dodo-mcp 1.0.0

package/dist/config/paths.js

@@ -0,0 +1,94 @@
+import os from 'node:os';
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+import { ensurePrivateDirectory } from '../platform/privateFs.js';
+import { envValue } from '../platform/system.js';
+function nonEmpty(value) {
+    return value && value.trim() !== '' ? value : undefined;
+}
+export function resolveConfigDir(env = process.env) {
+    const dodoOverride = nonEmpty(envValue(env, 'DODO_CONFIG_DIR'));
+    if (dodoOverride) {
+        return { dir: path.resolve(dodoOverride), source: 'env', envVar: 'DODO_CONFIG_DIR' };
+    }
+    const home = os.homedir();
+    if (process.platform === 'darwin') {
+        return { dir: path.join(home, 'Library', 'Application Support', 'dodo'), source: 'platform' };
+    }
+    if (process.platform === 'win32') {
+        const appData = envValue(env, 'LOCALAPPDATA') ?? path.join(home, 'AppData', 'Local');
+        return { dir: path.join(appData, 'dodo'), source: 'platform' };
+    }
+    const xdg = env['XDG_CONFIG_HOME'];
+    return { dir: path.join(xdg && xdg.trim() !== '' ? xdg : path.join(home, '.config'), 'dodo'), source: 'platform' };
+}
+/**
+ * Fixed, platform-specific existing locations that may be imported by the
+ * explicit local-owner setup flow. This function never scans a home
+ * directory; callers only inspect the returned paths.
+ */
+export function existingConfigDirs(env = process.env, platform = process.platform) {
+    const home = os.homedir();
+    const candidates = [];
+    if (platform === 'darwin') {
+        candidates.push(path.join(home, 'Library', 'Application Support', 'dodo'), path.join(home, '.dodo'));
+    }
+    else if (platform === 'win32') {
+        const local = nonEmpty(envValue(env, 'LOCALAPPDATA', 'win32')) ?? path.join(home, 'AppData', 'Local');
+        const roaming = nonEmpty(envValue(env, 'APPDATA', 'win32')) ?? path.join(home, 'AppData', 'Roaming');
+        candidates.push(path.win32.join(local, 'dodo'), path.win32.join(roaming, 'dodo'), path.win32.join(home, '.dodo'));
+    }
+    else {
+        const xdg = nonEmpty(env['XDG_CONFIG_HOME']) ?? path.join(home, '.config');
+        candidates.push(path.join(xdg, 'dodo'), path.join(home, '.dodo'));
+    }
+    const resolveForPlatform = platform === 'win32' ? path.win32.resolve : path.resolve;
+    return [...new Set(candidates.map(candidate => resolveForPlatform(candidate)))];
+}
+/** Create the config dir tree with restrictive permissions (0700 dirs, 0600 files on POSIX). */
+export function ensureConfigDir(dir) {
+    ensurePrivateDirectory(dir);
+    for (const sub of ['keys', 'audit', 'backups', 'journal', 'jobs', 'ipc', 'tunnel', 'launcher-workspace', 'store', 'store/sha256', 'store/staging']) {
+        ensurePrivateDirectory(path.join(dir, sub));
+    }
+}
+export function statePaths(configDir) {
+    return {
+        configDir,
+        configFile: path.join(configDir, 'config.json'),
+        dbFile: path.join(configDir, 'state.db'),
+        keysDir: path.join(configDir, 'keys'),
+        jwksFile: path.join(configDir, 'keys', 'jwks.json'),
+        cookieKeysFile: path.join(configDir, 'keys', 'cookies.json'),
+        auditDir: path.join(configDir, 'audit'),
+        backupsDir: path.join(configDir, 'backups'),
+        journalDir: path.join(configDir, 'journal'),
+        jobsDir: path.join(configDir, 'jobs'),
+        ipcDir: path.join(configDir, 'ipc'),
+        tunnelDir: path.join(configDir, 'tunnel'),
+        launcherWorkspaceDir: path.join(configDir, 'launcher-workspace'),
+        resourceStoreDir: path.join(configDir, 'store', 'sha256'),
+        resourceStagingDir: path.join(configDir, 'store', 'staging'),
+    };
+}
+/**
+ * IPC socket path for a workspace. Unix socket paths are limited (~104 bytes
+ * on macOS), so the name is a short hash, and when even the hashed path would
+ * exceed the platform limit we fall back to a per-user tmp dir (0700).
+ */
+export function ipcSocketPath(configDir, workspaceKey, options = {}) {
+    const short = workspaceKey.replace(/[^a-z0-9]/gi, '').slice(0, 16);
+    const candidate = path.join(configDir, 'ipc', `${short}.sock`);
+    // A locator for the owner-private authentication descriptor. IPC resolves
+    // this to a fresh Windows named pipe; it is never opened as a socket file.
+    if (process.platform === 'win32')
+        return candidate;
+    if (Buffer.byteLength(candidate) <= 100)
+        return candidate;
+    const configHash = createHash('sha256').update(path.resolve(configDir)).digest('hex').slice(0, 10);
+    const fallbackDir = path.join(os.tmpdir(), `dodo-${os.userInfo().username}-${configHash}`);
+    if (options.createDirectory !== false)
+        ensurePrivateDirectory(fallbackDir);
+    return path.join(fallbackDir, `${short}.sock`);
+}
+//# sourceMappingURL=paths.js.map

package/dist/config/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAejD,SAAS,QAAQ,CAAC,KAAyB;IACzC,OAAO,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAChE,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACrF,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACrH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAE,WAA4B,OAAO,CAAC,QAAQ;IACnH,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACvG,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACtG,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACrG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACpH,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC3E,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,kBAAkB,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IACpF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,oBAAoB,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,CAAC,EAAE,CAAC;QACnJ,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAsBD,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,OAAO;QACL,SAAS;QACT,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;QAC/C,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC;QACxC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC;QACrC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC;QACnD,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC;QAC5D,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC;QACvC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;QAC3C,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;QAC3C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC;QACrC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;QACnC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;QACzC,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC;QAChE,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC;QACzD,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,YAAoB,EAAE,UAAyC,EAAE;IAChH,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;IAC/D,0EAA0E;IAC1E,2EAA2E;IAC3E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnG,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,eAAe,KAAK,KAAK;QAAE,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;AACjD,CAAC"}

package/dist/config/projectConfig.js

@@ -0,0 +1,63 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { z } from 'zod';
+/**
+ * Repo-safe `.dodo.json` schema (spec §5). Hints only. It cannot widen
+ * permissions: no auth keys, no root, no security settings — `strict()`
+ * rejects unknown keys so a malicious repo config fails closed (CFG-01) and
+ * is reported as invalid instead of being merged.
+ */
+export const ProjectTaskSchema = z
+    .object({
+    id: z.string().regex(/^[a-z0-9][a-z0-9-_]{0,63}$/),
+    title: z.string().min(1).max(120),
+    program: z.string().min(1).max(256),
+    args: z.array(z.string().max(1024)).max(64).default([]),
+    /** Workspace-relative cwd; validated through path policy before any use. */
+    cwd: z.string().max(1024).optional(),
+})
+    .strict();
+export const ProjectConfigSchema = z
+    .object({
+    /** Human hints only. */
+    name: z.string().min(1).max(120).optional(),
+    description: z.string().min(1).max(2000).optional(),
+    /** Narrowing globs (gitignore syntax). Can only EXCLUDE more, never re-include denied paths. */
+    exclude: z.array(z.string().min(1).max(256)).max(200).default([]),
+    /** Task recipes are data; running one always requires the local approval flow. */
+    tasks: z.array(ProjectTaskSchema).max(50).default([]),
+})
+    .strict();
+export const EMPTY_PROJECT_CONFIG = ProjectConfigSchema.parse({});
+const MAX_PROJECT_CONFIG_BYTES = 64 * 1024;
+export function loadProjectConfig(root) {
+    const file = path.join(root, '.dodo.json');
+    let raw;
+    try {
+        const st = fs.lstatSync(file);
+        if (!st.isFile() || st.size > MAX_PROJECT_CONFIG_BYTES) {
+            return { config: EMPTY_PROJECT_CONFIG, present: true, invalidReason: 'not a regular file or too large' };
+        }
+        raw = fs.readFileSync(file);
+    }
+    catch {
+        return { config: EMPTY_PROJECT_CONFIG, present: false };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw.toString('utf8'));
+    }
+    catch {
+        return { config: EMPTY_PROJECT_CONFIG, present: true, invalidReason: 'invalid JSON' };
+    }
+    const result = ProjectConfigSchema.safeParse(parsed);
+    if (!result.success) {
+        const reason = result.error.issues
+            .slice(0, 3)
+            .map((i) => `${i.path.join('.') || '<root>'}: ${i.message}`)
+            .join('; ');
+        return { config: EMPTY_PROJECT_CONFIG, present: true, invalidReason: reason };
+    }
+    return { config: result.data, present: true };
+}
+//# sourceMappingURL=projectConfig.js.map

package/dist/config/projectConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectConfig.js","sourceRoot":"","sources":["../../src/config/projectConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC;IAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,4EAA4E;IAC5E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,wBAAwB;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACnD,gGAAgG;IAChG,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,kFAAkF;IAClF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAWZ,MAAM,CAAC,MAAM,oBAAoB,GAAkB,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAEjF,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC3C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,GAAG,wBAAwB,EAAE,CAAC;YACvD,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,iCAAiC,EAAE,CAAC;QAC3G,CAAC;QACD,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC3D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChD,CAAC"}

package/dist/config/stateImport.js

@@ -0,0 +1,306 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { createHash, randomUUID } from 'node:crypto';
+import { DodoError } from '../errors.js';
+import { GlobalConfigSchema } from './globalConfig.js';
+import { assertPrivatePath, ensurePrivateDirectory } from '../platform/privateFs.js';
+import { renameWithRetry } from '../platform/fsRetry.js';
+import { existingConfigDirs } from './paths.js';
+/**
+ * Existing-state import intentionally carries only non-authority preferences.
+ * OAuth material, grants, ACLs, trust, executable registrations, network
+ * permissions and runtime data are never copied into a new installation.
+ */
+export const STATE_IMPORT_CONFIG_FIELDS = [
+    'version',
+    'port',
+    'configPort',
+    'limits',
+    'searchBackend',
+    'logRetentionDays',
+    'toolSurface',
+];
+const CONFIG_FILE = 'config.json';
+const MAX_CONFIG_BYTES = 1024 * 1024;
+const RESET_SECURITY = [
+    'OAuth signing keys, cookies, clients, grants, codes and tokens',
+    'workspace client ACLs, trust modes, approvals and schedules',
+    'public URL, Host/Origin allowlists and insecure-HTTP override',
+    'web and desktop permissions',
+    'LSP commands, environment allowlist and sandbox writable paths',
+    'tunnel credential references, executable selection and supervisor settings',
+];
+function exists(target) {
+    try {
+        fs.lstatSync(target);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+function assertNotLink(target) {
+    const stat = fs.lstatSync(target);
+    if (stat.isSymbolicLink())
+        throw new DodoError('PATH_DENIED', `state import contains a symbolic link: ${path.basename(target)}`);
+    return stat;
+}
+function assertSafeDestinationParent(target) {
+    const stat = assertNotLink(target);
+    if (!stat.isDirectory())
+        throw new DodoError('PATH_DENIED', 'Dodo state parent is not a directory');
+    if (process.platform === 'win32') {
+        assertPrivatePath(target, true);
+        return;
+    }
+    if (stat.uid !== process.getuid?.() || (stat.mode & 0o022) !== 0) {
+        throw new DodoError('PATH_DENIED', 'Dodo state parent must be owned by the current user and not writable by group or others');
+    }
+}
+function inspectConfig(file) {
+    const stat = assertNotLink(file);
+    if (!stat.isFile() || stat.nlink !== 1)
+        throw new DodoError('PATH_DENIED', 'state import config must be one regular, non-linked file');
+    if (stat.size > MAX_CONFIG_BYTES)
+        throw new DodoError('RESOURCE_LIMIT', 'state import config is oversized');
+    assertPrivatePath(file, false);
+    const bytes = fs.readFileSync(file);
+    let raw;
+    try {
+        raw = JSON.parse(bytes.toString('utf8'));
+    }
+    catch {
+        throw new DodoError('MIGRATION_REVIEW_REQUIRED', 'existing config is not valid JSON; source was preserved');
+    }
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
+        throw new DodoError('MIGRATION_REVIEW_REQUIRED', 'existing config must be a JSON object; source was preserved');
+    }
+    const parsed = GlobalConfigSchema.safeParse(raw);
+    if (!parsed.success) {
+        throw new DodoError('MIGRATION_REVIEW_REQUIRED', 'existing config does not match the Dodo config schema; source was preserved', {
+            detail: { issueCount: parsed.error.issues.length },
+            recovery: 'review the source config locally; unknown or malformed fields are never imported automatically',
+        });
+    }
+    const present = Object.keys(raw);
+    const allowed = new Set(STATE_IMPORT_CONFIG_FIELDS);
+    const importedConfigFields = present.filter(key => allowed.has(key)).sort();
+    const droppedConfigFields = present.filter(key => !allowed.has(key)).sort();
+    const selected = { version: 1 };
+    for (const key of importedConfigFields)
+        selected[key] = parsed.data[key];
+    return {
+        clean: GlobalConfigSchema.parse(selected),
+        importedConfigFields,
+        droppedConfigFields,
+        bytes: bytes.byteLength,
+        configSha256: createHash('sha256').update(bytes).digest('hex'),
+    };
+}
+function blocked(targetDir, sourceDir, reason) {
+    return {
+        schemaVersion: 1,
+        state: 'blocked',
+        targetDir,
+        ...(sourceDir ? { sourceDir } : {}),
+        entries: [],
+        ignoredEntries: [],
+        importedConfigFields: [],
+        resetSecurity: [...RESET_SECURITY],
+        bytes: 0,
+        reason,
+    };
+}
+function inspectCandidate(sourceDir, targetDir) {
+    try {
+        const root = assertNotLink(sourceDir);
+        if (!root.isDirectory())
+            return blocked(targetDir, sourceDir, 'existing state path is not a directory');
+        assertPrivatePath(sourceDir, true);
+        const rootEntries = fs.readdirSync(sourceDir).sort();
+        if (rootEntries.includes('setup.lock'))
+            return blocked(targetDir, sourceDir, 'setup.lock exists; stop the existing setup process before importing');
+        const ipc = path.join(sourceDir, 'ipc');
+        if (exists(ipc)) {
+            const ipcStat = assertNotLink(ipc);
+            if (!ipcStat.isDirectory())
+                return blocked(targetDir, sourceDir, 'IPC runtime path is not a directory');
+            if (fs.readdirSync(ipc).length > 0)
+                return blocked(targetDir, sourceDir, 'IPC runtime markers exist; stop the existing Dodo process before importing');
+        }
+        if (!rootEntries.includes(CONFIG_FILE)) {
+            return {
+                schemaVersion: 1,
+                state: 'not-needed',
+                targetDir,
+                sourceDir,
+                entries: [],
+                ignoredEntries: rootEntries,
+                importedConfigFields: [],
+                resetSecurity: [...RESET_SECURITY],
+                bytes: 0,
+                reason: 'no importable config was found; credentials and runtime state are never imported',
+            };
+        }
+        const inspected = inspectConfig(path.join(sourceDir, CONFIG_FILE));
+        return {
+            schemaVersion: 1,
+            state: 'available',
+            targetDir,
+            sourceDir,
+            entries: [CONFIG_FILE],
+            ignoredEntries: rootEntries.filter(entry => entry !== CONFIG_FILE),
+            importedConfigFields: inspected.importedConfigFields,
+            resetSecurity: [...RESET_SECURITY, ...inspected.droppedConfigFields.map(field => `config.${field}`)],
+            bytes: inspected.bytes,
+            configSha256: inspected.configSha256,
+        };
+    }
+    catch (error) {
+        const dodo = error instanceof DodoError ? error : new DodoError('MIGRATION_REVIEW_REQUIRED', 'existing state could not be inspected safely');
+        return blocked(targetDir, sourceDir, dodo.message);
+    }
+}
+/** Build a read-only plan. It never creates directories, opens SQLite or reads key/token files. */
+export function planStateImport(targetDir, candidates = existingConfigDirs()) {
+    const target = path.resolve(targetDir);
+    if (path.parse(target).root === target)
+        throw new DodoError('PATH_DENIED', 'Dodo state must use a dedicated directory');
+    if (exists(target)) {
+        const stat = assertNotLink(target);
+        if (!stat.isDirectory())
+            throw new DodoError('PATH_DENIED', 'Dodo state path is not a directory');
+        return {
+            schemaVersion: 1,
+            state: 'not-needed',
+            targetDir: target,
+            entries: [],
+            ignoredEntries: [],
+            importedConfigFields: [],
+            resetSecurity: [...RESET_SECURITY],
+            bytes: 0,
+            reason: 'Dodo state already exists; automatic merge is disabled',
+        };
+    }
+    for (const candidate of candidates) {
+        const source = path.resolve(candidate);
+        if (source === target || !exists(source))
+            continue;
+        const plan = inspectCandidate(source, target);
+        if (plan.state === 'available' || plan.state === 'blocked')
+            return plan;
+    }
+    return {
+        schemaVersion: 1,
+        state: 'not-needed',
+        targetDir: target,
+        entries: [],
+        ignoredEntries: [],
+        importedConfigFields: [],
+        resetSecurity: [...RESET_SECURITY],
+        bytes: 0,
+        reason: 'no existing Dodo config was found',
+    };
+}
+/**
+ * Import only the reviewed preference allowlist into a fresh private directory.
+ * The source remains untouched and the destination appears in one atomic rename.
+ */
+export function importState(plan) {
+    if (plan.state === 'blocked') {
+        throw new DodoError('MIGRATION_REVIEW_REQUIRED', plan.reason ?? 'state import needs local review', {
+            recovery: 'inspect the source locally; Dodo did not create or modify the target',
+        });
+    }
+    if (plan.state !== 'available' || !plan.sourceDir)
+        throw new DodoError('CONFLICT', plan.reason ?? 'no importable Dodo state is available');
+    const sourceDir = path.resolve(plan.sourceDir);
+    const targetDir = path.resolve(plan.targetDir);
+    const parent = path.dirname(targetDir);
+    fs.mkdirSync(parent, { recursive: true, mode: 0o700 });
+    assertSafeDestinationParent(parent);
+    const lock = `${targetDir}.migration.lock`;
+    const lockBody = JSON.stringify({ schemaVersion: 1, kind: 'dodo-state-import-lock', pid: process.pid, startedAt: new Date().toISOString() });
+    try {
+        fs.writeFileSync(lock, lockBody, { flag: 'wx', mode: 0o600 });
+    }
+    catch {
+        throw new DodoError('CONFLICT', 'another Dodo state import may be running; inspect the migration lock locally');
+    }
+    try {
+        assertPrivatePath(lock, false);
+    }
+    catch (error) {
+        try {
+            if (fs.readFileSync(lock, 'utf8') === lockBody)
+                fs.unlinkSync(lock);
+        }
+        catch { /* never remove a replaced lock */ }
+        throw error;
+    }
+    const stage = `${targetDir}.migration-${randomUUID()}`;
+    try {
+        if (exists(targetDir))
+            throw new DodoError('FILE_CHANGED', 'Dodo state appeared during import; source was preserved');
+        const current = inspectCandidate(sourceDir, targetDir);
+        if (current.state !== 'available') {
+            throw new DodoError(current.state === 'blocked' ? 'MIGRATION_REVIEW_REQUIRED' : 'CONFLICT', current.reason ?? 'existing state changed; import was refused');
+        }
+        if (current.bytes !== plan.bytes
+            || current.configSha256 !== plan.configSha256
+            || JSON.stringify(current.importedConfigFields) !== JSON.stringify(plan.importedConfigFields)
+            || JSON.stringify(current.ignoredEntries) !== JSON.stringify(plan.ignoredEntries)) {
+            throw new DodoError('FILE_CHANGED', 'existing state changed after planning; source was preserved');
+        }
+        const inspected = inspectConfig(path.join(sourceDir, CONFIG_FILE));
+        ensurePrivateDirectory(stage);
+        const configFile = path.join(stage, CONFIG_FILE);
+        fs.writeFileSync(configFile, JSON.stringify(inspected.clean, null, 2) + '\n', { flag: 'wx', mode: 0o600 });
+        assertPrivatePath(configFile, false);
+        const receipt = path.join(stage, 'migration.json');
+        const receiptBody = {
+            schemaVersion: 1,
+            kind: 'dodo-state-import',
+            sourceDir,
+            importedAt: new Date().toISOString(),
+            entries: [CONFIG_FILE],
+            ignoredEntries: current.ignoredEntries,
+            importedConfigFields: current.importedConfigFields,
+            resetSecurity: current.resetSecurity,
+            bytes: current.bytes,
+            configSha256: current.configSha256,
+            sourcePreserved: true,
+        };
+        fs.writeFileSync(receipt, JSON.stringify(receiptBody, null, 2) + '\n', { flag: 'wx', mode: 0o600 });
+        assertPrivatePath(receipt, false);
+        renameWithRetry(stage, targetDir);
+        return {
+            schemaVersion: 1,
+            sourceDir,
+            targetDir,
+            entries: [CONFIG_FILE],
+            ignoredEntries: current.ignoredEntries,
+            importedConfigFields: current.importedConfigFields,
+            resetSecurity: current.resetSecurity,
+            bytes: current.bytes,
+            configSha256: current.configSha256,
+            receipt: path.join(targetDir, 'migration.json'),
+            sourcePreserved: true,
+        };
+    }
+    finally {
+        try {
+            if (exists(stage))
+                fs.rmSync(stage, { recursive: true, force: true, maxRetries: 3, retryDelay: 40 });
+        }
+        catch { /* keep the explicit recovery path if cleanup is blocked */ }
+        try {
+            if (fs.readFileSync(lock, 'utf8') === lockBody)
+                fs.unlinkSync(lock);
+        }
+        catch { /* never remove a replaced lock */ }
+    }
+}
+//# sourceMappingURL=stateImport.js.map

package/dist/config/stateImport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stateImport.js","sourceRoot":"","sources":["../../src/config/stateImport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAqB,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,SAAS;IACT,MAAM;IACN,YAAY;IACZ,QAAQ;IACR,eAAe;IACf,kBAAkB;IAClB,aAAa;CACqC,CAAC;AAErD,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAgCrC,MAAM,cAAc,GAAG;IACrB,gEAAgE;IAChE,6DAA6D;IAC7D,+DAA+D;IAC/D,6BAA6B;IAC7B,gEAAgE;IAChE,4EAA4E;CACpE,CAAC;AAUX,SAAS,MAAM,CAAC,MAAc;IAC5B,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,0CAA0C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjI,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,2BAA2B,CAAC,MAAc;IACjD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;IACpG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,yFAAyF,CAAC,CAAC;IAChI,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,0DAA0D,CAAC,CAAC;IACvI,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;IAC5G,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,2BAA2B,EAAE,yDAAyD,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,SAAS,CAAC,2BAA2B,EAAE,6DAA6D,CAAC,CAAC;IAClH,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC,2BAA2B,EAAE,6EAA6E,EAAE;YAC9H,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;YAClD,QAAQ,EAAE,gGAAgG;SAC3G,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAA8B,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,0BAA0B,CAAC,CAAC;IAC5D,MAAM,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,MAAM,QAAQ,GAA4B,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,oBAAoB;QAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAyB,CAAC,CAAC;IAC/F,OAAO;QACL,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC;QACzC,oBAAoB;QACpB,mBAAmB;QACnB,KAAK,EAAE,KAAK,CAAC,UAAU;QACvB,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,SAAiB,EAAE,SAA6B,EAAE,MAAc;IAC/E,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,SAAS;QAChB,SAAS;QACT,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,EAAE;QAClB,oBAAoB,EAAE,EAAE;QACxB,aAAa,EAAE,CAAC,GAAG,cAAc,CAAC;QAClC,KAAK,EAAE,CAAC;QACR,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,SAAiB;IAC5D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,wCAAwC,CAAC,CAAC;QACxG,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,qEAAqE,CAAC,CAAC;QACpJ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;gBAAE,OAAO,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,qCAAqC,CAAC,CAAC;YACxG,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,4EAA4E,CAAC,CAAC;QACzJ,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,aAAa,EAAE,CAAC;gBAChB,KAAK,EAAE,YAAY;gBACnB,SAAS;gBACT,SAAS;gBACT,OAAO,EAAE,EAAE;gBACX,cAAc,EAAE,WAAW;gBAC3B,oBAAoB,EAAE,EAAE;gBACxB,aAAa,EAAE,CAAC,GAAG,cAAc,CAAC;gBAClC,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,kFAAkF;aAC3F,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;QACnE,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,KAAK,EAAE,WAAW;YAClB,SAAS;YACT,SAAS;YACT,OAAO,EAAE,CAAC,WAAW,CAAC;YACtB,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,WAAW,CAAC;YAClE,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;YACpD,aAAa,EAAE,CAAC,GAAG,cAAc,EAAE,GAAG,SAAS,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;YACpG,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,YAAY,EAAE,SAAS,CAAC,YAAY;SACrC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,YAAY,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,2BAA2B,EAAE,8CAA8C,CAAC,CAAC;QAC7I,OAAO,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,UAAU,GAAG,kBAAkB,EAAE;IAClF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,2CAA2C,CAAC,CAAC;IACxH,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAC;QAClG,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,KAAK,EAAE,YAAY;YACnB,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,EAAE;YACX,cAAc,EAAE,EAAE;YAClB,oBAAoB,EAAE,EAAE;YACxB,aAAa,EAAE,CAAC,GAAG,cAAc,CAAC;YAClC,KAAK,EAAE,CAAC;YACR,MAAM,EAAE,wDAAwD;SACjE,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,SAAS;QACnD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;IAC1E,CAAC;IACD,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,YAAY;QACnB,SAAS,EAAE,MAAM;QACjB,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,EAAE;QAClB,oBAAoB,EAAE,EAAE;QACxB,aAAa,EAAE,CAAC,GAAG,cAAc,CAAC;QAClC,KAAK,EAAE,CAAC;QACR,MAAM,EAAE,mCAAmC;KAC5C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAqB;IAC/C,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,SAAS,CAAC,2BAA2B,EAAE,IAAI,CAAC,MAAM,IAAI,iCAAiC,EAAE;YACjG,QAAQ,EAAE,sEAAsE;SACjF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,IAAI,uCAAuC,CAAC,CAAC;IAC3I,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,2BAA2B,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,SAAS,iBAAiB,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC7I,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,8EAA8E,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,CAAC;QACH,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,QAAQ;gBAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;QACzH,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,SAAS,cAAc,UAAU,EAAE,EAAE,CAAC;IACvD,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,yDAAyD,CAAC,CAAC;QACtH,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,SAAS,CACjB,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,UAAU,EACtE,OAAO,CAAC,MAAM,IAAI,4CAA4C,CAC/D,CAAC;QACJ,CAAC;QACD,IACE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;eACzB,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;eAC1C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC;eAC1F,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,EACjF,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,6DAA6D,CAAC,CAAC;QACrG,CAAC;QACD,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;QACnE,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACjD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3G,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG;YAClB,aAAa,EAAE,CAAC;YAChB,IAAI,EAAE,mBAAmB;YACzB,SAAS;YACT,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,OAAO,EAAE,CAAC,WAAW,CAAC;YACtB,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;YAClD,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,eAAe,EAAE,IAAI;SACtB,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpG,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClC,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAClC,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,SAAS;YACT,SAAS;YACT,OAAO,EAAE,CAAC,WAAW,CAAC;YACtB,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;YAClD,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,OAAO,CAAC,YAAa;YACnC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC;YAC/C,eAAe,EAAE,IAAI;SACtB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,IAAI,MAAM,CAAC,KAAK,CAAC;gBAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;QACnL,IAAI,CAAC;YAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,QAAQ;gBAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;IAC3H,CAAC;AACH,CAAC"}

package/dist/config/tunnelConfig.js

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+const CredentialKey = z.string().regex(/^[a-f0-9]{24}$/);
+/** Opaque locator only. A Cloudflare Tunnel token is never valid config data. */
+export const TunnelCredentialRefSchema = z.discriminatedUnion('provider', [
+    z.object({ provider: z.literal('os'), key: CredentialKey }).strict(),
+    z.object({ provider: z.literal('env'), name: z.string().regex(/^[A-Z][A-Z0-9_]{0,63}$/) }).strict(),
+    z.object({ provider: z.literal('file'), path: z.string().min(1).max(4096) }).strict(),
+]);
+export const TunnelConfigSchema = z
+    .object({
+    mode: z.enum(['external', 'managed']).default('external'),
+    /** Prompt for a run-scoped token and attach cloudflared to `dodo start`. */
+    startWithDodo: z.boolean().default(true),
+    credentialRef: TunnelCredentialRefSchema.optional(),
+    /** Canonical cloudflared path selected by the local owner, never by repo config. */
+    executable: z.string().min(1).max(4096).optional(),
+    /** Loopback-only cloudflared metrics/readiness listener. */
+    metricsPort: z.number().int().min(1024).max(65535).default(21732),
+    /** Process restarts after cloudflared exhausts its own bounded retries. */
+    maxRestarts: z.number().int().min(0).max(5).default(2),
+})
+    .strict();
+//# sourceMappingURL=tunnelConfig.js.map

package/dist/config/tunnelConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnelConfig.js","sourceRoot":"","sources":["../../src/config/tunnelConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAEzD,iFAAiF;AACjF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,kBAAkB,CAAC,UAAU,EAAE;IACxE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACpE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACnG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CACtF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IACzD,4EAA4E;IAC5E,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACxC,aAAa,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IACnD,oFAAoF;IACpF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAClD,4DAA4D;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACjE,2EAA2E;IAC3E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CACvD,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/errors.js

@@ -0,0 +1,82 @@
+/**
+ * Typed application errors. Every tool failure surfaces as a `DodoError` with
+ * a stable machine code from the spec's minimum catalog (§15). Anything else
+ * escaping a handler is mapped to INTERNAL_ERROR with no stack/secret leak.
+ */
+export const ERROR_CODES = [
+    'AUTH_REQUIRED',
+    'WORKSPACE_ACCESS_REQUIRED',
+    'FORBIDDEN',
+    'WORKSPACE_MISMATCH',
+    'STALE_WORKSPACE',
+    'PATH_DENIED',
+    'SECRET_PATH_DENIED',
+    'NOT_FOUND',
+    'UNSUPPORTED_ENCODING',
+    'UNSUPPORTED_LANGUAGE',
+    'FILE_TOO_LARGE',
+    'FILE_CHANGED',
+    'AMBIGUOUS_EDIT',
+    'PLAN_EXPIRED',
+    'PLAN_HASH_MISMATCH',
+    'APPROVAL_REQUIRED',
+    'APPROVAL_EXPIRED',
+    'IDEMPOTENCY_CONFLICT',
+    'RESOURCE_LIMIT',
+    'JOB_NOT_FOUND',
+    'JOB_NOT_RUNNING',
+    'TIMEOUT',
+    'RECOVERY_REQUIRED',
+    'PARTIAL_RECOVERY_REQUIRED',
+    'MIGRATION_REVIEW_REQUIRED',
+    'INVALID_INPUT',
+    'NOT_SUPPORTED',
+    'CONFLICT',
+    'INTERNAL_ERROR',
+];
+export class DodoError extends Error {
+    code;
+    retryable;
+    recovery;
+    detail;
+    constructor(code, message, opts = {}) {
+        super(message);
+        this.name = 'DodoError';
+        this.code = code;
+        this.retryable = opts.retryable ?? false;
+        this.recovery = opts.recovery;
+        this.detail = opts.detail;
+    }
+    toInfo() {
+        const info = {
+            code: this.code,
+            message: this.message,
+            retryable: this.retryable,
+        };
+        if (this.recovery !== undefined)
+            info.recovery = this.recovery;
+        if (this.detail !== undefined)
+            info.detail = this.detail;
+        return info;
+    }
+}
+export function toDodoError(err) {
+    if (err instanceof DodoError)
+        return err;
+    // Never leak stack traces or arbitrary error internals to remote callers.
+    return new DodoError('INTERNAL_ERROR', 'internal error', { retryable: false });
+}
+/**
+ * Rebuild a typed error from a serialized envelope error, preserving the
+ * exact code/message/retryable/recovery/detail. Used by the compact gateway
+ * so a target tool's failure surfaces unchanged through the outer tool.
+ */
+export function fromErrorInfo(info) {
+    const code = ERROR_CODES.includes(info.code) ? info.code : 'INTERNAL_ERROR';
+    return new DodoError(code, info.message, {
+        retryable: info.retryable,
+        ...(info.recovery !== undefined ? { recovery: info.recovery } : {}),
+        ...(info.detail !== undefined ? { detail: info.detail } : {}),
+    });
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,eAAe;IACf,2BAA2B;IAC3B,WAAW;IACX,oBAAoB;IACpB,iBAAiB;IACjB,aAAa;IACb,oBAAoB;IACpB,WAAW;IACX,sBAAsB;IACtB,sBAAsB;IACtB,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,cAAc;IACd,oBAAoB;IACpB,mBAAmB;IACnB,kBAAkB;IAClB,sBAAsB;IACtB,gBAAgB;IAChB,eAAe;IACf,iBAAiB;IACjB,SAAS;IACT,mBAAmB;IACnB,2BAA2B;IAC3B,2BAA2B;IAC3B,eAAe;IACf,eAAe;IACf,UAAU;IACV,gBAAgB;CACR,CAAC;AAcX,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,IAAI,CAAY;IAChB,SAAS,CAAU;IACnB,QAAQ,CAAqB;IAC7B,MAAM,CAAsC;IAErD,YACE,IAAe,EACf,OAAe,EACf,OAAqF,EAAE;QAEvF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,MAAM;QACJ,MAAM,IAAI,GAAkB;YAC1B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;QACF,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,IAAI,GAAG,YAAY,SAAS;QAAE,OAAO,GAAG,CAAC;IACzC,0EAA0E;IAC1E,OAAO,IAAI,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAmB;IAC/C,MAAM,IAAI,GAAe,WAAiC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAC9G,OAAO,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE;QACvC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC"}