xaq-cli 0.0.0 → 0.1.0-nightly.71

package/dist/api-BFpElwqK.js

@@ -0,0 +1,89 @@
+#!/usr/bin/env node
+import { t as AdminApiError } from "./admin-5gThRwgj.js";
+//#region server/connections-cli/api.ts
+/** The routes aren't there: an older daemon, or brokerUpstreams is off. */
+var BrokerOffError = class extends Error {
+	constructor() {
+		super("This xaq doesn't have connections turned on yet (the brokerUpstreams setting), or is older than this CLI. Update it, turn connections on in the console's Settings, then run this again.");
+		this.name = "BrokerOffError";
+	}
+};
+const enc = encodeURIComponent;
+var ConnectionsApi = class {
+	channel;
+	constructor(channel) {
+		this.channel = channel;
+	}
+	async call(method, path, body) {
+		try {
+			return await this.channel.request(method, path, body);
+		} catch (err) {
+			if (err instanceof AdminApiError && err.status === 404 && err.code === "not_found" && path.startsWith("/api/connections")) throw new BrokerOffError();
+			throw err;
+		}
+	}
+	list() {
+		return this.call("GET", "/api/connections");
+	}
+	presets() {
+		return this.call("GET", "/api/connections/presets");
+	}
+	/** With `connectionId`, the probe uses that connection's private-target allow (when it covers the URL). */
+	probe(url, connectionId) {
+		return this.call("POST", "/api/connections/probe", connectionId ? {
+			url,
+			connectionId
+		} : { url });
+	}
+	create(input) {
+		return this.call("POST", "/api/connections", input);
+	}
+	get(id) {
+		return this.call("GET", `/api/connections/${enc(id)}`);
+	}
+	/** Stores a static header (and connects), or starts OAuth and returns the authorize URL. */
+	connect(id, input = {}) {
+		return this.call("POST", `/api/connections/${enc(id)}/connect`, input);
+	}
+	/** The admin-only private-target allow, pinned server-side to the URL's exact scheme://host:port. */
+	allowPrivateTarget(id, allow) {
+		return this.call("PUT", `/api/connections/${enc(id)}/private-target`, { allow });
+	}
+	/** The kill switch: disabled at once, pending calls cancelled, credentials deleted. */
+	kill(id) {
+		return this.call("POST", `/api/connections/${enc(id)}/kill`, {});
+	}
+	remove(id) {
+		return this.call("DELETE", `/api/connections/${enc(id)}`);
+	}
+	async bySlug(slug) {
+		const all = await this.list();
+		const found = all.find((c) => c.slug === slug);
+		if (!found) throw new Error(`No connection "${slug}". ${all.length ? `There are: ${all.map((c) => c.slug).join(", ")}.` : "There are none yet."}`);
+		return found;
+	}
+	grants(id) {
+		return this.call("GET", `/api/connections/${enc(id)}/grants`);
+	}
+	/** The full list: agents not in it lose access. */
+	setGrants(id, grants) {
+		return this.call("PUT", `/api/connections/${enc(id)}/grants`, { grants });
+	}
+	agents() {
+		return this.channel.request("GET", "/api/agents");
+	}
+	/** Paste mode: the address the browser landed on after approving (the daemon checks state and issuer). */
+	async finish(url) {
+		try {
+			return await this.call("POST", "/api/connections/finish", { url });
+		} catch (err) {
+			const body = err instanceof AdminApiError ? err.body : null;
+			if (body?.status === "error") return body;
+			throw err;
+		}
+	}
+};
+//#endregion
+export { ConnectionsApi };
+
+//# sourceMappingURL=api-BFpElwqK.js.map

package/dist/api-BFpElwqK.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-BFpElwqK.js","names":[],"sources":["../server/connections-cli/api.ts"],"sourcesContent":["import type {\n  AccessLevel,\n  Agent,\n  ConnectionGrant,\n  ConnectionProbe,\n  ConnectionView,\n  CreateConnectionInput,\n  PresetView,\n  StartConnectInput,\n  StartConnectResult,\n} from \"../../shared/types.ts\";\nimport { AdminApiError, type AdminChannel } from \"./admin.ts\";\n\n/**\n * The admin connections API (server/api/connections.ts, DTOs in shared/types.ts) as the CLI uses it. While the\n * `brokerUpstreams` setting is off every /api/connections route answers 404; the CLI says so in plain words.\n */\n\nexport type { ConnectionProbe, ConnectionView, PresetView, StartConnectResult };\n\n/** The routes aren't there: an older daemon, or brokerUpstreams is off. */\nexport class BrokerOffError extends Error {\n  constructor() {\n    super(\n      \"This xaq doesn't have connections turned on yet (the brokerUpstreams setting), or is older than this CLI. \" +\n        \"Update it, turn connections on in the console's Settings, then run this again.\",\n    );\n    this.name = \"BrokerOffError\";\n  }\n}\n\nconst enc = encodeURIComponent;\n\nexport class ConnectionsApi {\n  constructor(readonly channel: AdminChannel) {}\n\n  private async call<T>(method: string, path: string, body?: unknown): Promise<T> {\n    try {\n      return await this.channel.request<T>(method, path, body);\n    } catch (err) {\n      if (err instanceof AdminApiError && err.status === 404 && err.code === \"not_found\" && path.startsWith(\"/api/connections\")) throw new BrokerOffError();\n      throw err;\n    }\n  }\n\n  list(): Promise<ConnectionView[]> {\n    return this.call(\"GET\", \"/api/connections\");\n  }\n  presets(): Promise<PresetView[]> {\n    return this.call(\"GET\", \"/api/connections/presets\");\n  }\n  /** With `connectionId`, the probe uses that connection's private-target allow (when it covers the URL). */\n  probe(url: string, connectionId?: string): Promise<ConnectionProbe> {\n    return this.call(\"POST\", \"/api/connections/probe\", connectionId ? { url, connectionId } : { url });\n  }\n  create(input: CreateConnectionInput): Promise<ConnectionView> {\n    return this.call(\"POST\", \"/api/connections\", input);\n  }\n  get(id: string): Promise<ConnectionView> {\n    return this.call(\"GET\", `/api/connections/${enc(id)}`);\n  }\n  /** Stores a static header (and connects), or starts OAuth and returns the authorize URL. */\n  connect(id: string, input: StartConnectInput = {}): Promise<StartConnectResult> {\n    return this.call(\"POST\", `/api/connections/${enc(id)}/connect`, input);\n  }\n  /** The admin-only private-target allow, pinned server-side to the URL's exact scheme://host:port. */\n  allowPrivateTarget(id: string, allow: boolean): Promise<ConnectionView> {\n    return this.call(\"PUT\", `/api/connections/${enc(id)}/private-target`, { allow });\n  }\n  /** The kill switch: disabled at once, pending calls cancelled, credentials deleted. */\n  kill(id: string): Promise<void> {\n    return this.call(\"POST\", `/api/connections/${enc(id)}/kill`, {});\n  }\n  remove(id: string): Promise<void> {\n    return this.call(\"DELETE\", `/api/connections/${enc(id)}`);\n  }\n  async bySlug(slug: string): Promise<ConnectionView> {\n    const all = await this.list();\n    const found = all.find((c) => c.slug === slug);\n    if (!found) throw new Error(`No connection \"${slug}\". ${all.length ? `There are: ${all.map((c) => c.slug).join(\", \")}.` : \"There are none yet.\"}`);\n    return found;\n  }\n  grants(id: string): Promise<ConnectionGrant[]> {\n    return this.call(\"GET\", `/api/connections/${enc(id)}/grants`);\n  }\n  /** The full list: agents not in it lose access. */\n  setGrants(id: string, grants: { agentId: string; level: AccessLevel }[]): Promise<ConnectionGrant[]> {\n    return this.call(\"PUT\", `/api/connections/${enc(id)}/grants`, { grants });\n  }\n  agents(): Promise<Agent[]> {\n    return this.channel.request(\"GET\", \"/api/agents\");\n  }\n\n  /** Paste mode: the address the browser landed on after approving (the daemon checks state and issuer). */\n  async finish(url: string): Promise<StartConnectResult> {\n    try {\n      return await this.call<StartConnectResult>(\"POST\", \"/api/connections/finish\", { url });\n    } catch (err) {\n      // A refused sign-in is a 400 carrying a StartConnectResult, not the usual error envelope.\n      const body = err instanceof AdminApiError ? (err.body as StartConnectResult | null) : null;\n      if (body?.status === \"error\") return body;\n      throw err;\n    }\n  }\n}\n"],"mappings":";;;;AAqBA,IAAa,iBAAb,cAAoC,MAAM;CACxC,cAAc;EACZ,MACE,0LAEF;EACA,KAAK,OAAO;CACd;AACF;AAEA,MAAM,MAAM;AAEZ,IAAa,iBAAb,MAA4B;CACL;CAArB,YAAY,SAAgC;EAAvB,KAAA,UAAA;CAAwB;CAE7C,MAAc,KAAQ,QAAgB,MAAc,MAA4B;EAC9E,IAAI;GACF,OAAO,MAAM,KAAK,QAAQ,QAAW,QAAQ,MAAM,IAAI;EACzD,SAAS,KAAK;GACZ,IAAI,eAAe,iBAAiB,IAAI,WAAW,OAAO,IAAI,SAAS,eAAe,KAAK,WAAW,kBAAkB,GAAG,MAAM,IAAI,eAAe;GACpJ,MAAM;EACR;CACF;CAEA,OAAkC;EAChC,OAAO,KAAK,KAAK,OAAO,kBAAkB;CAC5C;CACA,UAAiC;EAC/B,OAAO,KAAK,KAAK,OAAO,0BAA0B;CACpD;;CAEA,MAAM,KAAa,cAAiD;EAClE,OAAO,KAAK,KAAK,QAAQ,0BAA0B,eAAe;GAAE;GAAK;EAAa,IAAI,EAAE,IAAI,CAAC;CACnG;CACA,OAAO,OAAuD;EAC5D,OAAO,KAAK,KAAK,QAAQ,oBAAoB,KAAK;CACpD;CACA,IAAI,IAAqC;EACvC,OAAO,KAAK,KAAK,OAAO,oBAAoB,IAAI,EAAE,GAAG;CACvD;;CAEA,QAAQ,IAAY,QAA2B,CAAC,GAAgC;EAC9E,OAAO,KAAK,KAAK,QAAQ,oBAAoB,IAAI,EAAE,EAAE,WAAW,KAAK;CACvE;;CAEA,mBAAmB,IAAY,OAAyC;EACtE,OAAO,KAAK,KAAK,OAAO,oBAAoB,IAAI,EAAE,EAAE,kBAAkB,EAAE,MAAM,CAAC;CACjF;;CAEA,KAAK,IAA2B;EAC9B,OAAO,KAAK,KAAK,QAAQ,oBAAoB,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;CACjE;CACA,OAAO,IAA2B;EAChC,OAAO,KAAK,KAAK,UAAU,oBAAoB,IAAI,EAAE,GAAG;CAC1D;CACA,MAAM,OAAO,MAAuC;EAClD,MAAM,MAAM,MAAM,KAAK,KAAK;EAC5B,MAAM,QAAQ,IAAI,MAAM,MAAM,EAAE,SAAS,IAAI;EAC7C,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,kBAAkB,KAAK,KAAK,IAAI,SAAS,cAAc,IAAI,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,KAAK,uBAAuB;EACjJ,OAAO;CACT;CACA,OAAO,IAAwC;EAC7C,OAAO,KAAK,KAAK,OAAO,oBAAoB,IAAI,EAAE,EAAE,QAAQ;CAC9D;;CAEA,UAAU,IAAY,QAA+E;EACnG,OAAO,KAAK,KAAK,OAAO,oBAAoB,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC;CAC1E;CACA,SAA2B;EACzB,OAAO,KAAK,QAAQ,QAAQ,OAAO,aAAa;CAClD;;CAGA,MAAM,OAAO,KAA0C;EACrD,IAAI;GACF,OAAO,MAAM,KAAK,KAAyB,QAAQ,2BAA2B,EAAE,IAAI,CAAC;EACvF,SAAS,KAAK;GAEZ,MAAM,OAAO,eAAe,gBAAiB,IAAI,OAAqC;GACtF,IAAI,MAAM,WAAW,SAAS,OAAO;GACrC,MAAM;EACR;CACF;AACF"}

package/dist/audit-BB7jK9Z5.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export { t as AuditLog } from "./audit-BVYknW2i.js";

package/dist/audit-BVYknW2i.js

@@ -0,0 +1,79 @@
+#!/usr/bin/env node
+import { i as now, r as json } from "./db-BEUEUPyP.js";
+//#region server/audit.ts
+/**
+* SQL condition for an MCP tool call in audit_log: an agent actor and an action without a "." (tool
+* names are like "send_message"; "pairing.key_delivered" and console actions have a dot). The same
+* rule as isMcpToolAction in shared/types.ts (used by the console). `t` is the table alias, if any.
+*
+* Every outcome counts, including calls rejected before a tool ran (unknown tool, invalid arguments,
+* a malformed tools/call): those are recorded with outcome "error" (see rejectedCall in
+* server/mcp/server.ts), so the Overview's "Tool calls" counts them. Anything that needs proof that
+* an agent works (anyAgentVerified, the wizard's checks) adds `outcome = 'ok'`.
+*/
+function mcpToolCallSql(t) {
+	const c = t ? `${t}.` : "";
+	return `${c}actor_type = 'agent' AND instr(${c}action, '.') = 0`;
+}
+const SELECT = `SELECT a.*, CASE a.actor_type WHEN 'agent' THEN ag.name WHEN 'admin' THEN 'admin' ELSE NULL END AS actor_name
+  FROM audit_log a LEFT JOIN agents ag ON a.actor_type = 'agent' AND ag.id = a.actor_id`;
+const toEntry = (r) => ({
+	id: r.id,
+	ts: r.ts,
+	actorType: r.actor_type,
+	actorId: r.actor_id,
+	actorName: r.actor_name,
+	action: r.action,
+	accountId: r.account_id,
+	target: r.target,
+	outcome: r.outcome,
+	reason: r.reason,
+	durationMs: r.duration_ms,
+	detail: json.parse(r.detail, null)
+});
+/** Append-only audit log. Every agent tool call and every admin mutation is recorded. */
+var AuditLog = class {
+	db;
+	bus;
+	constructor(db, bus) {
+		this.db = db;
+		this.bus = bus;
+	}
+	record(input) {
+		const { lastInsertRowid } = this.db.run(`INSERT INTO audit_log (ts, actor_type, actor_id, action, account_id, target, outcome, reason, duration_ms, detail)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, now(), input.actorType, input.actorId ?? null, input.action, input.accountId ?? null, input.target ?? null, input.outcome, input.reason ?? null, input.durationMs ?? null, input.detail ? json.str(input.detail) : null);
+		const entry = toEntry(this.db.get(`${SELECT} WHERE a.id = ?`, lastInsertRowid));
+		this.bus.emit("audit", entry);
+		return entry;
+	}
+	/** Newest first. */
+	list(q = {}) {
+		const where = [];
+		const params = [];
+		const add = (clause, value) => {
+			where.push(clause);
+			params.push(value);
+		};
+		if (q.agentId) add("a.actor_id = ?", q.agentId);
+		if (q.accountId) add("a.account_id = ?", q.accountId);
+		if (q.outcome) add("a.outcome = ?", q.outcome);
+		if (q.action) add("a.action = ?", q.action);
+		const before = Number(q.cursor);
+		if (q.cursor && Number.isInteger(before)) add("a.id < ?", before);
+		const limit = Math.min(Math.max(q.limit ?? 50, 1), 200);
+		const rows = this.db.all(`${SELECT} ${where.length ? "WHERE " + where.join(" AND ") : ""} ORDER BY a.id DESC LIMIT ?`, ...params, limit + 1);
+		const items = rows.slice(0, limit).map(toEntry);
+		return {
+			items,
+			nextCursor: rows.length > limit ? String(items.at(-1).id) : null
+		};
+	}
+	/** Deletes entries older than `beforeIso`. Returns the number removed. */
+	prune(beforeIso) {
+		return this.db.run("DELETE FROM audit_log WHERE ts < ?", beforeIso).changes;
+	}
+};
+//#endregion
+export { mcpToolCallSql as n, AuditLog as t };
+
+//# sourceMappingURL=audit-BVYknW2i.js.map

package/dist/audit-BVYknW2i.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-BVYknW2i.js","names":[],"sources":["../server/audit.ts"],"sourcesContent":["import type { ActorType, AuditEntry, AuditOutcome, Page } from \"../shared/types.ts\";\nimport type { Bus } from \"./bus.ts\";\nimport { type Db, json, now } from \"./db/index.ts\";\n\nexport interface AuditInput {\n  actorType: ActorType;\n  actorId?: string | null;\n  /** MCP tool name or console action, e.g. \"send_message\", \"agent.create\", \"account.connect\". */\n  action: string;\n  accountId?: string | null;\n  target?: string | null;\n  outcome: AuditOutcome;\n  /** Required for denials: the guardrail that blocked it (\"allow_to\", \"label_scope\", \"rate_limit\", …). */\n  reason?: string | null;\n  durationMs?: number | null;\n  /** Small, non-sensitive context. Never message bodies, keys or tokens. */\n  detail?: Record<string, unknown> | null;\n}\n\n/**\n * SQL condition for an MCP tool call in audit_log: an agent actor and an action without a \".\" (tool\n * names are like \"send_message\"; \"pairing.key_delivered\" and console actions have a dot). The same\n * rule as isMcpToolAction in shared/types.ts (used by the console). `t` is the table alias, if any.\n *\n * Every outcome counts, including calls rejected before a tool ran (unknown tool, invalid arguments,\n * a malformed tools/call): those are recorded with outcome \"error\" (see rejectedCall in\n * server/mcp/server.ts), so the Overview's \"Tool calls\" counts them. Anything that needs proof that\n * an agent works (anyAgentVerified, the wizard's checks) adds `outcome = 'ok'`.\n */\nexport function mcpToolCallSql(t?: string): string {\n  const c = t ? `${t}.` : \"\";\n  return `${c}actor_type = 'agent' AND instr(${c}action, '.') = 0`;\n}\n\nexport interface AuditQuery {\n  agentId?: string;\n  accountId?: string;\n  outcome?: AuditOutcome;\n  action?: string;\n  /** Opaque cursor from a previous page. */\n  cursor?: string | null;\n  limit?: number;\n}\n\ninterface AuditRow {\n  id: number;\n  ts: string;\n  actor_type: ActorType;\n  actor_id: string | null;\n  actor_name: string | null;\n  action: string;\n  account_id: string | null;\n  target: string | null;\n  outcome: AuditOutcome;\n  reason: string | null;\n  duration_ms: number | null;\n  detail: string | null;\n}\n\nconst SELECT = `SELECT a.*, CASE a.actor_type WHEN 'agent' THEN ag.name WHEN 'admin' THEN 'admin' ELSE NULL END AS actor_name\n  FROM audit_log a LEFT JOIN agents ag ON a.actor_type = 'agent' AND ag.id = a.actor_id`;\n\nconst toEntry = (r: AuditRow): AuditEntry => ({\n  id: r.id,\n  ts: r.ts,\n  actorType: r.actor_type,\n  actorId: r.actor_id,\n  actorName: r.actor_name,\n  action: r.action,\n  accountId: r.account_id,\n  target: r.target,\n  outcome: r.outcome,\n  reason: r.reason,\n  durationMs: r.duration_ms,\n  detail: json.parse<Record<string, unknown> | null>(r.detail, null),\n});\n\n/** Append-only audit log. Every agent tool call and every admin mutation is recorded. */\nexport class AuditLog {\n  constructor(\n    private readonly db: Db,\n    private readonly bus: Bus,\n  ) {}\n\n  record(input: AuditInput): AuditEntry {\n    const { lastInsertRowid } = this.db.run(\n      `INSERT INTO audit_log (ts, actor_type, actor_id, action, account_id, target, outcome, reason, duration_ms, detail)\n       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n      now(),\n      input.actorType,\n      input.actorId ?? null,\n      input.action,\n      input.accountId ?? null,\n      input.target ?? null,\n      input.outcome,\n      input.reason ?? null,\n      input.durationMs ?? null,\n      input.detail ? json.str(input.detail) : null,\n    );\n    const entry = toEntry(this.db.get<AuditRow>(`${SELECT} WHERE a.id = ?`, lastInsertRowid)!);\n    this.bus.emit(\"audit\", entry);\n    return entry;\n  }\n\n  /** Newest first. */\n  list(q: AuditQuery = {}): Page<AuditEntry> {\n    const where: string[] = [];\n    const params: (string | number)[] = [];\n    const add = (clause: string, value: string | number) => {\n      where.push(clause);\n      params.push(value);\n    };\n    if (q.agentId) add(\"a.actor_id = ?\", q.agentId);\n    if (q.accountId) add(\"a.account_id = ?\", q.accountId);\n    if (q.outcome) add(\"a.outcome = ?\", q.outcome);\n    if (q.action) add(\"a.action = ?\", q.action);\n    const before = Number(q.cursor);\n    if (q.cursor && Number.isInteger(before)) add(\"a.id < ?\", before);\n    const limit = Math.min(Math.max(q.limit ?? 50, 1), 200);\n    const rows = this.db.all<AuditRow>(\n      `${SELECT} ${where.length ? \"WHERE \" + where.join(\" AND \") : \"\"} ORDER BY a.id DESC LIMIT ?`,\n      ...params,\n      limit + 1,\n    );\n    const items = rows.slice(0, limit).map(toEntry);\n    return { items, nextCursor: rows.length > limit ? String(items.at(-1)!.id) : null };\n  }\n\n  /** Deletes entries older than `beforeIso`. Returns the number removed. */\n  prune(beforeIso: string): number {\n    return this.db.run(\"DELETE FROM audit_log WHERE ts < ?\", beforeIso).changes;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AA6BA,SAAgB,eAAe,GAAoB;CACjD,MAAM,IAAI,IAAI,GAAG,EAAE,KAAK;CACxB,OAAO,GAAG,EAAE,iCAAiC,EAAE;AACjD;AA2BA,MAAM,SAAS;;AAGf,MAAM,WAAW,OAA6B;CAC5C,IAAI,EAAE;CACN,IAAI,EAAE;CACN,WAAW,EAAE;CACb,SAAS,EAAE;CACX,WAAW,EAAE;CACb,QAAQ,EAAE;CACV,WAAW,EAAE;CACb,QAAQ,EAAE;CACV,SAAS,EAAE;CACX,QAAQ,EAAE;CACV,YAAY,EAAE;CACd,QAAQ,KAAK,MAAsC,EAAE,QAAQ,IAAI;AACnE;;AAGA,IAAa,WAAb,MAAsB;CAED;CACA;CAFnB,YACE,IACA,KACA;EAFiB,KAAA,KAAA;EACA,KAAA,MAAA;CAChB;CAEH,OAAO,OAA+B;EACpC,MAAM,EAAE,oBAAoB,KAAK,GAAG,IAClC;+CAEA,IAAI,GACJ,MAAM,WACN,MAAM,WAAW,MACjB,MAAM,QACN,MAAM,aAAa,MACnB,MAAM,UAAU,MAChB,MAAM,SACN,MAAM,UAAU,MAChB,MAAM,cAAc,MACpB,MAAM,SAAS,KAAK,IAAI,MAAM,MAAM,IAAI,IAC1C;EACA,MAAM,QAAQ,QAAQ,KAAK,GAAG,IAAc,GAAG,OAAO,kBAAkB,eAAe,CAAE;EACzF,KAAK,IAAI,KAAK,SAAS,KAAK;EAC5B,OAAO;CACT;;CAGA,KAAK,IAAgB,CAAC,GAAqB;EACzC,MAAM,QAAkB,CAAC;EACzB,MAAM,SAA8B,CAAC;EACrC,MAAM,OAAO,QAAgB,UAA2B;GACtD,MAAM,KAAK,MAAM;GACjB,OAAO,KAAK,KAAK;EACnB;EACA,IAAI,EAAE,SAAS,IAAI,kBAAkB,EAAE,OAAO;EAC9C,IAAI,EAAE,WAAW,IAAI,oBAAoB,EAAE,SAAS;EACpD,IAAI,EAAE,SAAS,IAAI,iBAAiB,EAAE,OAAO;EAC7C,IAAI,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM;EAC1C,MAAM,SAAS,OAAO,EAAE,MAAM;EAC9B,IAAI,EAAE,UAAU,OAAO,UAAU,MAAM,GAAG,IAAI,YAAY,MAAM;EAChE,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,EAAE,SAAS,IAAI,CAAC,GAAG,GAAG;EACtD,MAAM,OAAO,KAAK,GAAG,IACnB,GAAG,OAAO,GAAG,MAAM,SAAS,WAAW,MAAM,KAAK,OAAO,IAAI,GAAG,8BAChE,GAAG,QACH,QAAQ,CACV;EACA,MAAM,QAAQ,KAAK,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,OAAO;EAC9C,OAAO;GAAE;GAAO,YAAY,KAAK,SAAS,QAAQ,OAAO,MAAM,GAAG,EAAE,CAAC,CAAE,EAAE,IAAI;EAAK;CACpF;;CAGA,MAAM,WAA2B;EAC/B,OAAO,KAAK,GAAG,IAAI,sCAAsC,SAAS,CAAC,CAAC;CACtE;AACF"}

package/dist/auth-CXmBdMqw.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export { l as currentSetupToken, f as isClaimed, g as resetAdminPassword } from "./auth-D-GmwNv-.js";