npm - @aventurevc/aventure-cli - Versions diffs - 0.8.54 → 0.8.55 - Mend

@aventurevc/aventure-cli 0.8.54 → 0.8.55

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (15) hide show

package/dist/aventure-cli/index.js CHANGED Viewed

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import{ci as e,hi as t,mi as n,oa as r,oi as i}from"../chunks/client-CgLlmWBR.js";import{t as a,v as o}from"../chunks/oauth-bearer-credential-CgrYm5PV.js";import{c as s,i as c,t as l}from"../chunks/openapi-commands-Dc--6Ia_.js";import{r as u}from"../chunks/text-field-CCXEou3q.js";var d=process.argv.slice(2);c(d)&&e(!1),d.includes(`--all-fields`)&&u(!0);try{if(t(),s(d,l)===`optional`)try{await a(),await o()}catch(e){i({component:n().bin[0],event:`optional_auth_materialization_failed`,message:`saved credential unavailable; continuing with credential-optional command`,error:e})}await import(`../chunks/aventure-cli-CFuXjAt5.js`)}catch(e){if(!(e instanceof r))throw e;process.stderr.write(`${e.message}\n`),process.exitCode=e.exitCode}export{};
+import{ci as e,hi as t,mi as n,oa as r,oi as i}from"../chunks/client-DR_aM5LK.js";import{t as a,v as o}from"../chunks/oauth-bearer-credential-tCAlN8V7.js";import{c as s,i as c,t as l}from"../chunks/openapi-commands-DyJ-OK0g.js";import{r as u}from"../chunks/text-field-CqnheePj.js";var d=process.argv.slice(2);c(d)&&e(!1),d.includes(`--all-fields`)&&u(!0);try{if(t(),s(d,l)===`optional`)try{await a(),await o()}catch(e){i({component:n().bin[0],event:`optional_auth_materialization_failed`,message:`saved credential unavailable; continuing with credential-optional command`,error:e})}await import(`../chunks/aventure-cli-CDYgqpPD.js`)}catch(e){if(!(e instanceof r))throw e;process.stderr.write(`${e.message}\n`),process.exitCode=e.exitCode}export{};

package/dist/aventure-cli/unified-operations.json CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "generatedFrom": "MCP_GENERATION_CONTRACT",
-  "generatedAt": "2026-10-05T03:48:01.662Z",
+  "generatedAt": "2026-10-05T04:09:52.545Z",
   "totalOperations": 135,
   "note": "Projection of MCP_GENERATION_CONTRACT - see mcp/scripts/build-unified-operations.ts header for SSOT rules.",
   "operations": [

package/dist/chunks/{aventure-cli-CFuXjAt5.js → aventure-cli-CDYgqpPD.js} RENAMED Viewed

@@ -1,4 +1,4 @@
-import{C as e,Di as t,Ei as n,S as r,Si as i,T as a,Ti as o,_ as s,a as c,aa as l,b as u,bi as d,c as f,d as p,f as m,fi as h,gi as g,i as _,ia as v,ii as y,l as b,mi as x,n as ee,o as S,oi as te,p as ne,r as re,ra as ie,sa as ae,u as oe,v as se,vi as ce,wi as le,xi as ue,yi as de}from"./client-CgLlmWBR.js";import{M as fe,O as pe,i as C,o as me,v as he,w,y as T}from"./person-owner-BJgNYLKX.js";import{A as ge,C as _e,D as ve,M as E,N as ye,O as be,S as xe,T as Se,a as Ce,b as we,c as Te,d as Ee,g as De,j as Oe,k as ke,l as Ae,m as je,o as Me,r as Ne,s as Pe,t as Fe,u as Ie,v as Le,w as Re,x as ze,y as Be}from"./oauth-bearer-credential-CgrYm5PV.js";import{C as Ve,S as He,_ as Ue,a as We,b as Ge,c as Ke,d as qe,f as Je,g as Ye,h as Xe,l as Ze,m as Qe,n as $e,o as D,p as et,r as O,s as tt,t as k,u as nt,v as rt,x as it,y as at}from"./openapi-commands-Dc--6Ia_.js";import{a as ot}from"./text-field-CCXEou3q.js";import{a as st,n as ct,o as lt,r as ut,t as dt}from"./text-response-CR6qulsY.js";import{n as ft,r as pt,t as mt}from"./oauth-login-CP5Qn-Mz.js";import{spawnSync as ht}from"node:child_process";import{basename as gt,dirname as A,resolve as j,sep as _t}from"node:path";import{copyFileSync as vt,existsSync as yt,lstatSync as bt,mkdirSync as xt,mkdtempSync as St,readFileSync as Ct,readlinkSync as wt,realpathSync as Tt,renameSync as Et,rmdirSync as Dt,unlinkSync as Ot,writeFileSync as kt}from"node:fs";import M,{stderr as N,stdin as At}from"node:process";import{TextDecoder as jt,inspect as Mt}from"node:util";import{fileURLToPath as Nt}from"node:url";import{readFile as Pt}from"node:fs/promises";import{webcrypto as Ft}from"node:crypto";import{homedir as It,hostname as Lt,platform as Rt}from"node:os";import{setTimeout as zt}from"node:timers/promises";import{createInterface as Bt}from"node:readline/promises";function Vt(e,t,r){let i={...r};for(let n of t.parameter){let t=n.envName;if(t===void 0)continue;let r=process.env[t]?.trim();if(r===void 0||r.length===0)continue;let a=i[n.optionKey];if(a!==void 0&&(typeof a!=`string`||a!==r))return{...o(`${e} ${n.flag.split(` `)[0]??n.name} conflicts with ${t}; omit the flag or use ${r}.`),data:i};a===void 0&&(i[n.optionKey]=r)}return n(`Environment-bound options applied`,i)}function Ht(e,t,n){if(!P(n))return null;for(let r of t.parameter){let t=r.envName,i=t===void 0?void 0:process.env[t]?.trim();if(t===void 0||i===void 0||i.length===0||!nn(n,r.name))continue;let a=tn(n,r.name);if(typeof a!=`string`||a!==i)return`${e} ${r.name} in --from-file conflicts with ${t}; omit the field or use ${i}.`}return null}function Ut(e){let t=new Set(e.parameter.map(({name:e})=>e));return e.kind===`multipart`?e.requiredPath:e.requiredPath.filter(e=>!t.has(e))}function Wt(e,t,r,i=!1){if(i||!on(t)||!Array.isArray(r))return cn(e,t,r);for(let[n,i]of r.entries()){let r=cn(e,t,i,n);if(!r.ok)return r}return n(`Body value assigned`,null)}function Gt(e,t,n,r){return cn(e,t,r,n)}function Kt(e){let t=[];for(let n of e.split(`.`)){let e=un(n);if(t.push(e.key),e.isArray)return t.join(`.`)}return null}function qt(e,t){let n=Kt(t);if(n===null)return null;let r=en(e,n.split(`.`));return Array.isArray(r)?{path:n,rowCount:r.length,firstHole:$t(r)}:null}function Jt(e,t){if(on(e.name)||e.schemaType===`array`)return n(`Repeated body option selected`,typeof t==`string`?[t]:t);if(!Array.isArray(t))return n(`Scalar body option selected`,t);let r=e.flag.split(` `)[0]??e.name;return t.length===1?n(`Scalar body option selected`,t[0]):o(`${r} was already given; pass it once.`)}var Yt=/^(?<row>\d+):(?<item>.*)$/su;function Xt(e,t){let n=Kt(e.name);if(e.schemaType!==`array`||n===null||t===void 0||typeof t==`boolean`)return null;let r=new Map,i=[];for(let e of typeof t==`string`?[t]:t){let t=Yt.exec(e)?.groups,n=t?.row,a=t?.item;if(n===void 0||a===void 0){i.push(e);continue}let o=r.get(Number(n));o===void 0?r.set(Number(n),[a]):o.push(a)}return r.size===0?null:{container:n,rows:r,plain:i}}function Zt(e,t,n){let r=0;for(let i of e.parameter){let e=t[i.optionKey];e!==void 0&&typeof e!=`boolean`&&Kt(i.name)===n&&(r=Math.max(r,typeof e==`string`?1:e.length))}return r}function Qt(e,t,n,r){for(let i of t.parameter){let t=n[i.optionKey];if(t===void 0)continue;let a=qt(r,i.name);if(a===null)continue;if(a.firstHole!==null)return o(`${e} has no ${a.path}[] row ${a.firstHole} — number ${a.path}[] rows from 0 with no gaps.`);if(i.schemaType!==`array`||a.rowCount<=1||Xt(i,t)!==null)continue;let s=i.flag.split(` `)[0]??i.name;return o(`${s} fills one ${a.path}[] row's list, so ${e} cannot also build ${a.rowCount} ${a.path}[] rows from direct options — prefix each value with its 0-based ${a.path}[] row index, as 0:value, or pass the rows with --from-file.`)}return null}function $t(e){for(let t=0;t<e.length;t+=1)if(e[t]===void 0)return t;return null}function en(e,t){let n=e;for(let e of t){if(!P(n))return;n=n[e]??null}return n}function tn(e,t){if(!on(t))return en(e,t.split(`.`))}function nn(e,t){return an(e,t.split(`.`))}function rn(e,t,n){if(!P(n))return null;let r=new Set(t.parameter.map(({name:e})=>e));for(let i of e)if(i!==t){for(let e of i.parameter)if(!r.has(e.name)&&nn(n,e.name))return`${e.name} in --from-file requires --content-type ${i.contentType}.`}return null}function an(e,t){let[n,...r]=t;if(n===void 0)return!0;let i=un(n);if(!P(e)||!Object.hasOwn(e,i.key))return!1;let a=e[i.key]??null;return i.isArray?Array.isArray(a)&&a.every(e=>an(e,r)):an(a,r)}function on(e){return e.split(`.`).some(e=>un(e).isArray)}function sn(e,t){return e.parameter.length===0||!P(t)?null:fn(t,[],dn(e.parameter))}function P(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function cn(e,t,r,i=0){let a=t.split(`.`),s=e;for(let[e,c]of a.entries()){let l=un(c),u=e===a.length-1,d=ln(s,l,t,u,r,i);if(!d.ok||d.data===null)return o(d.summary,d.warnings);if(u)return n(`Body value assigned`,null);s=d.data}return o(`${t} is not a valid body option path.`)}function ln(e,t,r,i,a,s){let c=()=>o(`${r} cannot be combined with another body option at ${t.key}.`),l=e[t.key];if(t.isArray){if(l!==void 0&&!Array.isArray(l))return c();let r=l??[];if(l===void 0&&(e[t.key]=r),i)return r[s]===void 0?(r[s]=a,n(`Body value assigned`,e)):c();let o=r[s];if(o===void 0){let e={};return r[s]=e,n(`Body path created`,e)}return P(o)?n(`Body path stepped`,o):c()}if(i)return l===void 0?(e[t.key]=a,n(`Body value assigned`,e)):c();if(l===void 0){let r={};return e[t.key]=r,n(`Body path created`,r)}return P(l)?n(`Body path stepped`,l):c()}function un(e){let t=e.endsWith(`[]`);return{key:t?e.slice(0,-2):e,isArray:t}}function dn(e){let t=new Set,n=new Set;for(let r of e){let e=`${r.name}${r.schemaType===`array`?`[]`:``}`;t.add(e);let i=e.split(`.`);for(let e=1;e<i.length;e+=1)n.add(i.slice(0,e).join(`.`))}return{leaf:t,prefix:n}}function fn(e,t,n){if(Array.isArray(e)){if(e.length===0)return null;for(let r of e){let e=fn(r,t,n);if(e!==null)return e}return null}if(!P(e))return null;for(let[r,i]of Object.entries(e)){let e=[...t,Array.isArray(i)?`${r}[]`:r],a=e.join(`.`);if(!pn(a,n)){if(!mn(e))continue;return{path:a,suggestion:hn(e,n)}}let o=fn(i,e,n);if(o!==null)return o}return null}function pn(e,t){return t.prefix.has(e)||t.leaf.has(e)}function mn(e){return e.slice(0,-1).some(e=>e.endsWith(`[]`))}function hn(e,t){let n=e.slice(0,-1).join(`.`),r=e.at(-1)?.replace(/\[\]$/u,``).toLowerCase()??``;return[...t.leaf].filter(e=>e.split(`.`).slice(0,-1).join(`.`)===n).map(e=>({path:e,score:gn(r,e.split(`.`).at(-1)??``)})).filter(({score:e})=>e<1/0).toSorted((e,t)=>e.score-t.score||e.path.localeCompare(t.path))[0]?.path}function gn(e,t){let n=t.replace(/\[\]$/u,``).toLowerCase();return n===e?0:n.endsWith(e)||e.endsWith(n)?1:n.includes(e)||e.includes(n)?2:1/0}function _n(e,t){let n=new Map;for(let e of t){let t=e.flag?.split(` `)[0];t!==void 0&&n.set(t,t===`--from-file`?{...e,inputType:`file`}:e)}for(let t of e){let e=t.long===void 0?void 0:n.get(t.long);e!==void 0&&t.helpGroup(He(e))}e.sort((e,t)=>{let r=e.long===void 0?void 0:n.get(e.long),i=t.long===void 0?void 0:n.get(t.long);return r!==void 0&&i!==void 0?Tn(r,i):r===void 0?i===void 0?0:1:-1})}function vn(e){let t=new Map;for(let n of e)for(let e of n.parameter){let r=e.flag.split(` `)[0]??e.flag,i=t.get(r);i===void 0?t.set(r,{variant:[{descriptor:n,parameter:e}]}):t.set(r,{variant:[...i.variant,{descriptor:n,parameter:e}]})}return[...t.values()]}function yn(e){let{flag:t}=e.variant[0].parameter;return e.variant.every(({parameter:e})=>e.flag===t)?t:`${t.split(` `)[0]??t} <value>`}function bn(e){let t=e.variant.map(({descriptor:e,parameter:t})=>({contentType:e.contentType,text:Cn(e,t)})),n=t[0];return n===void 0?``:t.every(({text:e})=>e===n.text)?`${n.text===``?``:`${n.text} `}Request content: ${t.map(({contentType:e})=>e).join(`, `)}.`:t.map(({contentType:e,text:t})=>`${e}: ${t}`).join(` `)}function xn(e,t){return[...new Set((e.cliConflicts??[]).filter(e=>e.includes(t)).flatMap(e=>e.filter(e=>e!==t)))]}function Sn(e,t){let n=e.kind===`multipart`?`Read a JSON object keyed by multipart part name from a file, or use - for stdin`:`Read the JSON request body from a file, or use - for stdin`,r=t.filter(e=>!t.some(t=>t.startsWith(`${e}.`)||t.startsWith(`${e}[].`)));return r.length===0?Ve(n):`${Ve(n)} Required JSON paths: ${r.join(`, `)}.`}function Cn(e,t){let n=Ge(t.description,void 0),r=e.kind!==`multipart`&&on(t.name),i=e.kind!==`multipart`&&t.optionKey!==t.name&&/^\w+$/u.test(t.name);return`${n}${r?` Repeat to add another value.`:``}${i?` --from-file JSON key: ${t.name}.`:``}${wn(e,t)}`}function wn(e,t){if(e.kind===`multipart`||t.schemaType!==`array`)return``;let n=Kt(t.name);return n===null?``:` Prefix each value with its 0-based ${n}[] row index, as 0:value, to fill more than one ${n}[] row. A leading digits-and-colon is always read as that index, so name the row of a value that starts the same way, as 0:0:00 for the value 0:00.`}function Tn(e,t){return it(e)-it(t)||Number(e.required!==!0)-Number(t.required!==!0)}async function En(e){let t;try{t=e===`-`?await Dn():await Pt(e,`utf8`)}catch(t){return o(`Could not read input: ${t.message}`,[`path=${e}`])}try{if(t.trim().length===0)return n(`No input provided`,null);let e=JSON.parse(t);return n(`Input parsed`,e)}catch(e){return o(`Input is not valid JSON: ${e.message}`)}}async function Dn(){if(process.stdin.isTTY)throw Error(`--from-file - requires JSON on stdin, but stdin is a TTY`);process.stdin.setEncoding(`utf8`);let e=``;for await(let t of process.stdin)e+=t;return e}var On=`--content-type`;function kn(e,t,n){let r=e=>!n?.has(e)&&(n?.add(e),!0),i=t.requestBody??[];if(i.length>1&&r(On)){let t=i.map(({contentType:e})=>e);e.addOption(new v(`${On} <media-type>`,`Select the request content type; omit for ${t[0]}.`).choices(t).argParser(jn(i)))}if(Xn(t)&&r(`--from-file`)){let n=i[0];if(n===void 0)throw Error(`${t.operationId} has no request body`);e.addOption(new v(`--from-file <path>`,Sn(n,n.requiredPath)).argParser(Nn(`--from-file`)))}let a=vn(i).filter(e=>r(F(e.variant[0].parameter)));for(let t of a.toSorted((e,t)=>Tn(e.variant[0].parameter,t.variant[0].parameter))){let{descriptor:n,parameter:r}=t.variant[0],a=new v(yn(t),i.length>1?bn(t):Cn(n,r));i.length===1&&r.envName!==void 0&&a.env(r.envName);let o=i.length===1?xn(n,r.optionKey):[];o.length>0&&a.conflicts(o),i.length>1?a.argParser(An):on(r.name)||r.schemaType===`array`?a.argParser(Mn):a.argParser(Nn(r.flag)),e.addOption(a),a.envVar!==void 0&&e.on(`optionEnv:${a.name()}`,()=>{let t=e.opts()[r.optionKey];typeof t==`string`&&t.trim()&&e.setOptionValueWithSource(r.optionKey,t.trim(),`env`)})}Yn(e,t,a)}function An(e,t){return t===void 0?e:typeof t==`string`?[t,e]:[...t,e]}function jn(e){return(t,n)=>{if(n!==void 0)throw new ae(`${On} was already given; pass it once.`);let r=a(e,t);if(!r.ok)throw new ae(r.summary);return t}}function Mn(e,t){return[...t??[],e]}function Nn(e){let t=e.split(/\s+/u)[0]??e;return(e,n)=>{if(n!==void 0)throw new ae(`${t} was already given; pass it once.`);return e}}async function Pn(e,t){let r=qe(e,t),i=a(e.requestBody??[],r);if(!i.ok||i.data===null)return o(i.summary,i.warnings);let s=i.data;if(s===void 0)return n(`No body`,void 0);let c=Fn(e,s,t);if(c!==null)return o(c);let l=Vt(e.operationId,s,t);if(!l.ok)return o(l.summary,l.warnings);t=l.data;let u=In(s,t);if(u!==null)return o(u);let d=await Bn(t);if(!d.ok)return o(d.summary,d.warnings);let f=rn(e.requestBody??[],s,d.data);if(f!==null)return o(f);let p=zn(e.operationId,s,d.data);if(!p.ok)return p;let m=Ht(e.operationId,s,d.data);if(m!==null)return o(m);let h=Vn(e.operationId,s,t);if(!h.ok)return h;if(d.data===void 0&&h.data===void 0)return s.required?o(Jn(e.operationId,s)):n(`No body`,void 0);let g=Un(e.operationId,d.data,h.data);if(!g.ok||g.data===void 0)return g;if(s.schemaType===`array`&&!Array.isArray(g.data))return o(`${e.operationId} requires a JSON array body.`);if(s.parameter.length>0&&!P(g.data)){let t=s.kind===`multipart`?` keyed by multipart part name`:` body`;return o(`${e.operationId} requires a JSON object${t}.`)}let _=Rn(s,g.data);if(_.length>0)return o(`${e.operationId} requires body option(s): ${_.join(`, `)}`);let v=g.data,y=P(v)?Ut(s).filter(e=>!nn(v,e)):[];return y.length>0?o(Ln(e.operationId,s,y)):g}function Fn(e,t,n){let r=new Set(t.parameter.map(({optionKey:e})=>e));for(let i of e.requestBody??[])if(i!==t)for(let t of i.parameter){if(r.has(t.optionKey)||n[t.optionKey]===void 0)continue;let i=(e.requestBody??[]).filter(e=>e.parameter.some(({optionKey:e})=>e===t.optionKey)).map(({contentType:e})=>e);return`${F(t)} requires ${On} ${i.join(` or `)}.`}return null}function In(e,t){for(let n of e.cliConflicts??[]){let e=n.filter(e=>t[e]!==void 0);if(e.length>1)return`Options ${e.join(`, `)} cannot be used together.`}return null}function Ln(e,t,n){let r=`${e} requires JSON body path(s): ${n.join(`, `)}`;return t.kind===`multipart`?`${r}. ${n.includes(`body`)?`For multipart --from-file, wrap the endpoint JSON under top-level "body".`:`For multipart --from-file, put the missing nested path(s) inside top-level "body".`}`:r}function Rn(e,t){return P(t)?e.parameter.filter(e=>e.required&&!nn(t,e.name)).map(F):[]}function zn(e,t,r){let i=sn(t,r);if(i===null)return n(`Body file paths validated`,null);let a=i.suggestion===void 0?``:` Use ${i.suggestion}.`;return o(`${e} --from-file contains unknown JSON path ${i.path}.${a}`)}async function Bn(e){let r=typeof e.fromFile==`string`?e.fromFile:void 0;if(r===void 0)return n(`No body file`,void 0);let i=await En(r);if(!i.ok)return o(i.summary,i.warnings);let a=t.safeParse(i.data);return a.success?n(`Input parsed`,a.data):o(`Input is not valid JSON value: ${a.error.message}`)}function Vn(e,t,r){let i={},a=!1;for(let e of t.parameter){let n=Jt(e,r[e.optionKey]);if(!n.ok||n.data===null)return o(n.summary,n.warnings);let s=n.data;if(s===void 0)continue;let c=Hn(t,r,i,e,s);if(!c.ok)return o(c.summary,c.warnings);a=!0}if(!a)return n(`No direct body options`,void 0);let s=Qt(e,t,r,i);return s===null?n(`Direct body options parsed`,i):s}function Hn(e,t,r,i,a){let s=Xt(i,a);if(s===null){let e=Kn(i,a);return e.ok?Wt(r,i.name,e.data,i.schemaType===`array`):o(e.summary,e.warnings)}if(s.plain.length>0)return o(`${F(i)} mixes row-form values with plain value(s): ${s.plain.join(`, `)} — prefix every value with its 0-based ${s.container}[] row index, as 0:value.`);let c=Zt(e,t,s.container);for(let e of s.rows.keys())if(!(e<c))return o(`${F(i)} names ${s.container}[] row ${e}, but these options build at most ${c} ${s.container}[] row(s) — number rows from 0, and name the row of a value that itself starts with digits and a colon, as 0:0:00 for the value 0:00.`);for(let[e,t]of s.rows){let n=[];for(let e of t){let t=qn(i.name,i.itemSchemaType,e);if(!t.ok)return o(t.summary,t.warnings);n.push(t.data)}let a=Gt(r,i.name,e,n);if(!a.ok)return a}return n(`Body value assigned`,null)}var F=e=>e.flag.split(` `)[0]??e.name;function Un(e,t,r){if(t===void 0)return n(`Direct body parsed`,r);if(r===void 0)return n(`Input parsed`,t);if(P(t)&&P(r))try{return n(`Input parsed`,Wn(t,r))}catch(t){return o(`${e} ${t.message}`)}return o(`${e} cannot combine --from-file with direct body options unless the file body is an object.`)}function Wn(e,t){let n={...e};for(let[e,r]of Object.entries(t)){let t=n[e];if(Array.isArray(t)&&Array.isArray(r))throw Error(`cannot combine --from-file array '${e}' with array body options at the same key — move the per-item fields inside the matching '${e}[]' object(s) in the file body.`);if(t!==void 0&&Gn(t)!==Gn(r))throw Error(`cannot combine --from-file ${Gn(t)} '${e}' with ${Gn(r)} body option(s) at the same key — align the file body shape with the schema.`);n[e]=P(t)&&P(r)?Wn(t,r):r}return n}function Gn(e){return Array.isArray(e)?`array`:P(e)?`object`:`scalar`}function Kn(e,t){if(typeof t==`boolean`)return n(`Body value parsed`,t);if(t===void 0||typeof t==`string`)return qn(e.name,e.schemaType,t??``);let r=[],i=on(e.name)&&e.schemaType!==`array`?e.schemaType:e.itemSchemaType;for(let n of t){let t=qn(e.name,i,n);if(!t.ok)return t;r.push(t.data)}return n(`Body value parsed`,r)}function qn(e,t,r){if(t===`boolean`)return r===`true`?n(`Body value parsed`,!0):r===`false`?n(`Body value parsed`,!1):o(`${e} must be true or false.`);if(t===`number`||t===`integer`){let i=r.trim(),a=Number(i);return i===``||!Number.isFinite(a)?o(`${e} must be a finite ${t}.`):t===`integer`&&!Number.isInteger(a)?o(`${e} must be an integer.`):n(`Body value parsed`,a)}return n(`Body value parsed`,r)}function Jn(e,t){let n=t.parameter.filter(e=>e.required);if(n.length>0&&t.requiredPath.every(e=>n.some(({name:t})=>t===e||t.startsWith(`${e}.`))))return`${e} requires body option(s): ${n.map(F).join(`, `)}`;let r=Ut(t);if(r.length>0)return`${e} requires --from-file with JSON body path(s): ${r.join(`, `)}`;let i=t.parameter.map(F).join(`, `);return i.length===0?`${e} requires --from-file`:`${e} requires --from-file or body option(s): ${i}`}function Yn(e,t,n){let r=[...t.parameters,...n.map(({variant:e})=>e[0].parameter)];(t.requestBody?.length??0)>1&&r.push({optionKey:`contentType`,flag:On,location:`body`}),Xn(t)&&r.push({optionKey:`fromFile`,flag:`--from-file`,location:`body`}),_n(e.options,r)}function Xn(e){return(e.requestBody??[]).some(e=>e.kind!==`multipart`||e.parameter.some(e=>e.schemaFormat!==`binary`))}function Zn(e){let t=le(e);return or(t),process.stdout.write(`${JSON.stringify(t)}\n`),t}function Qn(e){or(e);let t=dt(e.data,e.summary);if(e.ok&&t!==null){process.stdout.write(t.endsWith(`
+import{C as e,Di as t,Ei as n,S as r,Si as i,T as a,Ti as o,_ as s,a as c,aa as l,b as u,bi as d,c as f,d as p,f as m,fi as h,gi as g,i as _,ia as v,ii as y,l as b,mi as x,n as ee,o as S,oi as te,p as ne,r as re,ra as ie,sa as ae,u as oe,v as se,vi as ce,wi as le,xi as ue,yi as de}from"./client-DR_aM5LK.js";import{M as fe,O as pe,i as C,o as me,v as he,w,y as T}from"./person-owner-BJgNYLKX.js";import{A as ge,C as _e,D as ve,M as E,N as ye,O as be,S as xe,T as Se,a as Ce,b as we,c as Te,d as Ee,g as De,j as Oe,k as ke,l as Ae,m as je,o as Me,r as Ne,s as Pe,t as Fe,u as Ie,v as Le,w as Re,x as ze,y as Be}from"./oauth-bearer-credential-tCAlN8V7.js";import{C as Ve,S as He,_ as Ue,a as We,b as Ge,c as Ke,d as qe,f as Je,g as Ye,h as Xe,l as Ze,m as Qe,n as $e,o as D,p as et,r as O,s as tt,t as k,u as nt,v as rt,x as it,y as at}from"./openapi-commands-DyJ-OK0g.js";import{a as ot}from"./text-field-CqnheePj.js";import{a as st,n as ct,o as lt,r as ut,t as dt}from"./text-response-5UUZXNg8.js";import{n as ft,r as pt,t as mt}from"./oauth-login-C876ofng.js";import{spawnSync as ht}from"node:child_process";import{basename as gt,dirname as A,resolve as j,sep as _t}from"node:path";import{copyFileSync as vt,existsSync as yt,lstatSync as bt,mkdirSync as xt,mkdtempSync as St,readFileSync as Ct,readlinkSync as wt,realpathSync as Tt,renameSync as Et,rmdirSync as Dt,unlinkSync as Ot,writeFileSync as kt}from"node:fs";import M,{stderr as N,stdin as At}from"node:process";import{TextDecoder as jt,inspect as Mt}from"node:util";import{fileURLToPath as Nt}from"node:url";import{readFile as Pt}from"node:fs/promises";import{setTimeout as Ft}from"node:timers/promises";import{webcrypto as It}from"node:crypto";import{homedir as Lt,hostname as Rt,platform as zt}from"node:os";import{createInterface as Bt}from"node:readline/promises";function Vt(e,t,r){let i={...r};for(let n of t.parameter){let t=n.envName;if(t===void 0)continue;let r=process.env[t]?.trim();if(r===void 0||r.length===0)continue;let a=i[n.optionKey];if(a!==void 0&&(typeof a!=`string`||a!==r))return{...o(`${e} ${n.flag.split(` `)[0]??n.name} conflicts with ${t}; omit the flag or use ${r}.`),data:i};a===void 0&&(i[n.optionKey]=r)}return n(`Environment-bound options applied`,i)}function Ht(e,t,n){if(!P(n))return null;for(let r of t.parameter){let t=r.envName,i=t===void 0?void 0:process.env[t]?.trim();if(t===void 0||i===void 0||i.length===0||!nn(n,r.name))continue;let a=tn(n,r.name);if(typeof a!=`string`||a!==i)return`${e} ${r.name} in --from-file conflicts with ${t}; omit the field or use ${i}.`}return null}function Ut(e){let t=new Set(e.parameter.map(({name:e})=>e));return e.kind===`multipart`?e.requiredPath:e.requiredPath.filter(e=>!t.has(e))}function Wt(e,t,r,i=!1){if(i||!on(t)||!Array.isArray(r))return cn(e,t,r);for(let[n,i]of r.entries()){let r=cn(e,t,i,n);if(!r.ok)return r}return n(`Body value assigned`,null)}function Gt(e,t,n,r){return cn(e,t,r,n)}function Kt(e){let t=[];for(let n of e.split(`.`)){let e=un(n);if(t.push(e.key),e.isArray)return t.join(`.`)}return null}function qt(e,t){let n=Kt(t);if(n===null)return null;let r=en(e,n.split(`.`));return Array.isArray(r)?{path:n,rowCount:r.length,firstHole:$t(r)}:null}function Jt(e,t){if(on(e.name)||e.schemaType===`array`)return n(`Repeated body option selected`,typeof t==`string`?[t]:t);if(!Array.isArray(t))return n(`Scalar body option selected`,t);let r=e.flag.split(` `)[0]??e.name;return t.length===1?n(`Scalar body option selected`,t[0]):o(`${r} was already given; pass it once.`)}var Yt=/^(?<row>\d+):(?<item>.*)$/su;function Xt(e,t){let n=Kt(e.name);if(e.schemaType!==`array`||n===null||t===void 0||typeof t==`boolean`)return null;let r=new Map,i=[];for(let e of typeof t==`string`?[t]:t){let t=Yt.exec(e)?.groups,n=t?.row,a=t?.item;if(n===void 0||a===void 0){i.push(e);continue}let o=r.get(Number(n));o===void 0?r.set(Number(n),[a]):o.push(a)}return r.size===0?null:{container:n,rows:r,plain:i}}function Zt(e,t,n){let r=0;for(let i of e.parameter){let e=t[i.optionKey];e!==void 0&&typeof e!=`boolean`&&Kt(i.name)===n&&(r=Math.max(r,typeof e==`string`?1:e.length))}return r}function Qt(e,t,n,r){for(let i of t.parameter){let t=n[i.optionKey];if(t===void 0)continue;let a=qt(r,i.name);if(a===null)continue;if(a.firstHole!==null)return o(`${e} has no ${a.path}[] row ${a.firstHole} — number ${a.path}[] rows from 0 with no gaps.`);if(i.schemaType!==`array`||a.rowCount<=1||Xt(i,t)!==null)continue;let s=i.flag.split(` `)[0]??i.name;return o(`${s} fills one ${a.path}[] row's list, so ${e} cannot also build ${a.rowCount} ${a.path}[] rows from direct options — prefix each value with its 0-based ${a.path}[] row index, as 0:value, or pass the rows with --from-file.`)}return null}function $t(e){for(let t=0;t<e.length;t+=1)if(e[t]===void 0)return t;return null}function en(e,t){let n=e;for(let e of t){if(!P(n))return;n=n[e]??null}return n}function tn(e,t){if(!on(t))return en(e,t.split(`.`))}function nn(e,t){return an(e,t.split(`.`))}function rn(e,t,n){if(!P(n))return null;let r=new Set(t.parameter.map(({name:e})=>e));for(let i of e)if(i!==t){for(let e of i.parameter)if(!r.has(e.name)&&nn(n,e.name))return`${e.name} in --from-file requires --content-type ${i.contentType}.`}return null}function an(e,t){let[n,...r]=t;if(n===void 0)return!0;let i=un(n);if(!P(e)||!Object.hasOwn(e,i.key))return!1;let a=e[i.key]??null;return i.isArray?Array.isArray(a)&&a.every(e=>an(e,r)):an(a,r)}function on(e){return e.split(`.`).some(e=>un(e).isArray)}function sn(e,t){return e.parameter.length===0||!P(t)?null:fn(t,[],dn(e.parameter))}function P(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function cn(e,t,r,i=0){let a=t.split(`.`),s=e;for(let[e,c]of a.entries()){let l=un(c),u=e===a.length-1,d=ln(s,l,t,u,r,i);if(!d.ok||d.data===null)return o(d.summary,d.warnings);if(u)return n(`Body value assigned`,null);s=d.data}return o(`${t} is not a valid body option path.`)}function ln(e,t,r,i,a,s){let c=()=>o(`${r} cannot be combined with another body option at ${t.key}.`),l=e[t.key];if(t.isArray){if(l!==void 0&&!Array.isArray(l))return c();let r=l??[];if(l===void 0&&(e[t.key]=r),i)return r[s]===void 0?(r[s]=a,n(`Body value assigned`,e)):c();let o=r[s];if(o===void 0){let e={};return r[s]=e,n(`Body path created`,e)}return P(o)?n(`Body path stepped`,o):c()}if(i)return l===void 0?(e[t.key]=a,n(`Body value assigned`,e)):c();if(l===void 0){let r={};return e[t.key]=r,n(`Body path created`,r)}return P(l)?n(`Body path stepped`,l):c()}function un(e){let t=e.endsWith(`[]`);return{key:t?e.slice(0,-2):e,isArray:t}}function dn(e){let t=new Set,n=new Set;for(let r of e){let e=`${r.name}${r.schemaType===`array`?`[]`:``}`;t.add(e);let i=e.split(`.`);for(let e=1;e<i.length;e+=1)n.add(i.slice(0,e).join(`.`))}return{leaf:t,prefix:n}}function fn(e,t,n){if(Array.isArray(e)){if(e.length===0)return null;for(let r of e){let e=fn(r,t,n);if(e!==null)return e}return null}if(!P(e))return null;for(let[r,i]of Object.entries(e)){let e=[...t,Array.isArray(i)?`${r}[]`:r],a=e.join(`.`);if(!pn(a,n)){if(!mn(e))continue;return{path:a,suggestion:hn(e,n)}}let o=fn(i,e,n);if(o!==null)return o}return null}function pn(e,t){return t.prefix.has(e)||t.leaf.has(e)}function mn(e){return e.slice(0,-1).some(e=>e.endsWith(`[]`))}function hn(e,t){let n=e.slice(0,-1).join(`.`),r=e.at(-1)?.replace(/\[\]$/u,``).toLowerCase()??``;return[...t.leaf].filter(e=>e.split(`.`).slice(0,-1).join(`.`)===n).map(e=>({path:e,score:gn(r,e.split(`.`).at(-1)??``)})).filter(({score:e})=>e<1/0).toSorted((e,t)=>e.score-t.score||e.path.localeCompare(t.path))[0]?.path}function gn(e,t){let n=t.replace(/\[\]$/u,``).toLowerCase();return n===e?0:n.endsWith(e)||e.endsWith(n)?1:n.includes(e)||e.includes(n)?2:1/0}function _n(e,t){let n=new Map;for(let e of t){let t=e.flag?.split(` `)[0];t!==void 0&&n.set(t,t===`--from-file`?{...e,inputType:`file`}:e)}for(let t of e){let e=t.long===void 0?void 0:n.get(t.long);e!==void 0&&t.helpGroup(He(e))}e.sort((e,t)=>{let r=e.long===void 0?void 0:n.get(e.long),i=t.long===void 0?void 0:n.get(t.long);return r!==void 0&&i!==void 0?Tn(r,i):r===void 0?i===void 0?0:1:-1})}function vn(e){let t=new Map;for(let n of e)for(let e of n.parameter){let r=e.flag.split(` `)[0]??e.flag,i=t.get(r);i===void 0?t.set(r,{variant:[{descriptor:n,parameter:e}]}):t.set(r,{variant:[...i.variant,{descriptor:n,parameter:e}]})}return[...t.values()]}function yn(e){let{flag:t}=e.variant[0].parameter;return e.variant.every(({parameter:e})=>e.flag===t)?t:`${t.split(` `)[0]??t} <value>`}function bn(e){let t=e.variant.map(({descriptor:e,parameter:t})=>({contentType:e.contentType,text:Cn(e,t)})),n=t[0];return n===void 0?``:t.every(({text:e})=>e===n.text)?`${n.text===``?``:`${n.text} `}Request content: ${t.map(({contentType:e})=>e).join(`, `)}.`:t.map(({contentType:e,text:t})=>`${e}: ${t}`).join(` `)}function xn(e,t){return[...new Set((e.cliConflicts??[]).filter(e=>e.includes(t)).flatMap(e=>e.filter(e=>e!==t)))]}function Sn(e,t){let n=e.kind===`multipart`?`Read a JSON object keyed by multipart part name from a file, or use - for stdin`:`Read the JSON request body from a file, or use - for stdin`,r=t.filter(e=>!t.some(t=>t.startsWith(`${e}.`)||t.startsWith(`${e}[].`)));return r.length===0?Ve(n):`${Ve(n)} Required JSON paths: ${r.join(`, `)}.`}function Cn(e,t){let n=Ge(t.description,void 0),r=e.kind!==`multipart`&&on(t.name),i=e.kind!==`multipart`&&t.optionKey!==t.name&&/^\w+$/u.test(t.name);return`${n}${r?` Repeat to add another value.`:``}${i?` --from-file JSON key: ${t.name}.`:``}${wn(e,t)}`}function wn(e,t){if(e.kind===`multipart`||t.schemaType!==`array`)return``;let n=Kt(t.name);return n===null?``:` Prefix each value with its 0-based ${n}[] row index, as 0:value, to fill more than one ${n}[] row. A leading digits-and-colon is always read as that index, so name the row of a value that starts the same way, as 0:0:00 for the value 0:00.`}function Tn(e,t){return it(e)-it(t)||Number(e.required!==!0)-Number(t.required!==!0)}async function En(e){let t;try{t=e===`-`?await Dn():await Pt(e,`utf8`)}catch(t){return o(`Could not read input: ${t.message}`,[`path=${e}`])}try{if(t.trim().length===0)return n(`No input provided`,null);let e=JSON.parse(t);return n(`Input parsed`,e)}catch(e){return o(`Input is not valid JSON: ${e.message}`)}}async function Dn(){if(process.stdin.isTTY)throw Error(`--from-file - requires JSON on stdin, but stdin is a TTY`);process.stdin.setEncoding(`utf8`);let e=``;for await(let t of process.stdin)e+=t;return e}var On=`--content-type`;function kn(e,t,n){let r=e=>!n?.has(e)&&(n?.add(e),!0),i=t.requestBody??[];if(i.length>1&&r(On)){let t=i.map(({contentType:e})=>e);e.addOption(new v(`${On} <media-type>`,`Select the request content type; omit for ${t[0]}.`).choices(t).argParser(jn(i)))}if(Xn(t)&&r(`--from-file`)){let n=i[0];if(n===void 0)throw Error(`${t.operationId} has no request body`);e.addOption(new v(`--from-file <path>`,Sn(n,n.requiredPath)).argParser(Nn(`--from-file`)))}let a=vn(i).filter(e=>r(F(e.variant[0].parameter)));for(let t of a.toSorted((e,t)=>Tn(e.variant[0].parameter,t.variant[0].parameter))){let{descriptor:n,parameter:r}=t.variant[0],a=new v(yn(t),i.length>1?bn(t):Cn(n,r));i.length===1&&r.envName!==void 0&&a.env(r.envName);let o=i.length===1?xn(n,r.optionKey):[];o.length>0&&a.conflicts(o),i.length>1?a.argParser(An):on(r.name)||r.schemaType===`array`?a.argParser(Mn):a.argParser(Nn(r.flag)),e.addOption(a),a.envVar!==void 0&&e.on(`optionEnv:${a.name()}`,()=>{let t=e.opts()[r.optionKey];typeof t==`string`&&t.trim()&&e.setOptionValueWithSource(r.optionKey,t.trim(),`env`)})}Yn(e,t,a)}function An(e,t){return t===void 0?e:typeof t==`string`?[t,e]:[...t,e]}function jn(e){return(t,n)=>{if(n!==void 0)throw new ae(`${On} was already given; pass it once.`);let r=a(e,t);if(!r.ok)throw new ae(r.summary);return t}}function Mn(e,t){return[...t??[],e]}function Nn(e){let t=e.split(/\s+/u)[0]??e;return(e,n)=>{if(n!==void 0)throw new ae(`${t} was already given; pass it once.`);return e}}async function Pn(e,t){let r=qe(e,t),i=a(e.requestBody??[],r);if(!i.ok||i.data===null)return o(i.summary,i.warnings);let s=i.data;if(s===void 0)return n(`No body`,void 0);let c=Fn(e,s,t);if(c!==null)return o(c);let l=Vt(e.operationId,s,t);if(!l.ok)return o(l.summary,l.warnings);t=l.data;let u=In(s,t);if(u!==null)return o(u);let d=await Bn(t);if(!d.ok)return o(d.summary,d.warnings);let f=rn(e.requestBody??[],s,d.data);if(f!==null)return o(f);let p=zn(e.operationId,s,d.data);if(!p.ok)return p;let m=Ht(e.operationId,s,d.data);if(m!==null)return o(m);let h=Vn(e.operationId,s,t);if(!h.ok)return h;if(d.data===void 0&&h.data===void 0)return s.required?o(Jn(e.operationId,s)):n(`No body`,void 0);let g=Un(e.operationId,d.data,h.data);if(!g.ok||g.data===void 0)return g;if(s.schemaType===`array`&&!Array.isArray(g.data))return o(`${e.operationId} requires a JSON array body.`);if(s.parameter.length>0&&!P(g.data)){let t=s.kind===`multipart`?` keyed by multipart part name`:` body`;return o(`${e.operationId} requires a JSON object${t}.`)}let _=Rn(s,g.data);if(_.length>0)return o(`${e.operationId} requires body option(s): ${_.join(`, `)}`);let v=g.data,y=P(v)?Ut(s).filter(e=>!nn(v,e)):[];return y.length>0?o(Ln(e.operationId,s,y)):g}function Fn(e,t,n){let r=new Set(t.parameter.map(({optionKey:e})=>e));for(let i of e.requestBody??[])if(i!==t)for(let t of i.parameter){if(r.has(t.optionKey)||n[t.optionKey]===void 0)continue;let i=(e.requestBody??[]).filter(e=>e.parameter.some(({optionKey:e})=>e===t.optionKey)).map(({contentType:e})=>e);return`${F(t)} requires ${On} ${i.join(` or `)}.`}return null}function In(e,t){for(let n of e.cliConflicts??[]){let e=n.filter(e=>t[e]!==void 0);if(e.length>1)return`Options ${e.join(`, `)} cannot be used together.`}return null}function Ln(e,t,n){let r=`${e} requires JSON body path(s): ${n.join(`, `)}`;return t.kind===`multipart`?`${r}. ${n.includes(`body`)?`For multipart --from-file, wrap the endpoint JSON under top-level "body".`:`For multipart --from-file, put the missing nested path(s) inside top-level "body".`}`:r}function Rn(e,t){return P(t)?e.parameter.filter(e=>e.required&&!nn(t,e.name)).map(F):[]}function zn(e,t,r){let i=sn(t,r);if(i===null)return n(`Body file paths validated`,null);let a=i.suggestion===void 0?``:` Use ${i.suggestion}.`;return o(`${e} --from-file contains unknown JSON path ${i.path}.${a}`)}async function Bn(e){let r=typeof e.fromFile==`string`?e.fromFile:void 0;if(r===void 0)return n(`No body file`,void 0);let i=await En(r);if(!i.ok)return o(i.summary,i.warnings);let a=t.safeParse(i.data);return a.success?n(`Input parsed`,a.data):o(`Input is not valid JSON value: ${a.error.message}`)}function Vn(e,t,r){let i={},a=!1;for(let e of t.parameter){let n=Jt(e,r[e.optionKey]);if(!n.ok||n.data===null)return o(n.summary,n.warnings);let s=n.data;if(s===void 0)continue;let c=Hn(t,r,i,e,s);if(!c.ok)return o(c.summary,c.warnings);a=!0}if(!a)return n(`No direct body options`,void 0);let s=Qt(e,t,r,i);return s===null?n(`Direct body options parsed`,i):s}function Hn(e,t,r,i,a){let s=Xt(i,a);if(s===null){let e=Kn(i,a);return e.ok?Wt(r,i.name,e.data,i.schemaType===`array`):o(e.summary,e.warnings)}if(s.plain.length>0)return o(`${F(i)} mixes row-form values with plain value(s): ${s.plain.join(`, `)} — prefix every value with its 0-based ${s.container}[] row index, as 0:value.`);let c=Zt(e,t,s.container);for(let e of s.rows.keys())if(!(e<c))return o(`${F(i)} names ${s.container}[] row ${e}, but these options build at most ${c} ${s.container}[] row(s) — number rows from 0, and name the row of a value that itself starts with digits and a colon, as 0:0:00 for the value 0:00.`);for(let[e,t]of s.rows){let n=[];for(let e of t){let t=qn(i.name,i.itemSchemaType,e);if(!t.ok)return o(t.summary,t.warnings);n.push(t.data)}let a=Gt(r,i.name,e,n);if(!a.ok)return a}return n(`Body value assigned`,null)}var F=e=>e.flag.split(` `)[0]??e.name;function Un(e,t,r){if(t===void 0)return n(`Direct body parsed`,r);if(r===void 0)return n(`Input parsed`,t);if(P(t)&&P(r))try{return n(`Input parsed`,Wn(t,r))}catch(t){return o(`${e} ${t.message}`)}return o(`${e} cannot combine --from-file with direct body options unless the file body is an object.`)}function Wn(e,t){let n={...e};for(let[e,r]of Object.entries(t)){let t=n[e];if(Array.isArray(t)&&Array.isArray(r))throw Error(`cannot combine --from-file array '${e}' with array body options at the same key — move the per-item fields inside the matching '${e}[]' object(s) in the file body.`);if(t!==void 0&&Gn(t)!==Gn(r))throw Error(`cannot combine --from-file ${Gn(t)} '${e}' with ${Gn(r)} body option(s) at the same key — align the file body shape with the schema.`);n[e]=P(t)&&P(r)?Wn(t,r):r}return n}function Gn(e){return Array.isArray(e)?`array`:P(e)?`object`:`scalar`}function Kn(e,t){if(typeof t==`boolean`)return n(`Body value parsed`,t);if(t===void 0||typeof t==`string`)return qn(e.name,e.schemaType,t??``);let r=[],i=on(e.name)&&e.schemaType!==`array`?e.schemaType:e.itemSchemaType;for(let n of t){let t=qn(e.name,i,n);if(!t.ok)return t;r.push(t.data)}return n(`Body value parsed`,r)}function qn(e,t,r){if(t===`boolean`)return r===`true`?n(`Body value parsed`,!0):r===`false`?n(`Body value parsed`,!1):o(`${e} must be true or false.`);if(t===`number`||t===`integer`){let i=r.trim(),a=Number(i);return i===``||!Number.isFinite(a)?o(`${e} must be a finite ${t}.`):t===`integer`&&!Number.isInteger(a)?o(`${e} must be an integer.`):n(`Body value parsed`,a)}return n(`Body value parsed`,r)}function Jn(e,t){let n=t.parameter.filter(e=>e.required);if(n.length>0&&t.requiredPath.every(e=>n.some(({name:t})=>t===e||t.startsWith(`${e}.`))))return`${e} requires body option(s): ${n.map(F).join(`, `)}`;let r=Ut(t);if(r.length>0)return`${e} requires --from-file with JSON body path(s): ${r.join(`, `)}`;let i=t.parameter.map(F).join(`, `);return i.length===0?`${e} requires --from-file`:`${e} requires --from-file or body option(s): ${i}`}function Yn(e,t,n){let r=[...t.parameters,...n.map(({variant:e})=>e[0].parameter)];(t.requestBody?.length??0)>1&&r.push({optionKey:`contentType`,flag:On,location:`body`}),Xn(t)&&r.push({optionKey:`fromFile`,flag:`--from-file`,location:`body`}),_n(e.options,r)}function Xn(e){return(e.requestBody??[]).some(e=>e.kind!==`multipart`||e.parameter.some(e=>e.schemaFormat!==`binary`))}function Zn(e){let t=le(e);return or(t),process.stdout.write(`${JSON.stringify(t)}\n`),t}function Qn(e){or(e);let t=dt(e.data,e.summary);if(e.ok&&t!==null){process.stdout.write(t.endsWith(`
 `)?t:`${t}\n`),$n(e);return}let n=e.ok?`OK`:`FAIL`;process.stdout.write(`[${n}] ${e.summary}\n`),!e.ok&&e.problem!==void 0&&nr(e.problem),$n(e)}function $n(e){e.ids.length>0&&process.stdout.write(`  ids: ${e.ids.join(`, `)}\n`);for(let[t,n]of Object.entries(e.counts))process.stdout.write(`  ${t}: ${n}\n`);for(let t of e.references)process.stdout.write(`  ref: ${t}\n`);if(e.truncation!==void 0){let t=e.truncation.omitted.join(`, `);process.stdout.write(`  truncated: byteLength=${e.truncation.byteLength} maxBytes=${e.truncation.maxBytes} omitted=${t}\n`),process.stdout.write(`  recovery: ${e.truncation.recovery}\n`)}for(let t of e.warnings)process.stdout.write(`  warn: ${t}\n`)}function I(e,t){if(e.mode===`data`||e.mode===`data-full`){let n=e.mode===`data`?le(t):t;or(n),process.stdout.write(`${JSON.stringify(n.ok&&n.truncated!==!0?er(n.data):n)}\n`),n.ok||(process.exitCode=1);return}let n=e.mode===`json`?Zn(t):t;e.mode===`text`&&Qn(n),n.ok||(process.exitCode=1)}function er(e){return typeof e!=`object`||!e||Array.isArray(e)||!Reflect.has(e,`method`)||!Reflect.has(e,`endpoint`)||!(`response`in e)||e.response===void 0?e:e.response}function tr(e,t){let n=ct(t);if(n===null){process.stderr.write(`explain: the response carried no search interpretation
 `),process.exitCode=1;return}(e===`text`?process.stdout:process.stderr).write(n)}function nr(e){typeof e.code==`string`&&process.stdout.write(`  code: ${e.code}\n`),typeof e.detail==`string`&&process.stdout.write(`  detail: ${e.detail}\n`),typeof e.hint==`string`&&process.stdout.write(`  hint: ${e.hint}\n`),typeof e.suggestion==`string`&&process.stdout.write(`  suggestion: ${e.suggestion}\n`);let t=Object.entries(e.suggestions??{});if(t.length>0){let e=t.map(([e,t])=>`${e}=${t}`).join(`; `);process.stdout.write(`  suggestions: ${e}\n`)}typeof e.requiredRole==`string`&&process.stdout.write(`  requiredRole: ${e.requiredRole}\n`),rr(e),ir(`unknownParameters`,e.unknownParameters),ir(`validParameters`,e.validParameters),ar(e.resolution)}function rr(e){let t=[];typeof e.limitType==`string`&&t.push(`limitType=${e.limitType}`),typeof e.used==`number`&&t.push(`used=${e.used}`),typeof e.limit==`number`&&t.push(`limit=${e.limit}`),typeof e.remaining==`number`&&t.push(`remaining=${e.remaining}`),typeof e.resetAt==`string`&&t.push(`resetAt=${e.resetAt}`),typeof e.windowSeconds==`number`&&t.push(`windowSeconds=${e.windowSeconds}`),typeof e.retryAfterSeconds==`number`&&t.push(`retryAfterSeconds=${e.retryAfterSeconds}`),t.length>0&&process.stdout.write(`  meter: ${t.join(` `)}\n`)}function ir(e,t){t!=null&&t.length>0&&process.stdout.write(`  ${e}: ${t.join(`, `)}\n`)}function ar(e){if(e==null)return;let t=[`action=${e.action}`];typeof e.parameter==`string`&&t.push(`parameter=${e.parameter}`),typeof e.fieldPath==`string`&&t.push(`fieldPath=${e.fieldPath}`),typeof e.endpoint==`string`&&t.push(`endpoint=${e.endpoint}`),e.acceptedValue!==null&&e.acceptedValue!==void 0&&e.acceptedValue.length>0&&t.push(`acceptedValue=${e.acceptedValue.join(`, `)}`),typeof e.retryable==`boolean`&&t.push(`retryable=${e.retryable}`),process.stdout.write(`  resolution: ${t.join(` `)}\n`)}function or(e){e.ok&&e.warnings.length===0||te({component:x().bin[0],event:e.ok?`command_warning`:`command_failed`,message:e.warnings.length>0?e.warnings.join(` | `):e.summary,fields:{warningCount:e.warnings.length,summary:e.summary}})}function sr(e,t,r=x().bin[0]){let i=e.limit===void 0?void 0:Number(e.limit);if(i!==void 0&&(e.limit?.trim()===``||!Number.isInteger(i)||i<0))return o(`Invalid --limit value: ${JSON.stringify(e.limit)} (expected a non-negative integer)`,["Pass a non-negative integer, e.g. `--limit 20`."]);let a=ut(e.q??``,ur(t,r).filter(t=>mr(t,e)),e=>({...e,cliPath:e.cli.path,enumParameter:e.flags.map(({choices:e,location:t})=>({values:e,direct:t!==`body`})),parameterName:e.flags.flatMap(({wireName:e,optionKey:t})=>[e,t]),parameterDescription:[e.body.description,...e.flags.map(({description:e})=>e)]})).map(({item:e})=>e),s=a.slice(0,i);return n(`Operation catalog matches`,{operation:s,count:{totalOperations:t.length,matched:a.length,returned:s.length}})}function cr(e,t,r=x().bin[0]){let i=ur(t,r),a=e.operationId===void 0?lr(i,e.command):i.find(t=>t.operationId===e.operationId);if(a===void 0){let n=Dr(e.command??``),a=i.map(e=>e.cli.command).filter(e=>e.startsWith(`${r} ${n} `));if(a.length>0)return o(`${n} is a command group; show one of its subcommands.`,[`Run \`${r} command-catalog show --command "<subcommand>"\` with one of:`,...a]);let s=n.split(` `),c=new Set([...[...s.keys()].map(e=>s.slice(e+1).join(` `)),...s.slice(1).map((e,t)=>s.toSpliced(t,2,`${s[t]}-${e}`).join(` `))]),l=sr({q:e.command??e.operationId},t,r),u=[...i.filter(({cli:e})=>e.path.length>1&&c.has(e.path.join(` `))).toSorted((e,t)=>t.cli.path.length-e.cli.path.length),...l.data?.operation??[]];return o(`Generated operation not found`,[...[...new Set(u.map(({cli:e,operationId:t})=>`${e.command} (operationId ${t})`))].slice(0,3).map(e=>`closest: ${e}`),`List candidates with \`${r} command-catalog search "<text>"\`.`])}return n(`Generated operation detail`,{operation:a,usage:gr(a,i)})}function lr(e,t){if(t===void 0)return;let{bin:n}=x(),r=Dr(t,n);return e.find(e=>Dr(e.cli.command,n)===r)}function ur(t,n){return t.map(t=>{let i=t.requestBody??[],a=[...t.parameters.map(e=>dr(e)),...i.flatMap(e=>e.parameter.map(t=>dr(t,i.length>1?e.contentType:void 0))),...fr(i)],o=[n,...t.cliPath].join(` `),s=r(t.intent),c=t.method===`DELETE`||t.intent===`delete`,l=i[0];return{operationId:t.operationId,method:t.method,path:t.path,resource:t.resource,intent:t.intent,scope:t.scope,mutates:s,destructive:c,auth:t.auth,cli:{command:o,path:t.cliPath},mcpTool:t.binaryResponse?null:e(t.intent),body:{hasBody:l!==void 0,kind:l?.kind??null,...l!==void 0&&i.length>1?{contentType:l.contentType}:{},required:l?.required??!1,description:l?.description??``,requiredPath:l?.requiredPath??[]},flags:a,errorResponse:t.errorResponse,summary:t.summary,description:t.description,deprecated:t.deprecated}})}function dr(e,t){let n=e.flag.split(/\s+/u);return{name:n[0]??e.flag,optionKey:e.optionKey,wireName:e.name,location:e.location,required:e.required,placeholder:n.length<=1?null:n.slice(1).join(` `),description:e.description,choices:e.choices??[],...t===void 0?{}:{contentType:t}}}function fr(e){if((e?.length??0)<=1)return[];let t=e?.map(({contentType:e})=>e)??[];return[{name:`--content-type`,optionKey:`contentType`,wireName:`Content-Type`,location:`body`,required:!1,placeholder:`<media-type>`,description:`Select the request content type; omit for ${t[0]}.`,choices:t}]}function pr(e){return e.flags.filter(({contentType:t})=>t===void 0||t===e.body.contentType)}function mr(e,t){return!(t.root!==void 0&&!hr(e,t.root)||t.scope!==void 0&&t.scope!==`all`&&t.scope!==e.scope||t.mutates!==void 0&&t.mutates!==`any`&&t.mutates===`true`!==e.mutates||t.destructive!==void 0&&t.destructive!==`any`&&t.destructive===`true`!==e.destructive||t.intent!==void 0&&t.intent!==`all`&&t.intent!==e.intent||t.method!==void 0&&t.method!==`all`&&t.method!==e.method)}function hr(e,t){let n=lt(t);return n.length===0||lt(e.cli.path.at(0)??``)===n}function gr(e,t){let n=pr(e),r=n.filter(e=>e.required),i=n.filter(e=>!e.required);return[`cli: ${e.cli.command}`,`${e.method} ${e.path}`,`operationId: ${e.operationId}`,`resource: ${e.resource}`,`intent: ${e.intent}`,`scope: ${e.scope}`,`mutates: ${e.mutates}`,`destructive: ${e.destructive}`,`mcpTool: ${e.mcpTool??`unavailable (binary CLI operation)`}`,e.body.hasBody?`body: kind=${e.body.kind??`unknown`} required=${e.body.required} requiredPath=${e.body.requiredPath.join(`,`)}`:`body: none`,L(`required path flags`,r,`path`),L(`required query flags`,r,`query`),L(`required header flags`,r,`header`),L(`required body flags`,r,`body`),L(`optional path flags`,i,`path`),L(`optional query flags`,i,`query`),L(`optional header flags`,i,`header`),L(`optional body flags`,i,`body`),...Sr(e,t),..._r(e.errorResponse),``,e.summary,e.description].filter(e=>e.length>0).join(`
 `)}function _r(e){return e.length===0?[]:[`Errors:`,...e.map(({status:e,description:t})=>`  ${e} ${t}`)]}var vr=[`-id`,`-slug`,`-url`],yr=[`--id`,`--slug`,`--url`],br=`--from-file "<path>"`;function xr(e,t,n=x().bin[0]){let r=ur(t,n),i=r.find(t=>t.operationId===e);return i===void 0?[]:Sr(i,r)}function Sr(e,t){return[`example: ${[e.cli.command,...wr(e),`--data`].join(` `)}`,...Cr(e,t)]}function Cr(e,t){return pr(e).flatMap(e=>{if(!e.required||!e.optionKey.endsWith(`Id`))return[];let n=`${e.optionKey.slice(0,-2)}Slug`,r=t.find(e=>e.method===`GET`&&/\/lookup(?:-exact)?$/u.test(e.path)&&e.flags.some(e=>e.optionKey===n)),i=r?.flags.find(e=>e.optionKey===n);if(r===void 0||i===void 0)return[];let a=`${r.cli.command} ${Er(i)} --data`,o=t.find(e=>e.method===`POST`&&e.path===r.path.replace(/-exact$/u,``)),s=o?.flags.find(e=>e.optionKey===`name`),c=`lookup: ${e.name} from a slug: ${a}`;return o===void 0||s===void 0?[c]:[c,`lookup: ${e.name} from a name or URL: ${o.cli.command} ${Er(s)} --data, then match.owner.${e.optionKey} when status is MATCHED`]})}function wr(e){let t=pr(e).filter(e=>e.required),n=(t.length>0?t:Tr(e)).map(Er);return(e.body.required||e.body.requiredPath.length>0)&&!t.some(e=>e.location===`body`)?[...n,br]:n}function Tr(e){let t=new Set;st(t,e.resource);for(let n of vr)for(let r of t){let t=e.flags.find(e=>e.name===`--${r}${n}`);if(t!==void 0)return[t]}for(let t of yr){let n=e.flags.find(e=>e.name===t);if(n!==void 0)return[n]}return[]}function Er(e){return e.placeholder===null?e.name:`${e.name} "${e.placeholder}"`}function L(e,t,n){let r=t.filter(e=>e.location===n);return`${e}: ${r.length===0?`none`:r.map(e=>e.name).join(` `)}`}function Dr(e,t=x().bin){let[n=``,...r]=e.trim().split(/\s+/u);return(t.includes(n)?r:[n,...r]).join(` `)}var Or=`dist/aventure-cli/command-catalog.compact.txt`,kr=` · `,Ar=`-`;function jr(e=x().bin[0]){return j(Mr(A(Nt(import.meta.url)),e),Or)}function Mr(e,t){let n=e;for(;;){if(yt(j(n,`package.json`)))return n;let r=A(n);if(r===n)throw Error(`No package.json above ${e}; ${t} is not in a package layout.`);n=r}}function Nr(e,t){let n=t.join(` `).trim();return n.length===0?e:{...e,q:e.q===void 0?n:`${e.q} ${n}`}}function Pr(e,t,n,r=x().bin[0]){let i=sr(e,t,r);if(!i.ok||i.data===null){I({mode:n},i);return}Ir({opts:e,mode:n,data:i.data,defaultFormat:`lines`,rendered:Rr(i.data,Lr(e.format,`lines`)),summary:`Generated operation matches`})}function Fr(e,t,n,r=x().bin[0]){let i=cr(e,t,r);if(!i.ok||i.data===null){I({mode:n},i);return}Ir({opts:e,mode:n,data:i.data,defaultFormat:`usage`,rendered:zr(i.data,Lr(e.format,`usage`)),summary:`Generated operation detail`})}function Ir(e){let t=e.mode,r=Lr(e.opts.format,e.defaultFormat),i=e.opts.text===!0||e.opts.allFields===!0;if(e.opts.output===void 0&&i&&(r===`json`||r===`ndjson`)){I({mode:t},o(`--text or --all-fields cannot be combined with --format json or ndjson`,[`Omit the text flag for machine output, or use --format lines, compact, or text.`]));return}let a=e.opts.output===void 0&&t===`text`&&`count`in e.data&&e.data.count.matched===0&&(i||e.opts.format===void 0||r===`text`)?`No generated operations matched.`:e.rendered,s=a.endsWith(`
@@ -8,14 +8,14 @@ import{C as e,Di as t,Ei as n,S as r,Si as i,T as a,Ti as o,_ as s,a as c,aa as
 `)}function zr(e,t){return t===`json`?JSON.stringify(e,null,2):t===`ndjson`?JSON.stringify(e.operation):t===`lines`?Ur(e.operation):t===`compact`?Br(e.operation):e.usage}function Br(e){let t=Vr(e);return[e.cli.command,e.summary,t.length===0?Ar:t.join(` `)].join(kr)}function Vr(e){return e.flags.filter(t=>t.required&&(t.contentType===void 0||t.contentType===e.body.contentType)).map(e=>e.name)}function Hr(e){return e.map(e=>`${e.cli.command}\n  ${Ur(e)}`).join(`
 `)}function Ur(e){let t=Vr(e);return[R(`operationId`,e.operationId),R(`scope`,e.scope),R(`mutates`,String(e.mutates)),R(`destructive`,String(e.destructive)),R(`intent`,e.intent),R(`resource`,e.resource),R(`cli`,e.cli.command),e.mcpTool===null?``:R(`mcpTool`,e.mcpTool),R(`method`,e.method),R(`path`,e.path),R(`auth`,e.auth),R(`flags`,[...new Set(e.flags.map(e=>e.name))].join(` `)),R(`requiredFlags`,t.join(` `)),R(`bodyKind`,e.body.kind??``),R(`bodyRequired`,String(e.body.required)),R(`summary`,e.summary)].filter(e=>e.length>0).join(` `)}function R(e,t){return t.length===0?``:`${e}=${JSON.stringify(t)}`}function Wr(e){return`count`in e?e.count:{returned:1}}function Gr(e,t,r=x().bin[0]){e.helpCommand(!1);let i=e.commands.find(e=>e.name()===`help`)??e.command(`help`);i.summary(`Show full documentation for a command, or ask a question`).description([`Show a command's full documentation offline. Select it by command path,`,"operationId, or `<METHOD> <path>`; `<command> --help` prints only its usage.","`help ask <question>` or `help --ask <question>` answers a platform question."].join(`
 `)).argument(`[command...]`,"command path, operationId, or METHOD and path, e.g. `help entities get`"),i.addOption(new Kr(i)),i.hook(`preSubcommand`,e=>{e.opts().help&&e.help()});let a=Qr(t);a!==void 0&&i.option(`--ask <question>`,a.summary),O(i),i.action(async function(i){let s=this.optsWithGlobals();if(s.help&&i.length===0){this.outputHelp();return}if(!s.help&&a!==void 0&&s.ask!==void 0){let e=D(s);if(i.length>0){I({mode:e},o(`Use either a command path or --ask, not both.`));return}I({mode:e},await ni(a,s.ask,s.environment,e));return}let c=ti(e,i),l=t.find(t=>c!==void 0&&ti(e,t.cliPath)===c);if(s.help||c!==void 0&&l===void 0){c===void 0&&this.error(`unknown command '${i.join(` `)}' (run \`${r} --help\` for the command tree)`),c.outputHelp();return}let u=l===void 0?ei(i,t):n(`Resolved by command path`,{operationId:l.operationId});if(u.ok&&u.data?.command!==void 0&&this.error(`unknown command '${i.join(` `)}' (run \`${r} --help\` for the command tree)`),!u.ok||u.data===null){I({mode:D(s)},u);return}Fr({...s,...u.data},t,D(s,`text`),r)}),Zr(e,t,r)}var Kr=class extends v{helpCommand;constructor(e){super(`-h, --help`,`display help for command`),this.helpCommand=e}is(e){if(e!==this.short&&e!==this.long)return!1;let t=this.helpCommand.parent?.args??[],n=t.findIndex(e=>e===this.helpCommand.name()||this.helpCommand.aliases().includes(e)),r=n<0?void 0:t[n+1];return r===void 0||r.startsWith(`-`)?!0:!this.helpCommand.commands.some(e=>e.name()===r||e.aliases().includes(r))}},qr=2,Jr=6,Yr={formatHelp(e,t){let n=n=>l.prototype.formatHelp.call(this,e,Object.assign(Object.create(t),n));if(t.visibleCommands(e).length===0)return n({});let r=t.padWidth(e,t),i={padWidth:()=>r,visibleOptions:()=>[],showGlobalOptions:!1},a=n({...i,visibleCommands:()=>[]}),o=n({padWidth:()=>r,visibleCommands:()=>[]}).slice(a.length);return n(i)+o},visibleCommands(e){let t=l.prototype.visibleCommands.call(this,e);return e.parent===null?t.filter(e=>!rt.has(e.name())):t},subcommandTerm(e){let t=l.prototype.subcommandTerm.call(this,e);return e.commands.length>0&&e.registeredArguments.length===0?`${t} <command>`:t},formatItem(e,t,n,r){let i=r.helpWidth??80,a=i-t-4;return n===``||a>=r.minWidthToWrap?l.prototype.formatItem.call(r,e,t,n,r):`${` `.repeat(qr)}${e}\n${Xr(n,i,r)}`}};function Xr(e,t,n){return n.boxWrap(e,t-Jr).replace(/^/gmu,` `.repeat(Jr))}function Zr(e,t,n){for(let r of t){let i=ti(e,r.cliPath);i!==void 0&&i.addHelpText(`after`,()=>{let e=i.createHelp();e.prepareContext({helpWidth:i.configureOutput().getOutHelpWidth?.()});let a=e.helpWidth??80,o=xr(r.operationId,t,n),[s,...c]=_r(r.errorResponse),l=c.map(t=>Xr(t.trimStart(),a,e).replace(/^ +/u,` `.repeat(qr))),u=s===void 0?[]:[``,s,...l];return`\n${[...o,...u].join(`
-`)}\n`})}}function Qr(e){let[t,...n]=e.filter(e=>{let[t,n,...r]=e.cliPath;return t===`help`&&n!==void 0&&r.length===0&&ri(e)!==void 0});return n.length===0?t:void 0}var $r='Accepted selectors: `<METHOD> <route template or concrete path>`, an operationId, or a CLI command path such as "entities get".';function ei(e,t){let[r,...i]=e,a=m.find(e=>e===r?.toLowerCase());if(a===void 0||i.length===0){let r=e.join(` `).trim();return n(`Resolved by name`,t.some(e=>e.operationId===r)?{operationId:r}:{command:r})}let s=f(a),l=i.join(``),u=t.find(e=>e.method===s&&e.path===l);if(u!==void 0)return n(`Resolved by route template`,{operationId:u.operationId});let d=c({method:s,path:l});return!d.ok||d.data===null?o(d.summary,[...d.warnings,$r]):n(`Resolved by method and path`,{operationId:d.data.operation.operationId})}function ti(e,t){let n=e;for(let e of t){let t=n.commands.find(t=>t.name()===e||t.aliases().includes(e));if(t===void 0)return;n=t}return n}async function ni(e,t,n,r){let i=ri(e);if(i===void 0)return o(`The \`${e.cliPath.join(` `)}\` operation no longer takes a single required text body; run it directly instead of \`help --ask\`.`);n!==void 0&&(process.env.API_ENV=n);let a=await Pn(e,{[i.optionKey]:t});return a.ok?await S({method:e.method,path:re(e.operationId,{}),searchParams:{},body:a.data,auth:e.auth,responseFormat:We(r)?`json`:`auto`}):a}function ri(e){if(e.requestBody?.length!==1||e.parameters.some(e=>e.required))return;let t=(e.requestBody[0]?.parameter??[]).filter(e=>e.required);return t.length===1&&t[0]?.schemaType===`string`?t[0]:void 0}function ii(e,t,n){if(e.cliPath[0]!==`lookup`||!ai(n))return null;let r=e.parameters.filter(e=>t[e.optionKey]!==void 0).map(e=>`${e.name}=${String(t[e.optionKey])}`),i=`no record for ${r.length===0?`the given input`:r.join(`, `)}`;return n.ok?o(i):o(i,[],{httpStatus:n.httpStatus,problem:n.problem})}function ai(e){return e.ok?Array.isArray(e.data)&&e.data.length===0:e.httpStatus===404}var oi=T({artifact:w().nullish(),group:w().nullish(),name:w().nullish(),revision:w().nullish(),time:C({offset:!0}).nullish(),version:w().nullish()}),si=T({build:oi});function z(e,t){let[n,r]=e.filter(e=>e.role===t);if(n===void 0||r!==void 0)throw Error(`Generated composite CLI role '${t}' is incomplete`);return n}var ci=me([`MACOS`,`LINUX`,`WINDOWS`,`OTHER`]),li=me([`RSA_OAEP_256_A256_GCM_V1`]),ui=T({clientLabel:w().regex(/.*\S.*/).min(1).max(120).nullish(),clientPlatform:ci.nullish(),encryptionAlgorithm:li.nullish(),encryptionPublicKey:w().min(344).max(12e3).nullish()}),di=32;async function fi(){let e=await Ft.subtle.generateKey({name:`RSA-OAEP`,modulusLength:2048,publicExponent:new Uint8Array([1,0,1]),hash:`SHA-256`},!0,[`encrypt`,`decrypt`]),t=await Ft.subtle.exportKey(`spki`,e.publicKey);return{publicKey:Buffer.from(t).toString(`base64`),privateKey:e.privateKey}}async function pi(e,t){let{wrappedKey:n,nonce:r,ciphertext:i,authenticationTag:a}=t,o=mi(n,`wrapped key`,128,1024),s=mi(r,`nonce`,12,12),c=mi(i,`ciphertext`,1,65536),l=mi(a,`authentication tag`,16,16),u;try{u=await Ft.subtle.decrypt({name:`RSA-OAEP`},e,o)}catch{throw Error(`broker credential key could not be decrypted`)}let d=new Uint8Array(u);try{if(d.byteLength!==di)throw Error(`broker credential used an invalid AES-256 key`);let e=await Ft.subtle.importKey(`raw`,d,{name:`AES-GCM`},!1,[`decrypt`]),t=new Uint8Array(c.byteLength+l.byteLength);t.set(c),t.set(l,c.byteLength);let n;try{n=await Ft.subtle.decrypt({name:`AES-GCM`,iv:s,tagLength:128},e,t)}catch{throw Error(`broker credential payload failed authentication`)}let r=new jt(`utf-8`,{fatal:!0}).decode(n);if(r.trim().length===0)throw Error(`broker returned a blank credential`);return r}finally{d.fill(0)}}function mi(e,t,n,r){let i=e.replace(/=+$/u,``),a=Uint8Array.from(Buffer.from(e,`base64`)),o=Buffer.from(a).toString(`base64`).replace(/=+$/u,``);if(i.length===0||o!==i||a.byteLength<n||a.byteLength>r)throw Error(`broker returned an invalid ${t}`);return a}var hi=me([`PENDING`,`ISSUING`,`KEY_READY`,`REVOKING`,`CONSUMED`,`REVOKED`,`DENIED`,`EXPIRED`,`FAILED`]),gi=me([`Denied by user`,`Authorization request expired`,`CLI authorization expired before acknowledgement`,`Credential issuance recovery revoked an unrecoverable key`,`Revoked by user`,`Clerk create response validation failed`,`Credential issuance failed`,`Credential issuance could not be recovered`,`API-key quota reached`,`Credential issuance lost its database claim`,`Credential delivery encryption failed`,`Credential issuance finalization was lost`]),_i=T({approvedAt:C({offset:!0}).nullish(),clientLabel:w(),clientPlatform:ci,comparisonCode:w(),consumedAt:C({offset:!0}).nullish(),createdAt:C({offset:!0}),expiresAt:C({offset:!0}),id:pe(),intervalSeconds:he().int().min(1),keyReadyAt:C({offset:!0}).nullish(),status:hi,terminalAt:C({offset:!0}).nullish(),terminalReason:gi.nullish(),updatedAt:C({offset:!0})}),vi=T({algorithm:li,authenticationTag:w(),ciphertext:w(),nonce:w(),wrappedKey:w()}),yi=T({delivery:vi.nullish(),expiresAt:C({offset:!0}),status:hi,terminalReason:gi.nullish()}),bi=T({comparisonCode:w(),expiresAt:C({offset:!0}),id:pe(),intervalSeconds:he().int().min(1),pollSecret:w(),verificationUrl:w()}),B=[{command:`auth login`,role:`oauth`,summary:`Sign In Through Your Browser`,description:`Sign in through your browser and save verified CLI access in the credential store.`,operationId:`getAuthProviderCatalog`,method:`GET`,path:`/v1/auth/providers`,bodyOption:[],localOption:[{optionKey:`browser`,flag:`--no-browser`,description:`Print the sign-in URL without opening a browser.`},{optionKey:`providers`,flag:`--providers`,description:`Print the sign-in providers and CLI OAuth client, then exit without signing in.`}]},{command:`auth login`,role:`start`,summary:`Sign In With a Browser-Approved aVenture API Key`,description:`Creates a short-lived browser approval request and returns its poll credential once.`,operationId:`createCliAuthorization`,method:`POST`,path:`/v1/auth/cli-authorizations`,bodyOption:[{name:`clientLabel`,optionKey:`clientLabel`,flag:`--client-label <client-label>`,required:!1,description:`Label for this CLI installation.`}],localOption:[{optionKey:`key`,flag:`--key`,description:`Sign in with a browser-approved aVenture API key instead of OAuth; the approval URL opens on any device.`},{optionKey:`browser`,flag:`--no-browser`,description:`Print the sign-in URL without opening a browser.`}]},{command:`auth login`,role:`poll`,summary:`Poll CLI Authorization`,description:`Returns pending state, a terminal state, or an encrypted one-time credential delivery.`,operationId:`pollCliAuthorization`,method:`POST`,path:`/v1/auth/cli-authorizations/{cliAuthorizationId}/poll`,bodyOption:[],localOption:[]},{command:`auth login`,role:`acknowledge`,summary:`Acknowledge CLI Credential Delivery`,description:`Confirms the CLI stored the delivered API key in its credential store and clears transient delivery material.`,operationId:`acknowledgeCliAuthorization`,method:`POST`,path:`/v1/auth/cli-authorizations/{cliAuthorizationId}/acknowledge`,bodyOption:[],localOption:[]},{command:`auth logout`,role:`revoke`,summary:`Sign Out: Revoke the API Key and Forget Stored OAuth`,description:`Revokes the aVenture API key authenticating this request and returns its metadata so the CLI can confirm revocation before deleting its saved copy.`,operationId:`revokeCurrentApiKey`,method:`DELETE`,path:`/v1/auth/api-key`,bodyOption:[],localOption:[{optionKey:`forgetLocal`,flag:`--forget-local`,description:`Delete the saved key even when revocation cannot be confirmed.`}]}],xi=z(B,`start`),Si=z(B,`poll`),Ci=z(B,`acknowledge`),V=class extends Error{httpStatus;retryAfterSeconds;retryable;constructor(e,t,n=[]){super(`CLI authorization ${e} failed: ${ye(t,n)}`),this.name=`CliAuthorizationRequestError`,this.httpStatus=t.status,this.retryAfterSeconds=ki(t.retryAfterSeconds),this.retryable=t.status>=500||t.status===429}},wi=class extends Error{constructor(e,t,n=[]){super(`CLI authorization ${e} transport failed: ${E(t,n)}`,{cause:t}),this.name=`CliAuthorizationTransportError`}};async function Ti(e){let t=await b(ge(i()),{method:xi.method,path:ne(xi.path,{},xi.operationId),headers:{},contentType:`application/json`,body:e},bi);if(t.ok&&t.redirect)throw new V(`start`,Ai(t.status));if(!t.ok)throw new V(`start`,t.problem);return ji(t.data)}async function Ei(e,t){let n=_(Si.operationId),r=await b(ge(i()),{method:Si.method,path:ne(Si.path,{cliAuthorizationId:e},Si.operationId),headers:{[n]:t}},yi);if(r.ok&&r.redirect)throw new V(`poll`,Ai(r.status),[t]);if(!r.ok)throw new V(`poll`,r.problem,[t]);return{authorization:r.data,retryAfterSeconds:Oi(r.headers[`retry-after`])}}async function Di(e,t){let n=_(Ci.operationId),r;try{r=await b(ge(i()),{method:Ci.method,path:ne(Ci.path,{cliAuthorizationId:e},Ci.operationId),headers:{[n]:t}},_i)}catch(e){throw new wi(`acknowledge`,e,[t])}if(r.ok&&r.redirect)throw new V(`acknowledge`,Ai(r.status),[t]);if(!r.ok)throw new V(`acknowledge`,r.problem,[t]);return r.data}function Oi(e){if(e===void 0)return null;let t=Number(e);return Number.isInteger(t)&&t>0?t:null}function ki(e){return typeof e==`number`&&Number.isInteger(e)&&e>0?e:null}function Ai(e){return{status:e,title:`Unexpected redirect`,type:`about:blank`,code:void 0,detail:`CLI authorization endpoint returned an unexpected redirect`}}function ji(e){let{verificationUrl:t,pollSecret:n,...r}=e,i={...e},a=()=>({...r,verificationUrl:`<redacted>`,pollSecret:`<redacted>`});return Object.defineProperties(i,{verificationUrl:{enumerable:!1,get:()=>t},pollSecret:{enumerable:!1,get:()=>n},toJSON:{enumerable:!1,value:a},toString:{enumerable:!1,value:()=>`CliAuthorizationStart(${JSON.stringify(a())})`},[Mt.custom]:{enumerable:!1,value:a}})}async function Mi(e){let t=await Ni(e.credential.secret);if(t.state!==`verified`||e.activation!==`active`)return{stored:e,verification:t};try{return{stored:await _e(e.host,{apiKey:t.apiKey,secret:e.credential.secret},`active`),verification:t}}catch(n){return{stored:e,verification:{state:`unavailable`,summary:`${t.summary}, but the cached metadata could not be updated — ${E(n,[e.credential.secret])}`}}}}async function Ni(e){let t=ge(i()),n;try{n=await b(t,{method:`GET`,path:re(`getCurrentApiKey`,{}),headers:{Authorization:`Bearer ${e}`}},Re)}catch(t){return{state:`unavailable`,summary:`identity verification failed before an HTTP response — ${E(t,[e])}`}}return n.ok&&n.redirect?{state:`unavailable`,summary:`identity verification returned unexpected redirect ${n.status}`}:n.ok?n.data.status===`ACTIVE`?{state:`verified`,summary:`API key verified by aVenture sign-in`,apiKey:n.data}:{state:`invalid`,summary:`API key is not active`}:{state:n.problem.status===401||n.problem.status===403?`invalid`:`unavailable`,summary:`identity verification: ${ye(n.problem,[e])}`}}var Pi=z(B,`revoke`);async function Fi(e){let t;try{t=Be(i().host)}catch(e){return o(`auth logout: invalid API host — ${E(e)}`)}let r=await Ii(t),a=await zi(t,e),s=r.state===`failed`?[`OAuth credential could not be removed — ${r.summary}`]:r.state===`forgotten`&&!r.revoked?[`OAuth refresh token was not revoked remotely — ${r.summary??`no revocation endpoint`}`]:[],c={host:t,revoked:!1,forgotten:!1,oauth:r};return a===null?r.state===`missing`?n(`No CLI credential is stored for this API host.`,c):r.state===`failed`?{...o(`auth logout: ${s[0]}`),data:c}:n(r.revoked?`OAuth credential revoked remotely and removed locally.`:`OAuth credential removed locally.`,c,{warnings:s}):{...a,data:{...a.data??c,oauth:r},warnings:[...a.warnings,...s]}}async function Ii(e){let t=await Me(e);if(t.state===`missing`)return{state:`missing`};let n=t.state===`found`?await Ri(t.stored):{revoked:!1};try{await Ce(e)}catch(e){return{state:`failed`,summary:E(e)}}return{state:`forgotten`,...n}}async function Li(e){let t=Reflect.get(await mt(e),`revocation_endpoint`);return typeof t==`string`?De(t,`revocation endpoint`,!0):void 0}async function Ri(e){let{client:t,tokens:n}=e.credential,r=n.refresh_token??n.access_token;try{let e=await Li(t);if(e===void 0)return{revoked:!1};let n=await fetch(e,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams({token:r,client_id:Ie(t)})});return n.ok?{revoked:!0}:{revoked:!1,summary:`revocation endpoint answered ${n.status}`}}catch(e){return{revoked:!1,summary:E(e,je(n))}}}async function zi(e,t){let r;try{r=await xe(e)}catch(e){return o(`auth logout: stored credential could not be read — ${E(e)}`)}if(r.state===`unavailable`)return{...o(`auth logout: ${r.summary}`),data:{host:e,revoked:!1,forgotten:!1}};if(r.state===`missing`)return null;let i=r.stored,a=await Bi(i),s=a.outcome===`revoked`,c=i.activation===`pending`&&a.outcome===`rejected`;if(!s&&!c&&!t.forgetLocal)return{...o(`auth logout: remote revocation was not confirmed; local credential preserved — ${a.summary}`,[`Retry when the API is available. If an earlier response was lost after revocation, the retry can be unauthorized because revoked keys cannot authenticate.`,"Use `--forget-local` only to remove local bytes while accepting that the remote key may remain active."]),data:Vi(i,!1,!1)};try{await we(i.host)}catch(e){return{...o(`auth logout: local credential removal failed — ${E(e,[i.credential.secret])}`,[s?"The remote key is revoked. Re-run with `--forget-local` to retry local cleanup.":`Remote revocation was not confirmed; inspect auth status before retrying.`]),data:Vi(i,s,!1)}}return n(s?`API key revoked remotely and removed locally.`:c?`Stale pending CLI credential removed; its remote key can no longer authenticate and unacknowledged keys expire at the authorization deadline.`:`API key removed locally without confirmed remote revocation.`,Vi(i,s,!0),{ids:[i.credential.apiKey.id],warnings:s||c?[]:[`Remote revocation was not confirmed; the API key may remain active.`]})}async function Bi(e){let t=ge(i());try{let n=await b(t,{method:Pi.method,path:ne(Pi.path,{},Pi.operationId),headers:{Authorization:`Bearer ${e.credential.secret}`}},Re);return n.ok&&n.redirect?{outcome:`unconfirmed`,summary:`remote key revocation returned unexpected redirect ${n.status}`}:n.ok?n.data.id!==e.credential.apiKey.id||n.data.subject!==e.credential.apiKey.subject?{outcome:`unconfirmed`,summary:`remote response did not match the stored API key identity`}:n.data.status===`REVOKED`?{outcome:`revoked`,summary:`remote key revocation confirmed`}:{outcome:`unconfirmed`,summary:`remote response did not confirm REVOKED status`}:{outcome:n.problem.status===401&&n.problem.type!==`about:blank`?`rejected`:`unconfirmed`,summary:ye(n.problem,[e.credential.secret])}}catch(t){return{outcome:`unconfirmed`,summary:E(t,[e.credential.secret])}}}function Vi(e,t,n){return{host:e.host,apiKeyId:e.credential.apiKey.id,activation:e.activation,revoked:t,forgotten:n}}var Hi=`RSA_OAEP_256_A256_GCM_V1`,Ui=1,Wi=30,Gi=x().bin[0],Ki=`The local record remains pending and unavailable to ordinary commands. Re-run \`${Gi} auth login --key\`; it recovers the credential when the broker acknowledged it, and otherwise clears the stale record.`;async function qi(e){if(!At.isTTY)return o(`${Gi} auth login --key requires an interactive TTY on stdin`,[`For non-interactive automation, inject AUTH_TOKEN through the environment.`]);let t,r;try{let e=i().host;t=Be(e),r=ke(e)}catch(e){return o(`auth login --key: invalid environment configuration — ${E(e)}`)}for(;;){let e;try{e=await ze(t)}catch(e){return o(`auth login --key: credential storage could not be inspected — ${E(e)}`)}if(e.state===`unavailable`)return o(`auth login --key: ${e.summary}`,[`Make the OS keyring or the CLI config directory writable, or use AUTH_TOKEN from the environment.`]);if(e.state===`missing`){e.keyringFailure!==void 0&&N.write(Se(e.keyringFailure));break}let n=await Ji(e.stored);if(n!==null)return n}let a;try{a=await fi()}catch(e){return o(`auth login --key: ephemeral encryption key could not be created — ${E(e)}`)}let s=ui.safeParse({clientLabel:e.clientLabel?.trim()||(Lt().trim()||Gi).slice(0,120),clientPlatform:Qi(),encryptionAlgorithm:Hi,encryptionPublicKey:a.publicKey});if(!s.success)return o(`auth login --key: ${fe(s.error)}`);let c;try{c=await Ti(s.data)}catch(e){return o(`auth login --key: could not start browser authorization — ${E(e)}`)}let l;try{l=be(c,r)}catch(e){return o(`auth login --key: unsafe browser authorization URL rejected — ${E(e)}`)}if(!Zi(await ve(c,r,{noBrowser:e.noBrowser}),c,l))return o(`auth login --key: browser authorization requires an interactive terminal for manual handoff`,[`Automatic browser opening did not complete, and the approval URL was withheld because stderr is not an interactive terminal. Retry from an interactive terminal.`],{references:[l]});let u;try{u=await Xi(c)}catch(e){return o(`auth login --key: authorization did not complete — ${E(e)}`,[],{references:[l]})}if(u.algorithm!==Hi)return o(`auth login --key: broker selected an unsupported encryption algorithm`);let d;try{d=await pi(a.privateKey,u)}catch(e){return o(`auth login --key: encrypted credential could not be opened — ${E(e)}`)}let f=await Ni(d);if(f.state!==`verified`)return o(`auth login --key: decrypted credential was neither stored nor acknowledged — ${f.summary}`);let p;try{p=await _e(t,{apiKey:f.apiKey,secret:d},`pending`)}catch(e){return o(`auth login --key: credential could not be durably stored — ${E(e)}`)}let m;try{m=await Yi(c)}catch(e){return H(p,!0,`auth login --key: credential was stored and verified, but broker acknowledgment was not confirmed — ${E(e,[c.pollSecret])}`,Ki)}if(m.status!==`CONSUMED`)return H(p,!0,`auth login --key: broker returned ${m.status} after acknowledgment`,Ki);let h=await Ni(d);if(h.state!==`verified`||!na(h.apiKey,p.credential.apiKey))return H(p,!0,`auth login --key: broker acknowledgment succeeded, but refreshed credential metadata could not prove the granted lifetime — ${h.summary}`,Ki);try{let e=await _e(t,{apiKey:h.apiKey,secret:d},`active`);return n(`API key stored; authenticated identity and broker acknowledgment verified.`,ta(e,!0),{ids:[e.credential.apiKey.id]})}catch(e){return H(p,!0,`auth login --key: remote acknowledgment succeeded, but local activation could not be confirmed — ${E(e)}`,Ki)}}async function Ji(e){let t=await Ni(e.credential.secret);if(e.activation!==`pending`)return t.state===`verified`?n(`API key is already stored and its authenticated identity was verified.`,ta(e,!0),{ids:[e.credential.apiKey.id]}):H(e,!1,`auth login --key: stored credential ${t.state} — ${t.summary}`,`Run \`${Gi} auth logout\` to revoke/remove it before authorizing a replacement.`);if(t.state===`verified`&&na(t.apiKey,e.credential.apiKey))try{let r=await _e(e.host,{apiKey:t.apiKey,secret:e.credential.secret},`active`);return n(`Recovered pending CLI credential: broker acknowledgment had succeeded.`,ta(r,!0),{ids:[r.credential.apiKey.id]})}catch(t){return H(e,!0,`auth login --key: credential is valid but could not be promoted locally — ${E(t,[e.credential.secret])}`,`The remote key remains valid. Re-run \`${Gi} auth login --key\` to retry local activation; it will recover the pending credential automatically.`)}if(t.state===`unavailable`||t.state===`verified`&&!e.credential.apiKey.expiresAt)return H(e,t.state===`verified`,`auth login --key: the stored pending credential acknowledgment could not be verified — ${t.summary}`,t.state===`verified`?`The stored expiry is missing. Both records were preserved; inspect the existing key in your account before deciding how to recover it.`:`The stored record and the remote key were both preserved. Re-run \`${Gi} auth login --key\` when the API is reachable; it recovers an acknowledged credential and clears an unacknowledged one.`);let r=await Bi(e);if(r.outcome===`unconfirmed`)return H(e,!1,`auth login --key: a prior credential is durably stored but broker acknowledgment was not confirmed`,`Remote revocation of the stale pending key was not confirmed — ${r.summary}. Retry when the API is reachable.`);try{await we(e.host)}catch(t){return H(e,!1,`auth login --key: stale pending credential could not be removed — ${E(t,[e.credential.secret])}`)}return N.write(r.outcome===`revoked`?`Revoked and cleared a stale pending CLI credential; starting a fresh browser authorization.
+`)}\n`})}}function Qr(e){let[t,...n]=e.filter(e=>{let[t,n,...r]=e.cliPath;return t===`help`&&n!==void 0&&r.length===0&&ri(e)!==void 0});return n.length===0?t:void 0}var $r='Accepted selectors: `<METHOD> <route template or concrete path>`, an operationId, or a CLI command path such as "entities get".';function ei(e,t){let[r,...i]=e,a=m.find(e=>e===r?.toLowerCase());if(a===void 0||i.length===0){let r=e.join(` `).trim();return n(`Resolved by name`,t.some(e=>e.operationId===r)?{operationId:r}:{command:r})}let s=f(a),l=i.join(``),u=t.find(e=>e.method===s&&e.path===l);if(u!==void 0)return n(`Resolved by route template`,{operationId:u.operationId});let d=c({method:s,path:l});return!d.ok||d.data===null?o(d.summary,[...d.warnings,$r]):n(`Resolved by method and path`,{operationId:d.data.operation.operationId})}function ti(e,t){let n=e;for(let e of t){let t=n.commands.find(t=>t.name()===e||t.aliases().includes(e));if(t===void 0)return;n=t}return n}async function ni(e,t,n,r){let i=ri(e);if(i===void 0)return o(`The \`${e.cliPath.join(` `)}\` operation no longer takes a single required text body; run it directly instead of \`help --ask\`.`);n!==void 0&&(process.env.API_ENV=n);let a=await Pn(e,{[i.optionKey]:t});return a.ok?await S({method:e.method,path:re(e.operationId,{}),searchParams:{},body:a.data,auth:e.auth,responseFormat:We(r)?`json`:`auto`}):a}function ri(e){if(e.requestBody?.length!==1||e.parameters.some(e=>e.required))return;let t=(e.requestBody[0]?.parameter??[]).filter(e=>e.required);return t.length===1&&t[0]?.schemaType===`string`?t[0]:void 0}function ii(e,t,n){if(e.cliPath[0]!==`lookup`||!ai(n))return null;let r=e.parameters.filter(e=>t[e.optionKey]!==void 0).map(e=>`${e.name}=${String(t[e.optionKey])}`),i=`no record for ${r.length===0?`the given input`:r.join(`, `)}`;return n.ok?o(i):o(i,[],{httpStatus:n.httpStatus,problem:n.problem})}function ai(e){return e.ok?Array.isArray(e.data)&&e.data.length===0:e.httpStatus===404}var oi=T({artifact:w().nullish(),group:w().nullish(),name:w().nullish(),revision:w().nullish(),time:C({offset:!0}).nullish(),version:w().nullish()}),si=T({build:oi});function z(e,t){let[n,r]=e.filter(e=>e.role===t);if(n===void 0||r!==void 0)throw Error(`Generated composite CLI role '${t}' is incomplete`);return n}var ci=me([`MACOS`,`LINUX`,`WINDOWS`,`OTHER`]),li=me([`RSA_OAEP_256_A256_GCM_V1`]),ui=T({clientLabel:w().regex(/.*\S.*/).min(1).max(120).nullish(),clientPlatform:ci.nullish(),encryptionAlgorithm:li.nullish(),encryptionPublicKey:w().min(344).max(12e3).nullish()}),di=32;async function fi(){let e=await It.subtle.generateKey({name:`RSA-OAEP`,modulusLength:2048,publicExponent:new Uint8Array([1,0,1]),hash:`SHA-256`},!0,[`encrypt`,`decrypt`]),t=await It.subtle.exportKey(`spki`,e.publicKey);return{publicKey:Buffer.from(t).toString(`base64`),privateKey:e.privateKey}}async function pi(e,t){let{wrappedKey:n,nonce:r,ciphertext:i,authenticationTag:a}=t,o=mi(n,`wrapped key`,128,1024),s=mi(r,`nonce`,12,12),c=mi(i,`ciphertext`,1,65536),l=mi(a,`authentication tag`,16,16),u;try{u=await It.subtle.decrypt({name:`RSA-OAEP`},e,o)}catch{throw Error(`broker credential key could not be decrypted`)}let d=new Uint8Array(u);try{if(d.byteLength!==di)throw Error(`broker credential used an invalid AES-256 key`);let e=await It.subtle.importKey(`raw`,d,{name:`AES-GCM`},!1,[`decrypt`]),t=new Uint8Array(c.byteLength+l.byteLength);t.set(c),t.set(l,c.byteLength);let n;try{n=await It.subtle.decrypt({name:`AES-GCM`,iv:s,tagLength:128},e,t)}catch{throw Error(`broker credential payload failed authentication`)}let r=new jt(`utf-8`,{fatal:!0}).decode(n);if(r.trim().length===0)throw Error(`broker returned a blank credential`);return r}finally{d.fill(0)}}function mi(e,t,n,r){let i=e.replace(/=+$/u,``),a=Uint8Array.from(Buffer.from(e,`base64`)),o=Buffer.from(a).toString(`base64`).replace(/=+$/u,``);if(i.length===0||o!==i||a.byteLength<n||a.byteLength>r)throw Error(`broker returned an invalid ${t}`);return a}var hi=me([`PENDING`,`ISSUING`,`KEY_READY`,`REVOKING`,`CONSUMED`,`REVOKED`,`DENIED`,`EXPIRED`,`FAILED`]),gi=me([`Denied by user`,`Authorization request expired`,`CLI authorization expired before acknowledgement`,`Credential issuance recovery revoked an unrecoverable key`,`Revoked by user`,`Clerk create response validation failed`,`Credential issuance failed`,`Credential issuance could not be recovered`,`API-key quota reached`,`Credential issuance lost its database claim`,`Credential delivery encryption failed`,`Credential issuance finalization was lost`]),_i=T({approvedAt:C({offset:!0}).nullish(),clientLabel:w(),clientPlatform:ci,comparisonCode:w(),consumedAt:C({offset:!0}).nullish(),createdAt:C({offset:!0}),expiresAt:C({offset:!0}),id:pe(),intervalSeconds:he().int().min(1),keyReadyAt:C({offset:!0}).nullish(),status:hi,terminalAt:C({offset:!0}).nullish(),terminalReason:gi.nullish(),updatedAt:C({offset:!0})}),vi=T({algorithm:li,authenticationTag:w(),ciphertext:w(),nonce:w(),wrappedKey:w()}),yi=T({delivery:vi.nullish(),expiresAt:C({offset:!0}),status:hi,terminalReason:gi.nullish()}),bi=T({comparisonCode:w(),expiresAt:C({offset:!0}),id:pe(),intervalSeconds:he().int().min(1),pollSecret:w(),verificationUrl:w()}),B=[{command:`auth login`,role:`oauth`,summary:`Sign In Through Your Browser`,description:`Sign in through your browser and save verified CLI access in the credential store.`,operationId:`getAuthProviderCatalog`,method:`GET`,path:`/v1/auth/providers`,bodyOption:[],localOption:[{optionKey:`browser`,flag:`--no-browser`,description:`Print the sign-in URL without opening a browser.`},{optionKey:`providers`,flag:`--providers`,description:`Print the sign-in providers and CLI OAuth client, then exit without signing in.`}]},{command:`auth login`,role:`start`,summary:`Sign In With a Browser-Approved aVenture API Key`,description:`Creates a short-lived browser approval request and returns its poll credential once.`,operationId:`createCliAuthorization`,method:`POST`,path:`/v1/auth/cli-authorizations`,bodyOption:[{name:`clientLabel`,optionKey:`clientLabel`,flag:`--client-label <client-label>`,required:!1,description:`Label for this CLI installation.`}],localOption:[{optionKey:`key`,flag:`--key`,description:`Sign in with a browser-approved aVenture API key instead of OAuth; the approval URL opens on any device.`},{optionKey:`browser`,flag:`--no-browser`,description:`Print the sign-in URL without opening a browser.`}]},{command:`auth login`,role:`poll`,summary:`Poll CLI Authorization`,description:`Returns pending state, a terminal state, or an encrypted one-time credential delivery.`,operationId:`pollCliAuthorization`,method:`POST`,path:`/v1/auth/cli-authorizations/{cliAuthorizationId}/poll`,bodyOption:[],localOption:[]},{command:`auth login`,role:`acknowledge`,summary:`Acknowledge CLI Credential Delivery`,description:`Confirms the CLI stored the delivered API key in its credential store and clears transient delivery material.`,operationId:`acknowledgeCliAuthorization`,method:`POST`,path:`/v1/auth/cli-authorizations/{cliAuthorizationId}/acknowledge`,bodyOption:[],localOption:[]},{command:`auth logout`,role:`revoke`,summary:`Sign Out: Revoke the API Key and Forget Stored OAuth`,description:`Revokes the aVenture API key authenticating this request and returns its metadata so the CLI can confirm revocation before deleting its saved copy.`,operationId:`revokeCurrentApiKey`,method:`DELETE`,path:`/v1/auth/api-key`,bodyOption:[],localOption:[{optionKey:`forgetLocal`,flag:`--forget-local`,description:`Delete the saved key even when revocation cannot be confirmed.`}]}],xi=z(B,`start`),Si=z(B,`poll`),Ci=z(B,`acknowledge`),V=class extends Error{httpStatus;retryAfterSeconds;retryable;constructor(e,t,n=[]){super(`CLI authorization ${e} failed: ${ye(t,n)}`),this.name=`CliAuthorizationRequestError`,this.httpStatus=t.status,this.retryAfterSeconds=ki(t.retryAfterSeconds),this.retryable=t.status>=500||t.status===429}},wi=class extends Error{constructor(e,t,n=[]){super(`CLI authorization ${e} transport failed: ${E(t,n)}`,{cause:t}),this.name=`CliAuthorizationTransportError`}};async function Ti(e){let t=await b(ge(i()),{method:xi.method,path:ne(xi.path,{},xi.operationId),headers:{},contentType:`application/json`,body:e},bi);if(t.ok&&t.redirect)throw new V(`start`,Ai(t.status));if(!t.ok)throw new V(`start`,t.problem);return ji(t.data)}async function Ei(e,t){let n=_(Si.operationId),r=await b(ge(i()),{method:Si.method,path:ne(Si.path,{cliAuthorizationId:e},Si.operationId),headers:{[n]:t}},yi);if(r.ok&&r.redirect)throw new V(`poll`,Ai(r.status),[t]);if(!r.ok)throw new V(`poll`,r.problem,[t]);return{authorization:r.data,retryAfterSeconds:Oi(r.headers[`retry-after`])}}async function Di(e,t){let n=_(Ci.operationId),r;try{r=await b(ge(i()),{method:Ci.method,path:ne(Ci.path,{cliAuthorizationId:e},Ci.operationId),headers:{[n]:t}},_i)}catch(e){throw new wi(`acknowledge`,e,[t])}if(r.ok&&r.redirect)throw new V(`acknowledge`,Ai(r.status),[t]);if(!r.ok)throw new V(`acknowledge`,r.problem,[t]);return r.data}function Oi(e){if(e===void 0)return null;let t=Number(e);return Number.isInteger(t)&&t>0?t:null}function ki(e){return typeof e==`number`&&Number.isInteger(e)&&e>0?e:null}function Ai(e){return{status:e,title:`Unexpected redirect`,type:`about:blank`,code:void 0,detail:`CLI authorization endpoint returned an unexpected redirect`}}function ji(e){let{verificationUrl:t,pollSecret:n,...r}=e,i={...e},a=()=>({...r,verificationUrl:`<redacted>`,pollSecret:`<redacted>`});return Object.defineProperties(i,{verificationUrl:{enumerable:!1,get:()=>t},pollSecret:{enumerable:!1,get:()=>n},toJSON:{enumerable:!1,value:a},toString:{enumerable:!1,value:()=>`CliAuthorizationStart(${JSON.stringify(a())})`},[Mt.custom]:{enumerable:!1,value:a}})}async function Mi(e){let t=await Ni(e.credential.secret);if(t.state!==`verified`||e.activation!==`active`)return{stored:e,verification:t};try{return{stored:await _e(e.host,{apiKey:t.apiKey,secret:e.credential.secret},`active`),verification:t}}catch(n){return{stored:e,verification:{state:`unavailable`,summary:`${t.summary}, but the cached metadata could not be updated — ${E(n,[e.credential.secret])}`}}}}async function Ni(e){let t=ge(i()),n;try{n=await b(t,{method:`GET`,path:re(`getCurrentApiKey`,{}),headers:{Authorization:`Bearer ${e}`}},Re)}catch(t){return{state:`unavailable`,summary:`identity verification failed before an HTTP response — ${E(t,[e])}`}}return n.ok&&n.redirect?{state:`unavailable`,summary:`identity verification returned unexpected redirect ${n.status}`}:n.ok?n.data.status===`ACTIVE`?{state:`verified`,summary:`API key verified by aVenture sign-in`,apiKey:n.data}:{state:`invalid`,summary:`API key is not active`}:{state:n.problem.status===401||n.problem.status===403?`invalid`:`unavailable`,summary:`identity verification: ${ye(n.problem,[e])}`}}var Pi=z(B,`revoke`);async function Fi(e){let t;try{t=Be(i().host)}catch(e){return o(`auth logout: invalid API host — ${E(e)}`)}let r=await Ii(t),a=await zi(t,e),s=r.state===`failed`?[`OAuth credential could not be removed — ${r.summary}`]:r.state===`forgotten`&&!r.revoked?[`OAuth refresh token was not revoked remotely — ${r.summary??`no revocation endpoint`}`]:[],c={host:t,revoked:!1,forgotten:!1,oauth:r};return a===null?r.state===`missing`?n(`No CLI credential is stored for this API host.`,c):r.state===`failed`?{...o(`auth logout: ${s[0]}`),data:c}:n(r.revoked?`OAuth credential revoked remotely and removed locally.`:`OAuth credential removed locally.`,c,{warnings:s}):{...a,data:{...a.data??c,oauth:r},warnings:[...a.warnings,...s]}}async function Ii(e){let t=await Me(e);if(t.state===`missing`)return{state:`missing`};let n=t.state===`found`?await Ri(t.stored):{revoked:!1};try{await Ce(e)}catch(e){return{state:`failed`,summary:E(e)}}return{state:`forgotten`,...n}}async function Li(e){let t=Reflect.get(await mt(e),`revocation_endpoint`);return typeof t==`string`?De(t,`revocation endpoint`,!0):void 0}async function Ri(e){let{client:t,tokens:n}=e.credential,r=n.refresh_token??n.access_token;try{let e=await Li(t);if(e===void 0)return{revoked:!1};let n=await fetch(e,{method:`POST`,headers:{"Content-Type":`application/x-www-form-urlencoded`},body:new URLSearchParams({token:r,client_id:Ie(t)})});return n.ok?{revoked:!0}:{revoked:!1,summary:`revocation endpoint answered ${n.status}`}}catch(e){return{revoked:!1,summary:E(e,je(n))}}}async function zi(e,t){let r;try{r=await xe(e)}catch(e){return o(`auth logout: stored credential could not be read — ${E(e)}`)}if(r.state===`unavailable`)return{...o(`auth logout: ${r.summary}`),data:{host:e,revoked:!1,forgotten:!1}};if(r.state===`missing`)return null;let i=r.stored,a=await Bi(i),s=a.outcome===`revoked`,c=i.activation===`pending`&&a.outcome===`rejected`;if(!s&&!c&&!t.forgetLocal)return{...o(`auth logout: remote revocation was not confirmed; local credential preserved — ${a.summary}`,[`Retry when the API is available. If an earlier response was lost after revocation, the retry can be unauthorized because revoked keys cannot authenticate.`,"Use `--forget-local` only to remove local bytes while accepting that the remote key may remain active."]),data:Vi(i,!1,!1)};try{await we(i.host)}catch(e){return{...o(`auth logout: local credential removal failed — ${E(e,[i.credential.secret])}`,[s?"The remote key is revoked. Re-run with `--forget-local` to retry local cleanup.":`Remote revocation was not confirmed; inspect auth status before retrying.`]),data:Vi(i,s,!1)}}return n(s?`API key revoked remotely and removed locally.`:c?`Stale pending CLI credential removed; its remote key can no longer authenticate and unacknowledged keys expire at the authorization deadline.`:`API key removed locally without confirmed remote revocation.`,Vi(i,s,!0),{ids:[i.credential.apiKey.id],warnings:s||c?[]:[`Remote revocation was not confirmed; the API key may remain active.`]})}async function Bi(e){let t=ge(i());try{let n=await b(t,{method:Pi.method,path:ne(Pi.path,{},Pi.operationId),headers:{Authorization:`Bearer ${e.credential.secret}`}},Re);return n.ok&&n.redirect?{outcome:`unconfirmed`,summary:`remote key revocation returned unexpected redirect ${n.status}`}:n.ok?n.data.id!==e.credential.apiKey.id||n.data.subject!==e.credential.apiKey.subject?{outcome:`unconfirmed`,summary:`remote response did not match the stored API key identity`}:n.data.status===`REVOKED`?{outcome:`revoked`,summary:`remote key revocation confirmed`}:{outcome:`unconfirmed`,summary:`remote response did not confirm REVOKED status`}:{outcome:n.problem.status===401&&n.problem.type!==`about:blank`?`rejected`:`unconfirmed`,summary:ye(n.problem,[e.credential.secret])}}catch(t){return{outcome:`unconfirmed`,summary:E(t,[e.credential.secret])}}}function Vi(e,t,n){return{host:e.host,apiKeyId:e.credential.apiKey.id,activation:e.activation,revoked:t,forgotten:n}}var Hi=`RSA_OAEP_256_A256_GCM_V1`,Ui=1,Wi=30,Gi=x().bin[0],Ki=`The local record remains pending and unavailable to ordinary commands. Re-run \`${Gi} auth login --key\`; it recovers the credential when the broker acknowledged it, and otherwise clears the stale record.`;async function qi(e){if(!At.isTTY)return o(`${Gi} auth login --key requires an interactive TTY on stdin`,[`For non-interactive automation, inject AUTH_TOKEN through the environment.`]);let t,r;try{let e=i().host;t=Be(e),r=ke(e)}catch(e){return o(`auth login --key: invalid environment configuration — ${E(e)}`)}for(;;){let e;try{e=await ze(t)}catch(e){return o(`auth login --key: credential storage could not be inspected — ${E(e)}`)}if(e.state===`unavailable`)return o(`auth login --key: ${e.summary}`,[`Make the OS keyring or the CLI config directory writable, or use AUTH_TOKEN from the environment.`]);if(e.state===`missing`){e.keyringFailure!==void 0&&N.write(Se(e.keyringFailure));break}let n=await Ji(e.stored);if(n!==null)return n}let a;try{a=await fi()}catch(e){return o(`auth login --key: ephemeral encryption key could not be created — ${E(e)}`)}let s=ui.safeParse({clientLabel:e.clientLabel?.trim()||(Rt().trim()||Gi).slice(0,120),clientPlatform:Qi(),encryptionAlgorithm:Hi,encryptionPublicKey:a.publicKey});if(!s.success)return o(`auth login --key: ${fe(s.error)}`);let c;try{c=await Ti(s.data)}catch(e){return o(`auth login --key: could not start browser authorization — ${E(e)}`)}let l;try{l=be(c,r)}catch(e){return o(`auth login --key: unsafe browser authorization URL rejected — ${E(e)}`)}if(!Zi(await ve(c,r,{noBrowser:e.noBrowser}),c,l))return o(`auth login --key: browser authorization requires an interactive terminal for manual handoff`,[`Automatic browser opening did not complete, and the approval URL was withheld because stderr is not an interactive terminal. Retry from an interactive terminal.`],{references:[l]});let u;try{u=await Xi(c)}catch(e){return o(`auth login --key: authorization did not complete — ${E(e)}`,[],{references:[l]})}if(u.algorithm!==Hi)return o(`auth login --key: broker selected an unsupported encryption algorithm`);let d;try{d=await pi(a.privateKey,u)}catch(e){return o(`auth login --key: encrypted credential could not be opened — ${E(e)}`)}let f=await Ni(d);if(f.state!==`verified`)return o(`auth login --key: decrypted credential was neither stored nor acknowledged — ${f.summary}`);let p;try{p=await _e(t,{apiKey:f.apiKey,secret:d},`pending`)}catch(e){return o(`auth login --key: credential could not be durably stored — ${E(e)}`)}let m;try{m=await Yi(c)}catch(e){return H(p,!0,`auth login --key: credential was stored and verified, but broker acknowledgment was not confirmed — ${E(e,[c.pollSecret])}`,Ki)}if(m.status!==`CONSUMED`)return H(p,!0,`auth login --key: broker returned ${m.status} after acknowledgment`,Ki);let h=await Ni(d);if(h.state!==`verified`||!na(h.apiKey,p.credential.apiKey))return H(p,!0,`auth login --key: broker acknowledgment succeeded, but refreshed credential metadata could not prove the granted lifetime — ${h.summary}`,Ki);try{let e=await _e(t,{apiKey:h.apiKey,secret:d},`active`);return n(`API key stored; authenticated identity and broker acknowledgment verified.`,ta(e,!0),{ids:[e.credential.apiKey.id]})}catch(e){return H(p,!0,`auth login --key: remote acknowledgment succeeded, but local activation could not be confirmed — ${E(e)}`,Ki)}}async function Ji(e){let t=await Ni(e.credential.secret);if(e.activation!==`pending`)return t.state===`verified`?n(`API key is already stored and its authenticated identity was verified.`,ta(e,!0),{ids:[e.credential.apiKey.id]}):H(e,!1,`auth login --key: stored credential ${t.state} — ${t.summary}`,`Run \`${Gi} auth logout\` to revoke/remove it before authorizing a replacement.`);if(t.state===`verified`&&na(t.apiKey,e.credential.apiKey))try{let r=await _e(e.host,{apiKey:t.apiKey,secret:e.credential.secret},`active`);return n(`Recovered pending CLI credential: broker acknowledgment had succeeded.`,ta(r,!0),{ids:[r.credential.apiKey.id]})}catch(t){return H(e,!0,`auth login --key: credential is valid but could not be promoted locally — ${E(t,[e.credential.secret])}`,`The remote key remains valid. Re-run \`${Gi} auth login --key\` to retry local activation; it will recover the pending credential automatically.`)}if(t.state===`unavailable`||t.state===`verified`&&!e.credential.apiKey.expiresAt)return H(e,t.state===`verified`,`auth login --key: the stored pending credential acknowledgment could not be verified — ${t.summary}`,t.state===`verified`?`The stored expiry is missing. Both records were preserved; inspect the existing key in your account before deciding how to recover it.`:`The stored record and the remote key were both preserved. Re-run \`${Gi} auth login --key\` when the API is reachable; it recovers an acknowledged credential and clears an unacknowledged one.`);let r=await Bi(e);if(r.outcome===`unconfirmed`)return H(e,!1,`auth login --key: a prior credential is durably stored but broker acknowledgment was not confirmed`,`Remote revocation of the stale pending key was not confirmed — ${r.summary}. Retry when the API is reachable.`);try{await we(e.host)}catch(t){return H(e,!1,`auth login --key: stale pending credential could not be removed — ${E(t,[e.credential.secret])}`)}return N.write(r.outcome===`revoked`?`Revoked and cleared a stale pending CLI credential; starting a fresh browser authorization.
 `:`Cleared a stale pending CLI credential whose remote key can no longer authenticate; starting a fresh browser authorization.
 `),null}async function Yi(e){let t=new Date(e.expiresAt).getTime(),n=$i(e.intervalSeconds);for(;;)try{return await Di(e.id,e.pollSecret)}catch(e){if(e instanceof V){if(!e.retryable)throw e;n=$i(e.retryAfterSeconds??n)}else if(!(e instanceof wi))throw e;if(Date.now()>=t)throw e;N.write(`Broker acknowledgment was interrupted; retrying.
 `),await ea(n,t)}}async function Xi(e){let t=new Date(e.expiresAt).getTime(),n=$i(e.intervalSeconds),r;for(N.write(`Waiting for browser approval...
 `);Date.now()<t;){let i;try{i=await Ei(e.id,e.pollSecret)}catch(e){if(e instanceof V){if(!e.retryable)throw e;n=$i(e.retryAfterSeconds??n)}r=e,N.write(`Authorization poll was interrupted; retrying.
 `),await ea(n,t);continue}r=void 0;let a=i.authorization;switch(a.status){case`PENDING`:case`ISSUING`:case`REVOKING`:n=$i(i.retryAfterSeconds??n),await ea(n,t);break;case`KEY_READY`:if(a.delivery===null||a.delivery===void 0)throw Error(`broker returned KEY_READY without an encrypted delivery`);return a.delivery;case`DENIED`:case`EXPIRED`:case`FAILED`:throw Error(oe(a.terminalReason?.trim()??``,[e.pollSecret])||`broker entered terminal state ${a.status}`);case`CONSUMED`:throw Error(`broker credential was already consumed; restart login`)}}throw Error(r===void 0?`browser authorization expired before approval completed`:`browser authorization expired after a retryable broker failure: ${E(r,[e.pollSecret])}`)}function Zi(e,t,n){let r=e.state===`opened`;return!r&&!N.isTTY?!1:(N.write([r?`Browser approval opened for this request.`:`Browser not opened automatically (${e.reason}).`,...N.isTTY?[`Open this one-time approval URL in your browser:`,t.verificationUrl]:[`Approval reference: ${n}`],`Comparison code: ${t.comparisonCode}`,`Confirm that the browser shows the same code before approving.`,``].join(`
-`)),!0)}function Qi(){switch(Rt()){case`darwin`:return`MACOS`;case`linux`:return`LINUX`;case`win32`:return`WINDOWS`;default:return`OTHER`}}function $i(e){return Math.min(Wi,Math.max(Ui,e))}async function ea(e,t){let n=t-Date.now();n>0&&await zt(Math.min(e*1e3,n))}function ta(e,t){return{host:e.host,provider:e.provider,apiKeyId:e.credential.apiKey.id,name:oe(e.credential.apiKey.name,[e.credential.secret]),activation:e.activation,verified:t}}function H(e,t,n,r){return{...o(n,r===void 0?[]:[r]),data:ta(e,t)}}function na(e,t){return e.expiresAt===null||e.expiresAt===void 0||t.expiresAt===null||t.expiresAt===void 0?!1:new Date(e.expiresAt)>new Date(t.expiresAt)}async function ra(){return null}async function ia(e){let t=null,n=e=>{t=e};try{await Fe(e,n),await Le(n)}catch(e){return{materialized:t,failure:E(e)}}return{materialized:t,failure:null}}async function aa(e,t,n,r){if(r.failure!==null)return{scope:e,selected:null,identity:null,authorization:null,error:r.failure};let i=null,a=null,o,s=e=>{o=e,a=oa(e.credential,r.materialized)};try{let t=await S({method:`POST`,path:`/v1/auth/me/permissions`,body:{operation:[]},auth:e,requesterScope:e,responseFormat:`json`,onAuthPrepared:s});if(!t.ok)throw Error(sa(t));if(a===null)throw Error(`Live permission probe did not prepare a credential`);if(i=da(t.data),e===`read`)return{scope:e,selected:a,identity:null,authorization:i,error:null};if(o===void 0)throw Error(`Live permission probe did not retain its prepared credential`);let n=await ra(e,o);return{scope:e,selected:a,identity:n,authorization:i,error:null}}catch(r){return{scope:e,selected:a,identity:null,authorization:i,error:E(r,ca(t,n,o))}}}function oa(e,t){if(e===null)return null;let n=t??Oe().source;if(n===null)throw Error(`Prepared credential has no local provenance`);return{credential:e,source:n}}function sa(e){return[e.summary,...e.warnings].join(` — `)}function ca(e,t,n){return[i().userBearerToken,...p(n?.headers??{}),...e.state===`found`?je(e.stored.credential.tokens):[],t.state===`found`?t.stored.credential.secret:void 0]}function la(e,t,n=null){let r=t.state===`found`?t.stored:void 0,i=r?.credential.apiKey.expiresAt??null;return{host:e,present:r!==void 0,provider:r?.provider??null,activation:r?.activation??null,apiKeyId:r?.credential.apiKey.id??null,subject:r?.credential.apiKey.subject??null,scope:r?.credential.apiKey.scopes??[],name:r===void 0?null:oe(r.credential.apiKey.name,[r.credential.secret]),status:r?.credential.apiKey.status??null,expiresAt:i,metadataSource:r===void 0?null:n?.state===`verified`?`clerk`:`store-cache`,live:n===null?null:{state:n.state,summary:n.summary},expiresInDay:ma(i),storageFailure:t.state===`unavailable`?t.summary:null,keyringFailure:t.state===`missing`?t.keyringFailure??null:null,error:t.state===`invalid`?t.summary:null}}function ua(e,t){let n=t.state===`found`?t.stored:void 0;return{host:e,present:n!==void 0,provider:n?.provider??null,expiresAt:n?.credential.expiresAt??null,expired:n===void 0?null:Te(n.credential),renewable:n===void 0?null:n.credential.tokens.refresh_token!==void 0,identity:n===void 0?null:Ee(n.credential),client:n?.credential.client??null,storageFailure:t.state===`unavailable`?t.summary:null,keyringFailure:t.state===`missing`?t.keyringFailure??null:null,error:t.state===`invalid`?t.summary:null}}function da(e){if(typeof e!=`object`||!e||e instanceof Uint8Array)throw Error(`permission probe returned no JSON response`);let t=s.safeParse(e.response);if(!t.success)throw t.error;return t.data}function fa(e,t){let{expiresAt:n,expiresInDay:r}=la(e,t);return n!==null&&r!==null&&new Date(n).getTime()<=Date.now()?` (cached expiry passed ${Math.abs(r)}d ago; \`auth status\` re-checks it with aVenture sign-in)`:``}var pa=864e5;function ma(e){if(e===null)return null;let t=new Date(e).getTime();return Number.isNaN(t)?null:Math.round((t-Date.now())/pa)}var ha=7;function ga(e){return e===null?`none`:e.length<=11?e:`${e.slice(0,ha)}\u2026${e.slice(-4)}`}var _a=13,va=14;function ya(e){return[``,`${e.cliName} ${e.cliVersion} \u2192 ${e.apiKey.host}`+(e.apiVersion===null?` (api build unavailable)`:` (api ${e.apiVersion})`),``,...xa(e.oauth,e.cliName,e.refresh),...Ca(e.apiKey,e.oauth,e.cliName),``,U(`Providers`,Ea(e.providers)),U(`Environment`,Da(e.resolved)),U(`Selected`,Oa(e.resolved,e.refresh,e.cliName)),...ba(e.live),...e.systemOk?[]:[U(`System`,`uptime read failed`)]].join(`
-`)}function ba(e){if(e===null)return[];let t=W(`local credential provenance was captured before verification`);if(e.error!==null)return[``,U(`Live probe`,`${e.scope} permission probe failed`),t,W(e.error)];if(e.authorization===null)return[];let n=e.authorization.permissionGrant,r=e.identity;return[``,U(`Live probe`,`${e.scope} permission probe succeeded`),t,W(`operation access ${e.authorization.operationAccess}; ${n.role.length} role; ${n.permission.length} permission`),...r===null?[W(e.scope===`read`?`identity not requested for a read-scope credential`:`identity unavailable in this build`)]:[U(`Live account`,r.nameFull??r.email??r.clerkUserId??r.id)],W(`no API operation was executed or individually authorized`)]}function U(e,t){return`  ${e.padEnd(_a)}${t}`}function W(e){return`  ${``.padEnd(_a)}${e}`}function xa(e,t,n){switch(e.state){case`found`:{let{credential:r,provider:i}=e.stored,a=Ee(r);return[U(`OAuth`,`${a.email??a.subject??`unknown identity`} via ${i}`),W(Sa(r,t,n))]}case`missing`:return[U(`OAuth`,`none stored`),...e.keyringFailure===void 0?[]:[W(`OS keyring unusable — login stores to file: ${e.keyringFailure}`)]];case`unavailable`:return[U(`OAuth`,`storage unavailable: ${e.summary}`)];case`invalid`:return[U(`OAuth`,`stored credential invalid: ${e.summary}`)];default:throw Error(`Unsupported OAuth credential state`)}}function Sa(e,t,n){return Te(e)?e.tokens.refresh_token===void 0?`access token expired — run \`${t} auth login\``:n.failure===null?n.materialized===`api-key`?`access token expired and renewal failed; the API key is in use — \`${t} auth login\` renews OAuth`:`access token expired — not renewed while AUTH_TOKEN is set in the environment`:`access token expired — ${n.failure}`:`access token valid until ${e.expiresAt}`}function Ca(e,t,n){if(!e.present){if(t.state===`found`)return[];let r=e.storageFailure??(t.state===`unavailable`?t.summary:null);return r===null?[U(`Signed in`,`no \u2014 run \`${n} auth login\``),...e.error===null?[]:[W(`stored credential invalid: ${e.error}`)]]:[U(`Signed in`,`credential storage unavailable`),W(r)]}return[U(t.state===`found`?`API key`:`Signed in`,e.subject??`unknown subject`),W(`via ${e.provider??`unknown store`}`),U(`Key`,`${e.name??`unnamed`}  ${ga(e.apiKeyId)}`),...wa(e,n),U(`Scopes`,e.scope.length===0?`none`:e.scope.join(`, `))]}function wa(e,t){let n=e.live,r=e.expiresInDay,i=e.expiresAt;if(n?.state===`invalid`)return[U(`Key state`,`rejected by aVenture sign-in \u2014 ${n.summary}`),W(`run \`${t} auth logout\`, then \`${t} auth login --key\``)];let a=n?.state===`verified`;return[U(`Key state`,a?`${e.status??`unknown`}, verified by aVenture sign-in now`:`${e.status??`unknown`} when stored`),...i===null||r===null?[W(`no expiry recorded`)]:[W(Ta(i,r,a?`expires`:`cached expiry`))],...a?[]:[W(n===null?"aVenture sign-in owns the live verdict — `auth status` re-checks it":`aVenture sign-in could not be reached \u2014 ${n.summary}`)]]}function Ta(e,t,n){let r=e.slice(0,10);return new Date(e).getTime()<=Date.now()?`${n} ${r} passed ${Math.abs(t)}d ago`:t<=va?`${n} ${r}, ${t}d away`:`${n} ${r}`}function Ea(e){if(e.state===`unavailable`)return`unavailable: ${e.summary}`;let t=e.catalog.oauthClient;return[e.catalog.clerkPublishableKey?`browser sign-in`:`no browser sign-in`,t?`oauth ${Ae(t).host} client ${t.clientId}`:`no OAuth CLI client`].join(`; `)}function Da(e){return`${g.authToken}=${e.present?e.source??`resolved`:`unset`}`}function Oa(e,t,n){return e.present||t.materialized===`env`?`${g.authToken} from the environment`:t.materialized===`oauth`?`saved OAuth access token`:t.materialized===`api-key`?`saved API key`:`none \u2014 sign in with \`${n} auth login\``}var ka=`# >>> aventure-cli completion setup (managed by aventure-cli) >>>`,Aa=`# <<< aventure-cli completion setup (managed by aventure-cli) <<<`,ja=`.aventure-cli-completion.bak`;function Ma(e,t){e.command(`install`).summary(`install shell completion loaders`).description(`Install managed shell completion loaders for supported shells.`).action(()=>za([])),e.command(`uninstall`).summary(`remove shell completion loaders`).description(`Remove managed shell completion loaders installed by ${t}.`).action(()=>za([`--uninstall`]))}function Na(e,t){e.command(`setup`).summary(`configure zsh completion startup`).description(`Configure ~/.zshrc so zsh loads ${t} completion loaders.`).option(`--dry-run`,`print the managed zshrc block without writing`).option(`--yes`,`apply without prompting`).option(`--uninstall`,`remove the managed zshrc block`).action(async e=>{let t=La(),n=await Ia({rcFile:j(It(),`.zshrc`),installerPath:t,mode:e.uninstall?`uninstall`:`install`,dryRun:e.dryRun,prompter:e.yes||e.dryRun?void 0:Xa});M.stdout.write(`${n.message}\n`),!n.cancelled&&!e.dryRun&&za(e.uninstall?[`--uninstall`]:[])})}function Pa(e,t=`fpath-only`){return[ka,`# installer: ${e}`,'fpath=("${XDG_DATA_HOME:-$HOME/.local/share}/zsh/site-functions" $fpath)',...t===`fpath-and-compinit`?[`autoload -Uz compinit`,`compinit`]:[],Aa].join(`
+`)),!0)}function Qi(){switch(zt()){case`darwin`:return`MACOS`;case`linux`:return`LINUX`;case`win32`:return`WINDOWS`;default:return`OTHER`}}function $i(e){return Math.min(Wi,Math.max(Ui,e))}async function ea(e,t){let n=t-Date.now();n>0&&await Ft(Math.min(e*1e3,n))}function ta(e,t){return{host:e.host,provider:e.provider,apiKeyId:e.credential.apiKey.id,name:oe(e.credential.apiKey.name,[e.credential.secret]),activation:e.activation,verified:t}}function H(e,t,n,r){return{...o(n,r===void 0?[]:[r]),data:ta(e,t)}}function na(e,t){return e.expiresAt===null||e.expiresAt===void 0||t.expiresAt===null||t.expiresAt===void 0?!1:new Date(e.expiresAt)>new Date(t.expiresAt)}async function ra(){return null}async function ia(e){let t=null,n=e=>{t=e};try{await Fe(e,n),await Le(n)}catch(e){return{materialized:t,failure:E(e)}}return{materialized:t,failure:null}}async function aa(e,t,n,r){if(r.failure!==null)return{scope:e,selected:null,identity:null,authorization:null,error:r.failure};let i=null,a=null,o,s=e=>{o=e,a=oa(e.credential,r.materialized)};try{let t=await S({method:`POST`,path:`/v1/auth/me/permissions`,body:{operation:[]},auth:e,requesterScope:e,responseFormat:`json`,onAuthPrepared:s});if(!t.ok)throw Error(sa(t));if(a===null)throw Error(`Live permission probe did not prepare a credential`);if(i=da(t.data),e===`read`)return{scope:e,selected:a,identity:null,authorization:i,error:null};if(o===void 0)throw Error(`Live permission probe did not retain its prepared credential`);let n=await ra(e,o);return{scope:e,selected:a,identity:n,authorization:i,error:null}}catch(r){return{scope:e,selected:a,identity:null,authorization:i,error:E(r,ca(t,n,o))}}}function oa(e,t){if(e===null)return null;let n=t??Oe().source;if(n===null)throw Error(`Prepared credential has no local provenance`);return{credential:e,source:n}}function sa(e){return[e.summary,...e.warnings].join(` — `)}function ca(e,t,n){return[i().userBearerToken,...p(n?.headers??{}),...e.state===`found`?je(e.stored.credential.tokens):[],t.state===`found`?t.stored.credential.secret:void 0]}function la(e,t,n=null){let r=t.state===`found`?t.stored:void 0,i=r?.credential.apiKey.expiresAt??null;return{host:e,present:r!==void 0,provider:r?.provider??null,activation:r?.activation??null,apiKeyId:r?.credential.apiKey.id??null,subject:r?.credential.apiKey.subject??null,scope:r?.credential.apiKey.scopes??[],name:r===void 0?null:oe(r.credential.apiKey.name,[r.credential.secret]),status:r?.credential.apiKey.status??null,expiresAt:i,metadataSource:r===void 0?null:n?.state===`verified`?`clerk`:`store-cache`,live:n===null?null:{state:n.state,summary:n.summary},expiresInDay:ma(i),storageFailure:t.state===`unavailable`?t.summary:null,keyringFailure:t.state===`missing`?t.keyringFailure??null:null,error:t.state===`invalid`?t.summary:null}}function ua(e,t){let n=t.state===`found`?t.stored:void 0;return{host:e,present:n!==void 0,provider:n?.provider??null,expiresAt:n?.credential.expiresAt??null,expired:n===void 0?null:Te(n.credential),renewable:n===void 0?null:n.credential.tokens.refresh_token!==void 0,identity:n===void 0?null:Ee(n.credential),client:n?.credential.client??null,storageFailure:t.state===`unavailable`?t.summary:null,keyringFailure:t.state===`missing`?t.keyringFailure??null:null,error:t.state===`invalid`?t.summary:null}}function da(e){if(typeof e!=`object`||!e||e instanceof Uint8Array)throw Error(`permission probe returned no JSON response`);let t=s.safeParse(e.response);if(!t.success)throw t.error;return t.data}function fa(e,t){let{expiresAt:n,expiresInDay:r}=la(e,t);return n!==null&&r!==null&&new Date(n).getTime()<=Date.now()?` (cached expiry passed ${Math.abs(r)}d ago; \`auth status\` re-checks it with aVenture sign-in)`:``}var pa=864e5;function ma(e){if(e===null)return null;let t=new Date(e).getTime();return Number.isNaN(t)?null:Math.round((t-Date.now())/pa)}var ha=7;function ga(e){return e===null?`none`:e.length<=11?e:`${e.slice(0,ha)}\u2026${e.slice(-4)}`}var _a=13,va=14;function ya(e){return[``,`${e.cliName} ${e.cliVersion} \u2192 ${e.apiKey.host}`+(e.apiVersion===null?` (api build unavailable)`:` (api ${e.apiVersion})`),``,...xa(e.oauth,e.cliName,e.refresh),...Ca(e.apiKey,e.oauth,e.cliName),``,U(`Providers`,Ea(e.providers)),U(`Environment`,Da(e.resolved)),U(`Selected`,Oa(e.resolved,e.refresh,e.cliName)),...ba(e.live),...e.systemOk?[]:[U(`System`,`uptime read failed`)]].join(`
+`)}function ba(e){if(e===null)return[];let t=W(`local credential provenance was captured before verification`);if(e.error!==null)return[``,U(`Live probe`,`${e.scope} permission probe failed`),t,W(e.error)];if(e.authorization===null)return[];let n=e.authorization.permissionGrant,r=e.identity;return[``,U(`Live probe`,`${e.scope} permission probe succeeded`),t,W(`operation access ${e.authorization.operationAccess}; ${n.role.length} role; ${n.permission.length} permission`),...r===null?[W(e.scope===`read`?`identity not requested for a read-scope credential`:`identity unavailable in this build`)]:[U(`Live account`,r.nameFull??r.email??r.clerkUserId??r.id)],W(`no API operation was executed or individually authorized`)]}function U(e,t){return`  ${e.padEnd(_a)}${t}`}function W(e){return`  ${``.padEnd(_a)}${e}`}function xa(e,t,n){switch(e.state){case`found`:{let{credential:r,provider:i}=e.stored,a=Ee(r);return[U(`OAuth`,`${a.email??a.subject??`unknown identity`} via ${i}`),W(Sa(r,t,n))]}case`missing`:return[U(`OAuth`,`none stored`),...e.keyringFailure===void 0?[]:[W(`OS keyring unusable — login stores to file: ${e.keyringFailure}`)]];case`unavailable`:return[U(`OAuth`,`storage unavailable: ${e.summary}`)];case`invalid`:return[U(`OAuth`,`stored credential invalid: ${e.summary}`)];default:throw Error(`Unsupported OAuth credential state`)}}function Sa(e,t,n){return Te(e)?e.tokens.refresh_token===void 0?`access token expired — run \`${t} auth login\``:n.failure===null?n.materialized===`api-key`?`access token expired and renewal failed; the API key is in use — \`${t} auth login\` renews OAuth`:`access token expired — not renewed while AUTH_TOKEN is set in the environment`:`access token expired — ${n.failure}`:`access token valid until ${e.expiresAt}`}function Ca(e,t,n){if(!e.present){if(t.state===`found`)return[];let r=e.storageFailure??(t.state===`unavailable`?t.summary:null);return r===null?[U(`Signed in`,`no \u2014 run \`${n} auth login\``),...e.error===null?[]:[W(`stored credential invalid: ${e.error}`)]]:[U(`Signed in`,`credential storage unavailable`),W(r)]}return[U(t.state===`found`?`API key`:`Signed in`,e.subject??`unknown subject`),W(`via ${e.provider??`unknown store`}`),U(`Key`,`${e.name??`unnamed`}  ${ga(e.apiKeyId)}`),...wa(e,n),U(`Scopes`,e.scope.length===0?`none`:e.scope.join(`, `))]}function wa(e,t){let n=e.live,r=e.expiresInDay,i=e.expiresAt;if(n?.state===`invalid`)return[U(`Key state`,`rejected by aVenture sign-in \u2014 ${n.summary}`),W(`run \`${t} auth logout\`, then \`${t} auth login --key\``)];let a=n?.state===`verified`;return[U(`Key state`,a?`${e.status??`unknown`}, verified by aVenture sign-in now`:`${e.status??`unknown`} when stored`),...i===null||r===null?[W(`no expiry recorded`)]:[W(Ta(i,r,a?`expires`:`cached expiry`))],...a?[]:[W(n===null?"aVenture sign-in owns the live verdict — `auth status` re-checks it":`aVenture sign-in could not be reached \u2014 ${n.summary}`)]]}function Ta(e,t,n){let r=e.slice(0,10);return new Date(e).getTime()<=Date.now()?`${n} ${r} passed ${Math.abs(t)}d ago`:t<=va?`${n} ${r}, ${t}d away`:`${n} ${r}`}function Ea(e){if(e.state===`unavailable`)return`unavailable: ${e.summary}`;let t=e.catalog.oauthClient;return[e.catalog.clerkPublishableKey?`browser sign-in`:`no browser sign-in`,t?`oauth ${Ae(t).host} client ${t.clientId}`:`no OAuth CLI client`].join(`; `)}function Da(e){return`${g.authToken}=${e.present?e.source??`resolved`:`unset`}`}function Oa(e,t,n){return e.present||t.materialized===`env`?`${g.authToken} from the environment`:t.materialized===`oauth`?`saved OAuth access token`:t.materialized===`api-key`?`saved API key`:`none \u2014 sign in with \`${n} auth login\``}var ka=`# >>> aventure-cli completion setup (managed by aventure-cli) >>>`,Aa=`# <<< aventure-cli completion setup (managed by aventure-cli) <<<`,ja=`.aventure-cli-completion.bak`;function Ma(e,t){e.command(`install`).summary(`install shell completion loaders`).description(`Install managed shell completion loaders for supported shells.`).action(()=>za([])),e.command(`uninstall`).summary(`remove shell completion loaders`).description(`Remove managed shell completion loaders installed by ${t}.`).action(()=>za([`--uninstall`]))}function Na(e,t){e.command(`setup`).summary(`configure zsh completion startup`).description(`Configure ~/.zshrc so zsh loads ${t} completion loaders.`).option(`--dry-run`,`print the managed zshrc block without writing`).option(`--yes`,`apply without prompting`).option(`--uninstall`,`remove the managed zshrc block`).action(async e=>{let t=La(),n=await Ia({rcFile:j(Lt(),`.zshrc`),installerPath:t,mode:e.uninstall?`uninstall`:`install`,dryRun:e.dryRun,prompter:e.yes||e.dryRun?void 0:Xa});M.stdout.write(`${n.message}\n`),!n.cancelled&&!e.dryRun&&za(e.uninstall?[`--uninstall`]:[])})}function Pa(e,t=`fpath-only`){return[ka,`# installer: ${e}`,'fpath=("${XDG_DATA_HOME:-$HOME/.local/share}/zsh/site-functions" $fpath)',...t===`fpath-and-compinit`?[`autoload -Uz compinit`,`compinit`]:[],Aa].join(`
 `)}function Fa(){let e=za([`--status`],`pipe`);if(e.status!==0)return{refreshed:!1,message:`completion status exited ${e.status??1}`};if(!Ba(e.stdout??``))return{refreshed:!1,message:`no managed shell completions found`};let t=za([],`pipe`);return t.status===0?{refreshed:!0,message:(t.stdout??``).trim()||`shell completions refreshed`}:{refreshed:!1,message:`completion refresh exited ${t.status??1}`}}async function Ia({rcFile:e,installerPath:t,mode:n,dryRun:r=!1,prompter:i}){let a=Va(e),o=a.length===0?[]:a.split(`
 `),s=Ha(o,e);if(n===`uninstall`&&s===null)return{changed:!1,cancelled:!1,message:`${e}: already up-to-date`,content:a};let c=n===`install`?Ua(o,s,t,e):Wa(o,s);return c===a?{changed:!1,cancelled:!1,message:`${e}: already up-to-date`,content:c}:r?{changed:!0,cancelled:!1,message:c,content:c}:i!==void 0&&!await i(`Update ${e}?`)?{changed:!0,cancelled:!0,message:`${e}: unchanged; pass --yes to apply without a prompt`,content:a}:(qa(e,c),{changed:!0,cancelled:!1,message:`${e}: updated`,content:c})}function La(e=M.argv[1]){let t=e===void 0?``:Ra(e),n=j(A(t),`..`,`..`,`scripts`,`install-zsh-completion-loader.mjs`);return yt(n)?n:j(A(t),`..`,`scripts`,`install-zsh-completion-loader.mjs`)}function Ra(e){try{return Tt(e)}catch{return j(e)}}function za(e,t=`inherit`){let n=ht(M.execPath,[La(),...e],{encoding:t===`pipe`?`utf8`:void 0,stdio:t});if(n.error!==void 0)throw n.error;if(t===`inherit`){n.status!==0&&(M.exitCode=n.status??1);return}return{stdout:n.stdout?.toString(),stderr:n.stderr?.toString(),status:n.status}}function Ba(e){return e.split(/\r?\n/u).some(e=>e.trim().endsWith(`: managed`))}function Va(e){return yt(e)?(Ja(e),Ct(e,`utf8`)):``}function Ha(e,t){let n=Ga(e,ka),r=Ga(e,Aa);if(n.length===0&&r.length===0)return null;if(n.length!==1||r.length!==1||n[0]>=r[0])throw Error(`${t} has malformed managed completion setup markers; fix manually before retrying.`);return[n[0],r[0]]}function Ua(e,t,n,r){let i=t===null?[...e]:[...e.slice(0,t[0]),...e.slice(t[1]+1)],a=Ka(i),o=Pa(n,a===-1?`fpath-and-compinit`:`fpath-only`).split(`
 `),s=t===null?a:t[0],c=s===-1?i.length:s;if(t!==null&&a!==-1&&a<c)throw Error(`${r} runs compinit before the managed block; move the block above compinit manually.`);return Ya([...i.slice(0,c),...o,...i.slice(c)])}function Wa(e,t){return Ya(t===null?e:[...e.slice(0,t[0]),...e.slice(t[1]+1)])}function Ga(e,t){return e.flatMap((e,n)=>e===t?[n]:[])}function Ka(e){return e.findIndex(e=>/^\s*(autoload\s+.*\bcompinit\b|compinit(?:\s|$))/.test(e))}function qa(e,t){xt(A(e),{recursive:!0}),yt(e)&&(Ja(e),Ja(`${e}${ja}`),vt(e,`${e}${ja}`));let n=j(A(e),`.${gt(e)}.${M.pid}.tmp`);Ja(n),kt(n,t,{mode:420}),Et(n,e)}function Ja(e){if(yt(e)&&bt(e).isSymbolicLink())throw Error(`refusing to write symlink: ${e}`)}function Ya(e){let t=e.join(`