koppler 0.0.0-stage → 0.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ivan Yanowsky
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,102 @@
-# Temporary Holding Version
+# Koppler
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Run the part of your stack you need on your own machine, without learning how each backend is run.
+
+Pick apps on a canvas and plug cables between them, then press **Run**.
+Koppler does the wiring, the tunnels, the local queues and the start order, and reverts all of it when you press Stop.
+Everything you leave unplugged keeps calling the deployed environment you chose.
+
+Koppler is for local development.
+It helps most when you work on one app (a mobile app, a front end, one API) and need a few of its neighbours running next to it.
+
+## How it works
+
+- **A shared stack.** The team describes its apps once in a `stack.json` in a repo they share: what each app is, how it runs, what it calls, which queues it uses, which secrets it needs.
+- **A board per person.** On the canvas each app is a card. A cable from one card to another means "this caller uses my local copy of that app". Team boards load a usual setup in one click.
+- **Run.** Koppler switches branches, points callers at the local apps, opens tunnels, starts local queues and starts the apps callees first, checking that each one answers.
+- **Live cards.** Each card shows its steps, whether its port answers, and its log.
+- **Settings, not JSON.** Every fact of the stack is edited in the canvas's settings or with `koppler stack set`, checked before it is kept; a lock keeps a field as it is. Nobody edits `stack.json` by hand.
+- **Stop and revert.** One click stops what Koppler started and undoes every temporary change. Apps you started yourself are left alone.
+- **Secrets stay yours.** You store them in the macOS Keychain (on Linux, in files only you can read); Koppler starts an app with them and never shows them.
+
+## Install
+
+```bash
+npm install -g koppler
+koppler init
+koppler canvas
+```
+
+`koppler init` finds your repos and your team's stack (or starts a new one), and `koppler canvas` opens the canvas in your browser.
+[Getting started](https://github.com/evan-mcgeek/koppler/blob/main/docs/getting-started.md) walks through the first run.
+
+Koppler is not on npm yet. Until it is, install it from a clone:
+
+```bash
+git clone https://github.com/evan-mcgeek/koppler.git
+npm install -g ./koppler/app
+```
+
+## The agent add-on
+
+Koppler works on its own.
+With an AI agent it does more: you describe a setup in chat ("run the Orders API against my local Payments API"), the agent fills in what the stack is missing from the repos, takes notes like "use the test account" into a run, and explains and fixes what fails.
+
+In Claude Code, add the plugin:
+
+```
+/plugin marketplace add evan-mcgeek/koppler
+/plugin install koppler@koppler
+```
+
+For any other agent (GitHub Copilot CLI, VS Code, OpenCode), or Claude Code without the plugin, run `koppler agent init`.
+It links the [skill](https://github.com/evan-mcgeek/koppler/blob/main/plugin/skills/koppler-run) into each agent it finds and registers `koppler mcp`, its MCP server.
+Either way, the agent drives the `koppler` command, so install the app first.
+
+## Requirements
+
+- macOS (secrets live in the Keychain) or Linux (secrets live in private files, without the per-read prompt; see [security](https://github.com/evan-mcgeek/koppler/blob/main/docs/security.md)).
+- git and Node 22 or newer.
+
+Everything else depends on your stack (the .NET SDK, Flutter, Docker, the AWS CLI, ...).
+`koppler doctor` lists what your stack needs on your machine and what is missing.
+
+## Documentation
+
+- [Getting started](https://github.com/evan-mcgeek/koppler/blob/main/docs/getting-started.md): install, the first stack, the first run.
+- [The canvas](https://github.com/evan-mcgeek/koppler/blob/main/docs/canvas.md): boards, cables, queues, environments, Run and Stop.
+- [App kinds](https://github.com/evan-mcgeek/koppler/blob/main/docs/app-kinds.md): what Koppler can run and how.
+- [Secrets and safety](https://github.com/evan-mcgeek/koppler/blob/main/docs/security.md): how secrets are kept, and what an agent may and may not do.
+- [Commands](https://github.com/evan-mcgeek/koppler/blob/main/docs/commands.md): every `koppler` command.
+- [Stack format](https://github.com/evan-mcgeek/koppler/blob/main/plugin/skills/koppler-run/references/stack.md): the `stack.json` reference.
+- [Releasing](https://github.com/evan-mcgeek/koppler/blob/main/docs/releasing.md): how a version tag publishes Koppler to npm.
+
+## Repository
+
+| Folder | What |
+|---|---|
+| [`app/`](https://github.com/evan-mcgeek/koppler/blob/main/app) | The `koppler` package: the command, the engine, the canvas and its local server |
+| [`plugin/`](https://github.com/evan-mcgeek/koppler/blob/main/plugin) | The agent add-on: a Claude Code plugin with the `koppler-run` skill |
+| [`docs/`](https://github.com/evan-mcgeek/koppler/blob/main/docs) | User documentation |
+
+Koppler runs from `app/dist/`, which `npm run build` makes from `app/src/` (`npm install` first).
+While working on Koppler itself, link `app/scripts/koppler-dev.mjs` as `koppler`: it rebuilds when the source is newer, then runs the build.
+Run the tests with `npm test` in `app/`; unit tests sit next to their module as `<name>.test.ts`.
+The canvas has tests of its own that drive it in a browser: `npm install`, `npx playwright install chromium` once, then `npm run test:canvas`.
+`npm run lint`, `npm run types` and `npm run format:check` are what CI checks besides the tests; `npm run format` formats.
+
+## Reporting bugs
+
+Open an [issue](https://github.com/evan-mcgeek/koppler/issues/new?template=bug_report.md) with the steps to reproduce, the logs and, if you have one, an idea for the fix.
+`koppler status --debug [app...]` gives versions and recent logs with secrets and company names taken out, ready to paste.
+With the add-on, the agent does the same on its own: when it finds a bug in Koppler, it drafts the issue and files it once you agree.
+
+## Status
+
+Early.
+Used daily on .NET, Flutter, Node and AWS (Lambda, SAM, SQS, Kafka) apps behind Cloudflare tunnels, on macOS.
+See the [project board](https://github.com/users/evan-mcgeek/projects/2) for what is next.
+
+## License
+
+[MIT](https://github.com/evan-mcgeek/koppler/blob/main/LICENSE)

package/bin/run-logged

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+# Runs a command and copies its output to the app's log file, which the canvas shows.
+# Usage: run-logged <app> -- <command...>
+set -uo pipefail
+app=${1:?usage: run-logged <app> -- <command...>}; shift
+[[ $app =~ ^[a-z0-9-]+$ ]] || { echo "invalid app id: $app" >&2; exit 1; }
+[[ ${1:-} == -- ]] && shift
+(( $# )) || { echo "usage: run-logged <app> -- <command...>" >&2; exit 1; }
+
+dir=${KOPPLER_LOGS:-$HOME/.local/state/koppler/logs}
+umask 077; mkdir -p "$dir"
+log=$dir/$app.log
+printf '%s $ %s\n' "$(date '+%Y-%m-%d %H:%M:%S')" "$*" > "$log"
+
+"$@" 2>&1 | tee -a "$log"
+exit "${PIPESTATUS[0]}"

package/bin/secret-list

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+# Lists stored secret names for an app (or all apps). Never prints values.
+set -euo pipefail
+here=$(cd "$(dirname "$(readlink -f "${BASH_SOURCE[0]}" 2>/dev/null || echo "${BASH_SOURCE[0]}")")" && pwd)
+[[ -z ${1:-} || $1 =~ ^[a-z0-9-]+(@[a-z0-9-]+)?$ ]] || { echo "invalid app id: $1" >&2; exit 1; }
+out=$("$here/secret-store" names ${1:+"$1"})
+[[ -n $out ]] && echo "$out" || echo "no secrets stored${1:+ for $1}"

package/bin/secret-psql

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+# Opens psql with a stored database connection string, or adds it to ~/.pgpass so psql and other tools find the password.
+# Run in your own terminal, not through an agent. The password is never printed.
+# Usage: secret-psql <app or app@env> <ENV_NAME> [psql args...]     open psql
+#        secret-psql <app or app@env> <ENV_NAME> --pgpass           add or replace its ~/.pgpass line; never for a protected store
+set -euo pipefail
+app=${1:?usage: secret-psql <app> <ENV_NAME> [--pgpass | psql args...]}; key=${2:?usage: secret-psql <app> <ENV_NAME> [--pgpass | psql args...]}; shift 2
+[[ $app =~ ^[a-z0-9-]+(@[a-z0-9-]+)?$ ]] || { echo "invalid app id: $app" >&2; exit 2; }
+[[ $key =~ ^[A-Za-z_][A-Za-z0-9_]*$ ]] || { echo "invalid env name: $key" >&2; exit 2; }
+here=$(cd "$(dirname "$(readlink -f "${BASH_SOURCE[0]}" 2>/dev/null || echo "${BASH_SOURCE[0]}")")" && pwd)
+if [[ ${1:-} == --pgpass ]] && "$here/secret-store" protected "$app"; then
+  echo "$app is protected: its password is never copied into a plain file. Open psql instead: koppler secret psql $app $key" >&2; exit 2
+fi
+value=$("$here/secret-store" value "$app" "$key") || value=
+[[ -n $value ]] || { echo "$key is not stored for $app" >&2; exit 2; }
+
+# ponytail: reads Key=Value;... as .NET writes it; a value containing ";" needs a real parser
+field() { printf '%s' "$value" | tr ';' '\n' | awk -F= -v k="$1" 'tolower($1) ~ "^ *(" k ") *$" { sub(/^[^=]*=/, ""); print; exit }'; }
+host=$(field 'host|server'); port=$(field 'port'); db=$(field 'database|db'); user=$(field 'username|user id|user|uid'); pass=$(field 'password|pwd')
+[[ -n $host && -n $user ]] || { echo "$key is not a database connection string Koppler reads" >&2; exit 2; }
+port=${port:-5432}; db=${db:-postgres}
+
+if [[ ${1:-} == --pgpass ]]; then
+  pgpass=${PGPASSFILE:-$HOME/.pgpass}
+  umask 077; touch "$pgpass"; chmod 600 "$pgpass"
+  esc() { printf '%s' "$1" | sed -e 's/\\/\\\\/g' -e 's/:/\\:/g'; }
+  tmp=$(mktemp "$pgpass.XXXXXX")
+  # One line per host name people type for a local tunnel.
+  hosts=("$host"); if [[ $host == localhost || $host == 127.0.0.1 ]]; then hosts=(localhost 127.0.0.1); fi
+  starts=$(for h in "${hosts[@]}"; do printf '%s:%s:%s:%s:\n' "$(esc "$h")" "$port" "$(esc "$db")" "$(esc "$user")"; done)
+  # Drops the lines it replaces, matched as plain text.
+  STARTS=$starts awk 'BEGIN { n = split(ENVIRON["STARTS"], s, "\n") } { for (i = 1; i <= n; i++) if (index($0, s[i]) == 1) next; print }' "$pgpass" > "$tmp"
+  while IFS= read -r start; do printf '%s%s\n' "$start" "$(esc "$pass")" >> "$tmp"; done <<< "$starts"
+  mv "$tmp" "$pgpass"
+  echo "Added $host:$port, database $db, user $user to $pgpass"
+  exit 0
+fi
+
+psql=$(command -v psql || ls /opt/homebrew/opt/libpq/bin/psql /usr/local/opt/libpq/bin/psql 2>/dev/null | head -1)
+[[ -n $psql ]] || { echo "psql is not installed (brew install libpq)" >&2; exit 2; }
+PGPASSWORD=$pass exec "$psql" -h "$host" -p "$port" -U "$user" -d "$db" "$@"

package/bin/secret-set

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+# Stores one secret for an app without echoing it. Run in your own terminal, not through an agent.
+# Usage: secret-set <app> <ENV_NAME>            (hidden prompt)
+#        <fetch command> | secret-set <app> <ENV_NAME> --stdin   (never shown on screen)
+# For an environment other than the stack's first, name the store <app>@<env>, e.g. orders-api@prod.
+set -euo pipefail
+here=$(cd "$(dirname "$(readlink -f "${BASH_SOURCE[0]}" 2>/dev/null || echo "${BASH_SOURCE[0]}")")" && pwd)
+app=${1:?usage: secret-set <app> <ENV_NAME>}; key=${2:?usage: secret-set <app> <ENV_NAME>}
+[[ $app =~ ^[a-z0-9-]+(@[a-z0-9-]+)?$ ]] || { echo "invalid app id: $app" >&2; exit 1; }
+[[ $key =~ ^[A-Za-z_][A-Za-z0-9_]*$ ]] || { echo "invalid env name: $key" >&2; exit 1; }
+from_stdin=false; [[ ${3:-} == --stdin ]] && from_stdin=true
+$from_stdin || [[ -t 0 ]] || { echo "run this in an interactive terminal, or pipe the value in with --stdin" >&2; exit 1; }
+
+if $from_stdin; then value=$(cat); value=${value%$'\n'}; else IFS= read -rsp "Value for $key ($app): " value; echo; fi
+[[ -n $value ]] || { echo "empty value, nothing saved" >&2; exit 1; }
+printf '%s' "$value" | "$here/secret-store" set "$app" "$key"
+echo "Saved $key for $app (${#value} chars)"

package/bin/secret-store

@@ -0,0 +1,82 @@
+#!/usr/bin/env bash
+# Where Koppler keeps secret values: the macOS Keychain, or private files where there is none (or when KOPPLER_SECRETS names a folder).
+# The other secret-* scripts and with-secrets go through this one. A store is <app> or <app>@<env>.
+# Usage: secret-store set <store> <NAME>      value on stdin
+#        secret-store names [<store>]         "<store>: NAME NAME" per store; never values
+#        secret-store value <store> <NAME>    the value, for with-secrets and the checks only
+#        secret-store remove <store> <NAME>
+#        secret-store migrate                 move values from the private files into the Keychain
+#        secret-store protected <store>       exit 0 when the store is protected
+# In the Keychain, a protected store asks you on every read; the others are readable without asking, by anything running as you.
+set -uo pipefail
+cmd=${1:?usage: secret-store set|names|value|remove|migrate|protected ...}; shift
+store=${1:-}; name=${2:-}
+dir=${KOPPLER_SECRETS:-$HOME/.config/koppler/secrets}
+backend=${KOPPLER_SECRET_BACKEND:-$([[ -z ${KOPPLER_SECRETS:-} && $(uname) == Darwin ]] && echo keychain || echo files)}
+prefix=${KOPPLER_KEYCHAIN_PREFIX:-koppler}
+# A keychain file of its own instead of the user's default one (KOPPLER_KEYCHAIN), e.g. for the tests.
+in_keychain=(); [[ -n ${KOPPLER_KEYCHAIN:-} ]] && in_keychain=("$KOPPLER_KEYCHAIN")
+
+check_store() { [[ $store =~ ^[a-z0-9-]+(@[a-z0-9-]+)?$ ]] || { echo "invalid app id: $store" >&2; exit 2; }; }
+check_name() { [[ $name =~ ^[A-Za-z_][A-Za-z0-9_]*$ ]] || { echo "invalid env name: $name" >&2; exit 2; }; }
+# Koppler says which stores are protected (KOPPLER_SECRET_PROTECTED=1 or 0, from the stack's protected environments).
+# Called without it, every store of a named environment (<app>@<env>) is protected: never decided by the environment's name.
+protected() { case ${KOPPLER_SECRET_PROTECTED:-} in 1) return 0 ;; 0) return 1 ;; esac; [[ $1 == *@* ]]; }
+
+files_set() {
+  local file=$dir/$store.env tmp value; value=$(cat)
+  umask 077; mkdir -p "$dir"; chmod 700 "$dir"; touch "$file"; chmod 600 "$file"
+  tmp=$(mktemp "$dir/.tmp.XXXXXX")
+  grep -v "^export $name=" "$file" > "$tmp" || true
+  printf 'export %s=%q\n' "$name" "$value" >> "$tmp"
+  mv "$tmp" "$file"
+}
+files_names() {
+  shopt -s nullglob
+  local f files=("$dir"/${store:-*}.env)
+  for f in "${files[@]}"; do [[ -f $f ]] && echo "$(basename "$f" .env): $(sed -nE 's/^export ([A-Za-z_][A-Za-z0-9_]*)=.*/\1/p' "$f" | paste -sd ' ' -)"; done
+  return 0
+}
+files_value() { local file=$dir/$store.env; [[ -f $file ]] || return 1; (set -a; source "$file"; [[ -n ${!name+x} ]] && printf '%s' "${!name}"); }
+files_remove() { local file=$dir/$store.env tmp; [[ -f $file ]] || return 0; tmp=$(mktemp "$dir/.tmp.XXXXXX"); grep -v "^export $name=" "$file" > "$tmp" || true; mv "$tmp" "$file"; [[ -s $file ]] || rm -f "$file"; }
+
+keychain_set() {
+  # Kept as hex text, so any value (quotes, accents, several lines) comes back exactly as it went in.
+  local hex trust; hex=$(xxd -p | tr -d '\n')
+  [[ -n $hex ]] || { echo "empty value, nothing saved" >&2; exit 1; }
+  protected "$store" && trust='-T ""' || trust='-T /usr/bin/security'
+  security delete-generic-password -s "$prefix:$store" -a "$name" ${in_keychain[@]+"${in_keychain[@]}"} >/dev/null 2>&1
+  # Through security's own prompt, so the value is never on a command line other processes can see.
+  printf 'add-generic-password -s "%s" -a "%s" -l "%s" %s -X %s%s\n' "$prefix:$store" "$name" "Koppler: $name for $store" "$trust" "$(printf '%s' "$hex" | xxd -p | tr -d '\n')" "${KOPPLER_KEYCHAIN:+ \"$KOPPLER_KEYCHAIN\"}" | security -i >/dev/null
+}
+keychain_names() {
+  security dump-keychain ${in_keychain[@]+"${in_keychain[@]}"} 2>/dev/null | awk -v p="\"svce\"<blob>=\"$prefix:" -v want="$store" '
+    /^keychain:/ { acct = ""; svce = "" }
+    index($0, "\"acct\"<blob>=\"") { v = $0; sub(/.*"acct"<blob>="/, "", v); sub(/"$/, "", v); acct = v }
+    index($0, p) { v = $0; sub(/.*"svce"<blob>="[^:]*:/, "", v); sub(/"$/, "", v); svce = v }
+    acct != "" && svce != "" { if (want == "" || want == svce) names[svce] = names[svce] " " acct; acct = ""; svce = "" }
+    END { for (s in names) print s ":" names[s] }' | sort
+}
+keychain_value() { local hex; hex=$(security find-generic-password -s "$prefix:$store" -a "$name" -w ${in_keychain[@]+"${in_keychain[@]}"} 2>/dev/null) || return 1; printf '%s' "$hex" | xxd -r -p; }
+keychain_remove() { security delete-generic-password -s "$prefix:$store" -a "$name" ${in_keychain[@]+"${in_keychain[@]}"} >/dev/null 2>&1; return 0; }
+
+case $cmd in
+  set) check_store; check_name; "${backend}_set" ;;
+  names) [[ -z $store ]] || check_store; "${backend}_names" ;;
+  value) check_store; check_name; "${backend}_value" ;;
+  remove) check_store; check_name; "${backend}_remove" ;;
+  protected) check_store; protected "$store" ;;
+  migrate)
+    [[ $backend == keychain ]] || { echo "nothing to migrate: values are kept in files here" >&2; exit 2; }
+    shopt -s nullglob
+    for f in "$dir"/*.env; do
+      store=$(basename "$f" .env); check_store; moved=0
+      for name in $(sed -nE 's/^export ([A-Za-z_][A-Za-z0-9_]*)=.*/\1/p' "$f"); do
+        files_value | keychain_set
+        security find-generic-password -s "$prefix:$store" -a "$name" ${in_keychain[@]+"${in_keychain[@]}"} >/dev/null 2>&1 || { echo "$store: $name could not be moved; its file is kept" >&2; moved=-1; break; }
+        moved=$((moved + 1))
+      done
+      (( moved >= 0 )) && { rm -f "$f"; echo "$store: moved $moved to the Keychain"; }
+    done ;;
+  *) echo "usage: secret-store set|names|value|remove|migrate|protected ..." >&2; exit 2 ;;
+esac

package/bin/secret-test

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+// Checks that a stored credential really connects (Postgres, MySQL, Redis or Valkey). Prints only the outcome, never the value.
+// Usage: secret-test <app or app@env> <ENV_NAME> [--type postgres|mysql|redis]     exit 0 connected, 1 failed, 2 cannot be tested
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const here = path.dirname(fs.realpathSync(fileURLToPath(import.meta.url)));
+const { main } = await import(path.join(here, '..', 'dist', 'secret-check.mjs'));
+await main(process.argv.slice(2), here);

package/bin/with-secrets

@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+# Runs a command with an app's stored secrets in its environment only. For a log on the canvas, start the app with `koppler run <app>` instead.
+# Usage: with-secrets <app> -- <command...>     (<app>@<env> for an environment other than the stack's first)
+set -euo pipefail
+here=$(cd "$(dirname "$(readlink -f "${BASH_SOURCE[0]}" 2>/dev/null || echo "${BASH_SOURCE[0]}")")" && pwd)
+app=${1:?usage: with-secrets <app> -- <command...>}; shift
+[[ $app =~ ^[a-z0-9-]+(@[a-z0-9-]+)?$ ]] || { echo "invalid app id: $app" >&2; exit 1; }
+[[ ${1:-} == -- ]] && shift
+(( $# )) || { echo "usage: with-secrets <app> -- <command...>" >&2; exit 1; }
+names=$("$here/secret-store" names "$app" | sed 's/^[^:]*: *//')
+[[ -n $names ]] || echo "no secrets stored for $app, running without" >&2
+for name in $names; do
+  [[ $name =~ ^[A-Za-z_][A-Za-z0-9_]*$ ]] || { echo "skipping a stored name that is not a variable name" >&2; continue; }
+  # A stored value never becomes a variable that makes a runtime load other code or find its programs elsewhere.
+  case $name in
+    PATH|NODE_OPTIONS|NODE_PATH|DYLD_*|LD_*|DOTNET_STARTUP_HOOKS|DOTNET_ADDITIONAL_DEPS|DOTNET_SHARED_STORE|CORECLR_*|COR_*|BASH_ENV|ENV|PROMPT_COMMAND|PYTHONSTARTUP|PYTHONPATH|PYTHONHOME|PYTHONINSPECT|RUBYOPT|RUBYLIB|PERL5OPT|PERL5LIB|JAVA_TOOL_OPTIONS|_JAVA_OPTIONS|JDK_JAVA_OPTIONS)
+      echo "refusing to start: the stored secret $name for $app would make the app run other code; remove it (koppler secret remove $app $name)" >&2; exit 1 ;;
+  esac
+  value=$("$here/secret-store" value "$app" "$name") || { echo "could not read $name for $app (was the Keychain prompt denied?)" >&2; exit 1; }
+  export "$name=$value"
+done
+unset value
+# Names only, so a runner can keep the values away from the tools it starts.
+export KOPPLER_SECRET_NAMES="${names//$'\n'/ }"
+exec "$@"

package/dist/.built

@@ -0,0 +1 @@
+2026-10-15T14:27:51.009Z

package/dist/cli/agent.js

@@ -0,0 +1,144 @@
+// `koppler agent init`: links the skill into each agent on this Mac and registers `koppler mcp` with it.
+// Another tool's config is only added to: a file that does not read as plain JSON is left alone, with what to add.
+import { spawnSync } from 'node:child_process';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { sh } from "../engine/processes.js";
+import { fail } from "../failure.js";
+import { APP, CODE } from "../paths.js";
+import { flagValue } from "./output.js";
+const SKILL = 'koppler-run';
+const USAGE = 'usage: koppler agent init [--agent claude,copilot,vscode,opencode] [--dry-run]';
+const home = () => os.homedir();
+const exists = (file) => fs.existsSync(file);
+const vscodeDir = () => process.platform === 'darwin'
+    ? path.join(home(), 'Library', 'Application Support', 'Code', 'User')
+    : path.join(home(), '.config', 'Code', 'User');
+const onPath = (program) => !!sh('sh', ['-c', `command -v ${program}`]);
+/** Adds one entry under a key of a JSON config file, creating the file when there is none. */
+function addToJson(file, key, value, dry) {
+    let config = {};
+    if (exists(file)) {
+        try {
+            const read = JSON.parse(fs.readFileSync(file, 'utf8'));
+            if (!read || typeof read !== 'object' || Array.isArray(read))
+                throw new Error('not an object');
+            config = read;
+        }
+        catch {
+            return `left ${file} alone (not plain JSON); add under "${key}": "koppler": ${JSON.stringify(value)}`;
+        }
+    }
+    const under = (config[key] ?? {});
+    if (JSON.stringify(under['koppler']) === JSON.stringify(value))
+        return `MCP already in ${file}`;
+    if (dry)
+        return `would add koppler to ${file}`;
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, `${JSON.stringify({ ...config, [key]: { ...under, koppler: value } }, null, 2)}\n`);
+    return `MCP added to ${file}`;
+}
+const AGENTS = {
+    claude: {
+        name: 'Claude Code',
+        here: () => exists(path.join(home(), '.claude')) || onPath('claude'),
+        skills: () => path.join(home(), '.claude', 'skills'),
+        plugin: () => {
+            try {
+                return fs
+                    .readFileSync(path.join(home(), '.claude', 'plugins', 'installed_plugins.json'), 'utf8')
+                    .includes('"koppler@');
+            }
+            catch {
+                return false;
+            }
+        },
+        mcp: (server, dry) => {
+            const add = ['mcp', 'add', '--scope', 'user', 'koppler', '--', server.command, ...server.args];
+            if (!onPath('claude'))
+                return `run: claude ${add.join(' ')}`;
+            if (spawnSync('claude', ['mcp', 'get', 'koppler'], { stdio: 'ignore' }).status === 0)
+                return 'MCP already added';
+            if (dry)
+                return `would run: claude ${add.join(' ')}`;
+            const added = spawnSync('claude', add, { encoding: 'utf8' });
+            return added.status === 0
+                ? 'MCP added (claude mcp, user scope)'
+                : `run: claude ${add.join(' ')} (${added.stderr.trim()})`;
+        },
+    },
+    copilot: {
+        name: 'GitHub Copilot CLI',
+        here: () => exists(path.join(home(), '.copilot')) || onPath('copilot'),
+        skills: () => path.join(home(), '.copilot', 'skills'),
+        mcp: (server, dry) => addToJson(path.join(home(), '.copilot', 'mcp-config.json'), 'mcpServers', { type: 'local', ...server, tools: ['*'] }, dry),
+    },
+    vscode: {
+        name: 'VS Code',
+        here: () => exists(vscodeDir()),
+        // VS Code reads skills from ~/.copilot/skills, which Copilot's own entry links.
+        skills: () => (AGENTS['copilot']?.here() ? null : path.join(home(), '.copilot', 'skills')),
+        mcp: (server, dry) => addToJson(path.join(vscodeDir(), 'mcp.json'), 'servers', { type: 'stdio', ...server }, dry),
+    },
+    opencode: {
+        name: 'OpenCode',
+        here: () => exists(path.join(home(), '.config', 'opencode')) || onPath('opencode'),
+        skills: () => path.join(home(), '.config', 'opencode', 'skills'),
+        mcp: (server, dry) => addToJson(path.join(home(), '.config', 'opencode', 'opencode.json'), 'mcp', { type: 'local', command: [server.command, ...server.args], enabled: true }, dry),
+    },
+};
+/** The skill this Koppler carries: packed into the package, or in the clone it runs from. */
+function skillSource() {
+    const found = [path.join(APP, 'skills', SKILL), path.join(APP, '..', 'plugin', 'skills', SKILL)].find(dir => exists(path.join(dir, 'SKILL.md')));
+    return found ?? fail(`the ${SKILL} skill is not in this Koppler (${APP})`);
+}
+/** Links the skill into a skills folder; a folder there that is not a link is the user's, and stays. */
+function linkSkill(dir, source, dry) {
+    const at = path.join(dir, SKILL);
+    let stat = null;
+    try {
+        stat = fs.lstatSync(at);
+    }
+    catch {
+        // Nothing there yet.
+    }
+    if (stat && !stat.isSymbolicLink())
+        return `left ${at} alone (a folder of its own); remove it to link the skill`;
+    if (stat && path.resolve(dir, fs.readlinkSync(at)) === source)
+        return `skill already linked at ${at}`;
+    if (dry)
+        return `would link the skill at ${at}`;
+    fs.mkdirSync(dir, { recursive: true });
+    if (stat)
+        fs.unlinkSync(at);
+    fs.symlinkSync(source, at);
+    return `skill linked at ${at}`;
+}
+/** `koppler agent init`: every agent found here, or the ones named, gets the skill and the MCP server. */
+export function agentCommand(args) {
+    if (args[0] !== 'init')
+        fail(USAGE);
+    const named = flagValue(args, '--agent')?.split(',').filter(Boolean);
+    for (const id of named ?? [])
+        if (!Object.hasOwn(AGENTS, id))
+            fail(`no agent called ${id} (${USAGE})`);
+    const dry = args.includes('--dry-run');
+    const chosen = Object.entries(AGENTS).filter(([id, agent]) => (named ? named.includes(id) : agent.here()));
+    if (!chosen.length)
+        fail(`found none of Claude Code, GitHub Copilot CLI, VS Code or OpenCode here; name one with --agent (${USAGE})`);
+    const source = fs.realpathSync(skillSource());
+    const server = onPath('koppler')
+        ? { command: 'koppler', args: ['mcp'] }
+        : { command: process.execPath, args: [path.join(CODE, 'koppler.mjs'), 'mcp'] };
+    for (const [, agent] of chosen) {
+        const skills = agent.skills();
+        const skill = agent.plugin?.()
+            ? 'skill comes with the koppler plugin'
+            : skills
+                ? linkSkill(skills, source, dry)
+                : 'skill shared with GitHub Copilot CLI';
+        console.log(`${agent.name}: ${skill}; ${agent.mcp(server, dry)}`);
+    }
+}
+//# sourceMappingURL=agent.js.map

package/dist/cli/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/cli/agent.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,mHAAmH;AACnH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,KAAK,GAAG,aAAa,CAAC;AAC5B,MAAM,KAAK,GAAG,gFAAgF,CAAC;AAe/F,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;AAChC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACrD,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,OAAO,CAAC,QAAQ,KAAK,QAAQ;IAC3B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,CAAC;IACrE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACnD,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,cAAc,OAAO,EAAE,CAAC,CAAC,CAAC;AAEhF,8FAA8F;AAC9F,SAAS,SAAS,CAAC,IAAY,EAAE,GAAW,EAAE,KAAc,EAAE,GAAY;IACxE,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAChE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;YAC/F,MAAM,GAAG,IAA+B,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,IAAI,uCAAuC,GAAG,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACxG,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC7D,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,kBAAkB,IAAI,EAAE,CAAC;IAChG,IAAI,GAAG;QAAE,OAAO,wBAAwB,IAAI,EAAE,CAAC;IAC/C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3G,OAAO,gBAAgB,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,MAAM,GAA0B;IACpC,MAAM,EAAE;QACN,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC;QACpE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC;QACpD,MAAM,EAAE,GAAG,EAAE;YACX,IAAI,CAAC;gBACH,OAAO,EAAE;qBACN,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,wBAAwB,CAAC,EAAE,MAAM,CAAC;qBACvF,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;YACnB,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,OAAO,eAAe,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7D,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,mBAAmB,CAAC;YACjH,IAAI,GAAG;gBAAE,OAAO,qBAAqB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAC7D,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;gBACvB,CAAC,CAAC,oCAAoC;gBACtC,CAAC,CAAC,eAAe,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC;QAC9D,CAAC;KACF;IACD,OAAO,EAAE;QACP,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC;QACtE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC;QACrD,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CACnB,SAAS,CACP,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAChD,YAAY,EACZ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,EAC1C,GAAG,CACJ;KACJ;IACD,MAAM,EAAE;QACN,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC/B,gFAAgF;QAChF,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC1F,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,GAAG,CAAC;KAClH;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC;QAClF,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC;QAChE,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CACnB,SAAS,CACP,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,CAAC,EACzD,KAAK,EACL,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAC3E,GAAG,CACJ;KACJ;CACF,CAAC;AAEF,6FAA6F;AAC7F,SAAS,WAAW;IAClB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC1G,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CACnC,CAAC;IACF,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,kCAAkC,GAAG,GAAG,CAAC,CAAC;AAC7E,CAAC;AAED,wGAAwG;AACxG,SAAS,SAAS,CAAC,GAAW,EAAE,MAAc,EAAE,GAAY;IAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjC,IAAI,IAAI,GAAoB,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IACD,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO,QAAQ,EAAE,2DAA2D,CAAC;IACjH,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,2BAA2B,EAAE,EAAE,CAAC;IACtG,IAAI,GAAG;QAAE,OAAO,2BAA2B,EAAE,EAAE,CAAC;IAChD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,IAAI,IAAI;QAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5B,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,mBAAmB,EAAE,EAAE,CAAC;AACjC,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrE,KAAK,MAAM,EAAE,IAAI,KAAK,IAAI,EAAE;QAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YAAE,IAAI,CAAC,mBAAmB,EAAE,KAAK,KAAK,GAAG,CAAC,CAAC;IACvG,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3G,IAAI,CAAC,MAAM,CAAC,MAAM;QAChB,IAAI,CAAC,mGAAmG,KAAK,GAAG,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAW,MAAM,CAAC,SAAS,CAAC;QACtC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;QACvC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;IACjF,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE;YAC5B,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,MAAM;gBACN,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC;gBAChC,CAAC,CAAC,sCAAsC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC"}