agenthub-multiagent-mcp 1.52.0 → 1.53.0

package/dist/captureHookInstall.d.ts

@@ -0,0 +1,127 @@
+/**
+ * Consent-gated install of the session-capture hook for **human interactive**
+ * Claude Code sessions (add-multiplayer-sessions §3.2/§3.3).
+ *
+ * The daemon path (§1.5) never comes through here: it passes an ephemeral
+ * `--settings` file to the process it spawns, so no user-owned file is ever
+ * touched. An interactive session has no such seam — the person launches
+ * `claude` themselves — so the hook has to be registered in their own
+ * `~/.claude/settings.json`.
+ *
+ * That makes consent the whole design, not a feature of it:
+ *
+ *  - Nothing is written until the **server** confirms that *this user*
+ *    consented. The MCP does not decide; it asks and obeys.
+ *  - What gets written is the hook registration plus a grant file. The hook is
+ *    inert without the grant, and the grant is only ever produced by a
+ *    confirmed consent, so a stale settings entry cannot capture anything.
+ *  - When consent is absent or withdrawn, this module **removes** both. Running
+ *    it is how a revocation reaches the machine, not merely how a grant does.
+ *  - Every failure — network, parse, permission — leaves capture off. There is
+ *    no path where "we could not tell" results in recording.
+ *
+ * `mergeCaptureHook` (sessionCapture.ts) does the settings merge, so the
+ * non-destructive behaviour proven there is the behaviour here: other
+ * PostToolUse entries, other hook events, and unrelated settings keys survive.
+ */
+/** Server's answer to "may this user's interactive sessions be captured?" */
+export interface CaptureConsentStatus {
+    consented: boolean;
+    userId: string;
+    streamingEnabled: boolean;
+}
+/** Default gap between in-session recording notices, in seconds. */
+export declare const DEFAULT_NOTICE_INTERVAL_SEC = 900;
+/** Timeout on the consent lookup. Startup must not hang on it. */
+export declare const CONSENT_TIMEOUT_MS = 4000;
+/**
+ * Remove the capture hook from a settings object, preserving everything else.
+ *
+ * The inverse of `mergeCaptureHook`, and the reason revocation is effective on
+ * the *next* MCP start rather than only server-side. A PostToolUse entry is
+ * dropped only if every command in it is ours; an entry a user has added other
+ * commands to keeps those, so this can never eat a hook we did not install.
+ */
+export declare function removeCaptureHook(base: Record<string, unknown>): Record<string, unknown>;
+/** The non-secret half of a grant, plus the credential the hook posts with. */
+export interface CaptureGrant {
+    api_url: string;
+    user_id: string;
+    agent_id: string;
+    connect_token: string;
+    consented_at: string;
+    notice_interval_sec: number;
+}
+/**
+ * Strip the client's `/api` suffix. `AgentHubClient` appends it for its own
+ * calls, but the hook builds `<root>/api/...` itself, and a doubled `/api/api`
+ * 404s with an HTML body — a failure that shows up as "capture silently never
+ * worked" rather than as an error.
+ */
+export declare function captureApiRoot(clientBaseUrl: string): string;
+export interface CaptureInstallDeps {
+    exists?: (p: string) => boolean;
+    readFile?: (p: string) => string;
+    writeFile?: (p: string, data: string) => void;
+    mkdir?: (p: string) => void;
+    removeFile?: (p: string) => void;
+    removeDir?: (p: string) => void;
+    chmod?: (p: string, mode: number) => void;
+    now?: () => Date;
+}
+export interface CaptureInstallOptions {
+    /** `~/.claude/settings.json` in production. */
+    settingsPath: string;
+    /** `~/.claude/agenthub-capture.json` in production. */
+    grantPath: string;
+    /** Absolute path to session-capture.sh, or null when it cannot be found. */
+    hookScript: string | null;
+    apiRoot: string;
+    userId: string;
+    agentId: string;
+    connectToken: string;
+    noticeIntervalSec?: number;
+}
+/**
+ * Bring the local machine into line with a consent decision, and report what
+ * changed.
+ *
+ * Consented  → write the grant, register the hook.
+ * Not        → delete the grant and its per-session state, deregister the hook.
+ *
+ * Both directions are idempotent and safe to run on every MCP start.
+ */
+export declare function applyCaptureConsent(consented: boolean, opts: CaptureInstallOptions, deps?: CaptureInstallDeps): string;
+/** Where the hook keeps its per-Claude-session bootstrap cache. */
+export declare function captureStateDir(grantPath: string): string;
+/** Minimal structural view of the fetch surface this module uses. */
+export interface ConsentResponse {
+    ok: boolean;
+    status: number;
+    json(): Promise<unknown>;
+}
+export type ConsentFetch = (url: string, init: RequestInit) => Promise<ConsentResponse>;
+/**
+ * Ask the server whether the calling identity's owner has consented.
+ *
+ * Returns `null` on any failure — unreachable server, non-2xx, unparseable
+ * body. `null` is not "unknown, carry on"; every caller treats it as "do not
+ * capture", so a server we cannot reach can never be the reason someone gets
+ * recorded.
+ */
+export declare function fetchCaptureConsent(clientBaseUrl: string, connectToken: string, fetchImpl?: ConsentFetch, timeoutMs?: number): Promise<CaptureConsentStatus | null>;
+export interface InstallCaptureHookOptions {
+    clientBaseUrl: string;
+    connectToken: string;
+    agentId: string;
+    homeDir: string;
+    moduleDir: string;
+    fetchImpl?: ConsentFetch;
+    deps?: CaptureInstallDeps;
+}
+/**
+ * Startup entry point: ask, then apply. Never throws — a capture concern must
+ * not be able to stop the MCP from starting.
+ */
+export declare function installCaptureHook(opts: InstallCaptureHookOptions): Promise<string>;
+//# sourceMappingURL=captureHookInstall.d.ts.map

package/dist/captureHookInstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"captureHookInstall.d.ts","sourceRoot":"","sources":["../src/captureHookInstall.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAWH,6EAA6E;AAC7E,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAYD,oEAAoE;AACpE,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C,kEAAkE;AAClE,eAAO,MAAM,kBAAkB,OAAO,CAAC;AAEvC;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBxF;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IAChC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IACjC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9C,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,+CAA+C;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,OAAO,EAClB,IAAI,EAAE,qBAAqB,EAC3B,IAAI,GAAE,kBAAuB,GAC5B,MAAM,CAqGR;AAED,mEAAmE;AACnE,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,qEAAqE;AACrE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1B;AACD,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;AAExF;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,YAAY,EACxB,SAAS,SAAqB,GAC7B,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CA2BtC;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,IAAI,CAAC,EAAE,kBAAkB,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkCzF"}

package/dist/captureHookInstall.js

@@ -0,0 +1,256 @@
+/**
+ * Consent-gated install of the session-capture hook for **human interactive**
+ * Claude Code sessions (add-multiplayer-sessions §3.2/§3.3).
+ *
+ * The daemon path (§1.5) never comes through here: it passes an ephemeral
+ * `--settings` file to the process it spawns, so no user-owned file is ever
+ * touched. An interactive session has no such seam — the person launches
+ * `claude` themselves — so the hook has to be registered in their own
+ * `~/.claude/settings.json`.
+ *
+ * That makes consent the whole design, not a feature of it:
+ *
+ *  - Nothing is written until the **server** confirms that *this user*
+ *    consented. The MCP does not decide; it asks and obeys.
+ *  - What gets written is the hook registration plus a grant file. The hook is
+ *    inert without the grant, and the grant is only ever produced by a
+ *    confirmed consent, so a stale settings entry cannot capture anything.
+ *  - When consent is absent or withdrawn, this module **removes** both. Running
+ *    it is how a revocation reaches the machine, not merely how a grant does.
+ *  - Every failure — network, parse, permission — leaves capture off. There is
+ *    no path where "we could not tell" results in recording.
+ *
+ * `mergeCaptureHook` (sessionCapture.ts) does the settings merge, so the
+ * non-destructive behaviour proven there is the behaviour here: other
+ * PostToolUse entries, other hook events, and unrelated settings keys survive.
+ */
+import * as fs from "fs";
+import * as path from "path";
+import { CAPTURE_HOOK_MARKER, captureHookCommand, mergeCaptureHook, resolveCaptureHookScript, } from "./sessionCapture.js";
+/** Default gap between in-session recording notices, in seconds. */
+export const DEFAULT_NOTICE_INTERVAL_SEC = 900;
+/** Timeout on the consent lookup. Startup must not hang on it. */
+export const CONSENT_TIMEOUT_MS = 4000;
+/**
+ * Remove the capture hook from a settings object, preserving everything else.
+ *
+ * The inverse of `mergeCaptureHook`, and the reason revocation is effective on
+ * the *next* MCP start rather than only server-side. A PostToolUse entry is
+ * dropped only if every command in it is ours; an entry a user has added other
+ * commands to keeps those, so this can never eat a hook we did not install.
+ */
+export function removeCaptureHook(base) {
+    const merged = { ...base };
+    const hooksIn = (base.hooks ?? {});
+    if (!Array.isArray(hooksIn.PostToolUse))
+        return merged;
+    const hooks = { ...hooksIn };
+    const kept = [];
+    for (const entry of hooksIn.PostToolUse) {
+        const commands = entry?.hooks ?? [];
+        const survivors = commands.filter((h) => !(typeof h?.command === "string" && h.command.includes(CAPTURE_HOOK_MARKER)));
+        if (survivors.length > 0)
+            kept.push({ ...entry, hooks: survivors });
+    }
+    hooks.PostToolUse = kept;
+    merged.hooks = hooks;
+    return merged;
+}
+/**
+ * Strip the client's `/api` suffix. `AgentHubClient` appends it for its own
+ * calls, but the hook builds `<root>/api/...` itself, and a doubled `/api/api`
+ * 404s with an HTML body — a failure that shows up as "capture silently never
+ * worked" rather than as an error.
+ */
+export function captureApiRoot(clientBaseUrl) {
+    return clientBaseUrl.replace(/\/+$/, "").replace(/\/api$/, "");
+}
+/**
+ * Bring the local machine into line with a consent decision, and report what
+ * changed.
+ *
+ * Consented  → write the grant, register the hook.
+ * Not        → delete the grant and its per-session state, deregister the hook.
+ *
+ * Both directions are idempotent and safe to run on every MCP start.
+ */
+export function applyCaptureConsent(consented, opts, deps = {}) {
+    const exists = deps.exists ?? fs.existsSync;
+    const readFile = deps.readFile ?? ((p) => fs.readFileSync(p, "utf8"));
+    const writeFile = deps.writeFile ?? ((p, d) => fs.writeFileSync(p, d));
+    const mkdir = deps.mkdir ?? ((p) => fs.mkdirSync(p, { recursive: true }));
+    const removeFile = deps.removeFile ?? fs.unlinkSync;
+    const removeDir = deps.removeDir ?? ((p) => fs.rmSync(p, { recursive: true, force: true }));
+    const chmod = deps.chmod ?? fs.chmodSync;
+    const now = deps.now ?? (() => new Date());
+    // Read the user's settings first. A settings file we cannot parse is left
+    // strictly alone — rewriting it would destroy configuration we do not
+    // understand, and the cost of not installing is only that capture stays off.
+    let settings = {};
+    if (exists(opts.settingsPath)) {
+        try {
+            settings = JSON.parse(readFile(opts.settingsPath));
+        }
+        catch {
+            return "skipped: ~/.claude/settings.json is not valid JSON";
+        }
+    }
+    if (!consented) {
+        // Revocation reaching the machine. Remove the credential first: if the
+        // process dies between the two writes, the leftover is a hook with no
+        // grant, which captures nothing.
+        let removed = false;
+        for (const target of [opts.grantPath]) {
+            if (exists(target)) {
+                try {
+                    removeFile(target);
+                    removed = true;
+                }
+                catch {
+                    /* best effort — the server refuses the events regardless */
+                }
+            }
+        }
+        try {
+            removeDir(captureStateDir(opts.grantPath));
+        }
+        catch {
+            /* never existed */
+        }
+        const stripped = removeCaptureHook(settings);
+        if (JSON.stringify(stripped) !== JSON.stringify(settings)) {
+            try {
+                mkdir(path.dirname(opts.settingsPath));
+                writeFile(opts.settingsPath, JSON.stringify(stripped, null, 2));
+                removed = true;
+            }
+            catch (e) {
+                return `not consented; could not deregister hook: ${errText(e)}`;
+            }
+        }
+        return removed
+            ? "not consented — capture hook and grant removed"
+            : "not consented — capture is off (nothing to remove)";
+    }
+    if (!opts.hookScript) {
+        return "consented, but session-capture.sh was not found — capture not installed";
+    }
+    if (!opts.connectToken) {
+        // Without a credential the hook cannot bootstrap, and a grant file with an
+        // empty token would look installed while doing nothing.
+        return "consented, but no connect token is available yet — capture not installed";
+    }
+    const grant = {
+        api_url: opts.apiRoot,
+        user_id: opts.userId,
+        agent_id: opts.agentId,
+        connect_token: opts.connectToken,
+        consented_at: now().toISOString(),
+        notice_interval_sec: opts.noticeIntervalSec ?? DEFAULT_NOTICE_INTERVAL_SEC,
+    };
+    try {
+        mkdir(path.dirname(opts.grantPath));
+        writeFile(opts.grantPath, JSON.stringify(grant, null, 2));
+        // The grant carries a credential, so it is owner-read/write only. A no-op
+        // on Windows; still correct to ask for on every platform that honours it.
+        try {
+            chmod(opts.grantPath, 0o600);
+        }
+        catch {
+            /* filesystem does not support it */
+        }
+    }
+    catch (e) {
+        return `consented, but the capture grant could not be written: ${errText(e)}`;
+    }
+    const command = captureHookCommand(opts.hookScript);
+    const alreadyRegistered = JSON.stringify(mergeCaptureHook(settings, command)) === JSON.stringify(settings);
+    if (alreadyRegistered)
+        return "consented — capture hook already installed, grant refreshed";
+    try {
+        mkdir(path.dirname(opts.settingsPath));
+        writeFile(opts.settingsPath, JSON.stringify(mergeCaptureHook(settings, command), null, 2));
+    }
+    catch (e) {
+        return `consented, but the hook could not be registered: ${errText(e)}`;
+    }
+    return "consented — capture hook installed";
+}
+/** Where the hook keeps its per-Claude-session bootstrap cache. */
+export function captureStateDir(grantPath) {
+    return path.join(path.dirname(grantPath), "agenthub-capture-state");
+}
+/**
+ * Ask the server whether the calling identity's owner has consented.
+ *
+ * Returns `null` on any failure — unreachable server, non-2xx, unparseable
+ * body. `null` is not "unknown, carry on"; every caller treats it as "do not
+ * capture", so a server we cannot reach can never be the reason someone gets
+ * recorded.
+ */
+export async function fetchCaptureConsent(clientBaseUrl, connectToken, fetchImpl, timeoutMs = CONSENT_TIMEOUT_MS) {
+    const doFetch = fetchImpl ?? globalThis.fetch;
+    if (!doFetch || !connectToken)
+        return null;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const res = await doFetch(`${clientBaseUrl.replace(/\/+$/, "")}/session-capture/consent`, {
+            method: "GET",
+            headers: { "X-Connect-Token": connectToken },
+            signal: controller.signal,
+        });
+        if (!res.ok)
+            return null;
+        const body = (await res.json());
+        return {
+            consented: body?.consent?.consented === true,
+            userId: typeof body?.consent?.user_id === "string" ? body.consent.user_id : "",
+            streamingEnabled: body?.streaming_enabled === true,
+        };
+    }
+    catch {
+        return null;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Startup entry point: ask, then apply. Never throws — a capture concern must
+ * not be able to stop the MCP from starting.
+ */
+export async function installCaptureHook(opts) {
+    try {
+        const settingsPath = path.join(opts.homeDir, ".claude", "settings.json");
+        const grantPath = path.join(opts.homeDir, ".claude", "agenthub-capture.json");
+        const status = await fetchCaptureConsent(opts.clientBaseUrl, opts.connectToken, opts.fetchImpl);
+        // Unreachable or unauthenticated ⇒ treat exactly like "not consented", so
+        // an offline start also tears down a grant left by a previous one.
+        const consented = status?.consented === true;
+        const applied = applyCaptureConsent(consented, {
+            settingsPath,
+            grantPath,
+            hookScript: resolveCaptureHookScript(opts.moduleDir, opts.deps?.exists ?? fs.existsSync),
+            apiRoot: captureApiRoot(opts.clientBaseUrl),
+            userId: status?.userId ?? "",
+            agentId: opts.agentId,
+            connectToken: opts.connectToken,
+        }, opts.deps);
+        if (consented && status && !status.streamingEnabled) {
+            // Worth saying out loud: the person agreed, and nothing will be recorded
+            // anyway. Silence here reads as "it is working".
+            return `${applied} (server-side session streaming is disabled, so nothing will be captured yet)`;
+        }
+        if (status === null)
+            return `${applied} (consent could not be confirmed with the server)`;
+        return applied;
+    }
+    catch (e) {
+        return `skipped: ${errText(e)}`;
+    }
+}
+function errText(e) {
+    return e instanceof Error ? e.message : String(e);
+}
+//# sourceMappingURL=captureHookInstall.js.map

package/dist/captureHookInstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"captureHookInstall.js","sourceRoot":"","sources":["../src/captureHookInstall.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAmB7B,oEAAoE;AACpE,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAE/C,kEAAkE;AAClE,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEvC;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA6B;IAC7D,MAAM,MAAM,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAgC,CAAC;IAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,MAAM,CAAC;IAEvD,MAAM,KAAK,GAAgC,EAAE,GAAG,OAAO,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAgB,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CACpF,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,OAAO,MAAM,CAAC;AAChB,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,aAAqB;IAClD,OAAO,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC;AA2BD;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAkB,EAClB,IAA2B,EAC3B,OAA2B,EAAE;IAE7B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,UAAU,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAClF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,UAAU,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACpG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE3C,0EAA0E;IAC1E,sEAAsE;IACtE,6EAA6E;IAC7E,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAA4B,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,oDAAoD,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,uEAAuE;QACvE,sEAAsE;QACtE,iCAAiC;QACjC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,UAAU,CAAC,MAAM,CAAC,CAAC;oBACnB,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;gBACvC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChE,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,6CAA6C,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,CAAC;QACH,CAAC;QACD,OAAO,OAAO;YACZ,CAAC,CAAC,gDAAgD;YAClD,CAAC,CAAC,oDAAoD,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,yEAAyE,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,2EAA2E;QAC3E,wDAAwD;QACxD,OAAO,0EAA0E,CAAC;IACpF,CAAC;IAED,MAAM,KAAK,GAAiB;QAC1B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,MAAM;QACpB,QAAQ,EAAE,IAAI,CAAC,OAAO;QACtB,aAAa,EAAE,IAAI,CAAC,YAAY;QAChC,YAAY,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;QACjC,mBAAmB,EAAE,IAAI,CAAC,iBAAiB,IAAI,2BAA2B;KAC3E,CAAC;IAEF,IAAI,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACpC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,0DAA0D,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC3G,IAAI,iBAAiB;QAAE,OAAO,6DAA6D,CAAC;IAE5F,IAAI,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACvC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,oDAAoD,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,oCAAoC,CAAC;AAC9C,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACtE,CAAC;AAUD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,aAAqB,EACrB,YAAoB,EACpB,SAAwB,EACxB,SAAS,GAAG,kBAAkB;IAE9B,MAAM,OAAO,GAAG,SAAS,IAAK,UAAU,CAAC,KAAiC,CAAC;IAC3E,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,0BAA0B,EAAE;YACxF,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,iBAAiB,EAAE,YAAY,EAAE;YAC5C,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAG7B,CAAC;QACF,OAAO;YACL,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,KAAK,IAAI;YAC5C,MAAM,EAAE,OAAO,IAAI,EAAE,OAAO,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YAC9E,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,KAAK,IAAI;SACnD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAYD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAA+B;IACtE,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,uBAAuB,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEhG,0EAA0E;QAC1E,mEAAmE;QACnE,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,KAAK,IAAI,CAAC;QAE7C,MAAM,OAAO,GAAG,mBAAmB,CACjC,SAAS,EACT;YACE,YAAY;YACZ,SAAS;YACT,UAAU,EAAE,wBAAwB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,UAAU,CAAC;YACxF,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC;YAC3C,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE;YAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,EACD,IAAI,CAAC,IAAI,CACV,CAAC;QAEF,IAAI,SAAS,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,yEAAyE;YACzE,iDAAiD;YACjD,OAAO,GAAG,OAAO,+EAA+E,CAAC;QACnG,CAAC;QACD,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,GAAG,OAAO,mDAAmD,CAAC;QAC1F,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,YAAY,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAClC,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/captureHookInstall.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * add-multiplayer-sessions §3.2/§3.3/§3.4 — consent-gated install of the
+ * interactive capture hook.
+ *
+ * The load-bearing assertions here are the negative ones: with no consent, or
+ * with a consent lookup that failed, nothing is written to the user's machine
+ * that could cause their session to be recorded.
+ */
+export {};
+//# sourceMappingURL=captureHookInstall.test.d.ts.map

package/dist/captureHookInstall.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"captureHookInstall.test.d.ts","sourceRoot":"","sources":["../src/captureHookInstall.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}