lockin-mcp 1.0.2 → 1.0.4

package/README.md

@@ -9,11 +9,13 @@ A [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server that b
 | `block_domains` | Block a list of domains (e.g. `youtube.com`, `x.com`, `tiktok.com`) |
 | `unblock_domains` | Permanently unblock specific domains |
 | `temporarily_unblock_domains` | Allow access for a limited time, then auto re-block |
-| `enter_focus_mode` | Block common distraction sites in one action |
+| `enter_focus_mode` | Block common distraction sites in one action (YouTube, X, TikTok, Instagram, Reddit, Facebook, Netflix, Twitch) |
 | `get_block_status` | Show what is blocked, temporarily allowed, and system readiness |
 
 Blocking redirects domains to `127.0.0.1` and `::1`, including `www.` variants.
 
+**Pro license required:** `block_domains`, `unblock_domains`, `temporarily_unblock_domains`, and `enter_focus_mode` require an active Pro license. `get_block_status` is read-only and works without Pro. For local development only, set `MDB_SKIP_LICENSE_CHECK=1`.
+
 ## Requirements
 
 - **macOS / Linux / Windows** (hosts-based blocking; macOS uses `dscacheutil` for DNS flush)
@@ -49,6 +51,9 @@ npm run install:local
 | Landing page (`/`) | Features, how-it-works, pricing |
 | Device auth (`/device`) | Browser login for CLI OAuth device flow |
 | Dashboard (`/dashboard`) | License keys, Pro status, install instructions |
+| Report (`/report`) | Bug reports and feature requests (rate-limited; not indexed) |
+| MCP OAuth consent (`/oauth/consent`) | Browser approval for ChatGPT / Claude web MCP connectors |
+| Checkout (`/checkout`) | Stripe checkout (requires verified email) |
 | API (`/api/v1/*`) | License verify, OAuth device flow, token status |
 | Stripe webhook | Pro upgrade + license key generation |
 
@@ -60,6 +65,14 @@ npm run install:local
 4. Installer polls `POST /api/v1/oauth/token` → receives `access_token`
 5. Daemon verifies token via `POST /api/v1/license/status` on startup and hourly
 
+### MCP OAuth (ChatGPT, Claude web)
+
+1. MCP client registers via DCR at `POST /api/v1/oauth/register` (proxied from relay at `POST /register`)
+2. Client discovers metadata from `/.well-known/oauth-authorization-server` (web app and relay)
+3. User authorizes at `/api/v1/oauth/authorize` → browser consent at `/oauth/consent`
+4. Client exchanges code at `POST /api/v1/oauth/token`
+5. MCP requests to relay use OAuth access tokens or the device `mdb_*` API key
+
 ### Environment variables
 
 See [`.env.example`](.env.example) for all configuration options.
@@ -76,14 +89,37 @@ openssl rand -base64 32   # MDB_SERVER_SECRET
 openssl rand -base64 32   # REGISTRATION_SECRET (relay)
 ```
 
-Set the same values in **both** your hosting provider (Next.js) and **Convex production** (`./scripts/sync-convex-env.sh` after filling `web/.env.local`).
+Set **Vercel** and **Convex production** env vars separately in each dashboard — do **not** copy `MDB_SERVER_SECRET` from your laptop with a sync script (local dev secrets are different from production).
+
+| Secret | Vercel | Convex prod |
+|--------|--------|-------------|
+| `MDB_SERVER_SECRET` | Yes — same value on both | Yes — `npx convex env set MDB_SERVER_SECRET '…' --prod` once |
+| `MDB_JWT_SECRET` | No | Yes — Convex only |
+| `STRIPE_*` | Yes | No |
 
 #### 2. Convex production
 
 ```bash
 cd web
 npx convex deploy          # production only — not convex dev
-./scripts/sync-convex-env.sh   # from repo root, syncs secrets to Convex
+```
+
+Set env vars in the [Convex dashboard](https://dashboard.convex.dev) → **Production** → Settings → Environment Variables. **Do not** run `./scripts/sync-convex-env.sh` for production — it only targets your dev deployment and `.env.local` often has `localhost` URLs.
+
+| Convex prod variable | Value |
+|---------------------|--------|
+| `MDB_APP_URL` | `https://www.lockinmcp.com` |
+| `MDB_SERVER_SECRET` | Same string as Vercel |
+| `MDB_JWT_SECRET` | Production JWT secret (Convex only) |
+| `GOOGLE_*` / `GITHUB_*` | Production OAuth app credentials |
+| `RESEND_API_KEY` / `RESEND_FROM_EMAIL` | Production Resend |
+| `MDB_RELAY_URL` / `MDB_RELAY_PUBLIC_URL` | `https://relay.lockinmcp.com` |
+| `REGISTRATION_SECRET` | Same as relay Worker |
+
+One-off CLI (paste production values, not from `.env.local`):
+
+```bash
+cd web && npx convex env set MDB_APP_URL 'https://www.lockinmcp.com' --prod
 ```
 
 #### 3. Stripe live mode
@@ -94,30 +130,52 @@ In [Stripe Dashboard](https://dashboard.stripe.com) (toggle **Live**):
 |----------|-----------------|
 | `STRIPE_SECRET_KEY` | Developers → API keys → `sk_live_...` |
 | `STRIPE_PRICE_ID` | Products → one-time $9.99 price → `price_...` |
-| `STRIPE_WEBHOOK_SECRET` | Developers → Webhooks → endpoint `https://lockinmcp.com/api/stripe/webhook` → `whsec_...` |
+| `STRIPE_WEBHOOK_SECRET` | Developers → Webhooks → endpoint `https://www.lockinmcp.com/api/stripe/webhook` → `whsec_...` |
 | `STRIPE_PROMOTION_CODE_ID` | Optional — locks one promo at checkout; leave unset so customers can enter any code (e.g. `LOCKIN50`) |
 
-Webhook events: **`checkout.session.completed`**
+Webhook events: **`checkout.session.completed`**, **`checkout.session.created`**, **`checkout.session.expired`** (follow-up scheduling backup)
+
+#### Abandoned checkout follow-up (24h email)
+
+When a signed-in user starts Stripe Checkout but does not pay, a follow-up email is scheduled via Convex (`ctx.scheduler.runAfter`). After deploy:
+
+```bash
+cd web && npx convex deploy
+./scripts/backfill-oauth-email-verified.sh --prod   # one-time OAuth emailVerified backfill
+```
+
+**Verify production:**
+
+1. Convex `MDB_APP_URL` is `https://www.lockinmcp.com` (not `localhost`).
+2. Vercel `MDB_SERVER_SECRET` === Convex `MDB_SERVER_SECRET`.
+2. Stripe webhook enables `checkout.session.created` and `checkout.session.expired`.
+3. Preview email: `./scripts/send-abandoned-checkout-preview.sh you@example.com`
+4. Dev smoke test (60s delay): `npx convex env set CHECKOUT_FOLLOW_UP_DELAY_MS 60000` then `./scripts/test-abandoned-checkout-schedule.sh <userId>`
+5. Inspect jobs: `./scripts/list-checkout-follow-ups.sh scheduled`
+
+Optional Convex env: `CHECKOUT_FOLLOW_UP_DELAY_MS` (default `86400000` = 24h).
 
 #### 4. OAuth (production callbacks)
 
 | Provider | Redirect URI |
 |----------|--------------|
-| Google | `https://lockinmcp.com/api/auth/oauth/google/callback` |
-| GitHub | `https://lockinmcp.com/api/auth/oauth/github/callback` |
+| Google | `https://www.lockinmcp.com/api/auth/oauth/google/callback` |
+| GitHub | `https://www.lockinmcp.com/api/auth/oauth/github/callback` |
 
-Add `GOOGLE_*` / `GITHUB_*` to `web/.env.local` and sync to Convex.
+Add `GOOGLE_*` / `GITHUB_*` to Vercel and Convex production dashboards (not dev keys from `.env.local`).
 
 #### 5. App URLs (hosting + Convex)
 
 ```bash
-MDB_APP_URL=https://lockinmcp.com
-NEXT_PUBLIC_APP_URL=https://lockinmcp.com
-MDB_LICENSE_API_URL=https://lockinmcp.com/api/v1
+MDB_APP_URL=https://www.lockinmcp.com
+NEXT_PUBLIC_APP_URL=https://www.lockinmcp.com
+MDB_LICENSE_API_URL=https://www.lockinmcp.com/api/v1
 MDB_RELAY_PUBLIC_URL=https://relay.lockinmcp.com
 MDB_RELAY_URL=https://relay.lockinmcp.com
 ```
 
+The apex domain (`lockinmcp.com`) redirects to `www` in production.
+
 #### 6. Deploy web app
 
 Deploy the `web/` Next.js app to your host (Vercel, etc.) with all env vars from `.env.example`.
@@ -126,7 +184,7 @@ Deploy the `web/` Next.js app to your host (Vercel, etc.) with all env vars from
 
 1. Sign up → verify email → checkout with a real card (or Stripe test in test mode first)
 2. Confirm `/dashboard` shows Pro + license key
-3. Run installer: `curl -fsSL https://lockinmcp.com/install | bash`
+3. Run installer: `curl -fsSL https://www.lockinmcp.com/install | bash`
 4. Approve device at `/device` → confirm MCP tunnel provisions
 
 ---
@@ -138,23 +196,31 @@ The fastest way to set up blocking, tunneling, and Poke integration:
 ### macOS / Linux (curl)
 
 ```bash
-curl -fsSL https://raw.githubusercontent.com/Kiog-Aser/mac-distraction-blocker-mcp/main/install.sh | bash
+curl -fsSL https://raw.githubusercontent.com/Kiog-Aser/LockIn/main/install.sh | bash
+```
+
+Or use the hosted installer (recommended):
+
+```bash
+curl -fsSL https://www.lockinmcp.com/install | bash
 ```
 
 ### Windows (PowerShell)
 
 ```powershell
-iwr -useb https://raw.githubusercontent.com/Kiog-Aser/mac-distraction-blocker-mcp/main/install.ps1 | iex
+iwr -useb https://raw.githubusercontent.com/Kiog-Aser/LockIn/main/install.ps1 | iex
 ```
 
 ### npm
 
 ```bash
-npx -y lockin-mcp install
+npx -y lockin-mcp@1.0.4 install
 # or from a local clone:
 npm run install:local
 ```
 
+The npm package `lockin-mcp` (v1.0.4) replaces the legacy `mac-distraction-blocker-mcp` name. Legacy bin aliases (`mac-distraction-blocker-mcp`, `mdb-install`) still work.
+
 ### What the installer does
 
 1. **Detects your platform** (macOS, Linux, or Windows)
@@ -163,7 +229,7 @@ npm run install:local
 4. **Applies initial blocks** to `/etc/hosts`
 5. **Starts the MCP HTTP server** locally with an outbound relay connection (background LaunchAgent on macOS)
 6. **Provisions a stable relay URL** (`https://relay.lockinmcp.com/device/{id}/mcp`) so Poke, Claude, and ChatGPT can reach your Mac
-7. **Connects your AI agent** — Poke, Claude Desktop, or ChatGPT (URL + API key from manifest)
+7. **Connects your AI agent** — Poke and Claude Desktop use your API key; Claude (web) and ChatGPT use OAuth via lockinmcp.com
 
 ### Installer flags (non-interactive)
 
@@ -183,22 +249,23 @@ npx -y lockin-mcp install --license-key lockin_pro_xxx --sites all --poke-recipe
 | `--poke-recipe` | Generate distraction-coach recipe URL |
 | `--mcp-auth-token <token>` | Custom bearer token for tunneled MCP |
 
-Setup details are saved to `~/.mac-distraction-blocker/setup-manifest.json`.
+Setup details are saved to `~/.lockin/setup-manifest.json`.
 
 ### Pro licensing ($9.99 lifetime — 50% off $19.99)
 
-- **Purchase**: Sign up (email or Google/GitHub), verify email, pay via Stripe
+- **Purchase**: Create an account at `/login` (email or Google/GitHub; `/signup` redirects here), verify email, pay via Stripe
 - **License key**: Available on dashboard after purchase; pass `--license-key` to installer
 - **Browser login**: Default installer flow — OAuth device authorization in your browser
 - **Auth**: Google and GitHub OAuth supported; email/password requires verification before checkout
+- **Support:** Bug reports and feature requests at `/report` (also linked in the site footer)
 
 ---
 
 ## Quick Start (manual)
 
 ```bash
-git clone <this-repo>
-cd mac-distraction-blocker-mcp
+git clone https://github.com/Kiog-Aser/LockIn
+cd LockIn
 npm install
 npm run build
 ```
@@ -213,7 +280,7 @@ node dist/index.js --stdio
 
 ## MCP Client Configuration (after installer)
 
-Your MCP URL and API key are in `~/.mac-distraction-blocker/setup-manifest.json`:
+Your MCP URL and API key are in `~/.lockin/setup-manifest.json`:
 
 - **MCP URL:** from manifest — e.g. `https://relay.lockinmcp.com/device/abc123/mcp` (Poke, Claude, ChatGPT)
 - **API key:** `mdb_…`
@@ -227,28 +294,59 @@ npx poke@latest mcp add 'https://YOUR_RELAY_HOST/device/YOUR_ID/mcp' -n 'LockIn
 
 Or set URL + API key in [poke.com/integrations](https://poke.com/integrations).
 
+### Claude (claude.ai)
+
+The installer opens a link that **pre-fills the connector name and MCP URL** (`connectorName` + `connectorUrl`). Claude web uses **OAuth** — do not paste your API key in Advanced settings. See the [connector setup guide](https://lockinmcp.com/docs/connectors#claude-web).
+
+1. Choose **Claude (claude.ai)** in the installer (or build the link with `connectorName=LockIn MCP` and your encoded MCP URL)
+2. Confirm the pre-filled MCP server URL (e.g. `https://relay.lockinmcp.com/device/abc123/mcp`)
+3. Leave Advanced OAuth settings empty. Click Add, then sign in on lockinmcp.com when Claude prompts (Pro license required)
+4. Start a new chat with LockIn enabled
+
+For Bearer/API-key auth, use **Claude Desktop** instead — the installer can write `claude_desktop_config.json` automatically.
+
 ### Claude Desktop
 
-`~/Library/Application Support/Claude/claude_desktop_config.json`:
+Claude Desktop only supports **stdio** MCP servers in `claude_desktop_config.json` — not direct `url` entries. The installer merges a config that uses [`mcp-remote`](https://www.npmjs.com/package/mcp-remote) to bridge your relay URL (requires Node.js 18+).
+
+**Config paths:**
+- macOS: `~/Library/Application Support/Claude/claude_desktop_config.json`
+- Windows: `%APPDATA%\Claude\claude_desktop_config.json`
+- Linux: `~/.config/Claude/claude_desktop_config.json`
+
+Manual example:
 
 ```json
 {
   "mcpServers": {
     "lockin-mcp": {
-      "url": "https://YOUR_TUNNEL_HOST/mcp",
-      "headers": {
-        "Authorization": "Bearer mdb_..."
+      "command": "npx",
+      "args": [
+        "-y",
+        "mcp-remote@latest",
+        "https://relay.lockinmcp.com/device/YOUR_ID/mcp",
+        "--header",
+        "Authorization:${LOCKIN_MCP_AUTH_HEADER}"
+      ],
+      "env": {
+        "LOCKIN_MCP_AUTH_HEADER": "Bearer mdb_..."
       }
     }
   }
 }
 ```
 
+On Windows, use `"command": "npx.cmd"` instead of `"npx"`. Quit Claude Desktop completely before editing, then reopen.
+
 ### ChatGPT
 
-1. Open ChatGPT → Settings → Connectors
-2. Add MCP server URL from your manifest (e.g. `https://….trycloudflare.com/mcp`)
-3. Paste API key when prompted: `mdb_...`
+Custom MCP connectors require **Developer mode** under Advanced settings. ChatGPT cannot accept credentials from an external link — copy from the installer or [setup guide](https://lockinmcp.com/docs/connectors#chatgpt).
+
+1. Open [ChatGPT → Settings → Connectors → Advanced](https://chatgpt.com/#settings/Connectors/Advanced)
+2. Enable **Developer mode**
+3. Add connector → paste MCP server URL from your manifest
+4. Set Authentication to OAuth and leave DCR enabled — sign in on lockinmcp.com when prompted (do not paste your API key in OAuth fields)
+5. Start a new chat and enable the LockIn connector
 
 ### Relay deployment (operators)
 
@@ -262,18 +360,20 @@ npx wrangler secret put MDB_JWT_SECRET   # optional, same as web app
 npm run deploy
 ```
 
-Set `MDB_RELAY_URL`, `MDB_RELAY_PUBLIC_URL`, and `REGISTRATION_SECRET` in `web/.env.local` and sync to Convex via `./scripts/sync-convex-env.sh`.
+Set relay vars on **Convex production** in the dashboard. For local dev only: `web/.env.local` + `./scripts/sync-convex-env.sh` (dev deployment).
 
 ## Privileges & `/etc/hosts`
 
 The server writes marked entries between:
 
 ```
-# mac-distraction-blocker-mcp BEGIN
+# lockin-mcp BEGIN
 ...
-# mac-distraction-blocker-mcp END
+# lockin-mcp END
 ```
 
+Legacy installs may still show `# mac-distraction-blocker-mcp` markers; those are stripped on the next hosts sync.
+
 Only those lines are touched; the rest of `/etc/hosts` is preserved.
 
 ### Option A: Run the server with `sudo` (simplest)
@@ -286,28 +386,26 @@ For stdio MCP clients, configure the client to launch with `sudo` (see client co
 
 ### Option B: Passwordless `sudo` for hosts updates (recommended)
 
-The server falls back to `sudo cp` when it cannot write `/etc/hosts` directly. To avoid prompts during tool calls, allow your user to copy a temp file into hosts without a password:
+The installer creates `~/.lockin/update-hosts.sh` and a sudoers entry at `/etc/sudoers.d/lockin-mcp-hosts` that allows your user to run that script without a password. Temp files use the prefix `lockin-mcp-hosts-{pid}`.
+
+If you installed manually, re-run the installer or configure sudoers to allow (replace `YOUR_USER` with your macOS username):
 
 ```bash
-sudo visudo -f /etc/sudoers.d/mac-distraction-blocker
+sudo visudo -f /etc/sudoers.d/lockin-mcp-hosts
 ```
 
-Add (replace `YOUR_USER` with your macOS username):
+Add:
 
 ```
-YOUR_USER ALL=(ALL) NOPASSWD: /bin/cp /tmp/mac-distraction-blocker-hosts-* /etc/hosts
-YOUR_USER ALL=(ALL) NOPASSWD: /usr/sbin/dscacheutil -flushcache
-YOUR_USER ALL=(ALL) NOPASSWD: /usr/bin/killall -HUP mDNSResponder
+YOUR_USER ALL=(ALL) NOPASSWD: /Users/YOUR_USER/.lockin/update-hosts.sh
 ```
 
+(Adjust paths for Linux/Windows as needed.)
+
 ### Verify permissions
 
 Call `get_block_status` — `hostsFileWritable: true` means the server can update blocking without extra setup.
 
-## MCP Client Configuration
-
-See **MCP Client Configuration (after installer)** above.
-
 ### Legacy: local stdio (Claude Desktop)
 
 `~/Library/Application Support/Claude/claude_desktop_config.json`:
@@ -317,12 +415,20 @@ See **MCP Client Configuration (after installer)** above.
   "mcpServers": {
     "lockin-mcp": {
       "command": "node",
-      "args": ["/absolute/path/to/mac-distraction-blocker-mcp/dist/index.js", "--stdio"]
+      "args": ["/absolute/path/to/LockIn/dist/index.js", "--stdio"]
     }
   }
 }
 ```
 
+## Security
+
+- **MCP bearer auth:** HTTP MCP requires `MDB_MCP_AUTH_TOKEN` or `--mcp-auth-token` (`mdb_*` tokens). Relay-backed HTTP refuses to start without a token.
+- **API rate limiting:** Login, signup, OAuth (account + MCP), license verify, checkout, consent, and user-report routes are rate-limited.
+- **User reports:** `POST /api/report` accepts bug/feature submissions (5 per IP per hour). Requires `RESEND_API_KEY` in production; falls back to Convex logs in dev.
+- **Relay tokens:** Device tokens are hashed at rest on the Cloudflare worker (SHA-256).
+- **Setup manifest:** Written with `0o600` permissions; contains your relay URL and API key — do not commit or share.
+
 ## Hooking up to [poke.com/kitchen](https://poke.com/kitchen)
 
 The installer tunnels your local MCP over HTTPS so Poke can connect remotely — no extra terminal tab.
@@ -379,13 +485,13 @@ No arguments. Returns blocked list, temporary allowances with expiry timestamps,
 flowchart LR
   A[MCP Client / Poke] --> R[Relay Worker]
   R --> B[MCP Server on Mac]
-  B --> C[State JSON\n~/.mac-distraction-blocker/]
+  B --> C[State JSON\n~/.lockin/]
   B --> D[/etc/hosts]
   B --> E[DNS cache flush]
   C --> B
 ```
 
-1. **State** — Block list and temporary unblocks live in `~/.mac-distraction-blocker/state.json`
+1. **State** — Block list and temporary unblocks live in `~/.lockin/state.json`
 2. **Hosts sync** — Active blocks are written to `/etc/hosts` with a managed marker
 3. **Expiry watcher** — A background timer re-applies blocks when temporary unblocks expire (server process must be running)
 4. **DNS flush** — Best-effort `dscacheutil` / `mDNSResponder` refresh after changes
@@ -397,8 +503,13 @@ npm install
 npm run dev          # watch TypeScript
 npm run build
 npm run lint
+npm test             # Vitest (root MCP tests)
+cd web && npm test   # web rate-limit tests
+cd relay && npm test # relay token hashing tests
 ```
 
+CI (`.github/workflows/ci.yml`) runs lint, test, build, and `npm audit --audit-level=high` for the MCP server, web app, and relay worker.
+
 ## Troubleshooting
 
 | Issue | Fix |
@@ -407,7 +518,7 @@ npm run lint
 | Site still loads | Hard-refresh browser; DNS cache may take a moment. Try private window. |
 | Temp unblock didn't re-block | Keep the MCP server process running (expiry watcher runs in-process) |
 | Poke can't connect | Check manifest relay URL + `/health` returns `lockin-mcp`; verify relay device is online |
-| Wrong platform | Designed for macOS; Linux may work with `/etc/hosts` but DNS flush differs |
+| Wrong platform | macOS, Linux, and Windows are supported; DNS flush behavior differs by OS |
 
 ## License
 

package/dist/blocker.js

@@ -71,12 +71,12 @@ export async function blockDomains(domains) {
     if (method === "unchanged" && newDomains.length === 0) {
         return {
             blocked: validated,
-            message: `${validated.length} domain(s) already blocked.`,
+            message: `${validated.length} site(s) already blocked.`,
         };
     }
     return {
         blocked: validated,
-        message: `Blocked ${validated.length} domain(s) via /etc/hosts (${method}).`,
+        message: `Blocked ${validated.length} site(s) via /etc/hosts (${method}).`,
     };
 }
 export async function unblockDomains(domains) {

package/dist/blocker.js.map

@@ -1 +1 @@
-{"version":3,"file":"blocker.js","sourceRoot":"","sources":["../src/blocker.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,aAAa,EACb,wBAAwB,EACxB,yBAAyB,EACzB,eAAe,EACf,SAAS,EACT,oBAAoB,EACpB,SAAS,EACT,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAIL,aAAa,EACb,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,IAAI,WAAuC,CAAC;AAC5C,IAAI,YAAY,GAAkB,IAAI,CAAC;AAEvC,MAAM,UAAU,kBAAkB,CAChC,UAAU,GAAG,MAAM;IAEnB,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IAED,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,KAAK,sBAAsB,EAAE,CAAC;IAChC,CAAC,EAAE,UAAU,CAAC,CAAC;IAEf,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,IAAI,WAAW,EAAE,CAAC;QAChB,aAAa,CAAC,WAAW,CAAC,CAAC;QAC3B,WAAW,GAAG,SAAS,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB;IACnC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAiB;QAC9B,GAAG,KAAK;QACR,iBAAiB,EAAE,MAAM;KAC1B,CAAC;IACF,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,KAAmB;IAEnB,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAChC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,eAAe,CAAC,OAAiB;IACxC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAiB;IAIlD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAEhC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,SAAS,GAAiB,gBAAgB,CAC9C;QACE,cAAc,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE;QACtC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAC7C;QACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,EACD,eAAe,EACf,SAAS,CACV,CAAC;IAEF,MAAM,cAAc,GAClB,UAAU,CAAC,MAAM,KAAK,CAAC;QACvB,SAAS,CAAC,cAAc,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc,CAAC,MAAM;QAC/D,SAAS,CAAC,iBAAiB,CAAC,MAAM,KAAK,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC;IAExE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEpD,IAAI,MAAM,KAAK,WAAW,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,GAAG,SAAS,CAAC,MAAM,6BAA6B;SAC1D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,WAAW,SAAS,CAAC,MAAM,8BAA8B,MAAM,IAAI;KAC7E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAiB;IAIpD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAErC,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACvD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CACtB,CAAC;IAEF,MAAM,SAAS,GAAiB,gBAAgB,CAC9C;QACE,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,MAAM,CACzC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CACnC;QACD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACxC;QACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,EACD,iBAAiB,EACjB,SAAS,CACV,CAAC;IAEF,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEpD,OAAO;QACL,SAAS;QACT,OAAO,EAAE,aAAa,SAAS,CAAC,MAAM,sCAAsC,MAAM,IAAI;KACvF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAiB,EACjB,eAAuB;IAKvB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,eAAe,IAAI,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,GAAG,IAAI,CAAC;IACtD,MAAM,iBAAiB,GAAG,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAEvD,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,+BAA+B,MAAM,yCAAyC,CAC/E,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,iBAAiB,CAAC,SAAS,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CACnC,CAAC;QACF,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACpC,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACvB,iBAAiB,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAiB,gBAAgB,CAC9C;QACE,GAAG,KAAK;QACR,iBAAiB;KAClB,EACD,6BAA6B,EAC7B,SAAS,CACV,CAAC;IAEF,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEpD,OAAO;QACL,oBAAoB,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,yBAAyB,SAAS,CAAC,MAAM,kBAAkB,eAAe,MAAM,MAAM,IAAI;KACpG,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,iBAAiB,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEpD,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,oBAAoB,GAAmB,EAAE,CAAC;IAEhD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAC7E,IAAI,IAAI,EAAE,CAAC;YACT,oBAAoB,CAAC,IAAI,CAAC;gBACxB,MAAM;gBACN,MAAM,EAAE,uBAAuB;gBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,MAAM;YACN,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO;QACP,oBAAoB;QACpB,UAAU,EAAE,EAAE;QACd,iBAAiB;QACjB,YAAY;KACb,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,cAAc,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,KAAmB;IAChE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,IAAI,GAAG,yBAAyB,CAAC,UAAU,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC5E,IAAI,IAAI,EAAE,CAAC;QACT,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,uBAAuB;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc;IACrD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"blocker.js","sourceRoot":"","sources":["../src/blocker.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,aAAa,EACb,wBAAwB,EACxB,yBAAyB,EACzB,eAAe,EACf,SAAS,EACT,oBAAoB,EACpB,SAAS,EACT,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAIL,aAAa,EACb,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,IAAI,WAAuC,CAAC;AAC5C,IAAI,YAAY,GAAkB,IAAI,CAAC;AAEvC,MAAM,UAAU,kBAAkB,CAChC,UAAU,GAAG,MAAM;IAEnB,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IAED,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,KAAK,sBAAsB,EAAE,CAAC;IAChC,CAAC,EAAE,UAAU,CAAC,CAAC;IAEf,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,IAAI,WAAW,EAAE,CAAC;QAChB,aAAa,CAAC,WAAW,CAAC,CAAC;QAC3B,WAAW,GAAG,SAAS,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB;IACnC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAiB;QAC9B,GAAG,KAAK;QACR,iBAAiB,EAAE,MAAM;KAC1B,CAAC;IACF,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,KAAmB;IAEnB,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAChC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,eAAe,CAAC,OAAiB;IACxC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAiB;IAIlD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAEhC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,SAAS,GAAiB,gBAAgB,CAC9C;QACE,cAAc,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE;QACtC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAC7C;QACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,EACD,eAAe,EACf,SAAS,CACV,CAAC;IAEF,MAAM,cAAc,GAClB,UAAU,CAAC,MAAM,KAAK,CAAC;QACvB,SAAS,CAAC,cAAc,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc,CAAC,MAAM;QAC/D,SAAS,CAAC,iBAAiB,CAAC,MAAM,KAAK,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC;IAExE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEpD,IAAI,MAAM,KAAK,WAAW,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,GAAG,SAAS,CAAC,MAAM,2BAA2B;SACxD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,WAAW,SAAS,CAAC,MAAM,4BAA4B,MAAM,IAAI;KAC3E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAiB;IAIpD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAErC,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACvD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CACtB,CAAC;IAEF,MAAM,SAAS,GAAiB,gBAAgB,CAC9C;QACE,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,MAAM,CACzC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CACnC;QACD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CACxC;QACD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,EACD,iBAAiB,EACjB,SAAS,CACV,CAAC;IAEF,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEpD,OAAO;QACL,SAAS;QACT,OAAO,EAAE,aAAa,SAAS,CAAC,MAAM,sCAAsC,MAAM,IAAI;KACvF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAiB,EACjB,eAAuB;IAKvB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,eAAe,IAAI,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,GAAG,IAAI,CAAC;IACtD,MAAM,iBAAiB,GAAG,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAEvD,KAAK,MAAM,MAAM,IAAI,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,+BAA+B,MAAM,yCAAyC,CAC/E,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,iBAAiB,CAAC,SAAS,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CACnC,CAAC;QACF,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACpC,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACvB,iBAAiB,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAiB,gBAAgB,CAC9C;QACE,GAAG,KAAK;QACR,iBAAiB;KAClB,EACD,6BAA6B,EAC7B,SAAS,CACV,CAAC;IAEF,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEpD,OAAO;QACL,oBAAoB,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,yBAAyB,SAAS,CAAC,MAAM,kBAAkB,eAAe,MAAM,MAAM,IAAI;KACpG,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,sBAAsB,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,iBAAiB,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEpD,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,oBAAoB,GAAmB,EAAE,CAAC;IAEhD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAC7E,IAAI,IAAI,EAAE,CAAC;YACT,oBAAoB,CAAC,IAAI,CAAC;gBACxB,MAAM;gBACN,MAAM,EAAE,uBAAuB;gBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,MAAM;YACN,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,OAAO;QACP,oBAAoB;QACpB,UAAU,EAAE,EAAE;QACd,iBAAiB;QACjB,YAAY;KACb,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,cAAc,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,KAAmB;IAChE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,IAAI,GAAG,yBAAyB,CAAC,UAAU,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC5E,IAAI,IAAI,EAAE,CAAC;QACT,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,uBAAuB;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc;IACrD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC"}

package/dist/brand.d.ts

@@ -2,11 +2,12 @@ export declare const APP_NAME = "LockIn MCP";
 export declare const APP_SLUG = "lockin-mcp";
 export declare const APP_TAGLINE = "Block distractions. Lock in focus.";
 export declare const APP_DOMAIN = "lockinmcp.com";
+export declare const CANONICAL_ORIGIN = "https://www.lockinmcp.com";
 export declare const RELAY_HOST = "relay.lockinmcp.com";
 export declare const RELAY_PUBLIC_ORIGIN = "https://relay.lockinmcp.com";
 export declare const LICENSE_PRICE_ORIGINAL = "$19.99";
 export declare const LICENSE_PRICE = "$9.99";
 export declare const LICENSE_DISCOUNT_LABEL = "50% off \u2014 forever";
 export declare const POKE_LOCKIN_RECIPE_URL = "https://poke.com/r/KQ7myvC_Xpo";
-export declare const ICON_URL = "https://lockinmcp.com/icon.png";
+export declare const ICON_URL = "https://www.lockinmcp.com/icon.png";
 //# sourceMappingURL=brand.d.ts.map

package/dist/brand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"brand.d.ts","sourceRoot":"","sources":["../src/brand.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,QAAQ,eAAe,CAAC;AACrC,eAAO,MAAM,QAAQ,eAAe,CAAC;AACrC,eAAO,MAAM,WAAW,uCAAuC,CAAC;AAChE,eAAO,MAAM,UAAU,kBAAkB,CAAC;AAC1C,eAAO,MAAM,UAAU,wBAAwB,CAAC;AAChD,eAAO,MAAM,mBAAmB,gCAA0B,CAAC;AAC3D,eAAO,MAAM,sBAAsB,WAAW,CAAC;AAC/C,eAAO,MAAM,aAAa,UAAU,CAAC;AACrC,eAAO,MAAM,sBAAsB,2BAAsB,CAAC;AAC1D,eAAO,MAAM,sBAAsB,mCAAmC,CAAC;AACvE,eAAO,MAAM,QAAQ,mCAAmC,CAAC"}
+{"version":3,"file":"brand.d.ts","sourceRoot":"","sources":["../src/brand.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,QAAQ,eAAe,CAAC;AACrC,eAAO,MAAM,QAAQ,eAAe,CAAC;AACrC,eAAO,MAAM,WAAW,uCAAuC,CAAC;AAChE,eAAO,MAAM,UAAU,kBAAkB,CAAC;AAC1C,eAAO,MAAM,gBAAgB,8BAA8B,CAAC;AAC5D,eAAO,MAAM,UAAU,wBAAwB,CAAC;AAChD,eAAO,MAAM,mBAAmB,gCAA0B,CAAC;AAC3D,eAAO,MAAM,sBAAsB,WAAW,CAAC;AAC/C,eAAO,MAAM,aAAa,UAAU,CAAC;AACrC,eAAO,MAAM,sBAAsB,2BAAsB,CAAC;AAC1D,eAAO,MAAM,sBAAsB,mCAAmC,CAAC;AACvE,eAAO,MAAM,QAAQ,uCAAiC,CAAC"}

package/dist/brand.js

@@ -2,11 +2,12 @@ export const APP_NAME = "LockIn MCP";
 export const APP_SLUG = "lockin-mcp";
 export const APP_TAGLINE = "Block distractions. Lock in focus.";
 export const APP_DOMAIN = "lockinmcp.com";
+export const CANONICAL_ORIGIN = "https://www.lockinmcp.com";
 export const RELAY_HOST = `relay.${APP_DOMAIN}`;
 export const RELAY_PUBLIC_ORIGIN = `https://${RELAY_HOST}`;
 export const LICENSE_PRICE_ORIGINAL = "$19.99";
 export const LICENSE_PRICE = "$9.99";
 export const LICENSE_DISCOUNT_LABEL = "50% off — forever";
 export const POKE_LOCKIN_RECIPE_URL = "https://poke.com/r/KQ7myvC_Xpo";
-export const ICON_URL = `https://${APP_DOMAIN}/icon.png`;
+export const ICON_URL = `${CANONICAL_ORIGIN}/icon.png`;
 //# sourceMappingURL=brand.js.map

package/dist/brand.js.map

@@ -1 +1 @@
-{"version":3,"file":"brand.js","sourceRoot":"","sources":["../src/brand.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AACrC,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AACrC,MAAM,CAAC,MAAM,WAAW,GAAG,oCAAoC,CAAC;AAChE,MAAM,CAAC,MAAM,UAAU,GAAG,eAAe,CAAC;AAC1C,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,UAAU,EAAE,CAAC;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,UAAU,EAAE,CAAC;AAC3D,MAAM,CAAC,MAAM,sBAAsB,GAAG,QAAQ,CAAC;AAC/C,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AACrC,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAC1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,gCAAgC,CAAC;AACvE,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,UAAU,WAAW,CAAC"}
+{"version":3,"file":"brand.js","sourceRoot":"","sources":["../src/brand.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AACrC,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AACrC,MAAM,CAAC,MAAM,WAAW,GAAG,oCAAoC,CAAC;AAChE,MAAM,CAAC,MAAM,UAAU,GAAG,eAAe,CAAC;AAC1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAC5D,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,UAAU,EAAE,CAAC;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,UAAU,EAAE,CAAC;AAC3D,MAAM,CAAC,MAAM,sBAAsB,GAAG,QAAQ,CAAC;AAC/C,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AACrC,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAC1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,gCAAgC,CAAC;AACvE,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,gBAAgB,WAAW,CAAC"}

package/dist/config.d.ts

@@ -1,5 +1,5 @@
 /** Production app origin when MDB_APP_URL is unset (e.g. `npx lockin-mcp install`). */
-export declare const DEFAULT_APP_URL = "https://lockinmcp.com";
+export declare const DEFAULT_APP_URL = "https://www.lockinmcp.com";
 export declare function getAppUrl(): string;
 export declare function getLicenseApiUrl(): string;
 export declare function getPurchaseUrl(): string;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,uFAAuF;AACvF,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD,wBAAgB,SAAS,IAAI,MAAM,CAMlC;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAMzC;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,uFAAuF;AACvF,eAAO,MAAM,eAAe,8BAAmB,CAAC;AAEhD,wBAAgB,SAAS,IAAI,MAAM,CAMlC;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAMzC;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC"}

package/dist/config.js

@@ -1,6 +1,6 @@
-import { APP_DOMAIN } from "./brand.js";
+import { CANONICAL_ORIGIN } from "./brand.js";
 /** Production app origin when MDB_APP_URL is unset (e.g. `npx lockin-mcp install`). */
-export const DEFAULT_APP_URL = `https://${APP_DOMAIN}`;
+export const DEFAULT_APP_URL = CANONICAL_ORIGIN;
 export function getAppUrl() {
     return (process.env.MDB_APP_URL ??
         process.env.NEXT_PUBLIC_APP_URL ??

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,uFAAuF;AACvF,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,UAAU,EAAE,CAAC;AAEvD,MAAM,UAAU,SAAS;IACvB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,eAAe,CAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACnD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,SAAS,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,GAAG,SAAS,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC;AACtE,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,uFAAuF;AACvF,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEhD,MAAM,UAAU,SAAS;IACvB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,eAAe,CAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACnD,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,SAAS,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,GAAG,SAAS,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC;AACtE,CAAC"}

package/dist/hosts-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosts-manager.d.ts","sourceRoot":"","sources":["../src/hosts-manager.ts"],"names":[],"mappings":"AA4DA,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC,CAS1D;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAErD;AAED,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CA+BhE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAyB7D;AAED,wBAAgB,gBAAgB,CAC9B,eAAe,EAAE,MAAM,EACvB,cAAc,EAAE,MAAM,EAAE,GACvB,MAAM,CAOR;AA6BD,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,CAehF;AA2CD,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAcnD;AAED,wBAAsB,aAAa,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACrE,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;IACxC,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAiBD;AAED,+DAA+D;AAC/D,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAK7D"}
+{"version":3,"file":"hosts-manager.d.ts","sourceRoot":"","sources":["../src/hosts-manager.ts"],"names":[],"mappings":"AA8DA,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC,CAS1D;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAErD;AAED,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CA+BhE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAwB7D;AAkBD,wBAAgB,gBAAgB,CAC9B,eAAe,EAAE,MAAM,EACvB,cAAc,EAAE,MAAM,EAAE,GACvB,MAAM,CAOR;AA6BD,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,CAehF;AA2CD,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAcnD;AAED,wBAAsB,aAAa,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACrE,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;IACxC,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAiBD;AAED,+DAA+D;AAC/D,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC,CAK7D"}

package/dist/hosts-manager.js

@@ -3,7 +3,7 @@ import { execFile, spawn } from "node:child_process";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { promisify } from "node:util";
-import { BLOCK_IP, BLOCK_IP_V6, MARKER, expandDomainVariants, getHostsPath, } from "./types.js";
+import { BLOCK_IP, BLOCK_IP_V6, HOSTS_MARKERS, MARKER, expandDomainVariants, getHostsPath, normalizeDomain, } from "./types.js";
 import { ensureHostsUpdaterScript, writeHostsViaPasswordlessScript, } from "./installer/hosts-sudo.js";
 import { commandExists } from "./installer/platform.js";
 const execFileAsync = promisify(execFile);
@@ -58,7 +58,7 @@ export function stripManagedEntries(hostsContent) {
     const kept = [];
     let skipping = false;
     for (const line of lines) {
-        if (line.includes(MARKER)) {
+        if (HOSTS_MARKERS.some((marker) => line.includes(marker))) {
             skipping = true;
             continue;
         }
@@ -80,27 +80,40 @@ export function stripManagedEntries(hostsContent) {
     return kept.join("\n").replace(/\n{3,}/g, "\n\n").trimEnd();
 }
 export function buildManagedSection(domains) {
-    if (domains.length === 0) {
+    const logicalSites = dedupeLogicalSites(domains);
+    if (logicalSites.length === 0) {
         return "";
     }
     const lines = [
         "",
         `${MARKER} BEGIN`,
         "# Managed by LockIn MCP — do not edit manually",
+        "# Each site lists apex + www (IPv4 + IPv6) so redirects cannot bypass the block.",
     ];
-    const uniqueHosts = new Set();
-    for (const domain of domains) {
-        for (const host of expandDomainVariants(domain)) {
-            uniqueHosts.add(host);
+    for (const site of logicalSites) {
+        const hostnames = [...new Set(expandDomainVariants(site))].sort();
+        lines.push(`# ${site}`);
+        for (const host of hostnames) {
+            lines.push(`${BLOCK_IP} ${host}`);
+            lines.push(`${BLOCK_IP_V6} ${host}`);
         }
     }
-    for (const host of [...uniqueHosts].sort()) {
-        lines.push(`${BLOCK_IP} ${host}`);
-        lines.push(`${BLOCK_IP_V6} ${host}`);
-    }
     lines.push(`${MARKER} END`);
     return lines.join("\n");
 }
+function dedupeLogicalSites(domains) {
+    const seen = new Set();
+    const result = [];
+    for (const domain of domains) {
+        const normalized = normalizeDomain(domain);
+        if (!normalized || seen.has(normalized)) {
+            continue;
+        }
+        seen.add(normalized);
+        result.push(normalized);
+    }
+    return result.sort();
+}
 export function composeHostsFile(existingContent, blockedDomains) {
     const base = stripManagedEntries(existingContent);
     const managed = buildManagedSection(blockedDomains);