@atlasauth/cli 0.24.0 → 0.25.0

package/dist/commands/actions.js

@@ -1,135 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.actions = actions;
-const node_path_1 = require("node:path");
-const actions_1 = require("@atlasauth/actions");
-const args_1 = require("../args");
-const errors_1 = require("../errors");
-const output_1 = require("../output");
-const shared_1 = require("./shared");
-const actions_gallery_1 = require("./actions-gallery");
-const COLUMNS = [
-    { header: 'ID', get: (a) => a.id },
-    { header: 'NAME', get: (a) => a.name },
-    { header: 'TRIGGER', get: (a) => a.trigger },
-    { header: 'ENABLED', get: (a) => a.enabled },
-    { header: 'SECRETS', get: (a) => a.secret_names },
-    { header: 'UPDATED', get: (a) => (0, output_1.fmtTime)(a.updated_at) },
-];
-/** Validate a `--trigger` value against the known set, with a clean error. */
-function parseTrigger(raw) {
-    if (!raw) {
-        throw new errors_1.CliError(`--trigger is required (one of: ${actions_1.ACTION_TRIGGERS.join(', ')}).`);
-    }
-    if (!actions_1.ACTION_TRIGGERS.includes(raw)) {
-        throw new errors_1.CliError(`Unknown trigger '${raw}'. Expected one of: ${actions_1.ACTION_TRIGGERS.join(', ')}.`);
-    }
-    return raw;
-}
-/**
- * `atlas actions` — manage tenant Actions (code run in the auth pipeline).
- *
- *   list                        the instance's actions
- *   deploy <file> --trigger <t> upload a file's code as a new action
- *   test <file> [--trigger <t>] dry-run the file OFFLINE through @atlasauth/actions
- *   logs <id>                   where to find an action's execution history
- *   gallery | show | install | installs | update | publish
- *                               the Actions gallery (see ./actions-gallery.ts)
- */
-async function actions(ctx, args) {
-    const sub = args.positionals[1];
-    const json = (0, shared_1.wantsJson)(args.values);
-    switch (sub) {
-        case 'list': {
-            const { client } = (0, shared_1.requireClient)(ctx, args.values);
-            const page = await client.actions.list();
-            if (json)
-                (0, output_1.printJson)(ctx.io, page);
-            else
-                ctx.io.out((0, output_1.renderTable)(COLUMNS, page.data));
-            return 0;
-        }
-        case 'deploy': {
-            const file = (0, shared_1.requireArg)(args.positionals, 2, 'file');
-            const trigger = parseTrigger((0, args_1.str)(args.values, 'trigger'));
-            const code = ctx.readFile(file);
-            if (!code.trim())
-                throw new errors_1.CliError(`'${file}' is empty — nothing to deploy.`);
-            const name = (0, args_1.str)(args.values, 'name') || (0, node_path_1.basename)(file).replace(/\.[^.]+$/, '');
-            const { client } = (0, shared_1.requireClient)(ctx, args.values);
-            const action = await client.actions.create({ name, trigger, code });
-            if (json)
-                (0, output_1.printJson)(ctx.io, action);
-            else {
-                ctx.io.out(`Deployed action ${action.id} (${action.name}) for ${action.trigger}.`);
-                ctx.io.err(`It is created but NOT yet bound to the ${action.trigger} flow — bind it to run it.`);
-            }
-            return 0;
-        }
-        case 'test': {
-            const file = (0, shared_1.requireArg)(args.positionals, 2, 'file');
-            // Default to post_login's sample event; --trigger picks another shape.
-            const trigger = (0, args_1.str)(args.values, 'trigger')
-                ? parseTrigger((0, args_1.str)(args.values, 'trigger'))
-                : 'post_login';
-            const code = ctx.readFile(file);
-            if (!code.trim())
-                throw new errors_1.CliError(`'${file}' is empty — nothing to test.`);
-            // OFFLINE: no network, no client — the local harness mirrors the isolate.
-            const result = await (0, actions_1.runScript)(code, (0, actions_1.createTestEvent)(trigger));
-            if (json) {
-                (0, output_1.printJson)(ctx.io, result);
-            }
-            else {
-                ctx.io.out(`Trigger:   ${trigger}`);
-                ctx.io.out(`Denied:    ${result.denied}${result.denyReason ? ` (${result.denyReason})` : ''}`);
-                ctx.io.out(`ID claims: ${JSON.stringify(result.idTokenClaims)}`);
-                ctx.io.out(`AT claims: ${JSON.stringify(result.accessTokenClaims)}`);
-                ctx.io.out(`Metadata:  ${JSON.stringify(result.appMetadata)}`);
-                if (result.logs.length)
-                    ctx.io.out(`Logs:\n  ${result.logs.join('\n  ')}`);
-                if (result.error)
-                    ctx.io.err(`Error:     ${result.error}`);
-            }
-            // A thrown error in the action is a failed dry-run → non-zero so CI catches it.
-            return result.error ? 1 : 0;
-        }
-        case 'logs': {
-            const id = (0, shared_1.requireArg)(args.positionals, 2, 'action-id');
-            // The Backend API does not expose a per-action execution-log endpoint:
-            // each run is written as an audit event (`action.<trigger>`) carrying the
-            // outcome, duration and captured logs. Point the user at where to read it
-            // rather than pretend an endpoint exists.
-            const lines = [
-                `Atlas does not expose a live log stream for action ${id}.`,
-                'Each execution is recorded as an audit event named `action.<trigger>`',
-                '(outcome, duration, deny reason / error, and the action\'s console logs).',
-                'Read them in the dashboard audit log, or stream them via a configured',
-                'log stream. To see what an action WOULD do right now, dry-run it:',
-                `  atlas actions test <file> --trigger <trigger>`,
-            ];
-            if (json)
-                (0, output_1.printJson)(ctx.io, { object: 'action_logs_info', action_id: id, message: lines.join(' ') });
-            else
-                ctx.io.out(lines.join('\n'));
-            return 0;
-        }
-        case 'gallery':
-            return (0, actions_gallery_1.gallery)(ctx, args);
-        case 'show':
-            return (0, actions_gallery_1.show)(ctx, args);
-        case 'install':
-            return (0, actions_gallery_1.install)(ctx, args);
-        case 'installs':
-            return (0, actions_gallery_1.installs)(ctx, args);
-        case 'update':
-            return (0, actions_gallery_1.update)(ctx, args);
-        case 'publish':
-            return (0, actions_gallery_1.publish)(ctx, args);
-        default:
-            throw new errors_1.CliError(sub
-                ? `Unknown subcommand 'actions ${sub}'. Try: list, deploy, test, logs, gallery, show, install, installs, update, publish.`
-                : 'actions needs a subcommand: list, deploy, test, logs, gallery, show, install, installs, update, publish.');
-    }
-}
-//# sourceMappingURL=actions.js.map

package/dist/commands/actions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/commands/actions.ts"],"names":[],"mappings":";;AAwCA,0BAiGC;AAzID,yCAAqC;AAErC,gDAAiF;AACjF,kCAA+C;AAE/C,sCAAqC;AACrC,sCAAyE;AACzE,qCAAgE;AAChE,uDAAsF;AAEtF,MAAM,OAAO,GAAqB;IAChC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;IAClC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;IACtC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE;IAC5C,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE;IAC5C,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE;IACjD,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,EAAE;CACzD,CAAC;AAEF,8EAA8E;AAC9E,SAAS,YAAY,CAAC,GAAuB;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,iBAAQ,CAAC,kCAAkC,yBAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,yBAAe,CAAC,QAAQ,CAAC,GAAoB,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,iBAAQ,CAAC,oBAAoB,GAAG,uBAAuB,yBAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,GAAoB,CAAC;AAC9B,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,OAAO,CAAC,GAAe,EAAE,IAAgB;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEpC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;;gBAC7B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAA,oBAAW,EAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACjD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,MAAM,IAAI,iBAAQ,CAAC,IAAI,IAAI,iCAAiC,CAAC,CAAC;YAChF,MAAM,IAAI,GAAG,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAA,oBAAQ,EAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAEhF,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;iBAC/B,CAAC;gBACJ,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;gBACnF,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,0CAA0C,MAAM,CAAC,OAAO,4BAA4B,CACrF,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YACrD,uEAAuE;YACvE,MAAM,OAAO,GAAG,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;gBACzC,CAAC,CAAC,YAAY,CAAC,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC3C,CAAC,CAAC,YAAY,CAAC;YACjB,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,MAAM,IAAI,iBAAQ,CAAC,IAAI,IAAI,+BAA+B,CAAC,CAAC;YAE9E,0EAA0E;YAC1E,MAAM,MAAM,GAAG,MAAM,IAAA,mBAAS,EAAC,IAAI,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC,CAAC,CAAC;YAC/D,IAAI,IAAI,EAAE,CAAC;gBACT,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;gBACpC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC/F,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;gBACjE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;gBACrE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBAC/D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM;oBAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC3E,IAAI,MAAM,CAAC,KAAK;oBAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,gFAAgF;YAChF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;YACxD,uEAAuE;YACvE,0EAA0E;YAC1E,0EAA0E;YAC1E,0CAA0C;YAC1C,MAAM,KAAK,GAAG;gBACZ,sDAAsD,EAAE,GAAG;gBAC3D,uEAAuE;gBACvE,2EAA2E;gBAC3E,uEAAuE;gBACvE,mEAAmE;gBACnE,iDAAiD;aAClD,CAAC;YACF,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;;gBAChG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,SAAS;YACZ,OAAO,IAAA,yBAAO,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,KAAK,MAAM;YACT,OAAO,IAAA,sBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzB,KAAK,SAAS;YACZ,OAAO,IAAA,yBAAO,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,KAAK,UAAU;YACb,OAAO,IAAA,0BAAQ,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,IAAA,wBAAM,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,KAAK,SAAS;YACZ,OAAO,IAAA,yBAAO,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAE5B;YACE,MAAM,IAAI,iBAAQ,CAChB,GAAG;gBACD,CAAC,CAAC,+BAA+B,GAAG,sFAAsF;gBAC1H,CAAC,CAAC,0GAA0G,CAC/G,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/commands/admin.d.ts

@@ -1,49 +0,0 @@
-import { type ParsedArgs } from '../args';
-import type { RunContext } from '../context';
-/** The scope an operator token needs on Atlas's own account for the staff routes. */
-export declare const STAFF_PROVISION_SCOPE = "platform:atlas_id_apps:provision";
-/** A staff-made account as the /v1/admin routes return it. */
-export interface StaffAccount {
-    object: 'atlas_id_provisioned_account';
-    id: string;
-    sub: string;
-    email: string | null;
-    label: string;
-    team: string;
-    kind: 'provisioned' | 'developer' | 'test_mode';
-    app_ids: string[];
-    apps: Array<{
-        id: string;
-        client_id: string;
-        name: string;
-    }>;
-    any_app: boolean;
-    two_factor_exempt: boolean;
-    expires_at: number | null;
-    expired: boolean;
-    developer_account_id: string | null;
-    developer_account?: {
-        id: string;
-        name: string;
-    } | null;
-    last_sign_in_at: number | null;
-    password?: string;
-    sealed_password?: string;
-    application?: {
-        id: string;
-        name: string;
-    };
-}
-/**
- * `atlas admin id-accounts list|provision|extend|rotate|revoke` and
- * `atlas admin developer-accounts provision|revoke`: Atlas STAFF provisioning
- * Sign in with Atlas accounts for other platforms' integration teams.
- *
- * Credential: the operator sign-in (`atlas login --device`), exchanged for a
- * one-hour token on Atlas's own account with `platform:atlas_id_apps:provision`.
- * Writes need a second factor proved in the last 5 minutes; when the server
- * says so, the CLI runs the operator sign-in again and retries once. Passwords
- * come back sealed to a key pair made for the run and are written to 0600 files,
- * never printed (unless --print-secret).
- */
-export declare function admin(ctx: RunContext, args: ParsedArgs): Promise<number>;

package/dist/commands/admin.js

@@ -1,353 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.STAFF_PROVISION_SCOPE = void 0;
-exports.admin = admin;
-const backend_1 = require("@atlasauth/backend");
-const args_1 = require("../args");
-const errors_1 = require("../errors");
-const output_1 = require("../output");
-const project_1 = require("../project");
-const secrets_1 = require("../secrets");
-const shared_1 = require("./shared");
-/** The scope an operator token needs on Atlas's own account for the staff routes. */
-exports.STAFF_PROVISION_SCOPE = 'platform:atlas_id_apps:provision';
-const MIN_PASSWORD_LENGTH = 12;
-const BASE = '/v1/admin/atlas_id/provisioned_accounts';
-const DEVELOPER_BASE = '/v1/admin/atlas_id/developer_accounts';
-const COLUMNS = [
-    { header: 'ID', get: (a) => a.id },
-    { header: 'EMAIL', get: (a) => a.email ?? '' },
-    { header: 'TEAM', get: (a) => a.team ?? a.label },
-    { header: 'KIND', get: (a) => a.kind },
-    { header: 'APPS', get: (a) => (a.any_app ? 'any' : a.kind === 'developer' ? '-' : a.apps.map((x) => x.name).join(', ') || a.app_ids.join(', ')) },
-    { header: 'EXPIRES', get: (a) => (a.expires_at ? (a.expired ? `${(0, output_1.fmtTime)(a.expires_at)} (expired)` : (0, output_1.fmtTime)(a.expires_at)) : 'never') },
-];
-/** The first non-comment line of a file (or stdin): `NAME=value` or a bare value. */
-function readPasswordFile(ctx, file) {
-    const where = file === '-' ? 'stdin' : file;
-    let text;
-    try {
-        text = ctx.readFile(file === '-' ? '/dev/stdin' : file);
-    }
-    catch {
-        throw new errors_1.CliError(`Could not read the password from ${where}.`);
-    }
-    const line = text.split(/\r?\n/).find((l) => l.trim() && !l.trim().startsWith('#')) ?? '';
-    const m = /^[A-Za-z_][A-Za-z0-9_]*=(.*)$/.exec(line.trim());
-    const password = (m ? m[1] : line).replace(/[\r\n]+$/, '').replace(/^"(.*)"$/, '$1');
-    if (!password)
-        throw new errors_1.CliError(`No password found in ${where}.`);
-    if (password.length < MIN_PASSWORD_LENGTH)
-        throw new errors_1.CliError(`The password in ${where} must be at least ${MIN_PASSWORD_LENGTH} characters.`);
-    return password;
-}
-/** `--days N` / `--expires-at <ISO|epoch ms>` as the staff routes take them. */
-function expiryBody(values) {
-    const days = (0, args_1.str)(values, 'days');
-    const at = (0, args_1.str)(values, 'expires-at');
-    if (days && at)
-        throw new errors_1.CliError('Pass --days or --expires-at, not both.');
-    if (days) {
-        const n = Number(days);
-        if (!Number.isInteger(n) || n < 1)
-            throw new errors_1.CliError(`--days must be a whole number of days, got '${days}'.`);
-        return { days: n };
-    }
-    if (at) {
-        if (/^\d+$/.test(at))
-            return { expires_at: Number(at) };
-        if (Number.isNaN(Date.parse(at)))
-            throw new errors_1.CliError(`--expires-at must be an ISO 8601 date (2026-12-31) or epoch milliseconds, got '${at}'.`);
-        return { expires_at: at };
-    }
-    return {};
-}
-function withoutSecrets(a) {
-    const { password: _p, sealed_password: _s, ...rest } = a;
-    void _p;
-    void _s;
-    return rest;
-}
-const stepUpError = (err) => err instanceof backend_1.AtlasApiError && err.errors.some((e) => e.code === 'STEP_UP_REQUIRED' || e.code === 'MFA_REQUIRED');
-/**
- * The staff credential: the profile's operator sign-in (`atlas login --device`)
- * exchanged for a one-hour token on Atlas's own account with the provision
- * scope. Nothing long-lived is stored; the staff account id is remembered on
- * the profile once given.
- */
-class StaffSession {
-    ctx;
-    args;
-    token;
-    pair = (0, backend_1.generateSealKeyPair)();
-    constructor(ctx, args) {
-        this.ctx = ctx;
-        this.args = args;
-    }
-    profileName() {
-        const file = this.ctx.config.load();
-        return (0, args_1.str)(this.args.values, 'profile') || file.active_profile || 'default';
-    }
-    apiUrl() {
-        const profile = this.ctx.config.load().profiles[this.profileName()];
-        return (0, args_1.str)(this.args.values, 'url') || (0, shared_1.envApiUrl)(this.ctx.env) || profile?.api_url || backend_1.DEFAULT_API_URL;
-    }
-    staffAccount() {
-        const file = this.ctx.config.load();
-        const name = this.profileName();
-        const given = (0, args_1.str)(this.args.values, 'staff-account') || this.ctx.env.ATLAS_STAFF_ACCOUNT_ID?.trim();
-        const account = given || file.profiles[name]?.staff_account_id;
-        if (!account) {
-            throw new errors_1.CliError("atlas admin needs Atlas's own account id once: pass --staff-account <acct_…> (or set ATLAS_STAFF_ACCOUNT_ID). It is remembered on the profile.");
-        }
-        if (given && file.profiles[name] && file.profiles[name].staff_account_id !== given) {
-            file.profiles[name].staff_account_id = given;
-            this.ctx.config.save(file);
-        }
-        return account;
-    }
-    async exchange() {
-        const file = this.ctx.config.load();
-        const operator = file.profiles[this.profileName()]?.operator;
-        if (!operator || operator.expires_at <= Date.now()) {
-            throw new errors_1.CliError("No current operator sign-in. Run 'atlas login --device' (confirm with your second factor) first.");
-        }
-        try {
-            const bound = await (0, backend_1.exchangeOperatorToken)(operator.access_token, { resource: this.staffAccount(), scope: exports.STAFF_PROVISION_SCOPE }, { apiUrl: this.apiUrl(), fetch: this.ctx.fetch });
-            return bound.access_token;
-        }
-        catch (err) {
-            if (err instanceof backend_1.OAuthFlowError) {
-                throw new errors_1.CliError(`Atlas refused the staff token (${err.error}): ${err.message}. Only owners and admins of Atlas's own account can use 'atlas admin'.`);
-            }
-            throw err;
-        }
-    }
-    /** A fresh operator sign-in (the device flow), for a write that needs a recent second factor. */
-    async stepUp() {
-        const opts = { apiUrl: this.apiUrl(), fetch: this.ctx.fetch };
-        let start;
-        try {
-            start = await (0, backend_1.startOperatorLogin)(opts);
-        }
-        catch (err) {
-            throw new errors_1.CliError(err instanceof Error ? err.message : String(err));
-        }
-        this.ctx.io.err('This action needs a sign-in verified with your second factor in the last 5 minutes.');
-        this.ctx.io.err(`Open ${start.verification_uri_complete}`);
-        this.ctx.io.err(`and confirm the code ${start.user_code} with your passkey or authenticator.`);
-        let token;
-        try {
-            token = await (0, backend_1.pollOperatorLogin)(start, { fetch: this.ctx.fetch, sleep: this.ctx.sleep });
-        }
-        catch (err) {
-            if (err instanceof backend_1.OAuthFlowError)
-                throw new errors_1.CliError(`Sign-in did not complete: ${err.message}`);
-            throw err;
-        }
-        const file = this.ctx.config.load();
-        const name = this.profileName();
-        const entry = file.profiles[name] ?? { api_url: opts.apiUrl, secret_key: '' };
-        entry.operator = { access_token: token.access_token, expires_at: Date.now() + token.expires_in * 1000, issuer: start.config.issuer };
-        file.profiles[name] = entry;
-        this.ctx.config.save(file);
-        this.token = undefined;
-    }
-    async http() {
-        this.token ??= await this.exchange();
-        // Passwords come back sealed to a key pair made here, opened only locally.
-        return (0, project_1.httpFor)(this.ctx, { secretKey: this.token, apiUrl: this.apiUrl(), headers: { 'x-secret-recipient': this.pair.secretRecipient } });
-    }
-    read(fn) {
-        return this.http().then(fn);
-    }
-    /** A write: on STEP_UP_REQUIRED, sign in again (unless --no-step-up) and retry once. */
-    async write(fn) {
-        try {
-            return await fn(await this.http());
-        }
-        catch (err) {
-            if (!stepUpError(err))
-                throw err;
-            if (this.args.values['no-step-up'] === true) {
-                throw new errors_1.CliError("This action needs a sign-in verified with your second factor in the last 5 minutes. Run 'atlas login --device' and retry.");
-            }
-            await this.stepUp();
-            return fn(await this.http());
-        }
-    }
-    /** The password: opened from `sealed_password` (or the plain field), then to a 0600 file. */
-    deliverPassword(account, label) {
-        const password = account.sealed_password ? (0, backend_1.openSealedSecret)(account.sealed_password, this.pair) : account.password;
-        if (!password)
-            return undefined;
-        const json = (0, shared_1.wantsJson)(this.args.values);
-        const io = json ? { out: () => undefined, err: this.ctx.io.err } : this.ctx.io;
-        return (0, secrets_1.deliverSecret)({
-            io,
-            env: this.ctx.env,
-            product: (0, args_1.str)(this.args.values, 'product') ?? 'atlasauth',
-            fileName: `staff-account-${account.id}.env`,
-            entries: { ATLAS_ID_TEST_EMAIL: account.email ?? '', ATLAS_ID_TEST_PASSWORD: password },
-            label,
-            printSecret: this.args.values['print-secret'] === true,
-            force: true,
-            comment: `Atlas staff-provisioned account ${account.email ?? account.id} (team ${account.team ?? account.label}). Hand it to that team only.`,
-        }).path;
-    }
-}
-function emitAccount(ctx, args, account, path, line) {
-    if ((0, shared_1.wantsJson)(args.values))
-        (0, output_1.printJson)(ctx.io, { ...withoutSecrets(account), ...(path ? { secret_file: path } : {}) });
-    else
-        ctx.io.out(line);
-}
-async function idAccountsCommand(ctx, args, staff) {
-    const v = args.values;
-    const sub = args.positionals[2];
-    switch (sub) {
-        case 'list': {
-            const kind = (0, args_1.str)(v, 'kind');
-            if (kind && kind !== 'provisioned' && kind !== 'developer')
-                throw new errors_1.CliError('--kind must be provisioned or developer.');
-            const q = new URLSearchParams();
-            const team = (0, args_1.str)(v, 'team');
-            if (team)
-                q.set('team', team);
-            if (kind)
-                q.set('kind', kind);
-            const limit = (0, args_1.str)(v, 'limit');
-            if (limit)
-                q.set('limit', limit);
-            const qs = q.toString();
-            const page = await staff.read((http) => http.get(`${BASE}${qs ? `?${qs}` : ''}`));
-            if ((0, shared_1.wantsJson)(v))
-                (0, output_1.printJson)(ctx.io, page);
-            else {
-                ctx.io.out((0, output_1.renderTable)(COLUMNS, page.data));
-                for (const t of page.teams)
-                    ctx.io.out(`${t.team}: ${t.count} of ${t.limit}${t.expired ? ` (${t.expired} expired)` : ''}`);
-            }
-            return 0;
-        }
-        case 'provision': {
-            const email = (0, args_1.str)(v, 'email');
-            const team = (0, args_1.str)(v, 'team');
-            if (!email || !team)
-                throw new errors_1.CliError('admin id-accounts provision needs --email <address> and --team <partner team>.');
-            const anyApp = v['any-app'] === true;
-            const apps = ((0, args_1.str)(v, 'app') ?? '').split(',').map((s) => s.trim()).filter(Boolean);
-            if (anyApp === (apps.length > 0))
-                throw new errors_1.CliError('Pass --app <id[,id…]> (the apps the account may sign in to) or --any-app, exactly one.');
-            if (anyApp && v['two-factor-exempt'] === true)
-                throw new errors_1.CliError('--two-factor-exempt needs named apps (--app), not --any-app.');
-            const passwordFile = (0, args_1.str)(v, 'password-file');
-            const body = {
-                email,
-                team,
-                ...(anyApp ? { any_app: true } : { app_ids: apps }),
-                email_verified: v.unverified !== true,
-                ...(passwordFile ? { password: readPasswordFile(ctx, passwordFile) } : {}),
-                ...(v['two-factor-exempt'] === true ? { two_factor_exempt: true } : {}),
-                ...expiryBody(v),
-            };
-            const created = await staff.write((http) => http.post(BASE, body));
-            const path = staff.deliverPassword(created, `The password for ${created.email ?? email}`);
-            emitAccount(ctx, args, created, path, `Created ${created.email ?? email} (${created.id}) for team ${team}${anyApp ? ', any Sign in with Atlas app' : ''}${created.expires_at ? `, expires ${(0, output_1.fmtTime)(created.expires_at)}` : ''}.`);
-            return 0;
-        }
-        case 'extend': {
-            const id = (0, shared_1.requireArg)(args.positionals, 3, 'account id');
-            const extended = await staff.write((http) => http.post(`${BASE}/${encodeURIComponent(id)}/extend`, expiryBody(v)));
-            emitAccount(ctx, args, extended, undefined, `${id} now expires ${extended.expires_at ? (0, output_1.fmtTime)(extended.expires_at) : 'never'}.`);
-            return 0;
-        }
-        case 'rotate': {
-            const id = (0, shared_1.requireArg)(args.positionals, 3, 'account id');
-            const passwordFile = (0, args_1.str)(v, 'password-file');
-            const rotated = await staff.write((http) => http.post(`${BASE}/${encodeURIComponent(id)}/password`, passwordFile ? { password: readPasswordFile(ctx, passwordFile) } : {}));
-            const path = staff.deliverPassword(rotated, `The new password for ${rotated.email ?? id}`);
-            emitAccount(ctx, args, rotated, path, 'Existing sessions stay signed in; revoke the account to end them.');
-            return 0;
-        }
-        case 'revoke': {
-            const id = (0, shared_1.requireArg)(args.positionals, 3, 'account id');
-            await staff.write((http) => http.delete(`${BASE}/${encodeURIComponent(id)}`));
-            if ((0, shared_1.wantsJson)(v))
-                (0, output_1.printJson)(ctx.io, { id, revoked: true });
-            else
-                ctx.io.out(`Revoked ${id}: the account is deleted and its sessions and grants end.`);
-            return 0;
-        }
-        default:
-            throw new errors_1.CliError(sub
-                ? `Unknown subcommand 'admin id-accounts ${sub}'. Try: list, provision, extend, rotate, revoke.`
-                : 'admin id-accounts needs a subcommand: list, provision, extend, rotate, revoke.');
-    }
-}
-async function developerAccountsCommand(ctx, args, staff) {
-    const v = args.values;
-    const sub = args.positionals[2];
-    switch (sub) {
-        case 'provision': {
-            const email = (0, args_1.str)(v, 'email');
-            const team = (0, args_1.str)(v, 'team');
-            if (!email || !team)
-                throw new errors_1.CliError('admin developer-accounts provision needs --email <address> and --team <partner team>.');
-            const passwordFile = (0, args_1.str)(v, 'password-file');
-            const body = {
-                email,
-                team,
-                ...((0, args_1.str)(v, 'account-name') ? { account_name: (0, args_1.str)(v, 'account-name') } : {}),
-                ...((0, args_1.str)(v, 'application-name') ? { application_name: (0, args_1.str)(v, 'application-name') } : {}),
-                ...(passwordFile ? { password: readPasswordFile(ctx, passwordFile) } : {}),
-                ...expiryBody(v),
-            };
-            const created = await staff.write((http) => http.post(DEVELOPER_BASE, body));
-            const path = staff.deliverPassword(created, `The password for ${created.email ?? email}`);
-            emitAccount(ctx, args, created, path, `Created developer account ${created.email ?? email} (${created.id}) for team ${team}${created.application ? `, owning ${created.application.name} (${created.application.id})` : ''}${created.expires_at ? `, expires ${(0, output_1.fmtTime)(created.expires_at)}` : ''}.`);
-            return 0;
-        }
-        case 'revoke': {
-            const id = (0, shared_1.requireArg)(args.positionals, 3, 'account id');
-            const out = await staff.write((http) => http.get(`${BASE}/${encodeURIComponent(id)}`).then(async (row) => {
-                if (row.kind !== 'developer')
-                    throw new errors_1.CliError(`${id} is not a developer account; use 'atlas admin id-accounts revoke'.`);
-                await http.delete(`${BASE}/${encodeURIComponent(id)}`);
-                return row;
-            }));
-            if ((0, shared_1.wantsJson)(v))
-                (0, output_1.printJson)(ctx.io, { id, revoked: true, developer_account_id: out.developer_account_id });
-            else
-                ctx.io.out(`Revoked ${id}: the account is deleted, its sessions end, and its dashboard account goes when no one else is a member.`);
-            return 0;
-        }
-        default:
-            throw new errors_1.CliError(sub
-                ? `Unknown subcommand 'admin developer-accounts ${sub}'. Try: provision, revoke.`
-                : 'admin developer-accounts needs a subcommand: provision, revoke.');
-    }
-}
-/**
- * `atlas admin id-accounts list|provision|extend|rotate|revoke` and
- * `atlas admin developer-accounts provision|revoke`: Atlas STAFF provisioning
- * Sign in with Atlas accounts for other platforms' integration teams.
- *
- * Credential: the operator sign-in (`atlas login --device`), exchanged for a
- * one-hour token on Atlas's own account with `platform:atlas_id_apps:provision`.
- * Writes need a second factor proved in the last 5 minutes; when the server
- * says so, the CLI runs the operator sign-in again and retries once. Passwords
- * come back sealed to a key pair made for the run and are written to 0600 files,
- * never printed (unless --print-secret).
- */
-async function admin(ctx, args) {
-    const group = args.positionals[1];
-    if (group !== 'id-accounts' && group !== 'developer-accounts') {
-        throw new errors_1.CliError(group
-            ? `Unknown 'atlas admin ${group}'. Try: atlas admin id-accounts …, atlas admin developer-accounts ….`
-            : 'atlas admin needs a group: id-accounts or developer-accounts.');
-    }
-    const staff = new StaffSession(ctx, args);
-    return group === 'id-accounts' ? idAccountsCommand(ctx, args, staff) : developerAccountsCommand(ctx, args, staff);
-}
-//# sourceMappingURL=admin.js.map

package/dist/commands/admin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/commands/admin.ts"],"names":[],"mappings":";;;AAwYA,sBAWC;AAnZD,gDAS4B;AAC5B,kCAA+C;AAG/C,sCAAqC;AACrC,sCAAyE;AACzE,wCAAqC;AACrC,wCAA2C;AAC3C,qCAA4D;AAE5D,qFAAqF;AACxE,QAAA,qBAAqB,GAAG,kCAAkC,CAAC;AACxE,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,IAAI,GAAG,yCAAyC,CAAC;AACvD,MAAM,cAAc,GAAG,uCAAuC,CAAC;AAiC/D,MAAM,OAAO,GAA2B;IACtC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;IAClC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;IAC9C,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE;IACjD,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;IACtC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE;IACjJ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;CACzI,CAAC;AAEF,qFAAqF;AACrF,SAAS,gBAAgB,CAAC,GAAe,EAAE,IAAY;IACrD,MAAM,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAQ,CAAC,oCAAoC,KAAK,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1F,MAAM,CAAC,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtF,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,iBAAQ,CAAC,wBAAwB,KAAK,GAAG,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB;QAAE,MAAM,IAAI,iBAAQ,CAAC,mBAAmB,KAAK,qBAAqB,mBAAmB,cAAc,CAAC,CAAC;IAC9I,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,gFAAgF;AAChF,SAAS,UAAU,CAAC,MAA4B;IAC9C,MAAM,IAAI,GAAG,IAAA,UAAG,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,IAAA,UAAG,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrC,IAAI,IAAI,IAAI,EAAE;QAAE,MAAM,IAAI,iBAAQ,CAAC,wCAAwC,CAAC,CAAC;IAC7E,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,iBAAQ,CAAC,+CAA+C,IAAI,IAAI,CAAC,CAAC;QAC/G,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,EAAE,EAAE,CAAC;QACP,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,iBAAQ,CAAC,kFAAkF,EAAE,IAAI,CAAC,CAAC;QAC/I,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,CAAe;IACrC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;IACR,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,GAAY,EAAW,EAAE,CAC5C,GAAG,YAAY,uBAAa,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;AAErH;;;;;GAKG;AACH,MAAM,YAAY;IAIG;IACA;IAJX,KAAK,CAAqB;IACzB,IAAI,GAAG,IAAA,6BAAmB,GAAE,CAAC;IACtC,YACmB,GAAe,EACf,IAAgB;QADhB,QAAG,GAAH,GAAG,CAAY;QACf,SAAI,GAAJ,IAAI,CAAY;IAChC,CAAC;IAEI,WAAW;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACpC,OAAO,IAAA,UAAG,EAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,SAAS,CAAC;IAC9E,CAAC;IAEO,MAAM;QACZ,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACpE,OAAO,IAAA,UAAG,EAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAA,kBAAS,EAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,OAAO,IAAI,yBAAe,CAAC;IACxG,CAAC;IAEO,YAAY;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;QACpG,MAAM,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC;QAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,iBAAQ,CAAC,gJAAgJ,CAAC,CAAC;QACvK,CAAC;QACD,IAAI,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAE,CAAC,gBAAgB,KAAK,KAAK,EAAE,CAAC;YACpF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAE,CAAC,gBAAgB,GAAG,KAAK,CAAC;YAC9C,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,QAAQ,CAAC;QAC7D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,iBAAQ,CAAC,kGAAkG,CAAC,CAAC;QACzH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAA,+BAAqB,EACvC,QAAQ,CAAC,YAAY,EACrB,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,6BAAqB,EAAE,EAC/D,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CACjD,CAAC;YACF,OAAO,KAAK,CAAC,YAAY,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,wBAAc,EAAE,CAAC;gBAClC,MAAM,IAAI,iBAAQ,CAAC,kCAAkC,GAAG,CAAC,KAAK,MAAM,GAAG,CAAC,OAAO,wEAAwE,CAAC,CAAC;YAC3J,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,iGAAiG;IACzF,KAAK,CAAC,MAAM;QAClB,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAA,4BAAkB,EAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,iBAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qFAAqF,CAAC,CAAC;QACvG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,wBAAwB,KAAK,CAAC,SAAS,sCAAsC,CAAC,CAAC;QAC/F,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAA,2BAAiB,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,wBAAc;gBAAE,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAClG,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC9E,KAAK,CAAC,QAAQ,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACrI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,2EAA2E;QAC3E,OAAO,IAAA,iBAAO,EAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC3I,CAAC;IAED,IAAI,CAAI,EAAoC;QAC1C,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,KAAK,CAAI,EAAoC;QACjD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,MAAM,IAAI,iBAAQ,CAAC,2HAA2H,CAAC,CAAC;YAClJ,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,6FAA6F;IAC7F,eAAe,CAAC,OAAqB,EAAE,KAAa;QAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,IAAA,0BAAgB,EAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACnH,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/E,OAAO,IAAA,uBAAa,EAAC;YACnB,EAAE;YACF,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG;YACjB,OAAO,EAAE,IAAA,UAAG,EAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,WAAW;YACxD,QAAQ,EAAE,iBAAiB,OAAO,CAAC,EAAE,MAAM;YAC3C,OAAO,EAAE,EAAE,mBAAmB,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,sBAAsB,EAAE,QAAQ,EAAE;YACvF,KAAK;YACL,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,IAAI;YACtD,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,mCAAmC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,EAAE,UAAU,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,+BAA+B;SAC9I,CAAC,CAAC,IAAI,CAAC;IACV,CAAC;CACF;AAED,SAAS,WAAW,CAAC,GAAe,EAAE,IAAgB,EAAE,OAAqB,EAAE,IAAwB,EAAE,IAAY;IACnH,IAAI,IAAA,kBAAS,EAAC,IAAI,CAAC,MAAM,CAAC;QAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;;QACjH,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAe,EAAE,IAAgB,EAAE,KAAmB;IACrF,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5B,IAAI,IAAI,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,WAAW;gBAAE,MAAM,IAAI,iBAAQ,CAAC,0CAA0C,CAAC,CAAC;YAC3H,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5B,IAAI,IAAI;gBAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,IAAI;gBAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9B,IAAI,KAAK;gBAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAY,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC7F,IAAI,IAAA,kBAAS,EAAC,CAAC,CAAC;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;iBACrC,CAAC;gBACJ,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAA,oBAAW,EAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK;oBAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7H,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,iBAAQ,CAAC,gFAAgF,CAAC,CAAC;YAC1H,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;YACrC,MAAM,IAAI,GAAG,CAAC,IAAA,UAAG,EAAC,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnF,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;gBAAE,MAAM,IAAI,iBAAQ,CAAC,wFAAwF,CAAC,CAAC;YAC/I,IAAI,MAAM,IAAI,CAAC,CAAC,mBAAmB,CAAC,KAAK,IAAI;gBAAE,MAAM,IAAI,iBAAQ,CAAC,8DAA8D,CAAC,CAAC;YAClI,MAAM,YAAY,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,eAAe,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG;gBACX,KAAK;gBACL,IAAI;gBACJ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBACnD,cAAc,EAAE,CAAC,CAAC,UAAU,KAAK,IAAI;gBACrC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,UAAU,CAAC,CAAC,CAAC;aACjB,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAe,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACjF,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,CAAC,OAAO,EAAE,oBAAoB,OAAO,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;YAC1F,WAAW,CACT,GAAG,EACH,IAAI,EACJ,OAAO,EACP,IAAI,EACJ,WAAW,OAAO,CAAC,KAAK,IAAI,KAAK,KAAK,OAAO,CAAC,EAAE,cAAc,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,IAAA,gBAAO,EAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAC5L,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAe,GAAG,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjI,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAA,gBAAO,EAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;YAClI,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;YACzD,MAAM,YAAY,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,eAAe,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,IAAI,CAAC,IAAI,CAAe,GAAG,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC7I,CAAC;YACF,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,CAAC,OAAO,EAAE,wBAAwB,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3F,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,mEAAmE,CAAC,CAAC;YAC3G,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;YACzD,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9E,IAAI,IAAA,kBAAS,EAAC,CAAC,CAAC;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;;gBACtD,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,2DAA2D,CAAC,CAAC;YAC1F,OAAO,CAAC,CAAC;QACX,CAAC;QACD;YACE,MAAM,IAAI,iBAAQ,CAChB,GAAG;gBACD,CAAC,CAAC,yCAAyC,GAAG,kDAAkD;gBAChG,CAAC,CAAC,gFAAgF,CACrF,CAAC;IACN,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,GAAe,EAAE,IAAgB,EAAE,KAAmB;IAC5F,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,iBAAQ,CAAC,uFAAuF,CAAC,CAAC;YACjI,MAAM,YAAY,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,eAAe,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG;gBACX,KAAK;gBACL,IAAI;gBACJ,GAAG,CAAC,IAAA,UAAG,EAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAA,UAAG,EAAC,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,GAAG,CAAC,IAAA,UAAG,EAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAA,UAAG,EAAC,CAAC,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvF,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,UAAU,CAAC,CAAC,CAAC;aACjB,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAe,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3F,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,CAAC,OAAO,EAAE,oBAAoB,OAAO,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;YAC1F,WAAW,CACT,GAAG,EACH,IAAI,EACJ,OAAO,EACP,IAAI,EACJ,6BAA6B,OAAO,CAAC,KAAK,IAAI,KAAK,KAAK,OAAO,CAAC,EAAE,cAAc,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,WAAW,CAAC,IAAI,KAAK,OAAO,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,IAAA,gBAAO,EAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAC/P,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CACrC,IAAI,CAAC,GAAG,CAAe,GAAG,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC7E,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;oBAAE,MAAM,IAAI,iBAAQ,CAAC,GAAG,EAAE,oEAAoE,CAAC,CAAC;gBAC5H,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACvD,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CACH,CAAC;YACF,IAAI,IAAA,kBAAS,EAAC,CAAC,CAAC;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC;;gBACtG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,0GAA0G,CAAC,CAAC;YACzI,OAAO,CAAC,CAAC;QACX,CAAC;QACD;YACE,MAAM,IAAI,iBAAQ,CAChB,GAAG;gBACD,CAAC,CAAC,gDAAgD,GAAG,4BAA4B;gBACjF,CAAC,CAAC,iEAAiE,CACtE,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,KAAK,CAAC,GAAe,EAAE,IAAgB;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,oBAAoB,EAAE,CAAC;QAC9D,MAAM,IAAI,iBAAQ,CAChB,KAAK;YACH,CAAC,CAAC,wBAAwB,KAAK,sEAAsE;YACrG,CAAC,CAAC,+DAA+D,CACpE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1C,OAAO,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACpH,CAAC"}

package/dist/commands/api-keys.d.ts

@@ -1,4 +0,0 @@
-import { type ParsedArgs } from '../args';
-import type { RunContext } from '../context';
-/** `atlas api-keys <list|create|revoke>` — maps onto `client.apiKeys.*`. */
-export declare function apiKeys(ctx: RunContext, args: ParsedArgs): Promise<number>;