@openrig/cli 0.6.14 → 0.7.1

package/dist/lib/bundle-check.js

@@ -35,11 +35,18 @@ export async function checkBundleFolder(folder) {
         const rel = path.relative(root, file);
         return rel !== ".." && !rel.startsWith(`..${path.sep}`) && !path.isAbsolute(rel);
     };
-    const fileRead = (relative, base = root) => {
+    const fileRead = (relative, base = root, expected = "file") => {
         try {
             const full = fs.realpathSync(path.resolve(base, relative));
             if (!within(full))
                 throw new Error();
+            const kind = fs.statSync(full);
+            if (expected === "directory" ? !kind.isDirectory() : expected === "file" ? !kind.isFile() : !kind.isFile() && !kind.isDirectory()) {
+                const actual = kind.isDirectory() ? "a directory" : kind.isFile() ? "a file" : "a special file";
+                const wanted = expected === "either" ? "a file or directory" : `a ${expected}`;
+                add("referenced_files", "finding", `Declared file is ${actual}, expected ${wanted}.`, path.relative(root, path.resolve(base, relative)));
+                return null;
+            }
             fs.accessSync(full, fs.constants.R_OK);
             return full;
         }
@@ -88,7 +95,7 @@ export async function checkBundleFolder(folder) {
             add("portable_agents", "finding", "Agent refs and imports must be local paths inside this bundle folder.");
             return;
         }
-        const dir = fileRead(ref.slice(6), from);
+        const dir = fileRead(ref.slice(6), from, "directory");
         if (!dir) {
             agentFindings++;
             return;
@@ -118,9 +125,10 @@ export async function checkBundleFolder(folder) {
                     continue;
                 for (const entry of entries) {
                     if (typeof entry.path === "string")
-                        fileRead(entry.path, dir);
-                    else if (entry.source?.kind === "local" && typeof entry.source.path === "string")
-                        fileRead(entry.source.path, dir);
+                        fileRead(entry.path, dir, "either");
+                    // openrig-home: resolves under the installing daemon's OpenRig home (agent-spec "Plugin paths"), not in this folder.
+                    else if (entry.source?.kind === "local" && typeof entry.source.path === "string" && !entry.source.path.startsWith("openrig-home:"))
+                        fileRead(entry.source.path, dir, "either");
                     else if (entry.source)
                         add("host_resources", "not_checked", "Host-resolved plugin/resource availability is checked at launch, not by this author check.", path.relative(root, dir));
                 }

package/dist/lib/bundle-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"bundle-check.js","sourceRoot":"","sources":["../../src/lib/bundle-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACrH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAS3D,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc;IACpD,MAAM,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IACvK,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,MAAuB,EAAE,MAAc,EAAE,IAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjK,MAAM,MAAM,GAAG,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACzE,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,kBAAkB,CAAC;YAAE,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,gDAAgD,CAAC,CAAC;QAC1P,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,IAAI,IAAY,CAAC;IACjB,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAClE,IAAI,GAAG,SAAS,CAAC,IAAI,CAA4B,CAAC;QAClD,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,eAAe,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uDAAuD,EAAE,UAAU,CAAC,CAAC;YAChI,OAAO,UAAU,EAAE,CAAC;QACtB,CAAC;QACD,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,0CAA0C,EAAE,UAAU,CAAC,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,eAAe,EAAE,SAAS,EAAE,uCAAuC,EAAE,UAAU,CAAC,CAAC;QACrF,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,IAAY,EAAW,EAAE;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,IAAI,GAAG,IAAI,EAAiB,EAAE;QAChE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YACrC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,EAAE,oEAAoE,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IACvL,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpH,GAAG,CAAC,gBAAgB,EAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,oDAAoD,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC;IAC5L,GAAG,CAAC,iBAAiB,EAAE,aAAa,EAAE,yJAAyJ,CAAC,CAAC;IACjM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE7E,sFAAsF;IACtF,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,IAAI,GAAG,IAAI,EAAQ,EAAE;QACzD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO;QAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,MAAM,KAAK,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC3F,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACpD,KAAK,MAAM,IAAI,IAAK,CAA0C,CAAC,KAAK,IAAI,EAAE;oBAAE,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;wBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3I,CAAC;YACD,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,cAAc,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;iBACtF,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;IACF,YAAY,CAAC,IAAI,CAAC,CAAC;IAEnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,KAAK,GAAG,CAAC,GAAY,EAAE,IAAI,GAAG,IAAI,EAAQ,EAAE;QAChD,IAAI,GAAG,KAAK,kBAAkB;YAAE,OAAO;QACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,aAAa,EAAE,CAAC;YAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,EAAE,uEAAuE,CAAC,CAAC;YAAC,OAAO;QACtI,CAAC;QACD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,aAAa,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QACtC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAAC,aAAa,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,aAAa,EAAE,CAAC;gBAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACpI,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAA+E,CAAC;YACxG,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACrB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;gBACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;oBAAE,SAAS;gBACtC,KAAK,MAAM,KAAK,IAAI,OAA8E,EAAE,CAAC;oBACnG,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;yBACzD,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,OAAO,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;wBAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;yBAC9G,IAAI,KAAK,CAAC,MAAM;wBAAE,GAAG,CAAC,gBAAgB,EAAE,aAAa,EAAE,4FAA4F,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtL,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YAAC,aAAa,EAAE,CAAC;YAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,EAAE,6CAA6C,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAAC,CAAC;IAC1I,CAAC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAyD;QAAE,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO;YAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5I,IAAI,CAAC,aAAa;QAAE,GAAG,CAAC,iBAAiB,EAAE,MAAM,EAAE,sFAAsF,CAAC,CAAC;IAC3I,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,kBAAkB,CAAC;QAAE,GAAG,CAAC,kBAAkB,EAAE,MAAM,EAAE,gFAAgF,CAAC,CAAC;IAElM,IAAI,CAAC;QAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,EAAE,2DAA2D,CAAC,CAAC;IAAC,CAAC;IAClI,OAAO,GAAG,EAAE,CAAC;QAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,EAAG,GAAa,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAAC,CAAC;IAC1F,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;YAC9D,2BAA2B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;QACD,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,2DAA2D,CAAC,CAAC,CAAC,kEAAkE,CAAC,CAAC;IAC7K,CAAC;IAAC,MAAM,CAAC;QAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,2EAA2E,EAAE,qBAAqB,CAAC,CAAC;IAAC,CAAC;IAEjJ,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;YACjC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACjE,IAAI,EAAE,YAAY,GAAG,MAAM;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;oBAAE,SAAS,CAAC,sBAAsB;gBAC5F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;oBAAC,GAAG,CAAC,kBAAkB,EAAE,aAAa,EAAE,kCAAkC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAChJ,IAAI,KAAK,CAAC,WAAW,EAAE;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC;qBAC/B,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;oBAAC,SAAS,EAAE,CAAC;oBAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,0EAA0E,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;gBAAC,CAAC;YACnT,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,CAAC;QACX,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,kBAAkB,CAAC;YAAE,GAAG,CAAC,kBAAkB,EAAE,MAAM,EAAE,2FAA2F,CAAC,CAAC;IACrM,CAAC;IAAC,MAAM,CAAC;QAAC,GAAG,CAAC,kBAAkB,EAAE,aAAa,EAAE,sEAAsE,CAAC,CAAC;IAAC,CAAC;IAC3H,GAAG,CAAC,kBAAkB,EAAE,aAAa,EAAE,uHAAuH,CAAC,CAAC;IAChK,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"bundle-check.js","sourceRoot":"","sources":["../../src/lib/bundle-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACrH,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAS3D,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAc;IACpD,MAAM,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IACvK,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,MAAuB,EAAE,MAAc,EAAE,IAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjK,MAAM,MAAM,GAAG,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACzE,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,kBAAkB,CAAC;YAAE,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,gDAAgD,CAAC,CAAC;QAC1P,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,IAAI,IAAY,CAAC;IACjB,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAClE,IAAI,GAAG,SAAS,CAAC,IAAI,CAA4B,CAAC;QAClD,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,eAAe,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uDAAuD,EAAE,UAAU,CAAC,CAAC;YAChI,OAAO,UAAU,EAAE,CAAC;QACtB,CAAC;QACD,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,0CAA0C,EAAE,UAAU,CAAC,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,eAAe,EAAE,SAAS,EAAE,uCAAuC,EAAE,UAAU,CAAC,CAAC;QACrF,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,IAAY,EAAW,EAAE;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,IAAI,GAAG,IAAI,EAAE,WAA4C,MAAM,EAAiB,EAAE;QACpH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBAClI,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC;gBAChG,MAAM,MAAM,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC/E,GAAG,CAAC,kBAAkB,EAAE,SAAS,EAAE,oBAAoB,MAAM,cAAc,MAAM,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACzI,OAAO,IAAI,CAAC;YACd,CAAC;YACD,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,EAAE,oEAAoE,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IACvL,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpH,GAAG,CAAC,gBAAgB,EAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,oDAAoD,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC;IAC5L,GAAG,CAAC,iBAAiB,EAAE,aAAa,EAAE,yJAAyJ,CAAC,CAAC;IACjM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE7E,sFAAsF;IACtF,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,IAAI,GAAG,IAAI,EAAQ,EAAE;QACzD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO;QAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,MAAM,KAAK,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC3F,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACpD,KAAK,MAAM,IAAI,IAAK,CAA0C,CAAC,KAAK,IAAI,EAAE;oBAAE,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;wBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3I,CAAC;YACD,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,cAAc,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;iBACtF,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;IACF,YAAY,CAAC,IAAI,CAAC,CAAC;IAEnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,KAAK,GAAG,CAAC,GAAY,EAAE,IAAI,GAAG,IAAI,EAAQ,EAAE;QAChD,IAAI,GAAG,KAAK,kBAAkB;YAAE,OAAO;QACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,aAAa,EAAE,CAAC;YAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,EAAE,uEAAuE,CAAC,CAAC;YAAC,OAAO;QACtI,CAAC;QACD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,aAAa,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QACtC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC,YAAY,EAAE,CAAC;gBAAC,aAAa,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,aAAa,EAAE,CAAC;gBAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACpI,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAA+E,CAAC;YACxG,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACrB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;gBACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;oBAAE,SAAS;gBACtC,KAAK,MAAM,KAAK,IAAI,OAA8E,EAAE,CAAC;oBACnG,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;oBACxE,qHAAqH;yBAChH,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,OAAO,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;wBAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;yBAC1K,IAAI,KAAK,CAAC,MAAM;wBAAE,GAAG,CAAC,gBAAgB,EAAE,aAAa,EAAE,4FAA4F,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtL,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YAAC,aAAa,EAAE,CAAC;YAAC,GAAG,CAAC,iBAAiB,EAAE,SAAS,EAAE,6CAA6C,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAAC,CAAC;IAC1I,CAAC,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAyD;QAAE,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO;YAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5I,IAAI,CAAC,aAAa;QAAE,GAAG,CAAC,iBAAiB,EAAE,MAAM,EAAE,sFAAsF,CAAC,CAAC;IAC3I,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,kBAAkB,CAAC;QAAE,GAAG,CAAC,kBAAkB,EAAE,MAAM,EAAE,gFAAgF,CAAC,CAAC;IAElM,IAAI,CAAC;QAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,EAAE,2DAA2D,CAAC,CAAC;IAAC,CAAC;IAClI,OAAO,GAAG,EAAE,CAAC;QAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,EAAG,GAAa,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAAC,CAAC;IAC1F,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;YAC9D,2BAA2B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;QACD,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,2DAA2D,CAAC,CAAC,CAAC,kEAAkE,CAAC,CAAC;IAC7K,CAAC;IAAC,MAAM,CAAC;QAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,2EAA2E,EAAE,qBAAqB,CAAC,CAAC;IAAC,CAAC;IAEjJ,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,GAAW,EAAQ,EAAE;YACjC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACjE,IAAI,EAAE,YAAY,GAAG,MAAM;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;oBAAE,SAAS,CAAC,sBAAsB;gBAC5F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;oBAAC,GAAG,CAAC,kBAAkB,EAAE,aAAa,EAAE,kCAAkC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAChJ,IAAI,KAAK,CAAC,WAAW,EAAE;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC;qBAC/B,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;oBAAC,SAAS,EAAE,CAAC;oBAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,EAAE,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,0EAA0E,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;gBAAC,CAAC;YACnT,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,CAAC;QACX,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,kBAAkB,CAAC;YAAE,GAAG,CAAC,kBAAkB,EAAE,MAAM,EAAE,2FAA2F,CAAC,CAAC;IACrM,CAAC;IAAC,MAAM,CAAC;QAAC,GAAG,CAAC,kBAAkB,EAAE,aAAa,EAAE,sEAAsE,CAAC,CAAC;IAAC,CAAC;IAC3H,GAAG,CAAC,kBAAkB,EAAE,aAAa,EAAE,uHAAuH,CAAC,CAAC;IAChK,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/lib/run-on-host.d.ts

@@ -0,0 +1,29 @@
+import { type CrossHostResult, type RunCrossHostCommandOpts } from "../cross-host-executor.js";
+import { type LifecycleDeps } from "../daemon-lifecycle.js";
+import { loadHostRegistry, type HostEntry } from "../host-registry.js";
+export interface RunOnHostDeps {
+    hostRegistryLoader?: typeof loadHostRegistry;
+    crossHostRun?: (host: HostEntry, argv: readonly string[], opts?: RunCrossHostCommandOpts) => Promise<CrossHostResult>;
+    /** This host's id, for the origin (default: its persisted identity; undefined when it can't be read). */
+    selfHostId?: () => Promise<string | undefined>;
+}
+/** This machine's persisted host id, read as `rig send --host` reads it: never from the daemon endpoint, which
+ *  OPENRIG_URL may point at another machine, and readable during a daemon outage. Undefined when it can't be read. */
+export declare function localSelfHostId(deps: LifecycleDeps): Promise<string | undefined>;
+/** The origin as `rig send` carries it: `<member>@<rig>@<selfHostId>`, adding this host's id only to a two-part name,
+ *  so the other machine never takes it for one of its own seats. An upstream full triple is kept as given. */
+export declare function originFor(seat: string | undefined, selfHostId: (() => Promise<string | undefined>) | undefined): Promise<string | undefined>;
+export interface RunOnHostOptions {
+    /** The calling seat's origin (see `originFor`). */
+    origin?: string;
+    /** For a command that changes something there: the read that shows whether it ran, when the connection is lost. */
+    changes?: {
+        check: string;
+    };
+    json?: boolean;
+}
+/** Run `rig <argv>` on `hostId`'s SSH entry as `origin`. The remote command's stdout, stderr and exit status come back
+ *  as its own, so `--json` stays its JSON. A lost connection on a changing command is an unknown outcome, never a
+ *  failure: the command may have run there, so the answer names what to read before repeating it. */
+export declare function runOnSshHost(hostId: string, command: string, argv: readonly string[], opts: RunOnHostOptions, deps?: RunOnHostDeps): Promise<void>;
+//# sourceMappingURL=run-on-host.d.ts.map

package/dist/lib/run-on-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-on-host.d.ts","sourceRoot":"","sources":["../../src/lib/run-on-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,eAAe,EAAE,KAAK,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAEpH,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAqB,gBAAgB,EAAe,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAOvG,MAAM,WAAW,aAAa;IAC5B,kBAAkB,CAAC,EAAE,OAAO,gBAAgB,CAAC;IAC7C,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,uBAAuB,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IACtH,yGAAyG;IACzG,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAChD;AAED;sHACsH;AACtH,wBAAsB,eAAe,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEtF;AAED;8GAC8G;AAC9G,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,UAAU,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAKlJ;AAED,MAAM,WAAW,gBAAgB;IAC/B,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mHAAmH;IACnH,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;qGAEqG;AACrG,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyC5J"}

package/dist/lib/run-on-host.js

@@ -0,0 +1,69 @@
+import { runCrossHostCommand } from "../cross-host-executor.js";
+import { emitCrossHostError, emitCrossHostFailure } from "../cross-host-cli-helpers.js";
+import { resolveOriginSelfHostId } from "../daemon-lifecycle.js";
+import { hostDisplayTarget, loadHostRegistry, resolveHost } from "../host-registry.js";
+/** This machine's persisted host id, read as `rig send --host` reads it: never from the daemon endpoint, which
+ *  OPENRIG_URL may point at another machine, and readable during a daemon outage. Undefined when it can't be read. */
+export async function localSelfHostId(deps) {
+    return resolveOriginSelfHostId(deps).catch(() => undefined);
+}
+/** The origin as `rig send` carries it: `<member>@<rig>@<selfHostId>`, adding this host's id only to a two-part name,
+ *  so the other machine never takes it for one of its own seats. An upstream full triple is kept as given. */
+export async function originFor(seat, selfHostId) {
+    if (!seat)
+        return undefined;
+    if (seat.split("@").length >= 3 || !selfHostId)
+        return seat;
+    const id = await selfHostId().catch(() => undefined);
+    return id ? `${seat}@${id}` : seat;
+}
+/** Run `rig <argv>` on `hostId`'s SSH entry as `origin`. The remote command's stdout, stderr and exit status come back
+ *  as its own, so `--json` stays its JSON. A lost connection on a changing command is an unknown outcome, never a
+ *  failure: the command may have run there, so the answer names what to read before repeating it. */
+export async function runOnSshHost(hostId, command, argv, opts, deps = {}) {
+    const registry = (deps.hostRegistryLoader ?? loadHostRegistry)();
+    if (!registry.ok) {
+        emitCrossHostError(hostId, "registry-load-failed", registry.error, opts.json);
+        return;
+    }
+    const resolved = resolveHost(registry.registry, hostId);
+    if (!resolved.ok) {
+        emitCrossHostError(hostId, "unknown-host", resolved.error, opts.json);
+        return;
+    }
+    const host = resolved.host;
+    if (host.transport !== "ssh") {
+        emitCrossHostError(host.id, "transport-unsupported", `rig ${command} --host ${host.id}: that entry reaches the machine over ${host.transport}, which can't run ${command} there. `
+            + `Name the same machine's SSH entry instead (rig host list shows each entry's transport), or run rig ${command} on that machine.`, opts.json);
+        return;
+    }
+    const target = hostDisplayTarget(host);
+    const result = await (deps.crossHostRun ?? runCrossHostCommand)(host, ["rig", ...argv], opts.origin ? { originTriple: opts.origin } : {});
+    console.error(`[via host=${host.id} (${target})]`);
+    if (result.ok || result.failedStep === "remote-command-failed" || result.failedStep === "remote-command-not-found" || result.failedStep === "remote-daemon-unreachable") {
+        // The remote shell answered: its output and status are the answer, refusals included.
+        if (result.stdout)
+            process.stdout.write(result.stdout);
+        if (result.stderr)
+            process.stderr.write(result.stderr);
+        if (!result.ok && result.failedStep === "remote-command-not-found")
+            console.error(result.hint);
+        if (!result.ok)
+            process.exitCode = result.remoteExitCode || 1;
+        return;
+    }
+    if (result.failedStep === "ssh-unreachable" && opts.changes) {
+        const error = `the connection to host=${host.id} (${target}) failed or dropped, so whether rig ${command} ran there is unknown. `
+            + `Check before repeating it: ${opts.changes.check}`;
+        if (opts.json) {
+            console.log(JSON.stringify({ ok: false, code: "remote-outcome-unknown", cross_host: { host: host.id, target }, failedStep: result.failedStep, error, check: opts.changes.check }));
+        }
+        else {
+            console.error(`remote-outcome-unknown: ${error}`);
+        }
+        process.exitCode = 1;
+        return;
+    }
+    emitCrossHostFailure(host.id, target, result, opts.json);
+}
+//# sourceMappingURL=run-on-host.js.map

package/dist/lib/run-on-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-on-host.js","sourceRoot":"","sources":["../../src/lib/run-on-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAsD,MAAM,2BAA2B,CAAC;AACpH,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACxF,OAAO,EAAE,uBAAuB,EAAsB,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,EAAkB,MAAM,qBAAqB,CAAC;AAcvG;sHACsH;AACtH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAmB;IACvD,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED;8GAC8G;AAC9G,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAwB,EAAE,UAA2D;IACnH,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,EAAE,GAAG,MAAM,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC;AAUD;;qGAEqG;AACrG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,OAAe,EAAE,IAAuB,EAAE,IAAsB,EAAE,OAAsB,EAAE;IAC3I,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,gBAAgB,CAAC,EAAE,CAAC;IACjE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,kBAAkB,CAAC,MAAM,EAAE,sBAAsB,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,kBAAkB,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC7B,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,uBAAuB,EACjD,OAAO,OAAO,WAAW,IAAI,CAAC,EAAE,yCAAyC,IAAI,CAAC,SAAS,qBAAqB,OAAO,UAAU;cAC3H,sGAAsG,OAAO,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACjJ,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1I,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,UAAU,KAAK,uBAAuB,IAAI,MAAM,CAAC,UAAU,KAAK,0BAA0B,IAAI,MAAM,CAAC,UAAU,KAAK,2BAA2B,EAAE,CAAC;QACxK,sFAAsF;QACtF,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,UAAU,KAAK,0BAA0B;YAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,iBAAiB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,0BAA0B,IAAI,CAAC,EAAE,KAAK,MAAM,uCAAuC,OAAO,yBAAyB;cAC7H,8BAA8B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACvD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACrL,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC"}

package/dist/lib/seat-activity.d.ts

@@ -0,0 +1,17 @@
+/** The activity fields a seat's inventory row carries, as the daemon serves them. */
+export interface SeatActivityFields {
+    agentActivity?: {
+        state: string;
+    } | null;
+    activityState?: {
+        display: string;
+        needsInput: {
+            count: number;
+        };
+    } | null;
+    communityHarness?: unknown;
+}
+/** The activity word for a seat, shared by rig ps and the MCP team read. A seat the daemon knows nothing about is
+ *  unknown, never idle. */
+export declare function formatSeatActivity(n: SeatActivityFields): string;
+//# sourceMappingURL=seat-activity.d.ts.map

package/dist/lib/seat-activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-activity.d.ts","sourceRoot":"","sources":["../../src/lib/seat-activity.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACzC,aAAa,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;2BAC2B;AAC3B,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAmBhE"}

package/dist/lib/seat-activity.js

@@ -0,0 +1,29 @@
+/** The activity word for a seat, shared by rig ps and the MCP team read. A seat the daemon knows nothing about is
+ *  unknown, never idle. */
+export function formatSeatActivity(n) {
+    // S19 — render from the served taxonomy state when present: needs-input as
+    // count(+reason), otherwise the bridge's display value. No local arbitration.
+    const tax = n.activityState;
+    if (tax) {
+        if (tax.needsInput.count > 0)
+            return `needs-input x${tax.needsInput.count}`;
+        // A community harness has no needs-input source in that state, so its zero isn't a clearance: a prompt the
+        // screen shows is kept.
+        if (n.communityHarness && n.agentActivity?.state === "needs_input")
+            return "needs-input (screen)";
+        return tax.display;
+    }
+    // Legacy fallback (a daemon without the S19 enrichment) — retires with the
+    // pre-taxonomy surfaces per the ladder-as-migration rule.
+    const activity = n.agentActivity;
+    if (!activity)
+        return "unknown";
+    if (activity.state === "running")
+        return "running";
+    if (activity.state === "needs_input")
+        return "needs_input";
+    if (activity.state === "idle")
+        return "idle";
+    return "unknown";
+}
+//# sourceMappingURL=seat-activity.js.map

package/dist/lib/seat-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-activity.js","sourceRoot":"","sources":["../../src/lib/seat-activity.ts"],"names":[],"mappings":"AAOA;2BAC2B;AAC3B,MAAM,UAAU,kBAAkB,CAAC,CAAqB;IACtD,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC;IAC5B,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;YAAE,OAAO,gBAAgB,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC5E,2GAA2G;QAC3G,wBAAwB;QACxB,IAAI,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,aAAa,EAAE,KAAK,KAAK,aAAa;YAAE,OAAO,sBAAsB,CAAC;QAClG,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,2EAA2E;IAC3E,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,CAAC,CAAC,aAAa,CAAC;IACjC,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,QAAQ,CAAC,KAAK,KAAK,aAAa;QAAE,OAAO,aAAa,CAAC;IAC3D,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAC7C,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/local-daemon-owner.d.ts

@@ -14,6 +14,10 @@ interface OwnerProbeDeps {
     run?: (file: string, args: string[], timeoutMs: number) => Promise<string>;
     timeoutMs?: number;
 }
+export declare function processIdentity(raw: string): {
+    uid: number;
+    start: string;
+} | undefined;
 /** Optional accidental-routing mitigation, not authentication or same-user instance isolation.
  * Trusts the daemon's reported PID/euid, corroborated by ps; it does not prove socket ownership.
  * Every request observes afresh. Repeated observations cannot make the following TCP request atomic. */

package/dist/local-daemon-owner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local-daemon-owner.d.ts","sourceRoot":"","sources":["../src/local-daemon-owner.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,gBAAgB,GACxB;IAAE,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC/E;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,UAAU,cAAc;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAuBD;;wGAEwG;AACxG,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA4ClH;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,0BAA0B;gBAC3B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,KAAK,EAAE,WAAW,GAAG,SAAS,CAAA;KAAE,CAAC;CAIlG"}
+{"version":3,"file":"local-daemon-owner.d.ts","sourceRoot":"","sources":["../src/local-daemon-owner.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,gBAAgB,GACxB;IAAE,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC/E;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,UAAU,cAAc;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAeD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAMvF;AAED;;wGAEwG;AACxG,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA4ClH;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,0BAA0B;gBAC3B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,KAAK,EAAE,WAAW,GAAG,SAAS,CAAA;KAAE,CAAC;CAIlG"}

package/dist/local-daemon-owner.js

@@ -16,7 +16,7 @@ function isLoopbackEndpoint(baseUrl) {
         return false;
     }
 }
-function processIdentity(raw) {
+export function processIdentity(raw) {
     // LC_ALL=C: ps lstart is a stable process-start discriminator, not a PID-only check.
     const match = raw.trim().match(/^(\d+)\s+([A-Z][a-z]{2}\s+[A-Z][a-z]{2}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4})$/);
     if (!match?.[1] || !match[2] || !Number.isFinite(Date.parse(match[2])))

package/dist/local-daemon-owner.js.map

@@ -1 +1 @@
-{"version":3,"file":"local-daemon-owner.js","sourceRoot":"","sources":["../src/local-daemon-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAatC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,MAAM,OAAO,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AACrF,MAAM,OAAO,GAAG,CAAC,CAAS,EAAsB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAE9H,yEAAyE;AACzE,SAAS,kBAAkB,CAAC,OAAe;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACxE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAClD,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,qFAAqF;IACrF,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;IAClH,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO;IAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACvF,CAAC;AAED;;wGAEwG;AACxG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAe,EAAE,OAAuB,EAAE;IACrF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IACxD,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;IACjJ,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,KAAa,EAAE,EAAE;QAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/J,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,EAAE;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3D,IAAI,SAAS,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC9F,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC;IACF,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,CAAC,KAAK,IAA+B,EAAE;gBACrC,MAAM,cAAc,GAAG,KAAK,IAAuD,EAAE;oBACnF,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;wBAAE,OAAO;oBACvE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC3I,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO;oBACvB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAA8C,CAAC;oBAC7E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,IAAK,IAAI,EAAE,GAAc,IAAI,CAAC;2BAC7D,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,IAAK,IAAI,EAAE,IAAe,GAAG,CAAC;wBAAE,OAAO;oBAC7E,OAAO,EAAE,GAAG,EAAE,IAAK,CAAC,GAAa,EAAE,GAAG,EAAE,IAAK,CAAC,IAAc,EAAE,CAAC;gBACjE,CAAC,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAC;gBACxC,IAAI,CAAC,QAAQ;oBAAE,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;gBACzD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC/F,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC;gBAClD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;oBAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC;gBAClF,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;oBAAE,OAAO,OAAO,CAAC,2BAA2B,CAAC,CAAC;gBACvH,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;oBAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBAC1G,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC1F,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;YACjG,CAAC,CAAC,EAAE;YACJ,IAAI,OAAO,CAAmB,OAAO,CAAC,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;SACzI,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAAC,CAAC;YAC9C,CAAC;QAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACtD,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,GAAG,sBAAsB,CAAC;IACvC,YAAY,OAAe,EAAE,KAAoE;QAC/F,KAAK,CAAC,8DAA8D,OAAO,kBAAkB,KAAK,CAAC,GAAG,mBAAmB,KAAK,CAAC,GAAG,8CAA8C,KAAK,CAAC,SAAS,yMAAyM,CAAC,CAAC;QAC1Y,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF"}
+{"version":3,"file":"local-daemon-owner.js","sourceRoot":"","sources":["../src/local-daemon-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAatC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACjC,MAAM,OAAO,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AACrF,MAAM,OAAO,GAAG,CAAC,CAAS,EAAsB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAE9H,yEAAyE;AACzE,SAAS,kBAAkB,CAAC,OAAe;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACxE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAClD,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,qFAAqF;IACrF,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;IAClH,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO;IAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACvF,CAAC;AAED;;wGAEwG;AACxG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAe,EAAE,OAAuB,EAAE;IACrF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IACxD,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC;IACjJ,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,KAAa,EAAE,EAAE;QAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/J,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,KAAK,EAAE,IAAY,EAAE,IAAc,EAAE,EAAE;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3D,IAAI,SAAS,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC9F,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC;IACF,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,CAAC,KAAK,IAA+B,EAAE;gBACrC,MAAM,cAAc,GAAG,KAAK,IAAuD,EAAE;oBACnF,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;wBAAE,OAAO;oBACvE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC3I,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO;oBACvB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAA8C,CAAC;oBAC7E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,IAAK,IAAI,EAAE,GAAc,IAAI,CAAC;2BAC7D,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,IAAK,IAAI,EAAE,IAAe,GAAG,CAAC;wBAAE,OAAO;oBAC7E,OAAO,EAAE,GAAG,EAAE,IAAK,CAAC,GAAa,EAAE,GAAG,EAAE,IAAK,CAAC,IAAc,EAAE,CAAC;gBACjE,CAAC,CAAC;gBACF,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAC;gBACxC,IAAI,CAAC,QAAQ;oBAAE,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;gBACzD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC/F,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC;gBAClD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;oBAAE,OAAO,OAAO,CAAC,qBAAqB,CAAC,CAAC;gBAClF,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;oBAAE,OAAO,OAAO,CAAC,2BAA2B,CAAC,CAAC;gBACvH,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;oBAAE,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBAC1G,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC1F,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;YACjG,CAAC,CAAC,EAAE;YACJ,IAAI,OAAO,CAAmB,OAAO,CAAC,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;SACzI,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAAC,CAAC;YAC9C,CAAC;QAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACtD,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,GAAG,sBAAsB,CAAC;IACvC,YAAY,OAAe,EAAE,KAAoE;QAC/F,KAAK,CAAC,8DAA8D,OAAO,kBAAkB,KAAK,CAAC,GAAG,mBAAmB,KAAK,CAAC,GAAG,8CAA8C,KAAK,CAAC,SAAS,yMAAyM,CAAC,CAAC;QAC1Y,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF"}

package/dist/mcp-http.d.ts

@@ -0,0 +1,42 @@
+import { DaemonClient } from "./client.js";
+/** One caller's grant. Only the token's sha256 is stored. */
+export type McpGrant = {
+    name: string;
+    tokenSha256: string;
+    seat: string;
+    rigs: string[];
+    roots: string[];
+    workspace: boolean;
+    owner: boolean;
+    createdAt: string;
+};
+export declare function mcpTokenFilePath(home?: string): string;
+/** The configured grants, or null when there is no token file (auth not configured). A file that can't be read or parsed,
+ *  or holds a malformed entry, throws: a broken configuration must never read as "no auth". */
+export declare function readGrants(file: string): McpGrant[] | null;
+/** Holds the token file's lock for one read, modify and publish, so a concurrent add and revoke can't each publish a copy
+ *  that drops the other's change. A lock left by a crashed command names itself after the wait. */
+export declare function withGrantsLock<T>(file: string, update: () => T, waitMs?: number): Promise<T>;
+/** Adds a grant and returns its token, which is shown once and never stored. */
+export declare function addGrant(file: string, grant: Omit<McpGrant, "tokenSha256" | "createdAt">): Promise<string>;
+/** Removes a grant; its next request is refused. The file stays, so auth stays configured. */
+export declare function revokeGrant(file: string, name: string): Promise<boolean>;
+/** The grant a bearer token matches, compared in constant time. */
+export declare function grantFor(grants: readonly McpGrant[], token: string): McpGrant | null;
+export declare function isLoopbackHost(host: string): boolean;
+export declare class McpHttpConfigError extends Error {
+}
+export type McpHttpOptions = {
+    daemonUrl: string;
+    host: string;
+    port: number;
+    tokenFile: string;
+    /** Builds the daemon client for one request; sessionName is the grant's seat (absent: the env's). */
+    clientFactory?: (daemonUrl: string, sessionName?: string) => DaemonClient;
+};
+export declare function startMcpHttpServer(opts: McpHttpOptions): Promise<{
+    url: string;
+    authenticated: boolean;
+    close(): Promise<void>;
+}>;
+//# sourceMappingURL=mcp-http.d.ts.map

package/dist/mcp-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-http.d.ts","sourceRoot":"","sources":["../src/mcp-http.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,6DAA6D;AAC7D,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAIF,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,MAAyB,GAAG,MAAM,CAExE;AAaD;+FAC+F;AAC/F,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,IAAI,CAa1D;AAED;mGACmG;AACnG,wBAAsB,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,SAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAmBjG;AAYD,gFAAgF;AAChF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAc1G;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOxE;AAED,mEAAmE;AACnE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAQpF;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAEhD,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,qGAAqG;IACrG,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,YAAY,CAAC;CAC3E,CAAC;AAoBF,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAiFvI"}

package/dist/mcp-http.js

@@ -0,0 +1,232 @@
+// `rig mcp serve --http`: the same MCP tools over Streamable HTTP, for an assistant that can't start a local process.
+//
+// Auth is configured by the token file's existence. With no token file, the listener stays on loopback and serves the
+// local owner as the env's seat, declared and not authenticated (what stdio does). With one, every request needs a bearer
+// credential that matches a grant, even on loopback: a tunnel or proxy delivers remote traffic to loopback, so loopback
+// proves nothing about the caller. A missing, invalid or revoked credential is refused and never falls back to the env
+// seat, and so is every request once the file is gone or malformed, until a restart. Each request gets its own
+// DaemonClient, carrying its grant's seat, so concurrent callers never share an identity.
+import http from "node:http";
+import fs from "node:fs";
+import nodePath from "node:path";
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { DaemonClient } from "./client.js";
+import { createMcpServer } from "./mcp-server.js";
+import { getOpenRigHome } from "./openrig-compat.js";
+const MAX_BODY_BYTES = 4 * 1024 * 1024;
+export function mcpTokenFilePath(home = getOpenRigHome()) {
+    return nodePath.join(home, "mcp-http-tokens.json");
+}
+/** An entry as token add writes it. A blank seat would act as the env's seat, and a string would become a set of its
+ *  characters, so any other shape makes the file unreadable. */
+function isGrant(entry) {
+    const grant = (entry ?? {});
+    const text = (value) => typeof value === "string" && value.trim() !== "";
+    const list = (value) => Array.isArray(value) && value.every((item) => typeof item === "string");
+    const flag = (value) => typeof value === "boolean";
+    return text(grant.name) && typeof grant.tokenSha256 === "string" && text(grant.seat)
+        && list(grant.rigs) && list(grant.roots) && flag(grant.workspace) && flag(grant.owner);
+}
+/** The configured grants, or null when there is no token file (auth not configured). A file that can't be read or parsed,
+ *  or holds a malformed entry, throws: a broken configuration must never read as "no auth". */
+export function readGrants(file) {
+    let text;
+    try {
+        text = fs.readFileSync(file, "utf8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return null;
+        throw err;
+    }
+    const parsed = JSON.parse(text);
+    if (!Array.isArray(parsed?.principals))
+        throw new Error(`${file} must hold { "principals": [...] }`);
+    const bad = parsed.principals.findIndex((entry) => !isGrant(entry));
+    if (bad >= 0)
+        throw new Error(`${file}: grant ${bad + 1} is malformed; each needs a name, a tokenSha256, a non-blank seat, and lists of rigs and roots`);
+    return parsed.principals;
+}
+/** Holds the token file's lock for one read, modify and publish, so a concurrent add and revoke can't each publish a copy
+ *  that drops the other's change. A lock left by a crashed command names itself after the wait. */
+export async function withGrantsLock(file, update, waitMs = 5_000) {
+    const lock = `${file}.lock`;
+    fs.mkdirSync(nodePath.dirname(file), { recursive: true });
+    const deadline = Date.now() + waitMs;
+    for (;;) {
+        try {
+            fs.closeSync(fs.openSync(lock, "wx", 0o600));
+            break;
+        }
+        catch (err) {
+            if (err.code !== "EEXIST")
+                throw err;
+            if (Date.now() >= deadline)
+                throw new Error(`Another rig mcp token command holds ${lock}. If none is running, remove that file and try again.`);
+            await new Promise((resolve) => setTimeout(resolve, 20));
+        }
+    }
+    try {
+        return update();
+    }
+    finally {
+        fs.rmSync(lock, { force: true });
+    }
+}
+function writeGrants(file, grants) {
+    fs.mkdirSync(nodePath.dirname(file), { recursive: true });
+    const temp = `${file}.${process.pid}.tmp`;
+    fs.writeFileSync(temp, `${JSON.stringify({ principals: grants }, null, 2)}\n`, { mode: 0o600 });
+    fs.renameSync(temp, file);
+    fs.chmodSync(file, 0o600);
+}
+const sha256 = (value) => createHash("sha256").update(value).digest("hex");
+/** Adds a grant and returns its token, which is shown once and never stored. */
+export function addGrant(file, grant) {
+    if (!grant.name.trim() || !grant.seat.trim()) {
+        return Promise.reject(new Error("A grant needs a name and a seat: --seat <session>, the seat this caller acts as."));
+    }
+    return withGrantsLock(file, () => {
+        const grants = readGrants(file) ?? [];
+        if (grants.some((existing) => existing.name === grant.name)) {
+            throw new Error(`'${grant.name}' already has a grant; revoke it first to issue a new token`);
+        }
+        const token = `orm_${randomBytes(32).toString("base64url")}`;
+        grants.push({ ...grant, seat: grant.seat.trim(), tokenSha256: sha256(token), createdAt: new Date().toISOString() });
+        writeGrants(file, grants);
+        return token;
+    });
+}
+/** Removes a grant; its next request is refused. The file stays, so auth stays configured. */
+export function revokeGrant(file, name) {
+    return withGrantsLock(file, () => {
+        const grants = readGrants(file);
+        if (!grants?.some((grant) => grant.name === name))
+            return false;
+        writeGrants(file, grants.filter((grant) => grant.name !== name));
+        return true;
+    });
+}
+/** The grant a bearer token matches, compared in constant time. */
+export function grantFor(grants, token) {
+    const digest = Buffer.from(sha256(token), "hex");
+    let found = null;
+    for (const grant of grants) {
+        const stored = Buffer.from(typeof grant.tokenSha256 === "string" ? grant.tokenSha256 : "", "hex");
+        if (stored.length === digest.length && timingSafeEqual(stored, digest))
+            found = grant;
+    }
+    return found;
+}
+export function isLoopbackHost(host) {
+    return host === "localhost" || host === "::1" || host === "[::1]" || /^127\.\d+\.\d+\.\d+$/.test(host);
+}
+export class McpHttpConfigError extends Error {
+}
+function reply(res, status, body, headers = {}) {
+    res.writeHead(status, { "Content-Type": "application/json", ...headers }).end(JSON.stringify(body));
+}
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        let size = 0;
+        const chunks = [];
+        req.on("data", (chunk) => {
+            size += chunk.length;
+            if (size > MAX_BODY_BYTES) {
+                reject(new Error("body_too_large"));
+                req.destroy();
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+        req.on("error", reject);
+    });
+}
+export async function startMcpHttpServer(opts) {
+    const loopback = isLoopbackHost(opts.host);
+    const configured = readGrants(opts.tokenFile) !== null;
+    if (!loopback && !configured) {
+        throw new McpHttpConfigError(`Serving on ${opts.host} needs authentication: add a grant with rig mcp token add, then start again. With no grants, the server stays on loopback.`);
+    }
+    const makeClient = opts.clientFactory ?? ((url, sessionName) => new DaemonClient(url, sessionName === undefined ? undefined : { sessionName }));
+    let boundPort = opts.port;
+    // Once auth has been configured here, a missing token file is a broken configuration, not a return to local-owner
+    // mode: that takes a restart with no file. A beyond-loopback listener always starts with auth.
+    let authSeen = configured;
+    const handle = async (req, res) => {
+        if (new URL(req.url ?? "/", "http://localhost").pathname !== "/mcp") {
+            reply(res, 404, { error: "not_found", message: "The MCP endpoint is /mcp." });
+            return;
+        }
+        let grants;
+        try {
+            grants = readGrants(opts.tokenFile);
+            if (grants === null && authSeen)
+                throw new Error(`${opts.tokenFile} is gone after auth was configured; restore it, or restart with no token file to serve loopback unauthenticated`);
+        }
+        catch (err) {
+            // The detail stays in this server's log: the reply goes to a caller not yet authenticated.
+            console.error(`rig mcp serve --http: the token file can't be read: ${err.message}`);
+            reply(res, 500, { error: "auth_config_unreadable", message: "The token file can't be read." });
+            return;
+        }
+        if (grants !== null)
+            authSeen = true;
+        let access;
+        let seat;
+        if (grants !== null) {
+            const token = /^Bearer\s+(\S+)\s*$/i.exec(req.headers.authorization ?? "")?.[1];
+            const grant = token ? grantFor(grants, token) : null;
+            if (!grant) {
+                reply(res, 401, {
+                    error: "unauthenticated",
+                    message: token ? "This credential isn't valid here: it's unknown or was revoked." : "This server needs a bearer credential: Authorization: Bearer <token>.",
+                }, { "WWW-Authenticate": 'Bearer realm="openrig"' });
+                return;
+            }
+            access = { principal: grant.name, owner: grant.owner === true, rigs: grant.rigs ?? [], roots: grant.roots ?? [], workspace: grant.workspace === true };
+            seat = grant.seat;
+        }
+        let body;
+        if (req.method === "POST") {
+            try {
+                body = JSON.parse(await readBody(req));
+            }
+            catch (err) {
+                const tooLarge = err.message === "body_too_large";
+                reply(res, tooLarge ? 413 : 400, { jsonrpc: "2.0", error: { code: -32700, message: tooLarge ? "Request body too large" : "Parse error" }, id: null });
+                return;
+            }
+        }
+        const mcp = createMcpServer(makeClient(opts.daemonUrl, seat), { seat, access });
+        // With no auth (loopback only), refuse a Host that isn't loopback, as a page reaching localhost through DNS rebinding
+        // or a forward from elsewhere would send. With auth, the credential is the check, so a tunnel's Host is fine.
+        const transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: undefined,
+            ...(grants === null ? { enableDnsRebindingProtection: true, allowedHosts: [`127.0.0.1:${boundPort}`, `localhost:${boundPort}`, `[::1]:${boundPort}`] } : {}),
+        });
+        res.on("close", () => { void transport.close(); void mcp.close(); });
+        await mcp.connect(transport);
+        await transport.handleRequest(req, res, body);
+    };
+    const server = http.createServer((req, res) => {
+        handle(req, res).catch((err) => {
+            if (!res.headersSent)
+                reply(res, 500, { jsonrpc: "2.0", error: { code: -32603, message: err.message }, id: null });
+        });
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(opts.port, opts.host, () => { server.off("error", reject); resolve(); });
+    });
+    boundPort = server.address().port;
+    const shownHost = opts.host.includes(":") && !opts.host.startsWith("[") ? `[${opts.host}]` : opts.host;
+    return {
+        url: `http://${shownHost}:${boundPort}/mcp`,
+        authenticated: configured,
+        close: () => new Promise((resolve) => { server.closeAllConnections?.(); server.close(() => resolve()); }),
+    };
+}
+//# sourceMappingURL=mcp-http.js.map

package/dist/mcp-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-http.js","sourceRoot":"","sources":["../src/mcp-http.ts"],"names":[],"mappings":"AAAA,sHAAsH;AACtH,EAAE;AACF,sHAAsH;AACtH,0HAA0H;AAC1H,wHAAwH;AACxH,uHAAuH;AACvH,+GAA+G;AAC/G,0FAA0F;AAC1F,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,QAAQ,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAkB,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAcrD,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC,MAAM,UAAU,gBAAgB,CAAC,OAAe,cAAc,EAAE;IAC9D,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;AACrD,CAAC;AAED;gEACgE;AAChE,SAAS,OAAO,CAAC,KAAc;IAC7B,MAAM,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;IACvD,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;IAClF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;IACzG,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,SAAS,CAAC;IAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;WAC/E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED;+FAC+F;AAC/F,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoC,CAAC;IACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oCAAoC,CAAC,CAAC;IACrG,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,IAAI,GAAG,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,WAAW,GAAG,GAAG,CAAC,gGAAgG,CAAC,CAAC;IACzJ,OAAO,MAAM,CAAC,UAAwB,CAAC;AACzC,CAAC;AAED;mGACmG;AACnG,MAAM,CAAC,KAAK,UAAU,cAAc,CAAI,IAAY,EAAE,MAAe,EAAE,MAAM,GAAG,KAAK;IACnF,MAAM,IAAI,GAAG,GAAG,IAAI,OAAO,CAAC;IAC5B,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,SAAS,CAAC;QACR,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7C,MAAM;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAChE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,uDAAuD,CAAC,CAAC;YAChJ,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAkB;IACnD,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAC1C,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE3F,gFAAgF;AAChF,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAkD;IACvF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC,CAAC;IACvH,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE;QAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,6DAA6D,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpH,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACpD,OAAO,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE;QAC/B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAChE,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,QAAQ,CAAC,MAA2B,EAAE,KAAa;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,KAAK,GAAoB,IAAI,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAClG,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,KAAK,GAAG,KAAK,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;CAAG;AAWhD,SAAS,KAAK,CAAC,GAAwB,EAAE,MAAc,EAAE,IAA6B,EAAE,UAAkC,EAAE;IAC1H,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,QAAQ,CAAC,GAAyB;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC1F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAoB;IAC3D,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;IACvD,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,kBAAkB,CAAC,cAAc,IAAI,CAAC,IAAI,4HAA4H,CAAC,CAAC;IACpL,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,GAAW,EAAE,WAAoB,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IACjK,IAAI,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC;IAC1B,kHAAkH;IAClH,+FAA+F;IAC/F,IAAI,QAAQ,GAAG,UAAU,CAAC;IAE1B,MAAM,MAAM,GAAG,KAAK,EAAE,GAAyB,EAAE,GAAwB,EAAiB,EAAE;QAC1F,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACpE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,MAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,iHAAiH,CAAC,CAAC;QACvL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2FAA2F;YAC3F,OAAO,CAAC,KAAK,CAAC,uDAAwD,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/F,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;YAC/F,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,IAAI;YAAE,QAAQ,GAAG,IAAI,CAAC;QACrC,IAAI,MAA6B,CAAC;QAClC,IAAI,IAAwB,CAAC;QAC7B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAChF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACrD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE;oBACd,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,gEAAgE,CAAC,CAAC,CAAC,uEAAuE;iBAC5J,EAAE,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YACD,MAAM,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YACvJ,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,IAAa,CAAC;QAClB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAI,GAAa,CAAC,OAAO,KAAK,gBAAgB,CAAC;gBAC7D,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtJ,OAAO;YACT,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAChF,sHAAsH;QACtH,8GAA8G;QAC9G,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,kBAAkB,EAAE,SAAS;YAC7B,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,4BAA4B,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,aAAa,SAAS,EAAE,EAAE,aAAa,SAAS,EAAE,EAAE,SAAS,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7J,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC7B,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAChI,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IACH,SAAS,GAAI,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IACvG,OAAO;QACL,GAAG,EAAE,UAAU,SAAS,IAAI,SAAS,MAAM;QAC3C,aAAa,EAAE,UAAU;QACzB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KAChH,CAAC;AACJ,CAAC"}