omitly-mcp 5.3.0 → 5.5.0

package/dist/pdf-edit/worker.js

@@ -0,0 +1,364 @@
+/**
+ * omitly#1841 phase B: the child process that does ALL the pdf-lib work of the
+ * five page tools (design 4.2), so a hostile PDF can hang or crash this process
+ * and nothing else.
+ *
+ * Protocol: one JSON line on stdin (the request), one JSON line on stdout (the
+ * response, at most 1 MiB, never PDF bytes). The child takes ALL its settings from
+ * the request (the server starts it with an empty environment). It writes only
+ * the temp names the server issued, create-exclusive, under the output folder the
+ * server confined. It never places a final file; the server does.
+ *
+ * Lifetime: the pdf-lib work runs in a `worker_thread`; this process's main thread
+ * stays free so that it can (a) exit when stdin ends, which is how a child dies
+ * with the server even while pdf-lib is stuck in a synchronous loop, and (b) exit
+ * on its own at `timeoutMs` + 5 s.
+ *
+ * One file serves both roles: the entry point in the child process, and the
+ * script of the worker thread. Importing it (tests) runs neither.
+ */
+import { closeSync, fstatSync, openSync, readFileSync, realpathSync, unlinkSync, writeSync } from "node:fs";
+import * as path from "node:path";
+import { Worker, isMainThread, parentPort, workerData } from "node:worker_threads";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { composePages, extractPagesTo, openRangeExtractor } from "./compose.js";
+import { isEncryptedError } from "./docFacts.js";
+import { pdfInfo } from "./info.js";
+import { mergePdfs } from "./merge.js";
+import { EditRefusal } from "./refusals.js";
+export const TEMP_NAME = /^\.omitly-tmp-[0-9a-f]{16}-[0-9]{1,3}\.pdf$/;
+export const MAX_REQUEST_BYTES = 1024 * 1024;
+export const MAX_RESPONSE_BYTES = 1024 * 1024;
+const MAX_PAGES = 10_000;
+const fail = (code, extra = {}) => ({
+    v: 1,
+    ok: false,
+    code,
+    ...extra,
+});
+function isIntArray(v, min, max) {
+    return Array.isArray(v) && v.length <= MAX_PAGES && v.every((n) => Number.isInteger(n) && n >= min && n <= max);
+}
+function parseRequest(raw) {
+    const r = raw;
+    if (!r || typeof r !== "object" || r.v !== 1)
+        return null;
+    if (!["info", "merge", "extract", "split", "compose"].includes(r.op))
+        return null;
+    if (!Array.isArray(r.inputs) || r.inputs.length < 1 || r.inputs.length > 50)
+        return null;
+    if (!r.inputs.every((p) => typeof p === "string" && path.isAbsolute(p)))
+        return null;
+    if (r.op !== "merge" && r.inputs.length !== 1)
+        return null;
+    if (typeof r.outDir !== "string" || !path.isAbsolute(r.outDir))
+        return null;
+    if (!Array.isArray(r.temps) || r.temps.length > 100 || !r.temps.every((t) => typeof t === "string" && TEMP_NAME.test(t)))
+        return null;
+    const caps = r.caps;
+    if (!caps || !Number.isSafeInteger(caps.perFileBytes) || !Number.isSafeInteger(caps.totalBytes) || caps.perFileBytes < 1 || caps.totalBytes < 1)
+        return null;
+    if (!Number.isSafeInteger(r.timeoutMs) || r.timeoutMs < 1)
+        return null;
+    return r;
+}
+/** Writes one temp file the server issued: create-exclusive, size-capped while writing. */
+function writeTemp(req, index, bytes, written) {
+    const temp = req.temps[index];
+    if (temp === undefined)
+        throw new EditRefusal("failed");
+    if (bytes.length > req.caps.totalBytes || written.total + bytes.length > req.caps.totalBytes) {
+        throw new EditRefusal("output_too_large");
+    }
+    const file = path.join(req.outDir, temp);
+    // The server passes the folder as a confined REAL path. If it is not one any more (swapped
+    // for a symlink since), write nothing. A swap between this check and the open below remains
+    // possible and is a stated residual (see edit-tools.ts); hostile local users are out of scope.
+    try {
+        if (realpathSync(req.outDir) !== req.outDir)
+            throw new EditRefusal("failed");
+    }
+    catch {
+        throw new EditRefusal("failed");
+    }
+    let fd;
+    try {
+        fd = openSync(file, "wx", 0o600);
+    }
+    catch {
+        throw new EditRefusal("write_failed");
+    }
+    try {
+        const CHUNK = 1024 * 1024;
+        let off = 0;
+        while (off < bytes.length) {
+            const n = Math.min(CHUNK, bytes.length - off);
+            if (written.total + n > req.caps.totalBytes)
+                throw new EditRefusal("output_too_large");
+            writeSync(fd, bytes, off, n);
+            off += n;
+            written.total += n;
+        }
+        closeSync(fd);
+    }
+    catch (e) {
+        try {
+            closeSync(fd);
+        }
+        catch {
+            /* already closed */
+        }
+        try {
+            unlinkSync(file);
+        }
+        catch {
+            /* the server removes issued names too */
+        }
+        throw e instanceof EditRefusal ? e : new EditRefusal("write_failed");
+    }
+    return { temp, byteSize: bytes.length };
+}
+/** Open an input for reading, but only if it is still the confined REAL path the server passed:
+ *  a path that has since become (or sits behind) a symlink is refused, as for the output folder.
+ *  A swap between this check and the open remains possible (stated residual, edit-tools.ts). */
+function openInput(p) {
+    let same = false;
+    try {
+        same = realpathSync(p) === p;
+    }
+    catch {
+        same = false;
+    }
+    if (!same)
+        throw new EditRefusal("failed");
+    return openSync(p, "r");
+}
+/** Open, check and read one input. The server confined the path; this re-reads it. */
+function readInput(req, index) {
+    const inputIndex = req.op === "merge" ? index + 1 : undefined;
+    const fd = openInput(req.inputs[index]);
+    try {
+        const st = fstatSync(fd);
+        if (!st.isFile())
+            throw new EditRefusal("not_a_file", { inputIndex });
+        if (st.size > req.caps.perFileBytes)
+            throw new EditRefusal("too_large", { inputIndex });
+        const bytes = readFileSync(fd);
+        if (!bytes.subarray(0, 1024).includes("%PDF-"))
+            throw new EditRefusal("not_pdf", { inputIndex });
+        return bytes;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Size and type checks for every input BEFORE any is read (merge: the total). */
+function checkInputs(req) {
+    let total = 0;
+    req.inputs.forEach((p, i) => {
+        const inputIndex = req.op === "merge" ? i + 1 : undefined;
+        let fd;
+        try {
+            fd = openInput(p);
+        }
+        catch (e) {
+            if (e instanceof EditRefusal)
+                throw e; // not a confined real path any more: `failed`
+            throw new EditRefusal("not_a_file", { inputIndex });
+        }
+        try {
+            const st = fstatSync(fd);
+            if (!st.isFile())
+                throw new EditRefusal("not_a_file", { inputIndex });
+            if (st.size > req.caps.perFileBytes)
+                throw new EditRefusal("too_large", { inputIndex });
+            total += st.size;
+            if (req.op === "merge" && total > req.caps.totalBytes)
+                throw new EditRefusal("too_large", { inputIndex });
+        }
+        finally {
+            closeSync(fd);
+        }
+    });
+}
+const FIXED_ROTATIONS = new Set([0, 90, 180, 270]);
+function parseCompose(params) {
+    const layout = params?.layout;
+    if (!Array.isArray(layout) || layout.length < 1 || layout.length > MAX_PAGES)
+        return null;
+    const out = [];
+    for (const e of layout) {
+        if (e && typeof e === "object" && "blank" in e) {
+            if (e.blank !== true || !["previous", "A4", "Letter"].includes(e.size))
+                return null;
+            out.push({ blank: true, size: e.size });
+        }
+        else if (e && Number.isInteger(e.source) && e.source >= 1 && e.source <= 1e9 && FIXED_ROTATIONS.has(e.rotate)) {
+            out.push({ source: e.source, rotate: e.rotate });
+        }
+        else
+            return null;
+    }
+    return out;
+}
+/** Runs one request. Never throws a message out: every failure is a code. */
+export async function runRequest(req) {
+    try {
+        checkInputs(req);
+        const written = { total: 0 };
+        const params = req.params;
+        switch (req.op) {
+            case "info": {
+                const info = await pdfInfo(readInput(req, 0));
+                return { v: 1, ok: true, meta: { info }, parts: [], warnings: [], lost: [] };
+            }
+            case "merge": {
+                if (req.temps.length !== 1)
+                    return fail("failed");
+                const r = await mergePdfs(req.inputs.length, (i) => readInput(req, i));
+                const part = writeTemp(req, 0, r.bytes, written);
+                return { v: 1, ok: true, meta: { pageCount: r.pageCount, pageCounts: r.pageCounts }, parts: [part], warnings: r.warnings, lost: r.lost };
+            }
+            case "extract": {
+                if (req.temps.length !== 1 || !isIntArray(params?.pages, 0, 1e9) || params.pages.length < 1)
+                    return fail("failed");
+                const r = await extractPagesTo(readInput(req, 0), params.pages);
+                const part = writeTemp(req, 0, r.bytes, written);
+                return { v: 1, ok: true, meta: { pageCount: r.pageCount }, parts: [part], warnings: r.warnings, lost: r.lost };
+            }
+            case "split": {
+                const ranges = params?.ranges;
+                if (!Array.isArray(ranges) || ranges.length < 1 || ranges.length !== req.temps.length)
+                    return fail("failed");
+                let total = 0;
+                for (const r of ranges) {
+                    if (!isIntArray(r, 0, 1e9) || r.length < 1)
+                        return fail("failed");
+                    total += r.length;
+                }
+                if (total > MAX_PAGES)
+                    return fail("too_many_pages");
+                const bytes = readInput(req, 0);
+                const parts = [];
+                const pageCounts = [];
+                const lost = new Set();
+                const warnings = new Set();
+                // Parsed once; each range is a full default-deny extraction from that parse.
+                const extractor = await openRangeExtractor(bytes);
+                for (let i = 0; i < ranges.length; i++) {
+                    const r = await extractor.extract(ranges[i]);
+                    parts.push(writeTemp(req, i, r.bytes, written));
+                    pageCounts.push(r.pageCount);
+                    r.lost.forEach((l) => lost.add(l));
+                    r.warnings.forEach((w) => warnings.add(w));
+                }
+                return { v: 1, ok: true, meta: { pageCounts }, parts, warnings: [...warnings], lost: [...lost] };
+            }
+            case "compose": {
+                const layout = parseCompose(params);
+                if (!layout || req.temps.length !== 1)
+                    return fail("failed");
+                const r = await composePages(readInput(req, 0), layout);
+                const part = writeTemp(req, 0, r.bytes, written);
+                return { v: 1, ok: true, meta: { pageCount: r.pageCount, layout: r.layout }, parts: [part], warnings: r.warnings, lost: r.lost };
+            }
+        }
+    }
+    catch (e) {
+        if (e instanceof EditRefusal) {
+            const d = e.detail;
+            return fail(e.code, {
+                ...(typeof d.item === "number" ? { item: d.item } : {}),
+                ...(d.pageCount !== undefined ? { pageCount: d.pageCount } : {}),
+                ...(d.inputIndex !== undefined ? { inputIndex: d.inputIndex } : {}),
+            });
+        }
+        if (isEncryptedError(e))
+            return fail("encrypted");
+        return fail("failed");
+    }
+}
+// ---------------------------------------------------------------------------
+// Process roles
+// ---------------------------------------------------------------------------
+const SELF = fileURLToPath(import.meta.url);
+function isEntry() {
+    const entry = process.argv[1];
+    if (entry === undefined)
+        return false;
+    try {
+        return import.meta.url === pathToFileURL(realpathSync(entry)).href;
+    }
+    catch {
+        return false;
+    }
+}
+function heapLimitMb() {
+    for (const a of process.execArgv) {
+        const m = /^--max-old-space-size=(\d+)$/.exec(a);
+        if (m)
+            return Number(m[1]);
+    }
+    return undefined;
+}
+function respondAndExit(resp, code) {
+    let line = JSON.stringify(resp) + "\n";
+    if (Buffer.byteLength(line) > MAX_RESPONSE_BYTES)
+        line = JSON.stringify(fail("failed")) + "\n";
+    process.stdout.write(line, () => process.exit(code));
+}
+function childMain() {
+    let buf = "";
+    let started = false;
+    // Tied to the server: when its end of stdin closes, so do we.
+    process.stdin.on("end", () => process.exit(0));
+    process.stdin.on("close", () => process.exit(0));
+    process.stdin.on("error", () => process.exit(0));
+    process.stdin.setEncoding("utf8");
+    process.stdin.on("data", (chunk) => {
+        if (started)
+            return;
+        buf += chunk;
+        if (buf.length > MAX_REQUEST_BYTES)
+            return respondAndExit(fail("failed"), 3);
+        const nl = buf.indexOf("\n");
+        if (nl === -1)
+            return;
+        started = true;
+        let req = null;
+        try {
+            req = parseRequest(JSON.parse(buf.slice(0, nl)));
+        }
+        catch {
+            req = null;
+        }
+        if (!req)
+            return respondAndExit(fail("failed"), 3);
+        // The child's own backstop, in case the server is gone and stdin never ends.
+        setTimeout(() => process.exit(2), req.timeoutMs + 5000);
+        const mb = heapLimitMb();
+        let answered = false;
+        const worker = new Worker(SELF, {
+            workerData: req,
+            ...(mb ? { resourceLimits: { maxOldGenerationSizeMb: mb } } : {}),
+        });
+        worker.on("message", (resp) => {
+            answered = true;
+            respondAndExit(resp, 0);
+        });
+        worker.on("error", () => process.exit(1));
+        worker.on("exit", () => {
+            if (!answered)
+                process.exit(1);
+        });
+    });
+}
+if (isMainThread) {
+    if (isEntry())
+        childMain();
+}
+else if (parentPort) {
+    const port = parentPort;
+    runRequest(workerData).then((resp) => port.postMessage(resp), () => port.postMessage(fail("failed")));
+}
+//# sourceMappingURL=worker.js.map

package/dist/pdf-edit/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/pdf-edit/worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC5G,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAqB,MAAM,cAAc,CAAC;AACnG,OAAO,EAAE,gBAAgB,EAAiB,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,WAAW,EAAiB,MAAM,eAAe,CAAC;AAE3D,MAAM,CAAC,MAAM,SAAS,GAAG,6CAA6C,CAAC;AACvE,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7C,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9C,MAAM,SAAS,GAAG,MAAM,CAAC;AA2BzB,MAAM,IAAI,GAAG,CAAC,IAAc,EAAE,QAAoE,EAAE,EAAkB,EAAE,CAAC,CAAC;IACxH,CAAC,EAAE,CAAC;IACJ,EAAE,EAAE,KAAK;IACT,IAAI;IACJ,GAAG,KAAK;CACT,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,CAAU,EAAE,GAAW,EAAE,GAAW;IACtD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,MAAM,CAAC,GAAG,GAAiC,CAAC;IAC5C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IACzF,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9F,IAAI,CAAC,CAAC,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/I,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;IACpB,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7J,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,CAAkB,CAAC;AAC5B,CAAC;AAED,2FAA2F;AAC3F,SAAS,SAAS,CAAC,GAAkB,EAAE,KAAa,EAAE,KAAiB,EAAE,OAA0B;IACjG,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7F,MAAM,IAAI,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACzC,2FAA2F;IAC3F,4FAA4F;IAC5F,+FAA+F;IAC/F,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;QAC1B,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,OAAO,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;YAC9C,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,CAAC,CAAC;YACvF,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7B,GAAG,IAAI,CAAC,CAAC;YACT,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC;YACH,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;QACD,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;QACD,MAAM,CAAC,YAAY,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AAC1C,CAAC;AAED;;gGAEgG;AAChG,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,sFAAsF;AACtF,SAAS,SAAS,CAAC,GAAkB,EAAE,KAAa;IAClD,MAAM,UAAU,GAAG,GAAG,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACtE,IAAI,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACxF,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACjG,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,SAAS,WAAW,CAAC,GAAkB;IACrC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,UAAU,GAAG,GAAG,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,WAAW;gBAAE,MAAM,CAAC,CAAC,CAAC,8CAA8C;YACrF,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,WAAW,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YACtE,IAAI,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YACxF,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;YACjB,IAAI,GAAG,CAAC,EAAE,KAAK,OAAO,IAAI,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5G,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEnD,SAAS,YAAY,CAAC,MAAW;IAC/B,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1F,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpF,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAChH,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC;;YAAM,OAAO,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAkB;IACjD,IAAI,CAAC;QACH,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAa,CAAC;QACjC,QAAQ,GAAG,CAAC,EAAE,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC9C,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YAC/E,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAClD,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;gBACvE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACjD,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3I,CAAC;YACD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACnH,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACjD,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACjH,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;gBAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM;oBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC7G,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACvB,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;wBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAClE,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;gBACpB,CAAC;gBACD,IAAI,KAAK,GAAG,SAAS;oBAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBACrD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAChC,MAAM,KAAK,GAAyC,EAAE,CAAC;gBACvD,MAAM,UAAU,GAAa,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAY,CAAC;gBACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;gBACnC,6EAA6E;gBAC7E,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACvC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC7C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;oBAChD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBAC7B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBACnC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,CAAC;gBACD,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;YACnG,CAAC;YACD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;gBACpC,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC7D,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBACxD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACjD,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACnI,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,WAAW,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;YACnB,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;gBAClB,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,gBAAgB,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE5C,SAAS,OAAO;IACd,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,IAAoB,EAAE,IAAY;IACxD,IAAI,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,kBAAkB;QAAE,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC;IAC/F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,8DAA8D;IAC9D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACzC,IAAI,OAAO;YAAE,OAAO;QACpB,GAAG,IAAI,KAAK,CAAC;QACb,IAAI,GAAG,CAAC,MAAM,GAAG,iBAAiB;YAAE,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,OAAO;QACtB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,GAAG,GAAyB,IAAI,CAAC;QACrC,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,IAAI,CAAC;QACb,CAAC;QACD,IAAI,CAAC,GAAG;YAAE,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,6EAA6E;QAC7E,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;QACzB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE;YAC9B,UAAU,EAAE,GAAG;YACf,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAoB,EAAE,EAAE;YAC5C,QAAQ,GAAG,IAAI,CAAC;YAChB,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,YAAY,EAAE,CAAC;IACjB,IAAI,OAAO,EAAE;QAAE,SAAS,EAAE,CAAC;AAC7B,CAAC;KAAM,IAAI,UAAU,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,UAAU,CAAC;IACxB,UAAU,CAAC,UAA2B,CAAC,CAAC,IAAI,CAC1C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAChC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CACvC,CAAC;AACJ,CAAC"}

package/dist/seal.js

@@ -20,6 +20,7 @@ export const SEAL_VERDICTS = [
  * is accepted only when it equals this exact text, so an engine response can
  * never smuggle other text into this field. */
 export const SEAL_ERA_V1_LABEL = "classical-era seal (v1)";
+export const SEAL_KEY_KINDS = ["one_time", "install"];
 /** omitly#1104: spec §5's overall statuses. */
 export const AUDIT_V2_OVERALLS = [
     "pass",
@@ -126,6 +127,13 @@ export function normalizeSealResult(res) {
         auditV2Recognized: bool(res.auditV2Recognized) ?? false,
         auditV2ValidationError: str(res.auditV2ValidationError),
         ...v2,
+        // Only beside a v2 report that passed every gate (`auditV2Overall`
+        // non-null) over a valid seal; anything else is no claim.
+        sealKeyKind: v2.auditV2Overall !== null &&
+            verdict !== "seal_invalid" &&
+            SEAL_KEY_KINDS.includes(res.sealKeyKind)
+            ? res.sealKeyKind
+            : null,
         sealRemoved: res.sealRemoved === true &&
             verdictRecognized &&
             (verdict === "seal_invalid" || v2.userVerdict === "cannot_verify"),
@@ -136,6 +144,13 @@ export function normalizeSealResult(res) {
 export function sealEraLine(res) {
     return res.sealEraLabel === null ? "" : `\nSeal format: ${res.sealEraLabel}`;
 }
+/** omitly#1792: the key line printed under a summary, or "" unless the
+ * verified seal key is a one-time key. Same wording on every surface. */
+export function sealKeyLine(res) {
+    return res.sealKeyKind === "one_time"
+        ? "\nSeal key: one-time key — there is no known fingerprint to compare it with."
+        : "";
+}
 /** omitly#1593: the summary line for a removed seal (engine omitly#1591). */
 export const SEAL_REMOVED_SUMMARY = "⚠️ Seal removed — this file carries a sealed Omitly audit report but no seal: it was " +
     "re-saved or changed after it was sealed (often by opening and saving it in another app). " +

package/dist/seal.js.map

@@ -1 +1 @@
-{"version":3,"file":"seal.js","sourceRoot":"","sources":["../src/seal.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,WAAW;IACX,cAAc;IACd,0BAA0B;IAC1B,oBAAoB;IACpB,oBAAoB;IACpB,YAAY;IACZ,UAAU;CACF,CAAC;AAIX;;;+CAG+C;AAC/C,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAqE3D,+CAA+C;AAC/C,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM;IACN,8BAA8B;IAC9B,iBAAiB;IACjB,QAAQ;IACR,gBAAgB;CACR,CAAC;AAEX,iDAAiD;AACjD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,cAAc,EAAE,cAAc,EAAE,eAAe,CAAU,CAAC;AAExF;;6EAE6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,eAAe,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AAGxF;;;6DAG6D;AAC7D,MAAM,UAAU,mBAAmB,CACjC,GAA4B,EAC5B,EAAgC;IAEhC,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,IAAI,GAAG,CAAC,iBAAiB,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAC/C,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,GAAsB,CAAC,IAAI,GAAG,KAAK,MAAM,CAAC;IACnF,OAAO,KAAK,IAAI,EAAE,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED;4DAC4D;AAC5D,SAAS,eAAe,CAAC,OAAuB;IAC9C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACjC,4EAA4E;QAC5E,KAAK,8BAA8B,CAAC;QACpC,KAAK,iBAAiB;YACpB,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACjC,KAAK,QAAQ;YACX,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAChC,KAAK,gBAAgB;YACnB,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED;;oBAEoB;AACpB,MAAM,UAAU,SAAS,CAAC,GAA4B;IAKpD,IAAI,GAAG,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QACnC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,eAAwB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChG,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAgC,CAAC;QAC9E,CAAC,CAAE,GAAG,CAAC,cAAiC;QACxC,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IACpC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,GAAG,CAAC,WAAW,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC5E,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC9E,MAAM,IAAI,GAAG,CAAC,CAAU,EAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACjF,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC9E,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAmB,EAAE,CAC/C,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAEvE;;oCAEoC;AACpC,MAAM,UAAU,mBAAmB,CAAC,GAA4B;IAC9D,MAAM,iBAAiB,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAsB,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAgB,iBAAiB,CAAC,CAAC,CAAE,GAAG,CAAC,OAAuB,CAAC,CAAC,CAAC,cAAc,CAAC;IAE/F,MAAM,UAAU,GAAG,GAAG,CAAC,iBAA4B,CAAC;IACpD,MAAM,iBAAiB,GACrB,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;QAC1C,CAAC,CAAC;YACE,KAAK,EAAE,IAAI,CAAE,UAAsC,CAAC,KAAK,CAAC,IAAI,KAAK;YACnE,SAAS,EAAE,GAAG,CAAE,UAAsC,CAAC,SAAS,CAAC,IAAI,EAAE;YACvE,UAAU,EAAE,GAAG,CAAE,UAAsC,CAAC,UAAU,CAAC,IAAI,EAAE;YACzE,OAAO,EAAE,GAAG,CAAE,UAAsC,CAAC,OAAO,CAAC,IAAI,EAAE;YACnE,MAAM,EAAE,GAAG,CAAE,UAAsC,CAAC,MAAM,CAAC;SAC5D;QACH,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO;QACP,SAAS,EACP,OAAO,KAAK,0BAA0B;YACpC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,iBAAiB;gBACjB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;gBAChC,CAAC,CAAC,KAAK;QACb,WAAW,EAAE,OAAO,KAAK,0BAA0B,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;QACjF,kBAAkB,EAAE,OAAO,KAAK,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI;QAChG,eAAe,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC;QACzC,YAAY,EAAE,GAAG,CAAC,YAAY,KAAK,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI;QAC/E,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAC9B,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC5C,eAAe,EAAE,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QACzD,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;QACjC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChC,iBAAiB;QACjB,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;QACjC,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;QACnC,cAAc,EAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;QACvC,cAAc,EAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;QACvC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,KAAK;QACvD,sBAAsB,EAAE,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACvD,GAAG,EAAE;QACL,WAAW,EACT,GAAG,CAAC,WAAW,KAAK,IAAI;YACxB,iBAAiB;YACjB,CAAC,OAAO,KAAK,cAAc,IAAI,EAAE,CAAC,WAAW,KAAK,eAAe,CAAC;KACrE,CAAC;AACJ,CAAC;AAED;4CAC4C;AAC5C,MAAM,UAAU,WAAW,CAAC,GAAoC;IAC9D,OAAO,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,GAAG,CAAC,YAAY,EAAE,CAAC;AAC/E,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAC/B,uFAAuF;IACvF,2FAA2F;IAC3F,oFAAoF,CAAC;AAEvF;;;6EAG6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,OAAoB;IACrD,OAAO,OAAO,KAAK,cAAc,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,YAAY,CAAC;AAC3F,CAAC;AAED;;+CAE+C;AAC/C,MAAM,UAAU,WAAW,CAAC,GAAyB;IACnD,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,WAAW,KAAK,cAAc,CAAC;IACxE,OAAO,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,OAAoB,EAAE,QAAwB;IAC7E,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC;QACxB,KAAK,cAAc;YACjB,OAAO,QAAQ,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,cAAc,CAAC;QACrE,KAAK,eAAe;YAClB,OAAO,eAAe,CAAC;IAC3B,CAAC;AACH,CAAC"}
+{"version":3,"file":"seal.js","sourceRoot":"","sources":["../src/seal.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,WAAW;IACX,cAAc;IACd,0BAA0B;IAC1B,oBAAoB;IACpB,oBAAoB;IACpB,YAAY;IACZ,UAAU;CACF,CAAC;AAIX;;;+CAG+C;AAC/C,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AA2E3D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,UAAU,EAAE,SAAS,CAAU,CAAC;AAG/D,+CAA+C;AAC/C,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM;IACN,8BAA8B;IAC9B,iBAAiB;IACjB,QAAQ;IACR,gBAAgB;CACR,CAAC;AAEX,iDAAiD;AACjD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,cAAc,EAAE,cAAc,EAAE,eAAe,CAAU,CAAC;AAExF;;6EAE6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,eAAe,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AAGxF;;;6DAG6D;AAC7D,MAAM,UAAU,mBAAmB,CACjC,GAA4B,EAC5B,EAAgC;IAEhC,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,IAAI,GAAG,CAAC,iBAAiB,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAC/C,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,GAAsB,CAAC,IAAI,GAAG,KAAK,MAAM,CAAC;IACnF,OAAO,KAAK,IAAI,EAAE,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED;4DAC4D;AAC5D,SAAS,eAAe,CAAC,OAAuB;IAC9C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACjC,4EAA4E;QAC5E,KAAK,8BAA8B,CAAC;QACpC,KAAK,iBAAiB;YACpB,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACjC,KAAK,QAAQ;YACX,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAChC,KAAK,gBAAgB;YACnB,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED;;oBAEoB;AACpB,MAAM,UAAU,SAAS,CAAC,GAA4B;IAKpD,IAAI,GAAG,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QACnC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,eAAwB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChG,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAgC,CAAC;QAC9E,CAAC,CAAE,GAAG,CAAC,cAAiC;QACxC,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IACpC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,GAAG,CAAC,WAAW,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC5E,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC9E,MAAM,IAAI,GAAG,CAAC,CAAU,EAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACjF,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC9E,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAmB,EAAE,CAC/C,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAEvE;;oCAEoC;AACpC,MAAM,UAAU,mBAAmB,CAAC,GAA4B;IAC9D,MAAM,iBAAiB,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAsB,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAgB,iBAAiB,CAAC,CAAC,CAAE,GAAG,CAAC,OAAuB,CAAC,CAAC,CAAC,cAAc,CAAC;IAE/F,MAAM,UAAU,GAAG,GAAG,CAAC,iBAA4B,CAAC;IACpD,MAAM,iBAAiB,GACrB,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;QAC1C,CAAC,CAAC;YACE,KAAK,EAAE,IAAI,CAAE,UAAsC,CAAC,KAAK,CAAC,IAAI,KAAK;YACnE,SAAS,EAAE,GAAG,CAAE,UAAsC,CAAC,SAAS,CAAC,IAAI,EAAE;YACvE,UAAU,EAAE,GAAG,CAAE,UAAsC,CAAC,UAAU,CAAC,IAAI,EAAE;YACzE,OAAO,EAAE,GAAG,CAAE,UAAsC,CAAC,OAAO,CAAC,IAAI,EAAE;YACnE,MAAM,EAAE,GAAG,CAAE,UAAsC,CAAC,MAAM,CAAC;SAC5D;QACH,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO;QACP,SAAS,EACP,OAAO,KAAK,0BAA0B;YACpC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,iBAAiB;gBACjB,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;gBAChC,CAAC,CAAC,KAAK;QACb,WAAW,EAAE,OAAO,KAAK,0BAA0B,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;QACjF,kBAAkB,EAAE,OAAO,KAAK,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI;QAChG,eAAe,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC;QACzC,YAAY,EAAE,GAAG,CAAC,YAAY,KAAK,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI;QAC/E,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAC9B,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC5C,eAAe,EAAE,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QACzD,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;QACjC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7B,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChC,iBAAiB;QACjB,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;QACjC,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;QACnC,cAAc,EAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;QACvC,cAAc,EAAE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;QACvC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,KAAK;QACvD,sBAAsB,EAAE,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACvD,GAAG,EAAE;QACL,mEAAmE;QACnE,0DAA0D;QAC1D,WAAW,EACT,EAAE,CAAC,cAAc,KAAK,IAAI;YAC1B,OAAO,KAAK,cAAc;YAC1B,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,WAA0B,CAAC;YACrD,CAAC,CAAE,GAAG,CAAC,WAA2B;YAClC,CAAC,CAAC,IAAI;QACV,WAAW,EACT,GAAG,CAAC,WAAW,KAAK,IAAI;YACxB,iBAAiB;YACjB,CAAC,OAAO,KAAK,cAAc,IAAI,EAAE,CAAC,WAAW,KAAK,eAAe,CAAC;KACrE,CAAC;AACJ,CAAC;AAED;4CAC4C;AAC5C,MAAM,UAAU,WAAW,CAAC,GAAoC;IAC9D,OAAO,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,GAAG,CAAC,YAAY,EAAE,CAAC;AAC/E,CAAC;AAED;yEACyE;AACzE,MAAM,UAAU,WAAW,CAAC,GAAwC;IAClE,OAAO,GAAG,CAAC,WAAW,KAAK,UAAU;QACnC,CAAC,CAAC,8EAA8E;QAChF,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAC/B,uFAAuF;IACvF,2FAA2F;IAC3F,oFAAoF,CAAC;AAEvF;;;6EAG6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,OAAoB;IACrD,OAAO,OAAO,KAAK,cAAc,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,YAAY,CAAC;AAC3F,CAAC;AAED;;+CAE+C;AAC/C,MAAM,UAAU,WAAW,CAAC,GAAyB;IACnD,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,WAAW,KAAK,cAAc,CAAC;IACxE,OAAO,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,OAAoB,EAAE,QAAwB;IAC7E,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,cAAc;YACjB,OAAO,cAAc,CAAC;QACxB,KAAK,cAAc;YACjB,OAAO,QAAQ,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,cAAc,CAAC;QACrE,KAAK,eAAe;YAClB,OAAO,eAAe,CAAC;IAC3B,CAAC;AACH,CAAC"}

package/dist/skill-prompt.js

@@ -0,0 +1,108 @@
+/**
+ * omitly#1641 option (a): serve the shipped Claude skill as an MCP prompt.
+ *
+ * `skill/SKILL.md` is in every npm tarball (package.json `files`) and is the
+ * same file the Claude Code plugin installs, but before this the server never
+ * read it, so a Claude Desktop / Cursor / any-MCP-client user had no way to
+ * find it. Exposing it as a prompt puts it in the client's own prompt picker.
+ *
+ * The prompt is READ from the shipped file at runtime, never copied into code,
+ * so there is one source of truth: editing SKILL.md changes the prompt, and
+ * `skill-prompt.test.ts` asserts the served text equals the file's body.
+ *
+ * Fail-soft by design: the prompt is a convenience, so a missing or malformed
+ * skill file (a dev tree, a repackaged install) skips the prompt with one
+ * stderr line and never stops the tools from registering.
+ */
+import { readFileSync } from "node:fs";
+import { z } from "zod";
+export const SKILL_PROMPT_NAME = "omitly-redaction";
+/** Where the shipped skill lives relative to the built `dist/` module. */
+export const SKILL_URL = new URL("../skill/SKILL.md", import.meta.url);
+/**
+ * Split a SKILL.md into its frontmatter `name` / `description` and its body.
+ * Only the two keys the prompt needs are read; `description` may be a YAML
+ * folded block (`>-`), which is all the shipped file uses. Returns undefined
+ * for anything that does not look like a skill, so the caller can skip.
+ */
+export function parseSkill(text) {
+    const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/.exec(text);
+    if (!m)
+        return undefined;
+    const [, front, rest] = m;
+    const lines = front.split(/\r?\n/);
+    let name = "";
+    let description = "";
+    for (let i = 0; i < lines.length; i++) {
+        const kv = /^([A-Za-z_-]+):\s*(.*)$/.exec(lines[i]);
+        if (!kv)
+            continue;
+        const [, key, value] = kv;
+        let v = value.trim();
+        if (/^[>|][+-]?$/.test(v)) {
+            const block = [];
+            while (i + 1 < lines.length && /^\s+\S/.test(lines[i + 1]))
+                block.push(lines[++i].trim());
+            v = block.join(" ");
+        }
+        else {
+            v = v.replace(/^(["'])(.*)\1$/, "$2");
+        }
+        if (key === "name")
+            name = v;
+        if (key === "description")
+            description = v;
+    }
+    // Drop HTML comments: they are maintainer notes (claims-lint suppressions
+    // citing internal issues), invisible in a rendered skill, and must not be
+    // sent to a customer's model as prompt text.
+    const body = rest
+        .replace(/^[ \t]*<!--[\s\S]*?-->[ \t]*\r?\n/gm, "")
+        .replace(/<!--[\s\S]*?-->/g, "")
+        .trim();
+    if (!name || !description || !body)
+        return undefined;
+    return { name, description, body };
+}
+/** Read and parse the shipped skill; undefined if absent or malformed. */
+export function loadShippedSkill(url = SKILL_URL) {
+    let text;
+    try {
+        text = readFileSync(url, "utf8");
+    }
+    catch {
+        return undefined;
+    }
+    return parseSkill(text);
+}
+/**
+ * Register the skill as the `omitly-redaction` prompt. Returns whether it was
+ * registered. The optional `pdfPath` argument is appended as plain text for
+ * the model; it is NOT a tool input, so it is not confined here — any tool the
+ * model then calls with it goes through paths.ts as usual.
+ */
+export function registerSkillPrompt(server, url = SKILL_URL) {
+    const skill = loadShippedSkill(url);
+    if (!skill) {
+        console.error(`[omitly-mcp] skill prompt not registered: ${url.pathname} missing or not a SKILL.md`);
+        return false;
+    }
+    server.registerPrompt(SKILL_PROMPT_NAME, {
+        title: "Check a PDF before it leaves the machine",
+        description: skill.description,
+        argsSchema: {
+            pdfPath: z
+                .string()
+                .optional()
+                .describe("Local path of the PDF to check (optional; you will be asked if omitted)"),
+        },
+    }, ({ pdfPath }) => {
+        const p = pdfPath?.trim();
+        const text = p
+            ? `${skill.body}\n\n---\n\nThe user wants this local PDF checked: ${p}`
+            : skill.body;
+        return { messages: [{ role: "user", content: { type: "text", text } }] };
+    });
+    return true;
+}
+//# sourceMappingURL=skill-prompt.js.map

package/dist/skill-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-prompt.js","sourceRoot":"","sources":["../src/skill-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAEpD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAQvE;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QACrB,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1F,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,GAAG,KAAK,MAAM;YAAE,IAAI,GAAG,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,aAAa;YAAE,WAAW,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,0EAA0E;IAC1E,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,IAAI,GAAG,IAAI;SACd,OAAO,CAAC,qCAAqC,EAAE,EAAE,CAAC;SAClD,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,IAAI,EAAE,CAAC;IACV,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IACrD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,MAAW,SAAS;IACnD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,MAAW,SAAS;IACzE,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,6CAA6C,GAAG,CAAC,QAAQ,4BAA4B,CAAC,CAAC;QACrG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,CAAC,cAAc,CACnB,iBAAiB,EACjB;QACE,KAAK,EAAE,0CAA0C;QACjD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU,EAAE;YACV,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,yEAAyE,CAAC;SACvF;KACF,EACD,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;QACd,MAAM,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,CAAC;YACZ,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,qDAAqD,CAAC,EAAE;YACvE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACf,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;IAC7F,CAAC,CACF,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/usage.js

@@ -36,6 +36,8 @@ import { chmodSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
 import * as os from "node:os";
 import * as path from "node:path";
+/** Marketing-site URL carrying the acquisition tag the website records as source "mcp" (omitly#1854). Every user-facing link from this package to omitly.app uses it. */
+export const OMITLY_SITE_URL = "https://omitly.app/?via=mcp";
 export const DEFAULT_FREE_CAP = 10;
 export function stateDir() {
     return process.env.OMITLY_STATE_DIR || path.join(os.homedir(), ".omitly");
@@ -149,7 +151,7 @@ export function freeCapRefusal(tool, o) {
         cap: o.cap,
         message: `Free-tier limit reached: ${o.cap} free redaction checks per month, counted locally on this machine (nothing is uploaded). ` +
             `The count resets next month. For unlimited checking — plus actual removal, independent verification and a tamper-evident certificate — ` +
-            `activate the Omitly engine: https://omitly.app. Verification tools (verify_redaction, verify_seal) remain free and uncapped.`,
+            `activate the Omitly engine: ${OMITLY_SITE_URL} \u2014 verify_redaction remains free and uncapped. verify_seal needs the native engine.`,
     };
 }
 /** One-line banner prepended to every free (unlicensed, wasm-served) leak

package/dist/usage.js.map

@@ -1 +1 @@
-{"version":3,"file":"usage.js","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAkBnC,MAAM,UAAU,QAAQ;IACtB,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,YAAY,CAAC,CAAC;AAC7C,CAAC;AAED;;gFAEgF;AAChF,MAAM,UAAU,OAAO;IACrB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,QAAQ,CAAC,MAAY,IAAI,IAAI,EAAE;IAC7C,OAAO,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACxE,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAY,CAAC;QACrE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,GAA8B,CAAC;YACzC,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,IAAI,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAsC,CAAC,EAAE,CAAC;oBAC9E,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACrF,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC3B,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,KAAK;gBAClB,UAAU,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE;gBAC1F,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IACD,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,aAAa,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,oBAAoB;QACpB,SAAS,CAAC,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,0EAA0E;QAC1E,4CAA4C;IAC9C,CAAC;AACH,CAAC;AAED;mEACmE;AACnE,MAAM,SAAS,GAA2B,EAAE,CAAC;AAE7C;6EAC6E;AAC7E,MAAM,UAAU,eAAe;IAC7B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAY,IAAI,IAAI,EAAE;IACpD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAChF,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IACxB,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,IAAI,GAA2B,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAChF,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAClD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,CAAmB;IAS9D,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,UAAU;QAClB,IAAI;QACJ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,OAAO,EACL,4BAA4B,CAAC,CAAC,GAAG,2FAA2F;YAC5H,yIAAyI;YACzI,8HAA8H;KACjI,CAAC;AACJ,CAAC;AAED;;uEAEuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,CAAmB;IAClD,OAAO,CACL,mFAAmF;QACnF,+CAA+C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,gCAAgC,CAChH,CAAC;AACJ,CAAC"}
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,yKAAyK;AACzK,MAAM,CAAC,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAE7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAkBnC,MAAM,UAAU,QAAQ;IACtB,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,YAAY,CAAC,CAAC;AAC7C,CAAC;AAED;;gFAEgF;AAChF,MAAM,UAAU,OAAO;IACrB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,QAAQ,CAAC,MAAY,IAAI,IAAI,EAAE;IAC7C,OAAO,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACxE,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAY,CAAC;QACrE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,GAA8B,CAAC;YACzC,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,IAAI,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,WAAsC,CAAC,EAAE,CAAC;oBAC9E,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACrF,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC3B,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,KAAK;gBAClB,UAAU,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE;gBAC1F,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IACD,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,aAAa,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,oBAAoB;QACpB,SAAS,CAAC,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,0EAA0E;QAC1E,4CAA4C;IAC9C,CAAC;AACH,CAAC;AAED;mEACmE;AACnE,MAAM,SAAS,GAA2B,EAAE,CAAC;AAE7C;6EAC6E;AAC7E,MAAM,UAAU,eAAe;IAC7B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAY,IAAI,IAAI,EAAE;IACpD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAChF,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IACxB,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,IAAI,GAA2B,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;IACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAChF,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAClD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,CAAmB;IAS9D,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,UAAU;QAClB,IAAI;QACJ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,OAAO,EACL,4BAA4B,CAAC,CAAC,GAAG,2FAA2F;YAC5H,yIAAyI;YACzI,+BAA+B,eAAe,0FAA0F;KAC3I,CAAC;AACJ,CAAC;AAED;;uEAEuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,CAAmB;IAClD,OAAO,CACL,mFAAmF;QACnF,+CAA+C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,gCAAgC,CAChH,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omitly-mcp",
-  "version": "5.3.0",
+  "version": "5.5.0",
   "type": "module",
   "description": "Model Context Protocol server exposing Omitly's local, verifiable PDF redaction to AI agents. Redaction runs on-device — documents are never uploaded.",
   "keywords": [
@@ -15,7 +15,7 @@
     "privacy"
   ],
   "license": "SEE LICENSE IN LICENSE",
-  "homepage": "https://omitly.app/pdf-redaction-mcp",
+  "homepage": "https://omitly.app/pdf-redaction-mcp/?via=mcp",
   "mcpName": "io.github.omitly/omitly-mcp",
   "repository": {
     "type": "git",
@@ -39,6 +39,7 @@
     "start": "node dist/index.js",
     "dev": "tsc --watch",
     "test": "npm run build:wasm && tsc && node --test \"dist/**/*.test.js\"",
+    "fuzz": "node fuzz/edit-tools.fuzz.mjs",
     "prepublishOnly": "npm run build",
     "mcpb:prep": "npm run build:wasm && node mcpb/scripts/copy-wasm.mjs && cp LICENSE mcpb/LICENSE && npm --prefix mcpb ci",
     "mcpb:validate": "npx -y @anthropic-ai/mcpb@2.1.2 validate mcpb/manifest.json",
@@ -46,6 +47,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.32.1",
+    "pdf-lib": "1.17.1",
     "zod": "^4.6.7"
   },
   "devDependencies": {