@arizeai/phoenix-cli 1.9.0 → 1.9.1

package/build/config.js

@@ -36,8 +36,6 @@ function loadConfigFromEnvironmentWithSources() {
     if (headers) {
         config.headers = headers;
     }
-    // Resolve the project from PHOENIX_PROJECT (canonical) or the
-    // PHOENIX_PROJECT_NAME alias.
     const project = getProjectFromEnvironment();
     if (project) {
         config.project = project;
@@ -97,29 +95,32 @@ export function loadConfigFromProfile(profileName) {
         if (!active) {
             throw new ProfileResolutionError(`Profile "${profileName}" (from --profile) does not exist. Run \`px profile list\` to see available profiles.`);
         }
-        return profileEntryToConfig(active.entry);
+        return profileEntryToConfig(active.entry, active.name);
     }
     const active = getStoredActiveProfile(settingsFile);
     if (!active) {
         return {};
     }
-    return profileEntryToConfig(active.entry);
+    return profileEntryToConfig(active.entry, active.name);
 }
 /**
  * Project a `ProfileEntry` onto the `PhoenixConfig` shape. Skipped fields
  * (e.g. an apiKey set on a different profile) are simply omitted so the
  * downstream merge in `resolveConfig` can layer env vars / defaults on top.
  */
-function profileEntryToConfig(entry) {
+function profileEntryToConfig(entry, profileName) {
     const config = {};
     if (entry.endpoint)
         config.endpoint = entry.endpoint;
     if (entry.apiKey)
         config.apiKey = entry.apiKey;
+    if (entry.oauthTokens)
+        config.oauthTokens = entry.oauthTokens;
     if (entry.project)
         config.project = entry.project;
     if (entry.headers)
         config.headers = entry.headers;
+    config.profileName = profileName;
     return config;
 }
 /**
@@ -138,18 +139,45 @@ export function resolveConfig({ cliOptions, profileName, }) {
     // Commander (and other callers) may include keys with `undefined` values.
     // If we spread those over envConfig we would accidentally clobber env vars.
     const definedCliOptions = Object.fromEntries(Object.entries(cliOptions).filter(([, value]) => value !== undefined));
+    // OAuth tokens are only valid against the endpoint that issued them. When
+    // --endpoint or PHOENIX_HOST points the command at a different server, drop
+    // the tokens so they are never sent to — or refreshed against — a host that
+    // did not issue them.
+    const resolvedEndpoint = definedCliOptions.endpoint ??
+        processEnvConfig.endpoint ??
+        profileConfig.endpoint ??
+        envFileConfig.endpoint ??
+        builtInDefaults.endpoint;
+    const boundProfileConfig = profileConfig.oauthTokens && profileConfig.endpoint !== resolvedEndpoint
+        ? { ...profileConfig, oauthTokens: undefined }
+        : profileConfig;
+    const credentialSource = getCredentialSource({
+        cliOptions: definedCliOptions,
+        processEnvConfig,
+        envFileConfig,
+        profileConfig: boundProfileConfig,
+    });
+    const oauthTokens = credentialSource === "oauth" ? boundProfileConfig.oauthTokens : undefined;
     const config = {
         ...builtInDefaults,
         ...envFileConfig,
         ...profileConfig,
         ...processEnvConfig,
         ...definedCliOptions,
+        credentialSource,
+        oauthTokens,
     };
+    // Profile OAuth outranks `.env.phoenix` API keys. The spread above can leave
+    // a file-tier apiKey in place when the profile only has oauthTokens — clear
+    // it so clients do not prefer the lower-tier key.
+    if (credentialSource === "oauth") {
+        config.apiKey = undefined;
+    }
     const usesFileEndpoint = endpointSource?.kind === "env-file" &&
         definedCliOptions.endpoint === undefined &&
         processEnvConfig.endpoint === undefined &&
         profileConfig.endpoint === undefined;
-    const credentialSource = definedCliOptions.apiKey !== undefined ||
+    const warningCredentialSource = definedCliOptions.apiKey !== undefined ||
         definedCliOptions.headers !== undefined
         ? "CLI options"
         : processEnvConfig.apiKey !== undefined ||
@@ -161,13 +189,32 @@ export function resolveConfig({ cliOptions, profileName, }) {
                 : undefined;
     if (usesFileEndpoint) {
         warnIfUsingFileEndpointWithCredentials({
-            credentialSource,
+            credentialSource: warningCredentialSource,
             endpointSource,
             endpointVariable: ENV_PHOENIX_HOST,
         });
     }
     return config;
 }
+function getCredentialSource({ cliOptions, processEnvConfig, envFileConfig, profileConfig, }) {
+    if (cliOptions.apiKey) {
+        return "flag";
+    }
+    // Process env outranks the profile; `.env.phoenix` does not.
+    if (processEnvConfig.apiKey) {
+        return "env";
+    }
+    if (profileConfig.apiKey) {
+        return "profile-key";
+    }
+    if (profileConfig.oauthTokens) {
+        return "oauth";
+    }
+    if (envFileConfig.apiKey) {
+        return "env";
+    }
+    return "none";
+}
 /**
  * Validate that required configuration is present.
  */

package/build/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EAExB,uCAAuC,EACvC,yBAAyB,EACzB,+BAA+B,EAC/B,sCAAsC,GACvC,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAEL,gBAAgB,EAChB,sBAAsB,EACtB,YAAY,EACZ,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,uBAAuB,CAAC;AA2BhE;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,QAAQ,EAAE,wBAAwB;KACnC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,oCAAoC,EAAE,CAAC,MAAM,CAAC;AACvD,CAAC;AAED,SAAS,oCAAoC;IAK3C,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,MAAM,QAAQ,GAAG,+BAA+B,CAAC,gBAAgB,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC;IACnC,CAAC;IAED,MAAM,EACJ,MAAM,EACN,OAAO,EACP,MAAM,EAAE,gBAAgB,GACzB,GAAG,uCAAuC,EAAE,CAAC;IAC9C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAED,8DAA8D;IAC9D,8BAA8B;IAC9B,MAAM,OAAO,GAAG,yBAAyB,EAAE,CAAC;IAC5C,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,MAAM;QACN,gBAAgB;QAChB,cAAc,EAAE,QAAQ,CAAC,MAAM;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B;IAKlC,MAAM,EACJ,MAAM,EAAE,MAAM,EACd,gBAAgB,EAChB,cAAc,GACf,GAAG,oCAAoC,EAAE,CAAC;IAC3C,MAAM,gBAAgB,GAAkB,EAAE,CAAC;IAC3C,MAAM,aAAa,GAAkB,EAAE,CAAC;IAExC,MAAM,YAAY,GAChB,cAAc,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC;IACxE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,YAAY,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC1C,CAAC;IAED,MAAM,cAAc,GAClB,gBAAgB,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC;IAC1E,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,cAAc,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,cAAc,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC1C,CAAC;IAED,MAAM,WAAW,GACf,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,SAAS;QAC9C,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,SAAS;QACjD,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,aAAa,CAAC;IACpB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,WAAW,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACvC,CAAC;IAED,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAoB;IACxD,MAAM,YAAY,GAAG,YAAY,EAAE,CAAC;IAEpC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,sBAAsB,CAC9B,YAAY,WAAW,uFAAuF,CAC/G,CAAC;QACJ,CAAC;QACD,OAAO,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,MAAM,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,KAAmB;IAC/C,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,QAAQ;QAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACrD,IAAI,KAAK,CAAC,MAAM;QAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/C,IAAI,KAAK,CAAC,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAClD,IAAI,KAAK,CAAC,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAClD,OAAO,MAAM,CAAC;AAChB,CAAC;AAkBD;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,EAC5B,UAAU,EACV,WAAW,GACU;IACrB,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;IAC7C,MAAM,aAAa,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,GACvD,2BAA2B,EAAE,CAAC;IAEhC,0EAA0E;IAC1E,4EAA4E;IAC5E,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAC1C,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAC5C,CAAC;IAE5B,MAAM,MAAM,GAAG;QACb,GAAG,eAAe;QAClB,GAAG,aAAa;QAChB,GAAG,aAAa;QAChB,GAAG,gBAAgB;QACnB,GAAG,iBAAiB;KACrB,CAAC;IAEF,MAAM,gBAAgB,GACpB,cAAc,EAAE,IAAI,KAAK,UAAU;QACnC,iBAAiB,CAAC,QAAQ,KAAK,SAAS;QACxC,gBAAgB,CAAC,QAAQ,KAAK,SAAS;QACvC,aAAa,CAAC,QAAQ,KAAK,SAAS,CAAC;IACvC,MAAM,gBAAgB,GACpB,iBAAiB,CAAC,MAAM,KAAK,SAAS;QACtC,iBAAiB,CAAC,OAAO,KAAK,SAAS;QACrC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,gBAAgB,CAAC,MAAM,KAAK,SAAS;YACnC,gBAAgB,CAAC,OAAO,KAAK,SAAS;YACxC,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,aAAa,CAAC,MAAM,KAAK,SAAS;gBAChC,aAAa,CAAC,OAAO,KAAK,SAAS;gBACrC,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,SAAS,CAAC;IACpB,IAAI,gBAAgB,EAAE,CAAC;QACrB,sCAAsC,CAAC;YACrC,gBAAgB;YAChB,cAAc;YACd,gBAAgB,EAAE,gBAAgB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAgBD;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,EAC7B,MAAM,EACN,eAAe,GAAG,IAAI,GACA;IAItB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CACT,gGAAgG,CACjG,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CACT,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAYD;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,MAAM,GACuB;IAC7B,MAAM,KAAK,GAAG;QACZ,sBAAsB;QACtB,EAAE;QACF,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,EAAE;QACF,cAAc;QACd,iCAAiC;QACjC,gDAAgD;QAChD,EAAE;QACF,6BAA6B;QAC7B,wCAAwC;QACxC,EAAE;QACF,mBAAmB;QACnB,uEAAuE;KACxE,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EAExB,uCAAuC,EACvC,yBAAyB,EACzB,+BAA+B,EAC/B,sCAAsC,GACvC,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAGL,gBAAgB,EAChB,sBAAsB,EACtB,YAAY,EACZ,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,uBAAuB,CAAC;AA4ChE;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,QAAQ,EAAE,wBAAwB;KACnC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,oCAAoC,EAAE,CAAC,MAAM,CAAC;AACvD,CAAC;AAED,SAAS,oCAAoC;IAK3C,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,MAAM,QAAQ,GAAG,+BAA+B,CAAC,gBAAgB,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC;IACnC,CAAC;IAED,MAAM,EACJ,MAAM,EACN,OAAO,EACP,MAAM,EAAE,gBAAgB,GACzB,GAAG,uCAAuC,EAAE,CAAC;IAC9C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAED,MAAM,OAAO,GAAG,yBAAyB,EAAE,CAAC;IAC5C,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,MAAM;QACN,gBAAgB;QAChB,cAAc,EAAE,QAAQ,CAAC,MAAM;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B;IAKlC,MAAM,EACJ,MAAM,EAAE,MAAM,EACd,gBAAgB,EAChB,cAAc,GACf,GAAG,oCAAoC,EAAE,CAAC;IAC3C,MAAM,gBAAgB,GAAkB,EAAE,CAAC;IAC3C,MAAM,aAAa,GAAkB,EAAE,CAAC;IAExC,MAAM,YAAY,GAChB,cAAc,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC;IACxE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,YAAY,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC1C,CAAC;IAED,MAAM,cAAc,GAClB,gBAAgB,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC;IAC1E,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,cAAc,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,cAAc,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC1C,CAAC;IAED,MAAM,WAAW,GACf,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,SAAS;QAC9C,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,SAAS;QACjD,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,aAAa,CAAC;IACpB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,WAAW,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACvC,CAAC;IAED,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAoB;IACxD,MAAM,YAAY,GAAG,YAAY,EAAE,CAAC;IAEpC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,sBAAsB,CAC9B,YAAY,WAAW,uFAAuF,CAC/G,CAAC;QACJ,CAAC;QACD,OAAO,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,KAAmB,EACnB,WAAmB;IAEnB,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,QAAQ;QAAE,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACrD,IAAI,KAAK,CAAC,MAAM;QAAE,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/C,IAAI,KAAK,CAAC,WAAW;QAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAClD,IAAI,KAAK,CAAC,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAClD,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,OAAO,MAAM,CAAC;AAChB,CAAC;AAkBD;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,EAC5B,UAAU,EACV,WAAW,GACU;IACrB,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;IAC7C,MAAM,aAAa,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,GACvD,2BAA2B,EAAE,CAAC;IAEhC,0EAA0E;IAC1E,4EAA4E;IAC5E,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAC1C,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAC5C,CAAC;IAE5B,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,sBAAsB;IACtB,MAAM,gBAAgB,GACpB,iBAAiB,CAAC,QAAQ;QAC1B,gBAAgB,CAAC,QAAQ;QACzB,aAAa,CAAC,QAAQ;QACtB,aAAa,CAAC,QAAQ;QACtB,eAAe,CAAC,QAAQ,CAAC;IAC3B,MAAM,kBAAkB,GACtB,aAAa,CAAC,WAAW,IAAI,aAAa,CAAC,QAAQ,KAAK,gBAAgB;QACtE,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE;QAC9C,CAAC,CAAC,aAAa,CAAC;IAEpB,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;QAC3C,UAAU,EAAE,iBAAiB;QAC7B,gBAAgB;QAChB,aAAa;QACb,aAAa,EAAE,kBAAkB;KAClC,CAAC,CAAC;IAEH,MAAM,WAAW,GACf,gBAAgB,KAAK,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5E,MAAM,MAAM,GAAkB;QAC5B,GAAG,eAAe;QAClB,GAAG,aAAa;QAChB,GAAG,aAAa;QAChB,GAAG,gBAAgB;QACnB,GAAG,iBAAiB;QACpB,gBAAgB;QAChB,WAAW;KACZ,CAAC;IAEF,6EAA6E;IAC7E,4EAA4E;IAC5E,kDAAkD;IAClD,IAAI,gBAAgB,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;IAC5B,CAAC;IAED,MAAM,gBAAgB,GACpB,cAAc,EAAE,IAAI,KAAK,UAAU;QACnC,iBAAiB,CAAC,QAAQ,KAAK,SAAS;QACxC,gBAAgB,CAAC,QAAQ,KAAK,SAAS;QACvC,aAAa,CAAC,QAAQ,KAAK,SAAS,CAAC;IACvC,MAAM,uBAAuB,GAC3B,iBAAiB,CAAC,MAAM,KAAK,SAAS;QACtC,iBAAiB,CAAC,OAAO,KAAK,SAAS;QACrC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,gBAAgB,CAAC,MAAM,KAAK,SAAS;YACnC,gBAAgB,CAAC,OAAO,KAAK,SAAS;YACxC,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,aAAa,CAAC,MAAM,KAAK,SAAS;gBAChC,aAAa,CAAC,OAAO,KAAK,SAAS;gBACrC,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,SAAS,CAAC;IACpB,IAAI,gBAAgB,EAAE,CAAC;QACrB,sCAAsC,CAAC;YACrC,gBAAgB,EAAE,uBAAuB;YACzC,cAAc;YACd,gBAAgB,EAAE,gBAAgB;SACnC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,EAC3B,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,aAAa,GAMd;IACC,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,6DAA6D;IAC7D,IAAI,gBAAgB,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAgBD;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,EAC7B,MAAM,EACN,eAAe,GAAG,IAAI,GACA;IAItB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CACT,gGAAgG,CACjG,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CACT,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAYD;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,MAAM,GACuB;IAC7B,MAAM,KAAK,GAAG;QACZ,sBAAsB;QACtB,EAAE;QACF,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,EAAE;QACF,cAAc;QACd,iCAAiC;QACjC,gDAAgD;QAChD,EAAE;QACF,6BAA6B;QAC7B,wCAAwC;QACxC,EAAE;QACF,mBAAmB;QACnB,uEAAuE;KACxE,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/build/exitCodes.d.ts

@@ -32,6 +32,12 @@ export type ExitCode = (typeof ExitCode)[keyof typeof ExitCode];
 export declare class InvalidArgumentError extends Error {
     constructor(message: string);
 }
+export declare class AuthRequiredError extends Error {
+    constructor(message: string);
+}
+export declare class NetworkError extends Error {
+    constructor(message: string);
+}
 /**
  * Infer a semantic exit code from an unknown error value.
  *

package/build/exitCodes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exitCodes.d.ts","sourceRoot":"","sources":["../src/exitCodes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,QAAQ;IACnB,qCAAqC;aACrC,OAAO,EAAE,CAAC;IACV,sCAAsC;aACtC,OAAO,EAAE,CAAC;IACV,mCAAmC;aACnC,SAAS,EAAE,CAAC;IACZ,6DAA6D;aAC7D,gBAAgB,EAAE,CAAC;IACnB,oDAAoD;aACpD,aAAa,EAAE,CAAC;IAChB,4DAA4D;aAC5D,aAAa,EAAE,CAAC;CACR,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,OAAO,QAAQ,CAAC,CAAC;AAEhE,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAW5D"}
+{"version":3,"file":"exitCodes.d.ts","sourceRoot":"","sources":["../src/exitCodes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,QAAQ;IACnB,qCAAqC;aACrC,OAAO,EAAE,CAAC;IACV,sCAAsC;aACtC,OAAO,EAAE,CAAC;IACV,mCAAmC;aACnC,SAAS,EAAE,CAAC;IACZ,6DAA6D;aAC7D,gBAAgB,EAAE,CAAC;IACnB,oDAAoD;aACpD,aAAa,EAAE,CAAC;IAChB,4DAA4D;aAC5D,aAAa,EAAE,CAAC;CACR,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,OAAO,QAAQ,CAAC,CAAC;AAEhE,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,qBAAa,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAmB5D"}

package/build/exitCodes.js

@@ -34,6 +34,18 @@ export class InvalidArgumentError extends Error {
         this.name = "InvalidArgumentError";
     }
 }
+export class AuthRequiredError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "AuthRequiredError";
+    }
+}
+export class NetworkError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "NetworkError";
+    }
+}
 /**
  * Infer a semantic exit code from an unknown error value.
  *
@@ -47,6 +59,12 @@ export function getExitCodeForError(error) {
     if (error instanceof InvalidArgumentError) {
         return ExitCode.INVALID_ARGUMENT;
     }
+    if (error instanceof AuthRequiredError) {
+        return ExitCode.AUTH_REQUIRED;
+    }
+    if (error instanceof NetworkError) {
+        return ExitCode.NETWORK_ERROR;
+    }
     // TypeError is thrown by the Fetch API for network-level failures
     // (e.g. ECONNREFUSED, ETIMEDOUT, DNS errors).
     if (error instanceof TypeError) {

package/build/exitCodes.js.map

@@ -1 +1 @@
-{"version":3,"file":"exitCodes.js","sourceRoot":"","sources":["../src/exitCodes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,qCAAqC;IACrC,OAAO,EAAE,CAAC;IACV,sCAAsC;IACtC,OAAO,EAAE,CAAC;IACV,mCAAmC;IACnC,SAAS,EAAE,CAAC;IACZ,6DAA6D;IAC7D,gBAAgB,EAAE,CAAC;IACnB,oDAAoD;IACpD,aAAa,EAAE,CAAC;IAChB,4DAA4D;IAC5D,aAAa,EAAE,CAAC;CACR,CAAC;AAIX,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;QAC1C,OAAO,QAAQ,CAAC,gBAAgB,CAAC;IACnC,CAAC;IAED,kEAAkE;IAClE,8CAA8C;IAC9C,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;QAC/B,OAAO,QAAQ,CAAC,aAAa,CAAC;IAChC,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"exitCodes.js","sourceRoot":"","sources":["../src/exitCodes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,qCAAqC;IACrC,OAAO,EAAE,CAAC;IACV,sCAAsC;IACtC,OAAO,EAAE,CAAC;IACV,mCAAmC;IACnC,SAAS,EAAE,CAAC;IACZ,6DAA6D;IAC7D,gBAAgB,EAAE,CAAC;IACnB,oDAAoD;IACpD,aAAa,EAAE,CAAC;IAChB,4DAA4D;IAC5D,aAAa,EAAE,CAAC;CACR,CAAC;AAIX,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;QAC1C,OAAO,QAAQ,CAAC,gBAAgB,CAAC;IACnC,CAAC;IAED,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,OAAO,QAAQ,CAAC,aAAa,CAAC;IAChC,CAAC;IAED,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;QAClC,OAAO,QAAQ,CAAC,aAAa,CAAC;IAChC,CAAC;IAED,kEAAkE;IAClE,8CAA8C;IAC9C,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;QAC/B,OAAO,QAAQ,CAAC,aAAa,CAAC;IAChC,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC1B,CAAC"}

package/build/index.js

@@ -1,12 +1,13 @@
 #!/usr/bin/env node
 // Phoenix CLI Entry Point
 import { main } from "./cli.js";
+import { getExitCodeForError } from "./exitCodes.js";
 import { writeError } from "./io.js";
 // Run CLI when executed directly
 void main().catch((error) => {
     writeError({
         message: `Error: ${error instanceof Error ? error.message : String(error)}`,
     });
-    process.exit(1);
+    process.exit(getExitCodeForError(error));
 });
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,0BAA0B;AAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAElC,iCAAiC;AACjC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAC1B,UAAU,CAAC;QACT,OAAO,EAAE,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;KAC5E,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,0BAA0B;AAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAElC,iCAAiC;AACjC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IAC1B,UAAU,CAAC;QACT,OAAO,EAAE,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;KAC5E,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC"}

package/build/oauth.d.ts

@@ -0,0 +1,138 @@
+import { z } from "zod";
+import { type OAuthTokens, type SettingsFile } from "./settings.js";
+export declare const OAUTH_CLIENT_ID = "phoenix-cli";
+export declare const OAUTH_CALLBACK_PATH = "/callback";
+/**
+ * Bounds every token-endpoint round trip. Without it a proxy that accepts the
+ * socket but never answers strands the CLI for undici's 300s default, long
+ * past the point where the user has already consented in the browser. Generous
+ * because the code is single-use: aborting a slow-but-live exchange costs the
+ * user the whole browser consent, so this must clear a cold-starting server.
+ */
+export declare const OAUTH_TOKEN_REQUEST_TIMEOUT_MS: number;
+/** Best-effort and blocking a wizard, so it gives up sooner than a token call. */
+export declare const OAUTH_REVOKE_TIMEOUT_MS: number;
+export declare const OAUTH_REFRESH_BUFFER_MS: number;
+export declare const OAuthTokenEndpointResponseSchema: z.ZodObject<{
+    access_token: z.ZodString;
+    refresh_token: z.ZodString;
+    expires_in: z.ZodNumber;
+    token_type: z.ZodString;
+    scope: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+}, z.core.$strip>;
+export type OAuthTokenEndpointResponse = z.infer<typeof OAuthTokenEndpointResponseSchema>;
+/**
+ * The RFC 8414 discovery fields the login flow depends on. Only a document
+ * that parses proves an authorization server is really there: a Phoenix
+ * without one answers unknown paths with the SPA's index.html and a 200.
+ */
+export declare const OAuthAuthorizationServerMetadataSchema: z.ZodObject<{
+    issuer: z.ZodString;
+    authorization_endpoint: z.ZodString;
+    token_endpoint: z.ZodString;
+}, z.core.$strip>;
+export interface PkcePair {
+    verifier: string;
+    challenge: string;
+}
+export interface CallbackSuccess {
+    status: "success";
+    code: string;
+}
+export interface CallbackDenied {
+    status: "access_denied";
+}
+export interface CallbackInvalid {
+    status: "invalid";
+    message: string;
+}
+export type CallbackParseResult = CallbackSuccess | CallbackDenied | CallbackInvalid;
+export declare function base64Url(bytes: Buffer): string;
+export declare function generatePkcePair(): PkcePair;
+export declare function generateState(): string;
+export declare function parseOAuthCallbackUrl({ redirectUrl, expectedState, }: {
+    redirectUrl: string;
+    expectedState: string;
+}): CallbackParseResult;
+export declare function buildAuthorizationUrl({ endpoint, redirectUri, state, codeChallenge, }: {
+    endpoint: string;
+    redirectUri: string;
+    state: string;
+    codeChallenge: string;
+}): string;
+export declare function normalizeEndpoint(endpoint: string): string;
+export declare function tokenResponseToOAuthTokens({ response, now, }: {
+    response: OAuthTokenEndpointResponse;
+    now?: Date;
+}): OAuthTokens;
+export declare function isOAuthTokenExpiring({ tokens, now, bufferMs, }: {
+    tokens: OAuthTokens;
+    now?: Date;
+    bufferMs?: number;
+}): boolean;
+export declare function exchangeAuthorizationCode({ endpoint, code, redirectUri, verifier, fetchImpl, }: {
+    endpoint: string;
+    code: string;
+    redirectUri: string;
+    verifier: string;
+    fetchImpl?: typeof fetch;
+}): Promise<OAuthTokenEndpointResponse>;
+export interface BrowserLoginFlowArgs {
+    endpoint: string;
+    /**
+     * Called with the authorization URL before the browser opens, so the user
+     * can complete the login by hand when the launch fails or goes unnoticed.
+     */
+    onAuthorizationUrl: (url: string) => void;
+    /** False keeps the browser shut, leaving the pasted-URL lane (if allowed). */
+    openBrowserWindow?: boolean;
+    /** Narrates a failed launch; the pasted-redirect prompt is the fallback. */
+    onBrowserOpenFailed?: (error: unknown) => void;
+    /**
+     * Accept a hand-pasted redirect URL when no browser was opened — the only
+     * way to finish a login over SSH or in a container.
+     */
+    allowPastedRedirect?: boolean;
+    /** Abandon the wait — the caller's escape hatch from an unanswered login. */
+    signal?: AbortSignal;
+}
+export type BrowserLoginFlowResult = {
+    status: "success";
+    tokens: OAuthTokenEndpointResponse;
+}
+/** The user declined consent, or abandoned the wait via `signal`. */
+ | {
+    status: "cancelled";
+} | {
+    status: "invalid";
+    message: string;
+};
+/**
+ * The Authorization Code + PKCE browser login, end to end: callback server,
+ * browser launch, the wait, and the token exchange. Both `px auth login` (which
+ * persists the tokens) and `px setup` (which spends the access token once to
+ * mint an API key) drive it — the differences between them are the arguments
+ * above, not a second copy of the sequence.
+ */
+export declare function runBrowserLoginFlow({ endpoint, onAuthorizationUrl, openBrowserWindow, onBrowserOpenFailed, allowPastedRedirect, signal, }: BrowserLoginFlowArgs): Promise<BrowserLoginFlowResult>;
+export declare function refreshOAuthToken({ endpoint, refreshToken, fetchImpl, }: {
+    endpoint: string;
+    refreshToken: string;
+    fetchImpl?: typeof fetch;
+}): Promise<OAuthTokenEndpointResponse>;
+export declare function revokeOAuthToken({ endpoint, refreshToken, fetchImpl, }: {
+    endpoint: string;
+    refreshToken: string;
+    fetchImpl?: typeof fetch;
+}): Promise<void>;
+export declare function refreshOAuthTokensForProfile({ endpoint, profileName, currentTokens, force, settingsPath, fetchImpl, }: {
+    endpoint: string;
+    profileName: string;
+    currentTokens: OAuthTokens;
+    force?: boolean;
+    settingsPath?: string;
+    fetchImpl?: typeof fetch;
+}): Promise<OAuthTokens>;
+export declare function resolveTargetProfileName(settings: SettingsFile, explicit?: string): string;
+export declare function withSettingsLock<T>(settingsPath: string, action: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=oauth.d.ts.map

package/build/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,YAAY,EAMlB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAC7C,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAE/C;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,QAAY,CAAC;AACxD,kFAAkF;AAClF,eAAO,MAAM,uBAAuB,QAAY,CAAC;AACjD,eAAO,MAAM,uBAAuB,QAAY,CAAC;AAIjD,eAAO,MAAM,gCAAgC;;;;;;iBAM3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,sCAAsC;;;;iBAIjD,CAAC;AAEH,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,SAAS,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,mBAAmB,GAC3B,eAAe,GACf,cAAc,GACd,eAAe,CAAC;AAQpB,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,gBAAgB,IAAI,QAAQ,CAI3C;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,qBAAqB,CAAC,EACpC,WAAW,EACX,aAAa,GACd,EAAE;IACD,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,mBAAmB,CAmCtB;AAED,wBAAgB,qBAAqB,CAAC,EACpC,QAAQ,EACR,WAAW,EACX,KAAK,EACL,aAAa,GACd,EAAE;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,MAAM,CAYT;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,0BAA0B,CAAC,EACzC,QAAQ,EACR,GAAgB,GACjB,EAAE;IACD,QAAQ,EAAE,0BAA0B,CAAC;IACrC,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,WAAW,CASd;AAED,wBAAgB,oBAAoB,CAAC,EACnC,MAAM,EACN,GAAgB,EAChB,QAAkC,GACnC,EAAE;IACD,MAAM,EAAE,WAAW,CAAC;IACpB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAEV;AA4ID,wBAAsB,yBAAyB,CAAC,EAC9C,QAAQ,EACR,IAAI,EACJ,WAAW,EACX,QAAQ,EACR,SAAiB,GAClB,EAAE;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAStC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,4EAA4E;IAC5E,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAC/C;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,6EAA6E;IAC7E,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,0BAA0B,CAAA;CAAE;AAC3D,qEAAqE;GACnE;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,QAAQ,EACR,kBAAkB,EAClB,iBAAwB,EACxB,mBAAmB,EACnB,mBAA2B,EAC3B,MAAM,GACP,EAAE,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA2ExD;AAaD,wBAAsB,iBAAiB,CAAC,EACtC,QAAQ,EACR,YAAY,EACZ,SAAiB,GAClB,EAAE;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAOtC;AAqDD,wBAAsB,gBAAgB,CAAC,EACrC,QAAQ,EACR,YAAY,EACZ,SAAiB,GAClB,EAAE;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAahB;AAED,wBAAsB,4BAA4B,CAAC,EACjD,QAAQ,EACR,WAAW,EACX,aAAa,EACb,KAAa,EACb,YAAgC,EAChC,SAAiB,GAClB,EAAE;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,WAAW,CAAC;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,WAAW,CAAC,CA+BvB;AAED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,YAAY,EACtB,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAKR;AAED,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC,CAAC,CAAC,CA+CZ"}