@1claw/cli 0.60.0 → 0.61.0

package/README.md

@@ -774,6 +774,18 @@ Manage platform apps for developers building multi-tenant applications on top of
 1claw platform app-stats <app-id>              # Connection/bootstrap/grant statistics
 1claw platform marketplace                     # Browse the public platform marketplace
 
+# Pay an x402 paywall. The vault decides what may be signed; this holds the
+# connection and nothing else.
+1claw pay --agent <id> https://api.example.com/premium          # passkey per payment
+1claw pay --agent <id> --mode session https://api.example.com/premium   # one touch, a capped window
+
+# Enable it first (human only) — pay is off until someone turns it on:
+#   PATCH /v1/agents/{id}/pay/settings {"pay_enabled":true,"pay_max_usd":"1.00"}
+# and the agent needs an Ethereum signing key funded with USDC on Base.
+#
+# Try it without spending anything — examples/x402-pay-cli has a mock paywall:
+#   node paywall.mjs & ONECLAW_PAY_DEV=1 1claw pay --agent any http://localhost:4022/premium
+
 # Fleets — every agent one template provisioned, as one cohort.
 # Each of these acts on all of them at once, so the mutating ones confirm
 # first and print how many agents they are about to touch.

package/dist/src/commands/pay/challenge.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Fetching a resource and capturing a 402 exactly as served.
+ *
+ * The raw bytes matter. The vault computes the digest a person authorizes from
+ * this preimage, so anything reinterpreted here — re-encoded JSON, a header
+ * parsed into fields — would fall outside what they approved.
+ */
+export interface FetchOutcome {
+    status: number;
+    /** Present only on a 402. The challenge, byte-for-byte, base64. */
+    challengeB64?: string;
+    bodyText: string;
+    headers: Headers;
+}
+export declare function fetchResource(url: string, opts: {
+    method: string;
+    body?: string;
+    paymentHeader?: string;
+}): Promise<FetchOutcome>;
+//# sourceMappingURL=challenge.d.ts.map

package/dist/src/commands/pay/challenge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge.d.ts","sourceRoot":"","sources":["../../../../src/commands/pay/challenge.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CACpB;AAED,wBAAsB,aAAa,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAChE,OAAO,CAAC,YAAY,CAAC,CA2BvB"}

package/dist/src/commands/pay/challenge.js

@@ -0,0 +1,26 @@
+export async function fetchResource(url, opts) {
+    const headers = {};
+    if (opts.body)
+        headers["Content-Type"] = "application/json";
+    if (opts.paymentHeader)
+        headers["X-PAYMENT"] = opts.paymentHeader;
+    const res = await fetch(url, {
+        method: opts.method,
+        headers,
+        // Buffered by the caller and replayed verbatim on the paid retry (D8).
+        body: opts.body,
+    });
+    const buf = new Uint8Array(await res.arrayBuffer());
+    const bodyText = new TextDecoder().decode(buf);
+    if (res.status !== 402) {
+        return { status: res.status, bodyText, headers: res.headers };
+    }
+    // x402 v2 carries the challenge in a header; v1 in the body. Whichever the
+    // origin used is what gets sent on, unmodified.
+    const headerChallenge = res.headers.get("payment-required");
+    const challengeB64 = headerChallenge
+        ? headerChallenge.trim()
+        : Buffer.from(buf).toString("base64");
+    return { status: 402, challengeB64, bodyText, headers: res.headers };
+}
+//# sourceMappingURL=challenge.js.map

package/dist/src/commands/pay/challenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge.js","sourceRoot":"","sources":["../../../../src/commands/pay/challenge.ts"],"names":[],"mappings":"AAeA,MAAM,CAAC,KAAK,UAAU,aAAa,CAC/B,GAAW,EACX,IAA+D;IAE/D,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC5D,IAAI,IAAI,CAAC,aAAa;QAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC;IAElE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO;QACP,uEAAuE;QACvE,IAAI,EAAE,IAAI,CAAC,IAAI;KAClB,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAE/C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IAClE,CAAC;IAED,2EAA2E;IAC3E,gDAAgD;IAChD,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,eAAe;QAChC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE;QACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE1C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;AACzE,CAAC"}

package/dist/src/commands/pay/expiry.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Paywall challenge windows, and how many times to chase one.
+ *
+ * A challenge that expires cannot be re-prepared from the bytes already held:
+ * the same expired window comes back, and many challenges carry a single-use
+ * nonce. The only way forward is to fetch the resource again for a fresh 402
+ * (D6).
+ *
+ * Capped at two full cycles. A paywall with a ten-second window will always
+ * expire while a person reads the authorize page, and retrying forever turns
+ * that into an endless prompt rather than an error anyone can act on.
+ */
+export declare const MAX_REFETCH_CYCLES = 2;
+export declare function challengeExpiredMessage(cycles: number): string;
+/** True when the vault told us the challenge expired rather than something else. */
+export declare function isChallengeExpired(err: unknown): boolean;
+//# sourceMappingURL=expiry.d.ts.map

package/dist/src/commands/pay/expiry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expiry.d.ts","sourceRoot":"","sources":["../../../../src/commands/pay/expiry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAQ9D;AAED,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGxD"}

package/dist/src/commands/pay/expiry.js

@@ -0,0 +1,26 @@
+/**
+ * Paywall challenge windows, and how many times to chase one.
+ *
+ * A challenge that expires cannot be re-prepared from the bytes already held:
+ * the same expired window comes back, and many challenges carry a single-use
+ * nonce. The only way forward is to fetch the resource again for a fresh 402
+ * (D6).
+ *
+ * Capped at two full cycles. A paywall with a ten-second window will always
+ * expire while a person reads the authorize page, and retrying forever turns
+ * that into an endless prompt rather than an error anyone can act on.
+ */
+export const MAX_REFETCH_CYCLES = 2;
+export function challengeExpiredMessage(cycles) {
+    return (`The paywall's challenge window closed ${cycles} times before the payment ` +
+        `could be authorized.\n` +
+        `Its window is likely too short for a per-payment approval. Try again, or ` +
+        `use a spending grant (--mode session) so payments inside the window need ` +
+        `no prompt.`);
+}
+/** True when the vault told us the challenge expired rather than something else. */
+export function isChallengeExpired(err) {
+    const e = err;
+    return e?.status === 409 || /ChallengeExpired/i.test(e?.message ?? "");
+}
+//# sourceMappingURL=expiry.js.map

package/dist/src/commands/pay/expiry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expiry.js","sourceRoot":"","sources":["../../../../src/commands/pay/expiry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC,MAAM,UAAU,uBAAuB,CAAC,MAAc;IAClD,OAAO,CACH,yCAAyC,MAAM,4BAA4B;QAC3E,wBAAwB;QACxB,2EAA2E;QAC3E,2EAA2E;QAC3E,YAAY,CACf,CAAC;AACN,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC3C,MAAM,CAAC,GAAG,GAA4C,CAAC;IACvD,OAAO,CAAC,EAAE,MAAM,KAAK,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;AAC3E,CAAC"}

package/dist/src/commands/pay/index.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare const payCommand: Command;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/commands/pay/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/pay/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwHpC,eAAO,MAAM,UAAU,SAuFjB,CAAC"}

package/dist/src/commands/pay/index.js

@@ -0,0 +1,155 @@
+import { Command } from "commander";
+import { randomUUID } from "node:crypto";
+import chalk from "chalk";
+import open from "open";
+import ora from "ora";
+import { handleError, requireToken } from "../../middleware.js";
+import { fetchResource } from "./challenge.js";
+import { MAX_REFETCH_CYCLES, challengeExpiredMessage, isChallengeExpired, } from "./expiry.js";
+import { isDevSigner, resolveSigner, } from "./signer.js";
+function authorizeUrl(sessionId) {
+    const base = process.env.ONECLAW_DASHBOARD_URL?.replace(/\/$/, "") ??
+        "https://1claw.co";
+    return `${base}/cli/pay-authorize?session=${sessionId}`;
+}
+function describeQuote(q) {
+    const amount = q.amount_usd ? `$${q.amount_usd}` : "unknown amount";
+    const to = typeof q.pay_to === "string" ? q.pay_to : "?";
+    const short = to.length > 12 ? `${to.slice(0, 6)}…${to.slice(-4)}` : to;
+    return `${amount} ${q.asset ?? ""} → ${short}`.replace(/\s+/g, " ").trim();
+}
+/**
+ * One attempt: prepare, get whatever authorization is required, sign.
+ *
+ * Returns null when the paywall's challenge expired, which the caller answers by
+ * fetching the resource again rather than retrying this (D6).
+ */
+async function authorizeAndSign(signer, agentId, challengeB64, method, url, mode, idempotencyKey) {
+    let prepared;
+    try {
+        prepared = await signer.prepare(agentId, {
+            challenge_b64: challengeB64,
+            method,
+            resource_url: url,
+            idempotency_key: idempotencyKey,
+            mode,
+        });
+    }
+    catch (err) {
+        if (isChallengeExpired(err))
+            return null;
+        throw err;
+    }
+    console.log(chalk.dim(`  402 │ ${describeQuote(prepared.quote)}`));
+    if (prepared.authorization.startsWith("deny:")) {
+        throw new Error(`The vault refused this payment — ${prepared.authorization.slice(5).trim()}`);
+    }
+    if (prepared.short_window) {
+        console.log(chalk.yellow("  ⚠ This paywall's window is under 30s and may close while you authorize."));
+    }
+    if (prepared.authorization === "require_grant") {
+        throw new Error("This payment needs a spending grant. Create one with:\n" +
+            `  1claw pay grant --agent ${agentId} --cap 5.00 --ttl 15m`);
+    }
+    if (prepared.authorization === "require_passkey") {
+        const url = authorizeUrl(prepared.session_id);
+        console.log(`  Authorize: ${chalk.cyan(url)}`);
+        try {
+            await open(url);
+        }
+        catch {
+            /* headless: the printed URL is the fallback */
+        }
+        const spinner = ora("Waiting for you to authorize…").start();
+        // Bounded by the session, not by a number picked here — the vault
+        // already decided how long this payment may stay pending.
+        const deadline = new Date(prepared.expires_at).getTime();
+        const ok = await signer.waitForAuthorization(prepared.session_id, deadline);
+        if (!ok) {
+            spinner.fail("Not authorized.");
+            throw new Error("The payment was not authorized before the session expired.");
+        }
+        spinner.succeed("Authorized");
+    }
+    try {
+        const signed = await signer.sign(agentId, {
+            session_id: prepared.session_id,
+            mode,
+        });
+        return {
+            header: signed.payment_header,
+            paymentId: signed.payment_id,
+            amount: signed.amount_usd,
+        };
+    }
+    catch (err) {
+        if (isChallengeExpired(err))
+            return null;
+        throw err;
+    }
+}
+export const payCommand = new Command("pay")
+    .description("Pay for an x402-gated resource")
+    .argument("<url>", "the resource to fetch")
+    .requiredOption("--agent <id>", "agent whose key signs the payment")
+    .option("--method <verb>", "HTTP method", "GET")
+    .option("--body <json>", "request body (buffered and replayed on the paid retry)")
+    .option("--mode <mode>", "strict | session | auto — a request; the vault decides what is permitted", "strict")
+    .action(async (url, opts) => {
+    try {
+        const signer = resolveSigner();
+        // The dev signer never calls the vault, so it needs no session.
+        // Everything else does, and finding that out before fetching a
+        // paywall is kinder than finding out after.
+        if (!isDevSigner(signer))
+            requireToken();
+        // One key for the whole attempt, including refetch cycles: a crash
+        // mid-sign must not become a second payment for the same resource.
+        const idempotencyKey = randomUUID();
+        let paid = null;
+        let cycles = 0;
+        while (cycles <= MAX_REFETCH_CYCLES) {
+            const first = await fetchResource(url, {
+                method: opts.method,
+                body: opts.body,
+            });
+            if (first.status !== 402) {
+                // Nothing to pay for. Say so rather than inventing a payment.
+                console.log(chalk.dim(`  ${first.status} │ no payment required`));
+                process.stdout.write(first.bodyText);
+                return;
+            }
+            paid = await authorizeAndSign(signer, opts.agent, first.challengeB64, opts.method, url, opts.mode, idempotencyKey);
+            if (paid)
+                break;
+            cycles += 1;
+            if (cycles > MAX_REFETCH_CYCLES)
+                break;
+            console.log(chalk.yellow(`  Challenge expired — fetching a fresh one (${cycles}/${MAX_REFETCH_CYCLES})`));
+        }
+        if (!paid)
+            throw new Error(challengeExpiredMessage(MAX_REFETCH_CYCLES));
+        console.log(chalk.dim(`  signed │ $${paid.amount}`));
+        const retry = await fetchResource(url, {
+            method: opts.method,
+            body: opts.body,
+            paymentHeader: paid.header,
+        });
+        // Advisory only. It moves the audit trail; it never returns limit
+        // headroom, so there is nothing to gain by shading it.
+        await signer
+            .reportResult(opts.agent, paid.paymentId, {
+            http_status: retry.status,
+            settled: retry.status < 400,
+        })
+            .catch(() => {
+            /* reporting is best-effort by design */
+        });
+        console.log(chalk.dim(`  ${retry.status} │ paid`));
+        process.stdout.write(retry.bodyText);
+    }
+    catch (err) {
+        handleError(err);
+    }
+});
+//# sourceMappingURL=index.js.map

package/dist/src/commands/pay/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/commands/pay/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EACH,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACH,WAAW,EACX,aAAa,GAGhB,MAAM,aAAa,CAAC;AAErB,SAAS,YAAY,CAAC,SAAiB;IACnC,MAAM,IAAI,GACN,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACrD,kBAAkB,CAAC;IACvB,OAAO,GAAG,IAAI,8BAA8B,SAAS,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,CAA0B;IAC7C,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACpE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;IACzD,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,GAAG,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,MAAM,KAAK,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/E,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC3B,MAAiB,EACjB,OAAe,EACf,YAAoB,EACpB,MAAc,EACd,GAAW,EACX,IAAY,EACZ,cAAsB;IAEtB,IAAI,QAAuB,CAAC;IAC5B,IAAI,CAAC;QACD,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;YACrC,aAAa,EAAE,YAAY;YAC3B,MAAM;YACN,YAAY,EAAE,GAAG;YACjB,eAAe,EAAE,cAAc;YAC/B,IAAI;SACP,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,IAAI,kBAAkB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,GAAG,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACX,oCAAoC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/E,CAAC;IACN,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CACP,KAAK,CAAC,MAAM,CACR,2EAA2E,CAC9E,CACJ,CAAC;IACN,CAAC;IAED,IAAI,QAAQ,CAAC,aAAa,KAAK,eAAe,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACX,yDAAyD;YACrD,6BAA6B,OAAO,uBAAuB,CAClE,CAAC;IACN,CAAC;IAED,IAAI,QAAQ,CAAC,aAAa,KAAK,iBAAiB,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACL,+CAA+C;QACnD,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,+BAA+B,CAAC,CAAC,KAAK,EAAE,CAAC;QAC7D,kEAAkE;QAClE,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;QACzD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5E,IAAI,CAAC,EAAE,EAAE,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE;YACtC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,IAAI;SACP,CAAC,CAAC;QACH,OAAO;YACH,MAAM,EAAE,MAAM,CAAC,cAAc;YAC7B,SAAS,EAAE,MAAM,CAAC,UAAU;YAC5B,MAAM,EAAE,MAAM,CAAC,UAAU;SAC5B,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,IAAI,kBAAkB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,GAAG,CAAC;IACd,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KACvC,WAAW,CAAC,gCAAgC,CAAC;KAC7C,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;KAC1C,cAAc,CAAC,cAAc,EAAE,mCAAmC,CAAC;KACnE,MAAM,CAAC,iBAAiB,EAAE,aAAa,EAAE,KAAK,CAAC;KAC/C,MAAM,CAAC,eAAe,EAAE,wDAAwD,CAAC;KACjF,MAAM,CACH,eAAe,EACf,0EAA0E,EAC1E,QAAQ,CACX;KACA,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,IAAI,EAAE,EAAE;IAChC,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,gEAAgE;QAChE,+DAA+D;QAC/D,4CAA4C;QAC5C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YAAE,YAAY,EAAE,CAAC;QAEzC,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,cAAc,GAAG,UAAU,EAAE,CAAC;QAEpC,IAAI,IAAI,GAAiD,IAAI,CAAC;QAC9D,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,OAAO,MAAM,IAAI,kBAAkB,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE;gBACnC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;aAClB,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,8DAA8D;gBAC9D,OAAO,CAAC,GAAG,CACP,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,wBAAwB,CAAC,CACvD,CAAC;gBACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACrC,OAAO;YACX,CAAC;YAED,IAAI,GAAG,MAAM,gBAAgB,CACzB,MAAM,EACN,IAAI,CAAC,KAAK,EACV,KAAK,CAAC,YAAa,EACnB,IAAI,CAAC,MAAM,EACX,GAAG,EACH,IAAI,CAAC,IAAI,EACT,cAAc,CACjB,CAAC;YACF,IAAI,IAAI;gBAAE,MAAM;YAEhB,MAAM,IAAI,CAAC,CAAC;YACZ,IAAI,MAAM,GAAG,kBAAkB;gBAAE,MAAM;YACvC,OAAO,CAAC,GAAG,CACP,KAAK,CAAC,MAAM,CACR,+CAA+C,MAAM,IAAI,kBAAkB,GAAG,CACjF,CACJ,CAAC;QACN,CAAC;QAED,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAExE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAErD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,IAAI,CAAC,MAAM;SAC7B,CAAC,CAAC;QAEH,kEAAkE;QAClE,uDAAuD;QACvD,MAAM,MAAM;aACP,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE;YACtC,WAAW,EAAE,KAAK,CAAC,MAAM;YACzB,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,GAAG;SAC9B,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACR,wCAAwC;QAC5C,CAAC,CAAC,CAAC;QAEP,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,WAAW,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/commands/pay/signer.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Everything the pay command needs from the vault, behind one interface.
+ *
+ * The seam exists so the flow can be exercised without a funded agent and a
+ * live paywall — CI needs to know the refetch loop and the retry semantics are
+ * right, and neither of those is about signing. The production path is always
+ * Vault-backed; the dev signer never produces anything a paywall would accept.
+ */
+export interface PrepareResult {
+    session_id: string;
+    payment_digest: string;
+    sign_idempotency_key: string;
+    quote: Record<string, unknown>;
+    valid_before: string | null;
+    expires_at: string;
+    authorization: string;
+    short_window: boolean;
+}
+export interface SignResult {
+    payment_id: string;
+    payment_header: string;
+    amount_usd: string;
+    pay_to: string;
+    grant_id: string | null;
+}
+export interface PaySigner {
+    prepare(agentId: string, body: {
+        challenge_b64: string;
+        method: string;
+        resource_url: string;
+        idempotency_key?: string;
+        mode?: string;
+    }): Promise<PrepareResult>;
+    sign(agentId: string, body: {
+        session_id: string;
+        mode?: string;
+        grant_id?: string;
+    }): Promise<SignResult>;
+    /** Poll a session until a human has authorized it, or the deadline passes. */
+    waitForAuthorization(sessionId: string, deadlineMs: number): Promise<boolean>;
+    reportResult(agentId: string, paymentId: string, body: {
+        http_status?: number;
+        settled?: boolean;
+        error?: string | null;
+    }): Promise<void>;
+}
+export declare class VaultPaySigner implements PaySigner {
+    prepare(agentId: string, body: Parameters<PaySigner["prepare"]>[1]): Promise<PrepareResult>;
+    sign(agentId: string, body: Parameters<PaySigner["sign"]>[1]): Promise<SignResult>;
+    waitForAuthorization(sessionId: string, deadlineMs: number): Promise<boolean>;
+    reportResult(agentId: string, paymentId: string, body: Parameters<PaySigner["reportResult"]>[2]): Promise<void>;
+}
+/**
+ * A signer for tests. Produces a syntactically shaped header that no paywall
+ * will honour, which is the point: it exercises the flow without ever being
+ * mistakable for a real payment.
+ *
+ * Only reachable with ONECLAW_PAY_DEV=1.
+ */
+export declare class DevPaySigner implements PaySigner {
+    private counter;
+    /**
+     * Simulate a paywall whose challenge window keeps closing.
+     *
+     * The refetch cap is a real behaviour with a real failure mode — an endless
+     * authorize prompt — and it cannot be exercised against a signer that always
+     * succeeds. ONECLAW_PAY_DEV_EXPIRE=n makes the first n prepares expire.
+     */
+    private expiriesLeft;
+    prepare(_agentId: string, body: Parameters<PaySigner["prepare"]>[1]): Promise<{
+        session_id: string;
+        payment_digest: string;
+        sign_idempotency_key: string;
+        quote: {
+            amount_usd: string;
+            pay_to: string;
+            resource_url: string;
+        };
+        valid_before: string;
+        expires_at: string;
+        authorization: string;
+        short_window: boolean;
+    }>;
+    sign(_agentId: string, body: Parameters<PaySigner["sign"]>[1]): Promise<{
+        payment_id: string;
+        payment_header: string;
+        amount_usd: string;
+        pay_to: string;
+        grant_id: null;
+    }>;
+    waitForAuthorization(): Promise<boolean>;
+    reportResult(): Promise<void>;
+}
+export declare function resolveSigner(): PaySigner;
+/** Whether this signer talks to the vault at all. */
+export declare function isDevSigner(s: PaySigner): boolean;
+//# sourceMappingURL=signer.d.ts.map

package/dist/src/commands/pay/signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../../../src/commands/pay/signer.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACtB,OAAO,CACH,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QACF,aAAa,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,IAAI,CAAC,EAAE,MAAM,CAAC;KACjB,GACF,OAAO,CAAC,aAAa,CAAC,CAAC;IAE1B,IAAI,CACA,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/D,OAAO,CAAC,UAAU,CAAC,CAAC;IAEvB,8EAA8E;IAC9E,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9E,YAAY,CACR,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GACzE,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED,qBAAa,cAAe,YAAW,SAAS;IACtC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAOlE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAO5D,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;IAe1D,YAAY,CACd,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;CAOrD;AAED;;;;;;GAMG;AACH,qBAAa,YAAa,YAAW,SAAS;IAC1C,OAAO,CAAC,OAAO,CAAK;IACpB;;;;;;OAMG;IACH,OAAO,CAAC,YAAY,CAAmD;IAEjE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;;;;;;;;;;;;;;IAsBnE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;;;;;;;IAU7D,oBAAoB;IAIpB,YAAY;CAGrB;AAED,wBAAgB,aAAa,IAAI,SAAS,CAIzC;AAED,qDAAqD;AACrD,wBAAgB,WAAW,CAAC,CAAC,EAAE,SAAS,GAAG,OAAO,CAEjD"}

package/dist/src/commands/pay/signer.js

@@ -0,0 +1,97 @@
+import { api } from "../../client.js";
+export class VaultPaySigner {
+    async prepare(agentId, body) {
+        return api(`/agents/${agentId}/pay/prepare`, {
+            method: "POST",
+            body,
+        });
+    }
+    async sign(agentId, body) {
+        return api(`/agents/${agentId}/pay/sign`, {
+            method: "POST",
+            body,
+        });
+    }
+    async waitForAuthorization(sessionId, deadlineMs) {
+        // Fixed 2s cadence: the poll draws on the auth rate limiter, and a
+        // tighter loop drains a shared bucket for every other suite and session
+        // on the same address.
+        while (Date.now() < deadlineMs) {
+            const s = await api(`/pay-sessions/${sessionId}`);
+            if (s.status === "authorized")
+                return true;
+            if (s.status === "expired" || s.status === "failed")
+                return false;
+            await new Promise((r) => setTimeout(r, 2000));
+        }
+        return false;
+    }
+    async reportResult(agentId, paymentId, body) {
+        await api(`/agents/${agentId}/pay/${paymentId}/result`, {
+            method: "POST",
+            body,
+        });
+    }
+}
+/**
+ * A signer for tests. Produces a syntactically shaped header that no paywall
+ * will honour, which is the point: it exercises the flow without ever being
+ * mistakable for a real payment.
+ *
+ * Only reachable with ONECLAW_PAY_DEV=1.
+ */
+export class DevPaySigner {
+    counter = 0;
+    /**
+     * Simulate a paywall whose challenge window keeps closing.
+     *
+     * The refetch cap is a real behaviour with a real failure mode — an endless
+     * authorize prompt — and it cannot be exercised against a signer that always
+     * succeeds. ONECLAW_PAY_DEV_EXPIRE=n makes the first n prepares expire.
+     */
+    expiriesLeft = Number(process.env.ONECLAW_PAY_DEV_EXPIRE ?? 0);
+    async prepare(_agentId, body) {
+        if (this.expiriesLeft > 0) {
+            this.expiriesLeft -= 1;
+            const err = new Error("ChallengeExpired: re-fetch the resource");
+            err.status = 409;
+            throw err;
+        }
+        this.counter += 1;
+        return {
+            session_id: `dev-session-${this.counter}`,
+            payment_digest: "0".repeat(64),
+            sign_idempotency_key: body.idempotency_key ?? `dev-idem-${this.counter}`,
+            quote: { amount_usd: "0.001", pay_to: "0xDEV", resource_url: body.resource_url },
+            valid_before: new Date(Date.now() + 60_000).toISOString(),
+            expires_at: new Date(Date.now() + 900_000).toISOString(),
+            authorization: "allow",
+            short_window: false,
+        };
+    }
+    async sign(_agentId, body) {
+        return {
+            payment_id: body.session_id,
+            payment_header: "dev-not-a-real-payment",
+            amount_usd: "0.001",
+            pay_to: "0xDEV",
+            grant_id: null,
+        };
+    }
+    async waitForAuthorization() {
+        return true;
+    }
+    async reportResult() {
+        /* nothing to record */
+    }
+}
+export function resolveSigner() {
+    return process.env.ONECLAW_PAY_DEV === "1"
+        ? new DevPaySigner()
+        : new VaultPaySigner();
+}
+/** Whether this signer talks to the vault at all. */
+export function isDevSigner(s) {
+    return s instanceof DevPaySigner;
+}
+//# sourceMappingURL=signer.js.map

package/dist/src/commands/pay/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../../../src/commands/pay/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAwDtC,MAAM,OAAO,cAAc;IACvB,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,IAAyC;QACpE,OAAO,GAAG,CAAgB,WAAW,OAAO,cAAc,EAAE;YACxD,MAAM,EAAE,MAAM;YACd,IAAI;SACP,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,IAAsC;QAC9D,OAAO,GAAG,CAAa,WAAW,OAAO,WAAW,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,IAAI;SACP,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,SAAiB,EAAE,UAAkB;QAC5D,mEAAmE;QACnE,wEAAwE;QACxE,uBAAuB;QACvB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,MAAM,GAAG,CACf,iBAAiB,SAAS,EAAE,CAC/B,CAAC;YACF,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY;gBAAE,OAAO,IAAI,CAAC;YAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAClE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,YAAY,CACd,OAAe,EACf,SAAiB,EACjB,IAA8C;QAE9C,MAAM,GAAG,CAAC,WAAW,OAAO,QAAQ,SAAS,SAAS,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,IAAI;SACP,CAAC,CAAC;IACP,CAAC;CACJ;AAED;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IACb,OAAO,GAAG,CAAC,CAAC;IACpB;;;;;;OAMG;IACK,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,CAAC,CAAC;IAEvE,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,IAAyC;QACrE,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;YACvB,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,yCAAyC,CAE9D,CAAC;YACF,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;YACjB,MAAM,GAAG,CAAC;QACd,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClB,OAAO;YACH,UAAU,EAAE,eAAe,IAAI,CAAC,OAAO,EAAE;YACzC,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,oBAAoB,EAAE,IAAI,CAAC,eAAe,IAAI,YAAY,IAAI,CAAC,OAAO,EAAE;YACxE,KAAK,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;YAChF,YAAY,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;YACzD,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE;YACxD,aAAa,EAAE,OAAO;YACtB,YAAY,EAAE,KAAK;SACtB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,IAAsC;QAC/D,OAAO;YACH,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc,EAAE,wBAAwB;YACxC,UAAU,EAAE,OAAO;YACnB,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,IAAI;SACjB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,oBAAoB;QACtB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,YAAY;QACd,uBAAuB;IAC3B,CAAC;CACJ;AAED,MAAM,UAAU,aAAa;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,GAAG;QACtC,CAAC,CAAC,IAAI,YAAY,EAAE;QACpB,CAAC,CAAC,IAAI,cAAc,EAAE,CAAC;AAC/B,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,WAAW,CAAC,CAAY;IACpC,OAAO,CAAC,YAAY,YAAY,CAAC;AACrC,CAAC"}

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0EpC,wBAAgB,aAAa,IAAI,OAAO,CAwHvC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2EpC,wBAAgB,aAAa,IAAI,OAAO,CAyHvC"}

package/dist/src/index.js

@@ -11,6 +11,7 @@ import { secretCommand } from "./commands/secret.js";
 import { envCommand } from "./commands/env.js";
 import { agentCommand } from "./commands/agent.js";
 import { cardCommand } from "./commands/card.js";
+import { payCommand } from "./commands/pay/index.js";
 import { policyCommand } from "./commands/policy.js";
 import { shareCommand } from "./commands/share.js";
 import { billingCommand } from "./commands/billing.js";
@@ -82,6 +83,7 @@ export function createProgram() {
     program.addCommand(envCommand);
     program.addCommand(agentCommand);
     program.addCommand(cardCommand);
+    program.addCommand(payCommand);
     program.addCommand(policyCommand);
     // Sharing
     program.addCommand(shareCommand);

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACH,YAAY,EACZ,aAAa,EACb,aAAa,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACH,qBAAqB,EACrB,oBAAoB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,kBAAkB,EAClB,kBAAkB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,0FAA0F;AAC1F,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAChG,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACvB,CAAC;AACF,IAAI,CAAC,WAAW,EAAE,CAAC;IACf,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACvE,CAAC;AACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,OAAiB,CAAC;AAE1F,MAAM,UAAU,aAAa;IACzB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;SAC/B,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CACR,mEAAmE,CACtE;QACD,wEAAwE;SACvE,uBAAuB,EAAE,CAAC;IAE/B,OAAO;IACP,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACzC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAEhC,iBAAiB;IACjB,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAChC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,UAAU;IACV,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,UAAU;IACV,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAE/B,8BAA8B;IAC9B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,8BAA8B;IAC9B,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAChC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACnC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,SAAS;IACT,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,QAAQ;IACR,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,mBAAmB;IACnB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACrC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAEhC,iCAAiC;IACjC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACnC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAErC,sBAAsB;IACtB,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAChC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,2BAA2B;IAC3B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,iBAAiB;IACjB,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACrC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACzC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAE3C,oBAAoB;IACpB,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACnC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,YAAY;IACZ,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAErC,iBAAiB;IACjB,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAEhC,iBAAiB;IACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,oCAAoC,CAAC,CAAC;IAC/D,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IAE1E,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;QAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YAClB,eAAe,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACpB,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACnB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACH,YAAY,EACZ,aAAa,EACb,aAAa,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACH,qBAAqB,EACrB,oBAAoB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,kBAAkB,EAClB,kBAAkB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,0FAA0F;AAC1F,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAChG,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACvB,CAAC;AACF,IAAI,CAAC,WAAW,EAAE,CAAC;IACf,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACvE,CAAC;AACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,OAAiB,CAAC;AAE1F,MAAM,UAAU,aAAa;IACzB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;SAC/B,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CACR,mEAAmE,CACtE;QACD,wEAAwE;SACvE,uBAAuB,EAAE,CAAC;IAE/B,OAAO;IACP,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACzC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAEhC,iBAAiB;IACjB,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAChC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,UAAU;IACV,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,UAAU;IACV,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAE/B,8BAA8B;IAC9B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,8BAA8B;IAC9B,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAChC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACnC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,SAAS;IACT,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,QAAQ;IACR,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,mBAAmB;IACnB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IACpC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACrC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAEhC,iCAAiC;IACjC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACnC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAErC,sBAAsB;IACtB,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAChC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,2BAA2B;IAC3B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,iBAAiB;IACjB,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACrC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACzC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAE3C,oBAAoB;IACpB,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACnC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,YAAY;IACZ,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAErC,iBAAiB;IACjB,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAEhC,iBAAiB;IACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,oCAAoC,CAAC,CAAC;IAC/D,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IAE1E,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;QAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YAClB,eAAe,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACpB,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1claw/cli",
-  "version": "0.60.0",
+  "version": "0.61.0",
   "description": "CLI for 1Claw \u2014 secrets management for AI agents and humans",
   "license": "MIT",
   "repository": {