@aligndottech/cli 0.49.0 → 0.51.0

package/dist/lib/destination-summary.js

@@ -0,0 +1,27 @@
+import { describeHost } from './destination-trust.js';
+import { visible } from './share/visible.js';
+const hostOf = (url) => {
+    try {
+        return url ? new URL(url).host : '(unknown)';
+    }
+    catch {
+        return '(unknown)';
+    }
+};
+export function destinationLines(config) {
+    const share = config.getShareDestination();
+    return config.listTeamDestinationNames().map((name) => {
+        let e;
+        try {
+            e = config.getEnvironment(name);
+        }
+        catch (err) {
+            // A hand-edited entry the transport rule refuses: say so rather than fail the whole listing.
+            return `  ${name}  unreadable: ${visible(err.message)}`;
+        }
+        const org = e.orgNameClaimed ? ` "${visible(e.orgNameClaimed)}"` : '';
+        const mark = name === share ? '  (share destination)' : '';
+        return `  ${name}${org}  gateway ${describeHost(hostOf(e.gatewayUrl)).text}  web app ${describeHost(hostOf(e.appUrl)).text}${mark}`;
+    });
+}
+//# sourceMappingURL=destination-summary.js.map

package/dist/lib/destination-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destination-summary.js","sourceRoot":"","sources":["../../src/lib/destination-summary.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAI7C,MAAM,MAAM,GAAG,CAAC,GAAuB,EAAU,EAAE;IACjD,IAAI,CAAC;QAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,WAAW,CAAC;IAAC,CAAC;AACrF,CAAC,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,MAAmB;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;IAC3C,OAAO,MAAM,CAAC,wBAAwB,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACpD,IAAI,CAAC,CAAC;QACN,IAAI,CAAC;YAAC,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,IAAa,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAC7D,6FAA6F;YAC7F,OAAO,KAAK,IAAI,iBAAiB,OAAO,CAAE,GAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QACrE,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,KAAK,IAAI,GAAG,GAAG,aAAa,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,aAAa,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;IACtI,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/destination-trust.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Pure trust rules for a team destination: what a gateway or web-app URL may look like before the
+ * CLI will send a credential to it, or open a browser at it. No I/O here, so every rule is a
+ * plain test and the same functions serve `align join`, the config setter and the share preview.
+ */
+export declare class TransportError extends Error {
+    constructor(message: string);
+}
+/**
+ * https, or http to the loopback only. Returns the normalised origin (lowercase host, no trailing
+ * slash). A URL that carries credentials, a path, a query or a fragment is refused: the first is
+ * how `https://api.align.tech@evil.example` passes a glance, and the rest would make two spellings
+ * of one server compare unequal. Exact host match is on the parsed hostname, never a prefix.
+ */
+export declare function assertTransport(raw: string): string;
+/** `align.tech` or a subdomain of it, on a label boundary (`api.align.tech.evil.example` and `evilalign.tech` are not). Any port. */
+export declare function isAlignHost(host: string): boolean;
+/**
+ * Whether the person must type the gateway host back before the CLI trusts it. False only when
+ * BOTH hosts are Align's own, on a label boundary: `api.align.tech.evil.example` and
+ * `evilalign.tech` both need it. Either host being foreign is enough to need it, because a
+ * real gateway with an attacker's web app (or the reverse) is the same phish.
+ */
+export declare function needsTypeBack(gatewayHost: string, appHost: string): boolean;
+/**
+ * A host as it should be printed before a person trusts it. URL parsing already turns a
+ * non-ASCII host into punycode, so a lookalike (a Cyrillic "a") arrives as `xn--...` and would
+ * read as noise; show the decoded form beside the raw one and say why.
+ */
+export declare function describeHost(host: string): {
+    text: string;
+    warning: string | null;
+};
+export interface ParsedJoinLink {
+    token: string;
+    /** Normalised origin of the gateway the link (or --gateway) names. */
+    gatewayUrl: string;
+    /** `host[:port]` of the web app the link points at, compared with the gateway's own claim later. */
+    appHost: string;
+    /** The link itself carried gw= (as opposed to the person passing --gateway). */
+    gatewayFromLink: boolean;
+}
+/**
+ * Reads an invite link. Nothing here trusts the link: it is only a claim that the gateway's
+ * own `invite-peek` answer is later checked against. The gateway comes from the link's `gw`
+ * parameter or `--gateway`; with neither there is nothing to ask, and guessing one from the app
+ * host is exactly the substitution this flow exists to prevent.
+ */
+export declare function parseJoinLink(raw: string, opts?: {
+    gateway?: string;
+}): ParsedJoinLink;
+/** A destination name derived from the org name the server claimed, or null when nothing usable is left. */
+export declare function slugOrgName(claimed: string): string | null;
+//# sourceMappingURL=destination-trust.d.ts.map

package/dist/lib/destination-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"destination-trust.d.ts","sourceRoot":"","sources":["../../src/lib/destination-trust.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAID;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAcnD;AAED,qIAAqI;AACrI,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGjD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAUnF;AAID,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAC;IACnB,oGAAoG;IACpG,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,cAAc,CAsB1F;AAED,4GAA4G;AAC5G,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG1D"}

package/dist/lib/destination-trust.js

@@ -0,0 +1,107 @@
+import { domainToUnicode } from 'node:url';
+import { validateDestinationName } from './destination-name.js';
+/**
+ * Pure trust rules for a team destination: what a gateway or web-app URL may look like before the
+ * CLI will send a credential to it, or open a browser at it. No I/O here, so every rule is a
+ * plain test and the same functions serve `align join`, the config setter and the share preview.
+ */
+export class TransportError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'TransportError';
+    }
+}
+const LOOPBACK_HOSTS = new Set(['localhost', '127.0.0.1']);
+/**
+ * https, or http to the loopback only. Returns the normalised origin (lowercase host, no trailing
+ * slash). A URL that carries credentials, a path, a query or a fragment is refused: the first is
+ * how `https://api.align.tech@evil.example` passes a glance, and the rest would make two spellings
+ * of one server compare unequal. Exact host match is on the parsed hostname, never a prefix.
+ */
+export function assertTransport(raw) {
+    let u;
+    try {
+        u = new URL(raw);
+    }
+    catch {
+        throw new TransportError(`"${raw.slice(0, 80)}" is not a URL`);
+    }
+    if (u.username || u.password)
+        throw new TransportError('the URL must not carry a username or password');
+    if (u.pathname !== '/' || u.search || u.hash)
+        throw new TransportError('use the server address only, with no path, query or fragment');
+    const loopback = LOOPBACK_HOSTS.has(u.hostname);
+    if (u.protocol !== 'https:' && !(u.protocol === 'http:' && loopback)) {
+        throw new TransportError(`${u.host} must be reached over https (http is allowed only for localhost)`);
+    }
+    return u.origin;
+}
+/** `align.tech` or a subdomain of it, on a label boundary (`api.align.tech.evil.example` and `evilalign.tech` are not). Any port. */
+export function isAlignHost(host) {
+    const h = host.toLowerCase().replace(/:\d+$/, '');
+    return h === 'align.tech' || h.endsWith('.align.tech');
+}
+/**
+ * Whether the person must type the gateway host back before the CLI trusts it. False only when
+ * BOTH hosts are Align's own, on a label boundary: `api.align.tech.evil.example` and
+ * `evilalign.tech` both need it. Either host being foreign is enough to need it, because a
+ * real gateway with an attacker's web app (or the reverse) is the same phish.
+ */
+export function needsTypeBack(gatewayHost, appHost) {
+    return !(isAlignHost(gatewayHost) && isAlignHost(appHost));
+}
+/**
+ * A host as it should be printed before a person trusts it. URL parsing already turns a
+ * non-ASCII host into punycode, so a lookalike (a Cyrillic "a") arrives as `xn--...` and would
+ * read as noise; show the decoded form beside the raw one and say why.
+ */
+export function describeHost(host) {
+    const m = /^(.*?)(:\d+)?$/.exec(host);
+    const name = m?.[1] ?? host;
+    const port = m?.[2] ?? '';
+    const decoded = domainToUnicode(name);
+    if (decoded === '' || decoded === name)
+        return { text: host, warning: null };
+    return {
+        text: `${host} (shown as ${decoded}${port})`,
+        warning: 'This host name uses non-ASCII characters, which can imitate another address. Compare the raw form above character by character.',
+    };
+}
+const TOKEN_RE = /^[0-9a-f]{64}$/;
+/**
+ * Reads an invite link. Nothing here trusts the link: it is only a claim that the gateway's
+ * own `invite-peek` answer is later checked against. The gateway comes from the link's `gw`
+ * parameter or `--gateway`; with neither there is nothing to ask, and guessing one from the app
+ * host is exactly the substitution this flow exists to prevent.
+ */
+export function parseJoinLink(raw, opts = {}) {
+    let u;
+    try {
+        u = new URL(raw);
+    }
+    catch {
+        throw new TransportError('That does not look like an invite link. Paste the whole link, in quotes.');
+    }
+    const appOrigin = assertTransport(u.origin);
+    const token = u.searchParams.get('token') ?? '';
+    if (!TOKEN_RE.test(token))
+        throw new TransportError('The link has no valid invite token. Ask for a new link.');
+    const gw = u.searchParams.get('gw');
+    const flag = opts.gateway;
+    const fromLink = gw ? assertTransport(gw) : null;
+    const fromFlag = flag ? assertTransport(flag) : null;
+    if (fromLink && fromFlag && fromLink !== fromFlag) {
+        throw new TransportError(`The link names ${new URL(fromLink).host} but --gateway names ${new URL(fromFlag).host}. They differ, so nothing was done.`);
+    }
+    const gatewayUrl = fromLink ?? fromFlag;
+    if (!gatewayUrl) {
+        throw new TransportError('The link does not say which server to join. Ask the sender for a newer link, or pass the gateway yourself: --gateway https://api.<their-domain>');
+    }
+    return { token, gatewayUrl, appHost: new URL(appOrigin).host, gatewayFromLink: fromLink !== null };
+}
+/** A destination name derived from the org name the server claimed, or null when nothing usable is left. */
+export function slugOrgName(claimed) {
+    const slug = claimed.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '').slice(0, 32).replace(/-+$/g, '');
+    return validateDestinationName(slug) === null ? slug : null;
+}
+//# sourceMappingURL=destination-trust.js.map

package/dist/lib/destination-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destination-trust.js","sourceRoot":"","sources":["../../src/lib/destination-trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhE;;;;GAIG;AAEH,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ;QAAE,MAAM,IAAI,cAAc,CAAC,+CAA+C,CAAC,CAAC;IACxG,IAAI,CAAC,CAAC,QAAQ,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI;QAAE,MAAM,IAAI,cAAc,CAAC,8DAA8D,CAAC,CAAC;IACvI,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,kEAAkE,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC;AAClB,CAAC;AAED,qIAAqI;AACrI,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,OAAe;IAChE,OAAO,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC5B,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7E,OAAO;QACL,IAAI,EAAE,GAAG,IAAI,cAAc,OAAO,GAAG,IAAI,GAAG;QAC5C,OAAO,EAAE,iIAAiI;KAC3I,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAYlC;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,OAA6B,EAAE;IACxE,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,0EAA0E,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,yDAAyD,CAAC,CAAC;IAC/G,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;IAC1B,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,IAAI,QAAQ,IAAI,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,cAAc,CAAC,kBAAkB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,wBAAwB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,qCAAqC,CAAC,CAAC;IACxJ,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,IAAI,QAAQ,CAAC;IACxC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,cAAc,CAAC,iJAAiJ,CAAC,CAAC;IAC9K,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;AACrG,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxH,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC"}

package/dist/lib/env-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-resolver.d.ts","sourceRoot":"","sources":["../../src/lib/env-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,MAAM,CAG5F;AAED,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,MAAM,CAGtF;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,iBAAiB,GAAG,MAAM,CAG5D"}
+{"version":3,"file":"env-resolver.d.ts","sourceRoot":"","sources":["../../src/lib/env-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,MAAM,CAG5F;AAED,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,MAAM,CAGtF;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,iBAAiB,GAAG,MAAM,CAK5D"}

package/dist/lib/env-resolver.js

@@ -7,6 +7,9 @@ export function resolveWebhookUrl(connectorKey, env) {
     return `${base}/webhook/${connectorKey}/events`;
 }
 export function resolveAppUrl(env) {
+    // A team destination saved the web app its gateway named at join time; guessing it from the gateway is for the builtins only.
+    if (env.kind === 'team' && env.appUrl)
+        return env.appUrl;
     if (env.gatewayUrl.includes('localhost'))
         return 'http://localhost:5173';
     return env.gatewayUrl.replace('://api.', '://app.');

package/dist/lib/env-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-resolver.js","sourceRoot":"","sources":["../../src/lib/env-resolver.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,uBAAuB,CAAC,YAAoB,EAAE,GAAsB;IAClF,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC;IAC5C,OAAO,GAAG,IAAI,mBAAmB,YAAY,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,GAAsB;IAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC;IAC5C,OAAO,GAAG,IAAI,YAAY,YAAY,SAAS,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAsB;IAClD,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,uBAAuB,CAAC;IACzE,OAAO,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC"}
+{"version":3,"file":"env-resolver.js","sourceRoot":"","sources":["../../src/lib/env-resolver.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,uBAAuB,CAAC,YAAoB,EAAE,GAAsB;IAClF,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC;IAC5C,OAAO,GAAG,IAAI,mBAAmB,YAAY,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,GAAsB;IAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC;IAC5C,OAAO,GAAG,IAAI,YAAY,YAAY,SAAS,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAsB;IAClD,8HAA8H;IAC9H,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC;IACzD,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,uBAAuB,CAAC;IACzE,OAAO,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC"}

package/dist/lib/fatal.d.ts

@@ -0,0 +1,11 @@
+/**
+ * What the last-resort handler in index.ts prints and exits with. A usage mistake the user can
+ * fix by retyping (an unknown --env) is exit 2 with only its message: a "report it at ..."
+ * footer on it sends people to file a bug for their own typo.
+ */
+export declare function describeFatal(err: unknown, debug: boolean): {
+    lines: string[];
+    code: number;
+    stack?: Error;
+};
+//# sourceMappingURL=fatal.d.ts.map

package/dist/lib/fatal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fatal.d.ts","sourceRoot":"","sources":["../../src/lib/fatal.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,CAa5G"}

package/dist/lib/fatal.js

@@ -0,0 +1,22 @@
+/**
+ * What the last-resort handler in index.ts prints and exits with. A usage mistake the user can
+ * fix by retyping (an unknown --env) is exit 2 with only its message: a "report it at ..."
+ * footer on it sends people to file a bug for their own typo.
+ */
+export function describeFatal(err, debug) {
+    const e = err instanceof Error ? err : new Error(String(err));
+    // A saved destination the transport rule refuses is a config problem, not a bug: say what is wrong, exit 2.
+    if (e.name === 'UnknownEnvError' || e.name === 'TransportError')
+        return { lines: [`\nalign: ${e.message}\n`], code: 2 };
+    if (debug)
+        return { lines: [], code: 1, stack: e };
+    return {
+        lines: [
+            `\nalign: ${e.message}\n`,
+            'Run with ALIGN_DEBUG=1 for the full stack trace, or report it at',
+            'https://github.com/aligndottech/align-cli/issues',
+        ],
+        code: 1,
+    };
+}
+//# sourceMappingURL=fatal.js.map

package/dist/lib/fatal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fatal.js","sourceRoot":"","sources":["../../src/lib/fatal.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY,EAAE,KAAc;IACxD,MAAM,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,4GAA4G;IAC5G,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACxH,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACnD,OAAO;QACL,KAAK,EAAE;YACL,YAAY,CAAC,CAAC,OAAO,IAAI;YACzB,kEAAkE;YAClE,kDAAkD;SACnD;QACD,IAAI,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/dist/lib/fetchers/capture.d.ts

@@ -14,6 +14,10 @@ import type { PersonalImportItem } from '../personal-import.js';
  *  reason, printed verbatim, so `detail` is written for a person. Owned here, by the
  *  producer; the renderer consumes it. */
 export interface CaptureSkip {
+    /** The SDK's kind (page_cap, time_budget, vendor_cap, shape, pending, error, auth), when the
+     *  fetcher reported one. The renderer branches on it for one thing only: which skip stopped
+     *  a windowed read. Any other kind is printed verbatim like the rest (the union grows). */
+    kind?: string;
     /** How many source objects this covers. */
     count: number;
     /** One line printed after the count. */
@@ -29,7 +33,45 @@ export interface CaptureFetchReport {
      *  40-commit repo is printed every run and stops being read. */
     requested?: number;
     skips: CaptureSkip[];
+    /** L3: true when the read reached the end of its window with nothing cut. Absent from a
+     *  fetcher that cannot say (git, docs, and an SDK older than 0.10). */
+    complete?: boolean;
+    /** L3: the oldest `updated_at` the read saw, so an incomplete line can name the date it
+     *  actually reached. Absent when no item carried one; never filled in from the clock. */
+    oldestReached?: string;
+    /** L5: the latest `updated_at` the read saw, the SDK's own watermark candidate. Absent when no item carried one;
+     *  never filled in from the clock. */
+    highWater?: string;
+    /** L3: 'team' when the token's whole visible scope was read, 'yours' for the caller's own items. */
+    scope?: 'yours' | 'team';
+    /** L3: items returned whole but waiting for their discussion (GitHub's items-first pass). */
+    discussionPending?: number;
+    /** L3: items fetched items-first that COULD have had discussion (the denominator for the above). */
+    discussionTotal?: number;
+    /** L3: one line saying whose items a team-scope read covered ("everyone's PRs and issues in o/r"). */
+    scopeNote?: string;
+    /** L4: a team read that --json could not tell the person about; the disclosure is still owed and shows at the next foreground run. */
+    disclosurePending?: boolean;
 }
+/** L3: what every windowed fetch is given on top of its limit (see fetchWindow in since.ts). */
+export type WindowedOpts = {
+    /** ISO-8601 UTC lower bound. Absent means no bound: only the ceiling applies. */
+    since?: string;
+    /** Wall-clock budget for the whole read; running out is a `time_budget` skip. */
+    timeBudgetMs?: number;
+    /** L5: ISO-8601 UTC upper bound (exclusive). Set by a sync finishing the older part of a window a ceiling cut. */
+    until?: string;
+    /** L5, Slack only: stored threads whose replies since `since` should be re-read (their items come back `partial`). */
+    hotThreads?: Array<{
+        channel: string;
+        ts: string;
+    }>;
+    /** L4: a team scope's option for the fetchers that take one (Jira projects, Linear teams, GitLab projectId, Confluence spaces). */
+    projects?: string[];
+    teams?: string[];
+    projectId?: string;
+    spaces?: string[];
+};
 export interface CaptureFetchResult {
     items: PersonalImportItem[];
     report: CaptureFetchReport;
@@ -37,8 +79,8 @@ export interface CaptureFetchResult {
 /**
  * The slice of a connector-core fetcher this wrapper needs, declared structurally so it
  * compiles against 0.5.0 (no `fetchWithReport`) and consumes 0.6.0's report the moment
- * the installed package has one. `kind` and `platform` on the SDK report are accepted and
- * dropped: the CLI prints the detail and branches on nothing else.
+ * the installed package has one. `kind` on each skip and the report's `complete`, `oldestReached` and
+ * `scope` are carried through (L3); `platform` is dropped.
  */
 export interface ReportingFetcher<O> {
     fetch(opts: O): Promise<PersonalImportItem[]>;
@@ -48,9 +90,14 @@ export interface ReportingFetcher<O> {
             scanned: number;
             requested?: number;
             skips: ReadonlyArray<{
+                kind?: string;
                 count: number;
                 detail: string;
             }>;
+            complete?: boolean;
+            oldestReached?: string;
+            highWater?: string;
+            scope?: 'yours' | 'team';
         };
     }>;
 }

package/dist/lib/fetchers/capture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capture.d.ts","sourceRoot":"","sources":["../../../src/lib/fetchers/capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE;;0CAE0C;AAC1C,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC;;8FAE0F;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB;;oEAEgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC9C,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC;QACjC,KAAK,EAAE,kBAAkB,EAAE,CAAC;QAC5B,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,aAAa,CAAC;gBAAE,KAAK,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC,CAAA;SAAE,CAAC;KAC1G,CAAC,CAAC;CACJ;AAED,wBAAsB,iBAAiB,CAAC,CAAC,SAAS;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EAClE,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAyB7B"}
+{"version":3,"file":"capture.d.ts","sourceRoot":"","sources":["../../../src/lib/fetchers/capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE;;0CAE0C;AAC1C,MAAM,WAAW,WAAW;IAC1B;;+FAE2F;IAC3F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC;;8FAE0F;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB;;oEAEgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB;2EACuE;IACvE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;6FACyF;IACzF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;0CACsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oGAAoG;IACpG,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,6FAA6F;IAC7F,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oGAAoG;IACpG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sGAAsG;IACtG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sIAAsI;IACtI,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,gGAAgG;AAChG,MAAM,MAAM,YAAY,GAAG;IACzB,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kHAAkH;IAClH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sHAAsH;IACtH,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,mIAAmI;IACnI,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC9C,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC;QACjC,KAAK,EAAE,kBAAkB,EAAE,CAAC;QAC5B,MAAM,EAAE;YACN,OAAO,EAAE,MAAM,CAAC;YAChB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,KAAK,EAAE,aAAa,CAAC;gBAAE,IAAI,CAAC,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC,CAAC;YACvE,QAAQ,CAAC,EAAE,OAAO,CAAC;YACnB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;SAC1B,CAAC;KACH,CAAC,CAAC;CACJ;AAED,wBAAsB,iBAAiB,CAAC,CAAC,SAAS;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EAClE,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CA+B7B"}

package/dist/lib/fetchers/capture.js

@@ -2,12 +2,18 @@ export async function withCaptureReport(opts, fetcher) {
     if (typeof fetcher.fetchWithReport === 'function') {
         // One read, never two: the SDK's `fetch` is defined as `(await fetchWithReport()).items`.
         const { items, report } = await fetcher.fetchWithReport(opts);
+        const pending = items.filter((i) => i.detail_pending === true).length;
         return {
             items,
             report: {
                 scanned: report.scanned,
                 ...(report.requested !== undefined ? { requested: report.requested } : {}),
-                skips: report.skips.map((s) => ({ count: s.count, detail: s.detail })),
+                skips: report.skips.map((s) => ({ ...(s.kind !== undefined ? { kind: s.kind } : {}), count: s.count, detail: s.detail })),
+                ...(report.complete !== undefined ? { complete: report.complete } : {}),
+                ...(report.oldestReached !== undefined ? { oldestReached: report.oldestReached } : {}),
+                ...(report.highWater !== undefined ? { highWater: report.highWater } : {}),
+                ...(report.scope !== undefined ? { scope: report.scope } : {}),
+                ...(pending > 0 ? { discussionPending: pending } : {}),
             },
         };
     }

package/dist/lib/fetchers/capture.js.map

@@ -1 +1 @@
-{"version":3,"file":"capture.js","sourceRoot":"","sources":["../../../src/lib/fetchers/capture.ts"],"names":[],"mappings":"AAsDA,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAO,EACP,OAA4B;IAE5B,IAAI,OAAO,OAAO,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QAClD,0FAA0F;QAC1F,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO;YACL,KAAK;YACL,MAAM,EAAE;gBACN,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;aACvE;SACF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO;QACL,KAAK;QACL,MAAM,EAAE;YACN,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,mFAAmF;YACnF,iFAAiF;YACjF,sDAAsD;YACtD,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,KAAK,EAAE,EAAE;SACV;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../../../src/lib/fetchers/capture.ts"],"names":[],"mappings":"AAsGA,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAO,EACP,OAA4B;IAE5B,IAAI,OAAO,OAAO,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QAClD,0FAA0F;QAC1F,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAkC,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QACxG,OAAO;YACL,KAAK;YACL,MAAM,EAAE;gBACN,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBACzH,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD;SACF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO;QACL,KAAK;QACL,MAAM,EAAE;YACN,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,mFAAmF;YACnF,iFAAiF;YACjF,sDAAsD;YACtD,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,KAAK,EAAE,EAAE;SACV;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/fetchers/confluence.d.ts

@@ -1,4 +1,4 @@
-import { type CaptureFetchResult } from './capture.js';
+import { type CaptureFetchResult, type WindowedOpts } from './capture.js';
 /** Read-only personal Confluence import. Delegates to the canonical fetcher in
  *  @aligndottech/connector-core; maps its auth error to the CLI's reconnect flow. */
 export declare function fetchConfluenceItems(opts: {
@@ -8,5 +8,5 @@ export declare function fetchConfluenceItems(opts: {
     email?: string;
     domain?: string;
     limit?: number;
-}): Promise<CaptureFetchResult>;
+} & WindowedOpts): Promise<CaptureFetchResult>;
 //# sourceMappingURL=confluence.d.ts.map

package/dist/lib/fetchers/confluence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"confluence.d.ts","sourceRoot":"","sources":["../../../src/lib/fetchers/confluence.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,kBAAkB,EAAqB,MAAM,cAAc,CAAC;AAE1E;qFACqF;AACrF,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAO9B"}
+{"version":3,"file":"confluence.d.ts","sourceRoot":"","sources":["../../../src/lib/fetchers/confluence.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,YAAY,EAAqB,MAAM,cAAc,CAAC;AAE7F;qFACqF;AACrF,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAO7C"}

package/dist/lib/fetchers/confluence.js.map

@@ -1 +1 @@
-{"version":3,"file":"confluence.js","sourceRoot":"","sources":["../../../src/lib/fetchers/confluence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAA2B,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAE1E;qFACqF;AACrF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAO1C;IACC,IAAI,CAAC;QACH,OAAO,MAAM,iBAAiB,CAAC,IAAI,EAAE,IAAI,iBAAiB,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,gBAAgB;YAAE,MAAM,IAAI,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC3E,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}
+{"version":3,"file":"confluence.js","sourceRoot":"","sources":["../../../src/lib/fetchers/confluence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAA8C,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAE7F;qFACqF;AACrF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAO3B;IACd,IAAI,CAAC;QACH,OAAO,MAAM,iBAAiB,CAAC,IAAI,EAAE,IAAI,iBAAiB,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,gBAAgB;YAAE,MAAM,IAAI,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC3E,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/dist/lib/fetchers/git.d.ts

@@ -29,5 +29,6 @@ export declare function gitCaptureReport(counts: {
  *  pure; the CLI injects the actual git I/O (log/remote) here. */
 export declare function fetchGitItems(opts: {
     limit: number;
+    since?: string;
 }): Promise<CaptureFetchResult>;
 //# sourceMappingURL=git.d.ts.map

package/dist/lib/fetchers/git.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../../src/lib/fetchers/git.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAExF;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,GAAG,WAAW,EAAE,CAerH;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACvC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;CAC3E,GAAG,kBAAkB,CAMrB;AAED;kEACkE;AAClE,wBAAsB,aAAa,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAWxF"}
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../../src/lib/fetchers/git.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAExF;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,GAAG,WAAW,EAAE,CAerH;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACvC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;CAC3E,GAAG,kBAAkB,CAQrB;AAED;kEACkE;AAClE,wBAAsB,aAAa,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAWxG"}

package/dist/lib/fetchers/git.js

@@ -35,6 +35,8 @@ export function gitCaptureSkips(counts) {
 export function gitCaptureReport(counts) {
     return {
         scanned: counts.scanned,
+        // L3: a scan that stopped short of its bound read the whole window; one that hit it did not.
+        complete: counts.scanned < counts.limit,
         ...(counts.scanned >= counts.limit ? { requested: counts.limit } : {}),
         skips: gitCaptureSkips(counts),
     };
@@ -45,7 +47,7 @@ export async function fetchGitItems(opts) {
     // Read ONCE and hand the commits to the pure GitFetcher, rather than letting it call
     // git again: two reads of a moving history are two different answers, and the scanned
     // and rejected counts have to describe the same read the items came from.
-    const { commits, scanned, rejectedByRationale } = await getCommitHistoryDetailed({ limit: opts.limit });
+    const { commits, scanned, rejectedByRationale } = await getCommitHistoryDetailed({ limit: opts.limit, ...(opts.since !== undefined ? { from: opts.since } : {}) });
     const items = await new GitFetcher({ getCommitHistory: async () => commits, getRemoteUrl })
         .fetch({ token: '', limit: opts.limit });
     return {

package/dist/lib/fetchers/git.js.map

@@ -1 +1 @@
-{"version":3,"file":"git.js","sourceRoot":"","sources":["../../../src/lib/fetchers/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAGjE;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAsE;IACpG,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAC7E,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,mBAAmB,GAAG,CAAC;YAChC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;YAChG,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,UAAU,GAAG,CAAC;YAChB,CAAC,CAAC,CAAC;oBACC,KAAK,EAAE,UAAU;oBACjB,6EAA6E;oBAC7E,qDAAqD;oBACrD,MAAM,EAAE,mDAAmD,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;iBACrG,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAEhC;IACC,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED;kEACkE;AAClE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuB;IACzD,qFAAqF;IACrF,sFAAsF;IACtF,0EAA0E;IAC1E,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,MAAM,wBAAwB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACxG,MAAM,KAAK,GAAG,MAAM,IAAI,UAAU,CAAC,EAAE,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;SACxF,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3C,OAAO;QACL,KAAK;QACL,MAAM,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;KACpG,CAAC;AACJ,CAAC"}
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../../src/lib/fetchers/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAGjE;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAsE;IACpG,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAC7E,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,mBAAmB,GAAG,CAAC;YAChC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;YAChG,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,UAAU,GAAG,CAAC;YAChB,CAAC,CAAC,CAAC;oBACC,KAAK,EAAE,UAAU;oBACjB,6EAA6E;oBAC7E,qDAAqD;oBACrD,MAAM,EAAE,mDAAmD,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;iBACrG,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAEhC;IACC,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,6FAA6F;QAC7F,QAAQ,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK;QACvC,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED;kEACkE;AAClE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuC;IACzE,qFAAqF;IACrF,sFAAsF;IACtF,0EAA0E;IAC1E,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,MAAM,wBAAwB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACnK,MAAM,KAAK,GAAG,MAAM,IAAI,UAAU,CAAC,EAAE,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;SACxF,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3C,OAAO;QACL,KAAK;QACL,MAAM,EAAE,gBAAgB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;KACpG,CAAC;AACJ,CAAC"}

package/dist/lib/fetchers/github.d.ts

@@ -1,12 +1,51 @@
-import { type CaptureFetchResult } from './capture.js';
-/** Read-only personal GitHub import (canonical fetcher in connector-core). `repo`
- *  (`owner/repo`) narrows the search to one repo - connector-core >= 0.7.0 (ALI-917);
- *  omitted, every repo the token can see, unchanged from before that version. */
+import { type CaptureFetchResult, type CaptureSkip, type WindowedOpts } from './capture.js';
+import type { FetcherItem } from '@aligndottech/connector-core';
+/**
+ * Read-only personal GitHub import (canonical fetcher in connector-core). `repo` (`owner/repo`)
+ * narrows the search to one repo - connector-core >= 0.7.0 (ALI-917); omitted, every repo the
+ * token can see, unchanged from before that version.
+ *
+ * L3: the list is read ITEMS FIRST (`discussion: 'none'`, about 4 search calls per 300 items),
+ * then the SDK's own `fetchGitHubDiscussion` reads comments and reviews INLINE, newest first,
+ * until `discussionBudget` core requests are spent (GITHUB_DISCUSSION_BUDGET by default). Items
+ * the budget did not reach stay `detail_pending` and thin; the report says how many got their
+ * discussion. Nothing here promises a later drain - none exists until `align sync` (L5).
+ */
 export declare function fetchGitHubItems(opts: {
     token: string;
     limit?: number;
     repo?: string;
-}): Promise<CaptureFetchResult>;
+    scope?: 'yours' | 'team';
+    discussionBudget?: number;
+} & WindowedOpts): Promise<CaptureFetchResult>;
+/**
+ * L5: the list read alone, for `align sync`. The discussion of what it returns is the drain's job
+ * (sync/drain.ts, under its own request budget, from the stored `detail_pending` rows), so this
+ * reads no comment and makes no second pass of its own: the budget is spent once per run, not twice.
+ */
+export declare function fetchGitHubItemsOnly(opts: {
+    token: string;
+    limit?: number;
+    repo?: string;
+    scope?: 'yours' | 'team';
+} & WindowedOpts): Promise<CaptureFetchResult>;
+/**
+ * The discussion pass, in chunks, because the SDK's drain takes no deadline or cancel and keeps
+ * going after a refusal. One item first as a probe, then ten at a time, newest first (the SDK
+ * orders only within what it is given). It stops, leaving the rest pending, when: the request
+ * budget is spent; the time allowed has run out (checked between chunks); or a chunk made NO
+ * progress and reported a failure - that is GitHub refusing or rate-limiting (a revoked token,
+ * a 403 with no quota left, a 429), so a dead token costs about one request, not the whole budget.
+ * It never sleeps on a Retry-After: stopping is the honest answer for a one-shot import.
+ */
+export declare function drainDiscussion(pending: FetcherItem[], o: {
+    token: string;
+    budget: number;
+    deadlineMs: number;
+}): Promise<{
+    items: FetcherItem[];
+    skips: CaptureSkip[];
+}>;
 /**
  * ALI-917: which repo to scope GitHub's search to, if any, given CLI overrides that may
  * not exist at every call site - `align setup`'s interactive GitHub source has neither

package/dist/lib/fetchers/github.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../../src/lib/fetchers/github.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,kBAAkB,EAAqB,MAAM,cAAc,CAAC;AAG1E;;iFAEiF;AACjF,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAE1H;AAID;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAKhH"}
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../../src/lib/fetchers/github.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAqB,MAAM,cAAc,CAAC;AAC/G,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAGhE;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAC7C,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GAAG,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA4B7C;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CACxE,GAAG,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAM7C;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,WAAW,EAAE,EACtB,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACvD,OAAO,CAAC;IAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAAC,KAAK,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC,CAyCzD;AAID;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAKhH"}