@thinkrun/cli 0.1.27

package/dist/src/config/store.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Configuration store using conf package
+ * Stores API key, preferences, and active session
+ */
+import type { CLIConfig } from '../types.js';
+export declare class ConfigStore {
+    private conf;
+    constructor();
+    private buildConf;
+    /** Move a schema-violating apiKey value into apiKeyInvalid by editing the raw file. */
+    private quarantineInvalidApiKey;
+    get<K extends keyof CLIConfig>(key: K): CLIConfig[K];
+    set<K extends keyof CLIConfig>(key: K, value: CLIConfig[K]): void;
+    has(key: keyof CLIConfig): boolean;
+    delete(key: keyof CLIConfig): void;
+    clear(): void;
+    getAll(): CLIConfig;
+    getPath(): string;
+    validateApiKey(key: string): boolean;
+    validateExtensionId(extensionId: string): boolean;
+    maskApiKey(key?: string): string;
+    isConfigured(): boolean;
+    /**
+     * PRD 0086 B2 — distinct key states for diagnosis:
+     *  - missing:   never configured (no key, no quarantined value)
+     *  - malformed: a stored value failed shape validation and was quarantined
+     *  - present:   a well-formed key is configured (server may still reject it)
+     */
+    getKeyHealth(): {
+        state: 'missing' | 'malformed' | 'present';
+        maskedKey?: string;
+        quarantinedMasked?: string;
+        shapeValid?: boolean;
+    };
+    clearQuarantinedApiKey(): void;
+    ensureConfigured(): void;
+}
+export declare const config: ConfigStore;
+//# sourceMappingURL=store.d.ts.map

package/dist/src/config/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/config/store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AA4J7C,qBAAa,WAAW;IACtB,OAAO,CAAC,IAAI,CAAkB;;IAuB9B,OAAO,CAAC,SAAS;IAajB,uFAAuF;IACvF,OAAO,CAAC,uBAAuB;IA+B/B,GAAG,CAAC,CAAC,SAAS,MAAM,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;IAIpD,GAAG,CAAC,CAAC,SAAS,MAAM,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI;IAIjE,GAAG,CAAC,GAAG,EAAE,MAAM,SAAS,GAAG,OAAO;IAIlC,MAAM,CAAC,GAAG,EAAE,MAAM,SAAS,GAAG,IAAI;IAIlC,KAAK,IAAI,IAAI;IAIb,MAAM,IAAI,SAAS;IAInB,OAAO,IAAI,MAAM;IAKjB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIpC,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAIjD,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM;IAOhC,YAAY,IAAI,OAAO;IAIvB;;;;;OAKG;IACH,YAAY,IAAI;QAAE,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE;IAUpI,sBAAsB,IAAI,IAAI;IAI9B,gBAAgB,IAAI,IAAI;CAOzB;AAGD,eAAO,MAAM,MAAM,aAAoB,CAAC"}

package/dist/src/config/store.js

@@ -0,0 +1,290 @@
+/**
+ * Configuration store using conf package
+ * Stores API key, preferences, and active session
+ */
+import Conf from 'conf';
+import { join } from 'path';
+import { homedir, platform } from 'os';
+import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
+// Storage-layer sanity pattern for apiKey (see schema comment below). Shared
+// by the schema and the quarantine guard so they can never drift.
+const STORAGE_API_KEY_PATTERN = '^\\S{8,512}$';
+const STORAGE_API_KEY_RE = new RegExp(STORAGE_API_KEY_PATTERN);
+const schema = {
+    apiKey: {
+        type: 'string',
+        // Sanity check only (no whitespace, plausible length). The strict prefix
+        // check lives in validateApiKey at the UX layer — a schema this strict
+        // used to make Conf THROW at startup for any corrupted stored value,
+        // crashing every CLI command (PRD 0086 B1). Storage must tolerate what
+        // the UX layer (or --force) let through; doctor flags shape mismatches.
+        pattern: STORAGE_API_KEY_PATTERN,
+    },
+    // Quarantine slot for a stored apiKey that failed schema validation
+    // (e.g. overwritten by autofill with a URL). Deliberately pattern-free.
+    apiKeyInvalid: {
+        type: 'string',
+    },
+    apiUrl: {
+        type: 'string',
+        default: 'https://api.thinkbrowse.io',
+    },
+    defaultBrowser: {
+        type: 'string',
+        enum: ['chromium', 'firefox', 'webkit'],
+        default: 'chromium',
+    },
+    extensionId: {
+        type: 'string',
+        pattern: '^[a-p]{32}$',
+    },
+    registeredExtensionId: {
+        type: 'string',
+        pattern: '^[a-p]{32}$',
+    },
+    preferPackagedDefaultExtensionId: {
+        type: 'boolean',
+    },
+    nativeHostVersion: {
+        type: 'string',
+    },
+    nativeHostChecksum: {
+        type: 'string',
+        pattern: '^[a-f0-9]{64}$',
+    },
+    localTabId: {
+        type: 'string',
+    },
+    localAgentSessionId: {
+        type: 'string',
+    },
+    cloudSessionId: {
+        type: 'string',
+    },
+    activeSessionId: {
+        // No default — absence means no tab is currently attached.
+        // Used by attach command and read by any command that needs the active session.
+        type: 'string',
+    },
+    agentSessionId: {
+        // Optional agent session ID for the extension tab registry.
+        // Set by attach/new-window, used to pin all commands to the registered tab.
+        type: 'string',
+    },
+    /**
+     * Local transport selector (PRD 0086 Track A, task 4.0).
+     * 'native' (default): classic native-messaging path — zero behaviour change.
+     * 'daemon': route CLI/MCP local requests through the bridge daemon.
+     *
+     * Set via: thinkrun config set localTransport daemon
+     * Rollback:  thinkrun config set localTransport native
+     *   (safe even when daemon is unreachable — pure config write)
+     *
+     * Host-side gate: daemon only spawns when THINKRUN_DAEMON_SPIKE=1 env flag
+     * is present (`THINKBROWSE_DAEMON_SPIKE` is still accepted as a legacy
+     * fallback during the internal pass). Wiring this config value → env
+     * automatically is task 6.11.
+     */
+    localTransport: {
+        type: 'string',
+        enum: ['native', 'daemon'],
+        default: 'native',
+    },
+};
+// Use ~/.config/thinkrun/ consistently across all platforms so that the
+// CLI reads the same config.json that browse.sh and users expect to find there.
+// THINKRUN_CONFIG_DIR env var overrides the path — used by tests to avoid
+// polluting the real user config with test data.
+function getConfigDir() {
+    return process.env.THINKRUN_CONFIG_DIR || join(homedir(), '.config', 'thinkrun');
+}
+function getLegacyBrandConfigPath() {
+    return join(homedir(), '.config', 'thinkbrowse', 'config.json');
+}
+/**
+ * Determine the platform-default Conf path that was used before the cwd fix.
+ * Conf used XDG_CONFIG_HOME on Linux, ~/Library/Preferences/<name>-nodejs on macOS,
+ * and %APPDATA%\<name>-nodejs\Config on Windows.
+ * Matches the internal logic from the historical `conf` package path used by
+ * the pre-rename CLI (`projectName='thinkbrowse'`).
+ */
+function getLegacyConfPath() {
+    const os = platform();
+    if (os === 'darwin') {
+        return join(homedir(), 'Library', 'Preferences', 'thinkbrowse-nodejs', 'config.json');
+    }
+    if (os === 'win32') {
+        const appData = process.env.APPDATA;
+        if (appData)
+            return join(appData, 'thinkbrowse-nodejs', 'Config', 'config.json');
+        return null;
+    }
+    // Linux / other: XDG_CONFIG_HOME or ~/.config
+    const xdg = process.env.XDG_CONFIG_HOME || join(homedir(), '.config');
+    return join(xdg, 'thinkbrowse-nodejs', 'config.json');
+}
+/**
+ * One-time migration: if config.json already exists at the new canonical path
+ * nothing is done. If the new path is empty but the legacy platform path has data,
+ * copy it over so the user's API key and settings are preserved after upgrading.
+ */
+function migrateConfigIfNeeded() {
+    const newPath = join(getConfigDir(), 'config.json');
+    if (existsSync(newPath))
+        return; // already migrated or freshly created — nothing to do
+    const legacyBrandPath = getLegacyBrandConfigPath();
+    if (existsSync(legacyBrandPath)) {
+        try {
+            const data = readFileSync(legacyBrandPath, 'utf-8');
+            mkdirSync(getConfigDir(), { recursive: true });
+            writeFileSync(newPath, data, 'utf-8');
+            return;
+        }
+        catch {
+            // Continue to older Conf-path migration below.
+        }
+    }
+    const legacyPath = getLegacyConfPath();
+    if (!legacyPath || !existsSync(legacyPath))
+        return; // no legacy data
+    try {
+        const data = readFileSync(legacyPath, 'utf-8');
+        mkdirSync(getConfigDir(), { recursive: true });
+        writeFileSync(newPath, data, 'utf-8');
+    }
+    catch {
+        // Migration is best-effort; failures are silently ignored so startup is never blocked.
+    }
+}
+export class ConfigStore {
+    conf;
+    constructor() {
+        migrateConfigIfNeeded();
+        try {
+            this.conf = this.buildConf();
+        }
+        catch (error) {
+            // PRD 0086 B1: a schema-invalid stored apiKey used to crash every CLI
+            // command at startup with a raw `Config schema violation` stack trace.
+            // Quarantine the offending value and retry once so the CLI stays
+            // usable and can explain what happened (API_KEY_MALFORMED).
+            // Match loosely (conf/ajv wording may change across upgrades): attempt
+            // quarantine on ANY constructor error, then retry once. If quarantine
+            // changed nothing, the retry throws the original class of error anyway.
+            this.quarantineInvalidApiKey();
+            try {
+                this.conf = this.buildConf();
+            }
+            catch {
+                throw error;
+            }
+        }
+    }
+    buildConf() {
+        return new Conf({
+            projectName: 'thinkrun',
+            cwd: getConfigDir(),
+            schema: schema,
+            defaults: {
+                apiUrl: 'https://api.thinkbrowse.io',
+                defaultBrowser: 'chromium',
+                localTransport: 'native',
+            },
+        });
+    }
+    /** Move a schema-violating apiKey value into apiKeyInvalid by editing the raw file. */
+    quarantineInvalidApiKey() {
+        const configPath = join(getConfigDir(), 'config.json');
+        try {
+            const raw = JSON.parse(readFileSync(configPath, 'utf-8'));
+            let changed = false;
+            // A corrupted quarantine slot itself (non-string) would also crash Conf.
+            if (raw.apiKeyInvalid !== undefined && typeof raw.apiKeyInvalid !== 'string') {
+                raw.apiKeyInvalid = JSON.stringify(raw.apiKeyInvalid);
+                changed = true;
+            }
+            const bad = raw.apiKey !== undefined
+                && (typeof raw.apiKey !== 'string' || !STORAGE_API_KEY_RE.test(raw.apiKey));
+            if (bad) {
+                // Non-string corruption is stringified so the quarantine slot (string)
+                // can hold it for diagnosis.
+                raw.apiKeyInvalid = typeof raw.apiKey === 'string' ? raw.apiKey : JSON.stringify(raw.apiKey);
+                delete raw.apiKey;
+                changed = true;
+            }
+            if (changed) {
+                writeFileSync(configPath, JSON.stringify(raw, null, '\t'), 'utf-8');
+                process.stderr.write('[thinkrun] warn: stored API key failed validation and was quarantined. Run: thinkrun doctor\n');
+            }
+        }
+        catch {
+            // If the raw file is unreadable the retried Conf init will surface it.
+        }
+    }
+    get(key) {
+        return this.conf.get(key);
+    }
+    set(key, value) {
+        this.conf.set(key, value);
+    }
+    has(key) {
+        return this.conf.has(key);
+    }
+    delete(key) {
+        this.conf.delete(key);
+    }
+    clear() {
+        this.conf.clear();
+    }
+    getAll() {
+        return this.conf.store;
+    }
+    getPath() {
+        return this.conf.path;
+    }
+    // Validation helpers
+    validateApiKey(key) {
+        return /^(tb_|mech_browse_|ak_)[A-Za-z0-9_-]+$/.test(key);
+    }
+    validateExtensionId(extensionId) {
+        return /^[a-p]{32}$/.test(extensionId);
+    }
+    maskApiKey(key) {
+        if (!key)
+            return '(not set)';
+        if (key.length < 8)
+            return '***';
+        return `${key.slice(0, 12)}...${key.slice(-4)}`;
+    }
+    // Check if config is ready to use
+    isConfigured() {
+        return this.has('apiKey') && !!this.get('apiKey');
+    }
+    /**
+     * PRD 0086 B2 — distinct key states for diagnosis:
+     *  - missing:   never configured (no key, no quarantined value)
+     *  - malformed: a stored value failed shape validation and was quarantined
+     *  - present:   a well-formed key is configured (server may still reject it)
+     */
+    getKeyHealth() {
+        const key = this.get('apiKey');
+        if (key)
+            return { state: 'present', maskedKey: this.maskApiKey(key), shapeValid: this.validateApiKey(key) };
+        const quarantined = this.conf.get('apiKeyInvalid');
+        if (typeof quarantined === 'string' && quarantined.length > 0) {
+            return { state: 'malformed', quarantinedMasked: this.maskApiKey(quarantined) };
+        }
+        return { state: 'missing' };
+    }
+    clearQuarantinedApiKey() {
+        this.conf.delete('apiKeyInvalid');
+    }
+    ensureConfigured() {
+        if (!this.isConfigured()) {
+            throw new Error('API key not configured. Run: thinkrun config set-key <your-api-key>');
+        }
+    }
+}
+// Singleton instance
+export const config = new ConfigStore();
+//# sourceMappingURL=store.js.map

package/dist/src/config/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/config/store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAGxE,6EAA6E;AAC7E,kEAAkE;AAClE,MAAM,uBAAuB,GAAG,cAAc,CAAC;AAC/C,MAAM,kBAAkB,GAAG,IAAI,MAAM,CAAC,uBAAuB,CAAC,CAAC;AAE/D,MAAM,MAAM,GAAG;IACb,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,yEAAyE;QACzE,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;QACvE,wEAAwE;QACxE,OAAO,EAAE,uBAAuB;KACjC;IACD,oEAAoE;IACpE,wEAAwE;IACxE,aAAa,EAAE;QACb,IAAI,EAAE,QAAQ;KACf;IACD,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,4BAA4B;KACtC;IACD,cAAc,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;QACvC,OAAO,EAAE,UAAU;KACpB;IACD,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,aAAa;KACvB;IACD,qBAAqB,EAAE;QACrB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,aAAa;KACvB;IACD,gCAAgC,EAAE;QAChC,IAAI,EAAE,SAAS;KAChB;IACD,iBAAiB,EAAE;QACjB,IAAI,EAAE,QAAQ;KACf;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,gBAAgB;KAC1B;IACD,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;KACf;IACD,mBAAmB,EAAE;QACnB,IAAI,EAAE,QAAQ;KACf;IACD,cAAc,EAAE;QACd,IAAI,EAAE,QAAQ;KACf;IACD,eAAe,EAAE;QACf,2DAA2D;QAC3D,gFAAgF;QAChF,IAAI,EAAE,QAAQ;KACf;IACD,cAAc,EAAE;QACd,4DAA4D;QAC5D,4EAA4E;QAC5E,IAAI,EAAE,QAAQ;KACf;IACD;;;;;;;;;;;;;OAaG;IACH,cAAc,EAAE;QACd,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC1B,OAAO,EAAE,QAAQ;KAClB;CACO,CAAC;AAEX,wEAAwE;AACxE,gFAAgF;AAChF,0EAA0E;AAC1E,iDAAiD;AACjD,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB;IACxB,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtB,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QACpC,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,8CAA8C;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,GAAG,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,aAAa,CAAC,CAAC;IACpD,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,sDAAsD;IAEvF,MAAM,eAAe,GAAG,wBAAwB,EAAE,CAAC;IACnD,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACpD,SAAS,CAAC,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACvC,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,iBAAiB;IAErE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/C,SAAS,CAAC,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,uFAAuF;IACzF,CAAC;AACH,CAAC;AAED,MAAM,OAAO,WAAW;IACd,IAAI,CAAkB;IAE9B;QACE,qBAAqB,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sEAAsE;YACtE,uEAAuE;YACvE,iEAAiE;YACjE,4DAA4D;YAC5D,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAEO,SAAS;QACf,OAAO,IAAI,IAAI,CAAY;YACzB,WAAW,EAAE,UAAU;YACvB,GAAG,EAAE,YAAY,EAAE;YACnB,MAAM,EAAE,MAAa;YACrB,QAAQ,EAAE;gBACR,MAAM,EAAE,4BAA4B;gBACpC,cAAc,EAAE,UAAU;gBAC1B,cAAc,EAAE,QAAQ;aAClB;SACT,CAAC,CAAC;IACL,CAAC;IAED,uFAAuF;IAC/E,uBAAuB;QAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,aAAa,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;YACrF,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,yEAAyE;YACzE,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;gBAC7E,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACtD,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,MAAM,GAAG,GACP,GAAG,CAAC,MAAM,KAAK,SAAS;mBACrB,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9E,IAAI,GAAG,EAAE,CAAC;gBACR,uEAAuE;gBACvE,6BAA6B;gBAC7B,GAAG,CAAC,aAAa,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC7F,OAAO,GAAG,CAAC,MAAM,CAAC;gBAClB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;gBACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+FAA+F,CAChG,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;IACH,CAAC;IAED,GAAG,CAA4B,GAAM;QACnC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,GAAG,CAA4B,GAAM,EAAE,KAAmB;QACxD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,GAAG,CAAC,GAAoB;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,CAAC,GAAoB;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;IACzB,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;IAED,qBAAqB;IACrB,cAAc,CAAC,GAAW;QACxB,OAAO,wCAAwC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,mBAAmB,CAAC,WAAmB;QACrC,OAAO,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IAED,UAAU,CAAC,GAAY;QACrB,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC;QAC7B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACjC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,CAAC;IAED,kCAAkC;IAClC,YAAY;QACV,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED;;;;;OAKG;IACH,YAAY;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5G,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,eAAkC,CAAY,CAAC;QACjF,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACjF,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;IAED,sBAAsB;QACpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAkC,CAAC,CAAC;IACvD,CAAC;IAED,gBAAgB;QACd,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,qBAAqB;AACrB,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC"}

package/dist/src/daemon/access.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Shared daemon access helpers — used by CLI, MCP server, and any consumer
+ * that needs to connect to the bridge daemon when localTransport='daemon'.
+ *
+ * browse.sh note (when localTransport=daemon):
+ *   #!/bin/bash
+ *   # Read daemon access from daemon.json with jq:
+ *   DAEMON_JSON="$HOME/.thinkrun/daemon.json"
+ *   if [ -f "$DAEMON_JSON" ] && [ "$(jq -r '.owner' "$DAEMON_JSON" 2>/dev/null)" = "daemon" ]; then
+ *     DAEMON_PORT=$(jq -r '.port' "$DAEMON_JSON")
+ *     DAEMON_TOKEN=$(jq -r '.token' "$DAEMON_JSON")
+ *     # Use port/token for HTTP requests to 127.0.0.1:$DAEMON_PORT
+ *   fi
+ */
+/** Resolved at call-time so tests can override HOME via process.env */
+export declare function getDiscoveryDir(): string;
+/** Resolved at call-time so tests can override HOME via process.env */
+export declare function getDaemonJsonPath(): string;
+/** Stable path reference for callers that don't change HOME (non-test) */
+export declare const DISCOVERY_DIR: string;
+/** Stable path reference for callers that don't change HOME (non-test) */
+export declare const DAEMON_JSON: string;
+/**
+ * Port + token pair needed to connect to the bridge daemon.
+ * Used by CLI HTTP client and MCP server when localTransport='daemon'.
+ */
+export interface DaemonAccess {
+    port: number;
+    token: string;
+    protocolVersion?: number;
+    binaryVersion?: string;
+}
+/**
+ * Read daemon.json and return the port+token pair needed to connect.
+ *
+ * Does NOT check PID liveness — that is intentional. MCP/CLI callers
+ * should attempt a connection and retry/recover if it fails. Use
+ * readDaemonConfig() in daemon.ts for spawn-path calls where liveness
+ * matters for startup decisions.
+ *
+ * Returns null if daemon.json is absent, unreadable, or malformed.
+ */
+export declare function readDaemonAccess(): DaemonAccess | null;
+/**
+ * Build the HTTP base URL for the daemon given a port.
+ */
+export declare function daemonBaseUrl(port: number): string;
+/**
+ * Build the WS URL for the extension to connect to the daemon.
+ * The token is percent-encoded for safe URL embedding.
+ */
+export declare function daemonWsUrl(port: number, token: string, clientType?: 'extension' | 'cli'): string;
+//# sourceMappingURL=access.d.ts.map

package/dist/src/daemon/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../../src/daemon/access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,uEAAuE;AACvE,wBAAgB,eAAe,IAAI,MAAM,CAGxC;AAED,uEAAuE;AACvE,wBAAgB,iBAAiB,IAAI,MAAM,CAO1C;AAED,0EAA0E;AAG1E,eAAO,MAAM,aAAa,QAAoB,CAAC;AAC/C,0EAA0E;AAC1E,eAAO,MAAM,WAAW,QAAsB,CAAC;AAE/C;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,GAAG,IAAI,CAwBtD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,GAAE,WAAW,GAAG,KAAmB,GAAG,MAAM,CAE9G"}

package/dist/src/daemon/access.js

@@ -0,0 +1,87 @@
+/**
+ * Shared daemon access helpers — used by CLI, MCP server, and any consumer
+ * that needs to connect to the bridge daemon when localTransport='daemon'.
+ *
+ * browse.sh note (when localTransport=daemon):
+ *   #!/bin/bash
+ *   # Read daemon access from daemon.json with jq:
+ *   DAEMON_JSON="$HOME/.thinkrun/daemon.json"
+ *   if [ -f "$DAEMON_JSON" ] && [ "$(jq -r '.owner' "$DAEMON_JSON" 2>/dev/null)" = "daemon" ]; then
+ *     DAEMON_PORT=$(jq -r '.port' "$DAEMON_JSON")
+ *     DAEMON_TOKEN=$(jq -r '.token' "$DAEMON_JSON")
+ *     # Use port/token for HTTP requests to 127.0.0.1:$DAEMON_PORT
+ *   fi
+ */
+import { existsSync, readFileSync } from 'fs';
+import { join } from 'path';
+/** Resolved at call-time so tests can override HOME via process.env */
+export function getDiscoveryDir() {
+    const home = process.env.HOME || process.env.USERPROFILE || '/tmp';
+    return join(home, '.thinkrun');
+}
+/** Resolved at call-time so tests can override HOME via process.env */
+export function getDaemonJsonPath() {
+    const current = join(getDiscoveryDir(), 'daemon.json');
+    const home = process.env.HOME || process.env.USERPROFILE || '/tmp';
+    const legacy = join(home, '.thinkbrowse', 'daemon.json');
+    if (existsSync(current))
+        return current;
+    if (existsSync(legacy))
+        return legacy;
+    return current;
+}
+/** Stable path reference for callers that don't change HOME (non-test) */
+// NOTE: const exports are snapshot at import time (production convenience).
+// Tests that override HOME must use the get*() functions above instead.
+export const DISCOVERY_DIR = getDiscoveryDir();
+/** Stable path reference for callers that don't change HOME (non-test) */
+export const DAEMON_JSON = getDaemonJsonPath();
+/**
+ * Read daemon.json and return the port+token pair needed to connect.
+ *
+ * Does NOT check PID liveness — that is intentional. MCP/CLI callers
+ * should attempt a connection and retry/recover if it fails. Use
+ * readDaemonConfig() in daemon.ts for spawn-path calls where liveness
+ * matters for startup decisions.
+ *
+ * Returns null if daemon.json is absent, unreadable, or malformed.
+ */
+export function readDaemonAccess() {
+    const daemonJson = getDaemonJsonPath();
+    try {
+        if (!existsSync(daemonJson))
+            return null;
+        const text = readFileSync(daemonJson, 'utf-8');
+        const parsed = JSON.parse(text);
+        if (parsed === null ||
+            typeof parsed !== 'object' ||
+            typeof parsed.port !== 'number' ||
+            typeof parsed.token !== 'string') {
+            return null;
+        }
+        const cfg = parsed;
+        return {
+            port: cfg.port,
+            token: cfg.token,
+            protocolVersion: cfg.protocolVersion,
+            binaryVersion: cfg.binaryVersion,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Build the HTTP base URL for the daemon given a port.
+ */
+export function daemonBaseUrl(port) {
+    return `http://127.0.0.1:${port}`;
+}
+/**
+ * Build the WS URL for the extension to connect to the daemon.
+ * The token is percent-encoded for safe URL embedding.
+ */
+export function daemonWsUrl(port, token, clientType = 'extension') {
+    return `ws://127.0.0.1:${port}/ws?type=${clientType}&token=${encodeURIComponent(token)}`;
+}
+//# sourceMappingURL=access.js.map

package/dist/src/daemon/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../../src/daemon/access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,uEAAuE;AACvE,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC;IACnE,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACjC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,EAAE,aAAa,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0EAA0E;AAC1E,4EAA4E;AAC5E,wEAAwE;AACxE,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,EAAE,CAAC;AAC/C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;AAa/C;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,IACE,MAAM,KAAK,IAAI;YACf,OAAO,MAAM,KAAK,QAAQ;YAC1B,OAAQ,MAAkC,CAAC,IAAI,KAAK,QAAQ;YAC5D,OAAQ,MAAkC,CAAC,KAAK,KAAK,QAAQ,EAC7D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,MAAsB,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,aAAa,EAAE,GAAG,CAAC,aAAa;SACjC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,oBAAoB,IAAI,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAa,EAAE,aAAkC,WAAW;IACpG,OAAO,kBAAkB,IAAI,YAAY,UAAU,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC3F,CAAC"}

package/dist/src/daemon/bridge-envelope.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Bridge command envelope and delivery outcome enum (PRD 0086, Task 6.2).
+ *
+ * This module is shared between the daemon (Bun runtime) and the extension.
+ * It MUST NOT import Bun-specific APIs.
+ *
+ * Key invariant: replay decisions key on DeliveryOutcome values, NEVER on
+ * exception message strings.
+ */
+/**
+ * Module-private brand so a `BridgeCommandEnvelope` can ONLY be produced by
+ * `makeBridgeEnvelope()` — callers can't write an object literal (they can't
+ * supply the brand) and the fields are readonly, so `idempotency` can never
+ * diverge from `commandType` (PR #683 review).
+ */
+declare const ENVELOPE_BRAND: unique symbol;
+/** Caller-supplied envelope inputs — note: NO `idempotency` (it is derived). */
+export interface BridgeEnvelopeInput {
+    /** Stable ID for exactly-once delivery — shared dedupe key between daemon and CLI paths */
+    commandId: string;
+    /** Native host session / tab identifier */
+    sessionId: string;
+    /** The command type string (matches LOCAL_COMMAND_REPLAY_POLICY keys) */
+    commandType: string;
+    /** 1-based delivery attempt counter */
+    attempt: number;
+}
+export interface BridgeCommandEnvelope extends Readonly<BridgeEnvelopeInput> {
+    /** DERIVED from the policy table by makeBridgeEnvelope — never caller-set. */
+    readonly idempotency: 'idempotent' | 'non-idempotent';
+    /** Brand: present only on factory output; prevents object-literal forgery. */
+    readonly [ENVELOPE_BRAND]: true;
+}
+/**
+ * The only way to build a BridgeCommandEnvelope. `idempotency` is DERIVED from
+ * the policy table (a command is idempotent iff its replay policy is `queue`),
+ * so it cannot disagree with `commandType`.
+ */
+export declare function makeBridgeEnvelope(args: BridgeEnvelopeInput): BridgeCommandEnvelope;
+/**
+ * Delivery outcome for a bridge command.
+ * All replay/retry logic must branch on these values — not on error strings.
+ */
+export declare enum DeliveryOutcome {
+    /** Command dispatched and executed successfully */
+    DELIVERED_SUCCESS = "DELIVERED_SUCCESS",
+    /** Command was dispatched but the page returned an error (e.g. ELEMENT_NOT_FOUND, SCRIPT_ERROR) */
+    DELIVERED_PAGE_ERROR = "DELIVERED_PAGE_ERROR",
+    /** Command was never delivered — transport layer failure (socket disconnected, timeout before send) */
+    NOT_DELIVERED_TRANSPORT_ERROR = "NOT_DELIVERED_TRANSPORT_ERROR",
+    /** Outcome is ambiguous — command may or may not have been executed (timeout after send) */
+    UNKNOWN_DELIVERY = "UNKNOWN_DELIVERY",
+    /** Command rejected because the transport is currently reconnecting */
+    REJECTED_RECONNECTING = "REJECTED_RECONNECTING"
+}
+export type CommandReplayPolicy = 'queue' | 'failFast' | 'neverReplay';
+export interface CommandPolicy {
+    /** How to handle replay when transport recovers */
+    replay: CommandReplayPolicy;
+    /** Timeout in milliseconds for this command */
+    timeoutMs: number;
+    /** Human-readable hint for retry decisions */
+    retryHint: string;
+}
+/**
+ * Per-command policy table.
+ *
+ * Design: policy as data — a plain const map, not a class.
+ * Default-deny: anything not listed falls back to neverReplay (fail safe).
+ *
+ * Idempotent reads → 'queue': safe to replay after reconnect.
+ * Mutations → 'failFast': outcome unknown after disconnect; caller must decide.
+ * evaluate → 'failFast': opaque script may mutate page state; NOT idempotent.
+ */
+export declare const BRIDGE_COMMAND_POLICY: Record<string, CommandPolicy>;
+/**
+ * The default policy applied when a commandType is not found in BRIDGE_COMMAND_POLICY.
+ * Conservative fail-safe: never replay unknown commands.
+ */
+/** Single source for the fallback timeout so default-policy and any future use can't diverge. */
+export declare const DEFAULT_COMMAND_TIMEOUT_MS = 30000;
+/**
+ * Returns the replay/timeout policy for the given commandType.
+ * Falls back to the default-deny policy for unlisted commands.
+ */
+export declare function getCommandPolicy(commandType: string): CommandPolicy;
+/**
+ * Map an error code and send-state to the appropriate DeliveryOutcome.
+ *
+ * @param errorCode            The `.code` property from the thrown Error.
+ * @param sentBeforeDisconnect Whether the WS send() had already been called before
+ *                             the disconnect was detected.
+ */
+export declare function mapFailureToOutcome(errorCode: string, sentBeforeDisconnect: boolean): DeliveryOutcome;
+export {};
+//# sourceMappingURL=bridge-envelope.d.ts.map

package/dist/src/daemon/bridge-envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge-envelope.d.ts","sourceRoot":"","sources":["../../../src/daemon/bridge-envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;GAKG;AACH,OAAO,CAAC,MAAM,cAAc,EAAE,OAAO,MAAM,CAAC;AAE5C,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,2FAA2F;IAC3F,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAsB,SAAQ,QAAQ,CAAC,mBAAmB,CAAC;IAC1E,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,EAAE,YAAY,GAAG,gBAAgB,CAAC;IACtD,8EAA8E;IAC9E,QAAQ,CAAC,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC;CACjC;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,GAAG,qBAAqB,CAQnF;AAED;;;GAGG;AACH,oBAAY,eAAe;IACzB,mDAAmD;IACnD,iBAAiB,sBAAsB;IACvC,mGAAmG;IACnG,oBAAoB,yBAAyB;IAC7C,uGAAuG;IACvG,6BAA6B,kCAAkC;IAC/D,4FAA4F;IAC5F,gBAAgB,qBAAqB;IACrC,uEAAuE;IACvE,qBAAqB,0BAA0B;CAChD;AAMD,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,UAAU,GAAG,aAAa,CAAC;AAEvE,MAAM,WAAW,aAAa;IAC5B,mDAAmD;IACnD,MAAM,EAAE,mBAAmB,CAAC;IAC5B,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAmI/D,CAAC;AAEF;;;GAGG;AACH,iGAAiG;AACjG,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAQjD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,CAEnE;AAMD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,oBAAoB,EAAE,OAAO,GAC5B,eAAe,CA8BjB"}