agent-dir 0.0.0-stage → 0.1.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 agent-dir contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,283 @@
-# Temporary Holding Version
+<div align="center">
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+<img src="assets/agent-dir-banner.svg" alt="AGENT-DIR — Expose a local project to AI agents through authenticated MCP." width="100%">
+
+</div>
+
+> **`agent-dir` turns a trusted local project directory into a controlled, authenticated MCP endpoint for AI agents.**
+
+`agent-dir` is a cross-platform TypeScript CLI that exposes a local project to an AI agent through an authenticated MCP server. It provides controlled file access, targeted file patches, and explicitly allowlisted development commands, with optional tunneling through [Wormhole](https://wormhole.bar/).
+
+> **Security:** this is a remote-control development tool. Only expose directories you trust, keep the authentication token private, and allow only commands you actually need.
+
+## Requirements
+
+- Node.js 24 LTS or newer
+- npm
+- Wormhole CLI if remote access is needed
+
+Node.js 24 is the supported LTS baseline. The project currently tracks TypeScript 7 and Biome 2.5.
+
+## Quick start
+
+```bash
+npm install -g agent-dir
+agent-dir .
+```
+
+Or run it without a global install:
+
+```bash
+npx agent-dir .
+```
+
+For remote MCP access with Wormhole:
+
+```bash
+agent-dir . --tunnel wormhole --subdomain my-project-x7k4m2
+```
+
+### Wormhole domains
+
+When using a custom Wormhole subdomain, choose a distinctive name such as `my-project-x7k4m2`. Avoid generic names such as `project`, `test`, `dev`, or `scriptr` to reduce collisions and make the public endpoint less predictable.
+
+The Wormhole URL is only the transport endpoint. `agent-dir` authentication is enforced by the local HTTP server; Wormhole does not provide the Bearer-token authentication described below.
+
+> **Wormhole subdomain limit:** Wormhole limits how many subdomains a user can have registered/active at once. If you see an error such as `Subdomain limit reached (max 3 per user)`, the tunnel is being rejected by Wormhole, not by `agent-dir`. Release an existing Wormhole subdomain or use `--random` to let Wormhole choose a temporary random URL.
+>
+> A subdomain can remain registered while another `wormhole` process is still running, so stop unused Wormhole tunnels before creating another one. If a configured subdomain is unavailable, `agent-dir` will report the Wormhole registration failure instead of silently starting without a tunnel.
+
+## Profiles
+
+Profiles save settings you use repeatedly: project directory, tunnel, Wormhole subdomain, port, npm scripts, and allowed non-npm commands.
+
+```bash
+agent-dir config add my-project \
+  --directory ~/src/my-project \
+  --tunnel wormhole \
+  --subdomain my-project-x7k4m2 \
+  --npm typecheck,lint,format,test,build \
+  --command grep,find,rg,git
+```
+
+Then:
+
+```bash
+agent-dir my-project
+```
+
+Manage profiles with:
+
+```bash
+agent-dir config list
+agent-dir config show my-project
+agent-dir config remove my-project
+```
+
+Profiles are stored per-user at `~/.config/agent-dir/config.json`, not in the project repository. The config directory and file are written with user-only permissions. Command-line options can override saved values for one run.
+
+## MCP transport and compatibility
+
+The HTTP MCP endpoint is `POST /mcp`. The implementation supports two protocol compatibility paths:
+
+### Modern stateless MCP
+
+The native protocol path uses MCP `2026-07-28`. Requests carry the protocol version and client capabilities in `params._meta`. The server does not require an initialize handshake or `Mcp-Session-Id` for this path.
+
+Standard Streamable HTTP requests do **not** need the implementation-specific `MCP-Protocol-Version`, `Mcp-Method`, or `Mcp-Name` headers. If a client sends those optional headers, `agent-dir` validates them against the JSON-RPC request and metadata instead of requiring them.
+
+The modern implementation includes:
+
+- `server/discover`
+- cursor pagination for list-style methods
+- `subscriptions/listen` for tool, prompt, and resource change events
+- resource subscriptions and filesystem change notifications
+- cache metadata
+- structured tool results with `resultType`
+- `outputSchema` for tools
+- the stable `io.modelcontextprotocol/skills` extension
+
+### Legacy MCP compatibility
+
+Clients using the MCP `2025-11-25` initialize-based lifecycle are also supported. A legacy client can:
+
+1. send `initialize` with `params.protocolVersion: "2025-11-25"`, `capabilities`, and `clientInfo`;
+2. negotiate `2025-11-25`;
+3. send subsequent requests with `MCP-Protocol-Version: 2025-11-25` without the modern `params._meta` object.
+
+This compatibility path is intentionally narrow. It does not weaken the modern protocol validation, and conflicting protocol headers are rejected.
+
+The compatibility layer exists for clients such as MCP integrations that still perform the standard `initialize` handshake instead of using the native stateless lifecycle.
+
+### Authentication and protocol troubleshooting
+
+Authentication is independent of protocol negotiation. A valid Bearer token is still required before MCP handling:
+
+```http
+Authorization: Bearer <token>
+```
+
+For clients that cannot send an Authorization header, the server also accepts:
+
+```text
+https://your-subdomain.wormhole.bar/mcp?token=<token>
+```
+
+If a client reports that the server needs sign-in, inspect the server's request log before changing credentials. A `400` from MCP can be a protocol compatibility error rather than an authentication failure. Request logs now include the MCP error message and, for JSON-RPC failures, safe diagnostic context such as the method, request id, parameter names, metadata presence, protocol version, and protocol header. Parameter values are not logged.
+
+The server log distinguishes protocol/header validation from MCP handler errors. This makes transient client interoperability failures diagnosable without exposing request payloads or secrets.
+
+## MCP tools
+
+| Tool | Purpose |
+|---|---|
+| `list_files` | Recursive project discovery |
+| `list_dirs` | Direct directory discovery for one or more directories |
+| `read_range` | Read a bounded line range from one UTF-8 file |
+| `read_files` | Read one or more UTF-8 files in one call |
+| `write_files` | Create or replace one or more files in one call |
+| `patch_files` | Apply targeted text replacements to one or more files |
+| `delete_files` | Delete one or more files in one call |
+| `search_files` / `find_files` | Search file contents or find paths by glob |
+| `search_code` | Search source-like files |
+| `find_symbol` / `find_definition` | Locate likely symbol definitions |
+| `find_references` | Locate symbol references |
+| `find_imports` / `find_exports` | Inspect source dependencies and exports |
+| `git_status` / `git_diff` / `git_log` | Git inspection |
+| `git_stage` / `git_unstage` | Stage or unstage paths |
+| `git_commit` | Commit staged changes |
+| `git_restore` | Restore paths, discarding unstaged changes |
+| `git_push` | Push the current branch to a remote |
+| `project_overview` | Project structure, languages, package managers, and Git state |
+| `package_info` / `file_info` | Project and filesystem metadata |
+| `diagnostics` | Project-independent diagnostics; does not run tests, lint, or typecheck |
+| `run_npm_batch` | Run one or more explicitly allowlisted npm scripts sequentially |
+| `run_command_batch` | Run one or more explicitly allowlisted executables sequentially without a shell |
+
+Batch operations execute sequentially and stop on the first failed command. Tool calls return modern `structuredContent` alongside a serialized text representation, and tools that return structured data advertise an `outputSchema`. List-style protocol methods use opaque cursors when more than 50 entries are available.
+
+Modern `subscriptions/listen` replaces the legacy GET/SSE notification model. Clients can subscribe to tool, prompt, resource-list, and resource-specific change events; filesystem mutations publish resource-change events to active subscribers.
+
+### Command permissions
+
+npm scripts must be explicitly enabled:
+
+```text
+--npm typecheck,lint,format,test,build
+```
+
+Normal executables use a separate allowlist:
+
+```text
+--command grep,find,rg,git
+```
+
+Commands are launched with `shell: false`; the MCP client supplies the executable and arguments separately. An executable that is not in the allowlist is rejected.
+
+Avoid allowing `sh`, `bash`, `zsh`, `cmd`, `node`, or `python` unless you intentionally want to grant a much broader execution capability.
+
+## Agent Skills
+
+The server implements the stable MCP Skills extension (`io.modelcontextprotocol/skills`) over the standard Resources primitive. It discovers project-local `SKILL.md` files under:
+
+```text
+skills/
+.agents/skills/
+.claude/skills/
+.github/skills/
+```
+
+Skills are exposed through `skills/list`, `skills/get`, `resources/list`, and `resources/read`. Skill entries contain parsed frontmatter plus SHA-256 digests and byte sizes for every served file. Skill manifests enforce the 512-resource and 16 MiB limits. Binary supporting files are returned as MCP blobs. `resources/directory/read` lists direct children of a skill resource directory. The extension advertises `directoryRead: true`.
+
+This repository now includes a maintainer-facing compatibility skill at `skills/agent-dir-maintainer/SKILL.md`. It documents the modern and legacy MCP paths, troubleshooting signals, and release/test expectations for agents working on this project.
+
+## Authentication
+
+By default, `agent-dir` generates a random Bearer token when the server starts. The token protects both the MCP endpoint and the HTTP file API.
+
+Clients should authenticate with:
+
+```http
+Authorization: Bearer <token>
+```
+
+The CLI also supports explicitly configured profile tokens and the `--token` option. There is no `--no-auth` option; authentication cannot be disabled through the CLI. Keep the token secret and do not commit it to a repository or publish it alongside a tunnel URL.
+
+For clients that cannot send an `Authorization` header, the HTTP server also accepts the token as a query parameter:
+
+```text
+https://your-subdomain.wormhole.bar/mcp?token=<token>
+```
+
+Query-string tokens may be exposed in URL logs and should be treated as less secure than the Authorization header.
+
+## REST API
+
+The MCP server is the primary interface, but the HTTP server also exposes:
+
+```text
+GET     /__tree
+GET     /path/to/file
+PUT     /path/to/file
+DELETE  /path/to/file
+POST    /mcp
+```
+
+All HTTP endpoints are authenticated by default.
+
+## Contributing
+
+Contributions are welcome. See [CONTRIBUTING.md](.github/CONTRIBUTING.md) for development setup, testing requirements, MCP compatibility guidance, and pull-request expectations.
+
+Use the GitHub issue templates for bug reports, feature requests, and usage questions. Security vulnerabilities should be reported privately through the process in [SECURITY.md](SECURITY.md), not through a public issue.
+
+See [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md) for community participation guidelines.
+
+## Development
+
+The application source and tests are fully TypeScript. JavaScript is generated into `dist/` for execution and publishing. The published package contains only the built CLI/runtime, README, and license; development sources and tests are excluded from the npm tarball.
+
+```bash
+npm run build
+npm run typecheck
+npm test
+npm run format
+npm run lint
+npm run check
+```
+
+`npm run check` runs Biome plus TypeScript. Before publishing:
+
+```bash
+npm run check
+npm test
+npm pack --dry-run
+```
+
+Review the `npm pack --dry-run` file list before publishing to confirm no local configuration, credentials, source-only files, or development artifacts are included.
+
+## Toolchain
+
+- **Node.js:** 24 LTS baseline
+- **TypeScript:** 7.x
+- **Biome:** 2.5.x
+- **Module system:** native Node ESM with `NodeNext`
+- **Formatting/linting:** Biome with strict recommended rules and import organization
+
+The TypeScript configuration uses strict checking, exact optional properties, unchecked indexed access, isolated modules, explicit Node typings, and consistent module resolution.
+
+## Security model
+
+File access is rooted at the shared directory and resolves existing paths through their real filesystem targets, preventing symlinks from escaping the exposed root. HTTP request bodies are limited to 10 MiB. npm scripts and external executables use explicit allowlists, and external commands are not passed through a shell.
+
+Because file writes, deletion, command execution, and Git write operations can modify a project or remote repository, expose only directories and capabilities you intend an AI agent to control. Git write tools are intentionally explicit: staging, unstaging, committing, restoring, and pushing are separate operations. `git_restore` discards unstaged changes, and `git_push` can modify a remote repository. If you do not want Git mutation, do not use the Git write tools and do not allow `git` through the generic command allowlist.
+
+The diagnostics tool is deliberately project-independent. It checks conditions such as invalid JSON, broken symlinks, and unresolved merge-conflict markers instead of assuming a particular test runner, linter, compiler, or package ecosystem. Never share directories containing credentials, SSH keys, private certificates, production secrets, or unrelated personal data.
+
+## Credits
+
+Remote tunneling support is provided through [Wormhole](https://wormhole.bar/), a project of the Wormhole team. `agent-dir` invokes the Wormhole CLI and does not provide the tunneling service itself.
+
+## License
+
+MIT

package/dist/bin/agent-dir.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=agent-dir.d.ts.map

package/dist/bin/agent-dir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-dir.d.ts","sourceRoot":"","sources":["../../bin/agent-dir.ts"],"names":[],"mappings":""}

package/dist/bin/agent-dir.js

@@ -0,0 +1,201 @@
+#!/usr/bin/env node
+import { randomBytes } from "node:crypto";
+import { resolve } from "node:path";
+import { parseArgs } from "node:util";
+import { configPath, loadConfig, mergeProfile, saveConfig } from "../src/config.js";
+import { printBanner, printHelp, printRequestHeader } from "../src/logging.js";
+import { startServer } from "../src/server.js";
+import { startTunnel } from "../src/tunnel.js";
+function fail(message) {
+    console.error(`Error: ${message}`);
+    process.exit(1);
+}
+function parseList(value) {
+    if (value === undefined)
+        return undefined;
+    return value
+        .split(",")
+        .map((item) => item.trim())
+        .filter(Boolean);
+}
+function parsePort(value, fallback) {
+    const port = Number(value ?? fallback);
+    if (!Number.isInteger(port) || port < 1 || port > 65_535) {
+        fail("port must be an integer between 1 and 65535.");
+    }
+    return port;
+}
+const { values, positionals } = parseArgs({
+    options: {
+        help: { type: "boolean", short: "h" },
+        directory: { type: "string", short: "d" },
+        port: { type: "string", short: "p" },
+        tunnel: { type: "string", short: "t" },
+        subdomain: { type: "string", short: "s" },
+        npm: { type: "string" },
+        command: { type: "string" },
+        token: { type: "string" },
+        "no-tunnel": { type: "boolean" },
+        random: { type: "boolean" },
+    },
+    allowPositionals: true,
+    strict: true,
+});
+if (values.help) {
+    printHelp();
+    process.exit(0);
+}
+const config = await loadConfig();
+const command = positionals[0];
+if (command === "config") {
+    const action = positionals[1];
+    if (action === "list") {
+        const names = Object.keys(config.profiles);
+        console.log(names.length ? names.join("\n") : "No profiles configured.");
+        process.exit(0);
+    }
+    if (action === "show") {
+        const name = positionals[2];
+        if (!name || !config.profiles[name])
+            fail(`Profile not found: ${name}`);
+        const profile = structuredClone(config.profiles[name]);
+        if (profile.token)
+            profile.token = "<configured>";
+        console.log(JSON.stringify(profile, null, 2));
+        process.exit(0);
+    }
+    if (action === "remove") {
+        const name = positionals[2];
+        if (!name || !config.profiles[name])
+            fail(`Profile not found: ${name}`);
+        delete config.profiles[name];
+        await saveConfig(config);
+        console.log(`✓ Removed profile '${name}'.`);
+        process.exit(0);
+    }
+    if (action === "token") {
+        const name = positionals[2];
+        if (!name || !config.profiles[name])
+            fail(`Profile not found: ${name}`);
+        config.profiles[name].token = randomBytes(24).toString("hex");
+        await saveConfig(config);
+        console.log(`✓ Rotated token for '${name}'.`);
+        console.log(`  Config: ${configPath()}`);
+        process.exit(0);
+    }
+    if (action === "add") {
+        const name = positionals[2];
+        if (!name)
+            fail("Usage: agent-dir config add <name> [options]");
+        if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(name))
+            fail("Profile names may contain letters, numbers, dots, underscores, and hyphens.");
+        const tunnel = values.tunnel ?? "none";
+        if (tunnel !== "none" && tunnel !== "wormhole")
+            fail(`Unsupported tunnel provider: ${tunnel}`);
+        const profile = {
+            directory: resolve(values.directory ?? "."),
+            port: parsePort(values.port, 3002),
+            tunnel,
+            token: values.token ?? randomBytes(24).toString("hex"),
+        };
+        if (values.subdomain)
+            profile.subdomain = values.subdomain;
+        const npm = parseList(values.npm);
+        if (npm !== undefined)
+            profile.npm = { allowedScripts: npm };
+        const commands = parseList(values.command);
+        if (commands !== undefined)
+            profile.commands = commands;
+        if (profile.tunnel === "wormhole" && !profile.subdomain && !values.random) {
+            fail("Wormhole profiles require --subdomain <name>, or use --random.");
+        }
+        config.profiles[name] = profile;
+        await saveConfig(config);
+        console.log(`✓ Saved profile '${name}'.`);
+        console.log(`  Config: ${configPath()}`);
+        process.exit(0);
+    }
+    fail("Usage: agent-dir config {add|list|show|remove|token}");
+}
+const profile = command ? config.profiles[command] : undefined;
+if (command && command !== "config" && !profile && command.startsWith("-")) {
+    fail(`Unknown command: ${command}`);
+}
+const positionalDirectory = profile ? positionals[1] : positionals[0];
+const directory = resolve(values.directory ?? profile?.directory ?? positionalDirectory ?? ".");
+const port = parsePort(values.port, profile?.port ?? 3002);
+const tunnelValue = values["no-tunnel"] ? "none" : (values.tunnel ?? profile?.tunnel ?? "none");
+if (tunnelValue !== "none" && tunnelValue !== "wormhole") {
+    fail(`Unsupported tunnel provider: ${tunnelValue}`);
+}
+const tunnel = tunnelValue;
+const randomTunnel = values.random === true;
+const subdomain = randomTunnel ? undefined : (values.subdomain ?? profile?.subdomain);
+if (tunnel === "wormhole" && !subdomain && !randomTunnel) {
+    fail("Wormhole requires --subdomain <name>, or use --random.");
+}
+if (randomTunnel && tunnel === "none") {
+    fail("--random requires --tunnel wormhole.");
+}
+const token = values.token ?? profile?.token ?? randomBytes(24).toString("hex");
+const npm = parseList(values.npm);
+const commands = parseList(values.command);
+const overrides = {};
+if (npm !== undefined)
+    overrides.npm = { allowedScripts: npm };
+if (commands !== undefined)
+    overrides.commands = commands;
+const commandConfig = mergeProfile(profile ?? { directory, port, tunnel }, overrides);
+const bannerOptions = {
+    root: directory,
+    port,
+    tunnel,
+    token,
+};
+const npmScripts = commandConfig.npm?.allowedScripts;
+const allowedCommands = commandConfig.commands;
+if (profile && command)
+    bannerOptions.profileName = command;
+if (subdomain)
+    bannerOptions.subdomain = subdomain;
+if (npmScripts)
+    bannerOptions.npmScripts = npmScripts;
+if (allowedCommands)
+    bannerOptions.commands = allowedCommands;
+printBanner(bannerOptions);
+const server = await startServer({ root: directory, port, token, commandConfig });
+let tunnelResult;
+console.log("  ✓ SERVER ONLINE");
+console.log(`    Local target : http://127.0.0.1:${port}`);
+console.log("    Auth         : Bearer token");
+console.log(`    Token        : ${token}`);
+if (tunnel !== "none") {
+    try {
+        tunnelResult = await startTunnel({
+            provider: "wormhole",
+            port,
+            random: randomTunnel,
+            ...(subdomain && !randomTunnel ? { subdomain } : {}),
+        });
+    }
+    catch (error) {
+        console.error(`  ✖ TUNNEL ERROR  ${error instanceof Error ? error.message : String(error)}`);
+        await server.close();
+        process.exit(1);
+    }
+}
+printRequestHeader();
+let shuttingDown = false;
+const shutdown = async () => {
+    if (shuttingDown)
+        return;
+    shuttingDown = true;
+    console.log("\n  Stopping agent-dir...");
+    if (tunnelResult?.child && !tunnelResult.child.killed)
+        tunnelResult.child.kill("SIGTERM");
+    await server.close();
+    process.exit(0);
+};
+process.on("SIGINT", shutdown);
+process.on("SIGTERM", shutdown);
+//# sourceMappingURL=agent-dir.js.map

package/dist/bin/agent-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-dir.js","sourceRoot":"","sources":["../../bin/agent-dir.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,CAAC,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB,EAAE,QAAgB;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;QACzD,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,EAAE;QACP,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;QACrC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;QACzC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;QACpC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;QACtC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;QACzC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACvB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;QAChC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;KAC5B;IACD,gBAAgB,EAAE,IAAI;IACtB,MAAM,EAAE,IAAI;CACb,CAAC,CAAC;AAEH,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IAChB,SAAS,EAAE,CAAC;IACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;AAClC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;AAE/B,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAE9B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,GAAG,cAAc,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,IAAI,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,IAAI,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,aAAa,UAAU,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAChE,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5C,IAAI,CAAC,6EAA6E,CAAC,CAAC;QAEtF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC;QACvC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,UAAU;YAAE,IAAI,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC;QAE/F,MAAM,OAAO,GAAY;YACvB,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC;YAC3C,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;YAClC,MAAM;YACN,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;SACvD,CAAC;QAEF,IAAI,MAAM,CAAC,SAAS;YAAE,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAC3D,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAExD,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1E,IAAI,CAAC,gEAAgE,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;QAChC,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,aAAa,UAAU,EAAE,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,sDAAsD,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,IAAI,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3E,IAAI,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,mBAAmB,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACtE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,SAAS,IAAI,mBAAmB,IAAI,GAAG,CAAC,CAAC;AAChG,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;AAC3D,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,EAAE,MAAM,IAAI,MAAM,CAAC,CAAC;AAChG,IAAI,WAAW,KAAK,MAAM,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;IACzD,IAAI,CAAC,gCAAgC,WAAW,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,MAAM,GAAsB,WAAW,CAAC;AAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC;AAC5C,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,SAAS,CAAC,CAAC;AACtF,IAAI,MAAM,KAAK,UAAU,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC;IACzD,IAAI,CAAC,wDAAwD,CAAC,CAAC;AACjE,CAAC;AACD,IAAI,YAAY,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;IACtC,IAAI,CAAC,sCAAsC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,OAAO,EAAE,KAAK,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChF,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAClC,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3C,MAAM,SAAS,GAAkB,EAAE,CAAC;AACpC,IAAI,GAAG,KAAK,SAAS;IAAE,SAAS,CAAC,GAAG,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;AAC/D,IAAI,QAAQ,KAAK,SAAS;IAAE,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC;AAC1D,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC;AAEtF,MAAM,aAAa,GAAsC;IACvD,IAAI,EAAE,SAAS;IACf,IAAI;IACJ,MAAM;IACN,KAAK;CACN,CAAC;AAEF,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC;AACrD,MAAM,eAAe,GAAG,aAAa,CAAC,QAAQ,CAAC;AAE/C,IAAI,OAAO,IAAI,OAAO;IAAE,aAAa,CAAC,WAAW,GAAG,OAAO,CAAC;AAC5D,IAAI,SAAS;IAAE,aAAa,CAAC,SAAS,GAAG,SAAS,CAAC;AACnD,IAAI,UAAU;IAAE,aAAa,CAAC,UAAU,GAAG,UAAU,CAAC;AACtD,IAAI,eAAe;IAAE,aAAa,CAAC,QAAQ,GAAG,eAAe,CAAC;AAE9D,WAAW,CAAC,aAAa,CAAC,CAAC;AAE3B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;AAClF,IAAI,YAAsC,CAAC;AAC3C,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AACjC,OAAO,CAAC,GAAG,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;AAC3D,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;AAC/C,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;AAE3C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,WAAW,CAAC;YAC/B,QAAQ,EAAE,UAAU;YACpB,IAAI;YACJ,MAAM,EAAE,YAAY;YACpB,GAAG,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7F,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,kBAAkB,EAAE,CAAC;AAErB,IAAI,YAAY,GAAG,KAAK,CAAC;AAEzB,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;IACzC,IAAI,YAAY;QAAE,OAAO;IACzB,YAAY,GAAG,IAAI,CAAC;IACpB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACzC,IAAI,YAAY,EAAE,KAAK,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM;QAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1F,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC"}

package/dist/src/auth.d.ts

@@ -0,0 +1,3 @@
+export declare function authenticate(request: Request, token: string): boolean;
+export declare function unauthorized(): Response;
+//# sourceMappingURL=auth.d.ts.map

package/dist/src/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/auth.ts"],"names":[],"mappings":"AAAA,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAMrE;AAED,wBAAgB,YAAY,IAAI,QAAQ,CASvC"}

package/dist/src/auth.js

@@ -0,0 +1,18 @@
+export function authenticate(request, token) {
+    const authorization = request.headers.get("authorization");
+    if (authorization === `Bearer ${token}`)
+        return true;
+    const url = new URL(request.url);
+    return url.searchParams.get("token") === token;
+}
+export function unauthorized() {
+    return new Response(JSON.stringify({ error: "Unauthorized" }), {
+        status: 401,
+        headers: {
+            "content-type": "application/json; charset=utf-8",
+            "www-authenticate": "Bearer",
+            "cache-control": "no-store",
+        },
+    });
+}
+//# sourceMappingURL=auth.js.map

package/dist/src/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/auth.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,YAAY,CAAC,OAAgB,EAAE,KAAa;IAC1D,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3D,IAAI,aAAa,KAAK,UAAU,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAErD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE;QAC7D,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,cAAc,EAAE,iCAAiC;YACjD,kBAAkB,EAAE,QAAQ;YAC5B,eAAe,EAAE,UAAU;SAC5B;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/src/config.d.ts

@@ -0,0 +1,6 @@
+import type { AgentConfig, CommandConfig, Profile } from "./types.js";
+export declare function loadConfig(): Promise<AgentConfig>;
+export declare function saveConfig(config: AgentConfig): Promise<void>;
+export declare function configPath(): string;
+export declare function mergeProfile(profile: Profile, overrides?: CommandConfig): CommandConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/src/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAUtE,wBAAsB,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CASvD;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAOnE;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,GAAE,aAAkB,GAAG,aAAa,CAM3F"}

package/dist/src/config.js

@@ -0,0 +1,80 @@
+import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+const CONFIG_DIR = join(homedir(), ".config", "agent-dir");
+const CONFIG_FILE = join(CONFIG_DIR, "config.json");
+const DEFAULT_CONFIG = { version: 1, profiles: {} };
+export async function loadConfig() {
+    try {
+        const parsed = JSON.parse(await readFile(CONFIG_FILE, "utf8"));
+        if (!isAgentConfig(parsed))
+            throw new Error("Invalid configuration format.");
+        return parsed;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return structuredClone(DEFAULT_CONFIG);
+        throw new Error(`Unable to read config ${CONFIG_FILE}: ${error.message}`);
+    }
+}
+export async function saveConfig(config) {
+    await mkdir(dirname(CONFIG_FILE), { recursive: true, mode: 0o700 });
+    await writeFile(CONFIG_FILE, `${JSON.stringify(config, null, 2)}\n`, {
+        encoding: "utf8",
+        mode: 0o600,
+    });
+    await chmod(CONFIG_FILE, 0o600);
+}
+export function configPath() {
+    return CONFIG_FILE;
+}
+export function mergeProfile(profile, overrides = {}) {
+    return {
+        ...profile,
+        ...overrides,
+        npm: { ...(profile.npm ?? { allowedScripts: [] }), ...(overrides.npm ?? {}) },
+    };
+}
+function isAgentConfig(value) {
+    if (!value || typeof value !== "object")
+        return false;
+    const config = value;
+    if (config.version !== 1 || !config.profiles || typeof config.profiles !== "object")
+        return false;
+    for (const [name, profile] of Object.entries(config.profiles)) {
+        if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(name) || !isProfile(profile))
+            return false;
+    }
+    return true;
+}
+function isProfile(value) {
+    if (!value || typeof value !== "object")
+        return false;
+    const profile = value;
+    const port = profile.port;
+    if (typeof profile.directory !== "string" || typeof port !== "number" || !Number.isInteger(port))
+        return false;
+    if (port < 1 || port > 65_535)
+        return false;
+    if (profile.tunnel !== "none" && profile.tunnel !== "wormhole")
+        return false;
+    if (profile.subdomain !== undefined && typeof profile.subdomain !== "string")
+        return false;
+    if (profile.token !== undefined && typeof profile.token !== "string")
+        return false;
+    if (profile.npm !== undefined) {
+        if (!profile.npm || typeof profile.npm !== "object")
+            return false;
+        const npm = profile.npm;
+        if (!Array.isArray(npm.allowedScripts) ||
+            npm.allowedScripts.some((item) => typeof item !== "string"))
+            return false;
+    }
+    if (profile.commands !== undefined) {
+        if (!Array.isArray(profile.commands) ||
+            profile.commands.some((item) => typeof item !== "string"))
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=config.js.map

package/dist/src/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG1C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AACpD,MAAM,cAAc,GAAgB,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAMjE,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAAyB,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,eAAe,CAAC,cAAc,CAAC,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,yBAAyB,WAAW,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAmB;IAClD,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACnE,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgB,EAAE,SAAS,GAAkB,EAAE;IAC1E,OAAO;QACL,GAAG,OAAO;QACV,GAAG,SAAS;QACZ,GAAG,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;KAC9E,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAElG,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;IACtF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,OAAO,GAAG,KAAgC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;QAC9F,OAAO,KAAK,CAAC;IACf,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3F,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACnF,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAClE,MAAM,GAAG,GAAG,OAAO,CAAC,GAA8B,CAAC;QACnD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YAClC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;YAE3D,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;YAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;YAEzD,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}