@atlasauth/cli 0.25.0 → 0.26.0

package/dist/commands/golive.js

@@ -0,0 +1,297 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SDK_COOKIES = void 0;
+exports.parseOrigin = parseOrigin;
+exports.domainFor = domainFor;
+exports.preflightCheck = preflightCheck;
+exports.loginReadinessCheck = loginReadinessCheck;
+exports.pathMountCheck = pathMountCheck;
+exports.declaredCookiesCheck = declaredCookiesCheck;
+exports.golive = golive;
+const backend_1 = require("@atlasauth/backend");
+const args_1 = require("../args");
+const errors_1 = require("../errors");
+const output_1 = require("../output");
+const redact_1 = require("../redact");
+const project_1 = require("../project");
+const project_commands_1 = require("./project-commands");
+const shared_1 = require("./shared");
+/** The cookies the SDKs read: a consent manager that does not declare them may block sign-in. */
+exports.SDK_COOKIES = ['__session', '__atlas_uat', '__atlas_rt', '__client'];
+/** Parse `--origin` to a bare origin (scheme + host + port). */
+function parseOrigin(raw, command) {
+    if (!raw)
+        throw new errors_1.CliError(`${command} needs --origin <https://your-app.example.com>.`);
+    let u;
+    try {
+        u = new URL(raw);
+    }
+    catch {
+        throw new errors_1.CliError(`--origin must be a full origin such as https://app.example.com, got '${raw}'.`);
+    }
+    if (u.protocol !== 'https:' && u.protocol !== 'http:')
+        throw new errors_1.CliError(`--origin must be http(s), got '${raw}'.`);
+    return new URL(u.origin);
+}
+/** The custom domain serving this origin's host: an exact host match, else the Frontend API domain. */
+function domainFor(domains, host) {
+    return domains.find((d) => d.host === host) ?? domains.find((d) => d.role === 'fapi');
+}
+async function preflightCheck(api) {
+    const report = await api.get('/v1/instance/preflight');
+    const errors = (report.findings ?? []).filter((f) => f.severity === 'error' && !f.acknowledged);
+    if (!errors.length)
+        return { id: 'preflight', ok: true, detail: 'no error findings' };
+    return {
+        id: 'preflight',
+        ok: false,
+        detail: errors.map((f) => `${f.code}: ${f.message}`).join('; '),
+        fix: errors.map((f) => `${f.code}: ${f.fix}`).join(' | '),
+    };
+}
+async function loginReadinessCheck(api, origin) {
+    const r = await api.get(`/v1/diagnostics/login_readiness?origin=${encodeURIComponent(origin)}&live=true`);
+    if (r.ready)
+        return { id: 'login_readiness', ok: true, detail: `ready for ${origin}` };
+    const failing = (r.checks ?? []).filter((c) => !c.pass && c.applies !== false);
+    return {
+        id: 'login_readiness',
+        ok: false,
+        detail: `not ready for ${origin} (${failing.map((c) => c.name).join(', ') || 'unknown hop'})`,
+        fix: failing.map((c) => c.detail).join(' ') || 'See GET /v1/diagnostics/login_readiness for the failing hop.',
+    };
+}
+/** A path mount on the origin's host: verified (active) or the step still to do. */
+async function pathMountCheck(api, host) {
+    const { data } = await api.get('/v1/domains');
+    const mount = data.find((d) => d.method === 'path' && d.host === host);
+    if (!mount)
+        return { id: 'path_mount', ok: true, detail: `no path mount on ${host}` };
+    if (mount.status === 'active')
+        return { id: 'path_mount', ok: true, detail: `${host}${mount.base_path ?? ''} verified` };
+    return {
+        id: 'path_mount',
+        ok: false,
+        detail: `${host}${mount.base_path ?? ''} is ${mount.status}${mount.failure_reason ? `: ${mount.failure_reason}` : ''}`,
+        fix: mount.action ?? `Publish the verification file, then POST /v1/domains/${mount.id}/verify.`,
+    };
+}
+async function declaredCookiesCheck(api) {
+    const cc = await api.get('/v1/instance/cookie_consent');
+    const names = new Set((cc.declared_cookies ?? []).map((c) => c.name));
+    const missing = exports.SDK_COOKIES.filter((n) => !names.has(n));
+    if (!missing.length)
+        return { id: 'declared_cookies', ok: true, detail: `declares ${exports.SDK_COOKIES.join(', ')}` };
+    return {
+        id: 'declared_cookies',
+        ok: false,
+        detail: `cookie declaration is missing ${missing.join(', ')}`,
+        fix: 'Re-import the storage declaration (GET /v1/instance/storage_declaration) into your consent manager as strictly necessary.',
+    };
+}
+const keptUntil = (v) => (typeof v === 'number' ? new Date(v * 1000).toISOString() : null);
+class StepFailed extends Error {
+    step;
+    problem;
+    fix;
+    constructor(step, problem, fix) {
+        super(problem);
+        this.step = step;
+        this.problem = problem;
+        this.fix = fix;
+    }
+}
+const trimSlash = (s) => s.replace(/\/+$/, '');
+async function golive(ctx, args) {
+    const v = args.values;
+    const origin = parseOrigin((0, args_1.str)(v, 'origin'), 'golive');
+    const dry = v['dry-run'] === true;
+    const json = (0, shared_1.wantsJson)(v);
+    const api = (0, project_1.httpFor)(ctx, (0, project_commands_1.instanceCredential)(ctx, args));
+    const fetchImpl = ctx.fetch ?? globalThis.fetch;
+    const q = (path) => (dry ? `${path}${path.includes('?') ? '&' : '?'}dry_run=true` : path);
+    const results = [];
+    let current = 'domains';
+    const pass = (id, detail) => {
+        results.push({ id, ok: true, detail });
+        if (!json)
+            ctx.io.out(`✓ ${id} — ${(0, redact_1.scrubText)(detail)}`);
+    };
+    const fail = (problem, fix) => {
+        throw new StepFailed(current, problem, fix);
+    };
+    const check = (r) => (r.ok ? pass(r.id, r.detail) : fail(r.detail, r.fix ?? ''));
+    const would = (done, planned) => (dry ? `would ${planned} (dry run)` : done);
+    try {
+        // (1) domains
+        const listed = await api.get('/v1/domains');
+        let domain = domainFor(listed.data ?? [], origin.host);
+        if (!domain) {
+            if (listed.required)
+                fail(`no custom domain for ${origin.host}, and this instance needs one`, 'Add one: POST /v1/domains {"host": "auth.<your-domain>"} (or a path mount on your app host), then publish its DNS record or file.');
+            pass('domains', 'no custom domain (not required for this instance)');
+        }
+        else if (domain.status === 'active') {
+            pass('domains', `${domain.host}${domain.base_path ?? ''} verified`);
+        }
+        else {
+            // Verifying can move the issuer, which breaks every verifier pinned to the old one: say so first.
+            const preview = await api.post(`/v1/domains/${domain.id}/verify?dry_run=true`, {});
+            if (preview?.issuer_before && preview.issuer_after && preview.issuer_before !== preview.issuer_after) {
+                const until = keptUntil(preview.previous_issuers_kept_until);
+                const pair = `issuer moves from ${preview.issuer_before} to ${preview.issuer_after}`;
+                const copy = `Add this to your token verifiers first: previousIssuers: ["${preview.issuer_before}"]${until ? ` (the old issuer is kept until ${until})` : ''}.`;
+                if (!dry && v.yes !== true)
+                    fail(`verifying ${domain.host}: ${pair}`, `${copy} Then run golive again with --yes.`);
+                pass('issuer_move', `${pair}. ${copy}`);
+            }
+            const res = await api.post(q(`/v1/domains/${domain.id}/verify`), {});
+            if (dry)
+                pass('domains', would('', `verify ${domain.host}`));
+            else if (!res.verified)
+                fail(`${domain.host} is not verified yet (${res.status})`, res.action ?? res.failure_reason ?? 'Publish the DNS record or verification file, then run golive again.');
+            else {
+                domain = { ...domain, ...res };
+                pass('domains', `${domain.host} verified`);
+            }
+        }
+        // (2) issuer
+        current = 'issuer';
+        const instance = await api.get('/v1/instance');
+        const expected = instance.issuer ? trimSlash(instance.issuer) : null;
+        if (!expected)
+            fail('the instance reports no issuer', 'Check GET /v1/instance; a verified Frontend API domain sets it.');
+        const base = domain?.method === 'path' && domain.host === origin.host
+            ? `${origin.origin}${domain.base_path ?? ''}`
+            : domain
+                ? `https://${domain.host}${domain.base_path ?? ''}`
+                : expected;
+        const discoveryUrl = `${trimSlash(base)}/.well-known/openid-configuration`;
+        let served;
+        try {
+            const res = await fetchImpl(discoveryUrl, { headers: { accept: 'application/json' } });
+            if (!res.ok)
+                fail(`${discoveryUrl} answered ${res.status}`, 'Route that path to your Atlas Frontend API (see the domain instructions in GET /v1/domains).');
+            served = (await res.json()).issuer;
+        }
+        catch (err) {
+            if (err instanceof StepFailed)
+                throw err;
+            fail(`${discoveryUrl} is unreachable (${err instanceof Error ? err.message : String(err)})`, 'Check DNS, TLS and the proxy rule for that host.');
+        }
+        if (!served || trimSlash(served) !== expected) {
+            fail(`${discoveryUrl} serves issuer ${served ?? '(none)'}, expected ${expected}`, 'Point that host/path at this instance\'s Frontend API, or verify the domain so the instance issues tokens for it.');
+        }
+        pass('issuer', `${expected}`);
+        // (3) Sign in with Atlas
+        current = 'sign_in_with_atlas';
+        const siwa = await api.get('/v1/instance/sign_in_with_atlas');
+        const declared = !siwa.turned_off_by_you && (siwa.connection_id !== null || (siwa.candidates?.length ?? 0) > 0);
+        if (siwa.enabled)
+            pass('sign_in_with_atlas', 'enabled');
+        else if (!declared)
+            pass('sign_in_with_atlas', 'not declared, skipped');
+        else {
+            if (siwa.available === false)
+                fail('declared, but Sign in with Atlas is not available on this Atlas', 'Remove the declaration, or contact your Atlas operator.');
+            const body = { enabled: true, ...(siwa.connection_id ? {} : { connection_id: siwa.candidates[0].id }) };
+            const after = await api.patch(q('/v1/instance/sign_in_with_atlas'), body);
+            if (!dry && !after.enabled)
+                fail('could not turn Sign in with Atlas on', 'PATCH /v1/instance/sign_in_with_atlas {"enabled": true} and read the error.');
+            pass('sign_in_with_atlas', would('turned on', 'turn it on'));
+        }
+        // (4) webhooks: an inactive endpoint is turned on only after its test delivery succeeds.
+        current = 'webhooks';
+        const endpoints = (await api.get('/v1/webhook_endpoints')).data ?? [];
+        const inactive = endpoints.filter((e) => !e.active);
+        for (const e of inactive) {
+            const t = await api.post(q(`/v1/webhook_endpoints/${e.id}/test?wait=10s`), {});
+            if (!dry && t.status !== 'success') {
+                fail(`test delivery to ${e.url} failed (${t.http_status ?? t.error ?? t.status ?? 'no answer'})`, `Fix the receiver, then 'atlas webhooks test ${e.id}' and run golive again.`);
+            }
+            await api.patch(q(`/v1/webhook_endpoints/${e.id}`), { active: true });
+            pass('webhooks', would(`${e.url} tested and activated`, `test and activate ${e.url}`));
+        }
+        if (!inactive.length)
+            pass('webhooks', `${endpoints.length} endpoint(s), none inactive`);
+        // (5) hooks
+        current = 'hooks';
+        const hookPath = '/v1/instance/hooks/before_user_create';
+        const hook = await api.get(hookPath);
+        if (hook.enabled)
+            pass('hooks', 'before_user_create enabled');
+        else if (!hook.url || !hook.signing_secret_set)
+            pass('hooks', 'no hook configured');
+        else {
+            const t = await api.post(q(`${hookPath}/test`), {});
+            if (!dry && !t.ok)
+                fail(`before_user_create test call failed: ${t.error?.message ?? 'no answer'}`, `Fix the endpoint (GET ${hookPath}/calls?status=failed), then run golive again.`);
+            await api.patch(q(hookPath), { enabled: true });
+            pass('hooks', would('before_user_create tested and enabled', 'test and enable before_user_create'));
+        }
+        // (6) preflight + login readiness
+        current = 'preflight';
+        check(await preflightCheck(api));
+        current = 'login_readiness';
+        check(await loginReadinessCheck(api, origin.origin));
+        // (7) integrations: only those the instance declares.
+        current = 'integrations';
+        const referrals = await optional(() => api.get('/v1/instance/referrals'));
+        if (referrals && (referrals.endpoint_url || referrals.connection_id)) {
+            current = 'integrations/referrals';
+            if (!referrals.signing_secret_set)
+                fail('referral connection has no signing secret', "Run 'atlas referrals connect' to finish it.");
+            if (referrals.connection?.last_test?.ok === true)
+                pass(current, 'connected');
+            else {
+                const t = await api.post(q('/v1/instance/referrals/test'), {});
+                if (!dry && !t.ok)
+                    fail(`connection test failed: ${t.error?.message ?? 'no answer'}`, "Run 'atlas referrals status' for details.");
+                pass(current, would('connection tested', 'test the connection'));
+            }
+        }
+        const privacy = await optional(() => api.get('/v1/instance/privacy_integrations'));
+        if (privacy?.preset) {
+            current = 'integrations/privacy';
+            if (!privacy.connected) {
+                fail(`${privacy.preset} is declared but not connected`, 'Finish it in the dashboard, or POST /v1/instance/privacy_integrations/connect with the orchestrator key and completion webhook URL.');
+            }
+            pass(current, `${privacy.preset} connected`);
+        }
+        const identity = (await optional(() => api.get('/v1/instance/integrations')))?.data ?? [];
+        for (const i of identity.filter((x) => x.connected))
+            pass(`integrations/${i.id}`, i.enabled ? 'on' : 'off');
+    }
+    catch (err) {
+        const failed = err instanceof StepFailed
+            ? err
+            : err instanceof backend_1.AtlasApiError
+                ? new StepFailed(current, `API error (HTTP ${err.status})${err.code ? ` [${err.code}]` : ''}: ${err.message}`, 'Check the key has the scopes this step needs, then run golive again.')
+                : null;
+        if (!failed)
+            throw err;
+        results.push({ id: failed.step, ok: false, detail: failed.problem, fix: failed.fix });
+        if (json)
+            (0, output_1.printJson)(ctx.io, (0, redact_1.redactDeep)({ ok: false, dry_run: dry, origin: origin.origin, steps: results }));
+        else
+            ctx.io.out((0, redact_1.scrubText)(`✗ ${failed.step} — ${failed.problem}\n  fix: ${failed.fix}`));
+        return 1;
+    }
+    if (json)
+        (0, output_1.printJson)(ctx.io, (0, redact_1.redactDeep)({ ok: true, dry_run: dry, origin: origin.origin, steps: results }));
+    else if (dry)
+        ctx.io.out('Dry run: nothing was written.');
+    return 0;
+}
+/** A read that is absent on this instance (404) is "not declared". */
+async function optional(read) {
+    try {
+        return await read();
+    }
+    catch (err) {
+        if (err instanceof backend_1.AtlasApiError && err.status === 404)
+            return undefined;
+        throw err;
+    }
+}
+//# sourceMappingURL=golive.js.map

package/dist/commands/golive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"golive.js","sourceRoot":"","sources":["../../src/commands/golive.ts"],"names":[],"mappings":";;;AAkDA,kCAUC;AAGD,8BAEC;AAED,wCAUC;AAED,kDAYC;AAGD,wCAWC;AAED,oDAWC;AAwBD,wBAuKC;AArTD,gDAAmD;AACnD,kCAA+C;AAG/C,sCAAqC;AACrC,sCAAsC;AACtC,sCAAkD;AAClD,wCAAqC;AACrC,yDAAwD;AACxD,qCAAqC;AAqCrC,iGAAiG;AACpF,QAAA,WAAW,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,CAAU,CAAC;AAE3F,gEAAgE;AAChE,SAAgB,WAAW,CAAC,GAAuB,EAAE,OAAe;IAClE,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,iBAAQ,CAAC,GAAG,OAAO,iDAAiD,CAAC,CAAC;IAC1F,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAQ,CAAC,wEAAwE,GAAG,IAAI,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,iBAAQ,CAAC,kCAAkC,GAAG,IAAI,CAAC,CAAC;IACrH,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,uGAAuG;AACvG,SAAgB,SAAS,CAAC,OAAiB,EAAE,IAAY;IACvD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;AACxF,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,GAAe;IAClD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAoC,wBAAwB,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAChG,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACtF,OAAO;QACL,EAAE,EAAE,WAAW;QACf,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/D,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;KAC1D,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,mBAAmB,CAAC,GAAe,EAAE,MAAc;IACvE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,CACrB,0CAA0C,kBAAkB,CAAC,MAAM,CAAC,YAAY,CACjF,CAAC;IACF,IAAI,CAAC,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,MAAM,EAAE,EAAE,CAAC;IACvF,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;IAC/E,OAAO;QACL,EAAE,EAAE,iBAAiB;QACrB,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,iBAAiB,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,GAAG;QAC7F,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,8DAA8D;KAC9G,CAAC;AACJ,CAAC;AAED,oFAAoF;AAC7E,KAAK,UAAU,cAAc,CAAC,GAAe,EAAE,IAAY;IAChE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAqB,aAAa,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,IAAI,EAAE,EAAE,CAAC;IACtF,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;IACzH,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,OAAO,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACtH,GAAG,EAAE,KAAK,CAAC,MAAM,IAAI,wDAAwD,KAAK,CAAC,EAAE,UAAU;KAChG,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,oBAAoB,CAAC,GAAe;IACxD,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAwD,6BAA6B,CAAC,CAAC;IAC/G,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,mBAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,mBAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IAC/G,OAAO;QACL,EAAE,EAAE,kBAAkB;QACtB,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,iCAAiC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC7D,GAAG,EAAE,2HAA2H;KACjI,CAAC;AACJ,CAAC;AAUD,MAAM,SAAS,GAAG,CAAC,CAA4B,EAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAErI,MAAM,UAAW,SAAQ,KAAK;IAEjB;IACA;IACA;IAHX,YACW,IAAY,EACZ,OAAe,EACf,GAAW;QAEpB,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAQ;QACf,QAAG,GAAH,GAAG,CAAQ;IAGtB,CAAC;CACF;AAED,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEhD,KAAK,UAAU,MAAM,CAAC,GAAe,EAAE,IAAgB;IAC5D,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,MAAM,MAAM,GAAG,WAAW,CAAC,IAAA,UAAG,EAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAA,iBAAO,EAAC,GAAG,EAAE,IAAA,qCAAkB,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAChD,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClG,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,OAAO,GAAG,SAAS,CAAC;IAExB,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,MAAc,EAAE,EAAE;QAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,IAAA,kBAAS,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,GAAW,EAAS,EAAE;QACnD,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,CAAc,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,OAAO,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE7F,IAAI,CAAC;QACH,cAAc;QACd,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAyC,aAAa,CAAC,CAAC;QACpF,IAAI,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,QAAQ;gBAAE,IAAI,CAAC,wBAAwB,MAAM,CAAC,IAAI,+BAA+B,EAAE,mIAAmI,CAAC,CAAC;YACnO,IAAI,CAAC,SAAS,EAAE,mDAAmD,CAAC,CAAC;QACvE,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtC,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,WAAW,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,kGAAkG;YAClG,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAgB,eAAe,MAAM,CAAC,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAC;YAClG,IAAI,OAAO,EAAE,aAAa,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;gBACrG,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;gBAC7D,MAAM,IAAI,GAAG,qBAAqB,OAAO,CAAC,aAAa,OAAO,OAAO,CAAC,YAAY,EAAE,CAAC;gBACrF,MAAM,IAAI,GAAG,8DAA8D,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC,kCAAkC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;gBAChK,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI;oBAAE,IAAI,CAAC,aAAa,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,GAAG,IAAI,oCAAoC,CAAC,CAAC;gBACnH,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAA+B,CAAC,CAAC,eAAe,MAAM,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YACnG,IAAI,GAAG;gBAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;iBACxD,IAAI,CAAC,GAAG,CAAC,QAAQ;gBAAE,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,yBAAyB,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,cAAc,IAAI,qEAAqE,CAAC,CAAC;iBACzL,CAAC;gBACJ,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;gBAC/B,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,IAAI,WAAW,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,aAAa;QACb,OAAO,GAAG,QAAQ,CAAC;QACnB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAA6B,cAAc,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrE,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,gCAAgC,EAAE,iEAAiE,CAAC,CAAC;QACzH,MAAM,IAAI,GACR,MAAM,EAAE,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YACtD,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE;YAC7C,CAAC,CAAC,MAAM;gBACN,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE;gBACnD,CAAC,CAAC,QAAS,CAAC;QAClB,MAAM,YAAY,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,mCAAmC,CAAC;QAC3E,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;YACvF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,IAAI,CAAC,GAAG,YAAY,aAAa,GAAG,CAAC,MAAM,EAAE,EAAE,8FAA8F,CAAC,CAAC;YAC5J,MAAM,GAAI,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC,MAAM,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,UAAU;gBAAE,MAAM,GAAG,CAAC;YACzC,IAAI,CAAC,GAAG,YAAY,oBAAoB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,kDAAkD,CAAC,CAAC;QACnJ,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,YAAY,kBAAkB,MAAM,IAAI,QAAQ,cAAc,QAAQ,EAAE,EAAE,mHAAmH,CAAC,CAAC;QACzM,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QAE9B,yBAAyB;QACzB,OAAO,GAAG,oBAAoB,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CACxB,iCAAiC,CAClC,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChH,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;aACnD,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;aACnE,CAAC;YACJ,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK;gBAAE,IAAI,CAAC,iEAAiE,EAAE,yDAAyD,CAAC,CAAC;YACjK,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,UAAW,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAC1G,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,CAAwB,CAAC,CAAC,iCAAiC,CAAC,EAAE,IAAI,CAAC,CAAC;YACjG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO;gBAAE,IAAI,CAAC,sCAAsC,EAAE,6EAA6E,CAAC,CAAC;YACxJ,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;QAC/D,CAAC;QAED,yFAAyF;QACzF,OAAO,GAAG,UAAU,CAAC;QACrB,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,CAAgE,uBAAuB,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QACrI,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACpD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAA0E,CAAC,CAAC,yBAAyB,CAAC,CAAC,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;YACxJ,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,oBAAoB,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,IAAI,WAAW,GAAG,EAAE,+CAA+C,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC;YAClL,CAAC;YACD,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,uBAAuB,EAAE,qBAAqB,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,IAAI,CAAC,UAAU,EAAE,GAAG,SAAS,CAAC,MAAM,6BAA6B,CAAC,CAAC;QAEzF,YAAY;QACZ,OAAO,GAAG,OAAO,CAAC;QAClB,MAAM,QAAQ,GAAG,uCAAuC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAwE,QAAQ,CAAC,CAAC;QAC5G,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;aACzD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB;YAAE,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;aAC/E,CAAC;YACJ,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAuD,CAAC,CAAC,GAAG,QAAQ,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1G,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,IAAI,CAAC,wCAAwC,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,WAAW,EAAE,EAAE,yBAAyB,QAAQ,+CAA+C,CAAC,CAAC;YACrL,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,uCAAuC,EAAE,oCAAoC,CAAC,CAAC,CAAC;QACtG,CAAC;QAED,kCAAkC;QAClC,OAAO,GAAG,WAAW,CAAC;QACtB,KAAK,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,OAAO,GAAG,iBAAiB,CAAC;QAC5B,KAAK,CAAC,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAErD,sDAAsD;QACtD,OAAO,GAAG,cAAc,CAAC;QACzB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CACpC,GAAG,CAAC,GAAG,CACL,wBAAwB,CACzB,CACF,CAAC;QACF,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,YAAY,IAAI,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;YACrE,OAAO,GAAG,wBAAwB,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,kBAAkB;gBAAE,IAAI,CAAC,2CAA2C,EAAE,6CAA6C,CAAC,CAAC;YACpI,IAAI,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,KAAK,IAAI;gBAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;iBACxE,CAAC;gBACJ,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAsD,CAAC,CAAC,6BAA6B,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpH,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,WAAW,EAAE,EAAE,2CAA2C,CAAC,CAAC;gBACnI,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAgD,mCAAmC,CAAC,CAAC,CAAC;QAClI,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,OAAO,GAAG,sBAAsB,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACvB,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,gCAAgC,EAAE,qIAAqI,CAAC,CAAC;YACjM,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAwE,2BAA2B,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;QACjK,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GACV,GAAG,YAAY,UAAU;YACvB,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,GAAG,YAAY,uBAAa;gBAC5B,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,mBAAmB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,OAAO,EAAE,EAAE,sEAAsE,CAAC;gBACtL,CAAC,CAAC,IAAI,CAAC;QACb,IAAI,CAAC,MAAM;YAAE,MAAM,GAAG,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACtF,IAAI,IAAI;YAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAA,mBAAU,EAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;;YACvG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAA,kBAAS,EAAC,KAAK,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,OAAO,YAAY,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACzF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI;QAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAA,mBAAU,EAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;SACtG,IAAI,GAAG;QAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,sEAAsE;AACtE,KAAK,UAAU,QAAQ,CAAI,IAAsB;IAC/C,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,uBAAa,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/commands/id-accounts.d.ts

@@ -0,0 +1,13 @@
+import { type ParsedArgs } from '../args';
+import type { RunContext } from '../context';
+/**
+ * `atlas id-accounts provision|list|rotate|remove --app <app id>`: test and
+ * review accounts for a Sign in with Atlas app (a directory reviewer login, CI,
+ * a demo). Takes a platform key with `platform:atlas_id_apps:provision`, or a
+ * per-app key scoped `atlas_id_apps:<app id>:provision`.
+ *
+ * The password (yours, via `--password-file`, or one Atlas generates) is
+ * returned once. It is written to a 0600 file next to the CLI's other secrets
+ * and never printed, except with the explicit `--print-secret` opt-out.
+ */
+export declare function idAccounts(ctx: RunContext, args: ParsedArgs): Promise<number>;

package/dist/commands/id-accounts.js

@@ -0,0 +1,195 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.idAccounts = idAccounts;
+const backend_1 = require("@atlasauth/backend");
+const args_1 = require("../args");
+const errors_1 = require("../errors");
+const output_1 = require("../output");
+const project_1 = require("../project");
+const secrets_1 = require("../secrets");
+const shared_1 = require("./shared");
+const MIN_PASSWORD_LENGTH = 12;
+const COLUMNS = [
+    { header: 'ID', get: (a) => a.id },
+    { header: 'EMAIL', get: (a) => a.email ?? '' },
+    { header: 'LABEL', get: (a) => a.label },
+    { header: 'KIND', get: (a) => a.kind },
+    { header: '2FA', get: (a) => (a.two_factor_exempt ? 'exempt' : 'required') },
+    { header: 'EXPIRES', get: (a) => (a.expires_at ? (a.expired ? `${(0, output_1.fmtTime)(a.expires_at)} (expired)` : (0, output_1.fmtTime)(a.expires_at)) : 'never') },
+    { header: 'LAST SIGN-IN', get: (a) => (a.last_sign_in_at ? (0, output_1.fmtTime)(a.last_sign_in_at) : '') },
+];
+const isPlatformKey = (key) => Boolean(key && (key.startsWith('psk_') || /^atlas_(live|test)_psk_/.test(key)));
+/**
+ * The platform key (or a per-app scoped platform key) and API URL:
+ * ATLAS_PLATFORM_KEY, else ATLAS_SECRET_KEY when it is a platform key, else the
+ * profile's stored platform key.
+ */
+function platformAuth(ctx, args) {
+    const file = ctx.config.load();
+    const profile = (0, args_1.str)(args.values, 'profile') || file.active_profile || 'default';
+    const stored = file.profiles[profile];
+    const candidates = [ctx.env.ATLAS_PLATFORM_KEY?.trim(), ctx.env.ATLAS_SECRET_KEY?.trim(), stored?.secret_key];
+    const key = candidates.find(isPlatformKey);
+    if (!key) {
+        throw new errors_1.CliError("id-accounts needs a platform key with the provision scope: platform:atlas_id_apps:provision, or atlas_id_apps:<app id>:provision for one app. Set ATLAS_PLATFORM_KEY, or store one with 'atlas login --secret-key psk_…'.");
+    }
+    return { secretKey: key, apiUrl: (0, shared_1.envApiUrl)(ctx.env) || stored?.api_url || backend_1.DEFAULT_API_URL };
+}
+/** The first non-comment line of a file (or stdin), `NAME=value` or a bare value. */
+function readPasswordFile(ctx, file) {
+    const where = file === '-' ? 'stdin' : file;
+    let text;
+    try {
+        text = ctx.readFile(file === '-' ? '/dev/stdin' : file);
+    }
+    catch {
+        throw new errors_1.CliError(`Could not read the password from ${where}.`);
+    }
+    const line = text.split(/\r?\n/).find((l) => l.trim() && !l.trim().startsWith('#')) ?? '';
+    const m = /^[A-Za-z_][A-Za-z0-9_]*=(.*)$/.exec(line.trim());
+    const password = (m ? m[1] : line).replace(/[\r\n]+$/, '').replace(/^"(.*)"$/, '$1');
+    if (!password)
+        throw new errors_1.CliError(`No password found in ${where}.`);
+    if (password.length < MIN_PASSWORD_LENGTH)
+        throw new errors_1.CliError(`The password in ${where} must be at least ${MIN_PASSWORD_LENGTH} characters.`);
+    return password;
+}
+/** `--expires-at` as the API takes it: epoch ms/seconds stay numeric, anything else is an ISO date. */
+function expiresAt(raw) {
+    if (/^\d+$/.test(raw))
+        return Number(raw);
+    if (Number.isNaN(Date.parse(raw)))
+        throw new errors_1.CliError(`--expires-at must be an ISO 8601 date (2026-12-31) or epoch milliseconds, got '${raw}'.`);
+    return raw;
+}
+/** The response with the password removed: what is safe to print or log. */
+function withoutSecrets(account) {
+    const { password: _p, sealed_password: _s, ...rest } = account;
+    void _p;
+    void _s;
+    return rest;
+}
+/**
+ * `atlas id-accounts provision|list|rotate|remove --app <app id>`: test and
+ * review accounts for a Sign in with Atlas app (a directory reviewer login, CI,
+ * a demo). Takes a platform key with `platform:atlas_id_apps:provision`, or a
+ * per-app key scoped `atlas_id_apps:<app id>:provision`.
+ *
+ * The password (yours, via `--password-file`, or one Atlas generates) is
+ * returned once. It is written to a 0600 file next to the CLI's other secrets
+ * and never printed, except with the explicit `--print-secret` opt-out.
+ */
+async function idAccounts(ctx, args) {
+    const sub = args.positionals[1];
+    const v = args.values;
+    const json = (0, shared_1.wantsJson)(v);
+    const http = () => {
+        const auth = platformAuth(ctx, args);
+        return (0, project_1.httpFor)(ctx, auth);
+    };
+    const appId = () => {
+        const app = (0, args_1.str)(v, 'app');
+        if (!app)
+            throw new errors_1.CliError(`id-accounts ${sub} needs --app <Sign in with Atlas app id>.`);
+        return app;
+    };
+    const base = (app) => `/v1/platform/atlas_id_apps/${encodeURIComponent(app)}/provisioned_accounts`;
+    const accountArg = () => {
+        const id = args.positionals[2];
+        if (!id)
+            throw new errors_1.CliError(`id-accounts ${sub} needs the test account id (see: atlas id-accounts list --app <id>).`);
+        return id;
+    };
+    const deliverPassword = (account, label) => {
+        if (!account.password) {
+            if (account.sealed_password) {
+                ctx.io.err('The password came back sealed to your secret recipient; open it with your key. Nothing was written.');
+            }
+            return undefined;
+        }
+        const entries = {
+            ATLAS_ID_TEST_EMAIL: account.email ?? '',
+            ATLAS_ID_TEST_PASSWORD: account.password,
+        };
+        const io = json ? { out: () => undefined, err: ctx.io.err } : ctx.io;
+        return (0, secrets_1.deliverSecret)({
+            io,
+            env: ctx.env,
+            product: (0, args_1.str)(v, 'product') ?? 'atlasauth',
+            fileName: `id-account-${account.id}.env`,
+            entries,
+            label,
+            printSecret: v['print-secret'] === true,
+            // A rotation always replaces; a fresh account has a fresh id, so nothing to clobber.
+            force: true,
+            comment: `Sign in with Atlas test account ${account.email ?? account.id} (${account.label}). Use it only with the app it was created for.`,
+        }).path;
+    };
+    switch (sub) {
+        case 'list': {
+            const page = await http().get(base(appId()));
+            if (json)
+                (0, output_1.printJson)(ctx.io, page);
+            else {
+                ctx.io.out((0, output_1.renderTable)(COLUMNS, page.data));
+                ctx.io.out(`${page.total} of ${page.limit} test accounts used across your apps.`);
+            }
+            return 0;
+        }
+        case 'provision': {
+            const app = appId();
+            const email = (0, args_1.str)(v, 'email');
+            const label = (0, args_1.str)(v, 'label');
+            if (!email || !label)
+                throw new errors_1.CliError('id-accounts provision needs --email <address> and --label <what it is for, e.g. reviewer>.');
+            const passwordFile = (0, args_1.str)(v, 'password-file');
+            const expires = (0, args_1.str)(v, 'expires-at');
+            const body = {
+                email,
+                label,
+                email_verified: v.unverified === true ? false : true,
+                ...(passwordFile ? { password: readPasswordFile(ctx, passwordFile) } : {}),
+                ...(v['two-factor-exempt'] === true ? { two_factor_exempt: true } : {}),
+                ...(expires ? { expires_at: expiresAt(expires) } : {}),
+            };
+            const created = await http().post(base(app), body);
+            const path = deliverPassword(created, `The password for ${created.email ?? email}`);
+            if (json)
+                (0, output_1.printJson)(ctx.io, { ...withoutSecrets(created), ...(path ? { secret_file: path } : {}) });
+            else {
+                ctx.io.out(`Created ${created.email ?? email} (${created.id}) for app ${app}${created.two_factor_exempt ? ', exempt from two-factor sign-in' : ''}${created.expires_at ? `, expires ${(0, output_1.fmtTime)(created.expires_at)}` : ', never expires'}.`);
+                if (created.two_factor_exempt) {
+                    ctx.io.out('Two-factor exemption: anyone holding this password can sign in to the app. Share it only with the review team.');
+                }
+            }
+            return 0;
+        }
+        case 'rotate': {
+            const app = appId();
+            const id = accountArg();
+            const passwordFile = (0, args_1.str)(v, 'password-file');
+            const rotated = await http().post(`${base(app)}/${encodeURIComponent(id)}/password`, passwordFile ? { password: readPasswordFile(ctx, passwordFile) } : {});
+            const path = deliverPassword(rotated, `The new password for ${rotated.email ?? id}`);
+            if (json)
+                (0, output_1.printJson)(ctx.io, { ...withoutSecrets(rotated), ...(path ? { secret_file: path } : {}) });
+            else
+                ctx.io.out('Existing sessions stay signed in; remove the account to end them.');
+            return 0;
+        }
+        case 'remove': {
+            const app = appId();
+            const id = accountArg();
+            await http().delete(`${base(app)}/${encodeURIComponent(id)}`);
+            if (json)
+                (0, output_1.printJson)(ctx.io, { id, removed: true });
+            else
+                ctx.io.out(`Removed ${id}: the account is deleted and its sessions and grants are revoked.`);
+            return 0;
+        }
+        default:
+            throw new errors_1.CliError(sub
+                ? `Unknown subcommand 'id-accounts ${sub}'. Try: provision, list, rotate, remove.`
+                : 'id-accounts needs a subcommand: provision, list, rotate, remove.');
+    }
+}
+//# sourceMappingURL=id-accounts.js.map

package/dist/commands/id-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id-accounts.js","sourceRoot":"","sources":["../../src/commands/id-accounts.ts"],"names":[],"mappings":";;AAqFA,gCA6GC;AAlMD,gDAAyH;AACzH,kCAA+C;AAE/C,sCAAqC;AACrC,sCAAyE;AACzE,wCAAqC;AACrC,wCAA2C;AAC3C,qCAAgD;AAEhD,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B,MAAM,OAAO,GAAwC;IACnD,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;IAClC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;IAC9C,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE;IACxC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;IACtC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE;IAC5E,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;IACxI,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAA,gBAAO,EAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;CAC9F,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,GAAuB,EAAiB,EAAE,CAC/D,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAElF;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAe,EAAE,IAAgB;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,SAAS,CAAC;IAChF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9G,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,iBAAQ,CAChB,2NAA2N,CAC5N,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,OAAO,IAAI,yBAAe,EAAE,CAAC;AAC9F,CAAC;AAED,qFAAqF;AACrF,SAAS,gBAAgB,CAAC,GAAe,EAAE,IAAY;IACrD,MAAM,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAQ,CAAC,oCAAoC,KAAK,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1F,MAAM,CAAC,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtF,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,iBAAQ,CAAC,wBAAwB,KAAK,GAAG,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB;QAAE,MAAM,IAAI,iBAAQ,CAAC,mBAAmB,KAAK,qBAAqB,mBAAmB,cAAc,CAAC,CAAC;IAC9I,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uGAAuG;AACvG,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,iBAAQ,CAAC,kFAAkF,GAAG,IAAI,CAAC,CAAC;IACjJ,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,SAAS,cAAc,CAAC,OAAkC;IACxD,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC/D,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;IACR,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,UAAU,CAAC,GAAe,EAAE,IAAgB;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO,IAAA,iBAAO,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,GAAG,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,iBAAQ,CAAC,eAAe,GAAG,2CAA2C,CAAC,CAAC;QAC5F,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,8BAA8B,kBAAkB,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAC3G,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,iBAAQ,CAAC,eAAe,GAAG,sEAAsE,CAAC,CAAC;QACtH,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,OAAkC,EAAE,KAAa,EAAsB,EAAE;QAChG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC5B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qGAAqG,CAAC,CAAC;YACpH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAA2B;YACtC,mBAAmB,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;YACxC,sBAAsB,EAAE,OAAO,CAAC,QAAQ;SACzC,CAAC;QACF,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACrE,OAAO,IAAA,uBAAa,EAAC;YACnB,EAAE;YACF,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,OAAO,EAAE,IAAA,UAAG,EAAC,CAAC,EAAE,SAAS,CAAC,IAAI,WAAW;YACzC,QAAQ,EAAE,cAAc,OAAO,CAAC,EAAE,MAAM;YACxC,OAAO;YACP,KAAK;YACL,WAAW,EAAE,CAAC,CAAC,cAAc,CAAC,KAAK,IAAI;YACvC,qFAAqF;YACrF,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,mCAAmC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,iDAAiD;SAC3I,CAAC,CAAC,IAAI,CAAC;IACV,CAAC,CAAC;IAEF,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC,GAAG,CAAgC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5E,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;iBAC7B,CAAC;gBACJ,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAA,oBAAW,EAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5C,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,uCAAuC,CAAC,CAAC;YACpF,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,iBAAQ,CAAC,4FAA4F,CAAC,CAAC;YACvI,MAAM,YAAY,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,eAAe,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,YAAY,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG;gBACX,KAAK;gBACL,KAAK;gBACL,cAAc,EAAE,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBACpD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC,IAAI,CAA4B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;YAC9E,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,EAAE,oBAAoB,OAAO,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;YACpF,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;iBAC/F,CAAC;gBACJ,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,WAAW,OAAO,CAAC,KAAK,IAAI,KAAK,KAAK,OAAO,CAAC,EAAE,aAAa,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,IAAA,gBAAO,EAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAChO,CAAC;gBACF,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;oBAC9B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gHAAgH,CAAC,CAAC;gBAC/H,CAAC;YACH,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,eAAe,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC,IAAI,CAA4B,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvL,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,EAAE,wBAAwB,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;YACrF,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;;gBAC/F,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;YACrF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YACxB,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9D,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;;gBAC9C,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,mEAAmE,CAAC,CAAC;YAClG,OAAO,CAAC,CAAC;QACX,CAAC;QACD;YACE,MAAM,IAAI,iBAAQ,CAChB,GAAG;gBACD,CAAC,CAAC,mCAAmC,GAAG,0CAA0C;gBAClF,CAAC,CAAC,kEAAkE,CACvE,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/commands/import-better-auth.d.ts

@@ -0,0 +1,3 @@
+import { type ParsedArgs } from '../args';
+import type { RunContext } from '../context';
+export declare function importBetterAuthBundle(ctx: RunContext, args: ParsedArgs): Promise<number>;