YAAM,wBAAM,QAAQ,GAAK;AACzB,SAAO,EAAE,OAAO,MAAM,OAAO,MAAM,QAAQ,QAAQ,UAAU;AAC9D;AAEA,SAAS,uBAAuB,OAAoB,SAAyB;AAC5E,SAAO,GAAG,MAAM,KAAK,6DAA6D,OAAO,4BAA4B,MAAM,KAAK,uBAAuB,MAAM,YAAY;AAC1K;AAEA,SAAS,sBACR,OACA,SACS;AACT,QAAM,MAAM,CAAC,QAAQ,SAAS,GAAG,QAAQ,IAAI,EAAE,KAAK,GAAG;AACvD,SAAO,GAAG,MAAM,KAAK,oGAAoG,GAAG;AAC7H;AAmBA,eAAsB,aACrB,UAA0B,CAAC,GACF;AACzB,QAAM,SAAS,aAAa,QAAQ,YAAY;AAChD,QAAM,cAAc,QAAQ,mBAAmB,0BAA0B;AACzE,QAAM,WAAW,QAAQ,YAAY;AAIrC,QAAM,cAAc,QAAQ,eAAe,mBAAmB;AAC9D,QAAM,aAAa,QAAQ,cAAc,kBAAkB;AAE3D,QAAM,cAA4C,CAAC;AACnD,QAAM,oBAAwD,CAAC;AAC/D,QAAM,mBAAsD,CAAC;AAS7D,aAAW,SAAS,QAAQ;AAC3B,QAAI;AACH,YAAM,QAAQ,MAAM,kBAAkB,OAAO,WAAW;AACxD,kBAAY,KAAK,KAAK;AAAA,IACvB,SAAS,KAAK;AACb,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,kBAAY,KAAK;AAAA,QAChB,OAAO,MAAM;AAAA,QACb,MAAM;AAAA,QACN,QAAQ;AAAA,MACT,CAAC;AACD,eAAS,GAAG,MAAM,KAAK,wBAAwB,OAAO,GAAG;AAGzD;AAAA,IACD;AAEA,QAAI,MAAM,gBAAgB,eAAe;AACxC,UAAI;AACH,cAAM,uBAAuB,MAAM,cAAc,EAAE,YAAY,CAAC;AAChE,0BAAkB,KAAK;AAAA,UACtB,OAAO,MAAM;AAAA,UACb,QAAQ;AAAA,QACT,CAAC;AAAA,MACF,SAAS,KAAK;AACb,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,0BAAkB,KAAK;AAAA,UACtB,OAAO,MAAM;AAAA,UACb,QAAQ;AAAA,UACR;AAAA,QACD,CAAC;AACD,iBAAS,GAAG,MAAM,KAAK,+BAA+B,OAAO,GAAG;AAAA,MACjE;AAAA,IACD,OAAO;AACN,YAAM,gBAAgB,uBAAuB,OAAO,WAAW;AAC/D,wBAAkB,KAAK;AAAA,QACtB,OAAO,MAAM;AAAA,QACb,QAAQ;AAAA,QACR,SAAS;AAAA,MACV,CAAC;AACD,eAAS,aAAa;AAAA,IACvB;AAEA,QAAI,MAAM,eAAe,UAAU;AAClC,YAAM,gBAAgB,sBAAsB,OAAO,UAAU;AAC7D,uBAAiB,KAAK;AAAA,QACrB,OAAO,MAAM;AAAA,QACb,QAAQ;AAAA,QACR,SAAS;AAAA,MACV,CAAC;AACD,eAAS,aAAa;AACtB;AAAA,IACD;AACA,QAAI;AACH,YAAM,YAAY,MAAM,kBAAkB,OAAO;AAAA,QAChD,cAAc,QAAQ;AAAA,QACtB,SAAS;AAAA,MACV,CAAC;AACD,uBAAiB,KAAK;AAAA,QACrB,OAAO,MAAM;AAAA,QACb,QAAQ;AAAA,QACR,MAAM,UAAU;AAAA,MACjB,CAAC;AAAA,IACF,SAAS,KAAK;AACb,YAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,uBAAiB,KAAK;AAAA,QACrB,OAAO,MAAM;AAAA,QACb,QAAQ;AAAA,QACR;AAAA,MACD,CAAC;AACD,eAAS,GAAG,MAAM,KAAK,8BAA8B,OAAO,GAAG;AAAA,IAChE;AAAA,EACD;AAEA,SAAO,EAAE,aAAa,mBAAmB,iBAAiB;AAC3D;;;AR9YA,eAAe,OAAO,OAA6B,CAAC,GAAkB;AACrE,MAAI;AACH,UAAM,OAAO,MAAM,gBAAgB,EAAE,SAAS,KAAK,QAAQ,CAAC;AAG5D,YAAQ,OAAO,MAAM,aAAa,KAAK,QAAQ;AAAA,CAAI;AACnD,YAAQ,OAAO,MAAM,kBAAkB,KAAK,aAAa;AAAA,CAAI;AAC7D,YAAQ,OAAO,MAAM,qBAAqB,oBAAoB,CAAC;AAAA,CAAI;AAAA,EACpE,SAAS,KAAK;AACb,QAAI,eAAe,oBAAoB;AACtC,cAAQ,OAAO;AAAA,QACd,6CAA6C,IAAI,MAAM,KAAK,IAAI,IAAI;AAAA;AAAA,MACrE;AACA,cAAQ,KAAK,CAAC;AAAA,IACf;AACA,UAAM;AAAA,EACP;AACD;AAEA,eAAe,UAAyB;AACvC,QAAM,SAAS,MAAM,iBAAiB;AACtC,QAAM,MAAM,KAAK,OAAO,aAAa;AACrC,UAAQ,OAAO,MAAM,GAAG,IAAI,iBAAiB;AAAA,CAAI;AACjD,UAAQ,OAAO,MAAM,kBAAkB,IAAI,YAAY;AAAA,CAAI;AAC3D,UAAQ,OAAO,MAAM,GAAG,IAAI,UAAU;AAAA,CAAI;AAC3C;AAEA,eAAe,aAA4B;AAC1C,QAAM,SAAS,MAAM,iBAAiB;AACtC,QAAM,OAAO,MAAM,aAAa,MAAM;AACtC,UAAQ,OAAO,MAAM,iBAAiB,KAAK,KAAK,MAAM;AAAA,CAAI;AAC1D,UAAQ,OAAO,MAAM,iBAAiB,KAAK,MAAM,MAAM;AAAA,CAAI;AAC5D;AAEA,eAAe,UAAyB;AACvC,QAAM,SAAS,MAAM,iBAAiB;AACtC,UAAQ,OAAO,MAAM,aAAa,OAAO,QAAQ;AAAA,CAAI;AACrD,UAAQ,OAAO,MAAM,kBAAkB,OAAO,aAAa;AAAA,CAAI;AAChE;AAYA,IAAM,4BAA4B;AAElC,eAAe,YAAY,MAAmC;AAC7D,QAAM,SAAS,MAAM,iBAAiB;AACtC,QAAM,WAAW,KAAK,WAAW,2BAA2B;AAAA,IAC3D;AAAA,IACA;AAAA,EACD;AACA,QAAM,OAAO;AAIb,QAAM,OAAgC;AAAA,IACrC,aAAa,KAAK;AAAA,IAClB,OAAO,OAAO,SAAS,KAAK,OAAO,EAAE;AAAA,IACrC,eAAe,OAAO,SAAS,KAAK,YAAY,KAAK,EAAE;AAAA,EACxD;AACA,MAAI,KAAK,YAAY,QAAW;AAC/B,SAAK,UAAU,KAAK;AAAA,EACrB;AACA,MAAI,KAAK,YAAY,QAAW;AAC/B,SAAK,UAAU,KAAK;AAAA,EACrB;AACA,MAAI,KAAK,YAAY,QAAW;AAC/B,SAAK,eAAe,OAAO,SAAS,KAAK,SAAS,EAAE;AAAA,EACrD;AACA,QAAM,WAAW,KAAK,UAAU,IAAI;AAEpC,QAAM,UAAU;AAAA,IACf,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA,OAAO;AAAA,IACP;AAAA,EACD;AAEA,QAAM,WAAW,MAAM,MAAM,GAAG,OAAO,GAAG,IAAI,IAAI;AAAA,IACjD,QAAQ;AAAA,IACR,SAAS;AAAA,MACR,gBAAgB;AAAA,MAChB,GAAG;AAAA,IACJ;AAAA,IACA,MAAM;AAAA,EACP,CAAC;AACD,QAAM,OAAO,MAAM,SAAS,KAAK;AACjC,MAAI,CAAC,SAAS,IAAI;AACjB,YAAQ,OAAO,MAAM,QAAQ,SAAS,MAAM,KAAK,IAAI;AAAA,CAAI;AACzD,YAAQ,KAAK,CAAC;AAAA,EACf;AACA,QAAM,SAAS,KAAK,MAAM,IAAI;AAK9B,UAAQ,OAAO,MAAM,eAAe,OAAO,cAAc,EAAE;AAAA,CAAI;AAC/D,UAAQ,OAAO,MAAM,WAAW,OAAO,UAAU,EAAE;AAAA,CAAI;AACvD,UAAQ,OAAO,MAAM,cAAc,OAAO,aAAa,EAAE;AAAA,CAAI;AAC9D;AAEA,eAAsB,OAAO,OAAiB,QAAQ,MAAqB;AAC1E,QAAM,UAAU,IAAI,yBAAQ;AAC5B,UACE,KAAK,kBAAkB,EACvB;AAAA,IACA;AAAA,EACD,EACC,QAAQ,OAAO;AAEjB,UACE,QAAQ,KAAK,EACb,YAAY,sDAAsD,EAClE,OAAO,oBAAoB,wBAAwB,EACnD,OAAO,OAAO,SAA+B;AAC7C,UAAM,OAAO,IAAI;AAAA,EAClB,CAAC;AAEF,UACE,QAAQ,MAAM,EACd;AAAA,IACA;AAAA,EACD,EACC,OAAO,YAAY;AACnB,UAAM,QAAQ;AAAA,EACf,CAAC;AAEF,UACE,QAAQ,SAAS,EACjB,YAAY,kDAAkD,EAC9D,OAAO,YAAY;AACnB,UAAM,WAAW;AAAA,EAClB,CAAC;AAEF,UACE,QAAQ,MAAM,EACd,YAAY,oDAAoD,EAChE,OAAO,YAAY;AACnB,UAAM,QAAQ;AAAA,EACf,CAAC;AAEF,UACE,QAAQ,UAAU,EAClB;AAAA,IACA;AAAA,EACD,EACC;AAAA,IACA;AAAA,IACA;AAAA,EACD,EACC;AAAA,IACA;AAAA,IACA;AAAA,EACD,EACC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD,EACC,OAAO,oBAAoB,4BAA4B,EACvD;AAAA,IACA;AAAA,IACA;AAAA,EACD,EACC;AAAA,IACA;AAAA,IACA;AAAA,EACD,EACC,OAAO,oBAAoB,wBAAwB,EACnD,OAAO,OAAO,SAAuB;AACrC,UAAM,YAAY,IAAI;AAAA,EACvB,CAAC;AAEF,UACE,QAAQ,OAAO,EACf;AAAA,IACA;AAAA,EACD,EACC;AAAA,IACA,IAAI,yBAAQ,SAAS,EACnB;AAAA,MACA;AAAA,IACD,EACC,OAAO,YAAY;AACnB,YAAM,SAAS,MAAM,aAAa;AAClC,iBAAW,SAAS,OAAO,aAAa;AACvC,gBAAQ,OAAO;AAAA,UACd,UAAU,MAAM,KAAK,OAAO,MAAM,IAAI,KAAK,MAAM,MAAM;AAAA;AAAA,QACxD;AAAA,MACD;AACA,iBAAW,OAAO,OAAO,mBAAmB;AAC3C,YAAI,IAAI,WAAW,cAAc;AAChC,kBAAQ,OAAO;AAAA,YACd,SAAS,IAAI,KAAK;AAAA;AAAA,UACnB;AAAA,QACD,WAAW,IAAI,WAAW,UAAU;AACnC,kBAAQ,OAAO;AAAA,YACd,WAAW,IAAI,KAAK,OAAO,IAAI,WAAW,EAAE;AAAA;AAAA,UAC7C;AAAA,QACD,WAAW,IAAI,WAAW,UAAU;AACnC,kBAAQ,OAAO;AAAA,YACd,SAAS,IAAI,KAAK,eAAe,IAAI,WAAW,eAAe;AAAA;AAAA,UAChE;AAAA,QACD;AAAA,MACD;AACA,iBAAW,OAAO,OAAO,kBAAkB;AAC1C,YAAI,IAAI,WAAW,cAAc;AAChC,kBAAQ,OAAO;AAAA,YACd,QAAQ,IAAI,KAAK,qBAAqB,IAAI,QAAQ,gBAAgB;AAAA;AAAA,UACnE;AAAA,QACD,WAAW,IAAI,WAAW,UAAU;AACnC,kBAAQ,OAAO;AAAA,YACd,WAAW,IAAI,KAAK,WAAW,IAAI,WAAW,EAAE;AAAA;AAAA,UACjD;AAAA,QACD,WAAW,IAAI,WAAW,UAAU;AACnC,kBAAQ,OAAO;AAAA,YACd,QAAQ,IAAI,KAAK,eAAe,IAAI,WAAW,eAAe;AAAA;AAAA,UAC/D;AAAA,QACD;AAAA,MACD;AACA,UAAI,OAAO,YAAY,WAAW,GAAG;AACpC,gBAAQ,OAAO;AAAA,UACd;AAAA,QACD;AAAA,MACD;AAAA,IACD,CAAC;AAAA,EACH;AAED,MAAI;AACH,UAAM,QAAQ,WAAW,IAAI;AAAA,EAC9B,SAAS,KAAK;AACb,QAAI,eAAe,0BAA0B;AAC5C,cAAQ,OAAO,MAAM,sBAAsB,IAAI,OAAO;AAAA,CAAI;AAC1D,cAAQ,KAAK,CAAC;AAAA,IACf;AACA,YAAQ,OAAO;AAAA,MACd,sBAAuB,IAAc,WAAW,OAAO,GAAG,CAAC;AAAA;AAAA,IAC5D;AACA,YAAQ,KAAK,CAAC;AAAA,EACf;AACD;","names":["import_viem","import_node_crypto","import_node_crypto","import_promises","import_node_path","import_node_url","import_node_os","import_node_path","import_node_crypto","import_promises","import_node_os","import_node_path","import_node_fs","import_node_path"]}