@layr-labs/benchmaxx-arena-mcp 0.1.0

package/dist/client.d.ts

@@ -0,0 +1,210 @@
+/**
+ * Typed HTTP client for the benchmaxx-arena API.
+ *
+ * The client wraps `fetch` and takes `fetch`, the credential store, the loopback
+ * listener, the browser opener, and the idempotency-key generator as injected
+ * dependencies, so the login flow, the error mapping, and the paid submit path
+ * are unit-testable with no network, no browser, and no randomness. Every
+ * endpoint here is unary. It sends and reads camelCase JSON, URL-encodes every path
+ * segment, and attaches the bearer key only for the endpoints that need it. On
+ * a non-2xx response it throws `ApiError` carrying the server `rpcStatus.message`;
+ * on a fetch rejection it throws `NetworkError`. Neither the client nor a thrown
+ * error ever includes the bearer token, the PKCE verifier, or a login code.
+ */
+import type { CancelRunResponse, CatalogResponse, CompetitionInsightsResponse, CreateSubmissionResponse, GetAccountingStatusResponse, GetBenchmarkResponse, GetRunLogResponse, GetRunResponse, GetRunTimelineResponse, LeaderboardResponse, ListApiKeysResponse, ListBenchmarksResponse, ListMySubmissionsResponse, ListRunsResponse, SubmissionConfigResponse, SubmissionResponse } from './apiTypes.js';
+import { type StoredCredential } from './credentialStore.js';
+import { type LoopbackListener } from './loopback.js';
+/** The `fetch` shape the client depends on. */
+export type FetchLike = (input: string, init?: {
+    method?: string;
+    headers?: Record<string, string>;
+    body?: string;
+    signal?: AbortSignal;
+}) => Promise<FetchResponse>;
+/** The subset of the Response the client reads. */
+export interface FetchResponse {
+    ok: boolean;
+    status: number;
+    text(): Promise<string>;
+}
+/** A minimal credential-store contract, so tests can inject a fake. */
+export interface CredentialStoreLike {
+    get(origin: string): Promise<StoredCredential | undefined>;
+    set(origin: string, credential: StoredCredential): Promise<void>;
+    delete(origin: string): Promise<boolean>;
+}
+/** Operator-facing sink for login instructions. Defaults to stderr. */
+export type OperatorLog = (line: string) => void;
+/** Progress sink for a long-running tool, so an MCP host sees liveness. */
+export type ProgressReport = (progress: {
+    message: string;
+}) => void | Promise<void>;
+/** Binds the single-shot loopback listener that receives the code. */
+export type StartListener = () => Promise<LoopbackListener>;
+/** Opens a URL in the user's browser. False means no browser could be opened. */
+export type OpenBrowser = (url: string) => Promise<boolean>;
+/** A completed login: the key is stored. */
+export interface LoginCompleted {
+    kind: 'completed';
+    username: string;
+    keyPrefix: string;
+    expiresAt: string;
+}
+/** No browser could be opened. The human must finish through `finishLogin`. */
+export interface LoginManualRequired {
+    kind: 'manual';
+    authorizeUrl: string;
+}
+export type LoginOutcome = LoginCompleted | LoginManualRequired;
+export interface ClientDeps {
+    origin: string;
+    fetch: FetchLike;
+    store: CredentialStoreLike;
+    /** Where the login instructions print. Defaults to stderr. */
+    operatorLog?: OperatorLog;
+    /** Binds the loopback listener. Defaults to `startLoopbackListener`. */
+    startListener?: StartListener;
+    /** Opens the authorize page. Defaults to `openInBrowser`. */
+    openBrowser?: OpenBrowser;
+    /** Generates an idempotency key per paid submission. Defaults to randomUUID. */
+    newIdempotencyKey?: () => string;
+}
+export declare class ArenaClient {
+    private readonly origin;
+    private readonly fetch;
+    private readonly store;
+    private readonly operatorLog;
+    private readonly startListener;
+    private readonly openBrowser;
+    private readonly newIdempotencyKey;
+    /**
+     * The verifier for a manual login awaiting `finishLogin`.
+     *
+     * In memory only, deliberately: it is the secret half of the PKCE pair, so it
+     * never touches disk. A restart of this process therefore voids a pending
+     * manual login, and the human runs `login` again.
+     */
+    private pending;
+    constructor(deps: ClientDeps);
+    private request;
+    private serverMessage;
+    private requireCredential;
+    /** Whether a credential is stored for this origin. */
+    currentCredential(): Promise<StoredCredential | undefined>;
+    /** Delete the stored credential. Returns true when one was removed. */
+    logout(): Promise<boolean>;
+    /**
+     * Log in through the browser: bind a loopback listener, open the arena's
+     * authorize page, wait for the one-time code it redirects back, and redeem it
+     * for an API key with the PKCE verifier this process never sent anywhere else.
+     *
+     * The authorize URL is NOT reported when the browser opened. It carries the
+     * challenge and the state, and an MCP host transcript is routinely logged,
+     * shared, or pasted; anyone holding the challenge can mint a code against
+     * THEIR arena account bound to it, hand it to this listener, and the verifier
+     * still matches — an authorization-code injection PKCE cannot stop once the
+     * challenge leaks. The URL is emitted only on the manual path, where the human
+     * cannot proceed without it, and the username guard below backs that up
+     * independently.
+     *
+     * Approval is human-paced and routinely outlives an MCP host's default
+     * 60-second tool timeout, so progress is reported before the wait: it shows
+     * liveness and resets the host's timeout. The abort signal is honored at the
+     * wait AND rechecked immediately before the credential write, so a cancelled
+     * login cannot leave a key on disk after the caller gave up.
+     */
+    login(options?: {
+        signal?: AbortSignal;
+        reportProgress?: ProgressReport;
+    }): Promise<LoginOutcome>;
+    /**
+     * Finish a login that fell back to the manual path, with the code the browser
+     * displayed.
+     *
+     * The pending verifier lives in memory only, so a restart of this process
+     * voids a pending manual login and the human runs `login` again.
+     */
+    finishLogin(code: string): Promise<LoginCompleted>;
+    /**
+     * Exchange a one-time code and the verifier for an API key, then store it.
+     *
+     * Neither the code, the verifier, nor the token appears in any message or
+     * error raised here.
+     */
+    private redeem;
+    /** List the caller's API keys (bearer). */
+    listApiKeys(): Promise<ListApiKeysResponse>;
+    getCatalog(): Promise<CatalogResponse>;
+    getLeaderboard(params: {
+        benchmark?: string;
+        variant?: string;
+        class?: string;
+        orderBy?: string;
+        asc?: boolean;
+        limit?: number;
+        offset?: number;
+        username?: string;
+        model?: string;
+        harness?: string;
+        harnessVersion?: string;
+    }): Promise<LeaderboardResponse>;
+    getInsights(params?: {
+        benchmark?: string;
+        variant?: string;
+        class?: string;
+        model?: string;
+    }): Promise<CompetitionInsightsResponse>;
+    getAccountingStatus(): Promise<GetAccountingStatusResponse>;
+    listBenchmarks(): Promise<ListBenchmarksResponse>;
+    getBenchmark(id: string): Promise<GetBenchmarkResponse>;
+    getSubmission(id: string): Promise<SubmissionResponse>;
+    getSubmissionConfig(id: string): Promise<SubmissionConfigResponse>;
+    /**
+     * Create a prompt_only submission. This is the one tool call that spends
+     * money, and MCP hosts retry a tool call whose response they never saw, so it
+     * always carries an `idempotencyKey`: without one a retried submit bills a
+     * second run. The caller may supply the key to keep retry identity stable
+     * across its own reattempts; otherwise a fresh UUID is generated per call.
+     */
+    submitPrompt(params: {
+        benchmarkVariantId: string;
+        model: string;
+        systemPrompt: string;
+        idempotencyKey?: string;
+    }): Promise<CreateSubmissionResponse>;
+    listMySubmissions(): Promise<ListMySubmissionsResponse>;
+    listRuns(params?: {
+        submissionId?: string;
+        pageSize?: number;
+        pageToken?: string;
+    }): Promise<ListRunsResponse>;
+    getRun(id: string): Promise<GetRunResponse>;
+    /**
+     * Read persisted run events after a sequence number.
+     *
+     * This calls the UNARY `GET /v1/runs/{id}/timeline`. The server-streaming
+     * GetRunEvents RPC is still Unimplemented (501) and pinned that way by a test
+     * — the in-process grpc-gateway cannot serve a stream — so the timeline is the
+     * sanctioned reader for the same persisted events. Being unary, it needs no
+     * abort timeout, event cap, or byte cap: the server bounds the page and
+     * returns `nextSeq` as the resume cursor.
+     */
+    getRunTimeline(id: string, options?: {
+        sinceSeq?: string;
+        signal?: AbortSignal;
+    }): Promise<GetRunTimelineResponse>;
+    /** Read run stdout/stderr chunks after a sequence number. */
+    getRunLog(id: string, options?: {
+        sinceSeq?: string;
+        signal?: AbortSignal;
+    }): Promise<GetRunLogResponse>;
+    /**
+     * Request cancellation of a run. Asynchronous: the response reports that the
+     * request was recorded, not that the run has stopped. Work already billed
+     * stays billed.
+     */
+    cancelRun(runId: string, params?: {
+        reason?: string;
+        requestId?: string;
+    }): Promise<CancelRunResponse>;
+}

package/dist/client.js

@@ -0,0 +1,407 @@
+/**
+ * Typed HTTP client for the benchmaxx-arena API.
+ *
+ * The client wraps `fetch` and takes `fetch`, the credential store, the loopback
+ * listener, the browser opener, and the idempotency-key generator as injected
+ * dependencies, so the login flow, the error mapping, and the paid submit path
+ * are unit-testable with no network, no browser, and no randomness. Every
+ * endpoint here is unary. It sends and reads camelCase JSON, URL-encodes every path
+ * segment, and attaches the bearer key only for the endpoints that need it. On
+ * a non-2xx response it throws `ApiError` carrying the server `rpcStatus.message`;
+ * on a fetch rejection it throws `NetworkError`. Neither the client nor a thrown
+ * error ever includes the bearer token, the PKCE verifier, or a login code.
+ */
+import { randomUUID } from 'node:crypto';
+import { openInBrowser } from './browser.js';
+import {} from './credentialStore.js';
+import { ApiError, CliRedeemFailed, LoginCancelled, NetworkError } from './errors.js';
+import { startLoopbackListener } from './loopback.js';
+import { createPkcePair, createStateNonce } from './pkce.js';
+/** The 64 lowercase hex characters a mintable authorization code always is. */
+const CODE_PATTERN = /^[0-9a-f]{64}$/;
+function encodePath(segment) {
+    return encodeURIComponent(segment);
+}
+function throwIfAborted(signal) {
+    if (signal?.aborted) {
+        throw new LoginCancelled();
+    }
+}
+export class ArenaClient {
+    origin;
+    fetch;
+    store;
+    operatorLog;
+    startListener;
+    openBrowser;
+    newIdempotencyKey;
+    /**
+     * The verifier for a manual login awaiting `finishLogin`.
+     *
+     * In memory only, deliberately: it is the secret half of the PKCE pair, so it
+     * never touches disk. A restart of this process therefore voids a pending
+     * manual login, and the human runs `login` again.
+     */
+    pending;
+    constructor(deps) {
+        this.origin = deps.origin;
+        this.fetch = deps.fetch;
+        this.store = deps.store;
+        this.operatorLog = deps.operatorLog ?? ((line) => process.stderr.write(`${line}\n`));
+        this.startListener = deps.startListener ?? startLoopbackListener;
+        this.openBrowser = deps.openBrowser ?? ((url) => openInBrowser(url));
+        this.newIdempotencyKey = deps.newIdempotencyKey ?? (() => randomUUID());
+    }
+    // --- Core request helpers -------------------------------------------------
+    async request(path, options = {}) {
+        const headers = { Accept: 'application/json' };
+        if (options.body !== undefined) {
+            headers['Content-Type'] = 'application/json';
+        }
+        if (options.bearer) {
+            const credential = await this.requireCredential();
+            headers['Authorization'] = `Bearer ${credential.token}`;
+        }
+        let res;
+        try {
+            res = await this.fetch(`${this.origin}${path}`, {
+                method: options.method ?? 'GET',
+                headers,
+                body: options.body === undefined ? undefined : JSON.stringify(options.body),
+                signal: options.signal,
+            });
+        }
+        catch {
+            // Never include the caught error: it can carry the request, and the
+            // request carries the bearer header.
+            throw new NetworkError('fetch failed');
+        }
+        const text = await res.text();
+        if (!res.ok) {
+            throw new ApiError(res.status, this.serverMessage(text, res.status));
+        }
+        if (!text) {
+            return undefined;
+        }
+        return JSON.parse(text);
+    }
+    serverMessage(body, status) {
+        if (body) {
+            try {
+                const parsed = JSON.parse(body);
+                if (typeof parsed.message === 'string' && parsed.message) {
+                    return parsed.message;
+                }
+            }
+            catch {
+                // Fall through to the status-only message.
+            }
+        }
+        return `request failed with status ${status}`;
+    }
+    async requireCredential() {
+        const credential = await this.store.get(this.origin);
+        if (!credential) {
+            throw new ApiError(401, 'not authenticated');
+        }
+        return credential;
+    }
+    // --- Auth -----------------------------------------------------------------
+    /** Whether a credential is stored for this origin. */
+    async currentCredential() {
+        return this.store.get(this.origin);
+    }
+    /** Delete the stored credential. Returns true when one was removed. */
+    async logout() {
+        return this.store.delete(this.origin);
+    }
+    /**
+     * Log in through the browser: bind a loopback listener, open the arena's
+     * authorize page, wait for the one-time code it redirects back, and redeem it
+     * for an API key with the PKCE verifier this process never sent anywhere else.
+     *
+     * The authorize URL is NOT reported when the browser opened. It carries the
+     * challenge and the state, and an MCP host transcript is routinely logged,
+     * shared, or pasted; anyone holding the challenge can mint a code against
+     * THEIR arena account bound to it, hand it to this listener, and the verifier
+     * still matches — an authorization-code injection PKCE cannot stop once the
+     * challenge leaks. The URL is emitted only on the manual path, where the human
+     * cannot proceed without it, and the username guard below backs that up
+     * independently.
+     *
+     * Approval is human-paced and routinely outlives an MCP host's default
+     * 60-second tool timeout, so progress is reported before the wait: it shows
+     * liveness and resets the host's timeout. The abort signal is honored at the
+     * wait AND rechecked immediately before the credential write, so a cancelled
+     * login cannot leave a key on disk after the caller gave up.
+     */
+    async login(options = {}) {
+        const { signal, reportProgress } = options;
+        throwIfAborted(signal);
+        const { verifier, challenge } = createPkcePair();
+        const state = createStateNonce();
+        const listener = await this.startListener();
+        let code;
+        try {
+            // The origin serves both the SPA and the API, so the authorize page is a
+            // path on it and needs no separate configuration.
+            const authorizeUrl = new URL('/cli/authorize', this.origin);
+            authorizeUrl.searchParams.set('callback', listener.callbackUrl);
+            authorizeUrl.searchParams.set('challenge', challenge);
+            authorizeUrl.searchParams.set('state', state);
+            if (!(await this.openBrowser(authorizeUrl.toString()))) {
+                // No browser: the human has to carry the URL and the code by hand, so
+                // the verifier stays pending for `finishLogin`. The listener can never
+                // receive a callback in this mode, so it closes in the `finally`.
+                const manualUrl = new URL(authorizeUrl);
+                manualUrl.searchParams.set('manual', '1');
+                const manual = manualUrl.toString();
+                this.pending = { verifier };
+                this.operatorLog('benchmaxx-arena login (no browser could be opened)');
+                this.operatorLog(`  1. Open ${manual}`);
+                this.operatorLog('  2. Approve, then pass the code it shows to finish_login.');
+                await reportProgress?.({
+                    message: `No browser could be opened. Open ${manual}, approve, then pass the code it shows to finish_login.`,
+                });
+                return { kind: 'manual', authorizeUrl: manual };
+            }
+            // Carries no URL, no challenge, and no state -- see the note above.
+            await reportProgress?.({
+                message: 'Waiting for you to approve the login in your browser...',
+            });
+            this.operatorLog('benchmaxx-arena login: waiting for you to approve it in your browser...');
+            code = await listener.waitForCode(state, { signal });
+        }
+        finally {
+            await listener.close();
+        }
+        // The code is unredeemed at this point, so bailing here spends nothing.
+        throwIfAborted(signal);
+        return this.redeem(code, verifier, signal);
+    }
+    /**
+     * Finish a login that fell back to the manual path, with the code the browser
+     * displayed.
+     *
+     * The pending verifier lives in memory only, so a restart of this process
+     * voids a pending manual login and the human runs `login` again.
+     */
+    async finishLogin(code) {
+        const pending = this.pending;
+        if (!pending) {
+            throw new Error('no login is pending — run the login tool first.');
+        }
+        const trimmed = code.trim();
+        // Fail a mistyped paste here rather than spending a round trip on it. The
+        // message quotes no part of the code.
+        if (!CODE_PATTERN.test(trimmed)) {
+            throw new Error('that does not look like a login code — it is 64 hexadecimal characters. Copy it from the authorize page exactly.');
+        }
+        const outcome = await this.redeem(trimmed, pending.verifier);
+        // Cleared only on success, so a rejected paste can be retried against the
+        // same pending flow.
+        this.pending = undefined;
+        return outcome;
+    }
+    /**
+     * Exchange a one-time code and the verifier for an API key, then store it.
+     *
+     * Neither the code, the verifier, nor the token appears in any message or
+     * error raised here.
+     */
+    async redeem(code, verifier, signal) {
+        let response;
+        try {
+            response = await this.request('/v1/auth/cli/redeem', {
+                method: 'POST',
+                body: { code, verifier },
+                signal,
+            });
+        }
+        catch (error) {
+            // The endpoint answers Unauthenticated for an unknown, used, or expired
+            // code and for a wrong verifier alike. No stored key is involved, so this
+            // must not reach the generic 401 "key revoked" mapping.
+            if (error instanceof ApiError && error.status === 401) {
+                throw new CliRedeemFailed();
+            }
+            throw error;
+        }
+        if (!response.token || !response.username) {
+            throw new Error('the arena accepted the login but returned no key — run the login tool again.');
+        }
+        const username = response.username;
+        // The account-confusion guard. PKCE binds the code to the verifier, but the
+        // challenge is not secret, so a code minted against SOMEONE ELSE'S account
+        // can satisfy this flow's verifier and silently move the user into their
+        // account. This check does not depend on the challenge staying secret.
+        const existing = await this.store.get(this.origin);
+        if (existing && existing.username && existing.username !== username) {
+            throw new Error(`that login is for ${username}, but a key for ${existing.username} is already stored for this arena. Run the logout tool first if you meant to switch accounts.`);
+        }
+        // The redemption succeeded, but the caller may have cancelled while it was
+        // in flight. Writing the key now would persist a credential for a login the
+        // caller abandoned.
+        throwIfAborted(signal);
+        await this.store.set(this.origin, {
+            token: response.token,
+            keyId: response.id ?? '',
+            keyPrefix: response.prefix ?? '',
+            username,
+        });
+        // Always report the identity, so an unexpected account is visible rather
+        // than silent.
+        return {
+            kind: 'completed',
+            username,
+            keyPrefix: response.prefix ?? '',
+            expiresAt: response.expiresAt ?? '',
+        };
+    }
+    /** List the caller's API keys (bearer). */
+    async listApiKeys() {
+        return this.request('/v1/auth/keys', { bearer: true });
+    }
+    // --- Public reads ---------------------------------------------------------
+    async getCatalog() {
+        return this.request('/v1/catalog');
+    }
+    async getLeaderboard(params) {
+        const query = new URLSearchParams();
+        if (params.benchmark)
+            query.set('benchmark', params.benchmark);
+        if (params.variant)
+            query.set('variant', params.variant);
+        if (params.class)
+            query.set('class', params.class);
+        if (params.orderBy)
+            query.set('orderBy', params.orderBy);
+        if (params.asc !== undefined)
+            query.set('asc', String(params.asc));
+        if (params.limit !== undefined)
+            query.set('limit', String(params.limit));
+        if (params.offset !== undefined)
+            query.set('offset', String(params.offset));
+        if (params.username)
+            query.set('username', params.username);
+        if (params.model)
+            query.set('model', params.model);
+        if (params.harness)
+            query.set('harness', params.harness);
+        if (params.harnessVersion)
+            query.set('harnessVersion', params.harnessVersion);
+        const qs = query.toString();
+        return this.request(`/v1/leaderboard${qs ? `?${qs}` : ''}`);
+    }
+    async getInsights(params = {}) {
+        const query = new URLSearchParams();
+        if (params.benchmark)
+            query.set('benchmark', params.benchmark);
+        if (params.variant)
+            query.set('variant', params.variant);
+        if (params.class)
+            query.set('class', params.class);
+        if (params.model)
+            query.set('model', params.model);
+        const qs = query.toString();
+        return this.request(`/v1/insights${qs ? `?${qs}` : ''}`);
+    }
+    async getAccountingStatus() {
+        return this.request('/v1/accounting/status');
+    }
+    async listBenchmarks() {
+        return this.request('/v1/benchmarks');
+    }
+    async getBenchmark(id) {
+        return this.request(`/v1/benchmarks/${encodePath(id)}`);
+    }
+    async getSubmission(id) {
+        return this.request(`/v1/submissions/${encodePath(id)}`);
+    }
+    async getSubmissionConfig(id) {
+        return this.request(`/v1/submissions/${encodePath(id)}/config`);
+    }
+    // --- Bearer reads & writes ------------------------------------------------
+    /**
+     * Create a prompt_only submission. This is the one tool call that spends
+     * money, and MCP hosts retry a tool call whose response they never saw, so it
+     * always carries an `idempotencyKey`: without one a retried submit bills a
+     * second run. The caller may supply the key to keep retry identity stable
+     * across its own reattempts; otherwise a fresh UUID is generated per call.
+     */
+    async submitPrompt(params) {
+        return this.request('/v1/submissions', {
+            method: 'POST',
+            bearer: true,
+            body: {
+                prompt: {
+                    benchmarkVariantId: params.benchmarkVariantId,
+                    model: params.model,
+                    systemPrompt: params.systemPrompt,
+                },
+                idempotencyKey: params.idempotencyKey ?? this.newIdempotencyKey(),
+            },
+        });
+    }
+    async listMySubmissions() {
+        return this.request('/v1/me/submissions', { bearer: true });
+    }
+    async listRuns(params = {}) {
+        const query = new URLSearchParams();
+        if (params.submissionId)
+            query.set('submissionId', params.submissionId);
+        if (params.pageSize !== undefined)
+            query.set('pageSize', String(params.pageSize));
+        if (params.pageToken)
+            query.set('pageToken', params.pageToken);
+        const qs = query.toString();
+        return this.request(`/v1/runs${qs ? `?${qs}` : ''}`, { bearer: true });
+    }
+    async getRun(id) {
+        return this.request(`/v1/runs/${encodePath(id)}`, { bearer: true });
+    }
+    /**
+     * Read persisted run events after a sequence number.
+     *
+     * This calls the UNARY `GET /v1/runs/{id}/timeline`. The server-streaming
+     * GetRunEvents RPC is still Unimplemented (501) and pinned that way by a test
+     * — the in-process grpc-gateway cannot serve a stream — so the timeline is the
+     * sanctioned reader for the same persisted events. Being unary, it needs no
+     * abort timeout, event cap, or byte cap: the server bounds the page and
+     * returns `nextSeq` as the resume cursor.
+     */
+    async getRunTimeline(id, options = {}) {
+        const query = new URLSearchParams();
+        if (options.sinceSeq !== undefined)
+            query.set('sinceSeq', options.sinceSeq);
+        const qs = query.toString();
+        return this.request(`/v1/runs/${encodePath(id)}/timeline${qs ? `?${qs}` : ''}`, { bearer: true, signal: options.signal });
+    }
+    /** Read run stdout/stderr chunks after a sequence number. */
+    async getRunLog(id, options = {}) {
+        const query = new URLSearchParams();
+        if (options.sinceSeq !== undefined)
+            query.set('sinceSeq', options.sinceSeq);
+        const qs = query.toString();
+        return this.request(`/v1/runs/${encodePath(id)}/log${qs ? `?${qs}` : ''}`, {
+            bearer: true,
+            signal: options.signal,
+        });
+    }
+    /**
+     * Request cancellation of a run. Asynchronous: the response reports that the
+     * request was recorded, not that the run has stopped. Work already billed
+     * stays billed.
+     */
+    async cancelRun(runId, params = {}) {
+        return this.request(`/v1/runs/${encodePath(runId)}/cancel`, {
+            method: 'POST',
+            bearer: true,
+            body: {
+                reason: params.reason ?? '',
+                requestId: params.requestId ?? this.newIdempotencyKey(),
+            },
+        });
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAsBH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAyB,MAAM,sBAAsB,CAAA;AAC5D,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AACrF,OAAO,EAAyB,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AA0E5D,+EAA+E;AAC/E,MAAM,YAAY,GAAG,gBAAgB,CAAA;AAErC,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,cAAc,CAAC,MAA+B;IACrD,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,cAAc,EAAE,CAAA;IAC5B,CAAC;AACH,CAAC;AAED,MAAM,OAAO,WAAW;IACL,MAAM,CAAQ;IACd,KAAK,CAAW;IAChB,KAAK,CAAqB;IAC1B,WAAW,CAAa;IACxB,aAAa,CAAe;IAC5B,WAAW,CAAa;IACxB,iBAAiB,CAAc;IAEhD;;;;;;OAMG;IACK,OAAO,CAA0B;IAEzC,YAAY,IAAgB;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QACvB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAA;QACpF,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAAA;QAChE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;QACpE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,CAAA;IACzE,CAAC;IAED,6EAA6E;IAErE,KAAK,CAAC,OAAO,CACnB,IAAY,EACZ,UAKI,EAAE;QAEN,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAA;QACtE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAA;QAC9C,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAA;YACjD,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,UAAU,CAAC,KAAK,EAAE,CAAA;QACzD,CAAC;QAED,IAAI,GAAkB,CAAA;QACtB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,EAAE;gBAC9C,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;gBAC/B,OAAO;gBACP,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC3E,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,qCAAqC;YACrC,MAAM,IAAI,YAAY,CAAC,cAAc,CAAC,CAAA;QACxC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAC7B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QACtE,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,SAAc,CAAA;QACvB,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAA;IAC9B,CAAC;IAEO,aAAa,CAAC,IAAY,EAAE,MAAc;QAChD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAA;gBAC5C,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACzD,OAAO,MAAM,CAAC,OAAO,CAAA;gBACvB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;QACD,OAAO,8BAA8B,MAAM,EAAE,CAAA;IAC/C,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACpD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;QAC9C,CAAC;QACD,OAAO,UAAU,CAAA;IACnB,CAAC;IAED,6EAA6E;IAE7E,sDAAsD;IACtD,KAAK,CAAC,iBAAiB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACpC,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvC,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,KAAK,CACT,UAAqE,EAAE;QAEvE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAA;QAC1C,cAAc,CAAC,MAAM,CAAC,CAAA;QAEtB,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAA;QAChD,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAA;QAEhC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;QAC3C,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YACH,yEAAyE;YACzE,kDAAkD;YAClD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;YAC3D,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAA;YAC/D,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;YACrD,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YAE7C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;gBACvD,sEAAsE;gBACtE,uEAAuE;gBACvE,kEAAkE;gBAClE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAA;gBACvC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;gBACzC,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAA;gBACnC,IAAI,CAAC,OAAO,GAAG,EAAE,QAAQ,EAAE,CAAA;gBAE3B,IAAI,CAAC,WAAW,CAAC,oDAAoD,CAAC,CAAA;gBACtE,IAAI,CAAC,WAAW,CAAC,aAAa,MAAM,EAAE,CAAC,CAAA;gBACvC,IAAI,CAAC,WAAW,CAAC,4DAA4D,CAAC,CAAA;gBAC9E,MAAM,cAAc,EAAE,CAAC;oBACrB,OAAO,EAAE,oCAAoC,MAAM,yDAAyD;iBAC7G,CAAC,CAAA;gBACF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,CAAA;YACjD,CAAC;YAED,oEAAoE;YACpE,MAAM,cAAc,EAAE,CAAC;gBACrB,OAAO,EAAE,yDAAyD;aACnE,CAAC,CAAA;YACF,IAAI,CAAC,WAAW,CAAC,yEAAyE,CAAC,CAAA;YAE3F,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QACtD,CAAC;gBAAS,CAAC;YACT,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAA;QACxB,CAAC;QAED,wEAAwE;QACxE,cAAc,CAAC,MAAM,CAAC,CAAA;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC5C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,IAAY;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;QACpE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,0EAA0E;QAC1E,sCAAsC;QACtC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,kHAAkH,CACnH,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC5D,0EAA0E;QAC1E,qBAAqB;QACrB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;QACxB,OAAO,OAAO,CAAA;IAChB,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,MAAM,CAClB,IAAY,EACZ,QAAgB,EAChB,MAAoB;QAEpB,IAAI,QAAwC,CAAA;QAC5C,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAiC,qBAAqB,EAAE;gBACnF,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,MAAM;aACP,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wEAAwE;YACxE,0EAA0E;YAC1E,wDAAwD;YACxD,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACtD,MAAM,IAAI,eAAe,EAAE,CAAA;YAC7B,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAA;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAA;QAElC,4EAA4E;QAC5E,2EAA2E;QAC3E,yEAAyE;QACzE,uEAAuE;QACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,mBAAmB,QAAQ,CAAC,QAAQ,+FAA+F,CACjK,CAAA;QACH,CAAC;QAED,2EAA2E;QAC3E,4EAA4E;QAC5E,oBAAoB;QACpB,cAAc,CAAC,MAAM,CAAC,CAAA;QAEtB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;YAChC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,KAAK,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE;YACxB,SAAS,EAAE,QAAQ,CAAC,MAAM,IAAI,EAAE;YAChC,QAAQ;SACT,CAAC,CAAA;QACF,yEAAyE;QACzE,eAAe;QACf,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,QAAQ;YACR,SAAS,EAAE,QAAQ,CAAC,MAAM,IAAI,EAAE;YAChC,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,EAAE;SACpC,CAAA;IACH,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,OAAO,CAAsB,eAAe,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7E,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,OAAO,CAAkB,aAAa,CAAC,CAAA;IACrD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAYpB;QACC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;QACnC,IAAI,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;QAC9D,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACxD,IAAI,MAAM,CAAC,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QAClD,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACxD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QAClE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACxE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QAC3E,IAAI,MAAM,CAAC,QAAQ;YAAE,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC3D,IAAI,MAAM,CAAC,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QAClD,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACxD,IAAI,MAAM,CAAC,cAAc;YAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,cAAc,CAAC,CAAA;QAC7E,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAA;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAsB,kBAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAClF,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAmF,EAAE;QAErF,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;QACnC,IAAI,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;QAC9D,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACxD,IAAI,MAAM,CAAC,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QAClD,IAAI,MAAM,CAAC,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QAClD,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAA;QAC3B,OAAO,IAAI,CAAC,OAAO,CAA8B,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACvF,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,OAAO,IAAI,CAAC,OAAO,CAA8B,uBAAuB,CAAC,CAAA;IAC3E,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC,OAAO,CAAyB,gBAAgB,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAuB,kBAAkB,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC/E,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAqB,mBAAmB,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC9E,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,EAAU;QAClC,OAAO,IAAI,CAAC,OAAO,CAA2B,mBAAmB,UAAU,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;IAC3F,CAAC;IAED,6EAA6E;IAE7E;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAAC,MAKlB;QACC,OAAO,IAAI,CAAC,OAAO,CAA2B,iBAAiB,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE;gBACJ,MAAM,EAAE;oBACN,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;oBAC7C,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC;gBACD,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,iBAAiB,EAAE;aAClE;SACF,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,OAAO,IAAI,CAAC,OAAO,CAA4B,oBAAoB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACxF,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAA2E,EAAE;QAE7E,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;QACnC,IAAI,MAAM,CAAC,YAAY;YAAE,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;QACvE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;QACjF,IAAI,MAAM,CAAC,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;QAC9D,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAA;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAmB,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,OAAO,IAAI,CAAC,OAAO,CAAiB,YAAY,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IACrF,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,cAAc,CAClB,EAAU,EACV,UAAuD,EAAE;QAEzD,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;QACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC3E,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAA;QAC3B,OAAO,IAAI,CAAC,OAAO,CACjB,YAAY,UAAU,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAC1D,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CACzC,CAAA;IACH,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,SAAS,CACb,EAAU,EACV,UAAuD,EAAE;QAEzD,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;QACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC3E,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAA;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAoB,YAAY,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE;YAC5F,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CACb,KAAa,EACb,SAAkD,EAAE;QAEpD,OAAO,IAAI,CAAC,OAAO,CAAoB,YAAY,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE;gBACJ,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;gBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,iBAAiB,EAAE;aACxD;SACF,CAAC,CAAA;IACJ,CAAC;CACF"}

package/dist/config.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Configuration for the benchmaxx-arena MCP server.
+ *
+ * The only knob is the base-URL origin. `BENCHMAXX_ARENA_URL` overrides it;
+ * only the origin (scheme, host, port) is used, any path is dropped. The
+ * default is production. A bearer key travels on this transport, so the scheme
+ * must be `https`, with the single exception of `http://localhost` and
+ * `http://127.0.0.1` for local development.
+ */
+export declare const PRODUCTION_ORIGIN = "https://harnessarena.xyz";
+export declare const ARENA_URL_ENV = "BENCHMAXX_ARENA_URL";
+/**
+ * Normalize a raw URL string to its origin. Throws on a malformed URL or a
+ * scheme that would send a credential in cleartext to a non-loopback host.
+ */
+export declare function normalizeOrigin(raw: string): string;
+export interface Config {
+    /** Base-URL origin. All API paths are relative to this. */
+    origin: string;
+}
+/**
+ * Resolve the configuration from an environment map. Defaults to production
+ * when the override is absent or empty.
+ */
+export declare function loadConfig(env?: NodeJS.ProcessEnv): Config;