@wrongstack/cli 0.295.1 → 0.296.3

package/dist/mcp-CYLPUEHC.js

@@ -0,0 +1,413 @@
+import {
+  activeProfileConfigPath
+} from "./chunk-DPJZQCVP.js";
+import "./chunk-7OCVIDC7.js";
+
+// src/subcommands/handlers/mcp.ts
+import { expectDefined } from "@wrongstack/core/utils";
+import {
+  jsonObjectFileExists,
+  readJsonObjectFile,
+  removeJsonPath,
+  setJsonPath,
+  updateJsonObjectFile
+} from "@wrongstack/core/utils";
+import { allServers } from "@wrongstack/core/infrastructure";
+
+// src/mcp-serve.ts
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { pathToFileURL } from "node:url";
+import { AutoApprovePermissionPolicy, DefaultSecretScrubber } from "@wrongstack/core/security";
+import { Context } from "@wrongstack/core/agent";
+import { normalizeTokenSavingTier } from "@wrongstack/core/types";
+import { ToolRegistry } from "@wrongstack/core/registry";
+import { ToolExecutor } from "@wrongstack/core/execution";
+import {
+  DEFAULT_MCP_INSERTION_MAX_BYTES,
+  MCPServer,
+  serveHttp,
+  serveStdio
+} from "@wrongstack/mcp";
+import { registerBuiltinToolTier } from "@wrongstack/tools/tool-tier";
+var AllowAllPermissionPolicy = class extends AutoApprovePermissionPolicy {
+  async evaluate() {
+    return { permission: "auto", source: "default" };
+  }
+};
+function parseToolsFlag(flags) {
+  const raw = flags["tools"];
+  if (typeof raw !== "string") return null;
+  const set = new Set(
+    raw.split(",").map((s) => s.trim()).filter(Boolean)
+  );
+  return set.size > 0 ? set : null;
+}
+async function loadSelectedMcpServeContent(flags, cwd) {
+  const resources = [];
+  const prompts = [];
+  const resourceUris = /* @__PURE__ */ new Set();
+  const promptNames = /* @__PURE__ */ new Set();
+  for (const selected of commaSeparatedFlag(flags, "resources")) {
+    const file = path.resolve(cwd, selected);
+    const data = await readSelectedFile(file);
+    const uri = pathToFileURL(file).toString();
+    if (resourceUris.has(uri)) throw new Error(`Duplicate MCP resource selection: ${selected}`);
+    resourceUris.add(uri);
+    const mimeType = mimeTypeFor(file);
+    resources.push({
+      uri,
+      name: path.basename(file),
+      mimeType,
+      size: data.byteLength,
+      contents: [
+        isTextMime(mimeType) ? { uri, mimeType, text: data.toString("utf8") } : { uri, mimeType, blob: data.toString("base64") }
+      ]
+    });
+  }
+  for (const selected of commaSeparatedFlag(flags, "prompts")) {
+    const file = path.resolve(cwd, selected);
+    const data = await readSelectedFile(file);
+    const name = path.basename(file, path.extname(file)).replace(/[^A-Za-z0-9_.-]+/g, "-").replace(/^-+|-+$/g, "");
+    if (!name) throw new Error(`Cannot derive an MCP prompt name from: ${selected}`);
+    if (promptNames.has(name)) throw new Error(`Duplicate MCP prompt name: ${name}`);
+    promptNames.add(name);
+    const template = data.toString("utf8");
+    const argumentNames = Array.from(
+      template.matchAll(/\{\{([A-Za-z_][A-Za-z0-9_.-]*)\}\}/g),
+      (match) => match[1]
+    ).filter((value, index, all) => !!value && all.indexOf(value) === index);
+    prompts.push({
+      name,
+      description: `Explicitly selected local prompt: ${path.basename(file)}`,
+      arguments: argumentNames.map((argument) => ({ name: argument, required: true })),
+      template
+    });
+  }
+  return { resources, prompts };
+}
+function commaSeparatedFlag(flags, name) {
+  const value = flags[name];
+  if (value === void 0) return [];
+  if (typeof value !== "string" || value.trim() === "") {
+    throw new Error(`--${name} requires a comma-separated file list`);
+  }
+  return value.split(",").map((item) => item.trim()).filter(Boolean);
+}
+async function readSelectedFile(file) {
+  const stat2 = await fs.stat(file);
+  if (!stat2.isFile()) throw new Error(`Selected MCP content is not a regular file: ${file}`);
+  if (stat2.size > DEFAULT_MCP_INSERTION_MAX_BYTES) {
+    throw new Error(
+      `Selected MCP content exceeds ${DEFAULT_MCP_INSERTION_MAX_BYTES} bytes: ${file}`
+    );
+  }
+  return fs.readFile(file);
+}
+function mimeTypeFor(file) {
+  switch (path.extname(file).toLowerCase()) {
+    case ".md":
+    case ".mdx":
+      return "text/markdown";
+    case ".json":
+      return "application/json";
+    case ".yaml":
+    case ".yml":
+      return "application/yaml";
+    case ".html":
+      return "text/html";
+    case ".css":
+      return "text/css";
+    case ".js":
+    case ".mjs":
+      return "text/javascript";
+    case ".ts":
+    case ".tsx":
+      return "text/typescript";
+    case ".txt":
+    case ".log":
+      return "text/plain";
+    case ".png":
+      return "image/png";
+    case ".jpg":
+    case ".jpeg":
+      return "image/jpeg";
+    case ".gif":
+      return "image/gif";
+    case ".webp":
+      return "image/webp";
+    default:
+      return "application/octet-stream";
+  }
+}
+function isTextMime(mimeType) {
+  return mimeType.startsWith("text/") || mimeType === "application/json" || mimeType === "application/yaml";
+}
+function makeServeContext(cwd, projectRoot, signal, restrictFsToRoot = true) {
+  const provider = {
+    id: "mcp-serve",
+    capabilities: { maxContext: 0 },
+    complete: async () => {
+      throw new Error("no model provider in `mcp serve` mode");
+    },
+    stream: () => {
+      throw new Error("no model provider in `mcp serve` mode");
+    }
+  };
+  const session = { append: async () => {
+  } };
+  const tokenCounter = {
+    account: () => {
+    },
+    total: () => ({ input: 0, output: 0 }),
+    estimateCost: () => ({ total: 0 })
+  };
+  return new Context({
+    systemPrompt: [],
+    provider,
+    session,
+    signal,
+    tokenCounter,
+    cwd,
+    projectRoot,
+    allowOutsideProjectRoot: !restrictFsToRoot,
+    model: "mcp-serve",
+    tools: []
+  });
+}
+async function selectExposedTools(registry, ctx, policy, whitelist) {
+  const allowed = [];
+  for (const tool of registry.list()) {
+    if (whitelist && !whitelist.has(tool.name)) continue;
+    const decision = await policy.evaluate(tool, {}, ctx);
+    if (decision.permission === "auto") allowed.push(tool);
+  }
+  return allowed;
+}
+async function serveMcpStdio(deps) {
+  const flags = deps.flags ?? {};
+  const yolo = flags["yolo"] === true || flags["allow-all"] === true;
+  const whitelist = parseToolsFlag(flags);
+  const log = (m) => process.stderr.write(`${m}
+`);
+  let selectedContent;
+  try {
+    selectedContent = await loadSelectedMcpServeContent(flags, deps.cwd);
+  } catch (err) {
+    log(`wrongstack MCP server: ${err instanceof Error ? err.message : String(err)}`);
+    return 1;
+  }
+  let registry = deps.toolRegistry;
+  if (!registry) {
+    registry = new ToolRegistry();
+    registerBuiltinToolTier({
+      registry,
+      tier: normalizeTokenSavingTier(deps.config.features.tokenSavingMode)
+    });
+  }
+  const controller = new AbortController();
+  const ctx = makeServeContext(
+    deps.cwd,
+    deps.projectRoot,
+    controller.signal,
+    deps.config.tools?.restrictToProjectRoot ?? false
+  );
+  const permissionPolicy = yolo ? new AllowAllPermissionPolicy() : new AutoApprovePermissionPolicy();
+  const executor = new ToolExecutor(registry, {
+    permissionPolicy,
+    secretScrubber: new DefaultSecretScrubber(),
+    maxToolTimeoutMs: deps.config.tools?.maxToolTimeoutMs ?? 3e5,
+    perIterationOutputCapBytes: 1e6
+  });
+  const allowed = await selectExposedTools(registry, ctx, permissionPolicy, whitelist);
+  const allowedNames = new Set(allowed.map((t) => t.name));
+  if (allowed.length === 0) {
+    log(
+      "wrongstack MCP server: no tools to expose (all withheld by policy or filtered out). Pass --yolo to expose write/exec tools, or --tools <names> to whitelist."
+    );
+  }
+  let counter = 0;
+  const host = {
+    listTools: () => allowed.map((t) => ({
+      name: t.name,
+      description: t.description,
+      inputSchema: t.inputSchema ?? { type: "object" }
+    })),
+    callTool: async (name, callArgs) => {
+      if (!allowedNames.has(name)) {
+        return { content: `Tool "${name}" is not exposed by this server`, isError: true };
+      }
+      const use = {
+        type: "tool_use",
+        id: `srv_${++counter}`,
+        name,
+        input: callArgs
+      };
+      const batch = await executor.executeBatch([use], ctx, "sequential");
+      const result = batch.outputs[0]?.result;
+      if (!result || result.type === "tool_confirm_pending") {
+        return {
+          content: `Tool "${name}" requires interactive confirmation, which is unavailable over MCP`,
+          isError: true
+        };
+      }
+      return { content: result.content, isError: Boolean(result.is_error) };
+    }
+  };
+  const server = new MCPServer({
+    host,
+    resources: selectedContent.resources,
+    prompts: selectedContent.prompts,
+    logger: { warn: (m) => log(`[mcp-serve] ${m}`) }
+  });
+  const mode = yolo ? "yolo: all tools" : "safe: read-only tools";
+  if (flags["http"] === true || typeof flags["http"] === "string" || flags["port"] || flags["host"]) {
+    const port = Number(flags["port"] ?? flags["http"] ?? 0) || 0;
+    const httpHost = typeof flags["host"] === "string" ? flags["host"] : "127.0.0.1";
+    const token = typeof flags["token"] === "string" ? flags["token"] : void 0;
+    let handle2;
+    try {
+      handle2 = await serveHttp(server, {
+        port,
+        host: httpHost,
+        token,
+        logger: { warn: (m) => log(`[mcp-serve] ${m}`) }
+      });
+    } catch (err) {
+      log(`wrongstack MCP server: ${err instanceof Error ? err.message : String(err)}`);
+      return 1;
+    }
+    log(
+      `wrongstack MCP server ready at ${handle2.url} \u2014 exposing ${allowed.length} tool(s), ${selectedContent.resources.length} resource(s), ${selectedContent.prompts.length} prompt(s) (${mode})${token ? " [token auth]" : ""}.`
+    );
+    await new Promise((resolve2) => {
+      const stop = () => resolve2();
+      process.once("SIGINT", stop);
+      process.once("SIGTERM", stop);
+    });
+    await handle2.close();
+    controller.abort();
+    return 0;
+  }
+  log(
+    `wrongstack MCP server ready on stdio \u2014 exposing ${allowed.length} tool(s), ${selectedContent.resources.length} resource(s), ${selectedContent.prompts.length} prompt(s) (${mode}).`
+  );
+  const handle = serveStdio(server);
+  await handle.done;
+  controller.abort();
+  return 0;
+}
+
+// src/subcommands/handlers/mcp.ts
+var BUILT_IN_MCP = allServers();
+var mcpCmd = async (args, deps) => {
+  const sub = args[0];
+  if (sub === "serve") {
+    return serveMcpStdio(deps);
+  }
+  if (!sub || sub === "list") {
+    const servers = deps.config.mcpServers ?? {};
+    if (Object.keys(servers).length === 0) {
+      deps.renderer.write("No MCP servers configured.\n");
+      deps.renderer.write("Use `wstack mcp add <name>` or set mcpServers in your config.\n");
+      return 0;
+    }
+    for (const [name, cfg] of Object.entries(servers)) {
+      const status = cfg.enabled === false ? "disabled" : "enabled";
+      const desc = cfg.description ? `  # ${cfg.description}` : "";
+      deps.renderer.write(`  ${name.padEnd(20)} ${cfg.transport.padEnd(16)} ${status}${desc}
+`);
+    }
+    return 0;
+  }
+  if (sub === "add") {
+    return addMcpServer(args, deps);
+  }
+  if (sub === "remove") {
+    const name = args[1];
+    if (!name) {
+      deps.renderer.writeError("Usage: wstack mcp remove <name>\n");
+      return 1;
+    }
+    return removeMcpServer(name, deps);
+  }
+  if (sub === "restart") {
+    deps.renderer.writeWarning(
+      "mcp restart is only available in REPL mode. Use /mcp restart instead."
+    );
+    return 0;
+  }
+  deps.renderer.writeError(`Unknown mcp subcommand: ${sub}`);
+  return 1;
+};
+async function addMcpServer(args, deps) {
+  const configPath = activeProfileConfigPath(deps.paths, deps.config);
+  const name = args[1];
+  const enable = args.includes("--enable") || args.includes("-e");
+  if (!name) {
+    deps.renderer.writeError("Usage: wstack mcp add <name>\n");
+    deps.renderer.write("Available servers:\n");
+    for (const [sname, scfg] of Object.entries(deps.config.mcpServers ?? {}))
+      deps.renderer.write(`  ${sname.padEnd(20)} ${scfg.description ?? scfg.transport}
+`);
+    if (Object.keys(deps.config.mcpServers ?? {}).length === 0)
+      for (const k of Object.keys(BUILT_IN_MCP)) {
+        const s = expectDefined(BUILT_IN_MCP[k]);
+        deps.renderer.write(`  ${k.padEnd(20)} ${s.description}
+`);
+      }
+    deps.renderer.write("\nRun `wstack mcp add <name> --enable` to enable immediately.\n");
+    return 1;
+  }
+  const factory = BUILT_IN_MCP[name];
+  if (!factory) {
+    deps.renderer.writeError(
+      `Unknown server "${name}". Run \`wstack mcp add\` without args to see available servers.
+`
+    );
+    return 1;
+  }
+  const serverCfg = { ...factory };
+  serverCfg.enabled = enable;
+  const existing = await readJsonObjectFile(configPath);
+  const mcpServers = isRecord(existing.mcpServers) ? existing.mcpServers : {};
+  if (mcpServers[name])
+    deps.renderer.writeWarning(`Server "${name}" already in config. Updating.
+`);
+  await updateJsonObjectFile(configPath, (config) => {
+    setJsonPath(config, ["mcpServers", name], serverCfg);
+  });
+  const verb = enable ? "Enabled" : "Added (disabled \u2014 set enabled:true to activate)";
+  deps.renderer.writeInfo(
+    `${verb} "${name}" (${serverCfg.transport}). Config written to ${configPath}.
+`
+  );
+  return 0;
+}
+async function removeMcpServer(name, deps) {
+  const configPath = activeProfileConfigPath(deps.paths, deps.config);
+  if (!await jsonObjectFileExists(configPath)) {
+    deps.renderer.writeError("No config file found.\n");
+    return 1;
+  }
+  const existing = await readJsonObjectFile(configPath);
+  const mcpServers = isRecord(existing.mcpServers) ? existing.mcpServers : {};
+  if (!mcpServers[name]) {
+    deps.renderer.writeError(`Server "${name}" not in config.
+`);
+    return 1;
+  }
+  await updateJsonObjectFile(configPath, (config) => {
+    removeJsonPath(config, ["mcpServers", name]);
+  });
+  deps.renderer.writeInfo(`Removed "${name}" from config.
+`);
+  return 0;
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+export {
+  mcpCmd
+};
+//# sourceMappingURL=mcp-CYLPUEHC.js.map

package/dist/mcp-CYLPUEHC.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/subcommands/handlers/mcp.ts", "../src/mcp-serve.ts"],
+  "sourcesContent": ["import { expectDefined } from '@wrongstack/core/utils';\nimport {\n  jsonObjectFileExists,\n  readJsonObjectFile,\n  removeJsonPath,\n  setJsonPath,\n  updateJsonObjectFile,\n} from '@wrongstack/core/utils';\nimport { allServers } from '@wrongstack/core/infrastructure';\nimport { serveMcpStdio } from '../../mcp-serve.js';\nimport { activeProfileConfigPath } from '../../profile-config-path.js';\nimport type { SubcommandDeps, SubcommandHandler } from '../index.js';\n\nconst BUILT_IN_MCP = allServers();\n\nexport const mcpCmd: SubcommandHandler = async (args, deps) => {\n  const sub = args[0];\n  if (sub === 'serve') {\n    // Run WrongStack as an MCP server over stdio. Blocks until stdin closes.\n    // Flags (--yolo/--tools) come via deps.flags \u2014 the dispatcher strips them\n    // from positional args.\n    return serveMcpStdio(deps);\n  }\n  if (!sub || sub === 'list') {\n    const servers = deps.config.mcpServers ?? {};\n    if (Object.keys(servers).length === 0) {\n      deps.renderer.write('No MCP servers configured.\\n');\n      deps.renderer.write('Use `wstack mcp add <name>` or set mcpServers in your config.\\n');\n      return 0;\n    }\n    for (const [name, cfg] of Object.entries(servers)) {\n      const status = cfg.enabled === false ? 'disabled' : 'enabled';\n      const desc = cfg.description ? `  # ${cfg.description}` : '';\n      deps.renderer.write(`  ${name.padEnd(20)} ${cfg.transport.padEnd(16)} ${status}${desc}\\n`);\n    }\n    return 0;\n  }\n  if (sub === 'add') {\n    return addMcpServer(args, deps);\n  }\n  if (sub === 'remove') {\n    const name = args[1];\n    if (!name) {\n      deps.renderer.writeError('Usage: wstack mcp remove <name>\\n');\n      return 1;\n    }\n    return removeMcpServer(name, deps);\n  }\n  if (sub === 'restart') {\n    deps.renderer.writeWarning(\n      'mcp restart is only available in REPL mode. Use /mcp restart instead.',\n    );\n    return 0;\n  }\n  deps.renderer.writeError(`Unknown mcp subcommand: ${sub}`);\n  return 1;\n};\n\nasync function addMcpServer(args: string[], deps: SubcommandDeps): Promise<number> {\n  const configPath = activeProfileConfigPath(deps.paths, deps.config);\n  const name = args[1];\n  const enable = args.includes('--enable') || args.includes('-e');\n  if (!name) {\n    deps.renderer.writeError('Usage: wstack mcp add <name>\\n');\n    deps.renderer.write('Available servers:\\n');\n    for (const [sname, scfg] of Object.entries(deps.config.mcpServers ?? {}))\n      deps.renderer.write(`  ${sname.padEnd(20)} ${scfg.description ?? scfg.transport}\\n`);\n    if (Object.keys(deps.config.mcpServers ?? {}).length === 0)\n      for (const k of Object.keys(BUILT_IN_MCP)) {\n        const s = expectDefined(BUILT_IN_MCP[k]);\n        deps.renderer.write(`  ${k.padEnd(20)} ${s.description}\\n`);\n      }\n    deps.renderer.write('\\nRun `wstack mcp add <name> --enable` to enable immediately.\\n');\n    return 1;\n  }\n  const factory = BUILT_IN_MCP[name];\n  if (!factory) {\n    deps.renderer.writeError(\n      `Unknown server \"${name}\". Run \\`wstack mcp add\\` without args to see available servers.\\n`,\n    );\n    return 1;\n  }\n  const serverCfg = { ...factory };\n  serverCfg.enabled = enable;\n  const existing = await readJsonObjectFile(configPath);\n  const mcpServers = isRecord(existing.mcpServers) ? existing.mcpServers : {};\n  if (mcpServers[name])\n    deps.renderer.writeWarning(`Server \"${name}\" already in config. Updating.\\n`);\n  await updateJsonObjectFile(configPath, (config) => {\n    setJsonPath(config, ['mcpServers', name], serverCfg);\n  });\n  const verb = enable ? 'Enabled' : 'Added (disabled \u2014 set enabled:true to activate)';\n  deps.renderer.writeInfo(\n    `${verb} \"${name}\" (${serverCfg.transport}). Config written to ${configPath}.\\n`,\n  );\n  return 0;\n}\n\nasync function removeMcpServer(name: string, deps: SubcommandDeps): Promise<number> {\n  const configPath = activeProfileConfigPath(deps.paths, deps.config);\n  if (!(await jsonObjectFileExists(configPath))) {\n    deps.renderer.writeError('No config file found.\\n');\n    return 1;\n  }\n  const existing = await readJsonObjectFile(configPath);\n  const mcpServers = isRecord(existing.mcpServers) ? existing.mcpServers : {};\n  if (!mcpServers[name]) {\n    deps.renderer.writeError(`Server \"${name}\" not in config.\\n`);\n    return 1;\n  }\n  await updateJsonObjectFile(configPath, (config) => {\n    removeJsonPath(config, ['mcpServers', name]);\n  });\n  deps.renderer.writeInfo(`Removed \"${name}\" from config.\\n`);\n  return 0;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n", "/**\n * `wstack mcp serve` \u2014 run WrongStack itself as an MCP server over stdio.\n *\n * Exposes the built-in tool registry to any MCP client (Claude Desktop, another\n * agent, an IDE). stdout is the JSON-RPC channel \u2014 every status/log line goes to\n * stderr. By default a safe `AutoApprovePermissionPolicy` is used: read-only\n * tools are exposed, while shell/write/edit and dangerous-capability tools are\n * withheld. `--yolo` exposes everything; `--tools a,b,c` restricts the set.\n */\nimport * as fs from 'node:fs/promises';\nimport * as path from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport { AutoApprovePermissionPolicy, DefaultSecretScrubber } from '@wrongstack/core/security';\nimport { Context } from '@wrongstack/core/agent';\nimport { normalizeTokenSavingTier } from '@wrongstack/core/types';\nimport type { PermissionPolicy, Provider, SessionWriter, TokenCounter, Tool } from '@wrongstack/core/types';\nimport { ToolRegistry } from '@wrongstack/core/registry';\nimport { ToolExecutor } from '@wrongstack/core/execution';\nimport {\n  DEFAULT_MCP_INSERTION_MAX_BYTES,\n  MCPServer,\n  type MCPServerPrompt,\n  type MCPServerResource,\n  type MCPServerToolHost,\n  serveHttp,\n  serveStdio,\n} from '@wrongstack/mcp';\nimport { registerBuiltinToolTier } from '@wrongstack/tools/tool-tier';\nimport type { SubcommandDeps } from './subcommands/index.js';\n\n/** `--yolo` policy: auto-approve everything (inherits the rest of the contract). */\nclass AllowAllPermissionPolicy extends AutoApprovePermissionPolicy {\n  override async evaluate(): ReturnType<AutoApprovePermissionPolicy['evaluate']> {\n    return { permission: 'auto', source: 'default' };\n  }\n}\n\nfunction parseToolsFlag(flags: Record<string, string | boolean>): Set<string> | null {\n  const raw = flags['tools'];\n  if (typeof raw !== 'string') return null;\n  const set = new Set(\n    raw\n      .split(',')\n      .map((s) => s.trim())\n      .filter(Boolean),\n  );\n  return set.size > 0 ? set : null;\n}\n\nexport interface SelectedMcpServeContent {\n  resources: MCPServerResource[];\n  prompts: MCPServerPrompt[];\n}\n\n/** Load only files explicitly named by trusted CLI flags; nothing is auto-discovered. */\nexport async function loadSelectedMcpServeContent(\n  flags: Record<string, string | boolean>,\n  cwd: string,\n): Promise<SelectedMcpServeContent> {\n  const resources: MCPServerResource[] = [];\n  const prompts: MCPServerPrompt[] = [];\n  const resourceUris = new Set<string>();\n  const promptNames = new Set<string>();\n  for (const selected of commaSeparatedFlag(flags, 'resources')) {\n    const file = path.resolve(cwd, selected);\n    const data = await readSelectedFile(file);\n    const uri = pathToFileURL(file).toString();\n    if (resourceUris.has(uri)) throw new Error(`Duplicate MCP resource selection: ${selected}`);\n    resourceUris.add(uri);\n    const mimeType = mimeTypeFor(file);\n    resources.push({\n      uri,\n      name: path.basename(file),\n      mimeType,\n      size: data.byteLength,\n      contents: [\n        isTextMime(mimeType)\n          ? { uri, mimeType, text: data.toString('utf8') }\n          : { uri, mimeType, blob: data.toString('base64') },\n      ],\n    });\n  }\n  for (const selected of commaSeparatedFlag(flags, 'prompts')) {\n    const file = path.resolve(cwd, selected);\n    const data = await readSelectedFile(file);\n    const name = path\n      .basename(file, path.extname(file))\n      .replace(/[^A-Za-z0-9_.-]+/g, '-')\n      .replace(/^-+|-+$/g, '');\n    if (!name) throw new Error(`Cannot derive an MCP prompt name from: ${selected}`);\n    if (promptNames.has(name)) throw new Error(`Duplicate MCP prompt name: ${name}`);\n    promptNames.add(name);\n    const template = data.toString('utf8');\n    const argumentNames = Array.from(\n      template.matchAll(/\\{\\{([A-Za-z_][A-Za-z0-9_.-]*)\\}\\}/g),\n      (match) => match[1],\n    ).filter((value, index, all): value is string => !!value && all.indexOf(value) === index);\n    prompts.push({\n      name,\n      description: `Explicitly selected local prompt: ${path.basename(file)}`,\n      arguments: argumentNames.map((argument) => ({ name: argument, required: true })),\n      template,\n    });\n  }\n  return { resources, prompts };\n}\n\nfunction commaSeparatedFlag(\n  flags: Record<string, string | boolean>,\n  name: 'resources' | 'prompts',\n): string[] {\n  const value = flags[name];\n  if (value === undefined) return [];\n  if (typeof value !== 'string' || value.trim() === '') {\n    throw new Error(`--${name} requires a comma-separated file list`);\n  }\n  return value\n    .split(',')\n    .map((item) => item.trim())\n    .filter(Boolean);\n}\n\nasync function readSelectedFile(file: string): Promise<Buffer> {\n  const stat = await fs.stat(file);\n  if (!stat.isFile()) throw new Error(`Selected MCP content is not a regular file: ${file}`);\n  if (stat.size > DEFAULT_MCP_INSERTION_MAX_BYTES) {\n    throw new Error(\n      `Selected MCP content exceeds ${DEFAULT_MCP_INSERTION_MAX_BYTES} bytes: ${file}`,\n    );\n  }\n  return fs.readFile(file);\n}\n\nfunction mimeTypeFor(file: string): string {\n  switch (path.extname(file).toLowerCase()) {\n    case '.md':\n    case '.mdx':\n      return 'text/markdown';\n    case '.json':\n      return 'application/json';\n    case '.yaml':\n    case '.yml':\n      return 'application/yaml';\n    case '.html':\n      return 'text/html';\n    case '.css':\n      return 'text/css';\n    case '.js':\n    case '.mjs':\n      return 'text/javascript';\n    case '.ts':\n    case '.tsx':\n      return 'text/typescript';\n    case '.txt':\n    case '.log':\n      return 'text/plain';\n    case '.png':\n      return 'image/png';\n    case '.jpg':\n    case '.jpeg':\n      return 'image/jpeg';\n    case '.gif':\n      return 'image/gif';\n    case '.webp':\n      return 'image/webp';\n    default:\n      return 'application/octet-stream';\n  }\n}\n\nfunction isTextMime(mimeType: string): boolean {\n  return (\n    mimeType.startsWith('text/') ||\n    mimeType === 'application/json' ||\n    mimeType === 'application/yaml'\n  );\n}\n\n/** Minimal run context \u2014 tools read cwd/projectRoot/signal; provider/session are stubs. */\nexport function makeServeContext(\n  cwd: string,\n  projectRoot: string,\n  signal: AbortSignal,\n  restrictFsToRoot = true,\n): Context {\n  const provider = {\n    id: 'mcp-serve',\n    capabilities: { maxContext: 0 },\n    complete: async () => {\n      throw new Error('no model provider in `mcp serve` mode');\n    },\n    stream: () => {\n      throw new Error('no model provider in `mcp serve` mode');\n    },\n  } as never as Provider;\n  const session = { append: async () => {} } as never as SessionWriter;\n  const tokenCounter = {\n    account: () => {},\n    total: () => ({ input: 0, output: 0 }),\n    estimateCost: () => ({ total: 0 }),\n  } as never as TokenCounter;\n  return new Context({\n    systemPrompt: [],\n    provider,\n    session,\n    signal,\n    tokenCounter,\n    cwd,\n    projectRoot,\n    allowOutsideProjectRoot: !restrictFsToRoot,\n    model: 'mcp-serve',\n    tools: [],\n  });\n}\n\n/**\n * Compute the set of tools an MCP-serve session exposes: a tool is included\n * only if it passes the whitelist (when set) AND the permission policy returns\n * `auto`. With `AutoApprovePermissionPolicy` this withholds shell/write/edit and\n * dangerous-capability tools; with the `--yolo` policy everything passes.\n * Exported for testing \u2014 the live path calls it inside `serveMcpStdio`.\n */\nexport async function selectExposedTools(\n  registry: ToolRegistry,\n  ctx: Context,\n  policy: PermissionPolicy,\n  whitelist: Set<string> | null,\n): Promise<Tool[]> {\n  const allowed: Tool[] = [];\n  for (const tool of registry.list()) {\n    if (whitelist && !whitelist.has(tool.name)) continue;\n    const decision = await policy.evaluate(tool, {}, ctx);\n    if (decision.permission === 'auto') allowed.push(tool);\n  }\n  return allowed;\n}\n\nexport async function serveMcpStdio(deps: SubcommandDeps): Promise<number> {\n  const flags = deps.flags ?? {};\n  const yolo = flags['yolo'] === true || flags['allow-all'] === true;\n  const whitelist = parseToolsFlag(flags);\n  const log = (m: string) => process.stderr.write(`${m}\\n`);\n  let selectedContent: SelectedMcpServeContent;\n  try {\n    selectedContent = await loadSelectedMcpServeContent(flags, deps.cwd);\n  } catch (err) {\n    log(`wrongstack MCP server: ${err instanceof Error ? err.message : String(err)}`);\n    return 1;\n  }\n\n  // Reuse the subcommand's pre-populated registry; fall back to a fresh one.\n  let registry = deps.toolRegistry as ToolRegistry | undefined;\n  if (!registry) {\n    registry = new ToolRegistry();\n    registerBuiltinToolTier({\n      registry,\n      tier: normalizeTokenSavingTier(deps.config.features.tokenSavingMode),\n    });\n  }\n\n  const controller = new AbortController();\n  const ctx = makeServeContext(\n    deps.cwd,\n    deps.projectRoot,\n    controller.signal,\n    deps.config.tools?.restrictToProjectRoot ?? false,\n  );\n  const permissionPolicy: PermissionPolicy = yolo\n    ? new AllowAllPermissionPolicy()\n    : new AutoApprovePermissionPolicy();\n  const executor = new ToolExecutor(registry, {\n    permissionPolicy,\n    secretScrubber: new DefaultSecretScrubber(),\n    maxToolTimeoutMs: deps.config.tools?.maxToolTimeoutMs ?? 300_000,\n    perIterationOutputCapBytes: 1_000_000,\n  });\n\n  // Pre-compute the exposed set so tools/list and tools/call agree, and so a\n  // withheld tool can never be invoked even if a client guesses its name.\n  const allowed = await selectExposedTools(registry, ctx, permissionPolicy, whitelist);\n  const allowedNames = new Set(allowed.map((t) => t.name));\n\n  if (allowed.length === 0) {\n    log(\n      'wrongstack MCP server: no tools to expose (all withheld by policy or filtered out). ' +\n        'Pass --yolo to expose write/exec tools, or --tools <names> to whitelist.',\n    );\n  }\n\n  let counter = 0;\n  const host: MCPServerToolHost = {\n    listTools: () =>\n      allowed.map((t) => ({\n        name: t.name,\n        description: t.description,\n        inputSchema: (t.inputSchema as Record<string, unknown>) ?? { type: 'object' },\n      })),\n    callTool: async (name, callArgs) => {\n      if (!allowedNames.has(name)) {\n        return { content: `Tool \"${name}\" is not exposed by this server`, isError: true };\n      }\n      const use = {\n        type: 'tool_use' as const,\n        id: `srv_${++counter}`,\n        name,\n        input: callArgs,\n      };\n      const batch = await executor.executeBatch([use], ctx, 'sequential');\n      const result = batch.outputs[0]?.result;\n      if (!result || result.type === 'tool_confirm_pending') {\n        return {\n          content: `Tool \"${name}\" requires interactive confirmation, which is unavailable over MCP`,\n          isError: true,\n        };\n      }\n      return { content: result.content, isError: Boolean(result.is_error) };\n    },\n  };\n\n  const server = new MCPServer({\n    host,\n    resources: selectedContent.resources,\n    prompts: selectedContent.prompts,\n    logger: { warn: (m) => log(`[mcp-serve] ${m}`) },\n  });\n\n  const mode = yolo ? 'yolo: all tools' : 'safe: read-only tools';\n\n  // HTTP transport \u2014 network-reachable. Loopback by default; non-loopback\n  // requires a token (enforced in serveHttp).\n  if (\n    flags['http'] === true ||\n    typeof flags['http'] === 'string' ||\n    flags['port'] ||\n    flags['host']\n  ) {\n    const port = Number(flags['port'] ?? flags['http'] ?? 0) || 0;\n    const httpHost = typeof flags['host'] === 'string' ? flags['host'] : '127.0.0.1';\n    const token = typeof flags['token'] === 'string' ? flags['token'] : undefined;\n    let handle: Awaited<ReturnType<typeof serveHttp>>;\n    try {\n      handle = await serveHttp(server, {\n        port,\n        host: httpHost,\n        token,\n        logger: { warn: (m) => log(`[mcp-serve] ${m}`) },\n      });\n    } catch (err) {\n      log(`wrongstack MCP server: ${err instanceof Error ? err.message : String(err)}`);\n      return 1;\n    }\n    log(\n      `wrongstack MCP server ready at ${handle.url} \u2014 exposing ${allowed.length} tool(s), ` +\n        `${selectedContent.resources.length} resource(s), ${selectedContent.prompts.length} prompt(s) (${mode})` +\n        `${token ? ' [token auth]' : ''}.`,\n    );\n    await new Promise<void>((resolve) => {\n      const stop = () => resolve();\n      process.once('SIGINT', stop);\n      process.once('SIGTERM', stop);\n    });\n    await handle.close();\n    controller.abort();\n    return 0;\n  }\n\n  log(\n    `wrongstack MCP server ready on stdio \u2014 exposing ${allowed.length} tool(s), ` +\n      `${selectedContent.resources.length} resource(s), ${selectedContent.prompts.length} prompt(s) (${mode}).`,\n  );\n\n  const handle = serveStdio(server);\n  await handle.done;\n  controller.abort();\n  return 0;\n}\n"],
+  "mappings": ";;;;;;;AAAA,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;;;ACC3B,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B,6BAA6B;AACnE,SAAS,eAAe;AACxB,SAAS,gCAAgC;AAEzC,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EAIA;AAAA,EACA;AAAA,OACK;AACP,SAAS,+BAA+B;AAIxC,IAAM,2BAAN,cAAuC,4BAA4B;AAAA,EACjE,MAAe,WAAgE;AAC7E,WAAO,EAAE,YAAY,QAAQ,QAAQ,UAAU;AAAA,EACjD;AACF;AAEA,SAAS,eAAe,OAA6D;AACnF,QAAM,MAAM,MAAM,OAAO;AACzB,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,MAAM,IAAI;AAAA,IACd,IACG,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AAAA,EACnB;AACA,SAAO,IAAI,OAAO,IAAI,MAAM;AAC9B;AAQA,eAAsB,4BACpB,OACA,KACkC;AAClC,QAAM,YAAiC,CAAC;AACxC,QAAM,UAA6B,CAAC;AACpC,QAAM,eAAe,oBAAI,IAAY;AACrC,QAAM,cAAc,oBAAI,IAAY;AACpC,aAAW,YAAY,mBAAmB,OAAO,WAAW,GAAG;AAC7D,UAAM,OAAY,aAAQ,KAAK,QAAQ;AACvC,UAAM,OAAO,MAAM,iBAAiB,IAAI;AACxC,UAAM,MAAM,cAAc,IAAI,EAAE,SAAS;AACzC,QAAI,aAAa,IAAI,GAAG,EAAG,OAAM,IAAI,MAAM,qCAAqC,QAAQ,EAAE;AAC1F,iBAAa,IAAI,GAAG;AACpB,UAAM,WAAW,YAAY,IAAI;AACjC,cAAU,KAAK;AAAA,MACb;AAAA,MACA,MAAW,cAAS,IAAI;AAAA,MACxB;AAAA,MACA,MAAM,KAAK;AAAA,MACX,UAAU;AAAA,QACR,WAAW,QAAQ,IACf,EAAE,KAAK,UAAU,MAAM,KAAK,SAAS,MAAM,EAAE,IAC7C,EAAE,KAAK,UAAU,MAAM,KAAK,SAAS,QAAQ,EAAE;AAAA,MACrD;AAAA,IACF,CAAC;AAAA,EACH;AACA,aAAW,YAAY,mBAAmB,OAAO,SAAS,GAAG;AAC3D,UAAM,OAAY,aAAQ,KAAK,QAAQ;AACvC,UAAM,OAAO,MAAM,iBAAiB,IAAI;AACxC,UAAM,OACH,cAAS,MAAW,aAAQ,IAAI,CAAC,EACjC,QAAQ,qBAAqB,GAAG,EAChC,QAAQ,YAAY,EAAE;AACzB,QAAI,CAAC,KAAM,OAAM,IAAI,MAAM,0CAA0C,QAAQ,EAAE;AAC/E,QAAI,YAAY,IAAI,IAAI,EAAG,OAAM,IAAI,MAAM,8BAA8B,IAAI,EAAE;AAC/E,gBAAY,IAAI,IAAI;AACpB,UAAM,WAAW,KAAK,SAAS,MAAM;AACrC,UAAM,gBAAgB,MAAM;AAAA,MAC1B,SAAS,SAAS,qCAAqC;AAAA,MACvD,CAAC,UAAU,MAAM,CAAC;AAAA,IACpB,EAAE,OAAO,CAAC,OAAO,OAAO,QAAyB,CAAC,CAAC,SAAS,IAAI,QAAQ,KAAK,MAAM,KAAK;AACxF,YAAQ,KAAK;AAAA,MACX;AAAA,MACA,aAAa,qCAA0C,cAAS,IAAI,CAAC;AAAA,MACrE,WAAW,cAAc,IAAI,CAAC,cAAc,EAAE,MAAM,UAAU,UAAU,KAAK,EAAE;AAAA,MAC/E;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO,EAAE,WAAW,QAAQ;AAC9B;AAEA,SAAS,mBACP,OACA,MACU;AACV,QAAM,QAAQ,MAAM,IAAI;AACxB,MAAI,UAAU,OAAW,QAAO,CAAC;AACjC,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAAI;AACpD,UAAM,IAAI,MAAM,KAAK,IAAI,uCAAuC;AAAA,EAClE;AACA,SAAO,MACJ,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,OAAO,OAAO;AACnB;AAEA,eAAe,iBAAiB,MAA+B;AAC7D,QAAMA,QAAO,MAAS,QAAK,IAAI;AAC/B,MAAI,CAACA,MAAK,OAAO,EAAG,OAAM,IAAI,MAAM,+CAA+C,IAAI,EAAE;AACzF,MAAIA,MAAK,OAAO,iCAAiC;AAC/C,UAAM,IAAI;AAAA,MACR,gCAAgC,+BAA+B,WAAW,IAAI;AAAA,IAChF;AAAA,EACF;AACA,SAAU,YAAS,IAAI;AACzB;AAEA,SAAS,YAAY,MAAsB;AACzC,UAAa,aAAQ,IAAI,EAAE,YAAY,GAAG;AAAA,IACxC,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,WAAW,UAA2B;AAC7C,SACE,SAAS,WAAW,OAAO,KAC3B,aAAa,sBACb,aAAa;AAEjB;AAGO,SAAS,iBACd,KACA,aACA,QACA,mBAAmB,MACV;AACT,QAAM,WAAW;AAAA,IACf,IAAI;AAAA,IACJ,cAAc,EAAE,YAAY,EAAE;AAAA,IAC9B,UAAU,YAAY;AACpB,YAAM,IAAI,MAAM,uCAAuC;AAAA,IACzD;AAAA,IACA,QAAQ,MAAM;AACZ,YAAM,IAAI,MAAM,uCAAuC;AAAA,IACzD;AAAA,EACF;AACA,QAAM,UAAU,EAAE,QAAQ,YAAY;AAAA,EAAC,EAAE;AACzC,QAAM,eAAe;AAAA,IACnB,SAAS,MAAM;AAAA,IAAC;AAAA,IAChB,OAAO,OAAO,EAAE,OAAO,GAAG,QAAQ,EAAE;AAAA,IACpC,cAAc,OAAO,EAAE,OAAO,EAAE;AAAA,EAClC;AACA,SAAO,IAAI,QAAQ;AAAA,IACjB,cAAc,CAAC;AAAA,IACf;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,yBAAyB,CAAC;AAAA,IAC1B,OAAO;AAAA,IACP,OAAO,CAAC;AAAA,EACV,CAAC;AACH;AASA,eAAsB,mBACpB,UACA,KACA,QACA,WACiB;AACjB,QAAM,UAAkB,CAAC;AACzB,aAAW,QAAQ,SAAS,KAAK,GAAG;AAClC,QAAI,aAAa,CAAC,UAAU,IAAI,KAAK,IAAI,EAAG;AAC5C,UAAM,WAAW,MAAM,OAAO,SAAS,MAAM,CAAC,GAAG,GAAG;AACpD,QAAI,SAAS,eAAe,OAAQ,SAAQ,KAAK,IAAI;AAAA,EACvD;AACA,SAAO;AACT;AAEA,eAAsB,cAAc,MAAuC;AACzE,QAAM,QAAQ,KAAK,SAAS,CAAC;AAC7B,QAAM,OAAO,MAAM,MAAM,MAAM,QAAQ,MAAM,WAAW,MAAM;AAC9D,QAAM,YAAY,eAAe,KAAK;AACtC,QAAM,MAAM,CAAC,MAAc,QAAQ,OAAO,MAAM,GAAG,CAAC;AAAA,CAAI;AACxD,MAAI;AACJ,MAAI;AACF,sBAAkB,MAAM,4BAA4B,OAAO,KAAK,GAAG;AAAA,EACrE,SAAS,KAAK;AACZ,QAAI,0BAA0B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAChF,WAAO;AAAA,EACT;AAGA,MAAI,WAAW,KAAK;AACpB,MAAI,CAAC,UAAU;AACb,eAAW,IAAI,aAAa;AAC5B,4BAAwB;AAAA,MACtB;AAAA,MACA,MAAM,yBAAyB,KAAK,OAAO,SAAS,eAAe;AAAA,IACrE,CAAC;AAAA,EACH;AAEA,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,MAAM;AAAA,IACV,KAAK;AAAA,IACL,KAAK;AAAA,IACL,WAAW;AAAA,IACX,KAAK,OAAO,OAAO,yBAAyB;AAAA,EAC9C;AACA,QAAM,mBAAqC,OACvC,IAAI,yBAAyB,IAC7B,IAAI,4BAA4B;AACpC,QAAM,WAAW,IAAI,aAAa,UAAU;AAAA,IAC1C;AAAA,IACA,gBAAgB,IAAI,sBAAsB;AAAA,IAC1C,kBAAkB,KAAK,OAAO,OAAO,oBAAoB;AAAA,IACzD,4BAA4B;AAAA,EAC9B,CAAC;AAID,QAAM,UAAU,MAAM,mBAAmB,UAAU,KAAK,kBAAkB,SAAS;AACnF,QAAM,eAAe,IAAI,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;AAEvD,MAAI,QAAQ,WAAW,GAAG;AACxB;AAAA,MACE;AAAA,IAEF;AAAA,EACF;AAEA,MAAI,UAAU;AACd,QAAM,OAA0B;AAAA,IAC9B,WAAW,MACT,QAAQ,IAAI,CAAC,OAAO;AAAA,MAClB,MAAM,EAAE;AAAA,MACR,aAAa,EAAE;AAAA,MACf,aAAc,EAAE,eAA2C,EAAE,MAAM,SAAS;AAAA,IAC9E,EAAE;AAAA,IACJ,UAAU,OAAO,MAAM,aAAa;AAClC,UAAI,CAAC,aAAa,IAAI,IAAI,GAAG;AAC3B,eAAO,EAAE,SAAS,SAAS,IAAI,mCAAmC,SAAS,KAAK;AAAA,MAClF;AACA,YAAM,MAAM;AAAA,QACV,MAAM;AAAA,QACN,IAAI,OAAO,EAAE,OAAO;AAAA,QACpB;AAAA,QACA,OAAO;AAAA,MACT;AACA,YAAM,QAAQ,MAAM,SAAS,aAAa,CAAC,GAAG,GAAG,KAAK,YAAY;AAClE,YAAM,SAAS,MAAM,QAAQ,CAAC,GAAG;AACjC,UAAI,CAAC,UAAU,OAAO,SAAS,wBAAwB;AACrD,eAAO;AAAA,UACL,SAAS,SAAS,IAAI;AAAA,UACtB,SAAS;AAAA,QACX;AAAA,MACF;AACA,aAAO,EAAE,SAAS,OAAO,SAAS,SAAS,QAAQ,OAAO,QAAQ,EAAE;AAAA,IACtE;AAAA,EACF;AAEA,QAAM,SAAS,IAAI,UAAU;AAAA,IAC3B;AAAA,IACA,WAAW,gBAAgB;AAAA,IAC3B,SAAS,gBAAgB;AAAA,IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC,EAAE,EAAE;AAAA,EACjD,CAAC;AAED,QAAM,OAAO,OAAO,oBAAoB;AAIxC,MACE,MAAM,MAAM,MAAM,QAClB,OAAO,MAAM,MAAM,MAAM,YACzB,MAAM,MAAM,KACZ,MAAM,MAAM,GACZ;AACA,UAAM,OAAO,OAAO,MAAM,MAAM,KAAK,MAAM,MAAM,KAAK,CAAC,KAAK;AAC5D,UAAM,WAAW,OAAO,MAAM,MAAM,MAAM,WAAW,MAAM,MAAM,IAAI;AACrE,UAAM,QAAQ,OAAO,MAAM,OAAO,MAAM,WAAW,MAAM,OAAO,IAAI;AACpE,QAAIC;AACJ,QAAI;AACF,MAAAA,UAAS,MAAM,UAAU,QAAQ;AAAA,QAC/B;AAAA,QACA,MAAM;AAAA,QACN;AAAA,QACA,QAAQ,EAAE,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC,EAAE,EAAE;AAAA,MACjD,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,UAAI,0BAA0B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAChF,aAAO;AAAA,IACT;AACA;AAAA,MACE,kCAAkCA,QAAO,GAAG,oBAAe,QAAQ,MAAM,aACpE,gBAAgB,UAAU,MAAM,iBAAiB,gBAAgB,QAAQ,MAAM,eAAe,IAAI,IAClG,QAAQ,kBAAkB,EAAE;AAAA,IACnC;AACA,UAAM,IAAI,QAAc,CAACC,aAAY;AACnC,YAAM,OAAO,MAAMA,SAAQ;AAC3B,cAAQ,KAAK,UAAU,IAAI;AAC3B,cAAQ,KAAK,WAAW,IAAI;AAAA,IAC9B,CAAC;AACD,UAAMD,QAAO,MAAM;AACnB,eAAW,MAAM;AACjB,WAAO;AAAA,EACT;AAEA;AAAA,IACE,wDAAmD,QAAQ,MAAM,aAC5D,gBAAgB,UAAU,MAAM,iBAAiB,gBAAgB,QAAQ,MAAM,eAAe,IAAI;AAAA,EACzG;AAEA,QAAM,SAAS,WAAW,MAAM;AAChC,QAAM,OAAO;AACb,aAAW,MAAM;AACjB,SAAO;AACT;;;AD1WA,IAAM,eAAe,WAAW;AAEzB,IAAM,SAA4B,OAAO,MAAM,SAAS;AAC7D,QAAM,MAAM,KAAK,CAAC;AAClB,MAAI,QAAQ,SAAS;AAInB,WAAO,cAAc,IAAI;AAAA,EAC3B;AACA,MAAI,CAAC,OAAO,QAAQ,QAAQ;AAC1B,UAAM,UAAU,KAAK,OAAO,cAAc,CAAC;AAC3C,QAAI,OAAO,KAAK,OAAO,EAAE,WAAW,GAAG;AACrC,WAAK,SAAS,MAAM,8BAA8B;AAClD,WAAK,SAAS,MAAM,iEAAiE;AACrF,aAAO;AAAA,IACT;AACA,eAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,OAAO,GAAG;AACjD,YAAM,SAAS,IAAI,YAAY,QAAQ,aAAa;AACpD,YAAM,OAAO,IAAI,cAAc,OAAO,IAAI,WAAW,KAAK;AAC1D,WAAK,SAAS,MAAM,KAAK,KAAK,OAAO,EAAE,CAAC,IAAI,IAAI,UAAU,OAAO,EAAE,CAAC,IAAI,MAAM,GAAG,IAAI;AAAA,CAAI;AAAA,IAC3F;AACA,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,OAAO;AACjB,WAAO,aAAa,MAAM,IAAI;AAAA,EAChC;AACA,MAAI,QAAQ,UAAU;AACpB,UAAM,OAAO,KAAK,CAAC;AACnB,QAAI,CAAC,MAAM;AACT,WAAK,SAAS,WAAW,mCAAmC;AAC5D,aAAO;AAAA,IACT;AACA,WAAO,gBAAgB,MAAM,IAAI;AAAA,EACnC;AACA,MAAI,QAAQ,WAAW;AACrB,SAAK,SAAS;AAAA,MACZ;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACA,OAAK,SAAS,WAAW,2BAA2B,GAAG,EAAE;AACzD,SAAO;AACT;AAEA,eAAe,aAAa,MAAgB,MAAuC;AACjF,QAAM,aAAa,wBAAwB,KAAK,OAAO,KAAK,MAAM;AAClE,QAAM,OAAO,KAAK,CAAC;AACnB,QAAM,SAAS,KAAK,SAAS,UAAU,KAAK,KAAK,SAAS,IAAI;AAC9D,MAAI,CAAC,MAAM;AACT,SAAK,SAAS,WAAW,gCAAgC;AACzD,SAAK,SAAS,MAAM,sBAAsB;AAC1C,eAAW,CAAC,OAAO,IAAI,KAAK,OAAO,QAAQ,KAAK,OAAO,cAAc,CAAC,CAAC;AACrE,WAAK,SAAS,MAAM,KAAK,MAAM,OAAO,EAAE,CAAC,IAAI,KAAK,eAAe,KAAK,SAAS;AAAA,CAAI;AACrF,QAAI,OAAO,KAAK,KAAK,OAAO,cAAc,CAAC,CAAC,EAAE,WAAW;AACvD,iBAAW,KAAK,OAAO,KAAK,YAAY,GAAG;AACzC,cAAM,IAAI,cAAc,aAAa,CAAC,CAAC;AACvC,aAAK,SAAS,MAAM,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,WAAW;AAAA,CAAI;AAAA,MAC5D;AACF,SAAK,SAAS,MAAM,iEAAiE;AACrF,WAAO;AAAA,EACT;AACA,QAAM,UAAU,aAAa,IAAI;AACjC,MAAI,CAAC,SAAS;AACZ,SAAK,SAAS;AAAA,MACZ,mBAAmB,IAAI;AAAA;AAAA,IACzB;AACA,WAAO;AAAA,EACT;AACA,QAAM,YAAY,EAAE,GAAG,QAAQ;AAC/B,YAAU,UAAU;AACpB,QAAM,WAAW,MAAM,mBAAmB,UAAU;AACpD,QAAM,aAAa,SAAS,SAAS,UAAU,IAAI,SAAS,aAAa,CAAC;AAC1E,MAAI,WAAW,IAAI;AACjB,SAAK,SAAS,aAAa,WAAW,IAAI;AAAA,CAAkC;AAC9E,QAAM,qBAAqB,YAAY,CAAC,WAAW;AACjD,gBAAY,QAAQ,CAAC,cAAc,IAAI,GAAG,SAAS;AAAA,EACrD,CAAC;AACD,QAAM,OAAO,SAAS,YAAY;AAClC,OAAK,SAAS;AAAA,IACZ,GAAG,IAAI,KAAK,IAAI,MAAM,UAAU,SAAS,wBAAwB,UAAU;AAAA;AAAA,EAC7E;AACA,SAAO;AACT;AAEA,eAAe,gBAAgB,MAAc,MAAuC;AAClF,QAAM,aAAa,wBAAwB,KAAK,OAAO,KAAK,MAAM;AAClE,MAAI,CAAE,MAAM,qBAAqB,UAAU,GAAI;AAC7C,SAAK,SAAS,WAAW,yBAAyB;AAClD,WAAO;AAAA,EACT;AACA,QAAM,WAAW,MAAM,mBAAmB,UAAU;AACpD,QAAM,aAAa,SAAS,SAAS,UAAU,IAAI,SAAS,aAAa,CAAC;AAC1E,MAAI,CAAC,WAAW,IAAI,GAAG;AACrB,SAAK,SAAS,WAAW,WAAW,IAAI;AAAA,CAAoB;AAC5D,WAAO;AAAA,EACT;AACA,QAAM,qBAAqB,YAAY,CAAC,WAAW;AACjD,mBAAe,QAAQ,CAAC,cAAc,IAAI,CAAC;AAAA,EAC7C,CAAC;AACD,OAAK,SAAS,UAAU,YAAY,IAAI;AAAA,CAAkB;AAC1D,SAAO;AACT;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;",
+  "names": ["stat", "handle", "resolve"]
+}