affitor 0.4.4 → 0.4.6

package/dist/lib/agent-launcher.js

@@ -0,0 +1,130 @@
+// Kept as a standalone CommonJS file in the customer's project: a client can
+// start it from any directory, without putting a credential in its MCP config.
+export const MCP_VERSION = "0.2.2";
+/** Shared by doctor and the generated launcher; never evaluates an env file. */
+export function parseProgramCredential(envKey, readText) {
+    const valid = (value) => /^[A-Za-z0-9_-]+$/.test(value);
+    if (typeof envKey === "string" && envKey !== "")
+        return valid(envKey) ? envKey : null;
+    try {
+        const text = readText();
+        if (text === null)
+            return null;
+        const assignments = text.split(/\r?\n/).filter(line => /^\s*(?:export\s+)?AFFITOR_API_KEY\s*=/.test(line));
+        if (assignments.length !== 1)
+            return null;
+        let value = assignments[0].replace(/^\s*(?:export\s+)?AFFITOR_API_KEY\s*=\s*/, "").trim();
+        if ((value.startsWith('"') && value.endsWith('"')) || (value.startsWith("'") && value.endsWith("'")))
+            value = value.slice(1, -1);
+        return valid(value) ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Shared with the standalone launcher; private files never supply executable code. */
+export function parseStoredAgentCredential(text, client) {
+    try {
+        const value = JSON.parse(text);
+        if (!value || value.version !== 1 || value.client !== client ||
+            !["claude_code", "cursor", "codex"].includes(client) ||
+            !Number.isSafeInteger(value.id) || value.id <= 0 ||
+            !Number.isSafeInteger(value.program_id) || value.program_id <= 0 ||
+            typeof value.api_key !== "string" || !/^aff_ag_[A-Za-z0-9_-]{43}$/.test(value.api_key) ||
+            typeof value.api_url !== "string")
+            return null;
+        const url = new URL(value.api_url);
+        if (url.origin !== value.api_url || url.username || url.password ||
+            (url.protocol !== "https:" && !(url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname))))
+            return null;
+        return value;
+    }
+    catch {
+        return null;
+    }
+}
+/** Minimal runtime environment; never forward parent networking, Node or npm overrides. */
+export function agentChildEnvironment(source, key) {
+    const allowed = ["PATH", "HOME", "USERPROFILE", "APPDATA", "LOCALAPPDATA", "SYSTEMROOT", "WINDIR", "COMSPEC", "PATHEXT", "TMP", "TEMP", "TMPDIR", "LANG", "TERM", "COLORTERM", "NO_COLOR", "FORCE_COLOR"];
+    const env = {};
+    for (const [name, value] of Object.entries(source)) {
+        const canonical = name.toUpperCase();
+        if (allowed.includes(canonical) || /^LC_[A-Z_]+$/.test(canonical))
+            env[canonical] = value;
+    }
+    env.NoDefaultCurrentDirectoryInExePath = "1";
+    env.AFFITOR_API_KEY = key;
+    env.AFFITOR_MCP_WRITE = "0";
+    return env;
+}
+export const AGENT_LAUNCHER = `// Generated by affitor agent setup. Contains no credentials.
+const { readFileSync, lstatSync } = require('node:fs');
+const { join, resolve } = require('node:path');
+const { spawn } = require('node:child_process');
+const project = resolve(__dirname, '..');
+const parseProgramCredential = ${parseProgramCredential.toString()};
+const selector = process.argv[2];
+const parseStoredAgentCredential = ${parseStoredAgentCredential.toString()};
+let stored = null;
+if (selector !== undefined) {
+  try {
+    if (!['claude_code', 'cursor', 'codex'].includes(selector) || process.argv.length !== 3) throw new Error();
+    const directory = join(__dirname, 'agents');
+    const parent = lstatSync(directory);
+    const path = join(directory, selector + '.json');
+    const stat = lstatSync(path);
+    if (!parent.isDirectory() || parent.isSymbolicLink() || !stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1) throw new Error();
+    stored = parseStoredAgentCredential(readFileSync(path, 'utf8'), selector);
+  } catch {}
+}
+const key = selector !== undefined ? stored?.api_key : parseProgramCredential(process.env.AFFITOR_API_KEY, () => {
+  const path = join(__dirname, '.env');
+  const stat = lstatSync(path);
+  if (!stat.isFile() || stat.isSymbolicLink()) return null;
+  return readFileSync(path, 'utf8');
+});
+if (!key) {
+  process.stderr.write('Affitor: credential missing or invalid. Run affitor agent setup for this client; no agent call was made.\\n');
+  process.exit(1);
+}
+// Setup never opts into the sale/refund tools, including through inherited env.
+const agentChildEnvironment = ${agentChildEnvironment.toString()};
+const env = agentChildEnvironment(process.env, key);
+if (stored) env.AFFITOR_API_URL = stored.api_url;
+// Windows batch files require cmd.exe. The command contains constants only:
+// project paths and credentials travel through cwd/env, never shell text.
+const windows = process.platform === 'win32';
+const command = windows ? (process.env.ComSpec || 'cmd.exe') : 'npx';
+const args = windows ? ['/d', '/s', '/c', 'npx.cmd --registry=https://registry.npmjs.org -y @affitor/mcp@${MCP_VERSION}'] : ['--registry=https://registry.npmjs.org', '-y', '@affitor/mcp@${MCP_VERSION}'];
+const child = spawn(command, args, { cwd: project, env, stdio: 'inherit', shell: false, windowsHide: true });
+child.on('error', () => { process.stderr.write('Affitor: could not start the pinned MCP. Check Node.js, npm and network access.\\n'); process.exitCode = 1; });
+child.on('exit', (code, signal) => { process.exitCode = signal ? 1 : (code ?? 1); });
+for (const signal of ['SIGINT', 'SIGTERM']) process.on(signal, () => child.kill(signal));
+`;
+export const AGENT_SKILL = `---
+name: affitor
+description: Check Affitor affiliate integration readiness and follow its integration runbook.
+metadata:
+  version: "1"
+---
+
+# Affitor
+
+Connect only when this project needs Affitor. Follow https://affitor.com/docs/skill.md
+and the founder's optional context. Detect the framework and payment provider first.
+Never print, copy into a prompt, or commit credentials. Never treat a user login token
+as a program key. Do not add a second sale writer when Stripe Connect may record sales.
+
+Installed, signed in, and verified are different states. After restarting the client,
+call affitor_readiness and check the program identity before changing this project.
+Only describe checks that actually passed. A static doctor cannot prove a live session.
+Do not run sale/refund tools. Ask before running synthetic verification or other writes.
+
+| Problem | Next step |
+| --- | --- |
+| Missing or stale local files | Run affitor agent setup --dry-run --json, show the plan, then apply the selected client after approval. |
+| Files aligned, tools absent | Restart the selected agent, then call affitor_readiness. |
+| Credential missing or rejected | Run affitor login, then affitor agent setup for this client and program. Never paste any key into chat. |
+| Readiness fails | Report the failed checks and follow the runbook; do not claim integration is verified. |
+`;
+//# sourceMappingURL=agent-launcher.js.map

package/dist/lib/agent-launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-launcher.js","sourceRoot":"","sources":["../../src/lib/agent-launcher.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AAEnC,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CAAC,MAAe,EAAE,QAA6B;IACnF,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3G,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,IAAI,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,0CAA0C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1F,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjI,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAaD,uFAAuF;AACvF,MAAM,UAAU,0BAA0B,CAAC,IAAY,EAAE,MAAc;IACrE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;YAC1D,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpD,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,EAAE,IAAI,CAAC;YAChD,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC;YAChE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YACtF,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;YAC9D,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACxI,OAAO,KAA8B,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,qBAAqB,CAAC,MAAyB,EAAE,GAAW;IAC1E,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IAC1M,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,GAAG,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAC5F,CAAC;IACD,GAAG,CAAC,kCAAkC,GAAG,GAAG,CAAC;IAC7C,GAAG,CAAC,eAAe,GAAG,GAAG,CAAC;IAC1B,GAAG,CAAC,iBAAiB,GAAG,GAAG,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;iCAKG,sBAAsB,CAAC,QAAQ,EAAE;;qCAE7B,0BAA0B,CAAC,QAAQ,EAAE;;;;;;;;;;;;;;;;;;;;;;;;gCAwB1C,qBAAqB,CAAC,QAAQ,EAAE;;;;;;;2GAO2C,WAAW,sEAAsE,WAAW;;;;;CAKtM,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;CAyB1B,CAAC"}

package/dist/lib/agent-setup.d.ts

@@ -0,0 +1,52 @@
+import { type StoredAgentCredential } from "./agent-launcher.js";
+export declare const CLIENTS: readonly ["claude_code", "cursor", "codex"];
+export type AgentClient = typeof CLIENTS[number];
+type JsonObject = Record<string, unknown>;
+export interface FileAction {
+    path: string;
+    operation: "create" | "update" | "unchanged";
+    backup: string | null;
+    content: string;
+}
+export interface SetupPlan {
+    project: string;
+    clients: AgentClient[];
+    mcpVersion: string;
+    entry: {
+        command: string;
+        args: string[];
+    };
+    actions: FileAction[];
+    manual: string[];
+    notes: string[];
+    agentKeys?: {
+        client: AgentClient;
+        path: string;
+        id?: number;
+        state: "pending" | "reused" | "minted";
+    }[];
+}
+export declare function object(value: unknown): value is JsonObject;
+export declare function callerClient(env: NodeJS.ProcessEnv): AgentClient | undefined;
+export declare function selectedClients(names: string[], env: NodeJS.ProcessEnv): AgentClient[];
+export declare function setupProgramId(cwd: string, explicit?: string): number | null;
+export declare function planSetup(cwd: string, clients: AgentClient[], options?: {
+    agentKeys?: boolean;
+}): SetupPlan;
+/** These APIs keep credential contents out of the public plan metadata. */
+export declare function readPlannedAgentCredential(plan: SetupPlan, client: AgentClient): StoredAgentCredential | null;
+export declare function stageAgentCredential(plan: SetupPlan, client: AgentClient, record: StoredAgentCredential, minted: boolean): void;
+/** Local, synchronous transaction. It detects ordinary concurrent edits; it is not a local sandbox. */
+export declare function applySetup(plan: SetupPlan, beforeWrite?: (action: FileAction) => void): void;
+export declare function credentialWarnings(project: string, relativePath?: string): string[];
+export declare function doctor(cwd: string, clients: AgentClient[]): {
+    client: "claude_code" | "cursor" | "codex";
+    warnings: string[];
+    notes: string[];
+    status: string;
+    credential: string;
+    liveSession: string;
+    manual: string[];
+}[];
+export {};
+//# sourceMappingURL=agent-setup.d.ts.map

package/dist/lib/agent-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-setup.d.ts","sourceRoot":"","sources":["../../src/lib/agent-setup.ts"],"names":[],"mappings":"AAIA,OAAO,EAAuH,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAEtL,eAAO,MAAM,OAAO,6CAA8C,CAAC;AACnE,MAAM,MAAM,WAAW,GAAG,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AACjD,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC1C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;IAC7C,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtB,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC3C,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAA;KAAE,EAAE,CAAC;CAC1G;AAGD,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAE1D;AAmCD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,WAAW,GAAG,SAAS,CAK5E;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,WAAW,EAAE,CAKtF;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAa5E;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,SAAS,CA+F/G;AAED,2EAA2E;AAC3E,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,qBAAqB,GAAG,IAAI,CAK7G;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,OAAO,QAUxH;AAsBD,uGAAuG;AACvG,wBAAgB,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,QA0CrF;AAcD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,SAAkB,GAAG,MAAM,EAAE,CAkB5F;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE;;;;;;;;IAmBzD"}

package/dist/lib/agent-setup.js

@@ -0,0 +1,374 @@
+import { existsSync, lstatSync, mkdirSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { dirname, join, relative, resolve } from "node:path";
+import { randomUUID } from "node:crypto";
+import { spawnSync } from "node:child_process";
+import { AGENT_LAUNCHER, AGENT_SKILL, MCP_VERSION, parseProgramCredential, agentChildEnvironment, parseStoredAgentCredential } from "./agent-launcher.js";
+export const CLIENTS = ["claude_code", "cursor", "codex"];
+const snapshots = new WeakMap();
+export function object(value) {
+    return !!value && typeof value === "object" && !Array.isArray(value);
+}
+/** Refuse symlinks anywhere below the canonical project directory. */
+function safePath(project, path) {
+    const rel = relative(project, path);
+    if (!rel || rel.startsWith("..") || resolve(project, rel) !== path)
+        throw new Error("Unsafe setup target.");
+    let current = project;
+    for (const part of rel.split(/[\\/]/)) {
+        current = join(current, part);
+        if (!existsSync(current)) {
+            // existsSync follows symlinks, including dangling ones.
+            try {
+                if (lstatSync(current).isSymbolicLink())
+                    throw new Error("Setup target is a symlink.");
+            }
+            catch (error) {
+                if (error.code !== "ENOENT")
+                    throw error;
+            }
+            continue;
+        }
+        const stat = lstatSync(current);
+        if (stat.isSymbolicLink() || (current === path ? !stat.isFile() || stat.nlink !== 1 : !stat.isDirectory())) {
+            throw new Error("Setup target must be a regular file with no symlink parents.");
+        }
+    }
+}
+function readTarget(project, path) {
+    safePath(project, path);
+    if (!existsSync(path))
+        return null;
+    const bytes = readFileSync(path);
+    const text = bytes.toString("utf8");
+    if (!Buffer.from(text, "utf8").equals(bytes))
+        throw new Error("Setup target must contain valid UTF-8. Nothing was written.");
+    return text;
+}
+function configFile(client) {
+    return client === "claude_code" ? ".mcp.json" : ".cursor/mcp.json";
+}
+export function callerClient(env) {
+    if (env.CLAUDECODE)
+        return "claude_code";
+    if (env.CODEX || env.CODEX_THREAD_ID)
+        return "codex";
+    if (env.CURSOR_AGENT)
+        return "cursor";
+    return undefined;
+}
+export function selectedClients(names, env) {
+    if (names.some(name => !CLIENTS.includes(name)))
+        throw new Error("Unknown client. Choose claude_code, cursor or codex.");
+    const caller = callerClient(env);
+    if (caller && names.some(name => name !== caller))
+        throw new Error("An agent can only configure itself. Run setup in your own terminal for other clients.");
+    return [...new Set(names.length ? names : caller ? [caller] : [])];
+}
+export function setupProgramId(cwd, explicit) {
+    const valid = (value) => (typeof value === "number" || typeof value === "string") && /^[1-9]\d*$/.test(String(value)) && Number.isSafeInteger(Number(value));
+    if (explicit !== undefined) {
+        if (!valid(explicit))
+            throw new Error("Setup target program id must be a positive decimal integer.");
+        return Number(explicit);
+    }
+    const project = realpathSync(resolve(cwd));
+    const raw = readTarget(project, join(project, ".affitor/config.json"));
+    if (raw === null)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(raw);
+    }
+    catch {
+        throw new Error("Setup target project config is invalid. Resolve it before setup.");
+    }
+    if (!object(value) || !valid(value.program_id))
+        throw new Error("Setup target project config has no valid program id. Pass --program-id explicitly.");
+    return Number(value.program_id);
+}
+export function planSetup(cwd, clients, options = {}) {
+    const project = realpathSync(resolve(cwd));
+    const launcher = join(project, ".affitor/agent-mcp.cjs");
+    const entry = { command: "node", args: [launcher] };
+    const plan = { project, clients, entry, mcpVersion: MCP_VERSION, actions: [], manual: [], notes: clients.length ? ["MCP entries contain this machine's absolute project path. Keep configs local or regenerate them on each teammate's machine."] : [] };
+    const before = new Map();
+    const add = (rel, content, expectedOriginal) => {
+        const path = join(project, rel);
+        const original = readTarget(project, path);
+        if (expectedOriginal !== undefined && original !== expectedOriginal)
+            throw new Error("A setup file changed while planning. Run setup again.");
+        const backup = original !== null && original !== content ? join(project, ".affitor/backups", `${rel}.affitor.bak`) : null;
+        if (backup) {
+            safePath(project, backup);
+            // An earlier first snapshot stays intact; reject an unsafe backup, never overwrite it.
+            if (existsSync(backup))
+                readTarget(project, backup);
+        }
+        before.set(path, original);
+        plan.actions.push({ path, content, backup, operation: original === content ? "unchanged" : original === null ? "create" : "update" });
+    };
+    if (!options.agentKeys && clients.some(client => readTarget(project, join(project, `.affitor/agents/${client}.json`)) !== null)) {
+        throw new Error("Setup target already has per-client credentials. Pass --program-id before updating.");
+    }
+    if (options.agentKeys) {
+        plan.notes.push("Matching active keys are reused. Replacing an active selected key revokes its previous key after the new files are saved; failed revocations require dashboard cleanup.");
+        plan.agentKeys = clients.map(client => {
+            const rel = `.affitor/agents/${client}.json`;
+            const path = join(project, rel), raw = readTarget(project, path);
+            if (raw !== null && process.platform !== "win32" && (lstatSync(path).mode & 0o077) !== 0)
+                throw new Error("Setup target private agent credential must have owner-only permissions.");
+            if (raw !== null && !parseStoredAgentCredential(raw, client))
+                throw new Error("Setup target has an invalid private agent credential. Resolve it before retrying.");
+            const backup = join(project, ".affitor/backups", `${rel}.affitor.bak`);
+            safePath(project, backup);
+            if (existsSync(backup))
+                readTarget(project, backup);
+            add(rel, "", raw);
+            return { client, path, state: "pending" };
+        });
+    }
+    const editable = clients.filter(client => client !== "codex");
+    for (const client of editable) {
+        const rel = configFile(client);
+        const path = join(project, rel);
+        const raw = readTarget(project, path);
+        let config;
+        try {
+            config = raw === null ? {} : JSON.parse(raw);
+        }
+        catch {
+            throw new Error(`${rel} is not valid JSON. Nothing was written.`);
+        }
+        if (!object(config) || (config.mcpServers !== undefined && !object(config.mcpServers))) {
+            throw new Error(`${rel} must contain an object with an mcpServers object. Nothing was written.`);
+        }
+        const existingEntry = config.mcpServers?.affitor;
+        if (!options.agentKeys && object(existingEntry) && Array.isArray(existingEntry.args) && existingEntry.args.includes(client))
+            throw new Error("Setup target uses per-client credentials. Pass --program-id before updating.");
+        config.mcpServers = { ...config.mcpServers, affitor: options.agentKeys ? { command: entry.command, args: [...entry.args, client] } : entry };
+        add(rel, JSON.stringify(config, null, 2) + "\n", raw);
+        add(client === "claude_code" ? ".claude/skills/affitor/SKILL.md" : ".cursor/skills/affitor/SKILL.md", AGENT_SKILL);
+    }
+    if (clients.includes("codex")) {
+        if (process.platform === "win32") {
+            // A path may contain cmd.exe expansion/separator characters. Do not emit
+            // executable shell text when the invoking Windows shell is unknown.
+            plan.manual.push('Windows: add Affitor in Codex MCP settings using command "node" and the exact arguments in entry.args plus codex when using per-client agent keys. No shell command is generated.');
+        }
+        else {
+            plan.manual.push(`codex mcp add affitor -- node '${launcher.replaceAll("'", "'\"'\"'")}'${options.agentKeys ? ' codex' : ''}`);
+        }
+        // Installing a shared skill and launcher needs the same explicit consent.
+        add(".agents/skills/affitor/SKILL.md", AGENT_SKILL);
+    }
+    if (clients.length) {
+        add(".affitor/agent-mcp.cjs", AGENT_LAUNCHER);
+        // The final matching rule wins at each directory level. Existing negations
+        // must not cancel protection; a child guard also outranks root ignore rules.
+        for (const [rel, entries] of [
+            [".gitignore", ["/.affitor/.env", "/.affitor/backups/", "/.affitor/credentials.json", "/.affitor/agents/"]],
+            [".affitor/.gitignore", ["/.env", "/backups/", "/credentials.json", "/agents/"]],
+        ]) {
+            const raw = readTarget(project, join(project, rel));
+            const prior = raw ?? "";
+            const suffix = entries.join("\n") + "\n";
+            add(rel, prior.endsWith(suffix) ? prior : prior + (prior && !prior.endsWith("\n") ? "\n" : "") + suffix, raw);
+        }
+    }
+    if (clients.length) {
+        const guard = join(project, ".affitor/backups/.gitignore");
+        const raw = readTarget(project, guard);
+        if (raw !== null && !["*", "*\n", "*\r\n"].includes(raw))
+            throw new Error("Unsafe setup backup directory: its .gitignore must contain only the '*' rule.");
+        add(".affitor/backups/.gitignore", raw ?? "*\n", raw);
+        // Protect secret-containing backups before creating the first one. Keep this
+        // guard with backups on rollback even if the root .gitignore is restored.
+        plan.actions.unshift(plan.actions.pop());
+    }
+    if (options.agentKeys && clients.length) {
+        const guard = ".affitor/agents/.gitignore", raw = readTarget(project, join(project, guard));
+        if (raw !== null && !["*", "*\n", "*\r\n"].includes(raw))
+            throw new Error("Unsafe setup agent directory guard.");
+        add(guard, raw ?? "*\n", raw);
+        const action = plan.actions.pop();
+        plan.actions.splice(1, 0, action);
+    }
+    snapshots.set(plan, before);
+    return plan;
+}
+/** These APIs keep credential contents out of the public plan metadata. */
+export function readPlannedAgentCredential(plan, client) {
+    const path = plan.agentKeys?.find(item => item.client === client)?.path;
+    if (!path)
+        throw new Error("Setup plan does not include this agent credential.");
+    const raw = snapshots.get(plan)?.get(path);
+    return raw ? parseStoredAgentCredential(raw, client) : null;
+}
+export function stageAgentCredential(plan, client, record, minted) {
+    const item = plan.agentKeys?.find(item => item.client === client);
+    if (!item || !parseStoredAgentCredential(JSON.stringify(record), client))
+        throw new Error("Setup agent credential is invalid.");
+    const action = plan.actions.find(action => action.path === item.path);
+    const original = snapshots.get(plan).get(item.path);
+    action.content = minted ? JSON.stringify(record, null, 2) + "\n" : original;
+    action.operation = original === action.content ? "unchanged" : original === null ? "create" : "update";
+    action.backup = original !== null && original !== action.content ? join(plan.project, ".affitor/backups", `.affitor/agents/${client}.json.affitor.bak`) : null;
+    if (action.backup) {
+        safePath(plan.project, action.backup);
+        if (existsSync(action.backup))
+            readTarget(plan.project, action.backup);
+    }
+    item.id = record.id;
+    item.state = minted ? "minted" : "reused";
+}
+function atomicWrite(project, path, content) {
+    safePath(project, path);
+    const guard = join(project, ".affitor/backups/.gitignore");
+    // The guard bootstrap contains only '*'. Every later temp is protected before
+    // merged config bytes reach disk, even if the process exits before finally.
+    if (path !== guard) {
+        const raw = readTarget(project, guard);
+        if (raw === null || !["*", "*\n", "*\r\n"].includes(raw))
+            throw new Error("Unsafe setup temporary directory guard.");
+    }
+    mkdirSync(dirname(path), { recursive: true });
+    const temporary = join(project, ".affitor/backups", `.temporary-${randomUUID()}.tmp`);
+    safePath(project, temporary);
+    try {
+        writeFileSync(temporary, content, { mode: 0o600, flag: "wx" });
+        safePath(project, path);
+        renameSync(temporary, path);
+        if (readFileSync(path, "utf8") !== content)
+            throw new Error("Setup read-back failed.");
+    }
+    finally {
+        rmSync(temporary, { force: true });
+    }
+}
+/** Local, synchronous transaction. It detects ordinary concurrent edits; it is not a local sandbox. */
+export function applySetup(plan, beforeWrite) {
+    const before = snapshots.get(plan);
+    if (plan.agentKeys?.some(item => item.state === "pending"))
+        throw new Error("Setup agent credentials have not been prepared.");
+    if (!before)
+        throw new Error("Generate a fresh setup plan before applying it.");
+    const applied = [];
+    let backupCreated = false;
+    let privateWritten = false;
+    try {
+        for (const action of plan.actions) {
+            if (readTarget(plan.project, action.path) !== before.get(action.path))
+                throw new Error("A setup file changed after planning. Run setup again.");
+        }
+        for (const action of plan.actions.filter(action => action.operation !== "unchanged")) {
+            beforeWrite?.(action);
+            if (readTarget(plan.project, action.path) !== before.get(action.path))
+                throw new Error("A setup file changed after planning. Run setup again.");
+            if (action.backup && !existsSync(action.backup)) {
+                const guard = readTarget(plan.project, join(plan.project, ".affitor/backups/.gitignore"));
+                if (guard === null || !["*", "*\n", "*\r\n"].includes(guard))
+                    throw new Error("Unsafe setup backup ignore guard.");
+                safePath(plan.project, action.backup);
+                mkdirSync(dirname(action.backup), { recursive: true });
+                backupCreated = true;
+                writeFileSync(action.backup, before.get(action.path), { flag: "wx", mode: 0o600 });
+            }
+            applied.push(action);
+            if (plan.agentKeys?.some(item => item.path === action.path))
+                privateWritten = true;
+            atomicWrite(plan.project, action.path, action.content);
+        }
+    }
+    catch {
+        let concurrent = false;
+        for (const action of applied.reverse()) {
+            // Never restore over a newer edit by somebody else.
+            try {
+                const original = before.get(action.path);
+                const current = readTarget(plan.project, action.path);
+                if ((backupCreated || privateWritten) && [join(plan.project, ".affitor/backups/.gitignore"), join(plan.project, ".affitor/agents/.gitignore")].includes(action.path) && original === null && current === action.content)
+                    continue;
+                if (current === original)
+                    continue;
+                if (current !== action.content) {
+                    concurrent = true;
+                    continue;
+                }
+                if (original === null)
+                    rmSync(action.path);
+                else
+                    atomicWrite(plan.project, action.path, original);
+            }
+            catch {
+                concurrent = true;
+            }
+        }
+        throw new Error(concurrent ? "Setup failed; a concurrent edit was preserved. Check the files and private backups before retrying." : "Setup failed. Written files were rolled back; private backups were kept. Run a fresh dry-run.");
+    }
+}
+/** No marker means Git really has nowhere to discover a worktree (GIT_* overrides are dropped). */
+function hasGitAncestor(project) {
+    let current = project;
+    for (;;) {
+        try {
+            lstatSync(join(current, ".git"));
+            return true;
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                return null;
+        }
+        const parent = dirname(current);
+        if (parent === current)
+            return false;
+        current = parent;
+    }
+}
+export function credentialWarnings(project, relativePath = ".affitor/.env") {
+    const env = agentChildEnvironment(process.env, "");
+    delete env.AFFITOR_API_KEY;
+    // Fixed locale permits only Git's exact no-repository result; other failures stay unknown.
+    env.LC_ALL = "C";
+    const run = (args) => spawnSync("git", ["-C", project, ...args], { env, encoding: "utf8", timeout: 1500, windowsHide: true });
+    const discovery = run(["rev-parse", "--is-inside-work-tree"]);
+    const failed = ["credential_check_failed"];
+    if (discovery.error || discovery.signal)
+        return failed;
+    if (discovery.status === 128) {
+        const noRepository = /^fatal: not a git repository \(or any of the parent directories\): \.git\r?\n?$/.test(discovery.stderr ?? "");
+        return noRepository && discovery.stdout === "" && hasGitAncestor(project) === false ? [] : failed;
+    }
+    if (discovery.status !== 0 || discovery.stdout.trim() !== "true")
+        return failed;
+    const checked = run(["ls-files", "--error-unmatch", "--", relativePath]);
+    if (checked.error || checked.signal)
+        return failed;
+    if (checked.status === 0)
+        return ["credential_tracked"];
+    return checked.status === 1 ? [] : failed;
+}
+export function doctor(cwd, clients) {
+    return clients.map(client => {
+        try {
+            const root = realpathSync(resolve(cwd));
+            const privatePath = join(root, `.affitor/agents/${client}.json`);
+            const rawConfig = client === "codex" ? null : readTarget(root, join(root, configFile(client)));
+            const entry = rawConfig ? JSON.parse(rawConfig)?.mcpServers?.affitor : null;
+            const perClient = existsSync(privatePath) || (Array.isArray(entry?.args) && entry.args.includes(client));
+            const plan = planSetup(cwd, [client], { agentKeys: perClient });
+            const saved = perClient ? readPlannedAgentCredential(plan, client) : null;
+            if (saved)
+                stageAgentCredential(plan, client, saved, false);
+            const keyPath = join(plan.project, ".affitor/.env");
+            const credential = perClient ? saved?.api_key : parseProgramCredential(process.env.AFFITOR_API_KEY, () => {
+                const stat = lstatSync(keyPath);
+                return stat.isFile() && !stat.isSymbolicLink() ? readFileSync(keyPath, "utf8") : null;
+            });
+            return { client, warnings: credentialWarnings(plan.project, perClient ? `.affitor/agents/${client}.json` : ".affitor/.env"), notes: plan.notes, status: client === "codex" ? "manual" : plan.actions.some(a => a.operation === "create") ? "missing" : plan.actions.some(a => a.operation === "update") ? "stale" : "aligned", credential: credential ? "present_unverified" : "missing", liveSession: "not_checked", manual: plan.manual };
+        }
+        catch {
+            return { client, warnings: [], notes: [], status: "invalid", credential: "not_checked", liveSession: "not_checked", manual: [] };
+        }
+    });
+}
+//# sourceMappingURL=agent-setup.js.map

package/dist/lib/agent-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-setup.js","sourceRoot":"","sources":["../../src/lib/agent-setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1H,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,0BAA0B,EAA8B,MAAM,qBAAqB,CAAC;AAEtL,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AAoBnE,MAAM,SAAS,GAAG,IAAI,OAAO,EAAyC,CAAC;AAEvE,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,sEAAsE;AACtE,SAAS,QAAQ,CAAC,OAAe,EAAE,IAAY;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC5G,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,wDAAwD;YACxD,IAAI,CAAC;gBAAC,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAAC,CAAC;YAC/F,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YAAC,CAAC;YACtF,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC3G,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY;IAC/C,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAC7H,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,MAAmB;IACrC,OAAO,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAsB;IACjD,IAAI,GAAG,CAAC,UAAU;QAAE,OAAO,aAAa,CAAC;IACzC,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,eAAe;QAAE,OAAO,OAAO,CAAC;IACrD,IAAI,GAAG,CAAC,YAAY;QAAE,OAAO,QAAQ,CAAC;IACtC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAe,EAAE,GAAsB;IACrE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAmB,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACxI,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAC5J,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAsB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,QAAiB;IAC3D,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtK,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACrG,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACvE,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAAC,CAAC;IAC/H,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IACtJ,OAAO,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,OAAsB,EAAE,UAAmC,EAAE;IAClG,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;IACpD,MAAM,IAAI,GAAc,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,6HAA6H,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACpQ,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,OAAe,EAAE,gBAAgC,EAAE,EAAE;QAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,gBAAgB,KAAK,SAAS,IAAI,QAAQ,KAAK,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC9I,MAAM,MAAM,GAAG,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1H,IAAI,MAAM,EAAE,CAAC;YACX,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1B,uFAAuF;YACvF,IAAI,UAAU,CAAC,MAAM,CAAC;gBAAE,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxI,CAAC,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,mBAAmB,MAAM,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QAChI,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,yKAAyK,CAAC,CAAC;QAC3L,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YACpC,MAAM,GAAG,GAAG,mBAAmB,MAAM,OAAO,CAAC;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjE,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;YACrL,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;YACnK,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,GAAG,cAAc,CAAC,CAAC;YACvE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAAC,IAAI,UAAU,CAAC,MAAM,CAAC;gBAAE,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/E,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;IAC9D,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QACrD,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,0CAA0C,CAAC,CAAC;QAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,yEAAyE,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,aAAa,GAAI,MAAM,CAAC,UAAqC,EAAE,OAAO,CAAC;QAC7E,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAC7N,MAAM,CAAC,UAAU,GAAG,EAAE,GAAI,MAAM,CAAC,UAAqC,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QACzK,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;QACtD,GAAG,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,iCAAiC,EAAE,WAAW,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,yEAAyE;YACzE,oEAAoE;YACpE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mLAAmL,CAAC,CAAC;QACxM,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjI,CAAC;QACD,0EAA0E;QAC1E,GAAG,CAAC,iCAAiC,EAAE,WAAW,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,wBAAwB,EAAE,cAAc,CAAC,CAAC;QAC9C,2EAA2E;QAC3E,6EAA6E;QAC7E,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI;YAC3B,CAAC,YAAY,EAAE,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,mBAAmB,CAAC,CAAC;YAC3G,CAAC,qBAAqB,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC;SACxE,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,GAAG,IAAI,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACzC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;QAC3J,GAAG,CAAC,6BAA6B,EAAE,GAAG,IAAI,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,6EAA6E;QAC7E,0EAA0E;QAC1E,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAG,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,4BAA4B,EAAE,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5F,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACjH,GAAG,CAAC,KAAK,EAAE,GAAG,IAAI,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAG,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,0BAA0B,CAAC,IAAe,EAAE,MAAmB;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC;IACxE,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACjF,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO,GAAG,CAAC,CAAC,CAAC,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAe,EAAE,MAAmB,EAAE,MAA6B,EAAE,MAAe;IACvH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAChI,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAE,CAAC;IACvE,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC;IACtD,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,QAAS,CAAC;IAC7E,MAAM,CAAC,SAAS,GAAG,QAAQ,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvG,MAAM,CAAC,MAAM,GAAG,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,MAAM,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/J,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAAC,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IACrI,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;IAAC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;AACjE,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,IAAY,EAAE,OAAe;IACjE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IAC3D,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACvH,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE,cAAc,UAAU,EAAE,MAAM,CAAC,CAAC;IACtF,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC7B,IAAI,CAAC;QACH,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACxB,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5B,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACzF,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACnD,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,UAAU,CAAC,IAAe,EAAE,WAA0C;IACpF,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC/H,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAChF,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAClJ,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,WAAW,CAAC,EAAE,CAAC;YACrF,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;YACtB,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAChJ,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC,CAAC;gBAC1F,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACnH,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;gBACtC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,aAAa,GAAG,IAAI,CAAC;gBACrB,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,IAAI,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC;gBAAE,cAAc,GAAG,IAAI,CAAC;YACnF,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACvC,oDAAoD;YACpD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAE,CAAC;gBAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACtD,IAAI,CAAC,aAAa,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,6BAA6B,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM,CAAC,OAAO;oBAAE,SAAS;gBAClO,IAAI,OAAO,KAAK,QAAQ;oBAAE,SAAS;gBACnC,IAAI,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;oBAAC,UAAU,GAAG,IAAI,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAChE,IAAI,QAAQ,KAAK,IAAI;oBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;;oBACtC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBAAC,UAAU,GAAG,IAAI,CAAC;YAAC,CAAC;QAChC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,qGAAqG,CAAC,CAAC,CAAC,+FAA+F,CAAC,CAAC;IACxO,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,SAAS,CAAC;QACR,IAAI,CAAC;YAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACtD,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;QAAC,CAAC;QACtF,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACrC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,YAAY,GAAG,eAAe;IAChF,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC,eAAe,CAAC;IAC3B,2FAA2F;IAC3F,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;IACjB,MAAM,GAAG,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACxI,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC3C,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IACvD,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,iFAAiF,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACpI,OAAO,YAAY,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACpG,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAChF,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IACnD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxD,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,OAAsB;IACxD,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,mBAAmB,MAAM,OAAO,CAAC,CAAC;YACjE,MAAM,SAAS,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC/F,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5E,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACzG,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;YAChE,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1E,IAAI,KAAK;gBAAE,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,GAAG,EAAE;gBACvG,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;gBAChC,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACxF,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,mBAAmB,MAAM,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9a,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAAC,CAAC;IAC/I,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/config.js

@@ -235,7 +235,7 @@ export function writeEnvExample(config, apiKey, cwd) {
 
 AFFITOR_API_KEY=${apiKey}
 AFFITOR_PROGRAM_ID=${config.program_id}
-# STRIPE_CONNECTED_ACCOUNT_ID=  (connect Stripe in the Affitor dashboard: program Settings, Connect Stripe)
+# STRIPE_CONNECTED_ACCOUNT_ID=  (connect Stripe in the Affitor dashboard: Program settings → Payments, Connect Stripe)
 `;
     writeFileSync(join(dir, ".env.example"), content);
 }
@@ -305,7 +305,7 @@ curl -X POST ${config.api_url}/api/v1/track/lead \\
 
 ### 3. Sale/Revenue Tracking
 
-**Option A: Stripe (recommended)**: connect Stripe in the Affitor dashboard (program Settings, Connect Stripe). Affitor's webhook records sales; add Affitor metadata to your checkout so sales are attributed reliably.
+**Option A: Stripe (recommended)**: connect Stripe in the Affitor dashboard (Program settings → Payments, Connect Stripe). Affitor's webhook records sales; add Affitor metadata to your checkout so sales are attributed reliably.
 
 **Option B: Sale API (any payment provider)**