@cybedefend/vibedefend 1.3.2 → 1.4.0

package/dist/install.js

@@ -1,32 +1,45 @@
+import { confirm as confirmImpl } from '@inquirer/prompts';
 import kleur from 'kleur';
 import { adapterFor } from './clients/registry.js';
 import { checkPlatformSupport } from './clients/claude-code.js';
+import { deriveDashboardUrl, deriveLogtoEndpoint } from './endpoints.js';
 import { installHookRuntime } from './hooks/install.js';
-import { runLogin } from './login.js';
-import { hasStoredAuth } from './auth/auth.js';
-import { runInstallPrompts } from './prompts.js';
+import { runLogin as runLoginImpl } from './login.js';
+import { hasStoredAuth as hasStoredAuthImpl } from './auth/auth.js';
+import { ensureOrganization as ensureOrganizationImpl } from './org-gate.js';
+import { askClientSelection as askClientSelectionImpl, askHookConfig as askHookConfigImpl, askRegion as askRegionImpl, } from './prompts.js';
 import { stampInstalledVersion } from './self-update.js';
-import { detectPlatform, home, log } from './utils.js';
+import { detectPlatform, home, isUserCancellation, log } from './utils.js';
 import { pkg } from './version.js';
 /**
  * Top-level installer.
  *
- * Flow:
+ * Flow (login-first, spec §2.3):
  *  1. Banner + platform sanity check (Windows hooks unsupported)
  *  2. Region pick (Production EU / US)
- *  3. Multi-select: which agents to wire hooks into?
- *     - shows detection result + version for each
- *     - pre-checks supported clients, disables too-old versions
- *  4. Hook config (threshold, auto-propose)
- *  5. For each selected adapter:
- *     - (optional) registerMcp — only Claude Code currently
- *     - writeSettings — drop hook entries into its config file
- *  6. Write the universal hook scripts to ~/.cybedefend/hooks/
- *     (one set serves all adapters)
- *  7. Stamp ~/.cybedefend/version (auto-update plumbing)
- *  8. Print next-steps footer
+ *  3. LOGIN — immediately after the region: skip if credentials are already
+ *     stored; else run the browser PKCE flow. On failure, offer exactly ONE
+ *     retry, then abort with exit code 1 (everything after this point needs
+ *     an authenticated user).
+ *  4. ORGANIZATION GATE — the account must belong to ≥1 organization to be
+ *     useful. If it doesn't, open the dashboard on-boarding page and wait
+ *     (poll). Ctrl-C / timeout skips with a warning; install continues.
+ *  5. Multi-select: which agents to wire hooks into?
+ *  6. Hook config (threshold, auto-propose)
+ *  7. For each selected adapter: registerMcp + writeSettings
+ *  8. Write the universal hook runner to ~/.cybedefend/
+ *  9. Stamp ~/.cybedefend/version (auto-update plumbing)
+ * 10. Print next-steps footer
  */
-export async function runInstall() {
+export async function runInstall(deps = {}, opts = {}) {
+    const askRegion = deps.askRegion ?? askRegionImpl;
+    const hasStoredAuth = deps.hasStoredAuth ?? hasStoredAuthImpl;
+    const runLogin = deps.runLogin ?? runLoginImpl;
+    const ensureOrganization = deps.ensureOrganization ?? ensureOrganizationImpl;
+    const askClientSelection = deps.askClientSelection ?? askClientSelectionImpl;
+    const askHookConfig = deps.askHookConfig ?? askHookConfigImpl;
+    const confirm = deps.confirm ?? confirmImpl;
+    const exit = deps.exit ?? ((code) => process.exit(code));
     banner();
     const p = detectPlatform();
     const platformSupport = checkPlatformSupport();
@@ -34,22 +47,72 @@ export async function runInstall() {
     if (!platformSupport.hooksSupported) {
         log.warn(platformSupport.reason ?? 'Hooks unsupported on this platform.');
     }
-    const selection = await runInstallPrompts();
-    log.step('Region selected: ' + kleur.bold(selection.region.label));
-    log.hint(`MCP URL: ${selection.region.mcpUrl}`);
-    log.hint(`API base: ${selection.region.apiBase}`);
-    if (selection.selectedClients.length === 0) {
+    // ── ① Region ────────────────────────────────────────────────────────────────
+    const region = await askRegion();
+    log.step('Region selected: ' + kleur.bold(region.label));
+    log.hint(`MCP URL: ${region.mcpUrl}`);
+    log.hint(`API base: ${region.apiBase}`);
+    // ── ② Login (before anything else touches the gateway) ─────────────────────
+    //
+    // Why first? Everything downstream — the organization gate, project
+    // auto-resolution from the git origin, the hooks' very first rules fetch —
+    // needs a signed-in user. Failing login late (the pre-1.4 flow logged in
+    // AFTER wiring hooks) left half-installed setups behind.
+    //
+    // We check `hasStoredAuth` (which validates OUR specific bundle shape:
+    // accessToken + refreshToken + expiresAt + logtoEndpoint + cliAppId +
+    // logtoResource) rather than the legacy `resolveToken` resolver. The legacy
+    // resolver also matches Codex CLI's own MCP credential (stored under the
+    // same keychain service `Codex MCP Credentials` but with a different account
+    // shape), which would falsely tell us "already configured" even though our
+    // hook can't actually use Codex's MCP-scoped JWT to call the gateway.
+    const logtoEndpoint = region.logtoEndpoint ??
+        deriveLogtoEndpoint(region.apiBase);
+    if (hasStoredAuth(region.mcpName) && !opts.force) {
+        log.ok('VibeDefend credentials already present. Skipping login.');
+    }
+    else {
+        log.step('Sign in to CybeDefend');
+        log.hint('Your browser will open for a one-time sign-in (instant if you already have a session).');
+        // Force the actual OAuth here. We only reach this branch when VibeDefend
+        // has NO stored bundle of its OWN (hasStoredAuth === false), or the user
+        // asked for it (--force). A token that merely belongs to a coding agent —
+        // which `runLogin`'s internal `resolveToken` check would match and use to
+        // short-circuit — must NOT skip the browser step: otherwise `logout` +
+        // `install` silently signs you back in whenever Claude Code / Codex still
+        // hold an MCP token, and the org-gate never gets a fresh VibeDefend token.
+        const loginOk = await loginWithOneRetry({
+            mcpName: region.mcpName,
+            apiBase: region.apiBase,
+            logtoEndpoint,
+            force: true,
+        }, runLogin, confirm);
+        if (!loginOk) {
+            log.err('VibeDefend needs a signed-in CybeDefend account to install. ' +
+                'Run `vibedefend install` again when you are ready to sign in.');
+            exit(1);
+            return; // In tests `exit` is a spy — never continue past an abort.
+        }
+    }
+    // ── ③ Organization gate ─────────────────────────────────────────────────────
+    // An account without an organization can't hold projects, rules, or scans.
+    // The gate nudges the user through dashboard onboarding but NEVER blocks:
+    // Ctrl-C / timeout / gateway-unreachable all continue with a warning.
+    await ensureOrganization({
+        apiBase: region.apiBase,
+        dashboardUrl: deriveDashboardUrl(region),
+        mcpName: region.mcpName,
+    });
+    // ── ④ Agents + hook config ──────────────────────────────────────────────────
+    const selectedClients = await askClientSelection();
+    if (selectedClients.length === 0) {
         log.info('No agents selected. The MCP URL is printed above — add it to your client manually if needed. ' +
             'The doctrine arrives via Server.instructions on every supported client.');
         stampInstalledVersion(home, pkg.version);
-        printDoneFooter([], selection.region.mcpName);
+        printDoneFooter([], region);
         return;
     }
-    if (!selection.hooks) {
-        // Shouldn't happen — prompts guarantees hooks when selection > 0.
-        log.err('Hook config missing despite selected agents — aborting.');
-        process.exit(1);
-    }
+    const hooks = await askHookConfig();
     // Install the Node-based hook runner ONCE — one bundled file serves
     // every adapter. The runner reads runtime-config.json at every
     // invocation, so re-running `vibedefend update` propagates new
@@ -58,8 +121,8 @@ export async function runInstall() {
     if (platformSupport.hooksSupported) {
         log.step('Installing universal hook runner');
         const { runnerPath, configPath } = installHookRuntime({
-            region: selection.region,
-            hooks: selection.hooks,
+            region,
+            hooks,
             installedVersion: pkg.version,
         });
         log.ok(`Runner:  ${runnerPath}`);
@@ -71,14 +134,14 @@ export async function runInstall() {
     // Now wire each selected client's settings file. Adapters are
     // responsible for their own idempotency + error handling.
     const installedLabels = [];
-    for (const id of selection.selectedClients) {
+    for (const id of selectedClients) {
         const adapter = adapterFor(id);
         log.step(`Wiring ${adapter.label}`);
         if (adapter.registerMcp) {
-            adapter.registerMcp({ region: selection.region });
+            adapter.registerMcp({ region });
         }
         if (adapter.postRegister) {
-            adapter.postRegister({ region: selection.region });
+            adapter.postRegister({ region });
         }
         if (platformSupport.hooksSupported) {
             adapter.writeSettings({
@@ -86,70 +149,59 @@ export async function runInstall() {
                 // `~/.cybedefend/hook-runner.js`. Adapters compose `node <path>
                 // <subcommand>` via `hookCommand(...)` and ignore this field.
                 hookDir: home('.cybedefend'),
-                enableSessionReview: selection.hooks.enableSessionReview,
-                region: selection.region,
-                hooks: selection.hooks,
+                enableSessionReview: hooks.enableSessionReview,
+                region,
+                hooks,
             });
         }
         installedLabels.push(adapter.label);
     }
-    if (selection.hooks.autoProposeMode) {
+    if (hooks.autoProposeMode) {
         log.warn('Auto-propose mode is ON — the agent will call cybe_rules_report_missing ' +
             'without asking you first. You will still review proposals at the next session ' +
             'start (Accept/Reject picker), but they land without a chat-side prompt.');
     }
     stampInstalledVersion(home, pkg.version);
     log.hint(`Version stamp: ~/.cybedefend/version (v${pkg.version})`);
-    // Auto-login: if no VibeDefend OAuth bundle exists after hook wiring, run
-    // the login flow so the user is fully set up in one command. If login fails,
-    // log a warning and continue — the user can run `vibedefend login` later.
-    //
-    // We check `hasStoredAuth` (which validates OUR specific bundle shape:
-    // accessToken + refreshToken + expiresAt + logtoEndpoint + cliAppId +
-    // logtoResource) rather than the legacy `resolveToken` resolver. The legacy
-    // resolver also matches Codex CLI's own MCP credential (stored under the
-    // same keychain service `Codex MCP Credentials` but with a different account
-    // shape), which would falsely tell us "already configured" even though our
-    // hook can't actually use Codex's MCP-scoped JWT to call the gateway.
-    //
-    // Note for users who already have Codex set up: yes, you'll see the login
-    // flow once. Codex's MCP-scoped token has `aud: cybedefend-mcp` and limited
-    // Permify rights; vibedefend's runtime hook needs a USER token (`aud:
-    // cybedefend-api`) to call /effective-rules and friends. They are NOT
-    // interchangeable. After one Logto SSO consent (instant if your browser
-    // already has a session) the refresh_token persists for 14 days.
-    if (hasStoredAuth(selection.region.mcpName)) {
-        log.ok('VibeDefend credentials already present. Skipping login.');
-    }
-    else {
-        log.info('No VibeDefend credentials found. Running login flow...');
-        try {
-            await runLogin({
-                mcpName: selection.region.mcpName,
-                apiBase: selection.region.apiBase,
-                logtoEndpoint: selection.region.logtoEndpoint ??
-                    deriveLogtoEndpoint(selection.region.apiBase),
-            });
-        }
-        catch (e) {
-            const msg = e instanceof Error ? e.message : String(e);
-            log.warn(`Login skipped (${msg}). Run \`vibedefend login\` to authenticate.`);
-        }
-    }
-    printDoneFooter(installedLabels, selection.region.mcpName);
+    // NOTE: the pre-1.4 end-of-install auto-login used to live here. Login now
+    // happens FIRST (step ② above) — by this point the user is guaranteed to be
+    // authenticated, so there is nothing left to do.
+    printDoneFooter(installedLabels, region);
 }
 /**
- * Derive the Logto OIDC endpoint from a gateway apiBase.
- * Mirrors the logic in login.ts#deriveLogtoEndpointFromApiBase.
+ * Run the login flow with exactly one confirm-gated retry.
+ * Returns true when a login attempt succeeded, false when the user declined
+ * the retry or the retry also failed. A Ctrl-C inside the confirm prompt
+ * propagates up (handled as a clean cancel by the CLI action wrapper).
  */
-function deriveLogtoEndpoint(apiBase) {
-    if (apiBase.includes('://api.')) {
-        return apiBase.replace('://api.', '://auth.');
+async function loginWithOneRetry(loginOpts, runLogin, confirm) {
+    try {
+        await runLogin(loginOpts);
+        return true;
+    }
+    catch (e) {
+        if (isUserCancellation(e))
+            throw e;
+        const msg = e instanceof Error ? e.message : String(e);
+        log.warn(`Sign-in failed: ${msg}`);
+    }
+    const retry = await confirm({
+        message: 'Try signing in again?',
+        default: true,
+    });
+    if (!retry)
+        return false;
+    try {
+        await runLogin(loginOpts);
+        return true;
     }
-    if (apiBase.match(/\/\/api-[a-z]+\./)) {
-        return apiBase.replace('://api-', '://auth-');
+    catch (e) {
+        if (isUserCancellation(e))
+            throw e;
+        const msg = e instanceof Error ? e.message : String(e);
+        log.warn(`Sign-in failed again: ${msg}`);
+        return false;
     }
-    return apiBase;
 }
 function banner() {
     console.log();
@@ -158,7 +210,7 @@ function banner() {
     console.log(kleur.dim('  Sets up the MCP server, hooks, and project link.'));
     console.log();
 }
-function printDoneFooter(installedLabels, mcpName) {
+function printDoneFooter(installedLabels, region) {
     console.log();
     log.ok('Install complete.');
     console.log();
@@ -168,11 +220,13 @@ function printDoneFooter(installedLabels, mcpName) {
         console.log();
     }
     console.log(kleur.bold('Next steps:'));
-    console.log(`  ${kleur.cyan('1.')} Open your IDE in your repo. First MCP tool call triggers OAuth (browser opens). ` +
-        `Tokens are cached in your OS keychain after that.`);
-    console.log(`  ${kleur.cyan('2.')} Drop a ${kleur.bold('.cybedefend/config.json')} at the repo root with the project UUID:`);
-    console.log(kleur.dim('       { "projectId": "<your-project-uuid>" }'));
-    console.log(`  ${kleur.cyan('3.')} Verify (Claude Code): ${kleur.dim('`claude mcp list`')} should show ${kleur.bold(mcpName)}.`);
+    console.log(`  ${kleur.cyan('1.')} Open your IDE in your repo — you are already signed in, so the MCP tools work right away.`);
+    console.log(`  ${kleur.cyan('2.')} Repos imported from GitHub/GitLab are matched to their CybeDefend project ` +
+        `automatically via the git origin — nothing to do.`);
+    console.log(`  ${kleur.cyan('3.')} For any other repo, link it once: ${kleur.dim('`vibedefend link`')} ` +
+        `(or ${kleur.dim('`npx -y @cybedefend/vibedefend@latest link`')}).`);
+    console.log(kleur.dim('     A `.cybedefend/config.json` with { "projectId": "<uuid>" } remains a supported override.'));
+    console.log(`  ${kleur.cyan('4.')} Verify (Claude Code): ${kleur.dim('`claude mcp list`')} should show ${kleur.bold(region.mcpName)}.`);
     console.log();
     console.log(kleur.dim('  Tunables (set per-shell or per-project to override defaults):'));
     console.log(kleur.dim('    CYBEDEFEND_REVIEW_THRESHOLD  — edits before the Stop hook fires'));

package/dist/install.js.map

@@ -1 +1 @@
-{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,EAAE,CAAC;IAET,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;IAC3B,MAAM,eAAe,GAAG,oBAAoB,EAAE,CAAC;IAE/C,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,qCAAqC,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAE5C,GAAG,CAAC,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,GAAG,CAAC,IAAI,CAAC,YAAY,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,GAAG,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAElD,IAAI,SAAS,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CACN,+FAA+F;YAC7F,yEAAyE,CAC5E,CAAC;QACF,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,eAAe,CAAC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACrB,kEAAkE;QAClE,GAAG,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,oEAAoE;IACpE,+DAA+D;IAC/D,+DAA+D;IAC/D,kEAAkE;IAClE,oEAAoE;IACpE,IAAI,eAAe,CAAC,cAAc,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC7C,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,kBAAkB,CAAC;YACpD,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,gBAAgB,EAAE,GAAG,CAAC,OAAO;SAC9B,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,YAAY,UAAU,EAAE,CAAC,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,YAAY,UAAU,EAAE,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CACN,wFAAwF,CACzF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,0DAA0D;IAC1D,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAEpC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,OAAO,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,eAAe,CAAC,cAAc,EAAE,CAAC;YACnC,OAAO,CAAC,aAAa,CAAC;gBACpB,uDAAuD;gBACvD,gEAAgE;gBAChE,8DAA8D;gBAC9D,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC;gBAC5B,mBAAmB,EAAE,SAAS,CAAC,KAAK,CAAC,mBAAmB;gBACxD,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,KAAK,EAAE,SAAS,CAAC,KAAK;aACvB,CAAC,CAAC;QACL,CAAC;QACD,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,SAAS,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CACN,0EAA0E;YACxE,gFAAgF;YAChF,yEAAyE,CAC5E,CAAC;IACJ,CAAC;IAED,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACzC,GAAG,CAAC,IAAI,CAAC,0CAA0C,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;IAEnE,0EAA0E;IAC1E,6EAA6E;IAC7E,0EAA0E;IAC1E,EAAE;IACF,uEAAuE;IACvE,sEAAsE;IACtE,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,2EAA2E;IAC3E,sEAAsE;IACtE,EAAE;IACF,0EAA0E;IAC1E,4EAA4E;IAC5E,sEAAsE;IACtE,sEAAsE;IACtE,wEAAwE;IACxE,iEAAiE;IACjE,IAAI,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,EAAE,CAAC,yDAAyD,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO;gBACjC,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO;gBACjC,aAAa,EACV,SAAS,CAAC,MAAqC,CAAC,aAAa;oBAC9D,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,kBAAkB,GAAG,8CAA8C,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,eAAe,CAAC,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,OAAe;IAC1C,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtC,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,MAAM;IACb,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACjC,KAAK,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAC3D,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAChE,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,eAAyB,EAAE,OAAe;IACjE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC;YACjC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACxD,CAAC;QACF,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,mFAAmF;QACtG,mDAAmD,CACtD,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,0CAA0C,CAChH,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CACpH,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAC7E,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,qEAAqE,CAAC,CACjF,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,2DAA2D,CAAC,CACvE,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,qEAAqE,CAAC,CACjF,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC"}
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,aAAa,IAAI,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,kBAAkB,IAAI,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EACL,kBAAkB,IAAI,sBAAsB,EAC5C,aAAa,IAAI,iBAAiB,EAClC,SAAS,IAAI,aAAa,GAE3B,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AAC3E,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAqCnC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAoB,EAAE,EACtB,OAA4B,EAAE;IAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC;IAClD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,iBAAiB,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,YAAY,CAAC;IAC/C,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,sBAAsB,CAAC;IAC7E,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,sBAAsB,CAAC;IAC7E,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,iBAAiB,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjE,MAAM,EAAE,CAAC;IAET,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;IAC3B,MAAM,eAAe,GAAG,oBAAoB,EAAE,CAAC;IAE/C,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,qCAAqC,CAAC,CAAC;IAC5E,CAAC;IAED,+EAA+E;IAC/E,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;IAEjC,GAAG,CAAC,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,GAAG,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,GAAG,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAExC,8EAA8E;IAC9E,EAAE;IACF,oEAAoE;IACpE,2EAA2E;IAC3E,yEAAyE;IACzE,yDAAyD;IACzD,EAAE;IACF,uEAAuE;IACvE,sEAAsE;IACtE,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,aAAa,GAChB,MAAqC,CAAC,aAAa;QACpD,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEtC,IAAI,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACjD,GAAG,CAAC,EAAE,CAAC,yDAAyD,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAClC,GAAG,CAAC,IAAI,CACN,wFAAwF,CACzF,CAAC;QACF,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,uEAAuE;QACvE,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,OAAO,GAAG,MAAM,iBAAiB,CACrC;YACE,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,aAAa;YACb,KAAK,EAAE,IAAI;SACZ,EACD,QAAQ,EACR,OAAO,CACR,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CACL,8DAA8D;gBAC5D,+DAA+D,CAClE,CAAC;YACF,IAAI,CAAC,CAAC,CAAC,CAAC;YACR,OAAO,CAAC,2DAA2D;QACrE,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,2EAA2E;IAC3E,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,kBAAkB,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,YAAY,EAAE,kBAAkB,CAAC,MAAM,CAAC;QACxC,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC,CAAC;IAEH,+EAA+E;IAC/E,MAAM,eAAe,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAEnD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CACN,+FAA+F;YAC7F,yEAAyE,CAC5E,CAAC;QACF,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC;IAEpC,oEAAoE;IACpE,+DAA+D;IAC/D,+DAA+D;IAC/D,kEAAkE;IAClE,oEAAoE;IACpE,IAAI,eAAe,CAAC,cAAc,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC7C,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,kBAAkB,CAAC;YACpD,MAAM;YACN,KAAK;YACL,gBAAgB,EAAE,GAAG,CAAC,OAAO;SAC9B,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,YAAY,UAAU,EAAE,CAAC,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,YAAY,UAAU,EAAE,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CACN,wFAAwF,CACzF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,0DAA0D;IAC1D,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAEpC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,OAAO,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,eAAe,CAAC,cAAc,EAAE,CAAC;YACnC,OAAO,CAAC,aAAa,CAAC;gBACpB,uDAAuD;gBACvD,gEAAgE;gBAChE,8DAA8D;gBAC9D,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC;gBAC5B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;gBAC9C,MAAM;gBACN,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QACD,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CACN,0EAA0E;YACxE,gFAAgF;YAChF,yEAAyE,CAC5E,CAAC;IACJ,CAAC;IAED,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACzC,GAAG,CAAC,IAAI,CAAC,0CAA0C,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;IAEnE,2EAA2E;IAC3E,4EAA4E;IAC5E,iDAAiD;IAEjD,eAAe,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAC9B,SAKC,EACD,QAA8C,EAC9C,OAA4C;IAE5C,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,kBAAkB,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC;QAC1B,OAAO,EAAE,uBAAuB;QAChC,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IACH,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,kBAAkB,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,MAAM;IACb,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACjC,KAAK,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAC3D,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAChE,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,eAAyB,EAAE,MAAoB;IACtE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC;YACjC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACxD,CAAC;QACF,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,4FAA4F,CAClH,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,6EAA6E;QAChG,mDAAmD,CACtD,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG;QAC1F,OAAO,KAAK,CAAC,GAAG,CAAC,6CAA6C,CAAC,IAAI,CACtE,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,+FAA+F,CAChG,CACF,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAC3H,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAC7E,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,qEAAqE,CAAC,CACjF,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,2DAA2D,CAAC,CACvE,CAAC;IACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,qEAAqE,CAAC,CACjF,CAAC;IACF,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC"}