@aligndottech/cli 0.49.0 → 0.51.0

package/dist/lib/backup-exclusion.js

@@ -0,0 +1,58 @@
+/**
+ * Keep the local graph out of backups and sync, best effort.
+ *
+ * The graph holds decision text from every connector a person imported, and it is not encrypted
+ * (by design, see docs/local-mode.md). A Time Machine disk or a backup service is a second copy of
+ * it, in a place the person may not think of as theirs to protect. So, once, the directory that
+ * holds it is:
+ * - excluded from Time Machine on macOS (`tmutil addexclusion`, a sticky exclusion that follows
+ *   the folder, run only when /usr/bin/tmutil exists), and
+ * - tagged with CACHEDIR.TAG (https://bford.info/cachedir/), which borg, restic, tar and other
+ *   backup tools skip when asked to exclude caches.
+ *
+ * There is no marker-FILE convention for iCloud or Dropbox: iCloud skips items whose NAME ends in
+ * `.nosync`, which would mean renaming the user's config directory. Neither syncs the config
+ * directory by default, so nothing is written for them. Undo: `tmutil removeexclusion <dir>` and
+ * delete the tag (docs/local-mode.md); a separate `.backup-exclusion-done` marker
+ * keeps that undo from being reversed.
+ *
+ * Never fatal: every step is wrapped, and nothing here can stop a command from running.
+ */
+import { spawnSync } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+export const CACHEDIR_TAG_SIGNATURE = 'Signature: 8a477f597d28d172789f06886806bc55';
+const TMUTIL = '/usr/bin/tmutil';
+const defaultDeps = {
+    platform: process.platform,
+    hasTmutil: () => fs.existsSync(TMUTIL),
+    run: (cmd, args) => { spawnSync(cmd, args, { stdio: 'ignore', timeout: 5000 }); },
+};
+/** Exclude the directory holding `dbPath` from backups, once. A no-op until the graph exists. */
+export function excludeGraphFromBackups(dbPath, deps = defaultDeps) {
+    try {
+        if (!fs.existsSync(dbPath))
+            return;
+        const dir = path.dirname(dbPath);
+        const tag = path.join(dir, 'CACHEDIR.TAG');
+        // Its own "already done" marker, not the tag: a person who deletes the tag to back the graph up again
+        // (the documented undo) must not have it, or the Time Machine exclusion, put back by the next command.
+        const done = path.join(dir, '.backup-exclusion-done');
+        if (fs.existsSync(done) || fs.existsSync(tag))
+            return;
+        try {
+            fs.writeFileSync(done, '', { mode: 0o600 });
+        }
+        catch { /* best effort */ }
+        if (deps.platform === 'darwin' && deps.hasTmutil()) {
+            try {
+                deps.run(TMUTIL, ['addexclusion', dir]);
+            }
+            catch { /* best effort */ }
+        }
+        const body = `${CACHEDIR_TAG_SIGNATURE}\n# This file marks the Align CLI local decision graph so backup tools can skip it.\n# See https://bford.info/cachedir/ and docs/local-mode.md in align-cli.\n`;
+        (deps.writeFile ?? ((p, d) => fs.writeFileSync(p, d, { mode: 0o600 })))(tag, body);
+    }
+    catch { /* best effort: never stop a command */ }
+}
+//# sourceMappingURL=backup-exclusion.js.map

package/dist/lib/backup-exclusion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-exclusion.js","sourceRoot":"","sources":["../../src/lib/backup-exclusion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,sBAAsB,GAAG,6CAA6C,CAAC;AACpF,MAAM,MAAM,GAAG,iBAAiB,CAAC;AASjC,MAAM,WAAW,GAAe;IAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;IACtC,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;CAClF,CAAC;AAEF,iGAAiG;AACjG,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,OAAmB,WAAW;IACpF,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC3C,sGAAsG;QACtG,uGAAuG;QACvG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACtD,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO;QACtD,IAAI,CAAC;YAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAChF,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACnD,IAAI,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,sBAAsB,gKAAgK,CAAC;QACvM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC,CAAC,uCAAuC,CAAC,CAAC;AACrD,CAAC"}

package/dist/lib/capture-report.d.ts

@@ -1,19 +1,3 @@
-/**
- * ALI-827: what an import fetched, and what it could not reach.
- *
- * A thin connector looks like a thin tool. `align setup --local` produced 39 Slack
- * decisions on 2026-09-02 and nothing said why; the number this prints is the number the
- * user was about to ask about, and printing it costs nothing - no model call, no extra
- * request, only the counts the fetch already had in its hands.
- *
- * Pure: a sort and a string builder over plain numbers and strings, no I/O and no chalk,
- * so it is unit-testable without a graph or a terminal (the found-summary.ts shape).
- *
- * It never states a REASON it did not measure. "30 of up to 50 requested" is derived and
- * true; "Zoom caps a page at 30" is a fact owned by the fetcher, and duplicating it here
- * would be a second writer of it (code-style.md). A skip line arrives from whoever
- * measured it and is printed verbatim.
- */
 import type { CaptureFetchResult, CaptureSkip } from './fetchers/capture.js';
 export interface CaptureSource {
     label: string;
@@ -28,6 +12,23 @@ export interface CaptureSource {
     /** What the caller asked for, when it asked for anything. */
     requested?: number;
     skips: CaptureSkip[];
+    /** L3: the window this read covered, as the report prints it ("the last 6 months", from
+     *  windowLabel). Present only for a windowed read; its presence is what switches the line
+     *  to the "imported N ... from W" form, so a source without one prints exactly as before. */
+    window?: string;
+    /** L3: the SDK's `complete`. Anything but `false` reads as a complete windowed read. */
+    complete?: boolean;
+    /** L3: the oldest `updated_at` the read reached, named on an incomplete line. */
+    oldestReached?: string;
+    /** L3: what the gateway STORED, and how many batches failed. Absent means unknown, and the
+     *  line then falls back to `fetched`. "Imported" is never claimed for more than was stored. */
+    stored?: number;
+    failedBatches?: number;
+    /** L3: whose items a team-scope read covered, printed as one line under the source. */
+    scopeNote?: string;
+    /** L3: GitHub items still without their discussion, of `discussionTotal` that could have had it. */
+    discussionPending?: number;
+    discussionTotal?: number;
 }
 export declare function renderCaptureReport(sources: CaptureSource[]): string;
 /** The report line's inputs, from one wrapper result. `fetched` is what came BACK, not
@@ -35,7 +36,10 @@ export declare function renderCaptureReport(sources: CaptureSource[]): string;
 export declare function toCaptureSource(source: {
     label: string;
     unit: string;
-}, result: CaptureFetchResult): CaptureSource;
+}, result: CaptureFetchResult, window?: string, imported?: {
+    stored?: number;
+    failedBatches?: number;
+}): CaptureSource;
 /**
  * Accumulates sources across the concurrent imports one `align setup` runs, so the report
  * prints once at the end instead of interleaved between spinners. Explicitly passed,
@@ -43,7 +47,7 @@ export declare function toCaptureSource(source: {
  * two commands in one process.
  */
 export declare function createCaptureCollector(): {
-    add(source: CaptureSource): void;
+    add(source: CaptureSource): CaptureSource;
     render(): string;
 };
 //# sourceMappingURL=capture-report.d.ts.map

package/dist/lib/capture-report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capture-report.d.ts","sourceRoot":"","sources":["../../src/lib/capture-report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAE7E,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd;mCAC+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;;wFAEoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,CAsCpE;AAED;qFACqF;AACrF,wBAAgB,eAAe,CAC7B,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACvC,MAAM,EAAE,kBAAkB,GACzB,aAAa,CASf;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI;IAAE,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAAC,MAAM,IAAI,MAAM,CAAA;CAAE,CAU/F"}
+{"version":3,"file":"capture-report.d.ts","sourceRoot":"","sources":["../../src/lib/capture-report.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAE7E,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd;mCAC+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;;wFAEoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB;;iGAE6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wFAAwF;IACxF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;mGAC+F;IAC/F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oGAAoG;IACpG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAmCD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM,CAwCpE;AAED;qFACqF;AACrF,wBAAgB,eAAe,CAC7B,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EACvC,MAAM,EAAE,kBAAkB,EAC1B,MAAM,CAAC,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACrD,aAAa,CAiBf;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI;IAAE,GAAG,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,CAAC;IAAC,MAAM,IAAI,MAAM,CAAA;CAAE,CAYxG"}

package/dist/lib/capture-report.js

@@ -1,3 +1,52 @@
+/**
+ * ALI-827: what an import fetched, and what it could not reach.
+ *
+ * A thin connector looks like a thin tool. `align setup --local` produced 39 Slack
+ * decisions on 2026-09-02 and nothing said why; the number this prints is the number the
+ * user was about to ask about, and printing it costs nothing - no model call, no extra
+ * request, only the counts the fetch already had in its hands.
+ *
+ * Pure: a sort and a string builder over plain numbers and strings, no I/O and no chalk,
+ * so it is unit-testable without a graph or a terminal (the found-summary.ts shape).
+ *
+ * It never states a REASON it did not measure. "30 of up to 50 requested" is derived and
+ * true; "Zoom caps a page at 30" is a fact owned by the fetcher, and duplicating it here
+ * would be a second writer of it (code-style.md). A skip line arrives from whoever
+ * measured it and is printed verbatim.
+ */
+import { INCOMPLETE_SKIP_KINDS } from '@aligndottech/connector-core';
+/**
+ * L3: the line for a windowed read. Complete: what was imported and over which window.
+ * Incomplete: the date actually reached and the skip that stopped it (Decision 5), so a thin
+ * result is never mistaken for a quiet six months. The reason is the fetcher's own words
+ * (verbatim, never a raw URL: the SDK redacts them and this adds nothing back).
+ */
+function storedNote(s) {
+    const stored = s.stored ?? s.fetched;
+    const n = s.failedBatches ?? 0;
+    return {
+        count: stored < s.fetched || n > 0 ? `${stored} of ${s.fetched}` : String(s.fetched),
+        failed: n > 0 ? ` (${n === 1 ? 'a batch' : `${n} batches`} failed)` : '',
+    };
+}
+function windowedLine(s, window) {
+    const { count, failed } = storedNote(s);
+    const head = `${s.label}: imported ${count} ${s.unit}${failed}`;
+    // Said as a count, and promising nothing: the items the request budget did not reach stay thin
+    // until `align sync` finishes them. Until the background refresh exists (L6) the person runs it.
+    const tail = s.discussionPending !== undefined && s.discussionPending > 0 && s.discussionTotal !== undefined
+        ? `; discussion fetched for ${s.discussionTotal - s.discussionPending} of ${s.discussionTotal}, the rest stay thin until align sync reads them (run it now)`
+        : '';
+    if (s.complete !== false)
+        return `${head} from ${window}${tail}`;
+    const cut = s.skips.find((k) => k.kind !== undefined && INCOMPLETE_SKIP_KINDS.has(k.kind));
+    const refused = s.fetched === 0 ? s.skips.find((k) => k.kind === 'shape') : undefined;
+    const atCeiling = s.requested !== undefined && Math.max(s.fetched, s.scanned ?? 0) >= s.requested;
+    const reason = (cut ?? refused)?.detail
+        ?? (atCeiling ? `stopped at the ceiling of ${s.requested}` : 'the read did not reach the end of the window');
+    const reached = s.oldestReached !== undefined ? `back to ${s.oldestReached.slice(0, 10)}` : 'read stopped early';
+    return `${head}, ${reached} (not ${window}): ${reason}${tail}`;
+}
 export function renderCaptureReport(sources) {
     // Never a bare header over nothing.
     if (sources.length === 0)
@@ -29,7 +78,10 @@ export function renderCaptureReport(sources) {
                 ? ' (0 scanned)'
                 : ` (0 kept of ${s.scanned} scanned)`;
         }
-        lines.push(`    ${s.label}: ${s.fetched} ${s.unit}${shortfall}${scannedNote}`);
+        const stored = storedNote(s);
+        lines.push(`    ${s.window !== undefined ? windowedLine(s, s.window) : `${s.label}: ${stored.count} ${s.unit}${stored.failed}${shortfall}${scannedNote}`}`);
+        if (s.scopeNote !== undefined)
+            lines.push(`      reads ${s.scopeNote}`);
         for (const skip of s.skips)
             lines.push(`      ${skip.count} ${skip.detail}`);
     }
@@ -37,7 +89,7 @@ export function renderCaptureReport(sources) {
 }
 /** The report line's inputs, from one wrapper result. `fetched` is what came BACK, not
  *  what was scanned: the user is counting decisions in their graph, not API rows. */
-export function toCaptureSource(source, result) {
+export function toCaptureSource(source, result, window, imported) {
     return {
         label: source.label,
         unit: source.unit,
@@ -45,6 +97,14 @@ export function toCaptureSource(source, result) {
         scanned: result.report.scanned,
         ...(result.report.requested !== undefined ? { requested: result.report.requested } : {}),
         skips: result.report.skips,
+        ...(window !== undefined ? { window } : {}),
+        ...(imported?.stored !== undefined ? { stored: imported.stored } : {}),
+        ...(imported?.failedBatches !== undefined ? { failedBatches: imported.failedBatches } : {}),
+        ...(result.report.complete !== undefined ? { complete: result.report.complete } : {}),
+        ...(result.report.oldestReached !== undefined ? { oldestReached: result.report.oldestReached } : {}),
+        ...(result.report.discussionPending !== undefined ? { discussionPending: result.report.discussionPending } : {}),
+        ...(result.report.scopeNote !== undefined ? { scopeNote: result.report.scopeNote } : {}),
+        ...(result.report.discussionTotal !== undefined ? { discussionTotal: result.report.discussionTotal } : {}),
     };
 }
 /**
@@ -56,8 +116,10 @@ export function toCaptureSource(source, result) {
 export function createCaptureCollector() {
     const sources = [];
     return {
+        /** Returns the same object, so the import that follows can fill in what it stored (L3). */
         add(source) {
             sources.push(source);
+            return source;
         },
         render() {
             return renderCaptureReport(sources);

package/dist/lib/capture-report.js.map

@@ -1 +1 @@
-{"version":3,"file":"capture-report.js","sourceRoot":"","sources":["../../src/lib/capture-report.ts"],"names":[],"mappings":"AAiCA,MAAM,UAAU,mBAAmB,CAAC,OAAwB;IAC1D,oCAAoC;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,wFAAwF;IACxF,uFAAuF;IACvF,6DAA6D;IAC7D,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACxF,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,6EAA6E;QAC7E,+DAA+D;QAC/D,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,SAAS;YACpE,CAAC,CAAC,aAAa,CAAC,CAAC,SAAS,YAAY;YACtC,CAAC,CAAC,EAAE,CAAC;QACP,kFAAkF;QAClF,oFAAoF;QACpF,oFAAoF;QACpF,oFAAoF;QACpF,mFAAmF;QACnF,oFAAoF;QACpF,wDAAwD;QACxD,oFAAoF;QACpF,sFAAsF;QACtF,wBAAwB;QACxB,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACvE,WAAW,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC;gBAC3B,CAAC,CAAC,cAAc;gBAChB,CAAC,CAAC,eAAe,CAAC,CAAC,OAAO,WAAW,CAAC;QAC1C,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,GAAG,SAAS,GAAG,WAAW,EAAE,CAAC,CAAC;QAC/E,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;qFACqF;AACrF,MAAM,UAAU,eAAe,CAC7B,MAAuC,EACvC,MAA0B;IAE1B,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;QAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;QAC9B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;KAC3B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,OAAO;QACL,GAAG,CAAC,MAAqB;YACvB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QACD,MAAM;YACJ,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"capture-report.js","sourceRoot":"","sources":["../../src/lib/capture-report.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAmCrE;;;;;GAKG;AACH,SAAS,UAAU,CAAC,CAAgB;IAClC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC;IAC/B,OAAO;QACL,KAAK,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QACpF,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,UAAU,CAAC,CAAC,CAAC,EAAE;KACzE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAgB,EAAE,MAAc;IACpD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,cAAc,KAAK,IAAI,CAAC,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;IAChE,+FAA+F;IAC/F,iGAAiG;IACjG,MAAM,IAAI,GAAG,CAAC,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,CAAC,iBAAiB,GAAG,CAAC,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS;QAC1G,CAAC,CAAC,4BAA4B,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,iBAAiB,OAAO,CAAC,CAAC,eAAe,+DAA+D;QAC5J,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;QAAE,OAAO,GAAG,IAAI,SAAS,MAAM,GAAG,IAAI,EAAE,CAAC;IACjE,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAK,qBAA6C,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpH,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;IAClG,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,MAAM;WAClC,CAAC,SAAS,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC;IAC/G,MAAM,OAAO,GAAG,CAAC,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACjH,OAAO,GAAG,IAAI,KAAK,OAAO,SAAS,MAAM,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAwB;IAC1D,oCAAoC;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,wFAAwF;IACxF,uFAAuF;IACvF,6DAA6D;IAC7D,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACxF,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,6EAA6E;QAC7E,+DAA+D;QAC/D,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,SAAS;YACpE,CAAC,CAAC,aAAa,CAAC,CAAC,SAAS,YAAY;YACtC,CAAC,CAAC,EAAE,CAAC;QACP,kFAAkF;QAClF,oFAAoF;QACpF,oFAAoF;QACpF,oFAAoF;QACpF,mFAAmF;QACnF,oFAAoF;QACpF,wDAAwD;QACxD,oFAAoF;QACpF,sFAAsF;QACtF,wBAAwB;QACxB,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACvE,WAAW,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC;gBAC3B,CAAC,CAAC,cAAc;gBAChB,CAAC,CAAC,eAAe,CAAC,CAAC,OAAO,WAAW,CAAC;QAC1C,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,SAAS,GAAG,WAAW,EAAE,EAAE,CAAC,CAAC;QAC5J,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACxE,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;qFACqF;AACrF,MAAM,UAAU,eAAe,CAC7B,MAAuC,EACvC,MAA0B,EAC1B,MAAe,EACf,QAAsD;IAEtD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;QAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;QAC9B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;QAC1B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,QAAQ,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChH,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3G,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,OAAO;QACL,2FAA2F;QAC3F,GAAG,CAAC,MAAqB;YACvB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM;YACJ,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/cli-oauth.d.ts

@@ -6,6 +6,8 @@ export declare function waitForCallback(opts: {
     ports: number[];
     timeoutMs: number;
     onBound?: (port: number, nonce: string) => void | Promise<void>;
+    /** Stops the wait: the listeners close and the promise rejects. */
+    signal?: AbortSignal;
 }): Promise<CallbackResult>;
 export declare const CLI_CALLBACK_PORTS: number[];
 //# sourceMappingURL=cli-oauth.d.ts.map

package/dist/lib/cli-oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-oauth.d.ts","sourceRoot":"","sources":["../../src/lib/cli-oauth.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjE,GAAG,OAAO,CAAC,cAAc,CAAC,CAmE1B;AAED,eAAO,MAAM,kBAAkB,UAAiC,CAAC"}
+{"version":3,"file":"cli-oauth.d.ts","sourceRoot":"","sources":["../../src/lib/cli-oauth.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;CACd;AAKD,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,mEAAmE;IACnE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,cAAc,CAAC,CA0G1B;AAED,eAAO,MAAM,kBAAkB,UAAiC,CAAC"}

package/dist/lib/cli-oauth.js

@@ -1,11 +1,20 @@
 import http from 'node:http';
 import { randomBytes } from 'node:crypto';
+/** The page posts a token and a nonce: well under this. Anything larger is not it. */
+const MAX_BODY_BYTES = 8 * 1024;
 export function waitForCallback(opts) {
     return new Promise((resolve, reject) => {
-        let server;
+        let servers = [];
+        const closeAll = () => { for (const x of servers)
+            x.close(); };
         const nonce = randomBytes(16).toString('hex');
+        opts.signal?.addEventListener('abort', () => {
+            clearTimeout(timer);
+            closeAll();
+            reject(new Error('cancelled'));
+        }, { once: true });
         const timer = setTimeout(() => {
-            server?.close();
+            closeAll();
             reject(new Error('CLI OAuth timed out waiting for browser callback'));
         }, opts.timeoutMs);
         function tryPort(remaining) {
@@ -15,7 +24,7 @@ export function waitForCallback(opts) {
                 return;
             }
             const [port, ...rest] = remaining;
-            const s = http.createServer((req, res) => {
+            const onRequest = (req, res) => {
                 const origin = req.headers['origin'];
                 if (origin)
                     res.setHeader('Access-Control-Allow-Origin', origin);
@@ -31,16 +40,34 @@ export function waitForCallback(opts) {
                     res.writeHead(405).end();
                     return;
                 }
-                let body = '';
-                req.on('data', (chunk) => { body += chunk; });
+                // Any web page can POST here (a no-cors request needs no permission), so what arrives is read under a bound and a
+                // stray request is answered and ignored. Only the right nonce ends the wait.
+                const chunks = [];
+                let size = 0;
+                let tooBig = false;
+                req.on('data', (chunk) => {
+                    if (tooBig)
+                        return;
+                    size += chunk.length;
+                    if (size > MAX_BODY_BYTES) {
+                        tooBig = true;
+                        res.writeHead(413, { Connection: 'close' }).end(() => req.destroy());
+                        return;
+                    }
+                    chunks.push(chunk);
+                });
                 req.on('end', () => {
+                    if (tooBig)
+                        return;
                     let parsed;
                     try {
-                        parsed = JSON.parse(body);
+                        const v = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+                        if (typeof v !== 'object' || v === null || Array.isArray(v))
+                            throw new Error('not an object');
+                        parsed = v;
                     }
                     catch {
                         res.writeHead(400).end();
-                        reject(new Error('Invalid JSON received in CLI OAuth callback'));
                         return;
                     }
                     if (parsed['cli_nonce'] !== nonce) {
@@ -50,10 +77,11 @@ export function waitForCallback(opts) {
                     const { cli_nonce: _, ...payload } = parsed;
                     res.writeHead(200, { 'Content-Type': 'application/json' }).end('{"ok":true}');
                     clearTimeout(timer);
-                    s.close();
+                    closeAll();
                     resolve({ data: payload, port });
                 });
-            });
+            };
+            const s = http.createServer(onRequest);
             s.on('error', (err) => {
                 if (err.code === 'EADDRINUSE') {
                     tryPort(rest);
@@ -62,7 +90,30 @@ export function waitForCallback(opts) {
                 clearTimeout(timer);
                 reject(err);
             });
-            s.listen(port, () => { server = s; void opts.onBound?.(port, nonce); });
+            // 127.0.0.1, not every interface: this socket accepts a credential, and on 0.0.0.0 anyone on the LAN can dial it (ALI-1504).
+            s.listen(port, '127.0.0.1', () => {
+                // The web page posts to http://localhost, which a browser may resolve to ::1. Answer there too, or the token goes to
+                // whatever else holds ::1 on this port. A port whose ::1 side is taken is skipped whole: never half of a pair.
+                const s6 = http.createServer(onRequest);
+                s6.once('error', (err) => {
+                    if (err.code === 'EADDRINUSE') {
+                        s.close();
+                        tryPort(rest);
+                        return;
+                    }
+                    // No IPv6 loopback on this machine (a container, a disabled stack): IPv4 alone is all there is to answer on.
+                    servers = [s];
+                    if (opts.signal?.aborted) {
+                        closeAll();
+                        return;
+                    }
+                    void opts.onBound?.(port, nonce);
+                });
+                s6.listen(port, '::1', () => { servers = [s, s6]; if (opts.signal?.aborted) {
+                    closeAll();
+                    return;
+                } void opts.onBound?.(port, nonce); });
+            });
         }
         tryPort(opts.ports);
     });

package/dist/lib/cli-oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-oauth.js","sourceRoot":"","sources":["../../src/lib/cli-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO1C,MAAM,UAAU,eAAe,CAAC,IAI/B;IACC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAA+B,CAAC;QACpC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE9C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAC;QACxE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,SAAS,OAAO,CAAC,SAAmB;YAClC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,SAAkC,CAAC;YAC3D,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACvC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACrC,IAAI,MAAM;oBAAE,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;gBACjE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,eAAe,CAAC,CAAC;gBAC/D,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;gBAC9D,IAAI,MAAM;oBAAE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAE5C,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;oBACzB,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;oBACzB,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,MAA+B,CAAC;oBACpC,IAAI,CAAC;wBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;oBACvD,CAAC;oBAAC,MAAM,CAAC;wBACP,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;wBACzB,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;wBACjE,OAAO;oBACT,CAAC;oBACD,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,KAAK,EAAE,CAAC;wBAClC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;wBACzB,OAAO;oBACT,CAAC;oBACD,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;oBAC5C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;oBAC9E,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,CAAC,CAAC,KAAK,EAAE,CAAC;oBACV,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnC,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA8B,EAAE,EAAE;gBAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC9B,OAAO,CAAC,IAAI,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC"}
+{"version":3,"file":"cli-oauth.js","sourceRoot":"","sources":["../../src/lib/cli-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO1C,sFAAsF;AACtF,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,CAAC;AAEhC,MAAM,UAAU,eAAe,CAAC,IAM/B;IACC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAkB,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,GAAS,EAAE,GAAG,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE9C,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;YAC1C,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,QAAQ,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACjC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC,CAAC;QACxE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,SAAS,OAAO,CAAC,SAAmB;YAClC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,SAAkC,CAAC;YAC3D,MAAM,SAAS,GAAyB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACnD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACrC,IAAI,MAAM;oBAAE,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;gBACjE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,eAAe,CAAC,CAAC;gBAC/D,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;gBAC9D,IAAI,MAAM;oBAAE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAE5C,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;oBACzB,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;oBACzB,OAAO;gBACT,CAAC;gBACD,kHAAkH;gBAClH,6EAA6E;gBAC7E,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;gBACb,IAAI,MAAM,GAAG,KAAK,CAAC;gBACnB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC/B,IAAI,MAAM;wBAAE,OAAO;oBACnB,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;oBACrB,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;wBAC1B,MAAM,GAAG,IAAI,CAAC;wBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;wBACrE,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,MAAM;wBAAE,OAAO;oBACnB,IAAI,MAA+B,CAAC;oBACpC,IAAI,CAAC;wBACH,MAAM,CAAC,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;wBACtE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;wBAC9F,MAAM,GAAG,CAA4B,CAAC;oBACxC,CAAC;oBAAC,MAAM,CAAC;wBACP,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;wBACzB,OAAO;oBACT,CAAC;oBACD,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,KAAK,EAAE,CAAC;wBAClC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;wBACzB,OAAO;oBACT,CAAC;oBACD,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;oBAC5C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;oBAC9E,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,QAAQ,EAAE,CAAC;oBACX,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnC,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;YACF,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA8B,EAAE,EAAE;gBAC/C,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC9B,OAAO,CAAC,IAAI,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YACH,6HAA6H;YAC7H,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBAC/B,qHAAqH;gBACrH,+GAA+G;gBAC/G,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAA8B,EAAE,EAAE;oBAClD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;wBAC9B,CAAC,CAAC,KAAK,EAAE,CAAC;wBACV,OAAO,CAAC,IAAI,CAAC,CAAC;wBACd,OAAO;oBACT,CAAC;oBACD,6GAA6G;oBAC7G,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;oBACd,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;wBAAC,QAAQ,EAAE,CAAC;wBAAC,OAAO;oBAAC,CAAC;oBACjD,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACnC,CAAC,CAAC,CAAC;gBACH,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;oBAAC,QAAQ,EAAE,CAAC;oBAAC,OAAO;gBAAC,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3I,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC"}

package/dist/lib/config.d.ts

@@ -1,6 +1,10 @@
 import { type WrittenConfig } from './safe-config-write.js';
 import { type StoredProviderId } from './llm-providers.js';
-export type EnvName = 'local' | 'preview' | 'prod';
+import type { StoredScope } from './scope-values.js';
+import { type TeamDestinationName } from './destination-name.js';
+export type BuiltinEnv = 'local' | 'preview' | 'prod';
+/** A builtin, or the name of a team destination saved by `align join`. */
+export type EnvName = BuiltinEnv | TeamDestinationName;
 export interface EnvironmentConfig {
     gatewayUrl: string;
     authToken: string | null;
@@ -8,7 +12,16 @@ export interface EnvironmentConfig {
     ngrokUrl?: string;
     mode: 'demo' | 'auth' | 'local-embedded';
     localDbPath?: string;
+    /** 'team' for a destination saved by `align join`; absent for the three builtins. */
+    kind?: 'builtin' | 'team';
+    /** Team destinations: the web app the gateway named at join time (never guessed from the gateway URL). */
+    appUrl?: string;
+    /** Team destinations: the org name the SERVER claimed. Display only, never an identity. */
+    orgNameClaimed?: string;
+    joinedAt?: string;
 }
+/** The gateway URL an environment uses when nothing overrides it (ALIGN_GATEWAY_URL, a saved value). */
+export declare function defaultGatewayUrlFor(env: string): string;
 /**
  * ALI-618: local-embedded mode never makes an HTTP call for its own operations (it reads a
  * local embedded DB - see gateway-client.ts's `createLocalGatewayClient` branch), so the
@@ -74,11 +87,34 @@ export declare function savedLlmConfig(config: {
     provider?: string;
     model?: string;
 };
+export type LeadPromptOutcome = 'declined' | 'submitted' | 'skipped';
+export interface LeadState {
+    shownAt?: string;
+    version?: string;
+    outcome?: LeadPromptOutcome;
+    submittedAt?: string;
+}
 export declare function createConfigStore(): {
     getEnvironment(env: EnvName): EnvironmentConfig;
+    /** One write: a crash cannot leave a token saved without the gateway it belongs to. */
+    saveTeamDestination(name: string, d: {
+        gatewayUrl: string;
+        appUrl: string;
+        authToken: string;
+        tenantId: string | null;
+        orgNameClaimed?: string;
+    }, now?: Date): void;
+    /** Logout for a team destination: the entry stays so `align login --env <name>` can renew it. */
+    clearTeamToken(name: string): void;
+    getShareDestination(): string | null;
+    setShareDestination(name: string): void;
+    clearShareDestination(): void;
     setAuthToken(env: EnvName, token: string): void;
     setTenantId(env: EnvName, tenantId: string): void;
     setNgrokUrl(url: string): void;
+    /** True only for a destination `align join` saved. A builtin name is never one. */
+    hasTeamDestination(name: string): boolean;
+    listTeamDestinationNames(): string[];
     setDefaultEnv(env: EnvName): void;
     getDefaultEnv(): EnvName;
     getConnectorToken(env: EnvName, connectorKey: string): string | null;
@@ -99,6 +135,19 @@ export declare function createConfigStore(): {
     setConnectorCloudId(env: EnvName, connectorKey: string, cloudId: string): void;
     getConnectorSiteBase(env: EnvName, connectorKey: string): string | null;
     setConnectorSiteBase(env: EnvName, connectorKey: string, siteBase: string): void;
+    /**
+     * L4: what the person chose to read for a source, kept beside its token under `<env>:<source>:scope` so forgetting the
+     * connector removes it too. Non-secret, and not a `:field:` key, so no fetch is ever handed it as a credential.
+     * An entry that is PRESENT but unreadable (truncated, or written by a newer CLI) reads as yours, never as "no choice": for GitHub
+     * and GitLab "no choice" means "widen from the folder", and a damaged record must not do that. Only an absent entry is null.
+     */
+    getConnectorScope(env: EnvName, connectorKey: string): StoredScope | null;
+    setConnectorScope(env: EnvName, connectorKey: string, scope: StoredScope): void;
+    clearConnectorScope(env: EnvName, connectorKey: string): void;
+    clearTeamScopeDisclosed(source: string): void;
+    getTeamScopeDisclosedFor(): string[];
+    isTeamScopeDisclosed(source: string, scopeKey: string): boolean;
+    markTeamScopeDisclosed(source: string, scopeKey: string): void;
     setLocalMode(dbPath: string): void;
     clearLocalMode(): void;
     clear(env: EnvName): void;
@@ -107,7 +156,16 @@ export declare function createConfigStore(): {
     setAgent(agent: string): void;
     isLaunchOff(): boolean;
     setLaunchOff(off: boolean): void;
+    /** The saved detector choice, or undefined when none is saved (the default then applies). */
+    getDetector(): string | undefined;
+    setDetector(detector: string): void;
     clearAgent(): void;
+    isBackgroundSyncOff(): boolean;
+    setBackgroundSyncOff(off: boolean): void;
+    backgroundSyncNoticeShown(): boolean;
+    markBackgroundSyncNoticeShown(at: string): void;
+    getReauthLineShownAt(): string | undefined;
+    markReauthLineShown(at: string): void;
     getWrittenConfigs(): Record<string, WrittenConfig>;
     recordWrittenConfig(file: string, entry: WrittenConfig): void;
     /** Forget only the files whose undo finished; a skipped file keeps its record. */
@@ -118,6 +176,17 @@ export declare function createConfigStore(): {
     markWriteRefused(file: string): void;
     getTelemetryConsent(): TelemetryConsent | undefined;
     setTelemetryConsent(value: TelemetryConsent): void;
+    setTelemetryOffByEnv(via: string, now?: Date): void;
+    getTelemetryOffByEnv(): {
+        via: string;
+        at: string;
+    } | undefined;
+    getTelemetryNoticeShownAt(): string | undefined;
+    markTelemetryNoticeShown(): void;
+    getLeadState(): LeadState;
+    markLeadPromptShown(version: string, now?: Date): void;
+    setLeadOutcome(outcome: LeadPromptOutcome, now?: Date): void;
+    clearLeadPromptShown(): void;
     getProviderKey(provider: GuidedProviderKey): string | null;
     setProviderKey(provider: GuidedProviderKey, key: string): void;
     clearProviderKey(provider: GuidedProviderKey): void;
@@ -127,6 +196,8 @@ export declare function createConfigStore(): {
     isAskKeyOfferDismissed(): boolean;
     setAskKeyOfferDismissed(dismissed: boolean): void;
     wasFunnelStageRecorded(stage: string): boolean;
+    claimFunnelStage(stage: string): boolean;
+    releaseFunnelStage(stage: string): boolean;
     markFunnelStageRecorded(stage: string): void;
 };
 //# sourceMappingURL=config.d.ts.map

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAIA,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE/E,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB,CAAC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAQD;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,QAA2B,CAAC;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,QAA4B,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC;AAE9D;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAM3E;AAED;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAEjD,qFAAqF;AACrF,MAAM,WAAW,aAAa;IAAG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AAEpE;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE;IACrC,cAAc,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3D,gBAAgB,IAAI,aAAa,CAAC;CACnC,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAO1F;AAED,wBAAgB,iBAAiB;wBAwCT,OAAO,GAAG,iBAAiB;sBAc7B,OAAO,SAAS,MAAM;qBAIvB,OAAO,YAAY,MAAM;qBAIzB,MAAM;uBAIJ,OAAO;qBACT,OAAO;2BACD,OAAO,gBAAgB,MAAM,GAAG,MAAM,GAAG,IAAI;2BAI7C,OAAO,gBAAgB,MAAM,SAAS,MAAM;IAInE;;;;;OAKG;4BACqB,OAAO,gBAAgB,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;6BAY5D,OAAO,gBAAgB,MAAM,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAYtF,iGAAiG;yBAC5E,OAAO,gBAAgB,MAAM;IAOlD,6FAA6F;6BACpE,OAAO;6BAMP,OAAO,gBAAgB,MAAM,GAAG,MAAM,GAAG,IAAI;6BAI7C,OAAO,gBAAgB,MAAM,WAAW,MAAM;8BAI7C,OAAO,gBAAgB,MAAM,GAAG,MAAM,GAAG,IAAI;8BAI7C,OAAO,gBAAgB,MAAM,YAAY,MAAM;yBAIpD,MAAM;;eAWhB,OAAO;oBAQF,MAAM;gBASV,MAAM,GAAG,SAAS;oBAGd,MAAM;mBAOP,OAAO;sBAGJ,OAAO;;yBAUJ,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;8BAKxB,MAAM,SAAS,aAAa;IAItD,kFAAkF;8BACxD,MAAM,EAAE;0BAQZ,MAAM,GAAG,OAAO;6BAGb,MAAM;;2BAOR,MAAM;2BAIN,gBAAgB,GAAG,SAAS;+BAGxB,gBAAgB;6BAOlB,iBAAiB,GAAG,MAAM,GAAG,IAAI;6BAGjC,iBAAiB,OAAO,MAAM;+BAO5B,iBAAiB;wBAOxB,aAAa;2BAGV,aAAa;;8BAQV,OAAO;uCAGE,OAAO;kCAOZ,MAAM,GAAG,OAAO;mCAGf,MAAM,GAAG,IAAI;EAK/C"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAIA,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,KAAK,EAAe,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAElE,OAAO,EAAqB,KAAK,mBAAmB,EAA2B,MAAM,uBAAuB,CAAC;AAI7G,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AACtD,0EAA0E;AAC1E,MAAM,MAAM,OAAO,GAAG,UAAU,GAAG,mBAAmB,CAAC;AAEvD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB,CAAC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qFAAqF;IACrF,IAAI,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC1B,0GAA0G;IAC1G,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAQD,wGAAwG;AACxG,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,QAA2B,CAAC;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,QAA4B,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC;AAE9D;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAQ3E;AAED;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAEjD,qFAAqF;AACrF,MAAM,WAAW,aAAa;IAAG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AAEpE;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE;IACrC,cAAc,CAAC,QAAQ,EAAE,iBAAiB,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3D,gBAAgB,IAAI,aAAa,CAAC;CACnC,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAO1F;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,CAAC;AACrE,MAAM,WAAW,SAAS;IAAG,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAEpH,wBAAgB,iBAAiB;wBAiET,OAAO,GAAG,iBAAiB;IAyB/C,uFAAuF;8BAE/E,MAAM,KACT;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,QACzG,IAAI;IAgBX,iGAAiG;yBAC5E,MAAM;2BAKJ,MAAM,GAAG,IAAI;8BAIV,MAAM;;sBAOd,OAAO,SAAS,MAAM;qBAIvB,OAAO,YAAY,MAAM;qBAIzB,MAAM;IAIvB,mFAAmF;6BAC1D,MAAM,GAAG,OAAO;gCAGb,MAAM,EAAE;uBAGjB,OAAO;qBACT,OAAO;2BACD,OAAO,gBAAgB,MAAM,GAAG,MAAM,GAAG,IAAI;2BAI7C,OAAO,gBAAgB,MAAM,SAAS,MAAM;IAInE;;;;;OAKG;4BACqB,OAAO,gBAAgB,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;6BAY5D,OAAO,gBAAgB,MAAM,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAYtF,iGAAiG;yBAC5E,OAAO,gBAAgB,MAAM;IAWlD,6FAA6F;6BACpE,OAAO;6BAOP,OAAO,gBAAgB,MAAM,GAAG,MAAM,GAAG,IAAI;6BAI7C,OAAO,gBAAgB,MAAM,WAAW,MAAM;8BAI7C,OAAO,gBAAgB,MAAM,GAAG,MAAM,GAAG,IAAI;8BAI7C,OAAO,gBAAgB,MAAM,YAAY,MAAM;IAIzE;;;;;OAKG;2BAIoB,OAAO,gBAAgB,MAAM,GAAG,WAAW,GAAG,IAAI;2BAmBlD,OAAO,gBAAgB,MAAM,SAAS,WAAW;6BAG/C,OAAO,gBAAgB,MAAM;oCAMtB,MAAM,GAAG,IAAI;gCAKjB,MAAM,EAAE;iCAIP,MAAM,YAAY,MAAM,GAAG,OAAO;mCAGhC,MAAM,YAAY,MAAM,GAAG,IAAI;yBAKzC,MAAM;;eAWhB,OAAO;oBASF,MAAM;gBASV,MAAM,GAAG,SAAS;oBAGd,MAAM;mBAOP,OAAO;sBAGJ,OAAO;IAIzB,6FAA6F;mBAC9E,MAAM,GAAG,SAAS;0BAGX,MAAM;;2BAOL,OAAO;8BAGJ,OAAO;iCAKJ,OAAO;sCAGF,MAAM;4BAIhB,MAAM,GAAG,SAAS;4BAGlB,MAAM;yBAMT,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;8BAKxB,MAAM,SAAS,aAAa;IAItD,kFAAkF;8BACxD,MAAM,EAAE;0BAQZ,MAAM,GAAG,OAAO;6BAGb,MAAM;;2BAOR,MAAM;2BAIN,gBAAgB,GAAG,SAAS;+BAIxB,gBAAgB;8BAQjB,MAAM,QAAO,IAAI;4BAMnB;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;iCAOlC,MAAM,GAAG,SAAS;gCAGnB,IAAI;oBAKhB,SAAS;iCAQI,MAAM,QAAO,IAAI,GAAgB,IAAI;4BAK1C,iBAAiB,QAAO,IAAI,GAAgB,IAAI;4BAIhD,IAAI;6BASH,iBAAiB,GAAG,MAAM,GAAG,IAAI;6BAGjC,iBAAiB,OAAO,MAAM;+BAO5B,iBAAiB;wBAOxB,aAAa;2BAGV,aAAa;;8BAQV,OAAO;uCAGE,OAAO;kCAOZ,MAAM,GAAG,OAAO;4BAMtB,MAAM,GAAG,OAAO;8BAQd,MAAM,GAAG,OAAO;mCAMX,MAAM,GAAG,IAAI;EAK/C"}