toc-ocra 0.2.0

package/dist/src/control/pairing.js

@@ -0,0 +1,99 @@
+import { randomBytes, randomInt, timingSafeEqual } from 'node:crypto';
+import { existsSync, readFileSync } from 'node:fs';
+import { chmod, mkdir, rename, rm, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+/**
+ * Pairing between the local service and the desktop plugin.
+ *
+ * The plugin proves it runs for the same person who started the service by
+ * entering a 6-digit connection code. The service shows the code on start and
+ * keeps it in `<dataDir>/connection-code` (0600) so `toc-ocra code` can print
+ * it later. A correct code returns the control token (32 random bytes kept in
+ * `<dataDir>/control-token`, 0600), which the plugin stores and sends as
+ * `Authorization: Bearer` on every control request.
+ *
+ * The code rotates after it is used and after five wrong attempts, and wrong
+ * attempts lock pairing for a short while.
+ */
+export const CODE_FILE = 'connection-code';
+export const TOKEN_FILE = 'control-token';
+const MAX_ATTEMPTS = 5;
+const LOCK_MS = 30_000;
+export class PairingStore {
+    dataDir;
+    now;
+    token = '';
+    code = '';
+    failures = 0;
+    lockedUntil = 0;
+    constructor(dataDir, now = Date.now) {
+        this.dataDir = dataDir;
+        this.now = now;
+    }
+    /** Loads or creates the control token and issues a fresh connection code. */
+    async init() {
+        await mkdir(this.dataDir, { recursive: true, mode: 0o700 });
+        const tokenPath = join(this.dataDir, TOKEN_FILE);
+        const stored = existsSync(tokenPath) ? readFileSync(tokenPath, 'utf8').trim() : '';
+        this.token = /^[a-f0-9]{64}$/.test(stored) ? stored : randomBytes(32).toString('hex');
+        if (this.token !== stored)
+            await writeSecret(tokenPath, this.token);
+        await this.rotate();
+    }
+    get connectionCode() {
+        return this.code;
+    }
+    /** Exchanges a connection code for the control token. */
+    async pair(input) {
+        const now = this.now();
+        if (now < this.lockedUntil)
+            return { ok: false, error: 'locked', retryAfterMs: this.lockedUntil - now };
+        const code = typeof input === 'string' ? input.replace(/\s+/g, '') : '';
+        if (code.length === this.code.length && safeEqual(code, this.code)) {
+            this.failures = 0;
+            await this.rotate();
+            return { ok: true, token: this.token };
+        }
+        this.failures++;
+        if (this.failures >= MAX_ATTEMPTS) {
+            this.failures = 0;
+            this.lockedUntil = now + LOCK_MS;
+            await this.rotate();
+            return { ok: false, error: 'locked', retryAfterMs: LOCK_MS };
+        }
+        return { ok: false, error: 'code_wrong' };
+    }
+    /** Checks an `Authorization: Bearer <token>` header. */
+    authorize(header) {
+        const match = /^Bearer\s+(\S+)$/i.exec(header?.trim() ?? '');
+        return Boolean(match && this.token && safeEqual(match[1] ?? '', this.token));
+    }
+    /** Removes the code file when the service stops. */
+    async dispose() {
+        await rm(join(this.dataDir, CODE_FILE), { force: true });
+    }
+    async rotate() {
+        this.code = String(randomInt(0, 1_000_000)).padStart(6, '0');
+        await writeSecret(join(this.dataDir, CODE_FILE), this.code);
+    }
+}
+/** Reads the code of the running service, for `toc-ocra code`. */
+export function readConnectionCode(dataDir) {
+    const path = join(dataDir, CODE_FILE);
+    if (!existsSync(path))
+        return undefined;
+    const code = readFileSync(path, 'utf8').trim();
+    return /^\d{6}$/.test(code) ? code : undefined;
+}
+async function writeSecret(path, value) {
+    const temporary = `${path}.${process.pid}.tmp`;
+    await writeFile(temporary, value, { mode: 0o600 });
+    await rename(temporary, path);
+    await chmod(path, 0o600);
+}
+function safeEqual(left, right) {
+    const a = Buffer.from(left);
+    const b = Buffer.from(right);
+    return a.length === b.length && timingSafeEqual(a, b);
+}
+//# sourceMappingURL=pairing.js.map

package/dist/src/control/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../../../src/control/pairing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACrE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,iBAAiB,CAAA;AAC1C,MAAM,CAAC,MAAM,UAAU,GAAG,eAAe,CAAA;AACzC,MAAM,YAAY,GAAG,CAAC,CAAA;AACtB,MAAM,OAAO,GAAG,MAAM,CAAA;AAItB,MAAM,OAAO,YAAY;IAMM;IAAkC;IALvD,KAAK,GAAG,EAAE,CAAA;IACV,IAAI,GAAG,EAAE,CAAA;IACT,QAAQ,GAAG,CAAC,CAAA;IACZ,WAAW,GAAG,CAAC,CAAA;IAEvB,YAA6B,OAAe,EAAmB,MAAoB,IAAI,CAAC,GAAG;QAA9D,YAAO,GAAP,OAAO,CAAQ;QAAmB,QAAG,GAAH,GAAG,CAAyB;IAAG,CAAC;IAE/F,6EAA6E;IAC7E,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;QAChD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAClF,IAAI,CAAC,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACrF,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM;YAAE,MAAM,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;QACnE,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;IACrB,CAAC;IAED,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,IAAI,CAAA;IAClB,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,IAAI,CAAC,KAAc;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,IAAI,GAAG,GAAG,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,WAAW,GAAG,GAAG,EAAE,CAAA;QACvG,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACvE,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAA;YACjB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;YACnB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAA;QACxC,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAA;QACf,IAAI,IAAI,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC;YAClC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAA;YACjB,IAAI,CAAC,WAAW,GAAG,GAAG,GAAG,OAAO,CAAA;YAChC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;QAC9D,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAA;IAC3C,CAAC;IAED,wDAAwD;IACxD,SAAS,CAAC,MAA0B;QAClC,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5D,OAAO,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;IAC9E,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,OAAO;QACX,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1D,CAAC;IAEO,KAAK,CAAC,MAAM;QAClB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAC5D,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7D,CAAC;CACF;AAED,kEAAkE;AAClE,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IACvC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;IAC9C,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AAChD,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,KAAa;IACpD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAA;IAC9C,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAClD,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC7B,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACvD,CAAC"}

package/dist/src/exec/script-runner.d.ts

@@ -0,0 +1,9 @@
+export type ScriptExecutionResult = {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    durationMs: number;
+    outputTruncated: boolean;
+    timedOut: boolean;
+};
+export declare function executeScript(command: string, workdir: string, timeoutSeconds: number): Promise<ScriptExecutionResult>;

package/dist/src/exec/script-runner.js

@@ -0,0 +1,110 @@
+import { spawn } from 'node:child_process';
+// Runs one shell command for script.run. Output is capped per stream, the
+// whole process group is killed on timeout, and nothing is persisted.
+const MAX_SCRIPT_OUTPUT_BYTES = 112 * 1024;
+export function executeScript(command, workdir, timeoutSeconds) {
+    return new Promise((resolveExecution) => {
+        const windows = process.platform === 'win32';
+        const executable = windows ? (process.env.ComSpec ?? 'cmd.exe') : '/bin/sh';
+        const args = windows ? ['/d', '/s', '/c', command] : ['-lc', command];
+        const startedAt = Date.now();
+        const stdout = [];
+        const stderr = [];
+        let stdoutBytes = 0;
+        let stderrBytes = 0;
+        let outputTruncated = false;
+        let timedOut = false;
+        let spawnError = '';
+        let settled = false;
+        const append = (target, chunk, currentBytes) => {
+            const remaining = MAX_SCRIPT_OUTPUT_BYTES - currentBytes;
+            if (remaining <= 0) {
+                outputTruncated = true;
+                return currentBytes;
+            }
+            if (chunk.length > remaining) {
+                target.push(chunk.subarray(0, remaining));
+                outputTruncated = true;
+                return MAX_SCRIPT_OUTPUT_BYTES;
+            }
+            target.push(chunk);
+            return currentBytes + chunk.length;
+        };
+        let child;
+        try {
+            child = spawn(executable, args, {
+                cwd: workdir,
+                env: process.env,
+                detached: !windows,
+                shell: false,
+                stdio: ['ignore', 'pipe', 'pipe']
+            });
+        }
+        catch (error) {
+            resolveExecution({
+                exitCode: -1,
+                stdout: '',
+                stderr: error instanceof Error ? error.message : String(error),
+                durationMs: Date.now() - startedAt,
+                outputTruncated: false,
+                timedOut: false
+            });
+            return;
+        }
+        const kill = () => {
+            if (child.exitCode !== null || child.killed)
+                return;
+            try {
+                if (!windows && child.pid)
+                    process.kill(-child.pid, 'SIGKILL');
+                else
+                    child.kill('SIGKILL');
+            }
+            catch {
+                try {
+                    child.kill('SIGKILL');
+                }
+                catch {
+                    // The process may have exited between the checks.
+                }
+            }
+        };
+        const timeout = setTimeout(() => {
+            timedOut = true;
+            kill();
+        }, timeoutSeconds * 1_000);
+        child.stdout.on('data', (chunk) => {
+            stdoutBytes = append(stdout, Buffer.from(chunk), stdoutBytes);
+        });
+        child.stderr.on('data', (chunk) => {
+            stderrBytes = append(stderr, Buffer.from(chunk), stderrBytes);
+        });
+        child.once('error', (error) => {
+            spawnError = error.message;
+        });
+        child.once('close', (code) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timeout);
+            let stderrText = Buffer.concat(stderr).toString('utf8');
+            if (spawnError)
+                stderrText = `${stderrText}${stderrText ? '\n' : ''}${spawnError}`;
+            if (timedOut) {
+                stderrText = `${stderrText}${stderrText ? '\n' : ''}Command timed out after ${timeoutSeconds} seconds.`;
+            }
+            if (outputTruncated) {
+                stderrText = `${stderrText}${stderrText ? '\n' : ''}[Output truncated to 112 KiB per stream.]`;
+            }
+            resolveExecution({
+                exitCode: timedOut || spawnError ? -1 : (code ?? -1),
+                stdout: Buffer.concat(stdout).toString('utf8'),
+                stderr: stderrText,
+                durationMs: Date.now() - startedAt,
+                outputTruncated,
+                timedOut
+            });
+        });
+    });
+}
+//# sourceMappingURL=script-runner.js.map

package/dist/src/exec/script-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-runner.js","sourceRoot":"","sources":["../../../src/exec/script-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAE1C,0EAA0E;AAC1E,sEAAsE;AAEtE,MAAM,uBAAuB,GAAG,GAAG,GAAG,IAAI,CAAA;AAW1C,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,OAAe,EAAE,cAAsB;IACpF,OAAO,IAAI,OAAO,CAAC,CAAC,gBAAgB,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAA;QAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QACrE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,MAAM,MAAM,GAAa,EAAE,CAAA;QAC3B,IAAI,WAAW,GAAG,CAAC,CAAA;QACnB,IAAI,WAAW,GAAG,CAAC,CAAA;QACnB,IAAI,eAAe,GAAG,KAAK,CAAA;QAC3B,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,IAAI,UAAU,GAAG,EAAE,CAAA;QACnB,IAAI,OAAO,GAAG,KAAK,CAAA;QAEnB,MAAM,MAAM,GAAG,CAAC,MAAgB,EAAE,KAAa,EAAE,YAAoB,EAAU,EAAE;YAC/E,MAAM,SAAS,GAAG,uBAAuB,GAAG,YAAY,CAAA;YACxD,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,eAAe,GAAG,IAAI,CAAA;gBACtB,OAAO,YAAY,CAAA;YACrB,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;gBACzC,eAAe,GAAG,IAAI,CAAA;gBACtB,OAAO,uBAAuB,CAAA;YAChC,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAClB,OAAO,YAAY,GAAG,KAAK,CAAC,MAAM,CAAA;QACpC,CAAC,CAAA;QAED,IAAI,KAAK,CAAA;QACT,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE;gBAC9B,GAAG,EAAE,OAAO;gBACZ,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,QAAQ,EAAE,CAAC,OAAO;gBAClB,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAgB,CAAC;gBACf,QAAQ,EAAE,CAAC,CAAC;gBACZ,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC9D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,eAAe,EAAE,KAAK;gBACtB,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM;gBAAE,OAAM;YACnD,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,GAAG;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;;oBACzD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBACvB,CAAC;gBAAC,MAAM,CAAC;oBACP,kDAAkD;gBACpD,CAAC;YACH,CAAC;QACH,CAAC,CAAA;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,QAAQ,GAAG,IAAI,CAAA;YACf,IAAI,EAAE,CAAA;QACR,CAAC,EAAE,cAAc,GAAG,KAAK,CAAC,CAAA;QAE1B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAA;QAC/D,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAA;QAC/D,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,UAAU,GAAG,KAAK,CAAC,OAAO,CAAA;QAC5B,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC3B,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,YAAY,CAAC,OAAO,CAAC,CAAA;YACrB,IAAI,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YACvD,IAAI,UAAU;gBAAE,UAAU,GAAG,GAAG,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,CAAA;YAClF,IAAI,QAAQ,EAAE,CAAC;gBACb,UAAU,GAAG,GAAG,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,2BAA2B,cAAc,WAAW,CAAA;YACzG,CAAC;YACD,IAAI,eAAe,EAAE,CAAC;gBACpB,UAAU,GAAG,GAAG,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,2CAA2C,CAAA;YAChG,CAAC;YACD,gBAAgB,CAAC;gBACf,QAAQ,EAAE,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;gBACpD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC9C,MAAM,EAAE,UAAU;gBAClB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,eAAe;gBACf,QAAQ;aACT,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/src/health/server.d.ts

@@ -0,0 +1,74 @@
+import type { DiagnosticLogger } from '../logging/diagnostic-log.js';
+import type { CliDetectionSnapshot } from '../shared/cli-detection-types.js';
+export type RunRecord = {
+    runId: string;
+    status: string;
+    sessionId?: string;
+    updatedAt: string;
+};
+export type HealthSnapshot = {
+    deviceId: string;
+    deviceName?: string;
+    serverUrl?: string;
+    connected: boolean;
+    activeSessions: number;
+    storedRuns: number;
+    startedAt: string;
+    runs: RunRecord[];
+    capabilities?: string[];
+    detection?: CliDetectionSnapshot;
+    /** Why the WebSocket is down. Present only while disconnected. */
+    connectionError?: {
+        status?: number;
+        reason: string;
+        at: string;
+    };
+};
+/**
+ * What the desktop plugin can do on this machine. Every route except
+ * `/control/info` and `/control/pair` requires the control token.
+ */
+export interface ControlApi {
+    info(): Record<string, unknown>;
+    pair(code: unknown): Promise<{
+        ok: true;
+        token: string;
+    } | {
+        ok: false;
+        error: string;
+        retryAfterMs?: number;
+    }>;
+    authorize(header: string | undefined): boolean;
+    status(): Promise<unknown>;
+    enroll(input: {
+        serverUrl?: unknown;
+        code?: unknown;
+    }): Promise<unknown>;
+    unpair(): Promise<unknown>;
+    detect(): Promise<unknown>;
+}
+/** Thrown by control handlers to answer with a specific status and message. */
+export declare class ControlError extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(status: number, message: string, code?: string);
+}
+export declare class HealthServer {
+    private readonly host;
+    private readonly port;
+    private readonly snapshot;
+    private readonly logFile;
+    private readonly logger;
+    private readonly detection?;
+    private readonly control?;
+    private server;
+    constructor(host: string, port: number, snapshot: () => HealthSnapshot, logFile: string, logger: DiagnosticLogger, detection?: ((refresh: boolean) => Promise<CliDetectionSnapshot>) | undefined, control?: ControlApi | undefined);
+    get boundPort(): number;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    private handle;
+    private allowedHost;
+    private handleControl;
+    private json;
+    private recentEvents;
+}

package/dist/src/health/server.js

@@ -0,0 +1,248 @@
+import { readFile } from 'node:fs/promises';
+import { createServer } from 'node:http';
+/** Thrown by control handlers to answer with a specific status and message. */
+export class ControlError extends Error {
+    status;
+    code;
+    constructor(status, message, code = 'bad_request') {
+        super(message);
+        this.status = status;
+        this.code = code;
+    }
+}
+const LOOPBACK_ORIGIN = /^https?:\/\/(127\.0\.0\.1|localhost|\[::1\])(:\d+)?$/;
+const MAX_BODY_BYTES = 16 * 1024;
+export class HealthServer {
+    host;
+    port;
+    snapshot;
+    logFile;
+    logger;
+    detection;
+    control;
+    server;
+    constructor(host, port, snapshot, logFile, logger, detection, control) {
+        this.host = host;
+        this.port = port;
+        this.snapshot = snapshot;
+        this.logFile = logFile;
+        this.logger = logger;
+        this.detection = detection;
+        this.control = control;
+    }
+    get boundPort() {
+        const address = this.server?.address();
+        return typeof address === 'object' && address ? address.port : this.port;
+    }
+    async start() {
+        this.server = createServer((request, response) => void this.handle(request, response));
+        await new Promise((resolveStart, rejectStart) => {
+            this.server?.once('error', rejectStart);
+            this.server?.listen(this.port, this.host, () => resolveStart());
+        });
+        const address = this.server.address();
+        this.logger.info('health-server-started', {
+            host: this.host,
+            port: typeof address === 'object' && address ? address.port : this.port
+        });
+    }
+    async stop() {
+        const server = this.server;
+        this.server = undefined;
+        if (!server)
+            return;
+        await new Promise((resolveStop) => server.close(() => resolveStop()));
+    }
+    async handle(request, response) {
+        const url = new URL(request.url ?? '/', 'http://localhost');
+        // Loopback only: a page on another site that resolves its own name to
+        // 127.0.0.1 (DNS rebinding) sends its own Host and is refused.
+        if (!this.allowedHost(request.headers.host)) {
+            this.json(response, 403, { error: 'forbidden_host' });
+            return;
+        }
+        if (url.pathname.startsWith('/control/')) {
+            await this.handleControl(request, response, url.pathname);
+            return;
+        }
+        if (request.method !== 'GET') {
+            response.writeHead(405).end();
+            return;
+        }
+        if (url.pathname === '/') {
+            response.writeHead(200, {
+                'Content-Type': 'text/html; charset=utf-8',
+                'Cache-Control': 'no-store',
+                'Content-Security-Policy': "default-src 'self'; style-src 'unsafe-inline'; script-src 'unsafe-inline'"
+            });
+            response.end(dashboardHtml());
+            return;
+        }
+        if (url.pathname === '/api/status') {
+            this.json(response, 200, this.snapshot());
+            return;
+        }
+        if (url.pathname === '/api/agents') {
+            const snapshot = this.detection ? await this.detection(url.searchParams.get('refresh') === '1' || url.searchParams.get('refresh') === 'true') : this.snapshot().detection;
+            this.json(response, 200, snapshot ?? { providers: [], detectedIds: [] });
+            return;
+        }
+        if (url.pathname === '/api/events') {
+            this.json(response, 200, { events: await this.recentEvents() });
+            return;
+        }
+        if (url.pathname === '/health' || url.pathname === '/ready') {
+            const status = this.snapshot();
+            const ready = url.pathname === '/health' || status.connected;
+            this.json(response, ready ? 200 : 503, { ok: ready, ...status });
+            return;
+        }
+        response.writeHead(404).end();
+    }
+    allowedHost(host) {
+        if (!host)
+            return false;
+        const port = this.boundPort;
+        return [`127.0.0.1:${port}`, `localhost:${port}`, `[::1]:${port}`].includes(host.toLowerCase());
+    }
+    async handleControl(request, response, path) {
+        const origin = request.headers.origin;
+        if (origin !== undefined && !LOOPBACK_ORIGIN.test(origin)) {
+            this.json(response, 403, { error: 'forbidden_origin' });
+            return;
+        }
+        if (origin) {
+            response.setHeader('Access-Control-Allow-Origin', origin);
+            response.setHeader('Vary', 'Origin');
+        }
+        if (request.method === 'OPTIONS') {
+            response.writeHead(204, {
+                'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
+                'Access-Control-Allow-Headers': 'authorization, content-type',
+                'Access-Control-Max-Age': '600'
+            }).end();
+            return;
+        }
+        const control = this.control;
+        if (!control) {
+            this.json(response, 404, { error: 'control_unavailable' });
+            return;
+        }
+        try {
+            if (path === '/control/info' && request.method === 'GET') {
+                this.json(response, 200, control.info());
+                return;
+            }
+            if (path === '/control/pair' && request.method === 'POST') {
+                const body = await readJson(request);
+                const result = await control.pair(body.code);
+                if (result.ok)
+                    this.json(response, 200, { token: result.token });
+                else
+                    this.json(response, result.error === 'locked' ? 429 : 403, { error: result.error, ...(result.retryAfterMs ? { retry_after_ms: result.retryAfterMs } : {}) });
+                return;
+            }
+            if (!control.authorize(request.headers.authorization)) {
+                this.json(response, 401, { error: 'unauthorized' });
+                return;
+            }
+            if (path === '/control/status' && request.method === 'GET') {
+                this.json(response, 200, await control.status());
+                return;
+            }
+            if (path === '/control/enroll' && request.method === 'POST') {
+                const body = await readJson(request);
+                this.json(response, 200, await control.enroll({ serverUrl: body.server_url, code: body.code }));
+                return;
+            }
+            if (path === '/control/unpair' && request.method === 'POST') {
+                this.json(response, 200, await control.unpair());
+                return;
+            }
+            if (path === '/control/detect' && request.method === 'POST') {
+                this.json(response, 200, await control.detect());
+                return;
+            }
+            this.json(response, 404, { error: 'not_found' });
+        }
+        catch (error) {
+            if (error instanceof ControlError) {
+                this.json(response, error.status, { error: error.code, message: error.message });
+                return;
+            }
+            this.logger.warn('control-request-failed', { path, error: error instanceof Error ? error.message : String(error) });
+            this.json(response, 500, { error: 'internal', message: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    json(response, status, body) {
+        response.writeHead(status, {
+            'Content-Type': 'application/json; charset=utf-8',
+            'Cache-Control': 'no-store'
+        });
+        response.end(JSON.stringify(body));
+    }
+    async recentEvents() {
+        try {
+            const raw = await readFile(this.logFile, 'utf8');
+            return raw
+                .trim()
+                .split('\n')
+                .slice(-60)
+                .flatMap((line) => {
+                try {
+                    const parsed = JSON.parse(line);
+                    return [{
+                            ts: parsed.ts,
+                            level: parsed.level,
+                            event: parsed.event,
+                            runId: parsed.runId,
+                            taskId: parsed.taskId,
+                            sessionId: parsed.sessionId,
+                            agentType: parsed.agentType,
+                            error: parsed.error,
+                            code: parsed.code
+                        }];
+                }
+                catch {
+                    return [];
+                }
+            })
+                .reverse();
+        }
+        catch {
+            return [];
+        }
+    }
+}
+function dashboardHtml() {
+    return `<!doctype html>
+<html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
+<title>toc-ocra Agent</title><style>
+:root{color:#17202a;background:#f5f7f7;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}*{box-sizing:border-box}body{margin:0}.shell{max-width:1120px;margin:0 auto;padding:28px 20px 44px}.top{display:flex;justify-content:space-between;align-items:center;gap:18px;border-bottom:1px solid #d7dfdf;padding-bottom:18px}.brand{font-size:21px;font-weight:700}.sub{color:#5d6c72;font-size:14px;margin-top:4px}.refresh{width:34px;height:34px;border:1px solid #aebbbb;background:#fff;border-radius:5px;font-size:20px;line-height:1;cursor:pointer}.stats{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:12px;margin:20px 0}.stat,.section{background:#fff;border:1px solid #d7dfdf;border-radius:6px}.stat{padding:15px}.label{color:#607077;font-size:12px}.value{font-size:22px;font-weight:650;margin-top:7px}.ok{color:#087f5b}.bad{color:#c0392b}.section{padding:18px;margin-top:14px}.section h2{font-size:15px;margin:0 0 13px}table{border-collapse:collapse;width:100%;font-size:13px}th{text-align:left;color:#607077;font-weight:500;border-bottom:1px solid #d7dfdf;padding:0 8px 9px}td{padding:10px 8px;border-bottom:1px solid #edf0f0;vertical-align:top}.tag{display:inline-block;border-radius:3px;padding:3px 6px;font-size:12px;background:#eef3f2;color:#365054}.tag.delivered,.tag.completed{background:#e5f6ee;color:#087f5b}.tag.failed{background:#fbeaea;color:#b33a32}.event{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;color:#34454b}.muted{color:#718087}.empty{color:#718087;padding:12px 0}@media(max-width:700px){.stats{grid-template-columns:repeat(2,minmax(0,1fr))}.shell{padding:20px 12px}.hide-small{display:none}th,td{padding-left:5px;padding-right:5px}}
+</style></head><body><main class="shell"><header class="top"><div><div class="brand">toc-ocra Agent</div><div class="sub" id="device">正在连接本机服务</div></div><button class="refresh" id="refresh" title="刷新状态" aria-label="刷新状态">↻</button></header><section class="stats"><div class="stat"><div class="label">连接</div><div class="value" id="connected">-</div></div><div class="stat"><div class="label">运行中</div><div class="value" id="sessions">-</div></div><div class="stat"><div class="label">最近任务</div><div class="value" id="runs">-</div></div><div class="stat"><div class="label">启动时间</div><div class="value" id="started">-</div></div></section><section class="section"><h2>最近任务</h2><div id="run-list" class="empty">加载中</div></section><section class="section"><h2>本机事件</h2><div id="event-list" class="empty">加载中</div></section></main><script>
+const esc=v=>String(v??'').replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));const time=v=>v?new Date(v).toLocaleTimeString('zh-CN',{hour12:false}):'-';
+function table(headers,rows,klass=''){return rows.length?'<table><thead><tr>'+headers.map(h=>'<th>'+h+'</th>').join('')+'</tr></thead><tbody>'+rows.map(r=>'<tr>'+r.map(c=>'<td>'+c+'</td>').join('')+'</tr>').join('')+'</tbody></table>':'<div class="empty">暂无记录</div>'}
+async function load(){try{const [s,e]=await Promise.all([fetch('/api/status',{cache:'no-store'}),fetch('/api/events',{cache:'no-store'})]);const status=await s.json(),events=(await e.json()).events||[];document.querySelector('#device').textContent=(status.deviceName||status.deviceId||'未配对设备')+(status.serverUrl?' · '+status.serverUrl:'');const con=document.querySelector('#connected');con.textContent=status.connected?'已连接':'未连接';con.className='value '+(status.connected?'ok':'bad');document.querySelector('#sessions').textContent=status.activeSessions;document.querySelector('#runs').textContent=status.storedRuns;document.querySelector('#started').textContent=time(status.startedAt);document.querySelector('#run-list').innerHTML=table(['时间','任务','状态','会话'],(status.runs||[]).map(r=>[time(r.updatedAt),'<span class="event">'+esc(r.runId).slice(0,8)+'</span>','<span class="tag '+esc(r.status)+'">'+esc(r.status)+'</span>','<span class="hide-small">'+esc(r.sessionId||'-').slice(0,8)+'</span>']));document.querySelector('#event-list').innerHTML=table(['时间','事件','任务','状态'],events.map(x=>[time(x.ts),'<span class="event">'+esc(x.event||'-')+'</span>','<span class="hide-small">'+esc(x.runId||x.taskId||'-').slice(0,8)+'</span>',x.error?'<span class="bad">'+esc(x.error)+'</span>':esc(x.level||'-')]));}catch{document.querySelector('#device').textContent='无法连接本机服务'}}document.querySelector('#refresh').addEventListener('click',load);load();setInterval(load,3000);
+</script></body></html>`;
+}
+async function readJson(request) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of request) {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        size += buffer.length;
+        if (size > MAX_BODY_BYTES)
+            throw new ControlError(413, 'request body is too large', 'too_large');
+        chunks.push(buffer);
+    }
+    if (size === 0)
+        return {};
+    try {
+        const value = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+        return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+    }
+    catch {
+        throw new ControlError(400, 'invalid JSON body', 'invalid_json');
+    }
+}
+//# sourceMappingURL=server.js.map

package/dist/src/health/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/health/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAA;AA+ChG,+EAA+E;AAC/E,MAAM,OAAO,YAAa,SAAQ,KAAK;IAChB;IAA0C;IAA/D,YAAqB,MAAc,EAAE,OAAe,EAAW,OAAO,aAAa;QACjF,KAAK,CAAC,OAAO,CAAC,CAAA;QADK,WAAM,GAAN,MAAM,CAAQ;QAA4B,SAAI,GAAJ,IAAI,CAAgB;IAEnF,CAAC;CACF;AAED,MAAM,eAAe,GAAG,sDAAsD,CAAA;AAC9E,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAA;AAEhC,MAAM,OAAO,YAAY;IAIJ;IACA;IACA;IACA;IACA;IACA;IACA;IATX,MAAM,CAAoB;IAElC,YACmB,IAAY,EACZ,IAAY,EACZ,QAA8B,EAC9B,OAAe,EACf,MAAwB,EACxB,SAA+D,EAC/D,OAAoB;QANpB,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAQ;QACZ,aAAQ,GAAR,QAAQ,CAAsB;QAC9B,YAAO,GAAP,OAAO,CAAQ;QACf,WAAM,GAAN,MAAM,CAAkB;QACxB,cAAS,GAAT,SAAS,CAAsD;QAC/D,YAAO,GAAP,OAAO,CAAa;IACpC,CAAC;IAEJ,IAAI,SAAS;QACX,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAA;QACtC,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC1E,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;QAEtF,MAAM,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE;YACpD,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;YACvC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAA;QACjE,CAAC,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAA;QACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;YACxC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;SACxE,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;QACvB,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,MAAM,IAAI,OAAO,CAAO,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IAC7E,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,OAAwB,EAAE,QAAwB;QACrE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAA;QAC3D,sEAAsE;QACtE,+DAA+D;QAC/D,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAA;YACrD,OAAM;QACR,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;YACzD,OAAM;QACR,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;YAC7B,OAAM;QACR,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;YACzB,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;gBACtB,cAAc,EAAE,0BAA0B;gBAC1C,eAAe,EAAE,UAAU;gBAC3B,yBAAyB,EAAE,2EAA2E;aACvG,CAAC,CAAA;YACF,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAA;YAC7B,OAAM;QACR,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;YACzC,OAAM;QACR,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAA;YACzK,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAA;YACxE,OAAM;QACR,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;YAC/D,OAAM;QACR,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAA;YAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAA;YAC5D,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;YAChE,OAAM;QACR,CAAC;QACD,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IAC/B,CAAC;IAEO,WAAW,CAAC,IAAwB;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAA;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAA;QAC3B,OAAO,CAAC,aAAa,IAAI,EAAE,EAAE,aAAa,IAAI,EAAE,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IACjG,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAwB,EAAE,QAAwB,EAAE,IAAY;QAC1F,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAA;QACrC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAA;YACvD,OAAM;QACR,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,QAAQ,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;YACzD,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QACtC,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;gBACtB,8BAA8B,EAAE,oBAAoB;gBACpD,8BAA8B,EAAE,6BAA6B;gBAC7D,wBAAwB,EAAE,KAAK;aAChC,CAAC,CAAC,GAAG,EAAE,CAAA;YACR,OAAM;QACR,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAA;YAC1D,OAAM;QACR,CAAC;QACD,IAAI,CAAC;YACH,IAAI,IAAI,KAAK,eAAe,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACzD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;gBACxC,OAAM;YACR,CAAC;YACD,IAAI,IAAI,KAAK,eAAe,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;gBACpC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAC5C,IAAI,MAAM,CAAC,EAAE;oBAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;;oBAC3D,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;gBACjK,OAAM;YACR,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;gBACnD,OAAM;YACR,CAAC;YACD,IAAI,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC3D,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;gBAChD,OAAM;YACR,CAAC;YACD,IAAI,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;gBACpC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;gBAC/F,OAAM;YACR,CAAC;YACD,IAAI,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5D,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;gBAChD,OAAM;YACR,CAAC;YACD,IAAI,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5D,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;gBAChD,OAAM;YACR,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;gBAClC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBAChF,OAAM;YACR,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACnH,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAClH,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;QAClE,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;YACzB,cAAc,EAAE,iCAAiC;YACjD,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAA;QACF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;IACpC,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAChD,OAAO,GAAG;iBACP,IAAI,EAAE;iBACN,KAAK,CAAC,IAAI,CAAC;iBACX,KAAK,CAAC,CAAC,EAAE,CAAC;iBACV,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAChB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAA;oBACjD,OAAO,CAAC;4BACN,EAAE,EAAE,MAAM,CAAC,EAAE;4BACb,KAAK,EAAE,MAAM,CAAC,KAAK;4BACnB,KAAK,EAAE,MAAM,CAAC,KAAK;4BACnB,KAAK,EAAE,MAAM,CAAC,KAAK;4BACnB,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,SAAS,EAAE,MAAM,CAAC,SAAS;4BAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;4BAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;4BACnB,IAAI,EAAE,MAAM,CAAC,IAAI;yBAClB,CAAC,CAAA;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAA;gBACX,CAAC;YACH,CAAC,CAAC;iBACD,OAAO,EAAE,CAAA;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;CACF;AAED,SAAS,aAAa;IACpB,OAAO;;;;;;;;wBAQe,CAAA;AACxB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAwB;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClE,IAAI,IAAI,MAAM,CAAC,MAAM,CAAA;QACrB,IAAI,IAAI,GAAG,cAAc;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,2BAA2B,EAAE,WAAW,CAAC,CAAA;QAChG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACrB,CAAC;IACD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;QAC3E,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5G,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAA;IAClE,CAAC;AACH,CAAC"}

package/dist/src/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};