@aligndottech/cli 0.49.0 → 0.51.0

package/dist/lib/share/command.js

@@ -0,0 +1,278 @@
+/**
+ * L9: `align share` as a function of injected dependencies, returning an exit code. The commander
+ * wrapper (commands/share.ts) wires the real config, gateway client and prompts; tests wire fakes.
+ *
+ * Who may complete a share depends on what the gateway says (GET /share-requests/config, ALI-1540):
+ *
+ * - `required`, or `available` without `--typed`: the person approves in a BROWSER session. This process stages
+ *   an encrypted request, prints a link and a code, waits, and sends only what the gateway says was approved.
+ *   It never prompts on a terminal and never calls shareBatch. It may run inside an agent (ALIGN_WRAPPED): an
+ *   agent can ask, and its own CLI token cannot approve, because the approve route refuses it. A browser session can (SECURITY.md lists how an agent may get one), so this is not a lock.
+ * - `off`, a gateway with no such route (404), or `available` with `--typed`: today's flow. EVERY path (a plain
+ *   `align share` and `align share --confirm <code>`) shows the preview on the CONTROLLING terminal and needs a
+ *   typed yes there (default No). There is no `--yes`: a flag is exactly what an agent would pass. A caller with
+ *   no controlling terminal, or inside an agent align launched, is refused. The known gap (an agent that
+ *   allocates its own pseudo-terminal) is stated in SECURITY.md. `required` never reaches this branch.
+ */
+import { visible } from './visible.js';
+import { teamCtaLine } from '../team-cta.js';
+import { runBrowserShare } from './browser-flow.js';
+import { presentLink } from './delivery.js';
+import { approveUrl } from './approval.js';
+import { combinedHash, consumeCode, loadRequest, lookupCode, sweepPending } from './pending.js';
+import { isAlignHost } from '../destination-trust.js';
+import { resolveApprovalAppUrl } from './target.js';
+import { prepare, ratifiedRows, renderResults, renderTeamText, retract, secretRefusal, send, ShareError } from './run.js';
+const WRAPPED = 'align share needs you to type your answer at a terminal, and this run is inside an agent that align launched, so it cannot ask you. Open a normal terminal of your own and run it there. Nothing was sent.';
+const WRAPPED_FOREIGN = 'This destination is not an Align address, so a share to it needs your own answer typed at a terminal here, and this is run from inside an agent that align launched. Open a normal terminal of your own and run it there. Nothing was sent.';
+const hostOf = (url) => { try {
+    return new URL(url).host;
+}
+catch {
+    return '';
+} };
+const NO_TERMINAL = 'Confirm this in your own terminal. There is no interactive terminal here (an agent shell, a pipe and a hook have none). Nothing was sent.';
+export async function runShare(opts, deps) {
+    // Every line this prints can carry text a stranger wrote (a remote id, a tenant name, a server error, a
+    // pending file's env). visible() is idempotent, so lines that were already escaped pass through unchanged.
+    const out = (l) => deps.out(visible(l, { keepNewline: true }));
+    const err = (l) => deps.err(visible(l, { keepNewline: true }));
+    if (deps.cloudEnv.mode === 'demo') {
+        err('align share needs a team account, and this environment is in demo mode. Run: align login');
+        return 1;
+    }
+    if (deps.cloudEnv.mode === 'local-embedded' || !deps.cloudEnv.authToken) {
+        err(`align share sends decisions from your local graph to your team's.\n  ${teamCtaLine()}\n  Already have a team? Run: align login`);
+        try {
+            await deps.leadPrompt?.();
+        }
+        catch { /* an optional prompt never changes what the person sees from the command */ }
+        return 1;
+    }
+    // A gateway that is not Align's is not an independent approver: its own web page "approving" proves nothing about the person.
+    // So a share to one needs the person at a terminal, in either mode, and an agent is refused before any request goes out.
+    // --open is refused too: an agent re-opening an approval link for a foreign gateway is the same hole.
+    const foreignGateway = !isAlignHost(hostOf(deps.cloudEnv.gatewayUrl));
+    if (foreignGateway && deps.wrapped) {
+        err(WRAPPED_FOREIGN);
+        return 1;
+    }
+    if (opts.openRequest !== undefined)
+        return await reopenRequest(opts, deps, out, err);
+    if (!deps.localDbPath) {
+        err('There is no local graph on this machine to share from. `align setup --local` creates one.');
+        return 1;
+    }
+    const dbPath = deps.localDbPath;
+    sweepPending(); // codes are 10 minutes; a file a day old is leftover
+    const ctx = async () => ({ dbPath, envName: opts.envName, client: deps.client(), judge: await deps.judge(), salt: deps.salt, gatewayUrl: deps.cloudEnv.gatewayUrl, defaultGatewayUrl: deps.defaultGatewayUrl });
+    try {
+        if (opts.retract !== undefined) {
+            if (deps.wrapped) {
+                err(WRAPPED);
+                return 1;
+            }
+            const r = await retract(await ctx(), opts.retract);
+            (r.ok ? out : err)(r.message);
+            return r.ok ? 0 : 1;
+        }
+        // Who approves is the gateway's call. A 404 is an older gateway (the typed flow); any other failure stops here
+        // and does NOT fall back, so a broken answer can never loosen the rule.
+        const cfg = await deps.client().shareRequestsConfig();
+        const mode = cfg?.mode ?? 'off';
+        if (mode === 'required' && (opts.typed || opts.confirm !== undefined)) {
+            err('This workspace requires approval in your browser, so --typed and --confirm are not accepted. Run: align share <id>. Nothing was sent.');
+            return 1;
+        }
+        const browser = mode === 'required' || (mode === 'available' && !opts.typed);
+        if (browser && opts.confirm !== undefined) {
+            err('Shares are approved in your browser on this gateway, so a confirmation code does not apply. Run: align share <id>. (Or add --typed to answer at this terminal.) Nothing was sent.');
+            return 1;
+        }
+        if (!browser && deps.wrapped) {
+            err(WRAPPED);
+            return 1;
+        }
+        // Where the approval link opens is settled before anything is prepared or staged: the link carries the share's key.
+        const appChoice = browser ? resolveApprovalAppUrl({ stored: deps.teamAppUrl ?? null, cfgAppUrl: cfg?.appUrl ?? null, guessed: deps.approval.appUrl }) : null;
+        if (appChoice && !appChoice.ok) {
+            err(appChoice.message);
+            return 1;
+        }
+        // No silent downgrade: when the typed flow runs because the gateway has no browser approval, say so.
+        if (!browser && !opts.typed)
+            out(cfg === null ? 'This gateway does not offer browser approval (it has no such route), so this uses the typed answer at your terminal.' : 'This gateway has browser approval turned off, so this uses the typed answer at your terminal.');
+        let ids = opts.ids;
+        let pendingCode;
+        if (opts.confirm !== undefined) {
+            const found = lookupCode(opts.confirm);
+            if (!found.ok) {
+                err(found.reason === 'expired' ? 'That confirmation code has expired. Ask your agent to start the share again.' : 'That confirmation code is not valid (unknown, malformed or already used). Nothing was sent.');
+                return 1;
+            }
+            if (found.pending.envName !== opts.envName) {
+                err(`That code was issued for ${found.pending.envName}, not ${opts.envName}. Nothing was sent.`);
+                return 1;
+            }
+            ids = found.pending.localIds;
+            pendingCode = opts.confirm;
+        }
+        else if (ids.length === 0) {
+            if (!opts.allRatified && opts.sinceIso === undefined) {
+                err('Name what to share: align share <id> [<id>...], or --all-ratified, or --since <30d|2w|6m>.');
+                return 2;
+            }
+            ids = ratifiedRows(dbPath, { owner: await deps.owner(), sinceIso: opts.sinceIso }).map((r) => r.id);
+            if (ids.length === 0) {
+                out('Nothing to share: you have no ratified decisions in that range.');
+                return 0;
+            }
+        }
+        const c = await ctx();
+        const prep = await prepare(c, ids);
+        if (prep.secrets.length) {
+            err(secretRefusal(prep.secrets));
+            return 1;
+        }
+        for (const a of prep.already)
+            out(`Already shared as ${visible(a.remoteId)}: ${visible(a.title)}`);
+        if (prep.payloads.length === 0)
+            return 0;
+        if (browser) {
+            if (foreignGateway) {
+                const yes = await deps.ttyConfirm(prep.preview, `Share ${prep.payloads.length} decision${prep.payloads.length === 1 ? '' : 's'} with ${visible(prep.dest.workspace)} at ${visible(prep.dest.gatewayHost)}?`);
+                if (yes === null) {
+                    err(NO_TERMINAL);
+                    return 1;
+                }
+                if (!yes) {
+                    out('Nothing was sent.');
+                    return 0;
+                }
+            }
+            else {
+                out(prep.preview);
+            }
+            const { guard, ...rest } = deps.approval;
+            const maxWaitMs = ((cfg?.pendingTtlS ?? 900) + (cfg?.completeTtlS ?? 600)) * 1000;
+            return await (guard ?? ((run) => run(undefined)))((signal) => runBrowserShare(c, prep, { ...rest, appUrl: appChoice?.ok ? appChoice.appUrl : rest.appUrl, raw: deps.out, signal, maxWaitMs, client: c.client, out, err, ...(deps.wrapped ? { agent: 'wrapped' } : {}) }));
+        }
+        if (pendingCode !== undefined) {
+            const found = lookupCode(pendingCode);
+            if (!found.ok) {
+                err('That confirmation code is no longer valid. Nothing was sent.');
+                return 1;
+            }
+            if (found.pending.hash !== combinedHash(prep.payloads, prep)) {
+                err('What would be shared, or where it would go (the workspace or the gateway), has changed since your agent previewed it. Nothing was sent. Ask your agent to start again.');
+                return 1;
+            }
+            const yes = await deps.ttyConfirm(prep.preview, `Share ${prep.payloads.length} decision${prep.payloads.length === 1 ? '' : 's'} with ${visible(prep.dest.workspace)}?`);
+            if (yes === null) {
+                err(NO_TERMINAL);
+                return 1;
+            }
+            if (!yes) {
+                out('Nothing was sent.');
+                return 0;
+            }
+            if (!consumeCode(pendingCode)) {
+                err('That code was already used. Nothing was sent.');
+                return 1;
+            }
+        }
+        else {
+            const yes = await deps.ttyConfirm(prep.preview, `Share ${prep.payloads.length} decision${prep.payloads.length === 1 ? '' : 's'} with ${visible(prep.dest.workspace)}?`);
+            if (yes === null) {
+                err(NO_TERMINAL);
+                return 1;
+            }
+            if (!yes) {
+                out('Nothing was sent.');
+                return 0;
+            }
+        }
+        const results = await send(c, prep, {
+            confirmTeamText: async (i) => {
+                const shown = `"${visible(i.title)}" is already on your team graph, as:\n${renderTeamText(i.team)}\nYour ratification would put your name on THAT text, not on yours.`;
+                return (await deps.ttyConfirm(shown, 'Do you stand behind the team\'s text?')) === true;
+            },
+        });
+        out(`\n${renderResults(results)}`);
+        const failed = results.some((r) => r.outcome.kind === 'refused' || r.outcome.kind === 'unknown');
+        return failed ? 1 : 0;
+    }
+    catch (e) {
+        if (e instanceof ShareError) {
+            err(e.message);
+            return e.exitCode;
+        }
+        err(e.message);
+        return 1;
+    }
+}
+/**
+ * `align share --open <id>`. The key for an agent-staged request rests in one place, the 0600 pending file on the machine
+ * that staged it, so this works there and nowhere else. Every refusal below prints no key. It only shows the link again: the
+ * person approves in the browser, and the agent's own status call finishes the share.
+ */
+async function reopenRequest(opts, deps, out, err) {
+    sweepPending();
+    const rec = loadRequest(opts.openRequest);
+    if (rec === null) {
+        err('No pending request with that id on this machine. A request can only be re-opened on the machine that staged it, and only until it expires. Ask your agent to start the share again.');
+        return 1;
+    }
+    if (!(Date.parse(rec.expiresAt) > Date.now())) {
+        err('That request has expired. Ask your agent to start the share again.');
+        return 1;
+    }
+    if (rec.envName !== opts.envName) {
+        err(`That request was staged for ${rec.envName}, not ${opts.envName}. Run: align share --open ${rec.requestId} --to ${rec.envName}`);
+        return 1;
+    }
+    // Fails closed: a sign-in with no tenant id cannot show the request belongs to this workspace, so it is not shown.
+    if (rec.gatewayUrl !== deps.cloudEnv.gatewayUrl || !deps.cloudEnv.tenantId || rec.tenantId !== deps.cloudEnv.tenantId) {
+        err('That request was staged for a different workspace or gateway than the one you are signed in to now, so it was not shown.');
+        return 1;
+    }
+    let state;
+    try {
+        state = (await deps.client().getShareRequest(rec.requestId)).state;
+    }
+    catch (e) {
+        err(`Could not ask the gateway about that request (${visible(e.message)}), so the link was not shown. Try again in a moment.`);
+        return 1;
+    }
+    if (state !== 'pending') {
+        err(`That request is ${visible(state)}, so there is nothing to approve. Ask your agent to start the share again if you still want it.`);
+        return 1;
+    }
+    // Worked out again with the staging order (a team destination's saved app, else the gateway's app_url, else the guess); the record does not store it.
+    let cfgAppUrl;
+    try {
+        cfgAppUrl = (await deps.client().shareRequestsConfig())?.appUrl ?? null;
+    }
+    catch (e) {
+        err(`Could not ask the gateway about that request (${visible(e.message)}), so the link was not shown. Try again in a moment.`);
+        return 1;
+    }
+    const app = resolveApprovalAppUrl({ stored: deps.teamAppUrl ?? null, cfgAppUrl, guessed: deps.approval.appUrl });
+    if (!app.ok) {
+        err(app.message);
+        return 1;
+    }
+    const url = approveUrl(app.appUrl, rec.requestId, rec.keyB64Url);
+    const minutes = Math.max(1, Math.round((Date.parse(rec.expiresAt) - Date.now()) / 60000));
+    out(`Approve in your browser: ${url}`);
+    out(`Code: ${rec.userCode}  (the page shows the same code. Check they match before you approve.)`);
+    out(`It expires in ${minutes} minutes. Nothing is sent until you approve. When you have, tell your agent so it can finish the share.`);
+    const a = deps.approval;
+    await presentLink(url, {
+        appUrl: app.appUrl, plan: a.plan ?? { open: a.openUrl !== undefined, qr: false, qrIfOpenFails: false, why: 'default' },
+        ...(a.openUrl ? { openUrl: a.openUrl } : {}), ...(a.qr ? { qr: a.qr } : {}), ...(a.columns !== undefined ? { columns: a.columns } : {}),
+        ...(a.copy ? { copy: a.copy } : {}), out, raw: deps.out,
+    });
+    return 0;
+}
+//# sourceMappingURL=command.js.map

package/dist/lib/share/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../../src/lib/share/command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAuC,WAAW,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAChG,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,OAAO,EAAiB,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAoB,UAAU,EAAE,MAAM,UAAU,CAAC;AAiE3J,MAAM,OAAO,GAAG,4MAA4M,CAAC;AAC7N,MAAM,eAAe,GAAG,6OAA6O,CAAC;AACtQ,MAAM,MAAM,GAAG,CAAC,GAAW,EAAU,EAAE,GAAG,IAAI,CAAC;IAAC,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC;IAAC,OAAO,EAAE,CAAC;AAAC,CAAC,CAAC,CAAC,CAAC;AACnG,MAAM,WAAW,GAAG,2IAA2I,CAAC;AAEhK,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAkB,EAAE,IAAe;IAChE,wGAAwG;IACxG,2GAA2G;IAC3G,MAAM,GAAG,GAAG,CAAC,CAAS,EAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,CAAC,CAAS,EAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAClC,GAAG,CAAC,0FAA0F,CAAC,CAAC;QAChG,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxE,GAAG,CAAC,wEAAwE,WAAW,EAAE,2CAA2C,CAAC,CAAC;QACtI,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,4EAA4E,CAAC,CAAC;QACzH,OAAO,CAAC,CAAC;IACX,CAAC;IACD,8HAA8H;IAC9H,yHAAyH;IACzH,sGAAsG;IACtG,MAAM,cAAc,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IACtE,IAAI,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IACvE,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACrF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtB,GAAG,CAAC,2FAA2F,CAAC,CAAC;QACjG,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;IAChC,YAAY,EAAE,CAAC,CAAC,qDAAqD;IACrE,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAEhN,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAC7C,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QAED,+GAA+G;QAC/G,wEAAwE;QACxE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,mBAAmB,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,IAAI,KAAK,CAAC;QAChC,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,uIAAuI,CAAC,CAAC;YAC7I,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,KAAK,UAAU,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,IAAI,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1C,GAAG,CAAC,mLAAmL,CAAC,CAAC;YACzL,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QACzD,oHAAoH;QACpH,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,IAAI,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7J,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QACrE,qGAAqG;QACrG,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,sHAAsH,CAAC,CAAC,CAAC,+FAA+F,CAAC,CAAC;QAE1Q,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACnB,IAAI,WAA+B,CAAC;QACpC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACd,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,8EAA8E,CAAC,CAAC,CAAC,6FAA6F,CAAC,CAAC;gBACjN,OAAO,CAAC,CAAC;YACX,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC3C,GAAG,CAAC,4BAA4B,KAAK,CAAC,OAAO,CAAC,OAAO,SAAS,IAAI,CAAC,OAAO,qBAAqB,CAAC,CAAC;gBACjG,OAAO,CAAC,CAAC;YACX,CAAC;YACD,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC7B,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACrD,GAAG,CAAC,4FAA4F,CAAC,CAAC;gBAClG,OAAO,CAAC,CAAC;YACX,CAAC;YACD,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;QAC7G,CAAC;QAED,MAAM,CAAC,GAAG,MAAM,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,GAAa,MAAM,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QACxE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,GAAG,CAAC,qBAAqB,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEzC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,YAAY,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBAC7M,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;oBAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBAAC,OAAO,CAAC,CAAC;gBAAC,CAAC;gBACjD,IAAI,CAAC,GAAG,EAAE,CAAC;oBAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;oBAAC,OAAO,CAAC,CAAC;gBAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;YACzC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,EAAE,WAAW,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;YAClF,OAAO,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5Q,CAAC;QAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACjG,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,wKAAwK,CAAC,CAAC;gBAC9K,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,YAAY,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACxK,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACjD,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACjD,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;QACpG,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,YAAY,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACxK,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACjD,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;QACnD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE;YAClC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC3B,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,yCAAyC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,qEAAqE,CAAC;gBACvK,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,uCAAuC,CAAC,CAAC,KAAK,IAAI,CAAC;YAC1F,CAAC;SACF,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QACjG,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,UAAU,EAAE,CAAC;YAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;QAAC,CAAC;QACnE,GAAG,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAAC,IAAkB,EAAE,IAAe,EAAE,GAAwB,EAAE,GAAwB;IAClH,YAAY,EAAE,CAAC;IACf,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,WAAY,CAAC,CAAC;IAC3C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAAC,GAAG,CAAC,qLAAqL,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAC3N,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IACvI,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,GAAG,CAAC,+BAA+B,GAAG,CAAC,OAAO,SAAS,IAAI,CAAC,OAAO,6BAA6B,GAAG,CAAC,SAAS,SAAS,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IACrL,mHAAmH;IACnH,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtH,GAAG,CAAC,0HAA0H,CAAC,CAAC;QAChI,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QAAC,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,GAAG,CAAC,iDAAiD,OAAO,CAAE,CAAW,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAC9O,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,KAAK,CAAC,iGAAiG,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAC/K,sJAAsJ;IACtJ,IAAI,SAAwB,CAAC;IAC7B,IAAI,CAAC;QAAC,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,mBAAmB,EAAE,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,GAAG,CAAC,iDAAiD,OAAO,CAAE,CAAW,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IACnP,MAAM,GAAG,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACjH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IAC1F,GAAG,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;IACvC,GAAG,CAAC,SAAS,GAAG,CAAC,QAAQ,wEAAwE,CAAC,CAAC;IACnG,GAAG,CAAC,iBAAiB,OAAO,yGAAyG,CAAC,CAAC;IACvI,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;IACxB,MAAM,WAAW,CAAC,GAAG,EAAE;QACrB,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE;QACtH,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG;KACxD,CAAC,CAAC;IACH,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/lib/share/delivery-options.d.ts

@@ -0,0 +1,15 @@
+/** The command-line flags that steer how the approval link is delivered, declared once so a test can parse them without running a share. */
+import type { Command } from 'commander';
+import type { DeliveryFlags } from './delivery.js';
+export interface DeliveryOpts {
+    /** `--no-open` gives false; `--open <id>` gives the id. */
+    open?: string | boolean;
+    /** `--qr` gives true, `--no-qr` false. */
+    qr?: boolean;
+    copy?: boolean;
+}
+export declare function addDeliveryOptions(cmd: Command): Command;
+export declare function deliveryFlagsFrom(o: DeliveryOpts): DeliveryFlags;
+/** Both `--qr` and `--no-qr` is a mistake worth stopping on, rather than guessing which one was meant. */
+export declare function conflictingDeliveryFlags(argv: readonly string[]): boolean;
+//# sourceMappingURL=delivery-options.d.ts.map

package/dist/lib/share/delivery-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-options.d.ts","sourceRoot":"","sources":["../../../src/lib/share/delivery-options.ts"],"names":[],"mappings":"AAAA,4IAA4I;AAC5I,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,WAAW,YAAY;IAC3B,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACxB,0CAA0C;IAC1C,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAOxD;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,YAAY,GAAG,aAAa,CAEhE;AAED,0GAA0G;AAC1G,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEzE"}

package/dist/lib/share/delivery-options.js

@@ -0,0 +1,16 @@
+export function addDeliveryOptions(cmd) {
+    return cmd
+        .option('--open <request-id>', 'Show the approval link again (open it, or print it with a QR code) for a request your agent staged on this machine')
+        .option('--no-open', 'Print the approval link without opening a browser')
+        .option('--qr', 'Print a QR code of the approval link, even when output is not a terminal; scan it with your phone')
+        .option('--no-qr', 'Never print the QR code')
+        .option('--copy', 'Ask your terminal to copy the approval link (needs a terminal that supports OSC 52; the link then sits in your clipboard)');
+}
+export function deliveryFlagsFrom(o) {
+    return { noOpen: o.open === false, qr: o.qr === true, noQr: o.qr === false };
+}
+/** Both `--qr` and `--no-qr` is a mistake worth stopping on, rather than guessing which one was meant. */
+export function conflictingDeliveryFlags(argv) {
+    return argv.includes('--qr') && argv.includes('--no-qr');
+}
+//# sourceMappingURL=delivery-options.js.map

package/dist/lib/share/delivery-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-options.js","sourceRoot":"","sources":["../../../src/lib/share/delivery-options.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,OAAO,GAAG;SACP,MAAM,CAAC,qBAAqB,EAAE,oHAAoH,CAAC;SACnJ,MAAM,CAAC,WAAW,EAAE,mDAAmD,CAAC;SACxE,MAAM,CAAC,MAAM,EAAE,mGAAmG,CAAC;SACnH,MAAM,CAAC,SAAS,EAAE,yBAAyB,CAAC;SAC5C,MAAM,CAAC,QAAQ,EAAE,2HAA2H,CAAC,CAAC;AACnJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,CAAe;IAC/C,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;AAC/E,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,wBAAwB,CAAC,IAAuB;IAC9D,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC3D,CAAC"}

package/dist/lib/share/delivery.d.ts

@@ -0,0 +1,83 @@
+/**
+ * How an approval link reaches the person: opened for them, shown as a QR code to scan with a phone, or both
+ * unavailable (then it is only printed, as before).
+ *
+ * decideDelivery is a pure table over the machine and the flags, so every row is testable without a terminal.
+ * openApprovalLink runs the link through the allowlist and then spawns an OS opener with an ARGUMENT VECTOR: no
+ * shell, no PowerShell string, no `start`. The `open` package is not used here on purpose: on Windows it builds a
+ * PowerShell double-quoted string, which is the thing that must never see a link built from config.
+ *
+ * ARGV VISIBILITY. On Linux (xdg-open) and macOS (open) the full link, including the `#k=` key, is on the opener's
+ * command line while it runs, so another local user can read it with `ps`. The key alone cannot approve anything: the
+ * approve route needs the same person's signed-in browser session and, where enabled, their passkey. Every route that
+ * hands a link to a browser from here (a file, a pipe, a local redirect page) leaves the key somewhere longer-lived or
+ * equally visible, so argv is the least bad option. Where that matters, use `--no-open` and the QR code.
+ */
+import { spawn as nodeSpawn } from 'node:child_process';
+type Platform = typeof process.platform;
+export interface DeliveryEnv {
+    platform: Platform;
+    env: Record<string, string | undefined>;
+    stdoutIsTTY: boolean;
+    stdinIsTTY: boolean;
+    /** Running inside a container (a Docker or Podman guest), where a browser is not the person's. */
+    inContainer: boolean;
+}
+export interface DeliveryFlags {
+    /** --no-open */
+    noOpen?: boolean;
+    /** --qr: print the QR code even when stdout is not a terminal. Also means: do not open a browser here. */
+    qr?: boolean;
+    /** --no-qr: never print it. Wins over --qr. */
+    noQr?: boolean;
+}
+export interface DeliveryPlan {
+    open: boolean;
+    qr: boolean;
+    /** When the browser launch fails, a QR is still worth printing (a terminal, not CI, and not --no-qr). */
+    qrIfOpenFails: boolean;
+    why: string;
+}
+/** Pure. Opening needs a person at a terminal on a machine with a browser; the QR is for every other terminal. */
+export declare function decideDelivery(e: DeliveryEnv, f: DeliveryFlags): DeliveryPlan;
+export declare function currentDeliveryEnv(): DeliveryEnv;
+/** One executable and its arguments. The link is exactly one argument. */
+export declare function browserLaunch(platform: Platform, url: string, env?: Record<string, string | undefined>): {
+    command: string;
+    args: string[];
+};
+export interface OpenDeps {
+    platform?: Platform;
+    spawn?: typeof nodeSpawn;
+    graceMs?: number;
+    env?: Record<string, string | undefined>;
+}
+/** False without spawning anything when the link does not pass the allowlist. */
+export declare function openApprovalLink(url: string, appUrl: string, deps?: OpenDeps): Promise<boolean>;
+/** `align invite`'s Settings > Team invites link, through its own allowlist and the same argv-only opener. */
+export declare function openSettingsLink(url: string, appUrl: string, deps?: OpenDeps): Promise<boolean>;
+/** What the approval step needs to put the link in front of the person. */
+export interface PresentDeps {
+    appUrl: string;
+    plan: DeliveryPlan;
+    /** Absent: nothing is opened. Called with the web app the link was checked against (a team destination's own, not a guess). */
+    openUrl?: (url: string, appUrl: string) => Promise<boolean>;
+    /** Builds the QR lines for a link; absent: no QR. */
+    qr?: (url: string) => {
+        lines: string[];
+        columns: number;
+    };
+    /** Terminal width when known: a QR wider than this is not printed (it would wrap and not scan). */
+    columns?: number;
+    /** Ordinary lines (cleaned of control characters by the caller). */
+    out: (line: string) => void;
+    /** QR lines only: they carry colour escapes, which the caller's cleaning would turn into visible junk. We built them from a link that passed the allowlist. */
+    raw: (line: string) => void;
+    /** --copy: ask the terminal to put the link on the clipboard. */
+    copy?: (url: string) => void;
+}
+export declare function presentLink(url: string, d: PresentDeps): Promise<void>;
+/** The OSC 52 "copy to clipboard" sequence for a link, or null when stdout is not a terminal (it would print as junk in a pipe). */
+export declare function osc52(url: string, stdoutIsTTY: boolean): string | null;
+export {};
+//# sourceMappingURL=delivery.d.ts.map

package/dist/lib/share/delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.d.ts","sourceRoot":"","sources":["../../../src/lib/share/delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAqB,KAAK,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG3E,KAAK,QAAQ,GAAG,OAAO,OAAO,CAAC,QAAQ,CAAC;AAIxC,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,QAAQ,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,kGAAkG;IAClG,WAAW,EAAE,OAAO,CAAC;CACtB;AACD,MAAM,WAAW,aAAa;IAC5B,gBAAgB;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,0GAA0G;IAC1G,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,+CAA+C;IAC/C,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AACD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;IACZ,yGAAyG;IACzG,aAAa,EAAE,OAAO,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC;CACb;AAQD,kHAAkH;AAClH,wBAAgB,cAAc,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,aAAa,GAAG,YAAY,CAgB7E;AAED,wBAAgB,kBAAkB,IAAI,WAAW,CAIhD;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CASzJ;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC1C;AAED,iFAAiF;AACjF,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,QAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAEzG;AAED,8GAA8G;AAC9G,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,QAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAEzG;AAcD,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,YAAY,CAAC;IACnB,+HAA+H;IAC/H,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,qDAAqD;IACrD,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,mGAAmG;IACnG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,+JAA+J;IAC/J,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,iEAAiE;IACjE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAKD,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA0B5E;AAED,oIAAoI;AACpI,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAMtE"}

package/dist/lib/share/delivery.js

@@ -0,0 +1,134 @@
+/**
+ * How an approval link reaches the person: opened for them, shown as a QR code to scan with a phone, or both
+ * unavailable (then it is only printed, as before).
+ *
+ * decideDelivery is a pure table over the machine and the flags, so every row is testable without a terminal.
+ * openApprovalLink runs the link through the allowlist and then spawns an OS opener with an ARGUMENT VECTOR: no
+ * shell, no PowerShell string, no `start`. The `open` package is not used here on purpose: on Windows it builds a
+ * PowerShell double-quoted string, which is the thing that must never see a link built from config.
+ *
+ * ARGV VISIBILITY. On Linux (xdg-open) and macOS (open) the full link, including the `#k=` key, is on the opener's
+ * command line while it runs, so another local user can read it with `ps`. The key alone cannot approve anything: the
+ * approve route needs the same person's signed-in browser session and, where enabled, their passkey. Every route that
+ * hands a link to a browser from here (a file, a pipe, a local redirect page) leaves the key somewhere longer-lived or
+ * equally visible, so argv is the least bad option. Where that matters, use `--no-open` and the QR code.
+ */
+import { spawn as nodeSpawn } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import { checkApproveLink, checkSettingsLink } from './approve-link.js';
+import { tryOpenUrl } from '../open-url.js';
+const set = (v) => v !== undefined && v !== '';
+/** CI=false and CI=0 are how people turn it OFF; an empty value is unset. */
+const isCi = (env) => (set(env['CI']) && !/^(false|0)$/i.test(env['CI'])) || set(env['GITHUB_ACTIONS']);
+const isSsh = (env) => set(env['SSH_CONNECTION']) || set(env['SSH_TTY']) || set(env['SSH_CLIENT']);
+const isRemoteDev = (env) => set(env['CODESPACES']) || set(env['REMOTE_CONTAINERS']);
+/** Pure. Opening needs a person at a terminal on a machine with a browser; the QR is for every other terminal. */
+export function decideDelivery(e, f) {
+    const ci = isCi(e.env);
+    const noBrowser = f.noOpen ? '--no-open'
+        : f.qr ? '--qr'
+            : !e.stdoutIsTTY || !e.stdinIsTTY ? 'not an interactive terminal'
+                : ci ? 'CI'
+                    : isSsh(e.env) ? 'SSH session'
+                        : isRemoteDev(e.env) ? 'remote dev environment'
+                            : e.inContainer ? 'container'
+                                : e.platform === 'linux' && !set(e.env['DISPLAY']) && !set(e.env['WAYLAND_DISPLAY']) ? 'no display'
+                                    : null;
+    const open = noBrowser === null;
+    // The QR goes where the link goes (stdout), so it needs a terminal there unless forced. CI never gets one unprompted.
+    const qr = f.noQr ? false : f.qr ? true : !open && e.stdoutIsTTY && !ci;
+    return { open, qr, qrIfOpenFails: !f.noQr && e.stdoutIsTTY && !ci, why: noBrowser ?? 'interactive terminal on a machine with a browser' };
+}
+export function currentDeliveryEnv() {
+    let inContainer = false;
+    try {
+        inContainer = process.platform === 'linux' && (fs.existsSync('/.dockerenv') || fs.existsSync('/run/.containerenv') || set(process.env['container']));
+    }
+    catch { /* unknown is not a container */ }
+    return { platform: process.platform, env: process.env, stdoutIsTTY: process.stdout.isTTY === true, stdinIsTTY: process.stdin.isTTY === true, inContainer };
+}
+/** One executable and its arguments. The link is exactly one argument. */
+export function browserLaunch(platform, url, env = process.env) {
+    if (platform === 'darwin')
+        return { command: 'open', args: [url] };
+    if (platform === 'win32') {
+        // An absolute path: a bare `rundll32` is searched for in the working directory first on Windows, so a rundll32.exe in a
+        // cloned repo would run. SystemRoot is used only when it is absolute (a relative value would be the cwd again).
+        const root = env['SystemRoot'] !== undefined && path.win32.isAbsolute(env['SystemRoot']) && /^[A-Za-z]:\\/.test(env['SystemRoot']) ? env['SystemRoot'] : 'C:\\Windows';
+        return { command: path.win32.join(root, 'System32', 'rundll32.exe'), args: ['url.dll,FileProtocolHandler', url] };
+    }
+    return { command: 'xdg-open', args: [url] };
+}
+/** False without spawning anything when the link does not pass the allowlist. */
+export async function openApprovalLink(url, appUrl, deps = {}) {
+    return checkApproveLink(url, appUrl).ok ? spawnOpener(url, deps) : false;
+}
+/** `align invite`'s Settings > Team invites link, through its own allowlist and the same argv-only opener. */
+export async function openSettingsLink(url, appUrl, deps = {}) {
+    return checkSettingsLink(url, appUrl).ok ? spawnOpener(url, deps) : false;
+}
+/** Only ever called with a link an allowlist above has passed. */
+async function spawnOpener(url, deps) {
+    const { command, args } = browserLaunch(deps.platform ?? process.platform, url, deps.env);
+    const spawnFn = deps.spawn ?? nodeSpawn;
+    const opener = async () => {
+        const child = spawnFn(command, args, { stdio: 'ignore', detached: true, windowsHide: true });
+        child.unref();
+        return child;
+    };
+    return tryOpenUrl(url, opener, deps.graceMs);
+}
+const HOW_WITH_QR = 'To open it, scan the QR code with your phone, or open the link above on any device where you are signed in to Align. Approving on a phone with Face ID or a fingerprint is the strongest way.';
+const HOW_NO_QR = 'To open it, open the link above on any device where you are signed in to Align, a phone included.';
+export async function presentLink(url, d) {
+    const check = checkApproveLink(url, d.appUrl);
+    if (!check.ok) {
+        d.out('This link is not in the expected form, so it was not opened and no QR code was made. If you trust this server, copy the link yourself.');
+        return;
+    }
+    const showQr = () => {
+        if (!d.qr)
+            return false;
+        const r = d.qr(url);
+        if (d.columns !== undefined && d.columns < r.columns) {
+            d.out(`Your terminal is ${d.columns} columns wide and the QR code needs ${r.columns}. Widen it and run the share again, or open the link above.`);
+            return false;
+        }
+        d.out('Scan this with your phone camera:');
+        for (const l of r.lines)
+            d.raw(l);
+        return true;
+    };
+    let shownQr = false;
+    if (d.plan.qr)
+        shownQr = showQr();
+    if (d.copy) {
+        d.copy(url);
+        d.out('Asked your terminal to copy the link. Not every terminal allows it, so check before you paste.');
+    }
+    if (d.plan.open && d.openUrl) {
+        if (await d.openUrl(url, d.appUrl))
+            return;
+        d.out('Could not open a browser here. Open the link above yourself.');
+        if (!shownQr && d.plan.qrIfOpenFails)
+            shownQr = showQr();
+    }
+    d.out(shownQr ? HOW_WITH_QR : HOW_NO_QR);
+}
+/** The OSC 52 "copy to clipboard" sequence for a link, or null when stdout is not a terminal (it would print as junk in a pipe). */
+export function osc52(url, stdoutIsTTY) {
+    if (!stdoutIsTTY)
+        return null;
+    let origin;
+    try {
+        origin = new URL(url).origin;
+    }
+    catch {
+        return null;
+    }
+    if (!checkApproveLink(url, origin).ok)
+        return null;
+    return `\u001b]52;c;${Buffer.from(url, 'utf8').toString('base64')}\u0007`;
+}
+//# sourceMappingURL=delivery.js.map

package/dist/lib/share/delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.js","sourceRoot":"","sources":["../../../src/lib/share/delivery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAqB,KAAK,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AA0B5C,MAAM,GAAG,GAAG,CAAC,CAAqB,EAAW,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;AAC5E,6EAA6E;AAC7E,MAAM,IAAI,GAAG,CAAC,GAAuB,EAAW,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACtI,MAAM,KAAK,GAAG,CAAC,GAAuB,EAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;AAChI,MAAM,WAAW,GAAG,CAAC,GAAuB,EAAW,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAElH,kHAAkH;AAClH,MAAM,UAAU,cAAc,CAAC,CAAc,EAAE,CAAgB;IAC7D,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,SAAS,GACb,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW;QACtB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM;YACf,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,6BAA6B;gBACjE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;oBACX,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa;wBAC9B,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,wBAAwB;4BAC/C,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW;gCAC7B,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY;oCACnG,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,IAAI,GAAG,SAAS,KAAK,IAAI,CAAC;IAChC,sHAAsH;IACtH,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC;IACxE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,IAAI,kDAAkD,EAAE,CAAC;AAC5I,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC;QAAC,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;IACxM,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,WAAW,EAAE,CAAC;AAC7J,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,aAAa,CAAC,QAAkB,EAAE,GAAW,EAAE,MAA0C,OAAO,CAAC,GAAG;IAClH,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACnE,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,wHAAwH;QACxH,gHAAgH;QAChH,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QACvK,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,EAAE,CAAC;IACpH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9C,CAAC;AASD,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,MAAc,EAAE,OAAiB,EAAE;IACrF,OAAO,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3E,CAAC;AAED,8GAA8G;AAC9G,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,MAAc,EAAE,OAAiB,EAAE;IACrF,OAAO,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5E,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,IAAc;IACpD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,IAA2B,EAAE;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7F,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO,UAAU,CAAC,GAAG,EAAE,MAAe,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AACxD,CAAC;AAoBD,MAAM,WAAW,GAAG,+LAA+L,CAAC;AACpN,MAAM,SAAS,GAAG,mGAAmG,CAAC;AAEtH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,CAAc;IAC3D,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,CAAC,CAAC,GAAG,CAAC,wIAAwI,CAAC,CAAC;QAChJ,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,GAAY,EAAE;QAC3B,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YACrD,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,OAAO,uCAAuC,CAAC,CAAC,OAAO,6DAA6D,CAAC,CAAC;YAClJ,OAAO,KAAK,CAAC;QACf,CAAC;QACD,CAAC,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK;YAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,GAAG,MAAM,EAAE,CAAC;IAClC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC,CAAC,GAAG,CAAC,gGAAgG,CAAC,CAAC;IAAC,CAAC;IACrI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO;QAC3C,CAAC,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,GAAG,MAAM,EAAE,CAAC;IAC3D,CAAC;IACD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC3C,CAAC;AAED,oIAAoI;AACpI,MAAM,UAAU,KAAK,CAAC,GAAW,EAAE,WAAoB;IACrD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC5D,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,eAAe,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;AAC5E,CAAC"}