agent-wire-cli 0.2.3__tar.gz → 0.2.5__tar.gz

agent_wire_cli-0.2.5/.claude-plugin/marketplace.json

@@ -0,0 +1,14 @@
+{
+  "name": "agent-wire",
+  "description": "Agent Wire by uncoalesced: live web, search and platform reads for AI agents from one local MCP server, compressed and shielded against prompt injection.",
+  "owner": {
+    "name": "uncoalesced"
+  },
+  "plugins": [
+    {
+      "name": "agent-wire",
+      "source": "./plugin",
+      "description": "Live web, search and platform reads for agents, compressed and shielded against prompt injection."
+    }
+  ]
+}

{agent_wire_cli-0.2.3 → agent_wire_cli-0.2.5}/.github/dependabot.yml

@@ -1,7 +1,8 @@
 version: 2
 updates:
   # Python dependencies in uv.lock. Security fixes come as separate PRs straight away
-  # (Dependabot security updates); this keeps routine upgrades to one weekly batch.
+  # (Dependabot security updates); this keeps routine upgrades to one weekly batch. Routine
+  # upgrades wait 7 days after a release, so a hijacked version is usually pulled before we take it.
   - package-ecosystem: uv
     directory: /
     target-branch: dev
@@ -13,6 +14,8 @@ updates:
         patterns: ["*"]
         update-types: [minor, patch]
     open-pull-requests-limit: 5
+    cooldown:
+      default-days: 7
 
   # Actions are pinned to commit SHAs; this bumps the SHA and the version comment together.
   - package-ecosystem: github-actions

{agent_wire_cli-0.2.3 → agent_wire_cli-0.2.5}/.github/workflows/ci.yml

@@ -17,16 +17,16 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
       - name: Lockfile matches pyproject.toml
         run: uv lock --check
       - name: Install
         run: uv sync --extra dev --locked
       - name: Ruff lint
-        run: uv run ruff check src tests .github/scripts
+        run: uv run ruff check src tests
       - name: Ruff format
         run: uv run ruff format --check .
       - name: No temp-dir writes in the package
@@ -44,10 +44,10 @@ jobs:
     runs-on: ${{ matrix.os }}
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
         with:
           python-version: ${{ matrix.python }}
       - name: Install
@@ -59,10 +59,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
       - name: Build sdist and wheel
         run: uv build
       - name: Package metadata renders on PyPI
@@ -93,10 +93,10 @@ jobs:
     runs-on: ${{ matrix.os }}
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
         with:
           python-version: ${{ matrix.python }}
       - name: Build wheel
@@ -109,8 +109,6 @@ jobs:
           out=$(uvx --python ${{ matrix.python }} --from "$whl" wire run -e "return 6 * 7")
           echo "$out"
           grep -q '^42$' <<<"$out"
-      - name: MCP server over stdio (both modes)
+      - name: Self-test (every subsystem, MCP over stdio in both modes, no network)
         shell: bash
-        run: >-
-          uv run --isolated --no-project --python ${{ matrix.python }}
-          --with "$(ls dist/*.whl)" python .github/scripts/mcp_smoke.py
+        run: uvx --python ${{ matrix.python }} --from "$(ls dist/*.whl)" wire selftest

{agent_wire_cli-0.2.3 → agent_wire_cli-0.2.5}/.github/workflows/codeql.yml

@@ -27,7 +27,7 @@ jobs:
       contents: read
       security-events: write # upload results to the Security tab
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1

{agent_wire_cli-0.2.3 → agent_wire_cli-0.2.5}/.github/workflows/release.yml

@@ -15,10 +15,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
         with:
           enable-cache: false # never build a release from a cache another run could have written
       - name: Tag matches the package version
@@ -27,9 +27,10 @@ jobs:
           test "v$v" = "${GITHUB_REF_NAME}" || { echo "tag ${GITHUB_REF_NAME} != v$v"; exit 1; }
       - run: uv sync --extra dev --locked
       - run: uv run pytest -q
+      - run: uv run wire selftest
       - run: uv build
       - run: uvx twine check --strict dist/*
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: dist
           path: dist/
@@ -42,7 +43,7 @@ jobs:
     permissions:
       id-token: write # PyPI trusted publishing
     steps:
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: dist
           path: dist/

{agent_wire_cli-0.2.3 → agent_wire_cli-0.2.5}/.github/workflows/security.yml

@@ -21,10 +21,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
       - name: Export the lockfile
         run: uv export --frozen --no-hashes --all-extras --no-emit-project -o requirements-audit.txt
       - name: pip-audit
@@ -35,10 +35,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
       - name: bandit
         run: uvx bandit==1.9.4 -r src -ll
 
@@ -47,10 +47,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
+      - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
       - name: zizmor
         run: uvx zizmor==1.31.1 --format plain .github/workflows
         env:
@@ -62,7 +62,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0

agent_wire_cli-0.2.5/CHANGELOG.md

@@ -0,0 +1,55 @@
+# Changelog
+
+All notable changes to agent-wire (`agent-wire-cli` on PyPI, the `agent-wire` Claude plugin).
+
+## 0.2.5 (2026-11-15)
+
+### Added
+- **`wire selftest`.** Checks every subsystem in one offline run, and a guard fails the run on any network attempt. It covers:
+  - all 31 channels, on canned responses
+  - the inbound and outbound firewalls, and the SSRF guard
+  - Shield Alerts and the alert ledger
+  - compression, the delta buffer and the route ledger
+  - the cookie vault and Code Mode
+  - research and `wire_cite`
+  - the 11 client installers
+  - the MCP server, in-process and over stdio
+
+  `--live` adds one real request per channel (Reddit with no API key) and counts shield false positives on the 16 README benchmark pages. `--only` and `--json` narrow and format the run. CI and the release workflow run the offline check.
+- **Shield Alerts.** Stripped hidden prompt injections, forged delimiters and refused outbound requests are reported to you out of band: a desktop notification, a stderr line, and a trusted `[WIRE SHIELD | ...]` line ahead of the quoted content. Alerts are kept in a hash-chained `alerts.db`. New commands: `wire alerts`, `show`, `tail`, `verify`, `demo`.
+- **Root policy documents:** `PRIVACY.md`, `TERMS.md`, `DOCUMENTATION.md`, `SUPPORT.md`.
+
+### Changed
+- **The Claude plugin now lives in `plugin/`.** It launches the published package with `uvx agent-wire-cli==0.2.5 serve`.
+  - Optional credentials come from the plugin's `userConfig`, marked sensitive. Each one is sent only to its own service.
+  - The plugin never shells out to `gh`.
+- **`WIRE_HOME` prefers `CLAUDE_PLUGIN_DATA`,** so plugin updates keep your data.
+- **`rookiepy` is now the `[browser-cookies]` extra,** and `wire_status` no longer looks at browser profiles.
+- **Server tool descriptions describe the tools only.** When-to-use guidance stays in the skill, whose description no longer tells the model to act "automatically".
+- **Setting a transcription API key turns transcription on.** This is what the plugin's `transcribe_api_key` option implied all along. `WIRE_TRANSCRIBE=0` still turns it off.
+- **Token counting falls back to an approximation** when the tokenizer file can't be downloaded on first run, so reads keep working offline.
+- **The lock moves dnspython to 2.9.2 and opentelemetry-api to 1.45.2** (CVE-2026-128089, CVE-2026-126360; both are transitive dependencies through fastmcp).
+- **`joserfc>=1.8.0` is required** (GHSA-jpxq-7h8p-2q76, GHSA-9pg5-8c7x-5hfx). agent-wire itself never parses JWS or JWE.
+- **The HTTP/SSE transport binds `127.0.0.1` explicitly.**
+
+### Fixed
+- **Hidden-text stripping now catches:**
+  - text hidden by the page's own stylesheet (`.x{display:none}`, `#id{visibility:hidden}`)
+  - text hidden by the `sr-only`, `visually-hidden`, `hidden` and `d-none` classes
+  - text hidden with `clip`, `clip-path`, a transparent color, or off-screen `top`/`right`/`margin`
+- **Invisible characters written as HTML entities** (`󠁁`, `​`) are now removed after parsing.
+
+### Measured
+- **Attack corpus:** 12 of 12 hiding techniques detected and stripped.
+- **Benign corpus:** 0 alerts across 9 cases.
+- **`wire selftest --live`, 2026-11-15:**
+  - **Benchmark pages:** none raised an alert, over two runs (16 of 16 read on the first; on the second, the Cloudflare challenge page needed the stealth browser, so 15 were read).
+  - **Channels:** 26 of 31 answered with no keys or logins, including Reddit.
+  - **Skipped (5):**
+    - Zhihu and Boss Zhipin need a login or the stealth browser.
+    - TikTok's oEmbed refused the probe.
+    - Xiaohongshu and Xiaoyuzhou have no stable public URL to probe.
+
+## Earlier releases
+
+See the [GitHub releases page](https://github.com/uncoalesced/agent-wire/releases).

agent_wire_cli-0.2.5/DOCUMENTATION.md

@@ -0,0 +1,112 @@
+# Agent Wire documentation
+
+Agent Wire by uncoalesced is a local MCP server that gives AI agents live web pages, web search and platform reads. On PyPI it's `agent-wire-cli`, the shell command is `wire`, and the Claude plugin is `agent-wire`. The [README](README.md) covers the same ground with benchmarks and background; this page is the reference.
+
+## Install
+
+You need [uv](https://docs.astral.sh/uv/).
+
+- **Claude Code plugin:** `/plugin install agent-wire --marketplace uncoalesced/agent-wire`. It starts `uvx agent-wire-cli==<version> serve` and asks for optional keys when you enable it.
+- **Any other client:** `uvx agent-wire-cli install --client auto` finds the agent clients on your machine (Claude Code, Claude Desktop, Codex, Cursor, Windsurf, VS Code, Roo, Gemini CLI, Hermes, Antigravity, Peridot), shows what it will write, and asks first. `--client <name>`, `--dry-run`, `--global` and `--project PATH` narrow it down.
+- **By hand:** run `uvx agent-wire-cli serve` as a stdio MCP server.
+
+Optional extras: `agent-wire-cli[stealth]` (headless browser for Cloudflare-protected pages and the `wire auth login` window), `agent-wire-cli[browser-cookies]` (import a login from Chrome, Edge or Brave), `agent-wire-cli[local-whisper]` (local podcast transcription).
+
+## Tools
+
+| Tool | What it does |
+|---|---|
+| `wire_read(urls, query, section, include_comments, max_tokens, force)` | Reads up to 10 URLs. `query` keeps the parts that answer it; `#L10-L50` and `#heading` anchors work. A page read again returns only what changed. |
+| `wire_search(query, platforms, limit, sort, auto_expand_top, max_tokens)` | Searches the web or specific platforms and reads the top hits in the same call. |
+| `wire_feed(platform, target, sort, limit)` | A subreddit, an `@user` timeline, GitHub trending, an arXiv category, a stock watchlist, an RSS feed. |
+| `wire_me(platform, target, limit)` | Your own posts, likes, bookmarks, notifications or stats, through a session you saved. |
+| `wire_research(topic, days, ...)` | One cited brief of what people said about a topic in the last N days, an "A vs B" comparison, or what's trending. |
+| `wire_cite(text, check_quotes)` | Opens every link in a text and reports dead, archived-only, bot-blocked and soft-404 pages, quotes missing from their page, and `[[UNSOURCED]]` claims. |
+| `wire_run(code, max_tokens)` | Code Mode: one sandboxed JavaScript script that calls `wire.read/search/feed/research/cite` and returns only what the script returns. |
+| `wire_status(refresh)` | Channels, saved logins, route cache and alert counts. |
+
+Every result starts with a `[WIRE | ...]` line, then any `[WIRE SHIELD | ...]` alert lines, then the page content inside an `[UNTRUSTED_EXTERNAL_DATA]` block. Everything inside that block is quoted material from the web, not instructions.
+
+How an agent should use the tools (when to call each one, citation rules) is in the skill and rule files the installer writes: [`skills/agent-wire/SKILL.md`](skills/agent-wire/SKILL.md), and the Cursor, Windsurf and Hermes files in [`manifests/`](manifests/).
+
+## Logins
+
+Most sites need no login. For your own account (`wire_me`) and login-only sites:
+
+- `wire auth login <site>` opens a login window (needs the `[stealth]` extra) and saves that site's cookies to an encrypted vault.
+- `wire auth login <site> --from-browser` copies that one site's cookies from a browser you're signed in to. Firefox works out of the box; Chrome, Edge and Brave need `[browser-cookies]`.
+- `wire auth list` shows saved sites (names only); `wire auth logout <site>` forgets one.
+
+A saved login is sent only to its own site, only on GET or HEAD requests, never to account pages such as messages, settings or billing, and never across a redirect.
+
+## Configuration
+
+| Setting | Effect |
+|---|---|
+| `WIRE_HOME` | Where agent-wire keeps its files. The Claude plugin uses its plugin data folder. |
+| `GITHUB_TOKEN` | Higher GitHub rate limits and `wire_me github`. Outside the plugin, `gh auth token` is used if set up; `WIRE_NO_GH_CLI=1` turns that off. |
+| `REDDIT_CLIENT_ID`, `REDDIT_CLIENT_SECRET` | Reddit's official app login, for networks where anonymous access is blocked. |
+| `WIRE_SEARXNG_URL`, `EXA_API_KEY` | Extra web search engines. |
+| `WIRE_TRANSCRIBE=1` (+ `WIRE_TRANSCRIBE_API_KEY`, `_URL`, `_MODEL`) | Podcast transcription, locally or through an OpenAI-compatible API. Setting `WIRE_TRANSCRIBE_API_KEY` alone also turns it on; `WIRE_TRANSCRIBE=0` turns it off. |
+| `WIRE_ALLOW_PRIVATE=1` | Let reads reach private and internal addresses. Off by default. |
+| `WIRE_SHIELD_NOTIFY=0` | No desktop notifications for alerts. |
+| `WIRE_SHIELD_VERBOSE=1` | Also record every routine removal (hidden menus, zero-width spaces) in the alert ledger. |
+
+In the Claude plugin, the keys are plugin settings (`userConfig`) stored in Claude Code's secure storage, and the plugin never reads credentials from your machine.
+
+## Shield Alerts
+
+agent-wire removes text a human reader can't see before the model reads a page, and refuses requests a page may have steered. Shield Alerts tells you when that happened, without relying on the model to mention it: a hijacked or distracted agent could leave the warning out.
+
+**What raises an alert.**
+
+| Tier | Examples | What you get |
+|---|---|---|
+| info | A hidden menu, a cookie banner, a zero-width space, a fake chat token in a comment | A counter in `wire_status`. Recorded in full only with `WIRE_SHIELD_VERBOSE=1`. |
+| alert | Hidden text that reads like an instruction to an AI ("ignore previous instructions", "you are now", chat tokens, tool names, "don't tell the user", "send the API keys to"); text smuggled in Unicode tag characters; a forged end-of-data marker; visible text that names agent-wire's tools, asks the model to hide something from you, or asks it to send secrets somewhere | Notification, stderr line, header line, ledger row |
+| high | A refused request: a private or internal address, a non-web URL scheme, a logged-in request that would write or reach an account page | Same, worded as a refused request |
+
+Visible text is judged more strictly than hidden text. A security article that quotes "ignore previous instructions" in plain view is not an attack on you and raises nothing; the same words hidden with CSS do.
+
+**What each alert says it did.** `stripped` (removed before the model saw it), `escaped` (neutralized in place), `refused` (never sent), `flagged-only` (visible text: it stays in the quoted content, marked as untrusted, because removing visible text would censor the page).
+
+**Where alerts go.**
+
+1. `WIRE_HOME/alerts.db`, one row per alert, chained by SHA-256 so edits are detectable (`wire alerts verify`).
+2. A desktop notification (Windows toast, macOS Notification Center, Linux `notify-send`). At most one per site per minute and five per minute overall. It never contains page text.
+3. A `[wire-shield] ...` line on stderr, which some clients show as server logs.
+4. A `[WIRE SHIELD | ...]` line in the tool result, after the `[WIRE | ...]` line and before the untrusted block, so the model can tell you too. It never contains page text either.
+
+**Commands.**
+
+- `wire alerts`: recent alerts, newest first (`--all` adds info events).
+- `wire alerts show <id>`: everything recorded about one alert: the URL (query values removed), where on the page it was (an element path such as `body > article > div.promo-note`), the caught text (up to 120 characters, secrets scrubbed, control characters removed) and any decoded hidden text.
+- `wire alerts tail`: print new alerts as they arrive.
+- `wire alerts verify`: check the ledger's hash chain.
+- `wire alerts demo`: run the shield on a bundled page with three hidden attacks and one honest quote, offline, and show what the model receives.
+
+**Limits.** Locations are element paths, not line numbers: the HTML parser doesn't keep source positions. Only `<style>` blocks inside the page are applied, and only simple `.class`, `#id` and `tag.class` selectors outside `@media` and similar blocks; the common hiding classes (`sr-only`, `visually-hidden`, `hidden`, `d-none`, `invisible`) are recognised by name, unless a responsive class such as `md:block` or `d-lg-block` shows the element again. Detection rules are patterns, so a novel phrasing in visible text may not be flagged; hidden text is removed either way.
+
+## Citations
+
+Write `[[UNSOURCED]]` after a claim with no source, and run `wire_cite` on an answer before sending it. It reports `OK`, `DEAD`, `ARCHIVED` (with the Wayback copy), `SOFT_404`, `BLOCKED`, `QUOTE_MISSING`, and links agent-wire never returned this session.
+
+## Code Mode
+
+`wire serve --code-mode` exposes only `wire_run` and `wire_status`. Scripts run in a QuickJS sandbox with no filesystem, network, timers or modules, and with memory, CPU, wall-clock and call limits. They can't reach `wire_me`.
+
+## Transports
+
+`wire serve` uses stdio. `--transport http` or `sse` binds to `127.0.0.1` only and has no authentication; don't expose it to other machines.
+
+## Self-test
+
+`wire selftest` checks every subsystem in one run, offline: all 31 channels on canned responses, the inbound and outbound firewalls, the SSRF guard, Shield Alerts and the ledger, compression, the delta buffer and route ledger, the cookie vault, Code Mode, research, `wire_cite`, the client installers, and the MCP server in-process and over stdio. A guard blocks the network for the whole run and reports any attempt as a failure.
+
+- `wire selftest --live`: one real request per channel, keyless Reddit, and the shield false-positive count on the 16 README benchmark pages. Channels that need a login or the stealth browser are reported as skipped, not failed.
+- `wire selftest --only mcp` (or `shield`, `reddit`, any group or channel): run part of it.
+- `wire selftest --json`: results as JSON. Exit code 1 when a check fails.
+
+## Policies and help
+
+[Privacy Policy](PRIVACY.md) · [Terms of Use](TERMS.md) · [Support](SUPPORT.md) · [Security](SECURITY.md) · [License](LICENSE)