krexel 0.1.0

package/README.md

@@ -0,0 +1,94 @@
+# Krexel CLI
+
+The `krexel` command ships websites via AI assistants. This CLI is the local entry point — it spawns the Krexel MCP server (`mcp-server/`) over stdio and calls its tools on your behalf.
+
+## Install
+
+From the monorepo root:
+
+```bash
+npm install
+npm run build --workspace krexel
+npm link --workspace krexel
+```
+
+From npm (once published):
+
+```bash
+npm i -g krexel
+```
+
+## Usage
+
+```bash
+# 1. Log in once (opens your browser, OAuths into Cloudflare)
+krexel login
+
+# 2. Ship a folder to a custom domain
+krexel ship ./my-site mydomain.com --framework=auto
+
+# 3. Watch what happened
+krexel logs dep_xxxxxxxx_xxxx
+
+# 4. Or roll back
+krexel rollback mydomain.com dep_yyyyyyyy_yyyy
+
+# 5. Confirm who you're signed in as
+krexel whoami
+```
+
+## Subcommands
+
+| Command | What it does |
+|---|---|
+| `krexel login [--provider=cloudflare]` | OAuth into Cloudflare (Phase 2: Vercel + Netlify throw a clear "Phase 2" error) |
+| `krexel ship <folder> <domain> [--framework=auto\|nextjs\|astro\|vite\|static]` | Ship a built folder to a domain |
+| `krexel logs <deploy_id>` | Print build logs for a deploy |
+| `krexel rollback <domain> <deploy_id>` | Pin a previous deploy as current/last-good |
+| `krexel whoami` | Print account + deploy count + state dir |
+| `krexel version` | Print version |
+| `krexel --json ...` | Global flag for machine-readable JSON |
+
+## How it works under the hood
+
+- The CLI is a thin commander program. Every subcommand calls into the Krexel MCP server's tool surface (`ship_site`, `list_deploys`, `get_logs`, `rollback`, `set_env`, `get_status`).
+- It spawns `mcp-server/dist/index.js` over stdio, sends an MCP `initialize` + `tools/call` JSON-RPC, parses the response, formats it.
+- It does NOT call the orchestrator (the Hono worker) directly. That stays an implementation detail of the MCP layer.
+
+## State directory
+
+For v1, account state lives at `$KREXEL_HOME` (defaults to `~/.krexel/`):
+
+- `state.json` — encrypted env vars + customer config
+- `uploads/<deploy_id>/` — staged deploy folders (zipped + manifest)
+
+The master key lives in `$KREXEL_MASTER_KEY` (32+ chars hex). It never touches disk.
+
+## Errors
+
+The CLI fails loud and early:
+
+- Missing CLI binary → `Install the Krexel MCP server first: npm i -g krexel-mcp` (no fake success)
+- Missing folder → `Folder does not exist: <path>`
+- MCP server returns error → surfaces upstream message verbatim
+- Network failure to orchestrator → bubbles up, never swallowed
+
+## Development
+
+```bash
+# Watch src, run tsx
+npm run dev
+
+# Type-check + emit dist
+npm run build
+
+# Run the test suite
+npm test
+
+# Lint (type-check only)
+npm run lint
+```
+
+## License
+
+MIT

package/bin/krexel

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+// Krexel CLI — `npm i -g krexel` installs this onto $PATH.
+// All real work happens in dist/cli.js (compiled from src/cli.ts).
+
+import("../dist/cli.js").catch((err) => {
+  // Last-resort error handler — keeps process.exit predictable.
+  // eslint-disable-next-line no-console
+  console.error("Error:", err instanceof Error ? err.message : String(err));
+  process.exit(1);
+});

package/dist/cli.d.ts

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+/**
+ * cli.ts — Krexel CLI entry point.
+ *
+ * Subcommands:
+ *   login [--provider=cloudflare|vercel|netlify]
+ *   ship <folder> <domain> [--framework=auto|nextjs|astro|vite|static]
+ *   logs <deploy_id>
+ *   rollback <domain> <deploy_id>
+ *   whoami
+ *   version
+ *   help      (built into commander)
+ *
+ * Conventions:
+ *   - `--json` is a global flag — emits machine-readable output for piping.
+ *   - All errors go through output.error() which exits 1.
+ *   - Every subcommand's async handler swallows its own failures and forwards
+ *     them to process.exit(1) so the user always sees a clear, actionable
+ *     message rather than a raw stack trace.
+ */
+export {};

package/dist/cli.js

@@ -0,0 +1,167 @@
+#!/usr/bin/env node
+/**
+ * cli.ts — Krexel CLI entry point.
+ *
+ * Subcommands:
+ *   login [--provider=cloudflare|vercel|netlify]
+ *   ship <folder> <domain> [--framework=auto|nextjs|astro|vite|static]
+ *   logs <deploy_id>
+ *   rollback <domain> <deploy_id>
+ *   whoami
+ *   version
+ *   help      (built into commander)
+ *
+ * Conventions:
+ *   - `--json` is a global flag — emits machine-readable output for piping.
+ *   - All errors go through output.error() which exits 1.
+ *   - Every subcommand's async handler swallows its own failures and forwards
+ *     them to process.exit(1) so the user always sees a clear, actionable
+ *     message rather than a raw stack trace.
+ */
+import { Command, Option } from "commander";
+import { readFileSync } from "node:fs";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+import { setJsonMode, error, printError } from "./output.js";
+import { runLogin } from "./login.js";
+import { runShip } from "./ship.js";
+import { runLogs } from "./logs.js";
+import { runRollback } from "./rollback.js";
+import { runWhoami } from "./whoami.js";
+import { runInit } from "./init.js";
+// ---------------------------------------------------------------------------
+// Version — read from package.json so we never drift from "npm view krexel".
+// ---------------------------------------------------------------------------
+const HERE = path.dirname(fileURLToPath(import.meta.url));
+// dist/cli.js → ../../package.json
+function readVersion() {
+    // 1. dist/cli.js → ../../package.json (production)
+    const candidates = [
+        path.resolve(HERE, "../../package.json"),
+        // 2. src/cli.ts → ../../package.json (dev — tsx)
+        path.resolve(HERE, "../../package.json"),
+    ];
+    for (const p of candidates) {
+        try {
+            const json = JSON.parse(readFileSync(p, "utf8"));
+            if (json.version)
+                return json.version;
+        }
+        catch {
+            // ignore — try next
+        }
+    }
+    return "0.0.0";
+}
+const VERSION = readVersion();
+function safe(fn) {
+    return async (...args) => {
+        try {
+            await fn(...args);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            printError(msg);
+            process.exit(1);
+        }
+    };
+}
+// ---------------------------------------------------------------------------
+// Program
+// ---------------------------------------------------------------------------
+const program = new Command();
+program
+    .name("krexel")
+    .description("Krexel CLI — login, ship, and manage deploys. Spawns the Krexel MCP server over stdio.")
+    .version(VERSION)
+    // Built-in --help output via commander.
+    .helpCommand("help [command]", "display help for command")
+    // Treat unrecognized subcommands the way every well-behaved CLI does.
+    .showHelpAfterError()
+    .option("--json", "emit machine-readable JSON output (for piping to jq)", false);
+// Per-subcommand: --version is provided by commander; we add our own `version`
+// subcommand so users get the same answer regardless of how they ask.
+program
+    .command("version")
+    .description("Print the CLI version")
+    .action(() => {
+    // eslint-disable-next-line no-console
+    console.log(`krexel ${VERSION}`);
+});
+program
+    .command("login")
+    .description("Log in to Krexel via OAuth (Cloudflare is the only wired provider in v1)")
+    .addOption(new Option("--provider <name>", "OAuth provider to log in with")
+    .choices(["cloudflare", "vercel", "netlify"])
+    .default("cloudflare"))
+    .option("--api-key <key>", "Reuse an existing API key (skips re-minting)")
+    .action(safe(async (opts) => {
+    await runLogin({ provider: opts.provider, apiKey: opts.apiKey });
+}));
+program
+    .command("ship <folder> <domain>")
+    .description("Ship a built site folder to a custom domain")
+    .addOption(new Option("--framework <name>", "Framework hint (default: auto-detect from package.json)")
+    .choices(["auto", "nextjs", "astro", "vite", "static"])
+    .default("auto"))
+    .action(safe(async (folder, domain, opts) => {
+    await runShip({ folder, domain, framework: opts.framework });
+}));
+program
+    .command("logs <deploy_id>")
+    .description("Print build logs for a deploy")
+    .action(safe(async (deployId) => {
+    await runLogs({ deployId });
+}));
+program
+    .command("rollback <domain> <deploy_id>")
+    .description("Mark a previous deploy as the current/last-good for a domain")
+    .action(safe(async (domain, deployId) => {
+    await runRollback({ domain, deployId });
+}));
+program
+    .command("whoami")
+    .description("Print account + deploy counts + state directory")
+    .action(safe(runWhoami));
+program
+    .command("init")
+    .description("Set up Krexel in one command: install + configure all AI clients + OAuth")
+    .option("--dry-run", "show what would change without writing any files", false)
+    .option("--skip-login", "skip the OAuth step (for CI / scripted installs)", false)
+    .action(safe(async (opts) => {
+    await runInit({ dryRun: Boolean(opts.dryRun), skipLogin: Boolean(opts.skipLogin) });
+}));
+// ---------------------------------------------------------------------------
+// Pre-parse — turn on JSON mode if --json was passed before commander can see it
+// (otherwise subcommands start before the global flag toggles).
+// ---------------------------------------------------------------------------
+const rawArgs = process.argv.slice(2);
+if (rawArgs.includes("--json")) {
+    setJsonMode(true);
+}
+// `version`/`help` overrides so we own their output rather than letting
+// commander route the user off to the package.json version (which is fine but
+// we'd rather be explicit and consistent).
+if (rawArgs[0] === "version") {
+    // eslint-disable-next-line no-console
+    console.log(VERSION);
+    process.exit(0);
+}
+// Silence the commander `--version` route so our own `version` subcommand is canonical.
+program.exitOverride();
+try {
+    await program.parseAsync(process.argv);
+}
+catch (err) {
+    // commander throws on parse failure (e.g. missing required arg). The error
+    // already contains a helpful message; surface it and exit non-zero.
+    const msg = err instanceof Error ? err.message : String(err);
+    // Don't double-print "krexel version" etc. for help exits.
+    if (/help/i.test(msg) || /usage/i.test(msg)) {
+        // eslint-disable-next-line no-console
+        console.log(msg);
+        process.exit(0);
+    }
+    error(msg);
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAE9E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,mCAAmC;AACnC,SAAS,WAAW;IAClB,mDAAmD;IACnD,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,oBAAoB,CAAC;QACxC,iDAAiD;QACjD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,oBAAoB,CAAC;KACzC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC;YACzE,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;AAa9B,SAAS,IAAI,CAAC,EAAc;IAC1B,OAAO,KAAK,EAAE,GAAG,IAAe,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,UAAU,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CACV,wFAAwF,CACzF;KACA,OAAO,CAAC,OAAO,CAAC;IACjB,wCAAwC;KACvC,WAAW,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;IAC1D,sEAAsE;KACrE,kBAAkB,EAAE;KACpB,MAAM,CAAC,QAAQ,EAAE,sDAAsD,EAAE,KAAK,CAAC,CAAC;AAEnF,+EAA+E;AAC/E,sEAAsE;AACtE,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,uBAAuB,CAAC;KACpC,MAAM,CAAC,GAAG,EAAE;IACX,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,0EAA0E,CAAC;KACvF,SAAS,CACR,IAAI,MAAM,CAAC,mBAAmB,EAAE,+BAA+B,CAAC;KAC7D,OAAO,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;KAC5C,OAAO,CAAC,YAAY,CAAC,CACzB;KACA,MAAM,CAAC,iBAAiB,EAAE,8CAA8C,CAAC;KACzE,MAAM,CACL,IAAI,CAAC,KAAK,EAAE,IAA2C,EAAE,EAAE;IACzD,MAAM,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC,CAAC,CACH,CAAC;AAEJ,OAAO;KACJ,OAAO,CAAC,wBAAwB,CAAC;KACjC,WAAW,CAAC,6CAA6C,CAAC;KAC1D,SAAS,CACR,IAAI,MAAM,CAAC,oBAAoB,EAAE,yDAAyD,CAAC;KACxF,OAAO,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;KACtD,OAAO,CAAC,MAAM,CAAC,CACnB;KACA,MAAM,CACL,IAAI,CAAC,KAAK,EAAE,MAAc,EAAE,MAAc,EAAE,IAA2B,EAAE,EAAE;IACzE,MAAM,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;AAC/D,CAAC,CAAC,CACH,CAAC;AAEJ,OAAO;KACJ,OAAO,CAAC,kBAAkB,CAAC;KAC3B,WAAW,CAAC,+BAA+B,CAAC;KAC5C,MAAM,CACL,IAAI,CAAC,KAAK,EAAE,QAAgB,EAAE,EAAE;IAC9B,MAAM,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC9B,CAAC,CAAC,CACH,CAAC;AAEJ,OAAO;KACJ,OAAO,CAAC,+BAA+B,CAAC;KACxC,WAAW,CAAC,8DAA8D,CAAC;KAC3E,MAAM,CACL,IAAI,CAAC,KAAK,EAAE,MAAc,EAAE,QAAgB,EAAE,EAAE;IAC9C,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC1C,CAAC,CAAC,CACH,CAAC;AAEJ,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,iDAAiD,CAAC;KAC9D,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AAE3B,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CACV,0EAA0E,CAC3E;KACA,MAAM,CAAC,WAAW,EAAE,kDAAkD,EAAE,KAAK,CAAC;KAC9E,MAAM,CAAC,cAAc,EAAE,kDAAkD,EAAE,KAAK,CAAC;KACjF,MAAM,CACL,IAAI,CAAC,KAAK,EAAE,IAA+C,EAAE,EAAE;IAC7D,MAAM,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AACtF,CAAC,CAAC,CACH,CAAC;AAEJ,8EAA8E;AAC9E,iFAAiF;AACjF,gEAAgE;AAChE,8EAA8E;AAE9E,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACtC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC/B,WAAW,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC;AAED,wEAAwE;AACxE,8EAA8E;AAC9E,2CAA2C;AAC3C,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;IAC7B,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,wFAAwF;AACxF,OAAO,CAAC,YAAY,EAAE,CAAC;AAEvB,IAAI,CAAC;IACH,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,2EAA2E;IAC3E,oEAAoE;IACpE,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,2DAA2D;IAC3D,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,CAAC;AACb,CAAC"}

package/dist/config-patchers.d.ts

@@ -0,0 +1,108 @@
+/**
+ * config-patchers.ts — typed, idempotent merge functions for each AI
+ * client's MCP server config.
+ *
+ * Every patcher follows the same contract:
+ *   1. Read the existing file; treat ENOENT as "no existing config".
+ *   2. Parse with the right format (JSON.parse or smol-toml.parse).
+ *   3. If a `krexel` entry already exists under `mcpServers` (or its
+ *      equivalent schema), LEAVE IT TOUCHED-IS — idempotent re-runs.
+ *   4. Add the `krexel` entry pointing at the resolved binary + env vars.
+ *   5. Write back atomically (write to `<path>.tmp`, then rename).
+ *   6. Re-parse after write to confirm round-trip validity.
+ *
+ * Each patcher throws on unrecoverable failure (bad JSON the user has
+ * authored themselves, perms denial). The orchestrator in init.ts
+ * catches per-patcher failures and continues with the others.
+ */
+import type { ClientId } from "./paths.js";
+/** The env vars every MCP server entry needs to point at us. */
+export declare const REQUIRED_ENV_KEYS: readonly ["KREXEL_API_URL", "KREXEL_MASTER_KEY"];
+/** A single MCP server entry, in the Claude/Codex-flavoured JSON shape. */
+export interface McpServerEntry {
+    command: string;
+    args: string[];
+    env: Record<string, string>;
+}
+export interface PatchResult {
+    /** Did we actually change anything? false = already configured. */
+    changed: boolean;
+    /** Absolute path to the file we wrote (or would write, in dry-run). */
+    path: string;
+    /** The parsed JSON/TOML content post-patch (caller may serialize differently). */
+    next: unknown;
+    /** Human-readable note — "added", "already present", "skipped (read-only)", etc. */
+    note: string;
+}
+/** Inputs every patcher shares. */
+export interface PatchInput {
+    /** Absolute path to the config file. */
+    filePath: string;
+    /** Absolute command path of the MCP server binary. */
+    binaryCommand: string;
+    /** Args the binary takes (e.g. ["./dist/index.js"] in dev). */
+    binaryArgs: string[];
+    /** Env vars to inject — caller is responsible for masking on log. */
+    env: Record<string, string>;
+    /** When true, compute the patch but DON'T touch the disk. */
+    dryRun: boolean;
+    /** Override fs ops for tests. */
+    fsAdapter?: FsAdapter;
+}
+export interface FsAdapter {
+    readFile(p: string): Promise<string>;
+    writeFile(p: string, contents: string): Promise<void>;
+    rename(p: string, newPath: string): Promise<void>;
+    exists(p: string): Promise<boolean>;
+}
+/**
+ * Pure merge helper — given an existing mcpServers object (may be missing)
+ * and a new entry, return `{changed, next}`. Public so unit tests can
+ * verify merge semantics without touching the disk.
+ */
+export declare function mergeIntoConfig(existing: Record<string, unknown> | undefined, client: ClientId, entry: McpServerEntry): {
+    changed: boolean;
+    next: Record<string, unknown>;
+};
+/** Build the krexel MCP entry that all clients share. */
+export declare function buildEntry(input: PatchInput): McpServerEntry;
+/** Mask a secret for safe log output: "abcd…wxyz". */
+export declare function maskSecret(secret: string): string;
+/**
+ * Read+merge+write for any client whose config is JSON. Parses, runs
+ * `mergeIntoConfig`, validates by re-parsing the written bytes.
+ */
+export declare function patchJsonConfig(input: PatchInput, client: ClientId): Promise<PatchResult>;
+/**
+ * Codex's `~/.codex/config.toml` uses a nested `[mcp_servers.krexel]`
+ * table. We preserve unknown keys, add `krexel` only if missing, and
+ * stringify back with smol-toml.
+ *
+ * Note: Codex historically used snake_case (`mcp_servers`); we support
+ * both spellings because the schema has drifted across releases.
+ */
+export declare function patchTomlConfig(input: PatchInput): Promise<PatchResult>;
+/** Result of persisting the master key. */
+export interface MasterKeyResult {
+    /** The key value that ended up on disk (either pre-existing or newly minted). */
+    value: string;
+    /** Paths that were inspected / written. */
+    files: string[];
+    /** True iff we had to mint a new key (false when one already existed). */
+    minted: boolean;
+}
+/**
+ * Persist the master key into a shell rc file, creating the file if it
+ * doesn't exist. Refuses to overwrite a pre-existing value.
+ *
+ * - If the file has `export KREXEL_MASTER_KEY=...` already, returns that
+ *   value (does NOT touch the file).
+ * - Otherwise appends a single line with the new value.
+ *
+ * Quoting: we always wrap in single-quotes, escaping any embedded `'`
+ * via the POSIX idiom `'\''`. The result is shell-safe by construction.
+ */
+export declare function persistMasterKeyToRc(rcPath: string, newValue: string, fsAdapter?: FsAdapter): Promise<{
+    value: string;
+    written: boolean;
+}>;

package/dist/config-patchers.js

@@ -0,0 +1,231 @@
+/**
+ * config-patchers.ts — typed, idempotent merge functions for each AI
+ * client's MCP server config.
+ *
+ * Every patcher follows the same contract:
+ *   1. Read the existing file; treat ENOENT as "no existing config".
+ *   2. Parse with the right format (JSON.parse or smol-toml.parse).
+ *   3. If a `krexel` entry already exists under `mcpServers` (or its
+ *      equivalent schema), LEAVE IT TOUCHED-IS — idempotent re-runs.
+ *   4. Add the `krexel` entry pointing at the resolved binary + env vars.
+ *   5. Write back atomically (write to `<path>.tmp`, then rename).
+ *   6. Re-parse after write to confirm round-trip validity.
+ *
+ * Each patcher throws on unrecoverable failure (bad JSON the user has
+ * authored themselves, perms denial). The orchestrator in init.ts
+ * catches per-patcher failures and continues with the others.
+ */
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
+/** The env vars every MCP server entry needs to point at us. */
+export const REQUIRED_ENV_KEYS = ["KREXEL_API_URL", "KREXEL_MASTER_KEY"];
+const realFs = {
+    readFile: (p) => fs.readFile(p, "utf8"),
+    writeFile: (p, c) => fs.writeFile(p, c, "utf8"),
+    rename: (p, np) => fs.rename(p, np),
+    exists: async (p) => {
+        try {
+            await fs.access(p);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    },
+};
+/** Atomic write: write to `<path>.tmp`, then rename. */
+async function atomicWrite(fsAdapter, filePath, contents) {
+    const tmp = `${filePath}.tmp`;
+    await fsAdapter.writeFile(tmp, contents);
+    await fsAdapter.rename(tmp, filePath);
+}
+/**
+ * Pure merge helper — given an existing mcpServers object (may be missing)
+ * and a new entry, return `{changed, next}`. Public so unit tests can
+ * verify merge semantics without touching the disk.
+ */
+export function mergeIntoConfig(existing, client, entry) {
+    // Schema differences per client — only Continue uses the experimental key.
+    const key = client === "continue" ? "experimental.modelContextProtocolServers" : "mcpServers";
+    const root = { ...(existing ?? {}) };
+    const current = root[key] ?? {};
+    if (current["krexel"] !== undefined) {
+        // Idempotent: existing entry untouched.
+        return { changed: false, next: root };
+    }
+    const nextServers = { ...current, krexel: entry };
+    root[key] = nextServers;
+    return { changed: true, next: root };
+}
+/** Build the krexel MCP entry that all clients share. */
+export function buildEntry(input) {
+    // Filter env to only what we know about — drop unknown keys the caller
+    // might have forwarded.
+    const env = {};
+    for (const k of REQUIRED_ENV_KEYS) {
+        const v = input.env[k];
+        if (typeof v === "string")
+            env[k] = v;
+    }
+    return {
+        command: input.binaryCommand,
+        args: [...input.binaryArgs],
+        env,
+    };
+}
+/** Mask a secret for safe log output: "abcd…wxyz". */
+export function maskSecret(secret) {
+    if (secret.length <= 8)
+        return "****";
+    return `${secret.slice(0, 4)}…${secret.slice(-4)}`;
+}
+// ---------------------------------------------------------------------------
+// JSON patchers (claude-code, cursor, claude-desktop, continue)
+// ---------------------------------------------------------------------------
+/**
+ * Read+merge+write for any client whose config is JSON. Parses, runs
+ * `mergeIntoConfig`, validates by re-parsing the written bytes.
+ */
+export async function patchJsonConfig(input, client) {
+    const fsAdapter = input.fsAdapter ?? realFs;
+    const exists = await fsAdapter.exists(input.filePath);
+    let existing = {};
+    if (exists) {
+        const raw = await fsAdapter.readFile(input.filePath);
+        const trimmed = raw.trim();
+        if (trimmed.length > 0) {
+            try {
+                const parsed = JSON.parse(trimmed);
+                if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+                    existing = parsed;
+                }
+            }
+            catch (err) {
+                throw new Error(`Cannot parse ${path.basename(input.filePath)} as JSON: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+    }
+    const entry = buildEntry(input);
+    const { changed, next } = mergeIntoConfig(existing, client, entry);
+    if (!changed) {
+        return {
+            changed: false,
+            path: input.filePath,
+            next,
+            note: "krexel entry already present",
+        };
+    }
+    if (input.dryRun) {
+        return { changed: true, path: input.filePath, next, note: "dry-run (not written)" };
+    }
+    const serialized = JSON.stringify(next, null, 2) + "\n";
+    await atomicWrite(fsAdapter, input.filePath, serialized);
+    // Validate round-trip.
+    const reread = await fsAdapter.readFile(input.filePath);
+    JSON.parse(reread); // throws on invalid
+    return { changed: true, path: input.filePath, next, note: "patched" };
+}
+// ---------------------------------------------------------------------------
+// TOML patcher (codex)
+// ---------------------------------------------------------------------------
+/**
+ * Codex's `~/.codex/config.toml` uses a nested `[mcp_servers.krexel]`
+ * table. We preserve unknown keys, add `krexel` only if missing, and
+ * stringify back with smol-toml.
+ *
+ * Note: Codex historically used snake_case (`mcp_servers`); we support
+ * both spellings because the schema has drifted across releases.
+ */
+export async function patchTomlConfig(input) {
+    const fsAdapter = input.fsAdapter ?? realFs;
+    const exists = await fsAdapter.exists(input.filePath);
+    let existing = {};
+    if (exists) {
+        const raw = await fsAdapter.readFile(input.filePath);
+        if (raw.trim().length > 0) {
+            try {
+                const parsed = parseToml(raw);
+                if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+                    existing = parsed;
+                }
+            }
+            catch (err) {
+                throw new Error(`Cannot parse ${path.basename(input.filePath)} as TOML: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+    }
+    // Locate the server-collection key — support both spellings.
+    const serverKey = existing["mcpServers"] !== undefined
+        ? "mcpServers"
+        : existing["mcp_servers"] !== undefined
+            ? "mcp_servers"
+            : "mcp_servers"; // default for new files
+    const current = existing[serverKey] ?? {};
+    const root = { ...existing };
+    if (current["krexel"] !== undefined) {
+        return {
+            changed: false,
+            path: input.filePath,
+            next: root,
+            note: "krexel entry already present",
+        };
+    }
+    const entry = buildEntry(input);
+    // smol-toml stringifies nested tables cleanly; we pass the entry as-is.
+    root[serverKey] = { ...current, krexel: entry };
+    if (input.dryRun) {
+        return {
+            changed: true,
+            path: input.filePath,
+            next: root,
+            note: "dry-run (not written)",
+        };
+    }
+    const serialized = stringifyToml(root);
+    await atomicWrite(fsAdapter, input.filePath, serialized);
+    // Validate round-trip.
+    const reread = await fsAdapter.readFile(input.filePath);
+    parseToml(reread);
+    return { changed: true, path: input.filePath, next: root, note: "patched" };
+}
+const MASTER_KEY_LINE = (v) => `export KREXEL_MASTER_KEY=${v}`;
+const MASTER_KEY_RE = /^export\s+KREXEL_MASTER_KEY=(.*)$/m;
+/**
+ * Persist the master key into a shell rc file, creating the file if it
+ * doesn't exist. Refuses to overwrite a pre-existing value.
+ *
+ * - If the file has `export KREXEL_MASTER_KEY=...` already, returns that
+ *   value (does NOT touch the file).
+ * - Otherwise appends a single line with the new value.
+ *
+ * Quoting: we always wrap in single-quotes, escaping any embedded `'`
+ * via the POSIX idiom `'\''`. The result is shell-safe by construction.
+ */
+export async function persistMasterKeyToRc(rcPath, newValue, fsAdapter = realFs) {
+    const quoted = `'${newValue.replace(/'/g, `'\\''`)}'`;
+    const line = MASTER_KEY_LINE(quoted);
+    const exists = await fsAdapter.exists(rcPath);
+    let content = "";
+    if (exists) {
+        content = await fsAdapter.readFile(rcPath);
+        const match = MASTER_KEY_RE.exec(content);
+        if (match) {
+            // Pre-existing — strip surrounding quotes if present so we return
+            // the raw value.
+            const raw = (match[1] ?? "").trim();
+            const stripped = raw.replace(/^'(.*)'$/, "$1");
+            return { value: stripped, written: false };
+        }
+    }
+    // Append. Ensure exactly one blank line between existing content and us.
+    const prefix = content.length === 0
+        ? ""
+        : content.endsWith("\n")
+            ? ""
+            : "\n";
+    const next = `${content}${prefix}\n# Added by \`krexel init\`\n${line}\n`;
+    await atomicWrite(fsAdapter, rcPath, next);
+    return { value: newValue, written: true };
+}
+//# sourceMappingURL=config-patchers.js.map

package/dist/config-patchers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-patchers.js","sourceRoot":"","sources":["../src/config-patchers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,WAAW,CAAC;AAI3E,gEAAgE;AAChE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,CAAU,CAAC;AA2ClF,MAAM,MAAM,GAAc;IACxB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC;IACnC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF,CAAC;AAEF,wDAAwD;AACxD,KAAK,UAAU,WAAW,CACxB,SAAoB,EACpB,QAAgB,EAChB,QAAgB;IAEhB,MAAM,GAAG,GAAG,GAAG,QAAQ,MAAM,CAAC;IAC9B,MAAM,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,QAA6C,EAC7C,MAAgB,EAChB,KAAqB;IAErB,2EAA2E;IAC3E,MAAM,GAAG,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,YAAY,CAAC;IAC9F,MAAM,IAAI,GAA4B,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;IAE9D,MAAM,OAAO,GAAI,IAAI,CAAC,GAAG,CAAyC,IAAI,EAAE,CAAC;IACzE,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QACpC,wCAAwC;QACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,WAAW,GAA4B,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3E,IAAI,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;IACxB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,uEAAuE;IACvE,wBAAwB;IACxB,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,aAAa;QAC5B,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;QAC3B,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,8EAA8E;AAC9E,gEAAgE;AAChE,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAiB,EACjB,MAAgB;IAEhB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACnC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnE,QAAQ,GAAG,MAAiC,CAAC;gBAC/C,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,gBAAgB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,aAC3C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAEnE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,IAAI;YACJ,IAAI,EAAE,8BAA8B;SACrC,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACtF,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACxD,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAEzD,uBAAuB;IACvB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB;IAExC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACxE,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAiB;IACrD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnE,QAAQ,GAAG,MAAiC,CAAC;gBAC/C,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,gBAAgB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,aAC3C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,MAAM,SAAS,GACb,QAAQ,CAAC,YAAY,CAAC,KAAK,SAAS;QAClC,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,SAAS;YACvC,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,aAAa,CAAC,CAAC,wBAAwB;IAE7C,MAAM,OAAO,GAAI,QAAQ,CAAC,SAAS,CAAyC,IAAI,EAAE,CAAC;IACnF,MAAM,IAAI,GAA4B,EAAE,GAAG,QAAQ,EAAE,CAAC;IAEtD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,8BAA8B;SACrC,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,wEAAwE;IACxE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAEhD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,uBAAuB;SAC9B,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAEzD,uBAAuB;IACvB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxD,SAAS,CAAC,MAAM,CAAC,CAAC;IAElB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC9E,CAAC;AAgBD,MAAM,eAAe,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,4BAA4B,CAAC,EAAE,CAAC;AAEvE,MAAM,aAAa,GAAG,oCAAoC,CAAC;AAE3D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,QAAgB,EAChB,YAAuB,MAAM;IAE7B,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;IACtD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAErC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACV,kEAAkE;YAClE,iBAAiB;YACjB,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC;QACjC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,IAAI,GAAG,GAAG,OAAO,GAAG,MAAM,iCAAiC,IAAI,IAAI,CAAC;IAC1E,MAAM,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC"}