harness-dispatch 0.7.8 → 0.8.0

package/README.md

@@ -55,14 +55,24 @@ timeout — or to the server itself restarting mid-run.**
 
 Needs Node.js `>=22.22.2` (so current LTS works) and at least one harness or endpoint.
 
+`git` is optional but recommended: dispatch works without it, but the
+`workspace` tool shells out to git to diff and apply an isolated run's changes,
+and the `git_worktree` isolation policy needs it. `doctor` reports whether it
+found one.
+
 ```bash
 npm install -g harness-dispatch
 harness-dispatch configure --yes
 harness-dispatch doctor --live
 ```
 
-`configure --yes` detects installed harnesses and writes `config.yaml`; without
-`--yes` it previews and writes nothing. `doctor` then checks the whole chain:
+`configure --yes` detects installed harnesses, writes `config.yaml`, and then
+offers to register this server with each MCP client it finds (Claude Code,
+Cursor) — showing you what it would write, and what is already there, before
+changing anything. `--no-clients` skips the offer and prints a snippet to paste
+instead; `harness-dispatch connect` does the same registration later on its own,
+and `connect --remove` undoes it. Without
+`--yes` configure previews and writes nothing. `doctor` then checks the whole chain:
 binary, config load, harness detection, auth and billing classification, route
 readiness. `--live` goes further and routes one tiny real prompt, so you see a
 completion before wiring anything into your agent. The live probe never touches paid or
@@ -343,6 +353,10 @@ set `billing_kind:` / `paid_usage_possible:` explicitly once you know it.
 harness-dispatch                         # stdio MCP
 harness-dispatch configure               # detect harnesses and prepare config
 harness-dispatch configure --print       # inspect generated config YAML
+harness-dispatch connect                 # register with the MCP clients you have
+harness-dispatch connect --clients cursor  # no prompt; ids from the listing it prints
+harness-dispatch connect --dev           # point clients at THIS checkout's build
+harness-dispatch connect --remove        # take the entry back out
 harness-dispatch doctor                  # validate install, auth, config, and routes
 harness-dispatch doctor --live           # run one eligible live routed probe
 harness-dispatch doctor --live --allow-paid
@@ -371,7 +385,7 @@ version bump.
 | `dispatch` | Always starts new routed coding work — one task to the best-fit harness, or a fanout to several for independent opinions. Every call runs as a background job from the first moment: a fast task returns its full result inline (`completed: true`), a slow one returns `completed: false` plus a `jobId` to check on. Nothing is ever lost to a timeout — including the MCP call's own. |
 | `job_status` | Checks work started by `dispatch`. Pass the `jobId` it returned to get a `partialOutput` tail while running and the full `result` once done; omit `jobId` to list recent background dispatches (compact, newest first). |
 | `cancel_job` | Stops work started by `dispatch` — a wrong turn, a wrong directory, a superseded run. A job still waiting for a slot stops outright; a running one tears down within about a second (poll `job_status` to see it land), killing the agent CLI and its children. Files it already changed are **not** reverted, and a cancelled run is not counted as a route failure. |
-| `retry_job` | Re-runs a finished job's task from its own record — same prompt (as the delegate saw it), files, working directory, hints and workspace policy. Pass `service` to send the retry to a different route, which is the usual reason to retry: the task was fine and the route was not. Returns a new jobId; the original is untouched. |
+| `retry_job` | Re-runs a finished job's task from its own record — same prompt (as the delegate saw it), files, working directory, hints and workspace policy. Pass `service` to send the retry to a different route, which is the usual reason to retry: the task was fine and the route was not — the original's model is left behind when the new route does not declare it, reported as `droppedModel`. Returns a new jobId; the original is untouched. |
 | `workspace` | For a job that ran with `workspacePolicy: "copy"` or `"git_worktree"`, the agent's changes live in an isolated workspace and were **never** applied to your project. `action: "diff"` returns the real patch; `"apply"` applies it (refusing when your project has uncommitted changes, since the patch was built against a clean base — `force: true` overrides); `"discard"` deletes the workspace. The full patch is always written to the job directory, so `git apply` by hand is available either way. |
 | `usage` | Per-route call counts, quota, billing kind, and breaker state — check this before passing an unfamiliar `hints.model`/`service`/`models` value, since those are not validated. Pass `listModels: <route id>` to fetch that `openai_compatible` route's live `GET /models` catalog instead of (or alongside) the summary. |
 
@@ -383,7 +397,11 @@ carries a `warning` field saying so.
 immediately, then waits up to `graceSeconds` (default 25) for it to finish. Within the
 window you get the complete result inline, exactly as if the call had blocked. Past it
 you get the `jobId` — call `job_status` with that `jobId` to see a `partialOutput` tail
-while it runs and the full `result` once `completed`. Because the run never depends on
+while it runs and the full `result` once `completed`. Expect the `jobId` path to be
+ordinary rather than exceptional: real agent-CLI work regularly runs for minutes, so on
+this maintainer's install a little over half of live dispatches finish past the default
+window. Treat a `completed: false` as the normal shape of a substantial task, not as a
+sign anything went wrong. Because the run never depends on
 the MCP call staying open, a client-side timeout costs you the inline reply, never the
 work. Background runs default to a generous 60-minute ceiling meant only to catch a
 genuinely hung process (stuck waiting on input, a stalled network call), not to cap
@@ -440,9 +458,21 @@ Status is exposed as resources:
 
 Endpoints:
 
+- `GET /health` — liveness, and the **only** route served without a token, so a
+  deploy gate or container probe can ask without being handed a credential. It
+  answers `{"status","service","version"}` and nothing else: no routes, no
+  endpoints, no quota, no config.
 - `POST /mcp` for streamable HTTP MCP
+- `POST /v1/chat/completions` with `stream: true` sends the answer as SSE
+  deltas. An endpoint route streams its text as it arrives; a CLI harness emits
+  protocol on stdout, so its answer is sent once, at completion — the deltas
+  never carry harness protocol either way. **Streaming creates no job record**,
+  so unlike the non-streaming call there is no `jobId` to poll and an
+  interrupted stream cannot be recovered. Use the non-streaming form for work
+  you would mind losing.
 - `GET /v1/status` — full route/quota/billing/breaker detail (same shape as
-  `harness-dispatch://status.json`)
+  `harness-dispatch://status.json`). Authenticated, because that answer is not
+  for strangers.
 - `GET /v1/usage` — per-route call counts, quota, billing kind, and breaker state only
 - `GET /v1/models` — OpenAI-style model list; each entry's `id` is a route id you can
   pass as `model` in `/v1/chat/completions`

package/config.default.yaml

@@ -47,7 +47,23 @@ clis:
     # line; {{tokens}} are substituted at dispatch time (see the reference at
     # the bottom of this file).
     protocol:
-      args: ["-p", "{{prompt}}", "--output-format", "json", "{{safety}}", "{{model}}"]
+      # The prompt goes on STDIN, not in argv.
+      #
+      # `claude -p` accepts either; argv was the original choice and it is the
+      # one that carries every command-line defect this project has fixed. On
+      # Windows a .CMD/.bat target is re-spawned through cmd.exe, which caps
+      # the whole command line at 8,191 characters — so a long prompt was
+      # refused before it reached the harness at all, and the machinery
+      # deciding where that boundary sits had to replicate cross-spawn's own
+      # escaping to know. generic-cli.ts skips that check entirely when
+      # `stdin: true` (the guard is `if (!protocol.stdin)`), because a prompt
+      # on stdin has no such limit. codex_cli has always worked this way.
+      #
+      # Verified live: a 21,670-character prompt — 2.65x the 8,191-character ceiling, and
+      # measured at 20,064 characters as argv, which the old form refused
+      # outright — dispatched and answered.
+      stdin: true
+      args: ["-p", "--output-format", "json", "{{safety}}", "{{model}}"]
       model: { flag: "--model" }
       safety:
         read_only: ["--allowedTools", "Read", "--permission-mode", "plan"]
@@ -206,7 +222,19 @@ clis:
     protocol:
       # -p is Cursor's boolean "print mode" flag; the prompt itself is the
       # trailing positional {{prompt}}.
-      args: ["-p", "--trust", "{{safety}}", "{{working_dir}}", "--output-format", "json", "{{model}}", "{{prompt}}"]
+      # Prompt on STDIN, for the same reason as claude_code_cli above: a
+      # prompt in argv is measured against cmd.exe's 8,191-character ceiling
+      # and escaped to get there, and this route is a `cursor-agent.CMD`
+      # PowerShell wrapper — the one that failed at ~9k characters and drove
+      # two releases of escaping work. generic-cli.ts skips the check
+      # entirely when `stdin: true`.
+      #
+      # Verified live before changing: `cursor-agent -p --trust
+      # --output-format json` with the prompt piped in returns
+      # {"type":"result","subtype":"success","is_error":false,...,"result":"pong"}.
+      # --trust is required or it refuses with a workspace-trust prompt.
+      stdin: true
+      args: ["-p", "--trust", "{{safety}}", "{{working_dir}}", "--output-format", "json", "{{model}}"]
       # Only read_only gets extra flags; the other profiles run print mode as
       # before. --trust is unrelated to capability — it just suppresses the
       # workspace-trust prompt, which would hang a non-interactive run.

package/dist/auth.d.ts

@@ -2,8 +2,37 @@ export declare function authDir(): string;
 export declare function tokenPath(): string;
 export declare function generateHttpToken(): string;
 export declare function readHttpToken(): Promise<string | null>;
+/**
+ * The token as it is on disk RIGHT NOW, for a running server to consult.
+ *
+ * A server read the token once at startup and held it forever, so `auth
+ * rotate` was a lie in both directions: an acceptance pass measured the old
+ * token still returning 200 after rotation, and the newly issued one being
+ * rejected with 401. Invalidating the old token is the entire reason anyone
+ * rotates a credential, so telling the user it rotated while the leaked value
+ * kept working is the worst possible outcome.
+ *
+ * Synchronous because it is consulted on the authorization path of every
+ * request, which is not async. The file is a few dozen bytes on local disk and
+ * the read is guarded by an mtime check in the caller.
+ */
+export declare function readHttpTokenSync(): string | null;
+/** Modification time of the token file, or 0 when there isn't one. */
+export declare function httpTokenMtimeMs(): number;
 export declare function ensureHttpToken(): Promise<string>;
 export declare function rotateHttpToken(): Promise<string>;
+/**
+ * Whether a request carries the expected bearer token.
+ *
+ * A `token` of null means NO AUTH IS CONFIGURED, and every request is
+ * authorized — this function fails open, deliberately, and a caller that
+ * cannot guarantee a token must not rely on it to deny anything. The HTTP
+ * server can: it calls `ensureHttpToken()` at startup and falls back to the
+ * token it read from disk on refresh, so null never reaches here from there.
+ *
+ * Spelled out because the fail-open branch is one line and reads like a
+ * guard clause rather than the policy decision it is.
+ */
 export declare function isAuthorized(authorizationHeader: string | string[] | undefined, token: string | null): boolean;
 export declare function maskToken(token: string): string;
 //# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AASA,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAS5D;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAOvD;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAKvD;AAmBD,wBAAgB,YAAY,CAC1B,mBAAmB,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EAClD,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO,CAOT;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG/C"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AASA,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAS5D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CASjD;AAED,sEAAsE;AACtE,wBAAgB,gBAAgB,IAAI,MAAM,CAMzC;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAOvD;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAKvD;AAyBD;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAC1B,mBAAmB,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EAClD,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,OAAO,CAOT;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG/C"}

package/dist/auth.js

@@ -1,5 +1,5 @@
 import { randomBytes, timingSafeEqual } from "node:crypto";
-import { promises as fs } from "node:fs";
+import { promises as fs, readFileSync, statSync } from "node:fs";
 import path from "node:path";
 import { stateRoot } from "./state-dir.js";
 const TOKEN_ENV = "HARNESS_DISPATCH_HTTP_TOKEN";
@@ -24,6 +24,41 @@ export async function readHttpToken() {
         return null;
     }
 }
+/**
+ * The token as it is on disk RIGHT NOW, for a running server to consult.
+ *
+ * A server read the token once at startup and held it forever, so `auth
+ * rotate` was a lie in both directions: an acceptance pass measured the old
+ * token still returning 200 after rotation, and the newly issued one being
+ * rejected with 401. Invalidating the old token is the entire reason anyone
+ * rotates a credential, so telling the user it rotated while the leaked value
+ * kept working is the worst possible outcome.
+ *
+ * Synchronous because it is consulted on the authorization path of every
+ * request, which is not async. The file is a few dozen bytes on local disk and
+ * the read is guarded by an mtime check in the caller.
+ */
+export function readHttpTokenSync() {
+    const fromEnv = process.env[TOKEN_ENV];
+    if (fromEnv)
+        return fromEnv;
+    try {
+        const token = readFileSync(tokenPath(), "utf-8").trim();
+        return token || null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Modification time of the token file, or 0 when there isn't one. */
+export function httpTokenMtimeMs() {
+    try {
+        return statSync(tokenPath()).mtimeMs;
+    }
+    catch {
+        return 0;
+    }
+}
 export async function ensureHttpToken() {
     const existing = await readHttpToken();
     if (existing)
@@ -42,19 +77,37 @@ export async function rotateHttpToken() {
 /**
  * Constant-time string compare. `value === expected` short-circuits on the
  * first mismatching byte — a textbook timing side channel for guessing a
- * bearer token one byte at a time. When lengths differ we still run
- * timingSafeEqual (against a same-length dummy) rather than returning early,
- * so a length mismatch alone doesn't leak timing info either.
+ * bearer token one byte at a time.
+ *
+ * On a length mismatch it still does comparison work rather than returning
+ * early. That work is now sized by `expected`, not by `value`: the previous
+ * version compared the caller-supplied buffer against ITSELF, so its cost
+ * scaled with the length an attacker chose, and the comment claiming "a length
+ * mismatch alone doesn't leak timing info either" asserted a property the code
+ * did not have. The remaining signal is the same for every wrong length, which
+ * is what that sentence was meant to say.
  */
 function safeEqual(value, expected) {
     const valueBuf = Buffer.from(value, "utf8");
     const expectedBuf = Buffer.from(expected, "utf8");
     if (valueBuf.length !== expectedBuf.length) {
-        timingSafeEqual(valueBuf, valueBuf);
+        timingSafeEqual(expectedBuf, expectedBuf);
         return false;
     }
     return timingSafeEqual(valueBuf, expectedBuf);
 }
+/**
+ * Whether a request carries the expected bearer token.
+ *
+ * A `token` of null means NO AUTH IS CONFIGURED, and every request is
+ * authorized — this function fails open, deliberately, and a caller that
+ * cannot guarantee a token must not rely on it to deny anything. The HTTP
+ * server can: it calls `ensureHttpToken()` at startup and falls back to the
+ * token it read from disk on refresh, so null never reaches here from there.
+ *
+ * Spelled out because the fail-open branch is one line and reads like a
+ * guard clause rather than the policy decision it is.
+ */
 export function isAuthorized(authorizationHeader, token) {
     if (token === null)
         return true;

package/dist/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AAEzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,SAAS,GAAG,6BAA6B,CAAC;AAEhD,MAAM,UAAU,OAAO;IACrB,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,SAAS,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/D,OAAO,KAAK,IAAI,IAAI,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC;IACvC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,GAAG,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,GAAG,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,KAAa,EAAE,QAAgB;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QAC3C,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,mBAAkD,EAClD,KAAoB;IAEpB,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC9C,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACxB,CAAC,CAAC,mBAAmB,CAAC;IACxB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,SAAS,CAAC,KAAK,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,SAAS,GAAG,6BAA6B,CAAC;AAEhD,MAAM,UAAU,OAAO;IACrB,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,SAAS,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/D,OAAO,KAAK,IAAI,IAAI,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,OAAO,KAAK,IAAI,IAAI,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC;IACvC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,GAAG,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,GAAG,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,SAAS,CAAC,KAAa,EAAE,QAAgB;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;QAC3C,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAC1B,mBAAkD,EAClD,KAAoB;IAEpB,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC9C,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACxB,CAAC,CAAC,mBAAmB,CAAC;IACxB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,SAAS,CAAC,KAAK,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC"}

package/dist/bin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA;;GAEG;AAohBH,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAiH1D"}
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA;;GAEG;AAg8BH,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgK1D"}