xaq-cli 0.0.0 → 0.1.0-nightly.71

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Unlabored Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,79 @@
+# xaq
+
+[![CI](https://github.com/wynn-dev/xaq/actions/workflows/ci.yml/badge.svg)](https://github.com/wynn-dev/xaq/actions/workflows/ci.yml)
+[![npm](https://img.shields.io/npm/v/xaq-cli)](https://www.npmjs.com/package/xaq-cli)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue)](LICENSE)
+
+A self-hosted MCP broker for AI agents (formerly agentinbox, see [Upgrading from agentinbox](#upgrading-from-agentinbox)). One small server holds all your credentials (Notion, WHOOP, any MCP server,
+Gmail and Google Calendar) and gives each agent a single MCP endpoint with only the tools it's allowed. Risky actions
+(deleting, sending, publishing, payments) can wait for your one-tap approval, and every call is audited.
+
+```sh
+npx xaq-cli
+```
+
+Open the link it prints and pick what to connect first: Notion, WHOOP, another MCP server, or Gmail and Calendar.
+Only Gmail and Calendar need a Google Cloud project; everything else is a few clicks. The console then connects your
+first agent. Requires Node.js 22.13 or newer.
+
+From the terminal on the same machine: `npx xaq-cli connections add notion` (or `whoop`, or an MCP server URL),
+and `npx xaq-cli import --from hermes` (also `claude-code`, `cursor`, `codex`) to move an agent's existing MCP
+servers behind the broker. Details: [Connections](docs/reference.md#connections-mcp-broker).
+
+For Gmail, Google Calendar is supported too (optional). It needs the Calendar API enabled in your Google Cloud project, the
+Calendar scopes on the consent screen, Calendar added to each account, and `calendar.read` (and, to make changes,
+`calendar.write`) on the agent's grant. The console's setup covers all of it; existing installs use Overview → "Add
+Google Calendar". Details: [docs/calendar.md](docs/calendar.md).
+
+![Overview](docs/screenshots/overview.png)
+
+<!-- rename-xaq: keep-start -->
+## Upgrading from agentinbox
+
+xaq is the new name of agentinbox (the npm package `agentinbox-cli` is now `xaq-cli`). An existing install keeps
+working as it is; to move it to the new names, run one command per service, on the machine it runs on:
+
+```sh
+npx xaq-cli service install                             # the daemon
+npx xaq-cli listen service install                      # each listener (add --profile <name> for other profiles)
+npx xaq-cli skill install --target <claude|codex|…> --url <your server>   # each agent's skill, if you installed it
+```
+
+Each `service install` finds the agentinbox service (launchd `com.unlaboredlabs.agentinbox…`, systemd
+`agentinbox.service` / `agentinbox-listen-<profile>.service`), stops it and waits until it is gone, then installs and
+starts the xaq one (launchd `sh.xaq.daemon` / `sh.xaq.listen.<profile>`, systemd `xaq.service` /
+`xaq-listen-<profile>.service`). The two never run at the same time, and if the new one doesn't start, the old one
+is put back exactly as it was. Running it again is a normal reinstall. Mail that arrives meanwhile waits on the daemon
+and is delivered once the listener is back: nothing is lost or delivered twice.
+
+**Kept:**
+- the data directory: `~/.agentinbox` (or the `--data` directory the old service used) stays in use, with its
+  `master.key`, `agentinbox.db` and settings. Nothing is moved; `~/.xaq` is only for new installs.
+- every agent key (`aib_…`), Gmail and Calendar connection, grant, webhook and Pub/Sub setup;
+- the listener's profiles, keys, logs and event cursor (`~/.config/agentinbox`, `~/.local/state/agentinbox`,
+  `~/.local/share/agentinbox` stay in use while the `…/xaq` ones don't exist);
+- the names your agents already use: a profile set up with agentinbox keeps its MCP server name `agentinbox`
+  (`agentinbox-<profile>`), so Hermes routes confined to `["mcp-agentinbox"]`, cron jobs limited to
+  `["agentinbox"]`, the Hermes route `/webhooks/agentinbox…` and Claude Code's `mcp__agentinbox` keep working;
+- `AGENTINBOX_*` environment variables: still read when the `XAQ_*` one isn't set, and `--exec` commands still get
+  `AGENTINBOX_EVENT_FILE` and the other ids next to the new `XAQ_*` ones.
+
+**Changes:**
+- the command is `xaq` (`npx xaq-cli …`); `agentinbox` (from the `agentinbox-cli` package, now a shim) and
+  `npx agentinbox-cli …` still work: they run xaq after saying so;
+- the service names above, and the services write `XAQ_*` variables;
+- new profiles and setups use `xaq` / `xaq-<profile>` for the MCP server and Hermes route, and the skill is
+  installed as `xaq` (replacing the `agentinbox` one);
+- the console, logs and messages say xaq.
+<!-- rename-xaq: keep-end -->
+
+## More
+
+- [Reference](docs/reference.md): features, configuration, running as a service or behind a proxy, security model,
+  webhooks, data and backups, development
+- [Waking local agents with `xaq listen`](docs/listen.md), e.g. `npx xaq-cli listen --recipe claude-code`
+- [Screenshots](docs/screenshots/README.md)
+
+## License
+
+[MIT](LICENSE)

package/dist/admin-5gThRwgj.js

@@ -0,0 +1,162 @@
+#!/usr/bin/env node
+import { i as sha256 } from "./crypto-fv2fj3S8.js";
+import { r as SESSION_COOKIE, t as CSRF_HEADER, y as SESSION_MAX_AGE_MS } from "./auth-D-GmwNv-.js";
+import { n as dataFiles } from "./config-C9XmYZWO.js";
+import { c as runningInstance } from "./instance-Dj9TpJB2.js";
+import { existsSync } from "node:fs";
+import { DatabaseSync } from "node:sqlite";
+import { randomBytes } from "node:crypto";
+//#region server/connections-cli/admin.ts
+/**
+* The CLI's admin channel to the daemon on this machine (`connections …`, `import`), without the console password.
+*
+* Whoever can write the data directory already holds master.key and the database (`reset-password` relies on the
+* same thing), so the CLI proves it is the admin by writing there: it inserts a one-time admin session (only
+* sha256(token) is stored, like console sessions) that expires after 15 minutes, uses it as the session cookie
+* against the daemon's own /api on loopback, and deletes it when the command ends. Nothing new listens, no
+* token file sits on disk, and the daemon's admin auth (requireAdmin + the CSRF header) is unchanged: every API
+* call is checked, audited and rate-limited exactly like the console's.
+*
+* Console sessions slide forward on use up to SESSION_MAX_AGE_MS after created_at. The CLI's row is written with
+* created_at = expiry − SESSION_MAX_AGE_MS, so that hard limit is the 15-minute expiry and the row can never be
+* extended (see docs/FOLLOWUPS.md: a session kind column would say this directly).
+*/
+const CLI_SESSION_TTL_MS = 9e5;
+const CLI_SESSION_LABEL = "xaq CLI (local admin, one-time)";
+var AdminApiError = class extends Error {
+	status;
+	code;
+	hint;
+	body;
+	constructor(status, code, message, hint, body) {
+		super(message);
+		this.status = status;
+		this.code = code;
+		this.hint = hint;
+		this.body = body;
+		this.name = "AdminApiError";
+	}
+};
+/** Signals that end a CLI command: the one-time session is deleted on each (and on a normal exit). */
+const CLEANUP_SIGNALS = [
+	"SIGINT",
+	"SIGTERM",
+	"SIGHUP"
+];
+/** Where the CLI reaches the daemon: its bind address, or loopback when it listens on every interface. */
+function daemonOrigin(instance) {
+	const host = instance.host;
+	const h = !host || host === "0.0.0.0" || host === "::" || host === "[::]" ? "127.0.0.1" : host.replace(/^\[|\]$/g, "");
+	return `http://${h.includes(":") ? `[${h}]` : h}:${instance.port}`;
+}
+/** Inserts the one-time admin session; returns the token. */
+function createCliSession(dbPath, clock = Date.now) {
+	const token = randomBytes(32).toString("base64url");
+	const hash = sha256(token);
+	const expires = clock() + CLI_SESSION_TTL_MS;
+	const db = new DatabaseSync(dbPath);
+	try {
+		db.exec("PRAGMA busy_timeout = 5000");
+		db.prepare("INSERT INTO admin_sessions (token_hash, created_at, expires_at, ip, user_agent) VALUES (?, ?, ?, ?, ?)").run(hash, new Date(expires - SESSION_MAX_AGE_MS).toISOString(), new Date(expires).toISOString(), "local-cli", CLI_SESSION_LABEL);
+	} finally {
+		db.close();
+	}
+	let removed = false;
+	return {
+		token,
+		remove() {
+			if (removed) return;
+			removed = true;
+			try {
+				const d = new DatabaseSync(dbPath);
+				try {
+					d.exec("PRAGMA busy_timeout = 5000");
+					d.prepare("DELETE FROM admin_sessions WHERE token_hash = ?").run(hash);
+				} finally {
+					d.close();
+				}
+			} catch {}
+		}
+	};
+}
+function openAdminChannel(opts) {
+	const dbPath = dataFiles(opts.dataDir).db;
+	if (!existsSync(dbPath)) throw new Error(`No xaq data in ${opts.dataDir}. Run this on the machine xaq runs on, as the user it runs as (with sudo for a system service), or pass its data directory with --data.`);
+	const instance = opts.instance === void 0 ? runningInstance(opts.dataDir) : opts.instance;
+	if (!instance && !opts.baseUrl) throw new Error(`xaq isn't running with the data directory ${opts.dataDir}. Start it first (or pass --data).`);
+	const baseUrl = opts.baseUrl ?? daemonOrigin(instance);
+	let session;
+	try {
+		session = createCliSession(dbPath, opts.clock);
+	} catch (err) {
+		const code = err.code;
+		throw new Error(`Can't open ${dbPath}${code ? ` (${code})` : ""}: ${err.message}. Run this as the user xaq runs as (with sudo for a system service).`);
+	}
+	const onExit = () => session.remove();
+	process.once("exit", onExit);
+	const doFetch = opts.fetch ?? fetch;
+	const send = (method, path, body) => {
+		const headers = {
+			cookie: `${SESSION_COOKIE}=${session.token}`,
+			[CSRF_HEADER]: "1",
+			accept: "application/json"
+		};
+		if (body !== void 0) headers["content-type"] = "application/json";
+		return doFetch(`${baseUrl}${path}`, {
+			method,
+			headers,
+			body: body === void 0 ? void 0 : JSON.stringify(body),
+			signal: AbortSignal.timeout(12e4)
+		});
+	};
+	return {
+		baseUrl,
+		async request(method, path, body) {
+			let res;
+			try {
+				res = await send(method, path, body);
+				if (res.status === 401) {
+					await res.body?.cancel().catch(() => {});
+					session.remove();
+					session = createCliSession(dbPath, opts.clock);
+					res = await send(method, path, body);
+				}
+			} catch (err) {
+				throw new Error(`Couldn't reach xaq at ${baseUrl}: ${err.message}`);
+			}
+			if (res.status === 204) return void 0;
+			const text = await res.text();
+			let data = null;
+			try {
+				data = text ? JSON.parse(text) : null;
+			} catch {}
+			if (!res.ok) {
+				const e = data?.error;
+				throw new AdminApiError(res.status, e?.code ?? `http_${res.status}`, e?.message ?? `HTTP ${res.status} from ${path}`, e?.hint, data);
+			}
+			return data;
+		},
+		credentialStamp(connectionId) {
+			try {
+				const db = new DatabaseSync(dbPath, { readOnly: true });
+				try {
+					db.exec("PRAGMA busy_timeout = 5000");
+					const r = db.prepare("SELECT issued_at, access_token_enc, header_value_enc FROM connection_credentials WHERE connection_id = ?").get(connectionId);
+					return r ? sha256(`${r.issued_at ?? ""}|${r.access_token_enc ?? ""}|${r.header_value_enc ?? ""}`) : null;
+				} finally {
+					db.close();
+				}
+			} catch {
+				return null;
+			}
+		},
+		close() {
+			process.removeListener("exit", onExit);
+			session.remove();
+		}
+	};
+}
+//#endregion
+export { createCliSession as a, CLI_SESSION_TTL_MS as i, CLEANUP_SIGNALS as n, daemonOrigin as o, CLI_SESSION_LABEL as r, openAdminChannel as s, AdminApiError as t };
+
+//# sourceMappingURL=admin-5gThRwgj.js.map

package/dist/admin-5gThRwgj.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-5gThRwgj.js","names":[],"sources":["../server/connections-cli/admin.ts"],"sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport { existsSync } from \"node:fs\";\nimport { DatabaseSync } from \"node:sqlite\";\nimport { SESSION_COOKIE, CSRF_HEADER } from \"../auth/index.ts\";\nimport { SESSION_MAX_AGE_MS } from \"../auth/sessions.ts\";\nimport { dataFiles } from \"../config.ts\";\nimport { sha256 } from \"../crypto.ts\";\nimport { type InstanceInfo, runningInstance } from \"../instance.ts\";\n\n/**\n * The CLI's admin channel to the daemon on this machine (`connections …`, `import`), without the console password.\n *\n * Whoever can write the data directory already holds master.key and the database (`reset-password` relies on the\n * same thing), so the CLI proves it is the admin by writing there: it inserts a one-time admin session (only\n * sha256(token) is stored, like console sessions) that expires after 15 minutes, uses it as the session cookie\n * against the daemon's own /api on loopback, and deletes it when the command ends. Nothing new listens, no\n * token file sits on disk, and the daemon's admin auth (requireAdmin + the CSRF header) is unchanged: every API\n * call is checked, audited and rate-limited exactly like the console's.\n *\n * Console sessions slide forward on use up to SESSION_MAX_AGE_MS after created_at. The CLI's row is written with\n * created_at = expiry − SESSION_MAX_AGE_MS, so that hard limit is the 15-minute expiry and the row can never be\n * extended (see docs/FOLLOWUPS.md: a session kind column would say this directly).\n */\n\nexport const CLI_SESSION_TTL_MS = 15 * 60_000;\nexport const CLI_SESSION_LABEL = \"xaq CLI (local admin, one-time)\";\n\nexport class AdminApiError extends Error {\n  constructor(\n    readonly status: number,\n    readonly code: string,\n    message: string,\n    readonly hint?: string,\n    /** The parsed response body (some routes answer an error with their own shape, e.g. /finish). */\n    readonly body?: unknown,\n  ) {\n    super(message);\n    this.name = \"AdminApiError\";\n  }\n}\n\nexport interface AdminChannel {\n  /** The daemon's loopback origin, e.g. http://127.0.0.1:8425. */\n  readonly baseUrl: string;\n  request<T>(method: string, path: string, body?: unknown): Promise<T>;\n  /**\n   * A fingerprint of the connection's stored credential (issued_at plus its randomised ciphertext), read from the\n   * database: it changes on every saved sign-in, so a Reconnect's completion is seen even on an active connection.\n   * null when nothing is stored (or it can't be read). Never the credential itself.\n   */\n  credentialStamp(connectionId: string): string | null;\n  /** Deletes the one-time session. Idempotent. */\n  close(): void;\n}\n\n/** Signals that end a CLI command: the one-time session is deleted on each (and on a normal exit). */\nexport const CLEANUP_SIGNALS = [\"SIGINT\", \"SIGTERM\", \"SIGHUP\"] as const;\n\nexport interface OpenAdminOptions {\n  dataDir: string;\n  /** Tests: the running instance, instead of reading the lock file. */\n  instance?: InstanceInfo | null;\n  /** Tests: the daemon origin, instead of deriving it from the instance. */\n  baseUrl?: string;\n  fetch?: typeof fetch;\n  clock?: () => number;\n}\n\n/** Where the CLI reaches the daemon: its bind address, or loopback when it listens on every interface. */\nexport function daemonOrigin(instance: Pick<InstanceInfo, \"host\" | \"port\">): string {\n  const host = instance.host;\n  const any = !host || host === \"0.0.0.0\" || host === \"::\" || host === \"[::]\";\n  const h = any ? \"127.0.0.1\" : host.replace(/^\\[|\\]$/g, \"\");\n  return `http://${h.includes(\":\") ? `[${h}]` : h}:${instance.port}`;\n}\n\n/** Inserts the one-time admin session; returns the token. */\nexport function createCliSession(dbPath: string, clock: () => number = Date.now): { token: string; remove: () => void } {\n  const token = randomBytes(32).toString(\"base64url\");\n  const hash = sha256(token);\n  const expires = clock() + CLI_SESSION_TTL_MS;\n  const db = new DatabaseSync(dbPath);\n  try {\n    db.exec(\"PRAGMA busy_timeout = 5000\");\n    db.prepare(\"INSERT INTO admin_sessions (token_hash, created_at, expires_at, ip, user_agent) VALUES (?, ?, ?, ?, ?)\").run(\n      hash,\n      new Date(expires - SESSION_MAX_AGE_MS).toISOString(),\n      new Date(expires).toISOString(),\n      \"local-cli\",\n      CLI_SESSION_LABEL,\n    );\n  } finally {\n    db.close();\n  }\n  let removed = false;\n  return {\n    token,\n    remove() {\n      if (removed) return;\n      removed = true;\n      try {\n        const d = new DatabaseSync(dbPath);\n        try {\n          d.exec(\"PRAGMA busy_timeout = 5000\");\n          d.prepare(\"DELETE FROM admin_sessions WHERE token_hash = ?\").run(hash);\n        } finally {\n          d.close();\n        }\n      } catch {\n        // It expires on its own within 15 minutes.\n      }\n    },\n  };\n}\n\nexport function openAdminChannel(opts: OpenAdminOptions): AdminChannel {\n  // xaq.db, or agentinbox.db in a data directory from before the rename (rename-xaq: keep).\n  const dbPath = dataFiles(opts.dataDir).db;\n  if (!existsSync(dbPath)) {\n    throw new Error(\n      `No xaq data in ${opts.dataDir}. Run this on the machine xaq runs on, as the user it runs as ` +\n        \"(with sudo for a system service), or pass its data directory with --data.\",\n    );\n  }\n  const instance = opts.instance === undefined ? runningInstance(opts.dataDir) : opts.instance;\n  if (!instance && !opts.baseUrl) throw new Error(`xaq isn't running with the data directory ${opts.dataDir}. Start it first (or pass --data).`);\n  const baseUrl = opts.baseUrl ?? daemonOrigin(instance!);\n  let session: ReturnType<typeof createCliSession>;\n  try {\n    session = createCliSession(dbPath, opts.clock);\n  } catch (err) {\n    const code = (err as NodeJS.ErrnoException).code;\n    throw new Error(\n      `Can't open ${dbPath}${code ? ` (${code})` : \"\"}: ${(err as Error).message}. Run this as the user xaq runs as (with sudo for a system service).`,\n    );\n  }\n  const onExit = () => session.remove();\n  process.once(\"exit\", onExit);\n  const doFetch = opts.fetch ?? fetch;\n  const send = (method: string, path: string, body: unknown) => {\n    const headers: Record<string, string> = { cookie: `${SESSION_COOKIE}=${session.token}`, [CSRF_HEADER]: \"1\", accept: \"application/json\" };\n    if (body !== undefined) headers[\"content-type\"] = \"application/json\";\n    return doFetch(`${baseUrl}${path}`, { method, headers, body: body === undefined ? undefined : JSON.stringify(body), signal: AbortSignal.timeout(120_000) });\n  };\n  return {\n    baseUrl,\n    async request<T>(method: string, path: string, body?: unknown): Promise<T> {\n      let res: Response;\n      try {\n        res = await send(method, path, body);\n        // The session's 15 minutes ran out (a slow sign-in): mint a fresh one and retry once.\n        if (res.status === 401) {\n          await res.body?.cancel().catch(() => {});\n          session.remove();\n          session = createCliSession(dbPath, opts.clock);\n          res = await send(method, path, body);\n        }\n      } catch (err) {\n        throw new Error(`Couldn't reach xaq at ${baseUrl}: ${(err as Error).message}`);\n      }\n      if (res.status === 204) return undefined as T;\n      const text = await res.text();\n      let data: unknown = null;\n      try {\n        data = text ? JSON.parse(text) : null;\n      } catch {\n        // Not JSON: reported below.\n      }\n      if (!res.ok) {\n        const e = (data as { error?: { code?: string; message?: string; hint?: string } } | null)?.error;\n        throw new AdminApiError(res.status, e?.code ?? `http_${res.status}`, e?.message ?? `HTTP ${res.status} from ${path}`, e?.hint, data);\n      }\n      return data as T;\n    },\n    credentialStamp(connectionId: string): string | null {\n      try {\n        const db = new DatabaseSync(dbPath, { readOnly: true });\n        try {\n          db.exec(\"PRAGMA busy_timeout = 5000\");\n          const r = db.prepare(\"SELECT issued_at, access_token_enc, header_value_enc FROM connection_credentials WHERE connection_id = ?\").get(connectionId) as\n            | { issued_at: string | null; access_token_enc: string | null; header_value_enc: string | null }\n            | undefined;\n          return r ? sha256(`${r.issued_at ?? \"\"}|${r.access_token_enc ?? \"\"}|${r.header_value_enc ?? \"\"}`) : null;\n        } finally {\n          db.close();\n        }\n      } catch {\n        return null;\n      }\n    },\n    close() {\n      process.removeListener(\"exit\", onExit);\n      session.remove();\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAwBA,MAAa,qBAAqB;AAClC,MAAa,oBAAoB;AAEjC,IAAa,gBAAb,cAAmC,MAAM;CAE5B;CACA;CAEA;CAEA;CANX,YACE,QACA,MACA,SACA,MAEA,MACA;EACA,MAAM,OAAO;EAPJ,KAAA,SAAA;EACA,KAAA,OAAA;EAEA,KAAA,OAAA;EAEA,KAAA,OAAA;EAGT,KAAK,OAAO;CACd;AACF;;AAiBA,MAAa,kBAAkB;CAAC;CAAU;CAAW;AAAQ;;AAa7D,SAAgB,aAAa,UAAuD;CAClF,MAAM,OAAO,SAAS;CAEtB,MAAM,IADM,CAAC,QAAQ,SAAS,aAAa,SAAS,QAAQ,SAAS,SACrD,cAAc,KAAK,QAAQ,YAAY,EAAE;CACzD,OAAO,UAAU,EAAE,SAAS,GAAG,IAAI,IAAI,EAAE,KAAK,EAAE,GAAG,SAAS;AAC9D;;AAGA,SAAgB,iBAAiB,QAAgB,QAAsB,KAAK,KAA4C;CACtH,MAAM,QAAQ,YAAY,EAAE,CAAC,CAAC,SAAS,WAAW;CAClD,MAAM,OAAO,OAAO,KAAK;CACzB,MAAM,UAAU,MAAM,IAAI;CAC1B,MAAM,KAAK,IAAI,aAAa,MAAM;CAClC,IAAI;EACF,GAAG,KAAK,4BAA4B;EACpC,GAAG,QAAQ,wGAAwG,CAAC,CAAC,IACnH,MACA,IAAI,KAAK,UAAU,kBAAkB,CAAC,CAAC,YAAY,GACnD,IAAI,KAAK,OAAO,CAAC,CAAC,YAAY,GAC9B,aACA,iBACF;CACF,UAAU;EACR,GAAG,MAAM;CACX;CACA,IAAI,UAAU;CACd,OAAO;EACL;EACA,SAAS;GACP,IAAI,SAAS;GACb,UAAU;GACV,IAAI;IACF,MAAM,IAAI,IAAI,aAAa,MAAM;IACjC,IAAI;KACF,EAAE,KAAK,4BAA4B;KACnC,EAAE,QAAQ,iDAAiD,CAAC,CAAC,IAAI,IAAI;IACvE,UAAU;KACR,EAAE,MAAM;IACV;GACF,QAAQ,CAER;EACF;CACF;AACF;AAEA,SAAgB,iBAAiB,MAAsC;CAErE,MAAM,SAAS,UAAU,KAAK,OAAO,CAAC,CAAC;CACvC,IAAI,CAAC,WAAW,MAAM,GACpB,MAAM,IAAI,MACR,kBAAkB,KAAK,QAAQ,wIAEjC;CAEF,MAAM,WAAW,KAAK,aAAa,KAAA,IAAY,gBAAgB,KAAK,OAAO,IAAI,KAAK;CACpF,IAAI,CAAC,YAAY,CAAC,KAAK,SAAS,MAAM,IAAI,MAAM,6CAA6C,KAAK,QAAQ,mCAAmC;CAC7I,MAAM,UAAU,KAAK,WAAW,aAAa,QAAS;CACtD,IAAI;CACJ,IAAI;EACF,UAAU,iBAAiB,QAAQ,KAAK,KAAK;CAC/C,SAAS,KAAK;EACZ,MAAM,OAAQ,IAA8B;EAC5C,MAAM,IAAI,MACR,cAAc,SAAS,OAAO,KAAK,KAAK,KAAK,GAAG,IAAK,IAAc,QAAQ,qEAC7E;CACF;CACA,MAAM,eAAe,QAAQ,OAAO;CACpC,QAAQ,KAAK,QAAQ,MAAM;CAC3B,MAAM,UAAU,KAAK,SAAS;CAC9B,MAAM,QAAQ,QAAgB,MAAc,SAAkB;EAC5D,MAAM,UAAkC;GAAE,QAAQ,GAAG,eAAe,GAAG,QAAQ;IAAU,cAAc;GAAK,QAAQ;EAAmB;EACvI,IAAI,SAAS,KAAA,GAAW,QAAQ,kBAAkB;EAClD,OAAO,QAAQ,GAAG,UAAU,QAAQ;GAAE;GAAQ;GAAS,MAAM,SAAS,KAAA,IAAY,KAAA,IAAY,KAAK,UAAU,IAAI;GAAG,QAAQ,YAAY,QAAQ,IAAO;EAAE,CAAC;CAC5J;CACA,OAAO;EACL;EACA,MAAM,QAAW,QAAgB,MAAc,MAA4B;GACzE,IAAI;GACJ,IAAI;IACF,MAAM,MAAM,KAAK,QAAQ,MAAM,IAAI;IAEnC,IAAI,IAAI,WAAW,KAAK;KACtB,MAAM,IAAI,MAAM,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC;KACvC,QAAQ,OAAO;KACf,UAAU,iBAAiB,QAAQ,KAAK,KAAK;KAC7C,MAAM,MAAM,KAAK,QAAQ,MAAM,IAAI;IACrC;GACF,SAAS,KAAK;IACZ,MAAM,IAAI,MAAM,yBAAyB,QAAQ,IAAK,IAAc,SAAS;GAC/E;GACA,IAAI,IAAI,WAAW,KAAK,OAAO,KAAA;GAC/B,MAAM,OAAO,MAAM,IAAI,KAAK;GAC5B,IAAI,OAAgB;GACpB,IAAI;IACF,OAAO,OAAO,KAAK,MAAM,IAAI,IAAI;GACnC,QAAQ,CAER;GACA,IAAI,CAAC,IAAI,IAAI;IACX,MAAM,IAAK,MAAgF;IAC3F,MAAM,IAAI,cAAc,IAAI,QAAQ,GAAG,QAAQ,QAAQ,IAAI,UAAU,GAAG,WAAW,QAAQ,IAAI,OAAO,QAAQ,QAAQ,GAAG,MAAM,IAAI;GACrI;GACA,OAAO;EACT;EACA,gBAAgB,cAAqC;GACnD,IAAI;IACF,MAAM,KAAK,IAAI,aAAa,QAAQ,EAAE,UAAU,KAAK,CAAC;IACtD,IAAI;KACF,GAAG,KAAK,4BAA4B;KACpC,MAAM,IAAI,GAAG,QAAQ,0GAA0G,CAAC,CAAC,IAAI,YAAY;KAGjJ,OAAO,IAAI,OAAO,GAAG,EAAE,aAAa,GAAG,GAAG,EAAE,oBAAoB,GAAG,GAAG,EAAE,oBAAoB,IAAI,IAAI;IACtG,UAAU;KACR,GAAG,MAAM;IACX;GACF,QAAQ;IACN,OAAO;GACT;EACF;EACA,QAAQ;GACN,QAAQ,eAAe,QAAQ,MAAM;GACrC,QAAQ,OAAO;EACjB;CACF;AACF"}

package/dist/admin-Btrm8mCd.js

@@ -0,0 +1,218 @@
+#!/usr/bin/env node
+import { t as NPX } from "./version-BxH7OuWD.js";
+import { i as saveProfile, l as ensurePrivateDir, n as loadProfile } from "./profile-NmMKAczz.js";
+import { c as profilePath, i as deadPath, o as logPath, p as validProfileName } from "./paths-yzOKD6ow.js";
+import { b as TransportError, f as isHermesRoute, x as checkTransport } from "./recipes-DG_-doGq.js";
+import { i as safeText, r as formatDuration } from "./ui-B8Sd4Y7Y.js";
+import { D as ApiError, N as getSelf, b as forwardEvent, g as resolveListen, h as forwardSecret, m as describeFilter, o as routeWarning, u as DEFAULT_LISTEN_TYPES } from "./hermes-DHnDTYJp.js";
+import { c as readDead, d as runCommand, f as Dispatcher, i as outputLine, l as readStatus, m as hasAccess, p as describeGrants, s as pidAlive, u as writeDead } from "./listen-B9iO7HgQ.js";
+import { r as installedServiceLabel } from "./service-C7jfo-Ex.js";
+import pc from "picocolors";
+//#region server/listen/admin.ts
+const out = (s = "") => process.stdout.write(`${s}\n`);
+const flagFor = (profile) => profile === "default" ? "" : ` --profile ${profile}`;
+const ago = (iso) => iso ? `${formatDuration(Date.now() - Date.parse(iso))} ago` : "never";
+/** Prints the forward-mode signing secret (generating and saving it on first use). */
+function printSecret(profileName, opts) {
+	const name = validProfileName(profileName);
+	const profile = loadProfile(name);
+	let { secret, created } = forwardSecret(profile);
+	if (opts.rotate) {
+		secret = forwardSecret({
+			...profile,
+			forward: void 0,
+			forwardSecret: void 0
+		}).secret;
+		created = true;
+	}
+	if (created) {
+		if (profile.forward) profile.forward = {
+			...profile.forward,
+			secret
+		};
+		else profile.forwardSecret = secret;
+		saveProfile(name, profile);
+		process.stderr.write(pc.gray(`${opts.rotate ? "Rotated" : "Generated"} the forward signing secret for profile "${name}"${opts.rotate ? "; restart the listener" : ""}.\n`));
+	}
+	out(secret);
+}
+async function printStatus(profileName) {
+	const name = validProfileName(profileName);
+	const profile = loadProfile(name);
+	const st = readStatus(name);
+	const alive = st ? pidAlive(st.pid) && !st.stoppedAt : false;
+	const dead = readDead(name);
+	out(`${pc.bold("Profile")}   ${name}  ${pc.gray(profilePath(name))}`);
+	out(`${pc.bold("Agent")}     ${safeText(profile.agentName)} ${pc.gray(`(${profile.agentId})`)}`);
+	out(`${pc.bold("Daemon")}    ${profile.url}`);
+	out(`${pc.bold("Consumer")}  ${st?.consumer ?? profile.consumer}`);
+	const exec = st && st.exec !== void 0 ? st.exec : profile.exec;
+	const forward = st && st.forward !== void 0 ? st.forward : profile.forward?.url;
+	const targets = [exec ? `exec ${safeText(exec, 120)}` : null, forward ? `forward ${forward}` : null].filter(Boolean);
+	out(`${pc.bold("Runs")}      ${targets.length ? targets.join(" · ") : pc.gray("nothing saved (pass --exec/--forward with --save)")}`);
+	out(`${pc.bold("Events")}    ${profile.types?.length ? profile.types.join(", ") : `${DEFAULT_LISTEN_TYPES.join(", ")} ${pc.gray("(default types; add --types all --save for every event)")}`}`);
+	let saved = null;
+	try {
+		saved = resolveListen(name, profile, {}).config;
+	} catch {}
+	out(`${pc.bold("Filters")}   ${alive && st?.filters || (saved ? describeFilter(saved) : "?")}`);
+	const batchSeconds = alive && st && st.batchSeconds !== void 0 ? st.batchSeconds : saved?.batchSeconds ?? 0;
+	if (batchSeconds) out(`${pc.bold("Batch")}     ${formatDuration(batchSeconds * 1e3)} window, up to 20 events per --exec run`);
+	const route = forward && isHermesRoute(forward) ? routeWarning(name, forward) : null;
+	if (route?.level === "warn") out(`${pc.bold("Route")}     ${pc.yellow(route.message)}`);
+	out(`${pc.bold("Output")}    ${outputLine(name, {
+		exec: exec ?? null,
+		forward: forward ? { url: forward } : null
+	}, logPath(name))}`);
+	let svc = "not installed";
+	if (process.platform === "linux" || process.platform === "darwin") {
+		const installed = installedServiceLabel(name);
+		if (installed) svc = `installed (${installed}; details: ${NPX} listen service status${flagFor(name)})`;
+	}
+	out(`${pc.bold("Service")}   ${svc}`);
+	try {
+		await checkTransport(profile.url, { insecure: profile.insecure });
+		const self = await getSelf(profile.url, profile.apiKey, 5e3);
+		out(`${pc.bold("Key")}       ${pc.green("valid")}`);
+		const lines = describeGrants(self.grants, self.connections);
+		out(`${pc.bold("Access")}    ${hasAccess(self) ? lines[0] : pc.yellow(lines[0])}`);
+		for (const l of lines.slice(1)) out(`          ${l}`);
+	} catch (err) {
+		const revoked = err instanceof ApiError && (err.status === 401 || err.status === 403);
+		const why = err instanceof ApiError && err.status === 0 ? err.cause : err instanceof Error ? err.message.split("\n")[0] : String(err);
+		if (err instanceof TransportError) out(`${pc.bold("Key")}       ${pc.red(`not checked: ${why}`)}`);
+		else out(`${pc.bold("Key")}       ${revoked ? pc.red(`rejected: ${err.message}`) : pc.yellow(`not checked (${why})`)}`);
+	}
+	if (!st) out(`${pc.bold("Listener")}  ${pc.gray("has not run yet")}`);
+	else {
+		const state = !alive ? pc.gray(`not running${st.stoppedAt ? ` (stopped ${ago(st.stoppedAt)}${st.exitReason ? `: ${safeText(st.exitReason, 160)}` : ""})` : " (exited unexpectedly)"}`) : st.connected ? pc.green(`running (pid ${st.pid}), connected ${ago(st.connectedSince)}`) : pc.yellow(`running (pid ${st.pid}), disconnected${st.lastDisconnect ? ` ${ago(st.lastDisconnect.at)}: ${safeText(st.lastDisconnect.reason, 160)}` : ""}`);
+		out(`${pc.bold("Listener")}  ${state}`);
+		out(`${pc.bold("Cursor")}    acked #${st.ackedSeq} · received #${st.receivedSeq}${alive && st.running ? ` · ${st.running} in progress` : ""}${st.skipped ? ` · ${st.skipped} skipped by filters` : ""} · last event ${ago(st.lastEventAt)}`);
+		if (st.recent.length) {
+			out(pc.bold("Recent"));
+			for (const r of st.recent.slice(0, 8)) {
+				const icon = r.outcome === "succeeded" ? pc.green("✓") : r.outcome === "dead" ? pc.red("✖") : r.outcome === "retrying" ? pc.yellow("↻") : pc.gray("·");
+				out(`  ${icon} #${r.seq} ${r.type} ${pc.gray(`${ago(r.at)}${r.attempts > 1 ? `, ${r.attempts} attempts` : ""}${r.error && r.outcome !== "succeeded" ? `, ${safeText(r.error, 100)}` : ""}`)}`);
+			}
+		}
+	}
+	out(`${pc.bold("Dead")}      ${dead.length ? pc.red(`${dead.length} event${dead.length > 1 ? "s" : ""}`) + pc.gray(` (inspect: ${NPX} listen dead${flagFor(name)})`) : "0"}`);
+	out(`${pc.bold("Log")}       ${logPath(name)}`);
+}
+function printDead(profileName, opts) {
+	const name = validProfileName(profileName);
+	const entries = readDead(name);
+	if (opts.json) {
+		for (const e of entries) out(JSON.stringify(e));
+		return;
+	}
+	if (!entries.length) {
+		out(`No dead events for profile "${name}".`);
+		return;
+	}
+	for (const e of entries) {
+		const m = e.payload.data.message;
+		out(`${pc.red("✖")} #${e.seq} ${e.type} ${pc.gray(e.id)}  ${pc.gray(`died ${ago(e.deadAt)} after ${e.attempts} attempts`)}`);
+		if (m) out(`    from ${safeText(m.from?.email ?? "?", 80)}  "${safeText(m.subject, 80)}"`);
+		out(pc.gray(`    ${safeText(e.error, 300)}`));
+	}
+	out();
+	out(pc.gray(`${entries.length} dead event${entries.length > 1 ? "s" : ""} in ${deadPath(name)}.`));
+	out(pc.gray(`Replay with: ${NPX} listen dead --replay${flagFor(name)}   (one: --id <evt_…>; drop all: --clear)`));
+	out(pc.gray(`Replay uses the profile's saved --exec/--forward; if you ran them as flags only, pass them again, e.g. --replay --exec '<command>'.`));
+}
+function clearDead(profileName, id) {
+	const name = validProfileName(profileName);
+	const entries = readDead(name);
+	const keep = id ? entries.filter((e) => e.id !== id) : [];
+	writeDead(name, keep);
+	out(`Removed ${entries.length - keep.length} dead event${entries.length - keep.length === 1 ? "" : "s"}.`);
+}
+/**
+* Runs dead events again through the profile's targets (or the ones passed as flags). Successes are
+* removed from dead.jsonl; failures stay. Returns how many still failed.
+*/
+async function replayDead(flags, opts = {}) {
+	const name = validProfileName(flags.profile ?? "default");
+	const profile = loadProfile(name);
+	const { config } = resolveListen(name, profile, {
+		...flags,
+		save: false
+	});
+	const chosen = readDead(name).filter((e) => !flags.id || e.id === flags.id);
+	if (!chosen.length) {
+		out(flags.id ? `No dead event with id ${flags.id}.` : `No dead events for profile "${name}".`);
+		return 0;
+	}
+	const available = [];
+	if (config.exec) available.push("exec");
+	if (config.forward) available.push("forward");
+	if (!available.length) throw new Error(`Nothing to replay to: pass --recipe <tool> (claude-code, codex, cursor, hermes), --exec '<command>' and/or --forward <url> (or save them in the profile with \`${NPX} listen --save …\`).`);
+	if (config.exec && process.platform === "win32") throw new Error("--exec isn't supported on Windows; replay with --forward instead.");
+	const timeoutMs = config.timeoutSeconds * 1e3;
+	if (config.cwdIsDefault) ensurePrivateDir(config.cwd);
+	const failed = /* @__PURE__ */ new Map();
+	const bySeq = new Map(chosen.map((e) => [e.seq, e]));
+	const dispatcher = new Dispatcher({
+		targets: available,
+		concurrency: config.concurrency,
+		maxAttempts: config.maxAttempts,
+		retryDelayMs: opts.retryDelayMs,
+		run: async (job, signal) => {
+			const errors = [];
+			if (job.remaining.has("exec") && config.exec) {
+				const r = await runCommand(config.exec, job.payload, {
+					timeoutMs,
+					signal,
+					cwd: config.cwd
+				});
+				if (r.ok) job.remaining.delete("exec");
+				else errors.push(`command: ${r.error}`);
+			}
+			if (job.remaining.has("forward") && config.forward) {
+				const r = await forwardEvent(config.forward.url, config.forward.secret, job.payload, {
+					timeoutMs: Math.min(timeoutMs, 3e4),
+					signal,
+					wrap: isHermesRoute(config.forward.url)
+				});
+				if (r.ok) job.remaining.delete("forward");
+				else errors.push(`forward: ${r.error}`);
+			}
+			return errors;
+		},
+		onAdvance: () => {},
+		onDead: (job) => {
+			const e = bySeq.get(job.seq);
+			failed.set(e.id, {
+				...e,
+				deadAt: (/* @__PURE__ */ new Date()).toISOString(),
+				attempts: e.attempts + job.attempts,
+				error: job.lastError ?? "failed"
+			});
+			out(`${pc.red("✖")} #${job.seq} still failing: ${safeText(job.lastError ?? "failed", 200)}`);
+		},
+		onFinished: (job) => {
+			if (job.outcome === "succeeded") out(`${pc.green("✓")} #${job.seq} ${job.payload.type} replayed`);
+		}
+	});
+	out(`Replaying ${chosen.length} dead event${chosen.length > 1 ? "s" : ""} (up to ${config.maxAttempts} attempts each)…`);
+	for (const e of [...chosen].sort((a, b) => a.seq - b.seq)) {
+		const targets = e.targets?.length ? e.targets.filter((t) => available.includes(t)) : available;
+		if (!targets.length) {
+			out(`${pc.yellow("!")} #${e.seq} needs ${e.targets.join(" and ")}, which isn't configured now; pass --${e.targets[0]} to replay it.`);
+			failed.set(e.id, e);
+			continue;
+		}
+		dispatcher.push(e.payload, { targets });
+	}
+	await dispatcher.idle();
+	const replayed = new Set(chosen.map((e) => e.id));
+	const current = readDead(name);
+	writeDead(name, [...current.filter((e) => !replayed.has(e.id)), ...failed.values()]);
+	out(`${chosen.length - failed.size} replayed, ${failed.size} still dead.`);
+	return failed.size;
+}
+//#endregion
+export { clearDead, printDead, printSecret, printStatus, replayDead };
+
+//# sourceMappingURL=admin-Btrm8mCd.js.map

package/dist/admin-Btrm8mCd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-Btrm8mCd.js","names":[],"sources":["../server/listen/admin.ts"],"sourcesContent":["import pc from \"picocolors\";\nimport { ApiError, getSelf } from \"./api.ts\";\nimport { describeGrants, hasAccess } from \"./grants.ts\";\nimport { Dispatcher, type Job, type Target } from \"./dispatcher.ts\";\nimport { runCommand } from \"./exec.ts\";\nimport { ensurePrivateDir } from \"./fsutil.ts\";\nimport { forwardEvent } from \"./forward.ts\";\nimport { routeWarning } from \"./hermes.ts\";\nimport { describeFilter, type ListenFlags, MAX_BATCH, resolveListen } from \"./options.ts\";\nimport { outputLine } from \"./listen.ts\";\nimport { isHermesRoute } from \"./recipes.ts\";\nimport { DEFAULT_PROFILE, deadPath, logPath, profilePath, validProfileName } from \"./paths.ts\";\nimport { loadProfile, saveProfile } from \"./profile.ts\";\nimport { DEFAULT_LISTEN_TYPES, forwardSecret } from \"./options.ts\";\nimport { installedServiceLabel } from \"./service.ts\";\nimport { type DeadEntry, pidAlive, readDead, readStatus, writeDead } from \"./state.ts\";\nimport { checkTransport, TransportError } from \"./transport.ts\";\nimport { formatDuration, safeText } from \"./ui.ts\";\nimport { NPX } from \"./version.ts\";\n\nconst out = (s = \"\") => process.stdout.write(`${s}\\n`);\nconst flagFor = (profile: string) => (profile === DEFAULT_PROFILE ? \"\" : ` --profile ${profile}`);\nconst ago = (iso: string | null | undefined) => (iso ? `${formatDuration(Date.now() - Date.parse(iso))} ago` : \"never\");\n\n// ───────────── listen secret ─────────────\n\n/** Prints the forward-mode signing secret (generating and saving it on first use). */\nexport function printSecret(profileName: string, opts: { rotate?: boolean }): void {\n  const name = validProfileName(profileName);\n  const profile = loadProfile(name);\n  let { secret, created } = forwardSecret(profile);\n  if (opts.rotate) {\n    secret = forwardSecret({ ...profile, forward: undefined, forwardSecret: undefined }).secret;\n    created = true;\n  }\n  if (created) {\n    if (profile.forward) profile.forward = { ...profile.forward, secret };\n    else profile.forwardSecret = secret;\n    saveProfile(name, profile);\n    process.stderr.write(pc.gray(`${opts.rotate ? \"Rotated\" : \"Generated\"} the forward signing secret for profile \"${name}\"${opts.rotate ? \"; restart the listener\" : \"\"}.\\n`));\n  }\n  // The secret alone on stdout, so `export XAQ_WEBHOOK_SECRET=$(xaq listen secret)` works.\n  out(secret);\n}\n\n// ───────────── listen status ─────────────\n\nexport async function printStatus(profileName: string): Promise<void> {\n  const name = validProfileName(profileName);\n  const profile = loadProfile(name);\n  const st = readStatus(name);\n  const alive = st ? pidAlive(st.pid) && !st.stoppedAt : false;\n  const dead = readDead(name);\n\n  out(`${pc.bold(\"Profile\")}   ${name}  ${pc.gray(profilePath(name))}`);\n  out(`${pc.bold(\"Agent\")}     ${safeText(profile.agentName)} ${pc.gray(`(${profile.agentId})`)}`);\n  out(`${pc.bold(\"Daemon\")}    ${profile.url}`);\n  out(`${pc.bold(\"Consumer\")}  ${st?.consumer ?? profile.consumer}`);\n  // What the last run used (flags included), else what the profile has saved.\n  const exec = st && st.exec !== undefined ? st.exec : profile.exec;\n  const forward = st && st.forward !== undefined ? st.forward : profile.forward?.url;\n  const targets = [exec ? `exec ${safeText(exec, 120)}` : null, forward ? `forward ${forward}` : null].filter(Boolean);\n  out(`${pc.bold(\"Runs\")}      ${targets.length ? targets.join(\" · \") : pc.gray(\"nothing saved (pass --exec/--forward with --save)\")}`);\n  out(\n    `${pc.bold(\"Events\")}    ${\n      profile.types?.length\n        ? profile.types.join(\", \")\n        : `${DEFAULT_LISTEN_TYPES.join(\", \")} ${pc.gray(\"(default types; add --types all --save for every event)\")}`\n    }`,\n  );\n  // The running listener's filters (flags included), else the profile's.\n  let saved: ReturnType<typeof resolveListen>[\"config\"] | null = null;\n  try {\n    saved = resolveListen(name, profile, {}).config;\n  } catch {\n    // An invalid saved setting: `listen` itself reports it.\n  }\n  out(`${pc.bold(\"Filters\")}   ${(alive && st?.filters) || (saved ? describeFilter(saved) : \"?\")}`);\n  const batchSeconds = alive && st && st.batchSeconds !== undefined ? st.batchSeconds : (saved?.batchSeconds ?? 0);\n  if (batchSeconds) out(`${pc.bold(\"Batch\")}     ${formatDuration(batchSeconds * 1000)} window, up to ${MAX_BATCH} events per --exec run`);\n  const route = forward && isHermesRoute(forward) ? routeWarning(name, forward) : null;\n  if (route?.level === \"warn\") out(`${pc.bold(\"Route\")}     ${pc.yellow(route.message)}`);\n  out(`${pc.bold(\"Output\")}    ${outputLine(name, { exec: exec ?? null, forward: forward ? { url: forward } : null }, logPath(name))}`);\n\n  let svc = \"not installed\";\n  if (process.platform === \"linux\" || process.platform === \"darwin\") {\n    const installed = installedServiceLabel(name);\n    if (installed) svc = `installed (${installed}; details: ${NPX} listen service status${flagFor(name)})`;\n  }\n  out(`${pc.bold(\"Service\")}   ${svc}`);\n\n  try {\n    // Never send the key over a connection `listen` itself would refuse.\n    await checkTransport(profile.url, { insecure: profile.insecure });\n    const self = await getSelf(profile.url, profile.apiKey, 5000);\n    out(`${pc.bold(\"Key\")}       ${pc.green(\"valid\")}`);\n    // The access the console actually granted, in plain words (what the agent should report to its human).\n    const lines = describeGrants(self.grants, self.connections);\n    out(`${pc.bold(\"Access\")}    ${hasAccess(self) ? lines[0] : pc.yellow(lines[0]!)}`);\n    for (const l of lines.slice(1)) out(`          ${l}`);\n  } catch (err) {\n    const revoked = err instanceof ApiError && (err.status === 401 || err.status === 403);\n    const why = err instanceof ApiError && err.status === 0 ? (err.cause as string) : err instanceof Error ? err.message.split(\"\\n\")[0] : String(err);\n    if (err instanceof TransportError) out(`${pc.bold(\"Key\")}       ${pc.red(`not checked: ${why}`)}`);\n    else out(`${pc.bold(\"Key\")}       ${revoked ? pc.red(`rejected: ${(err as Error).message}`) : pc.yellow(`not checked (${why})`)}`);\n  }\n\n  if (!st) {\n    out(`${pc.bold(\"Listener\")}  ${pc.gray(\"has not run yet\")}`);\n  } else {\n    const state = !alive\n      ? pc.gray(`not running${st.stoppedAt ? ` (stopped ${ago(st.stoppedAt)}${st.exitReason ? `: ${safeText(st.exitReason, 160)}` : \"\"})` : \" (exited unexpectedly)\"}`)\n      : st.connected\n        ? pc.green(`running (pid ${st.pid}), connected ${ago(st.connectedSince)}`)\n        : pc.yellow(`running (pid ${st.pid}), disconnected${st.lastDisconnect ? ` ${ago(st.lastDisconnect.at)}: ${safeText(st.lastDisconnect.reason, 160)}` : \"\"}`);\n    out(`${pc.bold(\"Listener\")}  ${state}`);\n    out(\n      `${pc.bold(\"Cursor\")}    acked #${st.ackedSeq} · received #${st.receivedSeq}${alive && st.running ? ` · ${st.running} in progress` : \"\"}${st.skipped ? ` · ${st.skipped} skipped by filters` : \"\"} · last event ${ago(st.lastEventAt)}`,\n    );\n    if (st.recent.length) {\n      out(pc.bold(\"Recent\"));\n      for (const r of st.recent.slice(0, 8)) {\n        const icon = r.outcome === \"succeeded\" ? pc.green(\"✓\") : r.outcome === \"dead\" ? pc.red(\"✖\") : r.outcome === \"retrying\" ? pc.yellow(\"↻\") : pc.gray(\"·\");\n        out(`  ${icon} #${r.seq} ${r.type} ${pc.gray(`${ago(r.at)}${r.attempts > 1 ? `, ${r.attempts} attempts` : \"\"}${r.error && r.outcome !== \"succeeded\" ? `, ${safeText(r.error, 100)}` : \"\"}`)}`);\n      }\n    }\n  }\n  out(`${pc.bold(\"Dead\")}      ${dead.length ? pc.red(`${dead.length} event${dead.length > 1 ? \"s\" : \"\"}`) + pc.gray(` (inspect: ${NPX} listen dead${flagFor(name)})`) : \"0\"}`);\n  out(`${pc.bold(\"Log\")}       ${logPath(name)}`);\n}\n\n// ───────────── listen dead ─────────────\n\nexport function printDead(profileName: string, opts: { json?: boolean }): void {\n  const name = validProfileName(profileName);\n  const entries = readDead(name);\n  if (opts.json) {\n    for (const e of entries) out(JSON.stringify(e));\n    return;\n  }\n  if (!entries.length) {\n    out(`No dead events for profile \"${name}\".`);\n    return;\n  }\n  for (const e of entries) {\n    const m = e.payload.data.message;\n    out(`${pc.red(\"✖\")} #${e.seq} ${e.type} ${pc.gray(e.id)}  ${pc.gray(`died ${ago(e.deadAt)} after ${e.attempts} attempts`)}`);\n    if (m) out(`    from ${safeText(m.from?.email ?? \"?\", 80)}  \"${safeText(m.subject, 80)}\"`);\n    out(pc.gray(`    ${safeText(e.error, 300)}`));\n  }\n  out();\n  out(pc.gray(`${entries.length} dead event${entries.length > 1 ? \"s\" : \"\"} in ${deadPath(name)}.`));\n  out(pc.gray(`Replay with: ${NPX} listen dead --replay${flagFor(name)}   (one: --id <evt_…>; drop all: --clear)`));\n  out(pc.gray(`Replay uses the profile's saved --exec/--forward; if you ran them as flags only, pass them again, e.g. --replay --exec '<command>'.`));\n}\n\nexport function clearDead(profileName: string, id?: string): void {\n  const name = validProfileName(profileName);\n  const entries = readDead(name);\n  const keep = id ? entries.filter((e) => e.id !== id) : [];\n  writeDead(name, keep);\n  out(`Removed ${entries.length - keep.length} dead event${entries.length - keep.length === 1 ? \"\" : \"s\"}.`);\n}\n\n/**\n * Runs dead events again through the profile's targets (or the ones passed as flags). Successes are\n * removed from dead.jsonl; failures stay. Returns how many still failed.\n */\nexport async function replayDead(flags: ListenFlags & { id?: string }, opts: { retryDelayMs?: (n: number) => number } = {}): Promise<number> {\n  const name = validProfileName(flags.profile ?? DEFAULT_PROFILE);\n  const profile = loadProfile(name);\n  const { config } = resolveListen(name, profile, { ...flags, save: false });\n  const all = readDead(name);\n  const chosen = all.filter((e) => !flags.id || e.id === flags.id);\n  if (!chosen.length) {\n    out(flags.id ? `No dead event with id ${flags.id}.` : `No dead events for profile \"${name}\".`);\n    return 0;\n  }\n  const available: Target[] = [];\n  if (config.exec) available.push(\"exec\");\n  if (config.forward) available.push(\"forward\");\n  if (!available.length) throw new Error(`Nothing to replay to: pass --recipe <tool> (claude-code, codex, cursor, hermes), --exec '<command>' and/or --forward <url> (or save them in the profile with \\`${NPX} listen --save …\\`).`);\n  if (config.exec && process.platform === \"win32\") throw new Error(\"--exec isn't supported on Windows; replay with --forward instead.\");\n\n  const timeoutMs = config.timeoutSeconds * 1000;\n  if (config.cwdIsDefault) ensurePrivateDir(config.cwd);\n  const failed = new Map<string, DeadEntry>();\n  const bySeq = new Map(chosen.map((e) => [e.seq, e]));\n  const dispatcher = new Dispatcher({\n    targets: available,\n    concurrency: config.concurrency,\n    maxAttempts: config.maxAttempts,\n    retryDelayMs: opts.retryDelayMs,\n    run: async (job: Job, signal) => {\n      const errors: string[] = [];\n      if (job.remaining.has(\"exec\") && config.exec) {\n        const r = await runCommand(config.exec, job.payload, { timeoutMs, signal, cwd: config.cwd });\n        if (r.ok) job.remaining.delete(\"exec\");\n        else errors.push(`command: ${r.error}`);\n      }\n      if (job.remaining.has(\"forward\") && config.forward) {\n        const r = await forwardEvent(config.forward.url, config.forward.secret, job.payload, { timeoutMs: Math.min(timeoutMs, 30_000), signal, wrap: isHermesRoute(config.forward.url) });\n        if (r.ok) job.remaining.delete(\"forward\");\n        else errors.push(`forward: ${r.error}`);\n      }\n      return errors;\n    },\n    onAdvance: () => {},\n    onDead: (job) => {\n      const e = bySeq.get(job.seq)!;\n      failed.set(e.id, { ...e, deadAt: new Date().toISOString(), attempts: e.attempts + job.attempts, error: job.lastError ?? \"failed\" });\n      out(`${pc.red(\"✖\")} #${job.seq} still failing: ${safeText(job.lastError ?? \"failed\", 200)}`);\n    },\n    onFinished: (job) => {\n      if (job.outcome === \"succeeded\") out(`${pc.green(\"✓\")} #${job.seq} ${job.payload.type} replayed`);\n    },\n  });\n  out(`Replaying ${chosen.length} dead event${chosen.length > 1 ? \"s\" : \"\"} (up to ${config.maxAttempts} attempts each)…`);\n  // Only the targets that never succeeded (a forward that went through isn't POSTed again).\n  for (const e of [...chosen].sort((a, b) => a.seq - b.seq)) {\n    const targets = e.targets?.length ? e.targets.filter((t) => available.includes(t)) : available;\n    if (!targets.length) {\n      out(`${pc.yellow(\"!\")} #${e.seq} needs ${e.targets.join(\" and \")}, which isn't configured now; pass --${e.targets[0]} to replay it.`);\n      failed.set(e.id, e);\n      continue;\n    }\n    dispatcher.push(e.payload, { targets });\n  }\n  await dispatcher.idle();\n\n  const replayed = new Set(chosen.map((e) => e.id));\n  // Re-read so entries added by a running listener meanwhile are kept.\n  const current = readDead(name);\n  writeDead(name, [...current.filter((e) => !replayed.has(e.id)), ...failed.values()]);\n  out(`${chosen.length - failed.size} replayed, ${failed.size} still dead.`);\n  return failed.size;\n}\n"],"mappings":";;;;;;;;;;;AAoBA,MAAM,OAAO,IAAI,OAAO,QAAQ,OAAO,MAAM,GAAG,EAAE,GAAG;AACrD,MAAM,WAAW,YAAqB,YAAA,YAA8B,KAAK,cAAc;AACvF,MAAM,OAAO,QAAoC,MAAM,GAAG,eAAe,KAAK,IAAI,IAAI,KAAK,MAAM,GAAG,CAAC,EAAE,QAAQ;;AAK/G,SAAgB,YAAY,aAAqB,MAAkC;CACjF,MAAM,OAAO,iBAAiB,WAAW;CACzC,MAAM,UAAU,YAAY,IAAI;CAChC,IAAI,EAAE,QAAQ,YAAY,cAAc,OAAO;CAC/C,IAAI,KAAK,QAAQ;EACf,SAAS,cAAc;GAAE,GAAG;GAAS,SAAS,KAAA;GAAW,eAAe,KAAA;EAAU,CAAC,CAAC,CAAC;EACrF,UAAU;CACZ;CACA,IAAI,SAAS;EACX,IAAI,QAAQ,SAAS,QAAQ,UAAU;GAAE,GAAG,QAAQ;GAAS;EAAO;OAC/D,QAAQ,gBAAgB;EAC7B,YAAY,MAAM,OAAO;EACzB,QAAQ,OAAO,MAAM,GAAG,KAAK,GAAG,KAAK,SAAS,YAAY,YAAY,2CAA2C,KAAK,GAAG,KAAK,SAAS,2BAA2B,GAAG,IAAI,CAAC;CAC5K;CAEA,IAAI,MAAM;AACZ;AAIA,eAAsB,YAAY,aAAoC;CACpE,MAAM,OAAO,iBAAiB,WAAW;CACzC,MAAM,UAAU,YAAY,IAAI;CAChC,MAAM,KAAK,WAAW,IAAI;CAC1B,MAAM,QAAQ,KAAK,SAAS,GAAG,GAAG,KAAK,CAAC,GAAG,YAAY;CACvD,MAAM,OAAO,SAAS,IAAI;CAE1B,IAAI,GAAG,GAAG,KAAK,SAAS,EAAE,KAAK,KAAK,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,GAAG;CACpE,IAAI,GAAG,GAAG,KAAK,OAAO,EAAE,OAAO,SAAS,QAAQ,SAAS,EAAE,GAAG,GAAG,KAAK,IAAI,QAAQ,QAAQ,EAAE,GAAG;CAC/F,IAAI,GAAG,GAAG,KAAK,QAAQ,EAAE,MAAM,QAAQ,KAAK;CAC5C,IAAI,GAAG,GAAG,KAAK,UAAU,EAAE,IAAI,IAAI,YAAY,QAAQ,UAAU;CAEjE,MAAM,OAAO,MAAM,GAAG,SAAS,KAAA,IAAY,GAAG,OAAO,QAAQ;CAC7D,MAAM,UAAU,MAAM,GAAG,YAAY,KAAA,IAAY,GAAG,UAAU,QAAQ,SAAS;CAC/E,MAAM,UAAU,CAAC,OAAO,QAAQ,SAAS,MAAM,GAAG,MAAM,MAAM,UAAU,WAAW,YAAY,IAAI,CAAC,CAAC,OAAO,OAAO;CACnH,IAAI,GAAG,GAAG,KAAK,MAAM,EAAE,QAAQ,QAAQ,SAAS,QAAQ,KAAK,KAAK,IAAI,GAAG,KAAK,mDAAmD,GAAG;CACpI,IACE,GAAG,GAAG,KAAK,QAAQ,EAAE,MACnB,QAAQ,OAAO,SACX,QAAQ,MAAM,KAAK,IAAI,IACvB,GAAG,qBAAqB,KAAK,IAAI,EAAE,GAAG,GAAG,KAAK,yDAAyD,KAE/G;CAEA,IAAI,QAA2D;CAC/D,IAAI;EACF,QAAQ,cAAc,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;CAC3C,QAAQ,CAER;CACA,IAAI,GAAG,GAAG,KAAK,SAAS,EAAE,KAAM,SAAS,IAAI,YAAa,QAAQ,eAAe,KAAK,IAAI,MAAM;CAChG,MAAM,eAAe,SAAS,MAAM,GAAG,iBAAiB,KAAA,IAAY,GAAG,eAAgB,OAAO,gBAAgB;CAC9G,IAAI,cAAc,IAAI,GAAG,GAAG,KAAK,OAAO,EAAE,OAAO,eAAe,eAAe,GAAI,EAAE,wCAAkD;CACvI,MAAM,QAAQ,WAAW,cAAc,OAAO,IAAI,aAAa,MAAM,OAAO,IAAI;CAChF,IAAI,OAAO,UAAU,QAAQ,IAAI,GAAG,GAAG,KAAK,OAAO,EAAE,OAAO,GAAG,OAAO,MAAM,OAAO,GAAG;CACtF,IAAI,GAAG,GAAG,KAAK,QAAQ,EAAE,MAAM,WAAW,MAAM;EAAE,MAAM,QAAQ;EAAM,SAAS,UAAU,EAAE,KAAK,QAAQ,IAAI;CAAK,GAAG,QAAQ,IAAI,CAAC,GAAG;CAEpI,IAAI,MAAM;CACV,IAAI,QAAQ,aAAa,WAAW,QAAQ,aAAa,UAAU;EACjE,MAAM,YAAY,sBAAsB,IAAI;EAC5C,IAAI,WAAW,MAAM,cAAc,UAAU,aAAa,IAAI,wBAAwB,QAAQ,IAAI,EAAE;CACtG;CACA,IAAI,GAAG,GAAG,KAAK,SAAS,EAAE,KAAK,KAAK;CAEpC,IAAI;EAEF,MAAM,eAAe,QAAQ,KAAK,EAAE,UAAU,QAAQ,SAAS,CAAC;EAChE,MAAM,OAAO,MAAM,QAAQ,QAAQ,KAAK,QAAQ,QAAQ,GAAI;EAC5D,IAAI,GAAG,GAAG,KAAK,KAAK,EAAE,SAAS,GAAG,MAAM,OAAO,GAAG;EAElD,MAAM,QAAQ,eAAe,KAAK,QAAQ,KAAK,WAAW;EAC1D,IAAI,GAAG,GAAG,KAAK,QAAQ,EAAE,MAAM,UAAU,IAAI,IAAI,MAAM,KAAK,GAAG,OAAO,MAAM,EAAG,GAAG;EAClF,KAAK,MAAM,KAAK,MAAM,MAAM,CAAC,GAAG,IAAI,aAAa,GAAG;CACtD,SAAS,KAAK;EACZ,MAAM,UAAU,eAAe,aAAa,IAAI,WAAW,OAAO,IAAI,WAAW;EACjF,MAAM,MAAM,eAAe,YAAY,IAAI,WAAW,IAAK,IAAI,QAAmB,eAAe,QAAQ,IAAI,QAAQ,MAAM,IAAI,CAAC,CAAC,KAAK,OAAO,GAAG;EAChJ,IAAI,eAAe,gBAAgB,IAAI,GAAG,GAAG,KAAK,KAAK,EAAE,SAAS,GAAG,IAAI,gBAAgB,KAAK,GAAG;OAC5F,IAAI,GAAG,GAAG,KAAK,KAAK,EAAE,SAAS,UAAU,GAAG,IAAI,aAAc,IAAc,SAAS,IAAI,GAAG,OAAO,gBAAgB,IAAI,EAAE,GAAG;CACnI;CAEA,IAAI,CAAC,IACH,IAAI,GAAG,GAAG,KAAK,UAAU,EAAE,IAAI,GAAG,KAAK,iBAAiB,GAAG;MACtD;EACL,MAAM,QAAQ,CAAC,QACX,GAAG,KAAK,cAAc,GAAG,YAAY,aAAa,IAAI,GAAG,SAAS,IAAI,GAAG,aAAa,KAAK,SAAS,GAAG,YAAY,GAAG,MAAM,GAAG,KAAK,0BAA0B,IAC9J,GAAG,YACD,GAAG,MAAM,gBAAgB,GAAG,IAAI,eAAe,IAAI,GAAG,cAAc,GAAG,IACvE,GAAG,OAAO,gBAAgB,GAAG,IAAI,iBAAiB,GAAG,iBAAiB,IAAI,IAAI,GAAG,eAAe,EAAE,EAAE,IAAI,SAAS,GAAG,eAAe,QAAQ,GAAG,MAAM,IAAI;EAC9J,IAAI,GAAG,GAAG,KAAK,UAAU,EAAE,IAAI,OAAO;EACtC,IACE,GAAG,GAAG,KAAK,QAAQ,EAAE,aAAa,GAAG,SAAS,eAAe,GAAG,cAAc,SAAS,GAAG,UAAU,MAAM,GAAG,QAAQ,gBAAgB,KAAK,GAAG,UAAU,MAAM,GAAG,QAAQ,uBAAuB,GAAG,gBAAgB,IAAI,GAAG,WAAW,GACtO;EACA,IAAI,GAAG,OAAO,QAAQ;GACpB,IAAI,GAAG,KAAK,QAAQ,CAAC;GACrB,KAAK,MAAM,KAAK,GAAG,OAAO,MAAM,GAAG,CAAC,GAAG;IACrC,MAAM,OAAO,EAAE,YAAY,cAAc,GAAG,MAAM,GAAG,IAAI,EAAE,YAAY,SAAS,GAAG,IAAI,GAAG,IAAI,EAAE,YAAY,aAAa,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG;IACrJ,IAAI,KAAK,KAAK,IAAI,EAAE,IAAI,GAAG,EAAE,KAAK,GAAG,GAAG,KAAK,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,IAAI,KAAK,EAAE,SAAS,aAAa,KAAK,EAAE,SAAS,EAAE,YAAY,cAAc,KAAK,SAAS,EAAE,OAAO,GAAG,MAAM,IAAI,GAAG;GAC/L;EACF;CACF;CACA,IAAI,GAAG,GAAG,KAAK,MAAM,EAAE,QAAQ,KAAK,SAAS,GAAG,IAAI,GAAG,KAAK,OAAO,QAAQ,KAAK,SAAS,IAAI,MAAM,IAAI,IAAI,GAAG,KAAK,cAAc,IAAI,cAAc,QAAQ,IAAI,EAAE,EAAE,IAAI,KAAK;CAC5K,IAAI,GAAG,GAAG,KAAK,KAAK,EAAE,SAAS,QAAQ,IAAI,GAAG;AAChD;AAIA,SAAgB,UAAU,aAAqB,MAAgC;CAC7E,MAAM,OAAO,iBAAiB,WAAW;CACzC,MAAM,UAAU,SAAS,IAAI;CAC7B,IAAI,KAAK,MAAM;EACb,KAAK,MAAM,KAAK,SAAS,IAAI,KAAK,UAAU,CAAC,CAAC;EAC9C;CACF;CACA,IAAI,CAAC,QAAQ,QAAQ;EACnB,IAAI,+BAA+B,KAAK,GAAG;EAC3C;CACF;CACA,KAAK,MAAM,KAAK,SAAS;EACvB,MAAM,IAAI,EAAE,QAAQ,KAAK;EACzB,IAAI,GAAG,GAAG,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,KAAK,GAAG,GAAG,KAAK,EAAE,EAAE,EAAE,IAAI,GAAG,KAAK,QAAQ,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,UAAU,GAAG;EAC3H,IAAI,GAAG,IAAI,YAAY,SAAS,EAAE,MAAM,SAAS,KAAK,EAAE,EAAE,KAAK,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;EACzF,IAAI,GAAG,KAAK,OAAO,SAAS,EAAE,OAAO,GAAG,GAAG,CAAC;CAC9C;CACA,IAAI;CACJ,IAAI,GAAG,KAAK,GAAG,QAAQ,OAAO,aAAa,QAAQ,SAAS,IAAI,MAAM,GAAG,MAAM,SAAS,IAAI,EAAE,EAAE,CAAC;CACjG,IAAI,GAAG,KAAK,gBAAgB,IAAI,uBAAuB,QAAQ,IAAI,EAAE,0CAA0C,CAAC;CAChH,IAAI,GAAG,KAAK,qIAAqI,CAAC;AACpJ;AAEA,SAAgB,UAAU,aAAqB,IAAmB;CAChE,MAAM,OAAO,iBAAiB,WAAW;CACzC,MAAM,UAAU,SAAS,IAAI;CAC7B,MAAM,OAAO,KAAK,QAAQ,QAAQ,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;CACxD,UAAU,MAAM,IAAI;CACpB,IAAI,WAAW,QAAQ,SAAS,KAAK,OAAO,aAAa,QAAQ,SAAS,KAAK,WAAW,IAAI,KAAK,IAAI,EAAE;AAC3G;;;;;AAMA,eAAsB,WAAW,OAAsC,OAAiD,CAAC,GAAoB;CAC3I,MAAM,OAAO,iBAAiB,MAAM,WAAA,SAA0B;CAC9D,MAAM,UAAU,YAAY,IAAI;CAChC,MAAM,EAAE,WAAW,cAAc,MAAM,SAAS;EAAE,GAAG;EAAO,MAAM;CAAM,CAAC;CAEzE,MAAM,SADM,SAAS,IACJ,CAAC,CAAC,QAAQ,MAAM,CAAC,MAAM,MAAM,EAAE,OAAO,MAAM,EAAE;CAC/D,IAAI,CAAC,OAAO,QAAQ;EAClB,IAAI,MAAM,KAAK,yBAAyB,MAAM,GAAG,KAAK,+BAA+B,KAAK,GAAG;EAC7F,OAAO;CACT;CACA,MAAM,YAAsB,CAAC;CAC7B,IAAI,OAAO,MAAM,UAAU,KAAK,MAAM;CACtC,IAAI,OAAO,SAAS,UAAU,KAAK,SAAS;CAC5C,IAAI,CAAC,UAAU,QAAQ,MAAM,IAAI,MAAM,kKAAkK,IAAI,qBAAqB;CAClO,IAAI,OAAO,QAAQ,QAAQ,aAAa,SAAS,MAAM,IAAI,MAAM,mEAAmE;CAEpI,MAAM,YAAY,OAAO,iBAAiB;CAC1C,IAAI,OAAO,cAAc,iBAAiB,OAAO,GAAG;CACpD,MAAM,yBAAS,IAAI,IAAuB;CAC1C,MAAM,QAAQ,IAAI,IAAI,OAAO,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;CACnD,MAAM,aAAa,IAAI,WAAW;EAChC,SAAS;EACT,aAAa,OAAO;EACpB,aAAa,OAAO;EACpB,cAAc,KAAK;EACnB,KAAK,OAAO,KAAU,WAAW;GAC/B,MAAM,SAAmB,CAAC;GAC1B,IAAI,IAAI,UAAU,IAAI,MAAM,KAAK,OAAO,MAAM;IAC5C,MAAM,IAAI,MAAM,WAAW,OAAO,MAAM,IAAI,SAAS;KAAE;KAAW;KAAQ,KAAK,OAAO;IAAI,CAAC;IAC3F,IAAI,EAAE,IAAI,IAAI,UAAU,OAAO,MAAM;SAChC,OAAO,KAAK,YAAY,EAAE,OAAO;GACxC;GACA,IAAI,IAAI,UAAU,IAAI,SAAS,KAAK,OAAO,SAAS;IAClD,MAAM,IAAI,MAAM,aAAa,OAAO,QAAQ,KAAK,OAAO,QAAQ,QAAQ,IAAI,SAAS;KAAE,WAAW,KAAK,IAAI,WAAW,GAAM;KAAG;KAAQ,MAAM,cAAc,OAAO,QAAQ,GAAG;IAAE,CAAC;IAChL,IAAI,EAAE,IAAI,IAAI,UAAU,OAAO,SAAS;SACnC,OAAO,KAAK,YAAY,EAAE,OAAO;GACxC;GACA,OAAO;EACT;EACA,iBAAiB,CAAC;EAClB,SAAS,QAAQ;GACf,MAAM,IAAI,MAAM,IAAI,IAAI,GAAG;GAC3B,OAAO,IAAI,EAAE,IAAI;IAAE,GAAG;IAAG,yBAAQ,IAAI,KAAK,EAAA,CAAE,YAAY;IAAG,UAAU,EAAE,WAAW,IAAI;IAAU,OAAO,IAAI,aAAa;GAAS,CAAC;GAClI,IAAI,GAAG,GAAG,IAAI,GAAG,EAAE,IAAI,IAAI,IAAI,kBAAkB,SAAS,IAAI,aAAa,UAAU,GAAG,GAAG;EAC7F;EACA,aAAa,QAAQ;GACnB,IAAI,IAAI,YAAY,aAAa,IAAI,GAAG,GAAG,MAAM,GAAG,EAAE,IAAI,IAAI,IAAI,GAAG,IAAI,QAAQ,KAAK,UAAU;EAClG;CACF,CAAC;CACD,IAAI,aAAa,OAAO,OAAO,aAAa,OAAO,SAAS,IAAI,MAAM,GAAG,UAAU,OAAO,YAAY,iBAAiB;CAEvH,KAAK,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG;EACzD,MAAM,UAAU,EAAE,SAAS,SAAS,EAAE,QAAQ,QAAQ,MAAM,UAAU,SAAS,CAAC,CAAC,IAAI;EACrF,IAAI,CAAC,QAAQ,QAAQ;GACnB,IAAI,GAAG,GAAG,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,QAAQ,KAAK,OAAO,EAAE,uCAAuC,EAAE,QAAQ,GAAG,eAAe;GACpI,OAAO,IAAI,EAAE,IAAI,CAAC;GAClB;EACF;EACA,WAAW,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC;CACxC;CACA,MAAM,WAAW,KAAK;CAEtB,MAAM,WAAW,IAAI,IAAI,OAAO,KAAK,MAAM,EAAE,EAAE,CAAC;CAEhD,MAAM,UAAU,SAAS,IAAI;CAC7B,UAAU,MAAM,CAAC,GAAG,QAAQ,QAAQ,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,OAAO,OAAO,CAAC,CAAC;CACnF,IAAI,GAAG,OAAO,SAAS,OAAO,KAAK,aAAa,OAAO,KAAK,aAAa;CACzE,OAAO,OAAO;AAChB"}

package/dist/admin-CWofnT_Q.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export { n as CLEANUP_SIGNALS, o as daemonOrigin, s as openAdminChannel } from "./admin-5gThRwgj.js";