@tyvm/knowhow 0.0.83 → 0.0.84

package/ts_build/src/worker.js

@@ -33,9 +33,12 @@ const knowhow_tunnel_1 = require("@tyvm/knowhow-tunnel");
 const list_1 = require("./agents/tools/list");
 const login_1 = require("./login");
 const services_1 = require("./services");
+const PasskeySetup_1 = require("./workers/auth/PasskeySetup");
+const WorkerPasskeyAuth_1 = require("./workers/auth/WorkerPasskeyAuth");
+const tools_1 = require("./workers/tools");
 const Mcp_1 = require("./services/Mcp");
 const allTools = __importStar(require("./agents/tools"));
-const tools_1 = __importDefault(require("./workers/tools"));
+const tools_2 = __importDefault(require("./workers/tools"));
 const utils_1 = require("./utils");
 const config_1 = require("./config");
 const KnowhowClient_1 = require("./services/KnowhowClient");
@@ -90,6 +93,25 @@ async function runWorkerInSandbox(options, config) {
 }
 async function worker(options) {
     const config = await (0, config_1.getConfig)();
+    if (options?.passkeyReset) {
+        const passkeySetup = new PasskeySetup_1.PasskeySetupService();
+        await passkeySetup.reset();
+        return;
+    }
+    if (options?.passkey) {
+        let jwt;
+        try {
+            jwt = await (0, login_1.loadJwt)();
+        }
+        catch {
+            console.error("❌ You must be logged in to set up a passkey.");
+            console.error("   Run 'knowhow login' first.");
+            process.exit(1);
+        }
+        const passkeySetup = new PasskeySetup_1.PasskeySetupService();
+        await passkeySetup.setup(jwt);
+        return;
+    }
     const isInsideDocker = process.env.KNOWHOW_DOCKER === "true";
     if (isInsideDocker) {
         console.log("🐳 Already running inside Docker container, skipping sandbox mode");
@@ -138,12 +160,22 @@ async function worker(options) {
         return runWorkerInSandbox(options, config);
     }
     const { Tools } = (0, services_1.services)();
-    const combinedTools = { ...allTools, ...tools_1.default.tools };
+    const combinedTools = { ...allTools, ...tools_2.default.tools };
     Tools.defineTools(list_1.includedTools, combinedTools);
-    Tools.defineTools(tools_1.default.definitions, tools_1.default.tools);
+    Tools.defineTools(tools_2.default.definitions, tools_2.default.tools);
     const mcpServer = new Mcp_1.McpServerService(Tools);
     const clientName = "knowhow-worker";
     const clientVersion = "1.1.1";
+    let authService = null;
+    const passkeyConfig = config.worker?.auth?.passkey;
+    if (passkeyConfig?.publicKey && passkeyConfig?.credentialId) {
+        authService = new WorkerPasskeyAuth_1.WorkerPasskeyAuthService({
+            publicKey: passkeyConfig.publicKey,
+            credentialId: passkeyConfig.credentialId,
+            algorithm: -7,
+        }, config.worker?.auth?.sessionDurationHours ?? 3);
+        console.log("🔒 Passkey auth enabled — worker starts locked");
+    }
     if (!shouldUseSandbox) {
         console.log(`🖥️  Using host mode (${sandboxSource})`);
     }
@@ -160,7 +192,30 @@ async function worker(options) {
         await (0, workerRegistry_1.registerWorkerPath)(process.cwd());
         return;
     }
-    const toolsToUse = Tools.getToolsByNames(config.worker.allowedTools);
+    let toolsToUse = Tools.getToolsByNames(config.worker.allowedTools);
+    if (authService) {
+        const _authService = authService;
+        for (const tool of toolsToUse) {
+            const toolName = tool.function.name;
+            const originalFn = Tools.getFunction(toolName);
+            Tools.addFunctions({
+                [toolName]: async (...args) => {
+                    if (_authService.isLocked()) {
+                        return {
+                            error: "WORKER_LOCKED",
+                            message: "Worker is locked. Call the `unlock` tool with your passkey assertion to unlock it first.",
+                        };
+                    }
+                    return originalFn(...args);
+                },
+            });
+        }
+        const { unlock, unlockDefinition } = (0, tools_1.makeUnlockTool)(_authService);
+        const { lock, lockDefinition } = (0, tools_1.makeLockTool)(_authService);
+        Tools.addFunctions({ unlock, lock });
+        toolsToUse = [unlockDefinition, lockDefinition, ...toolsToUse];
+        console.log("🔑 Auth tools registered: unlock, lock");
+    }
     mcpServer.createServer(clientName, clientVersion).withTools(toolsToUse);
     let connected = false;
     let tunnelHandler = null;

package/ts_build/src/worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/worker.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAAoB;AACpB,2BAA+B;AAC/B,yDAA0E;AAC1E,8CAAoD;AACpD,mCAAkC;AAClC,yCAAsC;AACtC,wCAAkD;AAClD,yDAA2C;AAC3C,4DAA0C;AAC1C,mCAA+B;AAC/B,qCAAmD;AACnD,4DAA2D;AAC3D,qDAAsD;AAEtD,MAAM,OAAO,GAAG,+BAAe,CAAC;AAKhC,KAAK,UAAU,kBAAkB,CAC/B,OAAkE,EAClE,MAAW;IAEX,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,mBAAQ,GAAE,CAAC;IAE9B,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;IAGtE,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC;IAE5D,IAAI,CAAC,eAAe,EAAE;QACpB,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3D,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC1E,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAGrC,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,IAAI;QACF,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC;KACjC;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC1E,OAAO,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAGD,MAAM,GAAG,GAAG,MAAM,IAAA,eAAO,GAAE,CAAC;IAG5B,IAAI,WAAmB,CAAC;IAExB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC/C,IAAI;QACF,WAAW,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC;YAC5C,YAAY,EAAE,OAAO,CAAC,GAAG,EAAE;YAC3B,GAAG;YACH,MAAM,EAAE,OAAO;YACf,MAAM;YACN,KAAK,EAAE,OAAO,EAAE,KAAK;YACrB,OAAO,EAAE,OAAO,EAAE,OAAO;SAC1B,CAAC,CAAC;KACJ;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAGD,IAAI;QACF,MAAM,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;KAC/C;YAAS;QACR,MAAM,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;KACzC;AACH,CAAC;AAEM,KAAK,UAAU,MAAM,CAAC,OAM5B;IACC,MAAM,MAAM,GAAG,MAAM,IAAA,kBAAS,GAAE,CAAC;IAGjC,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,CAAC;IAE7D,IAAI,cAAc,EAAE;QAClB,OAAO,CAAC,GAAG,CACT,mEAAmE,CACpE,CAAC;QAEF,IAAI,OAAO,EAAE;YACX,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;YACxB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;SAC1B;KACF;IAGD,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,aAAa,GAAG,EAAE,CAAC;IAEvB,IAAI,OAAO,EAAE,OAAO,EAAE;QACpB,gBAAgB,GAAG,IAAI,CAAC;QACxB,aAAa,GAAG,0BAA0B,CAAC;QAG3C,MAAM,aAAa,GAAG;YACpB,GAAG,MAAM;YACT,MAAM,EAAE;gBACN,GAAG,MAAM,CAAC,MAAM;gBAChB,OAAO,EAAE,IAAI;aACd;SACF,CAAC;QACF,MAAM,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;KAC3D;SAAM,IAAI,OAAO,EAAE,SAAS,EAAE;QAC7B,gBAAgB,GAAG,KAAK,CAAC;QACzB,aAAa,GAAG,6BAA6B,CAAC;QAG9C,MAAM,aAAa,GAAG;YACpB,GAAG,MAAM;YACT,MAAM,EAAE;gBACN,GAAG,MAAM,CAAC,MAAM;gBAChB,OAAO,EAAE,KAAK;aACf;SACF,CAAC;QACF,MAAM,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;KAC9D;SAAM;QAEL,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC;QACnD,aAAa;YACX,MAAM,CAAC,MAAM,EAAE,OAAO,KAAK,SAAS;gBAClC,CAAC,CAAC,WAAW,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,GAAG;gBAC3D,CAAC,CAAC,sBAAsB,CAAC;KAC9B;IAED,IAAI,gBAAgB,EAAE;QACpB,OAAO,CAAC,GAAG,CAAC,0BAA0B,aAAa,GAAG,CAAC,CAAC;QACxD,OAAO,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;KAC5C;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,IAAA,mBAAQ,GAAE,CAAC;IAE7B,MAAM,aAAa,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,eAAW,CAAC,KAAK,EAAE,CAAC;IAC5D,KAAK,CAAC,WAAW,CAAC,oBAAa,EAAE,aAAa,CAAC,CAAC;IAChD,KAAK,CAAC,WAAW,CAAC,eAAW,CAAC,WAAW,EAAE,eAAW,CAAC,KAAK,CAAC,CAAC;IAE9D,MAAM,SAAS,GAAG,IAAI,sBAAgB,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,gBAAgB,CAAC;IACpC,MAAM,aAAa,GAAG,OAAO,CAAC;IAE9B,IAAI,CAAC,gBAAgB,EAAE;QACrB,OAAO,CAAC,GAAG,CAAC,yBAAyB,aAAa,GAAG,CAAC,CAAC;KACxD;IAID,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE;QACjD,OAAO,CAAC,GAAG,CACT,+FAA+F,CAChG,CAAC;QACF,MAAM,CAAC,MAAM,GAAG;YACd,GAAG,MAAM,CAAC,MAAM;YAChB,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;SACnC,CAAC;QAEF,MAAM,IAAA,qBAAY,EAAC,MAAM,CAAC,CAAC;QAC3B,OAAO;KACR;IAGD,IAAI,OAAO,EAAE,QAAQ,EAAE;QACrB,MAAM,IAAA,mCAAkB,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACxC,OAAO;KACR;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACrE,SAAS,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAExE,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,aAAa,GAAyB,IAAI,CAAC;IAC/C,IAAI,QAAQ,GAAqB,IAAI,CAAC;IAGtC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC;IAG9D,IAAI,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC;IACvD,IAAI,CAAC,eAAe,EAAE;QAEpB,IAAI,cAAc,EAAE;YAClB,eAAe,GAAG,sBAAsB,CAAC;YACzC,OAAO,CAAC,GAAG,CACT,iFAAiF,CAClF,CAAC;SACH;aAAM;YACL,eAAe,GAAG,WAAW,CAAC;SAC/B;KACF;IAGD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC;IAC7D,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;QACvC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;YACnE,OAAO,CAAC,GAAG,CAAC,qBAAqB,aAAa,gBAAgB,QAAQ,EAAE,CAAC,CAAC;SAC3E;KACF;IAED,IAAI,aAAa,EAAE;QACjB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC;QAC9D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE;YAC5B,OAAO,CAAC,IAAI,CACV,4FAA4F,CAC7F,CAAC;SACH;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,gCAAgC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACvE;KACF;SAAM;QACL,OAAO,CAAC,GAAG,CACT,2EAA2E,CAC5E,CAAC;KACH;IAKD,SAAS,mBAAmB,CAAC,MAAc;QAIzC,IAAI;YACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;YAG3C,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE;gBAChE,OAAO;oBACL,MAAM,EAAE,UAAU,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE;oBACpD,QAAQ;iBACT,CAAC;aACH;YACD,OAAO,EAAE,MAAM,EAAE,UAAU,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC;SACvD;QAAC,OAAO,GAAG,EAAE;YACZ,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC7D;IACH,CAAC;IAED,KAAK,UAAU,gBAAgB;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAA,eAAO,GAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;QAGxC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAExB,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAGhC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,YAAE,CAAC,OAAO,EAAE,CAAC;QAG7B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,YAAE,CAAC,QAAQ,EAAE,CAAC;QAC9D,MAAM,IAAI,GACR,OAAO,CAAC,GAAG,CAAC,WAAW;YACvB,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAEtD,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,GAAG,EAAE;YAC9B,YAAY,EAAE,GAAG,UAAU,IAAI,aAAa,IAAI,QAAQ,EAAE;YAC1D,IAAI,EAAE,IAAI;SACX,CAAC;QAGF,IAAI,OAAO,EAAE,KAAK,EAAE;YAClB,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;SACnD;aAAM,IAAI,OAAO,EAAE,OAAO,EAAE;YAC3B,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;SACpD;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;SAC3D;QAED,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,GACtD,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAE/B,MAAM,EAAE,GAAG,IAAI,cAAS,CAAC,GAAG,OAAO,YAAY,EAAE;YAC/C,OAAO;SACR,CAAC,CAAC;QAGH,IAAI,gBAAgB,GAAqB,IAAI,CAAC;QAC9C,IAAI,aAAa,EAAE;YACjB,gBAAgB,GAAG,IAAI,cAAS,CAAC,GAAG,OAAO,YAAY,EAAE;gBACvD,OAAO;aACR,CAAC,CAAC;YAEH,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBAC/B,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;gBAG1C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC;gBAK/D,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,QAAc,EAAE,EAAE;oBACnD,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,CAAC;oBACpC,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC;oBAOhC,MAAM,SAAS,GAAG,MAAM;wBACtB,CAAC,CAAC,GAAG,MAAM,KAAK,IAAI,EAAE;wBACtB,CAAC,CAAC,GAAG,QAAQ,KAAK,IAAI,EAAE,CAAC;oBAI3B,MAAM,cAAc,GAAG,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC;oBACtD,OAAO,cAAc,CAAC;gBACxB,CAAC,CAAC;gBAIF,aAAa,GAAG,IAAA,oCAAmB,EAAC,gBAAiB,EAAE;oBACrD,YAAY;oBACZ,oBAAoB,EAClB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,oBAAoB,IAAI,EAAE;oBACnD,cAAc,EAAE,cAAc;oBAC9B,SAAS,EAAE,eAAe;oBAC1B,WAAW;oBACX,kBAAkB,EAChB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,kBAAkB,KAAK,KAAK;oBACrD,WAAW;oBACX,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;YAEH,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBAC5C,OAAO,CAAC,GAAG,CACT,kCAAkC,IAAI,aAAa,MAAM,CAAC,QAAQ,EAAE,EAAE,CACvE,CAAC;gBACF,OAAO,CAAC,GAAG,CACT,8DAA8D,CAC/D,CAAC;gBAGF,IAAI,aAAa,EAAE;oBACjB,aAAa,CAAC,OAAO,EAAE,CAAC;oBACxB,aAAa,GAAG,IAAI,CAAC;iBACtB;gBACD,QAAQ,GAAG,IAAI,CAAC;gBAIhB,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC,CAAC,CAAC;YAEH,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACrC,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;gBAEhD,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC,CAAC,CAAC;YAEH,QAAQ,GAAG,gBAAgB,CAAC;SAC7B;QAED,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACjB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC1C,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;YACpC,OAAO,CAAC,GAAG,CACT,2BAA2B,IAAI,aAAa,MAAM,CAAC,QAAQ,EAAE,EAAE,CAChE,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAG1C,IAAI,aAAa,EAAE;gBACjB,aAAa,GAAG,IAAI,CAAC;aACtB;YAED,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAE1B,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED,OAAO,IAAI,EAAE;QACX,IAAI,UAAU,GAIH,IAAI,CAAC;QAEhB,IAAI,CAAC,SAAS,EAAE;YACd,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YACxC,UAAU,GAAG,MAAM,gBAAgB,EAAE,CAAC;SACvC;QACD,IAAI,UAAU,IAAI,SAAS,EAAE;YAC3B,IAAI;gBACF,MAAM,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;aAC5B;YAAC,OAAO,KAAK,EAAE;gBACd,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;gBAC/C,SAAS,GAAG,KAAK,CAAC;aACnB;SACF;QACD,MAAM,IAAA,YAAI,EAAC,IAAI,CAAC,CAAC;KAClB;AACH,CAAC;AA9VD,wBA8VC"}
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/worker.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAAoB;AACpB,2BAA+B;AAC/B,yDAA0E;AAC1E,8CAAoD;AACpD,mCAAkC;AAClC,yCAAsC;AACtC,8DAAkE;AAClE,wEAA4E;AAC5E,2CAA+D;AAC/D,wCAAkD;AAClD,yDAA2C;AAC3C,4DAA0C;AAC1C,mCAA+B;AAC/B,qCAAmD;AACnD,4DAA2D;AAC3D,qDAAsD;AAEtD,MAAM,OAAO,GAAG,+BAAe,CAAC;AAKhC,KAAK,UAAU,kBAAkB,CAC/B,OAAkE,EAClE,MAAW;IAEX,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,mBAAQ,GAAE,CAAC;IAE9B,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;IAGtE,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC;IAE5D,IAAI,CAAC,eAAe,EAAE;QACpB,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3D,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC1E,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAGrC,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IACrE,IAAI;QACF,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC;KACjC;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC1E,OAAO,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAGD,MAAM,GAAG,GAAG,MAAM,IAAA,eAAO,GAAE,CAAC;IAG5B,IAAI,WAAmB,CAAC;IAExB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC/C,IAAI;QACF,WAAW,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC;YAC5C,YAAY,EAAE,OAAO,CAAC,GAAG,EAAE;YAC3B,GAAG;YACH,MAAM,EAAE,OAAO;YACf,MAAM;YACN,KAAK,EAAE,OAAO,EAAE,KAAK;YACrB,OAAO,EAAE,OAAO,EAAE,OAAO;SAC1B,CAAC,CAAC;KACJ;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACjB;IAGD,IAAI;QACF,MAAM,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;KAC/C;YAAS;QACR,MAAM,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;KACzC;AACH,CAAC;AAEM,KAAK,UAAU,MAAM,CAAC,OAQ5B;IACC,MAAM,MAAM,GAAG,MAAM,IAAA,kBAAS,GAAE,CAAC;IAGjC,IAAI,OAAO,EAAE,YAAY,EAAE;QACzB,MAAM,YAAY,GAAG,IAAI,kCAAmB,EAAE,CAAC;QAC/C,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;QAC3B,OAAO;KACR;IAGD,IAAI,OAAO,EAAE,OAAO,EAAE;QACpB,IAAI,GAAW,CAAC;QAChB,IAAI;YACF,GAAG,GAAG,MAAM,IAAA,eAAO,GAAE,CAAC;SACvB;QAAC,MAAM;YACN,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC9D,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SACjB;QACD,MAAM,YAAY,GAAG,IAAI,kCAAmB,EAAE,CAAC;QAC/C,MAAM,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO;KACR;IAGD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,CAAC;IAE7D,IAAI,cAAc,EAAE;QAClB,OAAO,CAAC,GAAG,CACT,mEAAmE,CACpE,CAAC;QAEF,IAAI,OAAO,EAAE;YACX,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;YACxB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;SAC1B;KACF;IAGD,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,aAAa,GAAG,EAAE,CAAC;IAEvB,IAAI,OAAO,EAAE,OAAO,EAAE;QACpB,gBAAgB,GAAG,IAAI,CAAC;QACxB,aAAa,GAAG,0BAA0B,CAAC;QAG3C,MAAM,aAAa,GAAG;YACpB,GAAG,MAAM;YACT,MAAM,EAAE;gBACN,GAAG,MAAM,CAAC,MAAM;gBAChB,OAAO,EAAE,IAAI;aACd;SACF,CAAC;QACF,MAAM,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;KAC3D;SAAM,IAAI,OAAO,EAAE,SAAS,EAAE;QAC7B,gBAAgB,GAAG,KAAK,CAAC;QACzB,aAAa,GAAG,6BAA6B,CAAC;QAG9C,MAAM,aAAa,GAAG;YACpB,GAAG,MAAM;YACT,MAAM,EAAE;gBACN,GAAG,MAAM,CAAC,MAAM;gBAChB,OAAO,EAAE,KAAK;aACf;SACF,CAAC;QACF,MAAM,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;KAC9D;SAAM;QAEL,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC;QACnD,aAAa;YACX,MAAM,CAAC,MAAM,EAAE,OAAO,KAAK,SAAS;gBAClC,CAAC,CAAC,WAAW,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,GAAG;gBAC3D,CAAC,CAAC,sBAAsB,CAAC;KAC9B;IAED,IAAI,gBAAgB,EAAE;QACpB,OAAO,CAAC,GAAG,CAAC,0BAA0B,aAAa,GAAG,CAAC,CAAC;QACxD,OAAO,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;KAC5C;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,IAAA,mBAAQ,GAAE,CAAC;IAE7B,MAAM,aAAa,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,eAAW,CAAC,KAAK,EAAE,CAAC;IAC5D,KAAK,CAAC,WAAW,CAAC,oBAAa,EAAE,aAAa,CAAC,CAAC;IAChD,KAAK,CAAC,WAAW,CAAC,eAAW,CAAC,WAAW,EAAE,eAAW,CAAC,KAAK,CAAC,CAAC;IAE9D,MAAM,SAAS,GAAG,IAAI,sBAAgB,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,gBAAgB,CAAC;IACpC,MAAM,aAAa,GAAG,OAAO,CAAC;IAK9B,IAAI,WAAW,GAAoC,IAAI,CAAC;IACxD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC;IAEnD,IAAI,aAAa,EAAE,SAAS,IAAI,aAAa,EAAE,YAAY,EAAE;QAC3D,WAAW,GAAG,IAAI,4CAAwB,CACxC;YACE,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,YAAY,EAAE,aAAa,CAAC,YAAY;YACxC,SAAS,EAAE,CAAC,CAAC;SACd,EACD,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,oBAAoB,IAAI,CAAC,CAC/C,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;KAC/D;IAED,IAAI,CAAC,gBAAgB,EAAE;QACrB,OAAO,CAAC,GAAG,CAAC,yBAAyB,aAAa,GAAG,CAAC,CAAC;KACxD;IAID,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE;QACjD,OAAO,CAAC,GAAG,CACT,+FAA+F,CAChG,CAAC;QACF,MAAM,CAAC,MAAM,GAAG;YACd,GAAG,MAAM,CAAC,MAAM;YAChB,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;SACnC,CAAC;QACF,MAAM,IAAA,qBAAY,EAAC,MAAM,CAAC,CAAC;QAC3B,OAAO;KACR;IAGD,IAAI,OAAO,EAAE,QAAQ,EAAE;QACrB,MAAM,IAAA,mCAAkB,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACxC,OAAO;KACR;IAED,IAAI,UAAU,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAInE,IAAI,WAAW,EAAE;QACf,MAAM,YAAY,GAAG,WAAW,CAAC;QAGjC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACpC,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC/C,KAAK,CAAC,YAAY,CAAC;gBACjB,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,GAAG,IAAW,EAAE,EAAE;oBACnC,IAAI,YAAY,CAAC,QAAQ,EAAE,EAAE;wBAC3B,OAAO;4BACL,KAAK,EAAE,eAAe;4BACtB,OAAO,EACL,0FAA0F;yBAC7F,CAAC;qBACH;oBACD,OAAO,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC7B,CAAC;aACF,CAAC,CAAC;SACJ;QAGD,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,IAAA,sBAAc,EAAC,YAAY,CAAC,CAAC;QAClE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,IAAA,oBAAY,EAAC,YAAY,CAAC,CAAC;QAE5D,KAAK,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,UAAU,GAAG,CAAC,gBAAgB,EAAE,cAAc,EAAE,GAAG,UAAU,CAAC,CAAC;QAE/D,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;KACvD;IAED,SAAS,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAExE,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,aAAa,GAAyB,IAAI,CAAC;IAC/C,IAAI,QAAQ,GAAqB,IAAI,CAAC;IAGtC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC;IAG9D,IAAI,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC;IACvD,IAAI,CAAC,eAAe,EAAE;QAEpB,IAAI,cAAc,EAAE;YAClB,eAAe,GAAG,sBAAsB,CAAC;YACzC,OAAO,CAAC,GAAG,CACT,iFAAiF,CAClF,CAAC;SACH;aAAM;YACL,eAAe,GAAG,WAAW,CAAC;SAC/B;KACF;IAGD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC;IAC7D,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;QACvC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;YACnE,OAAO,CAAC,GAAG,CAAC,qBAAqB,aAAa,gBAAgB,QAAQ,EAAE,CAAC,CAAC;SAC3E;KACF;IAED,IAAI,aAAa,EAAE;QACjB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC;QAC9D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE;YAC5B,OAAO,CAAC,IAAI,CACV,4FAA4F,CAC7F,CAAC;SACH;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,gCAAgC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACvE;KACF;SAAM;QACL,OAAO,CAAC,GAAG,CACT,2EAA2E,CAC5E,CAAC;KACH;IAKD,SAAS,mBAAmB,CAAC,MAAc;QAIzC,IAAI;YACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;YAG3C,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE;gBAChE,OAAO;oBACL,MAAM,EAAE,UAAU,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE;oBACpD,QAAQ;iBACT,CAAC;aACH;YACD,OAAO,EAAE,MAAM,EAAE,UAAU,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC;SACvD;QAAC,OAAO,GAAG,EAAE;YACZ,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;SAC7D;IACH,CAAC;IAED,KAAK,UAAU,gBAAgB;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAA,eAAO,GAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;QAGxC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAExB,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAGhC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,YAAE,CAAC,OAAO,EAAE,CAAC;QAG7B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,YAAE,CAAC,QAAQ,EAAE,CAAC;QAC9D,MAAM,IAAI,GACR,OAAO,CAAC,GAAG,CAAC,WAAW;YACvB,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAEtD,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,GAAG,EAAE;YAC9B,YAAY,EAAE,GAAG,UAAU,IAAI,aAAa,IAAI,QAAQ,EAAE;YAC1D,IAAI,EAAE,IAAI;SACX,CAAC;QAGF,IAAI,OAAO,EAAE,KAAK,EAAE;YAClB,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;SACnD;aAAM,IAAI,OAAO,EAAE,OAAO,EAAE;YAC3B,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;SACpD;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;SAC3D;QAED,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,GACtD,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAE/B,MAAM,EAAE,GAAG,IAAI,cAAS,CAAC,GAAG,OAAO,YAAY,EAAE;YAC/C,OAAO;SACR,CAAC,CAAC;QAGH,IAAI,gBAAgB,GAAqB,IAAI,CAAC;QAC9C,IAAI,aAAa,EAAE;YACjB,gBAAgB,GAAG,IAAI,cAAS,CAAC,GAAG,OAAO,YAAY,EAAE;gBACvD,OAAO;aACR,CAAC,CAAC;YAEH,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBAC/B,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;gBAG1C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC;gBAK/D,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,QAAc,EAAE,EAAE;oBACnD,MAAM,QAAQ,GAAG,QAAQ,EAAE,QAAQ,CAAC;oBACpC,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC;oBAOhC,MAAM,SAAS,GAAG,MAAM;wBACtB,CAAC,CAAC,GAAG,MAAM,KAAK,IAAI,EAAE;wBACtB,CAAC,CAAC,GAAG,QAAQ,KAAK,IAAI,EAAE,CAAC;oBAI3B,MAAM,cAAc,GAAG,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC;oBACtD,OAAO,cAAc,CAAC;gBACxB,CAAC,CAAC;gBAIF,aAAa,GAAG,IAAA,oCAAmB,EAAC,gBAAiB,EAAE;oBACrD,YAAY;oBACZ,oBAAoB,EAClB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,oBAAoB,IAAI,EAAE;oBACnD,cAAc,EAAE,cAAc;oBAC9B,SAAS,EAAE,eAAe;oBAC1B,WAAW;oBACX,kBAAkB,EAChB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,kBAAkB,KAAK,KAAK;oBACrD,WAAW;oBACX,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;YAEH,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBAC5C,OAAO,CAAC,GAAG,CACT,kCAAkC,IAAI,aAAa,MAAM,CAAC,QAAQ,EAAE,EAAE,CACvE,CAAC;gBACF,OAAO,CAAC,GAAG,CACT,8DAA8D,CAC/D,CAAC;gBAGF,IAAI,aAAa,EAAE;oBACjB,aAAa,CAAC,OAAO,EAAE,CAAC;oBACxB,aAAa,GAAG,IAAI,CAAC;iBACtB;gBACD,QAAQ,GAAG,IAAI,CAAC;gBAIhB,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC,CAAC,CAAC;YAEH,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACrC,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;gBAEhD,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC,CAAC,CAAC;YAEH,QAAQ,GAAG,gBAAgB,CAAC;SAC7B;QAED,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACjB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC1C,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;YACpC,OAAO,CAAC,GAAG,CACT,2BAA2B,IAAI,aAAa,MAAM,CAAC,QAAQ,EAAE,EAAE,CAChE,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAG1C,IAAI,aAAa,EAAE;gBACjB,aAAa,GAAG,IAAI,CAAC;aACtB;YAED,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAE1B,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACrC,CAAC;IAED,OAAO,IAAI,EAAE;QACX,IAAI,UAAU,GAIH,IAAI,CAAC;QAEhB,IAAI,CAAC,SAAS,EAAE;YACd,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YACxC,UAAU,GAAG,MAAM,gBAAgB,EAAE,CAAC;SACvC;QACD,IAAI,UAAU,IAAI,SAAS,EAAE;YAC3B,IAAI;gBACF,MAAM,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;aAC5B;YAAC,OAAO,KAAK,EAAE;gBACd,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;gBAC/C,SAAS,GAAG,KAAK,CAAC;aACnB;SACF;QACD,MAAM,IAAA,YAAI,EAAC,IAAI,CAAC,CAAC;KAClB;AACH,CAAC;AAzaD,wBAyaC"}

package/ts_build/src/workers/auth/PasskeySetup.d.ts

@@ -0,0 +1,10 @@
+export declare class PasskeySetupService {
+    private baseUrl;
+    constructor(baseUrl?: string);
+    setup(jwt: string): Promise<void>;
+    reset(): Promise<void>;
+    private createSetupSession;
+    private pollForCompletion;
+    private saveCredential;
+    private sleep;
+}

package/ts_build/src/workers/auth/PasskeySetup.js

@@ -0,0 +1,131 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasskeySetupService = void 0;
+const axios_1 = __importDefault(require("axios"));
+const KnowhowClient_1 = require("../../services/KnowhowClient");
+const browserLogin_1 = require("../../auth/browserLogin");
+const spinner_1 = require("../../auth/spinner");
+const config_1 = require("../../config");
+class PasskeySetupService {
+    baseUrl;
+    constructor(baseUrl = KnowhowClient_1.KNOWHOW_API_URL) {
+        if (!baseUrl) {
+            throw new Error("KNOWHOW_API_URL environment variable not set");
+        }
+        this.baseUrl = baseUrl;
+    }
+    async setup(jwt) {
+        const spinner = new spinner_1.Spinner();
+        try {
+            spinner.start("Creating passkey setup session");
+            const session = await this.createSetupSession(jwt);
+            spinner.stop();
+            await (0, browserLogin_1.openBrowser)(session.browserUrl);
+            console.log(`\nIf the browser didn't open automatically, please visit:\n  ${session.browserUrl}\n`);
+            spinner.start("Waiting for passkey registration in browser…");
+            const credential = await this.pollForCompletion(session.sessionId, spinner);
+            spinner.stop();
+            spinner.start("Saving passkey credential to config");
+            await this.saveCredential(credential);
+            spinner.stop();
+            console.log("✅ Passkey registered successfully!");
+            console.log("   Worker will now require passkey authentication for new connections.");
+        }
+        catch (error) {
+            spinner.stop();
+            throw error;
+        }
+    }
+    async reset() {
+        const config = await (0, config_1.getConfig)();
+        if (!config.worker?.auth?.passkey) {
+            console.log("ℹ️  No passkey configured for this worker.");
+            return;
+        }
+        const updatedConfig = {
+            ...config,
+            worker: {
+                ...config.worker,
+                auth: {
+                    ...config.worker.auth,
+                    required: false,
+                    passkey: undefined,
+                },
+            },
+        };
+        await (0, config_1.updateConfig)(updatedConfig);
+        console.log("✅ Passkey requirement removed from config.");
+    }
+    async createSetupSession(jwt) {
+        try {
+            const response = await axios_1.default.post(`${this.baseUrl}/api/worker/passkey/setup/session`, {}, {
+                headers: { Authorization: `Bearer ${jwt}` },
+                timeout: 10000,
+            });
+            return response.data;
+        }
+        catch (error) {
+            if (axios_1.default.isAxiosError(error)) {
+                throw new Error(`Failed to create passkey setup session: ${error.response?.data?.message || error.message}`);
+            }
+            throw error;
+        }
+    }
+    async pollForCompletion(sessionId, spinner) {
+        const maxAttempts = 60;
+        let attempt = 0;
+        while (attempt < maxAttempts) {
+            attempt++;
+            try {
+                const response = await axios_1.default.get(`${this.baseUrl}/api/worker/passkey/setup/status/${sessionId}`, { timeout: 10000 });
+                const { status, credential } = response.data;
+                if (status === "complete" && credential) {
+                    return credential;
+                }
+                else if (status === "expired") {
+                    throw new Error("Passkey setup session expired. Please run 'knowhow worker --passkey' again.");
+                }
+            }
+            catch (error) {
+                if (axios_1.default.isAxiosError(error) && error.code === "ECONNABORTED") {
+                }
+                else if (!(error instanceof Error && error.message.includes("expired"))) {
+                    throw error;
+                }
+                else {
+                    throw error;
+                }
+            }
+            await this.sleep(5000);
+        }
+        throw new Error("Passkey setup timed out. Please try again.");
+    }
+    async saveCredential(credential) {
+        const config = await (0, config_1.getConfig)();
+        const updatedConfig = {
+            ...config,
+            worker: {
+                ...config.worker,
+                auth: {
+                    ...config.worker?.auth,
+                    required: true,
+                    passkey: {
+                        publicKey: credential.publicKey,
+                        credentialId: credential.credentialId,
+                        algorithm: credential.algorithm,
+                    },
+                    sessionDurationHours: config.worker?.auth?.sessionDurationHours ?? 3,
+                },
+            },
+        };
+        await (0, config_1.updateConfig)(updatedConfig);
+    }
+    async sleep(ms) {
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    }
+}
+exports.PasskeySetupService = PasskeySetupService;
+//# sourceMappingURL=PasskeySetup.js.map

package/ts_build/src/workers/auth/PasskeySetup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasskeySetup.js","sourceRoot":"","sources":["../../../../src/workers/auth/PasskeySetup.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA0B;AAC1B,gEAA+D;AAC/D,0DAAsD;AACtD,gDAA6C;AAC7C,yCAAuD;AAYvD,MAAa,mBAAmB;IACtB,OAAO,CAAS;IAExB,YAAY,UAAkB,+BAAe;QAC3C,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;SACjE;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAKD,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,MAAM,OAAO,GAAG,IAAI,iBAAO,EAAE,CAAC;QAE9B,IAAI;YACF,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,MAAM,IAAA,0BAAW,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CACT,gEAAgE,OAAO,CAAC,UAAU,IAAI,CACvF,CAAC;YAEF,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAE9D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAE5E,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAErD,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAEtC,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CACT,wEAAwE,CACzE,CAAC;SACH;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,KAAK,CAAC;SACb;IACH,CAAC;IAKD,KAAK,CAAC,KAAK;QACT,MAAM,MAAM,GAAG,MAAM,IAAA,kBAAS,GAAE,CAAC;QAEjC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;YACjC,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAC1D,OAAO;SACR;QAED,MAAM,aAAa,GAAG;YACpB,GAAG,MAAM;YACT,MAAM,EAAE;gBACN,GAAG,MAAM,CAAC,MAAM;gBAChB,IAAI,EAAE;oBACJ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI;oBACrB,QAAQ,EAAE,KAAK;oBACf,OAAO,EAAE,SAAS;iBACnB;aACF;SACF,CAAC;QAEF,MAAM,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC5D,CAAC;IAMO,KAAK,CAAC,kBAAkB,CAAC,GAAW;QAC1C,IAAI;YACF,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,IAAI,CAC/B,GAAG,IAAI,CAAC,OAAO,mCAAmC,EAClD,EAAE,EACF;gBACE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE;gBAC3C,OAAO,EAAE,KAAK;aACf,CACF,CAAC;YACF,OAAO,QAAQ,CAAC,IAAI,CAAC;SACtB;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,eAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE;gBAC7B,MAAM,IAAI,KAAK,CACb,2CACE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC,OACzC,EAAE,CACH,CAAC;aACH;YACD,MAAM,KAAK,CAAC;SACb;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,SAAiB,EACjB,OAAgB;QAEhB,MAAM,WAAW,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,OAAO,OAAO,GAAG,WAAW,EAAE;YAC5B,OAAO,EAAE,CAAC;YAEV,IAAI;gBACF,MAAM,QAAQ,GAAG,MAAM,eAAK,CAAC,GAAG,CAC9B,GAAG,IAAI,CAAC,OAAO,oCAAoC,SAAS,EAAE,EAC9D,EAAE,OAAO,EAAE,KAAK,EAAE,CACnB,CAAC;gBAEF,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;gBAE7C,IAAI,MAAM,KAAK,UAAU,IAAI,UAAU,EAAE;oBACvC,OAAO,UAAU,CAAC;iBACnB;qBAAM,IAAI,MAAM,KAAK,SAAS,EAAE;oBAC/B,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;iBACH;aACF;YAAC,OAAO,KAAK,EAAE;gBACd,IAAI,eAAK,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE;iBAE/D;qBAAM,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE;oBAEzE,MAAM,KAAK,CAAC;iBACb;qBAAM;oBACL,MAAM,KAAK,CAAC;iBACb;aACF;YAED,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SACxB;QAED,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,UAA6B;QACxD,MAAM,MAAM,GAAG,MAAM,IAAA,kBAAS,GAAE,CAAC;QAEjC,MAAM,aAAa,GAAG;YACpB,GAAG,MAAM;YACT,MAAM,EAAE;gBACN,GAAG,MAAM,CAAC,MAAM;gBAChB,IAAI,EAAE;oBACJ,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI;oBACtB,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE;wBACP,SAAS,EAAE,UAAU,CAAC,SAAS;wBAC/B,YAAY,EAAE,UAAU,CAAC,YAAY;wBACrC,SAAS,EAAE,UAAU,CAAC,SAAS;qBAChC;oBACD,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,oBAAoB,IAAI,CAAC;iBACrE;aACF;SACF,CAAC;QAEF,MAAM,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,EAAU;QAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;CACF;AAxKD,kDAwKC"}

package/ts_build/src/workers/auth/WorkerPasskeyAuth.d.ts

@@ -0,0 +1,35 @@
+export interface PasskeyConfig {
+    publicKey: string;
+    credentialId: string;
+    algorithm: number;
+}
+export interface UnlockParams {
+    signature: string;
+    credentialId: string;
+    authenticatorData: string;
+    clientDataJSON: string;
+    challenge: string;
+}
+export declare class WorkerPasskeyAuthService {
+    private passkeyConfig;
+    private locked;
+    private sessionExpiry;
+    private sessionDurationMs;
+    private pendingChallenge;
+    private pendingChallengeExpiry;
+    private readonly CHALLENGE_TTL_MS;
+    constructor(passkeyConfig: PasskeyConfig, sessionDurationHours?: number);
+    isLocked(): boolean;
+    generateChallenge(): string;
+    unlock(params: UnlockParams): Promise<{
+        success: boolean;
+        reason?: string;
+    }>;
+    lock(): void;
+    getSessionInfo(): {
+        locked: boolean;
+        expiresAt: string;
+    };
+    getCredentialId(): string;
+    private verifySignature;
+}

package/ts_build/src/workers/auth/WorkerPasskeyAuth.js

@@ -0,0 +1,129 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkerPasskeyAuthService = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const server_1 = require("@simplewebauthn/server");
+class WorkerPasskeyAuthService {
+    passkeyConfig;
+    locked = true;
+    sessionExpiry = null;
+    sessionDurationMs;
+    pendingChallenge = null;
+    pendingChallengeExpiry = null;
+    CHALLENGE_TTL_MS = 5 * 60 * 1000;
+    constructor(passkeyConfig, sessionDurationHours = 3) {
+        this.passkeyConfig = passkeyConfig;
+        this.sessionDurationMs = sessionDurationHours * 60 * 60 * 1000;
+    }
+    isLocked() {
+        if (!this.locked) {
+            if (this.sessionExpiry && Date.now() > this.sessionExpiry) {
+                console.log("🔒 Passkey session expired, locking worker");
+                this.locked = true;
+                this.sessionExpiry = null;
+            }
+        }
+        return this.locked;
+    }
+    generateChallenge() {
+        const challengeBytes = crypto_1.default.randomBytes(32);
+        const challenge = challengeBytes.toString("base64url");
+        this.pendingChallenge = challenge;
+        this.pendingChallengeExpiry = Date.now() + this.CHALLENGE_TTL_MS;
+        return challenge;
+    }
+    async unlock(params) {
+        if (!this.pendingChallenge) {
+            return { success: false, reason: "No pending challenge. Call getChallenge first." };
+        }
+        if (this.pendingChallengeExpiry && Date.now() > this.pendingChallengeExpiry) {
+            this.pendingChallenge = null;
+            this.pendingChallengeExpiry = null;
+            return { success: false, reason: "Challenge expired. Please request a new challenge." };
+        }
+        let clientData;
+        try {
+            const clientDataBytes = Buffer.from(params.clientDataJSON, "base64url");
+            clientData = JSON.parse(clientDataBytes.toString("utf8"));
+        }
+        catch {
+            return { success: false, reason: "Invalid clientDataJSON" };
+        }
+        if (clientData.challenge !== this.pendingChallenge) {
+            return { success: false, reason: "Challenge mismatch" };
+        }
+        if (clientData.type !== "webauthn.get") {
+            return { success: false, reason: "Invalid clientData type" };
+        }
+        if (params.credentialId !== this.passkeyConfig.credentialId) {
+            return { success: false, reason: "Unknown credential" };
+        }
+        const valid = await this.verifySignature(params, clientData.origin);
+        if (!valid) {
+            return { success: false, reason: "Invalid signature" };
+        }
+        this.locked = false;
+        this.sessionExpiry = Date.now() + this.sessionDurationMs;
+        this.pendingChallenge = null;
+        this.pendingChallengeExpiry = null;
+        const expiresAt = new Date(this.sessionExpiry).toISOString();
+        console.log(`🔓 Worker unlocked! Session expires at ${expiresAt}`);
+        return { success: true };
+    }
+    lock() {
+        this.locked = true;
+        this.sessionExpiry = null;
+        this.pendingChallenge = null;
+        this.pendingChallengeExpiry = null;
+        console.log("🔒 Worker locked");
+    }
+    getSessionInfo() {
+        if (this.locked || !this.sessionExpiry) {
+            return { locked: true, expiresAt: null };
+        }
+        return {
+            locked: false,
+            expiresAt: new Date(this.sessionExpiry).toISOString(),
+        };
+    }
+    getCredentialId() {
+        return this.passkeyConfig.credentialId;
+    }
+    async verifySignature(params, origin) {
+        try {
+            const { verified } = await (0, server_1.verifyAuthenticationResponse)({
+                response: {
+                    id: params.credentialId,
+                    rawId: params.credentialId,
+                    response: {
+                        authenticatorData: params.authenticatorData,
+                        clientDataJSON: params.clientDataJSON,
+                        signature: params.signature,
+                    },
+                    type: "public-key",
+                    clientExtensionResults: {},
+                },
+                expectedChallenge: this.pendingChallenge,
+                expectedOrigin: origin,
+                expectedRPID: new URL(origin).hostname,
+                credential: {
+                    id: this.passkeyConfig.credentialId,
+                    publicKey: Buffer.from(this.passkeyConfig.publicKey, "base64url"),
+                    counter: 0,
+                    transports: undefined,
+                },
+                requireUserVerification: false,
+            });
+            return verified;
+        }
+        catch (err) {
+            console.error("Signature verification error:", err);
+            return false;
+        }
+    }
+}
+exports.WorkerPasskeyAuthService = WorkerPasskeyAuthService;
+//# sourceMappingURL=WorkerPasskeyAuth.js.map

package/ts_build/src/workers/auth/WorkerPasskeyAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkerPasskeyAuth.js","sourceRoot":"","sources":["../../../../src/workers/auth/WorkerPasskeyAuth.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAC5B,mDAAsE;AA4BtE,MAAa,wBAAwB;IAUzB;IATF,MAAM,GAAG,IAAI,CAAC;IACd,aAAa,GAAkB,IAAI,CAAC;IACpC,iBAAiB,CAAS;IAE1B,gBAAgB,GAAkB,IAAI,CAAC;IACvC,sBAAsB,GAAkB,IAAI,CAAC;IACpC,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAElD,YACU,aAA4B,EACpC,uBAA+B,CAAC;QADxB,kBAAa,GAAb,aAAa,CAAe;QAGpC,IAAI,CAAC,iBAAiB,GAAG,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACjE,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAEhB,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE;gBACzD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;gBAC1D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;aAC3B;SACF;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAMD,iBAAiB;QACf,MAAM,cAAc,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;QAClC,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;IAMD,KAAK,CAAC,MAAM,CAAC,MAAoB;QAE/B,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;YAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;SACrF;QACD,IAAI,IAAI,CAAC,sBAAsB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,sBAAsB,EAAE;YAC3E,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC7B,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;YACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC;SACzF;QAGD,IAAI,UAA+D,CAAC;QACpE,IAAI;YACF,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YACxE,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;SAC3D;QAAC,MAAM;YACN,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;SAC7D;QAGD,IAAI,UAAU,CAAC,SAAS,KAAK,IAAI,CAAC,gBAAgB,EAAE;YAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;SACzD;QAED,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,EAAE;YACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;SAC9D;QAGD,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE;YAC3D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;SACzD;QAGD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,EAAE;YACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;SACxD;QAGD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACzD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;QAEnC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,0CAA0C,SAAS,EAAE,CAAC,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI;QACF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;IAED,cAAc;QACZ,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YACtC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SAC1C;QACD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE;SACtD,CAAC;IACJ,CAAC;IAKD,eAAe;QACb,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;IACzC,CAAC;IAUO,KAAK,CAAC,eAAe,CAAC,MAAoB,EAAE,MAAc;QAChE,IAAI;YACF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAA,qCAA4B,EAAC;gBACtD,QAAQ,EAAE;oBACR,EAAE,EAAE,MAAM,CAAC,YAAY;oBACvB,KAAK,EAAE,MAAM,CAAC,YAAY;oBAC1B,QAAQ,EAAE;wBACR,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;wBAC3C,cAAc,EAAE,MAAM,CAAC,cAAc;wBACrC,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC5B;oBACD,IAAI,EAAE,YAAY;oBAClB,sBAAsB,EAAE,EAAE;iBAC3B;gBACD,iBAAiB,EAAE,IAAI,CAAC,gBAAiB;gBACzC,cAAc,EAAE,MAAM;gBACtB,YAAY,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ;gBACtC,UAAU,EAAE;oBACV,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,YAAY;oBACnC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC;oBACjE,OAAO,EAAE,CAAC;oBACV,UAAU,EAAE,SAAS;iBACtB;gBACD,uBAAuB,EAAE,KAAK;aAC/B,CAAC,CAAC;YAEH,OAAO,QAAQ,CAAC;SACjB;QAAC,OAAO,GAAG,EAAE;YACZ,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAC;YACpD,OAAO,KAAK,CAAC;SACd;IACH,CAAC;CACF;AAhKD,4DAgKC"}

package/ts_build/src/workers/auth/types.d.ts

@@ -0,0 +1,36 @@
+export interface AuthChallengeMessage {
+    type: "auth:challenge";
+    challenge: string;
+    timestamp: number;
+}
+export interface AuthResponseMessage {
+    type: "auth:response";
+    challenge: string;
+    signature: string;
+    credentialId: string;
+    authenticatorData: string;
+    clientDataJSON: string;
+}
+export interface AuthSuccessMessage {
+    type: "auth:success";
+    token: string;
+    expiresAt: number;
+}
+export interface AuthFailureMessage {
+    type: "auth:failure";
+    reason: "invalid_signature" | "expired" | "unknown_credential";
+}
+export type AuthMessage = AuthChallengeMessage | AuthResponseMessage | AuthSuccessMessage | AuthFailureMessage;
+export interface PasskeyCredential {
+    publicKey: string;
+    credentialId: string;
+    algorithm: string;
+}
+export interface PasskeySetupSession {
+    sessionId: string;
+    browserUrl: string;
+}
+export interface PasskeySetupStatus {
+    status: "pending" | "complete" | "expired";
+    credential?: PasskeyCredential;
+}

package/ts_build/src/workers/auth/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/ts_build/src/workers/auth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/workers/auth/types.ts"],"names":[],"mappings":""}

package/ts_build/src/workers/tools/getChallenge.d.ts

@@ -0,0 +1,9 @@
+import { Tool } from "../../clients/types";
+import { WorkerPasskeyAuthService } from "../auth/WorkerPasskeyAuth";
+export declare function makeGetChallengeTool(authService: WorkerPasskeyAuthService): {
+    getChallenge: () => Promise<{
+        challenge: string;
+        message: string;
+    }>;
+    getChallengeDefinition: Tool;
+};

package/ts_build/src/workers/tools/getChallenge.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeGetChallengeTool = void 0;
+function makeGetChallengeTool(authService) {
+    async function getChallenge() {
+        const challenge = authService.generateChallenge();
+        return {
+            challenge,
+            message: "Sign this challenge with your passkey and call the `unlock` tool with the assertion data.",
+        };
+    }
+    const getChallengeDefinition = {
+        type: "function",
+        function: {
+            name: "getChallenge",
+            description: "Get a challenge string to sign with your passkey. Required before calling `unlock`. Returns a base64url-encoded challenge.",
+            parameters: {
+                type: "object",
+                properties: {},
+                required: [],
+            },
+        },
+    };
+    return { getChallenge, getChallengeDefinition };
+}
+exports.makeGetChallengeTool = makeGetChallengeTool;
+//# sourceMappingURL=getChallenge.js.map

package/ts_build/src/workers/tools/getChallenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getChallenge.js","sourceRoot":"","sources":["../../../../src/workers/tools/getChallenge.ts"],"names":[],"mappings":";;;AAOA,SAAgB,oBAAoB,CAAC,WAAqC;IACxE,KAAK,UAAU,YAAY;QACzB,MAAM,SAAS,GAAG,WAAW,CAAC,iBAAiB,EAAE,CAAC;QAClD,OAAO;YACL,SAAS;YACT,OAAO,EACL,2FAA2F;SAC9F,CAAC;IACJ,CAAC;IAED,MAAM,sBAAsB,GAAS;QACnC,IAAI,EAAE,UAAmB;QACzB,QAAQ,EAAE;YACR,IAAI,EAAE,cAAc;YACpB,WAAW,EACT,4HAA4H;YAC9H,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE;gBACd,QAAQ,EAAE,EAAE;aACb;SACF;KACF,CAAC;IAEF,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,CAAC;AAClD,CAAC;AAzBD,oDAyBC"}

package/ts_build/src/workers/tools/index.d.ts

@@ -1,5 +1,11 @@
 export * from "./listAllowedPorts";
+export * from "./getChallenge";
+export * from "./unlock";
+export * from "./lock";
 import { listAllowedPorts } from "./listAllowedPorts";
+export { makeGetChallengeTool } from "./getChallenge";
+export { makeUnlockTool } from "./unlock";
+export { makeLockTool } from "./lock";
 declare const _default: {
     tools: {
         listAllowedPorts: typeof listAllowedPorts;

package/ts_build/src/workers/tools/index.js

@@ -14,8 +14,18 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeLockTool = exports.makeUnlockTool = exports.makeGetChallengeTool = void 0;
 __exportStar(require("./listAllowedPorts"), exports);
+__exportStar(require("./getChallenge"), exports);
+__exportStar(require("./unlock"), exports);
+__exportStar(require("./lock"), exports);
 const listAllowedPorts_1 = require("./listAllowedPorts");
+var getChallenge_1 = require("./getChallenge");
+Object.defineProperty(exports, "makeGetChallengeTool", { enumerable: true, get: function () { return getChallenge_1.makeGetChallengeTool; } });
+var unlock_1 = require("./unlock");
+Object.defineProperty(exports, "makeUnlockTool", { enumerable: true, get: function () { return unlock_1.makeUnlockTool; } });
+var lock_1 = require("./lock");
+Object.defineProperty(exports, "makeLockTool", { enumerable: true, get: function () { return lock_1.makeLockTool; } });
 exports.default = {
     tools: { listAllowedPorts: listAllowedPorts_1.listAllowedPorts },
     definitions: [listAllowedPorts_1.listAllowedPortsDefinition],

package/ts_build/src/workers/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/workers/tools/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,yDAG4B;AAE5B,kBAAe;IACb,KAAK,EAAE,EAAE,gBAAgB,EAAhB,mCAAgB,EAAE;IAC3B,WAAW,EAAE,CAAC,6CAA0B,CAAC;CAC1C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/workers/tools/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,iDAA+B;AAC/B,2CAAyB;AACzB,yCAAuB;AAEvB,yDAG4B;AAE5B,+CAAsD;AAA7C,oHAAA,oBAAoB,OAAA;AAC7B,mCAA0C;AAAjC,wGAAA,cAAc,OAAA;AACvB,+BAAsC;AAA7B,oGAAA,YAAY,OAAA;AAErB,kBAAe;IACb,KAAK,EAAE,EAAE,gBAAgB,EAAhB,mCAAgB,EAAE;IAC3B,WAAW,EAAE,CAAC,6CAA0B,CAAC;CAC1C,CAAC"}

package/ts_build/src/workers/tools/lock.d.ts

@@ -0,0 +1,9 @@
+import { Tool } from "../../clients/types";
+import { WorkerPasskeyAuthService } from "../auth/WorkerPasskeyAuth";
+export declare function makeLockTool(authService: WorkerPasskeyAuthService): {
+    lock: () => Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    lockDefinition: Tool;
+};

package/ts_build/src/workers/tools/lock.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeLockTool = void 0;
+function makeLockTool(authService) {
+    async function lock() {
+        authService.lock();
+        return {
+            success: true,
+            message: "Worker locked. Call getChallenge and unlock to regain access.",
+        };
+    }
+    const lockDefinition = {
+        type: "function",
+        function: {
+            name: "lock",
+            description: "Lock the worker. After locking, only getChallenge, unlock, and lock tools will be accessible until the worker is unlocked again with a valid passkey assertion.",
+            parameters: {
+                type: "object",
+                properties: {},
+                required: [],
+            },
+        },
+    };
+    return { lock, lockDefinition };
+}
+exports.makeLockTool = makeLockTool;
+//# sourceMappingURL=lock.js.map

package/ts_build/src/workers/tools/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../../../../src/workers/tools/lock.ts"],"names":[],"mappings":";;;AAMA,SAAgB,YAAY,CAAC,WAAqC;IAChE,KAAK,UAAU,IAAI;QACjB,WAAW,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,+DAA+D;SACzE,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAS;QAC3B,IAAI,EAAE,UAAmB;QACzB,QAAQ,EAAE;YACR,IAAI,EAAE,MAAM;YACZ,WAAW,EACT,iKAAiK;YACnK,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE;gBACd,QAAQ,EAAE,EAAE;aACb;SACF;KACF,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAClC,CAAC;AAxBD,oCAwBC"}