@ekanos/cli 0.10.0 → 0.11.0

package/dist/commands/teams-onboard.js

@@ -0,0 +1,261 @@
+import { invalidStateError, usageError } from '../errors.js';
+import { createTeam, inviteTeamMember, listTeamMembers, listTeamRoles, removeTeamMember, setTeamMemberRole, showTeamIntegration, } from '../teams-api.js';
+/**
+ * Onboarding a team from the terminal, for the Source admin: `teams create`,
+ * `teams members list|invite|role|remove`, `teams roles list` and
+ * `teams connect`. Parsed before any session is touched (`parseOnboarding`)
+ * so a usage error never costs a network round-trip, then run against the
+ * session `runTeams` resolved.
+ */
+export const ONBOARDING_SUBCOMMANDS = [
+    'create',
+    'members',
+    'roles',
+    'connect',
+];
+const MEMBERS_VERBS = ['list', 'invite', 'role', 'remove'];
+export function isOnboardingSubcommand(value) {
+    return ONBOARDING_SUBCOMMANDS.includes(value);
+}
+export function parseOnboarding(subcommand, rest, flags) {
+    var _a;
+    if (subcommand === 'create') {
+        const [name, ...extra] = rest;
+        if (!(name === null || name === void 0 ? void 0 : name.trim())) {
+            throw usageError('Name the team.', 'Run "ekanos teams create \\"Bank A\\" [--slug bank-a] [--owner <email>]".');
+        }
+        noExtra(extra);
+        return {
+            kind: 'create',
+            name: name.trim(),
+            slug: flags.slug === undefined ? undefined : slugOf(flags.slug, 'team'),
+            ownerEmail: flags.owner === undefined ? undefined : emailOf(flags.owner),
+        };
+    }
+    if (subcommand === 'connect') {
+        const [team, product, ...extra] = rest;
+        noExtra(extra);
+        return {
+            kind: 'connect',
+            team: slugOf(team, 'team'),
+            product: slugOf(product, 'product'),
+        };
+    }
+    if (subcommand === 'roles') {
+        const [verb, team, ...extra] = rest;
+        if (verb !== 'list') {
+            throw usageError(verb
+                ? `Unknown teams roles subcommand "${verb}".`
+                : 'teams roles needs a subcommand.', 'Run "ekanos teams roles list <team>".');
+        }
+        noExtra(extra);
+        return { kind: 'roles-list', team: slugOf(team, 'team') };
+    }
+    const [verb, team, email, role, ...extra] = rest;
+    const match = MEMBERS_VERBS.find((name) => name === verb);
+    if (!match) {
+        throw usageError(verb
+            ? `Unknown teams members subcommand "${verb}".`
+            : 'teams members needs a subcommand.', 'Run one of: ekanos teams members list <team>, ekanos teams members invite <team> <email> --role <role>, ekanos teams members role <team> <email> <role>, ekanos teams members remove <team> <email> --yes.');
+    }
+    noExtra(extra);
+    if (match === 'list') {
+        if (email !== undefined)
+            noExtra([email]);
+        return { kind: 'members-list', team: slugOf(team, 'team') };
+    }
+    const teamSlug = slugOf(team, 'team');
+    const address = emailOf(email);
+    if (match === 'invite') {
+        if (role !== undefined)
+            noExtra([role]);
+        return {
+            kind: 'members-invite',
+            team: teamSlug,
+            email: address,
+            role: roleOf((_a = flags.role) !== null && _a !== void 0 ? _a : 'member'),
+        };
+    }
+    if (match === 'role') {
+        const named = role !== null && role !== void 0 ? role : flags.role;
+        if (!named) {
+            throw usageError('Name the new role.', `Run "ekanos teams members role ${teamSlug} ${address} <role>"; "ekanos teams roles list ${teamSlug}" lists them.`);
+        }
+        return {
+            kind: 'members-role',
+            team: teamSlug,
+            email: address,
+            role: roleOf(named),
+        };
+    }
+    if (role !== undefined)
+        noExtra([role]);
+    if (!flags.yes) {
+        throw invalidStateError(`Removing ${address} from ${teamSlug} ends their access to the team (a pending invitation is withdrawn instead).`, `Re-run with --yes: ekanos teams members remove ${teamSlug} ${address} --yes`);
+    }
+    return { kind: 'members-remove', team: teamSlug, email: address };
+}
+export async function runOnboarding(ctx, client, host, source, plan) {
+    var _a;
+    var _b, _c;
+    switch (plan.kind) {
+        case 'create': {
+            const created = await client.call((token) => createTeam(host, token, source, {
+                name: plan.name,
+                slug: plan.slug,
+                ownerEmail: plan.ownerEmail,
+            }));
+            return ctx.succeed(Object.assign({ host }, created), ctx.ui.result({
+                title: `Created team ${created.team.slug}`,
+                rows: [
+                    ['Name', created.team.name],
+                    ['Source', created.source.slug],
+                    [
+                        'Owner',
+                        created.owner.kind === 'caller'
+                            ? `you${created.owner.email ? ` (${created.owner.email})` : ''}`
+                            : `${created.owner.email} — invited; ownership moves to them on accept`,
+                    ],
+                    ['Team home', created.teamUrl],
+                ],
+                notes: [
+                    `Next: "ekanos teams members invite ${created.team.slug} <email> --role <role>" ("ekanos teams roles list ${created.team.slug}" lists the roles).`,
+                    `Then "ekanos teams connect ${created.team.slug} <product>" for the link a member opens to connect an integration.`,
+                ],
+            }));
+        }
+        case 'members-list': {
+            const list = await client.call((token) => listTeamMembers(host, token, { source, team: plan.team }));
+            const rows = list.members.map((member) => { var _a; return [
+                (_a = member.email) !== null && _a !== void 0 ? _a : member.userId,
+                `${member.role}${member.primaryOwner ? ' · primary owner' : ''}${member.status === 'active' ? '' : ` · ${member.status}`}${member.name ? ` · ${member.name}` : ''}`,
+            ]; });
+            for (const invitation of list.invitations) {
+                rows.push([
+                    invitation.email,
+                    `${invitation.role} · invited, expires ${invitation.expiresAt.slice(0, 10)}`,
+                ]);
+            }
+            return ctx.succeed(Object.assign({ host }, list), ctx.ui.result({
+                title: `Members of ${list.team.slug} (${list.team.name})`,
+                tone: rows.length === 0 ? 'warn' : 'ok',
+                rows,
+                notes: [
+                    `"ekanos teams members invite ${list.team.slug} <email> --role <role>" adds one.`,
+                ],
+            }));
+        }
+        case 'members-invite': {
+            const invited = await client.call((token) => inviteTeamMember(host, token, { source, team: plan.team }, { email: plan.email, role: plan.role }));
+            return ctx.succeed(Object.assign({ host }, invited), ctx.ui.result({
+                title: `Invited ${invited.invitation.email} to ${invited.team.slug}`,
+                rows: [
+                    ['Role', invited.invitation.role],
+                    ['Expires', invited.invitation.expiresAt.slice(0, 10)],
+                ],
+                notes: [
+                    'The invitation email is on its way; they join when they accept it.',
+                ],
+            }));
+        }
+        case 'members-role': {
+            const changed = await client.call((token) => setTeamMemberRole(host, token, { source, team: plan.team, email: plan.email }, plan.role));
+            return ctx.succeed(Object.assign({ host }, changed), ctx.ui.result({
+                title: changed.before === changed.after
+                    ? `${changed.email} is already ${changed.after} on ${changed.team.slug}`
+                    : `${changed.email} is now ${changed.after} on ${changed.team.slug}`,
+                rows: [
+                    ['Was', (_b = changed.before) !== null && _b !== void 0 ? _b : '—'],
+                    [
+                        'Applies to',
+                        changed.kind === 'member'
+                            ? 'their membership'
+                            : 'their pending invitation',
+                    ],
+                ],
+            }));
+        }
+        case 'members-remove': {
+            const removed = await client.call((token) => removeTeamMember(host, token, {
+                source,
+                team: plan.team,
+                email: plan.email,
+            }));
+            return ctx.succeed(Object.assign({ host }, removed), ctx.ui.result({
+                title: removed.kind === 'member'
+                    ? `Removed ${removed.email} from ${removed.team.slug}`
+                    : `Withdrew ${removed.email}'s invitation to ${removed.team.slug}`,
+                rows: [['Role was', (_c = removed.before) !== null && _c !== void 0 ? _c : '—']],
+            }));
+        }
+        case 'roles-list': {
+            const roles = await client.call((token) => listTeamRoles(host, token, { source, team: plan.team }));
+            return ctx.succeed(Object.assign({ host }, roles), ctx.ui.result({
+                title: `Roles on ${roles.team.slug}`,
+                rows: roles.roles.map((role) => [
+                    `${role.name} (${role.displayName})`,
+                    role.permissions.length > 0 ? role.permissions : ['no permissions'],
+                ]),
+                notes: [
+                    'Lower roles are listed last. Give one with "ekanos teams members role <team> <email> <role>".',
+                ],
+            }));
+        }
+        case 'connect': {
+            const status = await client.call((token) => showTeamIntegration(host, token, {
+                source,
+                team: plan.team,
+                product: plan.product,
+            }));
+            if (!status.enabled) {
+                throw invalidStateError(`"${plan.product}" is not enabled on ${status.source.slug}.`, '"ekanos catalog" lists what this Source has; Ekanos enables a product for a Source.');
+            }
+            const connected = status.activation !== null;
+            return ctx.succeed(Object.assign({ host }, status), ctx.ui.result({
+                title: connected
+                    ? `${status.team.slug} has connected ${status.product.name}`
+                    : `Connect link for ${status.team.slug} · ${status.product.name}`,
+                tone: connected ? 'ok' : 'warn',
+                rows: [
+                    ['Open', status.connectUrl],
+                    [
+                        'Status',
+                        connected
+                            ? `connected${((_a = status.activation) === null || _a === void 0 ? void 0 : _a.activatedAt) ? ` ${status.activation.activatedAt.slice(0, 10)}` : ''}`
+                            : 'not connected',
+                    ],
+                ],
+                notes: [
+                    'A team member signs in there and clicks Connect: sign-in happens in their browser, never in a terminal.',
+                    `"ekanos teams show ${status.team.slug} ${status.product.slug}" shows the full setup checklist.`,
+                ],
+            }));
+        }
+    }
+}
+function noExtra(extra) {
+    if (extra.length > 0) {
+        throw usageError(`Unexpected argument "${extra[0]}".`, 'See "ekanos teams --help".');
+    }
+}
+function slugOf(value, what) {
+    const slug = value === null || value === void 0 ? void 0 : value.trim().toLowerCase();
+    if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug))
+        return slug;
+    throw usageError(value ? `"${value}" is not a ${what} slug.` : `Name the ${what}.`, what === 'team'
+        ? '"ekanos teams list" lists the teams, e.g. "ekanos teams members list bank-a".'
+        : '"ekanos catalog" lists the products, e.g. "ekanos teams connect bank-a zendesk".');
+}
+function emailOf(value) {
+    const email = value === null || value === void 0 ? void 0 : value.trim().toLowerCase();
+    if (email && /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email))
+        return email;
+    throw usageError(value ? `"${value}" is not an email address.` : 'Name the person by email.', 'e.g. "ekanos teams members invite bank-a ana@bank-a.com --role member".');
+}
+function roleOf(value) {
+    const role = value.trim().toLowerCase();
+    if (/^[a-z][a-z0-9_-]{0,49}$/.test(role))
+        return role;
+    throw usageError(`"${value}" is not a role name.`, '"ekanos teams roles list <team>" lists the roles this Source uses.');
+}
+//# sourceMappingURL=teams-onboard.js.map

package/dist/commands/teams-onboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"teams-onboard.js","sourceRoot":"","sources":["../../src/commands/teams-onboard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAGtB;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ;IACR,SAAS;IACT,OAAO;IACP,SAAS;CACD,CAAC;AAmBX,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AAEpE,MAAM,UAAU,sBAAsB,CACpC,KAAa;IAEb,OAAQ,sBAA4C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,UAAgC,EAChC,IAAuB,EACvB,KAAsB;;IAEtB,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;QAC9B,IAAI,EAAC,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,EAAE,CAAA,EAAE,CAAC;YAClB,MAAM,UAAU,CACd,gBAAgB,EAChB,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,CAAC;QACf,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACjB,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;YACvE,UAAU,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;QACvC,OAAO,CAAC,KAAK,CAAC,CAAC;QACf,OAAO;YACL,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;YAC1B,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC;SACpC,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;QACpC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,UAAU,CACd,IAAI;gBACF,CAAC,CAAC,mCAAmC,IAAI,IAAI;gBAC7C,CAAC,CAAC,iCAAiC,EACrC,uCAAuC,CACxC,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;IACjD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,UAAU,CACd,IAAI;YACF,CAAC,CAAC,qCAAqC,IAAI,IAAI;YAC/C,CAAC,CAAC,mCAAmC,EACvC,4MAA4M,CAC7M,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAC;IAEf,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;IAC9D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAE/B,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,MAAM,OAAC,KAAK,CAAC,IAAI,mCAAI,QAAQ,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,KAAK,CAAC,IAAI,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,UAAU,CACd,oBAAoB,EACpB,kCAAkC,QAAQ,IAAI,OAAO,sCAAsC,QAAQ,eAAe,CACnH,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;SACpB,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACf,MAAM,iBAAiB,CACrB,YAAY,OAAO,SAAS,QAAQ,6EAA6E,EACjH,kDAAkD,QAAQ,IAAI,OAAO,QAAQ,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,IAAoB;;;IAEpB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE;gBAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CACH,CAAC;YACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,OAAO,GAClB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,gBAAgB,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;gBAC1C,IAAI,EAAE;oBACJ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC3B,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;oBAC/B;wBACE,OAAO;wBACP,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;4BAC7B,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;4BAChE,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,+CAA+C;qBAC1E;oBACD,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC;iBAC/B;gBACD,KAAK,EAAE;oBACL,sCAAsC,OAAO,CAAC,IAAI,CAAC,IAAI,qDAAqD,OAAO,CAAC,IAAI,CAAC,IAAI,qBAAqB;oBAClJ,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,oEAAoE;iBACpH;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QAED,KAAK,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAC1D,CAAC;YACF,MAAM,IAAI,GAAuB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAC;sBAC5D,MAAM,CAAC,KAAK,mCAAI,MAAM,CAAC,MAAM;gBAC7B,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;aACpK,GAAA,CAAC,CAAC;YACH,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC1C,IAAI,CAAC,IAAI,CAAC;oBACR,UAAU,CAAC,KAAK;oBAChB,GAAG,UAAU,CAAC,IAAI,uBAAuB,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;iBAC7E,CAAC,CAAC;YACL,CAAC;YACD,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,IAAI,GACf,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,cAAc,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG;gBACzD,IAAI,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;gBACvC,IAAI;gBACJ,KAAK,EAAE;oBACL,gCAAgC,IAAI,CAAC,IAAI,CAAC,IAAI,mCAAmC;iBAClF;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QAED,KAAK,gBAAgB,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,gBAAgB,CACd,IAAI,EACJ,KAAK,EACL,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAC3B,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CACvC,CACF,CAAC;YACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,OAAO,GAClB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,WAAW,OAAO,CAAC,UAAU,CAAC,KAAK,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;gBACpE,IAAI,EAAE;oBACJ,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;oBACjC,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;iBACvD;gBACD,KAAK,EAAE;oBACL,oEAAoE;iBACrE;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QAED,KAAK,cAAc,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,iBAAiB,CACf,IAAI,EACJ,KAAK,EACL,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAC9C,IAAI,CAAC,IAAI,CACV,CACF,CAAC;YACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,OAAO,GAClB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EACH,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK;oBAC9B,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,eAAe,OAAO,CAAC,KAAK,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;oBACxE,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,WAAW,OAAO,CAAC,KAAK,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;gBACxE,IAAI,EAAE;oBACJ,CAAC,KAAK,QAAE,OAAO,CAAC,MAAM,mCAAI,GAAG,CAAC;oBAC9B;wBACE,YAAY;wBACZ,OAAO,CAAC,IAAI,KAAK,QAAQ;4BACvB,CAAC,CAAC,kBAAkB;4BACpB,CAAC,CAAC,0BAA0B;qBAC/B;iBACF;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QAED,KAAK,gBAAgB,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE;gBAC5B,MAAM;gBACN,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CACH,CAAC;YACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,OAAO,GAClB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EACH,OAAO,CAAC,IAAI,KAAK,QAAQ;oBACvB,CAAC,CAAC,WAAW,OAAO,CAAC,KAAK,SAAS,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;oBACtD,CAAC,CAAC,YAAY,OAAO,CAAC,KAAK,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;gBACtE,IAAI,EAAE,CAAC,CAAC,UAAU,QAAE,OAAO,CAAC,MAAM,mCAAI,GAAG,CAAC,CAAC;aAC5C,CAAC,CACH,CAAC;QACJ,CAAC;QAED,KAAK,YAAY,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACxC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CACxD,CAAC;YACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,KAAK,GAChB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,YAAY,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;gBACpC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC9B,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,GAAG;oBACpC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;iBACpE,CAAC;gBACF,KAAK,EAAE;oBACL,+FAA+F;iBAChG;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QAED,KAAK,SAAS,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE;gBAC/B,MAAM;gBACN,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC,CACH,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,iBAAiB,CACrB,IAAI,IAAI,CAAC,OAAO,uBAAuB,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,EAC5D,qFAAqF,CACtF,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC;YAC7C,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,MAAM,GACjB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,SAAS;oBACd,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;oBAC5D,CAAC,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;gBACnE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;gBAC/B,IAAI,EAAE;oBACJ,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC;oBAC3B;wBACE,QAAQ;wBACR,SAAS;4BACP,CAAC,CAAC,YAAY,CAAA,MAAA,MAAM,CAAC,UAAU,0CAAE,WAAW,EAAC,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;4BACtG,CAAC,CAAC,eAAe;qBACpB;iBACF;gBACD,KAAK,EAAE;oBACL,yGAAyG;oBACzG,sBAAsB,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,mCAAmC;iBACjG;aACF,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAwB;IACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,UAAU,CACd,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EACpC,4BAA4B,CAC7B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAyB,EAAE,IAAwB;IACjE,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,CACd,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,QAAQ,CAAC,CAAC,CAAC,YAAY,IAAI,GAAG,EACjE,IAAI,KAAK,MAAM;QACb,CAAC,CAAC,+EAA+E;QACjF,CAAC,CAAC,kFAAkF,CACvF,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAyB;IACxC,MAAM,KAAK,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IAC1C,IAAI,KAAK,IAAI,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,MAAM,UAAU,CACd,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,4BAA4B,CAAC,CAAC,CAAC,2BAA2B,EAC3E,yEAAyE,CAC1E,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,UAAU,CACd,IAAI,KAAK,uBAAuB,EAChC,oEAAoE,CACrE,CAAC;AACJ,CAAC","sourcesContent":["import type { CliContext } from '../context';\nimport { invalidStateError, usageError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport {\n  createTeam,\n  inviteTeamMember,\n  listTeamMembers,\n  listTeamRoles,\n  removeTeamMember,\n  setTeamMemberRole,\n  showTeamIntegration,\n} from '../teams-api';\nimport type { TeamsClient } from './teams';\n\n/**\n * Onboarding a team from the terminal, for the Source admin: `teams create`,\n * `teams members list|invite|role|remove`, `teams roles list` and\n * `teams connect`. Parsed before any session is touched (`parseOnboarding`)\n * so a usage error never costs a network round-trip, then run against the\n * session `runTeams` resolved.\n */\n\nexport const ONBOARDING_SUBCOMMANDS = [\n  'create',\n  'members',\n  'roles',\n  'connect',\n] as const;\nexport type OnboardingSubcommand = (typeof ONBOARDING_SUBCOMMANDS)[number];\n\nexport interface OnboardingFlags {\n  slug?: string;\n  owner?: string;\n  role?: string;\n  yes: boolean;\n}\n\nexport type OnboardingPlan =\n  | { kind: 'create'; name: string; slug?: string; ownerEmail?: string }\n  | { kind: 'members-list'; team: string }\n  | { kind: 'members-invite'; team: string; email: string; role: string }\n  | { kind: 'members-role'; team: string; email: string; role: string }\n  | { kind: 'members-remove'; team: string; email: string }\n  | { kind: 'roles-list'; team: string }\n  | { kind: 'connect'; team: string; product: string };\n\nconst MEMBERS_VERBS = ['list', 'invite', 'role', 'remove'] as const;\n\nexport function isOnboardingSubcommand(\n  value: string,\n): value is OnboardingSubcommand {\n  return (ONBOARDING_SUBCOMMANDS as readonly string[]).includes(value);\n}\n\nexport function parseOnboarding(\n  subcommand: OnboardingSubcommand,\n  rest: readonly string[],\n  flags: OnboardingFlags,\n): OnboardingPlan {\n  if (subcommand === 'create') {\n    const [name, ...extra] = rest;\n    if (!name?.trim()) {\n      throw usageError(\n        'Name the team.',\n        'Run \"ekanos teams create \\\\\"Bank A\\\\\" [--slug bank-a] [--owner <email>]\".',\n      );\n    }\n    noExtra(extra);\n    return {\n      kind: 'create',\n      name: name.trim(),\n      slug: flags.slug === undefined ? undefined : slugOf(flags.slug, 'team'),\n      ownerEmail: flags.owner === undefined ? undefined : emailOf(flags.owner),\n    };\n  }\n\n  if (subcommand === 'connect') {\n    const [team, product, ...extra] = rest;\n    noExtra(extra);\n    return {\n      kind: 'connect',\n      team: slugOf(team, 'team'),\n      product: slugOf(product, 'product'),\n    };\n  }\n\n  if (subcommand === 'roles') {\n    const [verb, team, ...extra] = rest;\n    if (verb !== 'list') {\n      throw usageError(\n        verb\n          ? `Unknown teams roles subcommand \"${verb}\".`\n          : 'teams roles needs a subcommand.',\n        'Run \"ekanos teams roles list <team>\".',\n      );\n    }\n    noExtra(extra);\n    return { kind: 'roles-list', team: slugOf(team, 'team') };\n  }\n\n  const [verb, team, email, role, ...extra] = rest;\n  const match = MEMBERS_VERBS.find((name) => name === verb);\n  if (!match) {\n    throw usageError(\n      verb\n        ? `Unknown teams members subcommand \"${verb}\".`\n        : 'teams members needs a subcommand.',\n      'Run one of: ekanos teams members list <team>, ekanos teams members invite <team> <email> --role <role>, ekanos teams members role <team> <email> <role>, ekanos teams members remove <team> <email> --yes.',\n    );\n  }\n  noExtra(extra);\n\n  if (match === 'list') {\n    if (email !== undefined) noExtra([email]);\n    return { kind: 'members-list', team: slugOf(team, 'team') };\n  }\n\n  const teamSlug = slugOf(team, 'team');\n  const address = emailOf(email);\n\n  if (match === 'invite') {\n    if (role !== undefined) noExtra([role]);\n    return {\n      kind: 'members-invite',\n      team: teamSlug,\n      email: address,\n      role: roleOf(flags.role ?? 'member'),\n    };\n  }\n\n  if (match === 'role') {\n    const named = role ?? flags.role;\n    if (!named) {\n      throw usageError(\n        'Name the new role.',\n        `Run \"ekanos teams members role ${teamSlug} ${address} <role>\"; \"ekanos teams roles list ${teamSlug}\" lists them.`,\n      );\n    }\n    return {\n      kind: 'members-role',\n      team: teamSlug,\n      email: address,\n      role: roleOf(named),\n    };\n  }\n\n  if (role !== undefined) noExtra([role]);\n  if (!flags.yes) {\n    throw invalidStateError(\n      `Removing ${address} from ${teamSlug} ends their access to the team (a pending invitation is withdrawn instead).`,\n      `Re-run with --yes: ekanos teams members remove ${teamSlug} ${address} --yes`,\n    );\n  }\n  return { kind: 'members-remove', team: teamSlug, email: address };\n}\n\nexport async function runOnboarding(\n  ctx: CliContext,\n  client: TeamsClient,\n  host: string,\n  source: string,\n  plan: OnboardingPlan,\n): Promise<ExitCode> {\n  switch (plan.kind) {\n    case 'create': {\n      const created = await client.call((token) =>\n        createTeam(host, token, source, {\n          name: plan.name,\n          slug: plan.slug,\n          ownerEmail: plan.ownerEmail,\n        }),\n      );\n      return ctx.succeed(\n        { host, ...created },\n        ctx.ui.result({\n          title: `Created team ${created.team.slug}`,\n          rows: [\n            ['Name', created.team.name],\n            ['Source', created.source.slug],\n            [\n              'Owner',\n              created.owner.kind === 'caller'\n                ? `you${created.owner.email ? ` (${created.owner.email})` : ''}`\n                : `${created.owner.email} — invited; ownership moves to them on accept`,\n            ],\n            ['Team home', created.teamUrl],\n          ],\n          notes: [\n            `Next: \"ekanos teams members invite ${created.team.slug} <email> --role <role>\" (\"ekanos teams roles list ${created.team.slug}\" lists the roles).`,\n            `Then \"ekanos teams connect ${created.team.slug} <product>\" for the link a member opens to connect an integration.`,\n          ],\n        }),\n      );\n    }\n\n    case 'members-list': {\n      const list = await client.call((token) =>\n        listTeamMembers(host, token, { source, team: plan.team }),\n      );\n      const rows: [string, string][] = list.members.map((member) => [\n        member.email ?? member.userId,\n        `${member.role}${member.primaryOwner ? ' · primary owner' : ''}${member.status === 'active' ? '' : ` · ${member.status}`}${member.name ? ` · ${member.name}` : ''}`,\n      ]);\n      for (const invitation of list.invitations) {\n        rows.push([\n          invitation.email,\n          `${invitation.role} · invited, expires ${invitation.expiresAt.slice(0, 10)}`,\n        ]);\n      }\n      return ctx.succeed(\n        { host, ...list },\n        ctx.ui.result({\n          title: `Members of ${list.team.slug} (${list.team.name})`,\n          tone: rows.length === 0 ? 'warn' : 'ok',\n          rows,\n          notes: [\n            `\"ekanos teams members invite ${list.team.slug} <email> --role <role>\" adds one.`,\n          ],\n        }),\n      );\n    }\n\n    case 'members-invite': {\n      const invited = await client.call((token) =>\n        inviteTeamMember(\n          host,\n          token,\n          { source, team: plan.team },\n          { email: plan.email, role: plan.role },\n        ),\n      );\n      return ctx.succeed(\n        { host, ...invited },\n        ctx.ui.result({\n          title: `Invited ${invited.invitation.email} to ${invited.team.slug}`,\n          rows: [\n            ['Role', invited.invitation.role],\n            ['Expires', invited.invitation.expiresAt.slice(0, 10)],\n          ],\n          notes: [\n            'The invitation email is on its way; they join when they accept it.',\n          ],\n        }),\n      );\n    }\n\n    case 'members-role': {\n      const changed = await client.call((token) =>\n        setTeamMemberRole(\n          host,\n          token,\n          { source, team: plan.team, email: plan.email },\n          plan.role,\n        ),\n      );\n      return ctx.succeed(\n        { host, ...changed },\n        ctx.ui.result({\n          title:\n            changed.before === changed.after\n              ? `${changed.email} is already ${changed.after} on ${changed.team.slug}`\n              : `${changed.email} is now ${changed.after} on ${changed.team.slug}`,\n          rows: [\n            ['Was', changed.before ?? '—'],\n            [\n              'Applies to',\n              changed.kind === 'member'\n                ? 'their membership'\n                : 'their pending invitation',\n            ],\n          ],\n        }),\n      );\n    }\n\n    case 'members-remove': {\n      const removed = await client.call((token) =>\n        removeTeamMember(host, token, {\n          source,\n          team: plan.team,\n          email: plan.email,\n        }),\n      );\n      return ctx.succeed(\n        { host, ...removed },\n        ctx.ui.result({\n          title:\n            removed.kind === 'member'\n              ? `Removed ${removed.email} from ${removed.team.slug}`\n              : `Withdrew ${removed.email}'s invitation to ${removed.team.slug}`,\n          rows: [['Role was', removed.before ?? '—']],\n        }),\n      );\n    }\n\n    case 'roles-list': {\n      const roles = await client.call((token) =>\n        listTeamRoles(host, token, { source, team: plan.team }),\n      );\n      return ctx.succeed(\n        { host, ...roles },\n        ctx.ui.result({\n          title: `Roles on ${roles.team.slug}`,\n          rows: roles.roles.map((role) => [\n            `${role.name} (${role.displayName})`,\n            role.permissions.length > 0 ? role.permissions : ['no permissions'],\n          ]),\n          notes: [\n            'Lower roles are listed last. Give one with \"ekanos teams members role <team> <email> <role>\".',\n          ],\n        }),\n      );\n    }\n\n    case 'connect': {\n      const status = await client.call((token) =>\n        showTeamIntegration(host, token, {\n          source,\n          team: plan.team,\n          product: plan.product,\n        }),\n      );\n      if (!status.enabled) {\n        throw invalidStateError(\n          `\"${plan.product}\" is not enabled on ${status.source.slug}.`,\n          '\"ekanos catalog\" lists what this Source has; Ekanos enables a product for a Source.',\n        );\n      }\n      const connected = status.activation !== null;\n      return ctx.succeed(\n        { host, ...status },\n        ctx.ui.result({\n          title: connected\n            ? `${status.team.slug} has connected ${status.product.name}`\n            : `Connect link for ${status.team.slug} · ${status.product.name}`,\n          tone: connected ? 'ok' : 'warn',\n          rows: [\n            ['Open', status.connectUrl],\n            [\n              'Status',\n              connected\n                ? `connected${status.activation?.activatedAt ? ` ${status.activation.activatedAt.slice(0, 10)}` : ''}`\n                : 'not connected',\n            ],\n          ],\n          notes: [\n            'A team member signs in there and clicks Connect: sign-in happens in their browser, never in a terminal.',\n            `\"ekanos teams show ${status.team.slug} ${status.product.slug}\" shows the full setup checklist.`,\n          ],\n        }),\n      );\n    }\n  }\n}\n\nfunction noExtra(extra: readonly string[]) {\n  if (extra.length > 0) {\n    throw usageError(\n      `Unexpected argument \"${extra[0]}\".`,\n      'See \"ekanos teams --help\".',\n    );\n  }\n}\n\nfunction slugOf(value: string | undefined, what: 'team' | 'product'): string {\n  const slug = value?.trim().toLowerCase();\n  if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug)) return slug;\n  throw usageError(\n    value ? `\"${value}\" is not a ${what} slug.` : `Name the ${what}.`,\n    what === 'team'\n      ? '\"ekanos teams list\" lists the teams, e.g. \"ekanos teams members list bank-a\".'\n      : '\"ekanos catalog\" lists the products, e.g. \"ekanos teams connect bank-a zendesk\".',\n  );\n}\n\nfunction emailOf(value: string | undefined): string {\n  const email = value?.trim().toLowerCase();\n  if (email && /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(email)) return email;\n  throw usageError(\n    value ? `\"${value}\" is not an email address.` : 'Name the person by email.',\n    'e.g. \"ekanos teams members invite bank-a ana@bank-a.com --role member\".',\n  );\n}\n\nfunction roleOf(value: string): string {\n  const role = value.trim().toLowerCase();\n  if (/^[a-z][a-z0-9_-]{0,49}$/.test(role)) return role;\n  throw usageError(\n    `\"${value}\" is not a role name.`,\n    '\"ekanos teams roles list <team>\" lists the roles this Source uses.',\n  );\n}\n"]}

package/dist/commands/teams.d.ts

@@ -1,14 +1,23 @@
 import type { TeamIntegrationStatus } from '@ekanos/integration-schema';
+import type { StoredSession } from '../auth/credential-store.js';
+import { type AuthEnvironment } from '../auth/session.js';
 import type { CliContext } from '../context.js';
 import type { ExitCode } from '../exit-codes.js';
-export declare const TEAMS_SUBCOMMANDS: readonly ['list', 'show', 'app', 'webhook'];
+import { type TeamsApiResult } from '../teams-api.js';
+export declare const TEAMS_SUBCOMMANDS: readonly ["list", "show", "app", "webhook", "create", "members", "roles", "connect"];
 export interface TeamsArgs {
     host?: string;
     source?: string;
     /** `list`, `show <team> <product>`, `app set <team> <product>`, `webhook <team> <product> [<id>]`. */
     positionals: readonly string[];
     connection?: string;
+    /** `create --slug`, `create --owner <email>`, `members invite --role`. */
+    slug?: string;
+    owner?: string;
+    role?: string;
     yes: boolean;
+    /** Every parsed flag, for `teams agents|triggers|links|mcp` (team-agents.ts). */
+    flags?: Record<string, string | boolean | string[]>;
     dir: string;
     env: Record<string, string | undefined>;
     stdinIsTTY?: boolean;
@@ -28,3 +37,9 @@ export interface TeamsArgs {
 export declare function runTeams(ctx: CliContext, args: TeamsArgs): Promise<ExitCode>;
 /** `teams show`, read top to bottom like a setup checklist. */
 export declare function checklist(status: TeamIntegrationStatus): string[];
+export declare class TeamsClient {
+    private readonly env;
+    private session;
+    constructor(env: AuthEnvironment, session: StoredSession);
+    call<T>(send: (accessToken: string) => Promise<TeamsApiResult<T>>): Promise<T>;
+}

package/dist/commands/teams.js

@@ -3,7 +3,15 @@ import { authRequiredError, invalidStateError, usageError, validationError, } fr
 import { resolveSourceTarget } from '../source-target.js';
 import { listTeams, mintTeamWebhook, setTeamApp, showTeamIntegration, } from '../teams-api.js';
 import { promptHidden, promptLine } from './apps.js';
-export const TEAMS_SUBCOMMANDS = ['list', 'show', 'app', 'webhook'];
+import { isTeamAgentArea, runTeamAgentCommands } from './team-agents.js';
+import { ONBOARDING_SUBCOMMANDS, isOnboardingSubcommand, parseOnboarding, runOnboarding, } from './teams-onboard.js';
+export const TEAMS_SUBCOMMANDS = [
+    'list',
+    'show',
+    'app',
+    'webhook',
+    ...ONBOARDING_SUBCOMMANDS,
+];
 /**
  * `teams` — a Source admin's view of its teams' integration setup, the
  * team-level counterpart of `apps`. `list` names the teams; `show` reads one
@@ -15,7 +23,18 @@ export const TEAMS_SUBCOMMANDS = ['list', 'show', 'app', 'webhook'];
  */
 export async function runTeams(ctx, args) {
     const [rawSubcommand, ...rest] = args.positionals;
+    if (isTeamAgentArea(rawSubcommand)) {
+        return runTeamAgentCommands(ctx, args);
+    }
     const subcommand = parseSubcommand(rawSubcommand);
+    if (isOnboardingSubcommand(subcommand)) {
+        const plan = parseOnboarding(subcommand, rest, args);
+        const env = resolveAuthEnvironment(ctx, args.host, args.env, {
+            projectDir: args.dir,
+        });
+        const resolved = await resolveSourceTarget(env, requireSession(env.store, env.host), args);
+        return runOnboarding(ctx, new TeamsClient(env, resolved.session), env.host, resolved.source, plan);
+    }
     if (subcommand === 'app' && rest[0] !== 'set') {
         throw usageError(rest[0]
             ? `Unknown teams app subcommand "${rest[0]}".`
@@ -242,7 +261,7 @@ function chooseApp(status, connection) {
         ? `${status.product.name} has no team app "${connection}".`
         : `${status.product.name} has several team apps; name one.`, `Pass --connection with one of: ${apps.map((entry) => entry.connectionId).join(', ')}.`);
 }
-class TeamsClient {
+export class TeamsClient {
     constructor(env, session) {
         this.env = env;
         this.session = session;
@@ -268,7 +287,7 @@ function parseSubcommand(value) {
         return match;
     throw usageError(value
         ? `Unknown teams subcommand "${value}".`
-        : 'teams needs a subcommand.', 'Run one of: ekanos teams list, ekanos teams show <team> <product>, ekanos teams app set <team> <product>, ekanos teams webhook <team> <product> [<webhook-id>].');
+        : 'teams needs a subcommand.', 'Run one of: ekanos teams list, ekanos teams create <name>, ekanos teams members list <team>, ekanos teams roles list <team>, ekanos teams connect <team> <product>, ekanos teams show <team> <product>, ekanos teams app set <team> <product>, ekanos teams webhook <team> <product> [<webhook-id>], ekanos teams agents|triggers|links|mcp ….');
 }
 function requireSlug(value, what) {
     const slug = value === null || value === void 0 ? void 0 : value.trim().toLowerCase();

package/dist/commands/teams.js.map

@@ -1 +1 @@
-{"version":3,"file":"teams.js","sourceRoot":"","sources":["../../src/commands/teams.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,oBAAoB,EACpB,cAAc,EACd,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,eAAe,GAChB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAEL,SAAS,EACT,eAAe,EACf,UAAU,EACV,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAElD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAU,CAAC;AAwB7E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAe,EACf,IAAe;IAEf,MAAM,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IAClD,MAAM,UAAU,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAElD,IAAI,UAAU,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,MAAM,UAAU,CACd,IAAI,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,iCAAiC,IAAI,CAAC,CAAC,CAAC,IAAI;YAC9C,CAAC,CAAC,+BAA+B,EACnC,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7D,IAAI,UAAU,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,CACd,gCAAgC,EAChC,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,MAAM,OAAO,GACX,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,UAAU,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,UAAU,CACd,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EACpC,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,UAAU,CACd,0FAA0F,EAC1F,mEAAmE,IAAI,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjM,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,GAAG,EACH,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EACnC,IAAI,CACL,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE/B,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACnC,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACxC,IAAI,EAAE,MAAM;aACb,CAAC;YACJ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACrC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC9B,KAAK,CAAC,IAAI;oBACV,GAAG,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,WAAW,UAAU,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;iBACnF,CAAC;gBACF,KAAK,EAAE;oBACL,6DAA6D;iBAC9D;aACF,CAAC,CACP,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAW,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAC7C,CAAC;IAEF,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,MAAM,GAC3B,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,iBAAiB,CACrB,IAAI,OAAO,uBAAuB,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,EACvD,qFAAqF,CACtF,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,MAA6B;;IAE7B,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/C,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS;YAC9B,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,IAAI,aAAa;YACpC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC;QAC9B,MAAM,KAAK,GAAG,CACZ,MAAM,CACJ,KAAK,CAAC,SAAS;YACb,CAAC,CAAC,OAAC,IAAI,CAAC,SAAS,mCAAI,YAAY,CAAC;YAClC,CAAC,CAAC,OAAC,IAAI,CAAC,GAAG,mCAAI,UAAU,CAAC,CAC7B,CAAC,QAAQ,CAAC,CACZ,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,KAAK;YAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAC/B,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CACnD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,eAAe,CACnB,0BAA0B,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC3E,6BAA6B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,UAAU,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,eAAe,CACnB,sBAAsB,EACtB,0BAA0B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,6BAA6B,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE;QAC9B,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,MAAM;KACP,CAAC,CACH,CAAC;IACF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,MAAM,GACjB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,SAAS,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM;QAC1D,IAAI,EAAE;YACJ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAC9B;gBACE,QAAQ;gBACR,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;aAClE;SACF;QACD,KAAK,EAAE,IAAI;KACZ,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,MAA6B,EAC7B,SAA6B;IAE7B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,qCAAqC,EAC3D,0BAA0B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,qBAAqB,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,SAAS;QACvB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;QACzD,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACb,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,UAAU,CACd,SAAS;YACP,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,6BAA6B,SAAS,IAAI;YAClE,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,kCAAkC,EAC5D,eAAe,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjI,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,IAAI,+BAA+B,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,WAAW,uGAAuG,EACtM,qFAAqF,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,QAAQ,CAChJ,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CACxD,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,MAAM,GACjB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,mBAAmB,MAAM,CAAC,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE;QAC9D,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE;YACJ,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;YACnB;gBACE,eAAe;gBACf,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,mCAAmC;aAC1D;SACF;QACD,KAAK,EAAE;YACL,gEAAgE;YAChE,GAAG,CAAC,MAAM,CAAC,QAAQ;gBACjB,CAAC,CAAC,CAAC,8DAA8D,CAAC;gBAClE,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,SAAS,CAAC,MAA6B;;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACrF,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB;KAClD,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,yFAAyF,CAC1F,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACxE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC;QAC7D,IAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3E,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACvC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CACxC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,GAAG,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CACR,2DAA2D,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,iBAAiB,GAAG,CAAC,YAAY,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAC3J,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,QAAQ;gBACd,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,SAAS,cAAc,OAAO,CAAC,QAAQ,CAAC,WAAW,WAAW,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,EAAE;gBAClP,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,SAAS,cAAc,CAClE,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CACR,gCAAgC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CACpH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,UAAU;YACZ,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/I,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,+CAA+C,MAAM,CAAC,UAAU,EAAE,CACzF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,UAAU;QACf,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7M,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,yCAAyC,MAAM,CAAC,UAAU,EAAE,CACjF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,EAAE,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,MAA6B,EAC7B,GAAiB;;IAEjB,MAAM,KAAK,GAAG;QACZ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;KACnF,CAAC;IACF,IAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,CAAA,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,CAAC,MAAM;QACnC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC;YACE,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,+DAA+D;SACzF,CAAC;IACN,KAAK,CAAC,IAAI,CACR,gCAAgC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC9D,qFAAqF,CACtF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IACrE,IAAI,GAAG,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAChB,MAA6B,EAC7B,GAAiB,EACjB,MAAc;IAEd,OAAO;QACL,GAAG,GAAG,CAAC,QAAQ;aACZ,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;aACtC,GAAG,CACF,CAAC,OAAO,EAAE,EAAE,CACV,+BAA+B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,mCAAmC,CACvH;QACH,GAAG,CAAC,GAAG,CAAC,UAAU;YAChB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,wCAAwC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,MAA6B,EAC7B,UAA8B;IAE9B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,2EAA2E,EACjG,yBAAyB,MAAM,CAAC,OAAO,CAAC,IAAI,yBAAyB,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,UAAU;QACpB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,UAAU,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YACjB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACT,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;IAC7D,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,UAAU,CACd,UAAU;QACR,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,qBAAqB,UAAU,IAAI;QAC3D,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,mCAAmC,EAC7D,kCAAkC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACxF,CAAC;AACJ,CAAC;AAED,MAAM,WAAW;IACf,YACmB,GAAoB,EAC7B,OAAsB;mBADb,GAAG;uBACZ,OAAO;IACd,CAAC;IAEJ,KAAK,CAAC,IAAI,CACR,IAAyD;QAEzD,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAC/C,MAAM,iBAAiB,CACrB,mBAAmB,IAAI,CAAC,GAAG,CAAC,IAAI,sCAAsC,EACtE,4BAA4B,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,CACxD,CAAC;IACJ,CAAC;CACF;AAED,SAAS,SAAS,CAAC,GAAe,EAAE,IAAe;;IACjD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAC,IAAI,CAAC,UAAU,mCAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IAC/D,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,6BAA6B,KAAK,IAAI;QACxC,CAAC,CAAC,2BAA2B,EAC/B,iKAAiK,CAClK,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,IAAwB;IACtE,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,CACd,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,QAAQ,CAAC,CAAC,CAAC,YAAY,IAAI,GAAG,EACjE,IAAI,KAAK,MAAM;QACb,CAAC,CAAC,qFAAqF;QACvF,CAAC,CAAC,qFAAqF,CAC1F,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,IAAa;IACzB,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAC1B,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,GAAG,CAAC,MAIZ;;IACC,mBAAO,MAAM,CAAC,KAAK,mCAAI,MAAM,CAAC,IAAI,mCAAI,MAAM,CAAC,MAAM,CAAC;AACtD,CAAC;AAED,sCAAsC;AACtC,SAAS,YAAY,CAAC,GAAiB;IACrC,OAAO,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import type {\n  TeamAppState,\n  TeamIntegrationStatus,\n} from '@ekanos/integration-schema';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport {\n  type AuthEnvironment,\n  refreshStoredSession,\n  requireSession,\n  resolveAuthEnvironment,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport {\n  authRequiredError,\n  invalidStateError,\n  usageError,\n  validationError,\n} from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { resolveSourceTarget } from '../source-target';\nimport {\n  type TeamsApiResult,\n  listTeams,\n  mintTeamWebhook,\n  setTeamApp,\n  showTeamIntegration,\n} from '../teams-api';\nimport { promptHidden, promptLine } from './apps';\n\nexport const TEAMS_SUBCOMMANDS = ['list', 'show', 'app', 'webhook'] as const;\ntype TeamsSubcommand = (typeof TEAMS_SUBCOMMANDS)[number];\n\nexport interface TeamsArgs {\n  host?: string;\n  source?: string;\n  /** `list`, `show <team> <product>`, `app set <team> <product>`, `webhook <team> <product> [<id>]`. */\n  positionals: readonly string[];\n  connection?: string;\n  yes: boolean;\n  dir: string;\n  env: Record<string, string | undefined>;\n  stdinIsTTY?: boolean;\n  /** Test seams for the questions `app set` asks. */\n  ask?: (question: string) => Promise<string>;\n  askSecret?: (question: string) => Promise<string>;\n}\n\ninterface Target {\n  source: string;\n  team: string;\n  product: string;\n}\n\n/**\n * `teams` — a Source admin's view of its teams' integration setup, the\n * team-level counterpart of `apps`. `list` names the teams; `show` reads one\n * team's setup of one product as a checklist; `app set` enters a team's own\n * app (Zendesk's subdomain, client and signing secret) at the admin's\n * terminal — never from a flag, a file or a non-interactive run, so an\n * agent driving the CLI never handles a secret; `webhook` mints the URL the\n * team's provider sends to, shown once.\n */\nexport async function runTeams(\n  ctx: CliContext,\n  args: TeamsArgs,\n): Promise<ExitCode> {\n  const [rawSubcommand, ...rest] = args.positionals;\n  const subcommand = parseSubcommand(rawSubcommand);\n\n  if (subcommand === 'app' && rest[0] !== 'set') {\n    throw usageError(\n      rest[0]\n        ? `Unknown teams app subcommand \"${rest[0]}\".`\n        : 'teams app needs a subcommand.',\n      'Run \"ekanos teams app set <team> <product>\".',\n    );\n  }\n  const operands = subcommand === 'app' ? rest.slice(1) : rest;\n\n  if (subcommand === 'list' && operands.length > 0) {\n    throw usageError(\n      'teams list takes no arguments.',\n      'Run \"ekanos teams list --source <slug>\".',\n    );\n  }\n\n  const team = subcommand === 'list' ? '' : requireSlug(operands[0], 'team');\n  const product =\n    subcommand === 'list' ? '' : requireSlug(operands[1], 'product');\n  const extra = operands.slice(subcommand === 'webhook' ? 3 : 2);\n  if (subcommand !== 'list' && extra.length > 0) {\n    throw usageError(\n      `Unexpected argument \"${extra[0]}\".`,\n      'See \"ekanos teams --help\".',\n    );\n  }\n\n  if (subcommand === 'app' && !canPrompt(ctx, args)) {\n    throw usageError(\n      \"teams app set takes the team's secrets at a terminal, never in a script or an agent run.\",\n      `Run it yourself in your terminal: npx @ekanos/cli teams app set ${team} ${product}${args.connection ? ` --connection ${args.connection}` : ''}${args.source ? ` --source ${args.source}` : ''}`,\n    );\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(\n    env,\n    requireSession(env.store, env.host),\n    args,\n  );\n  const client = new TeamsClient(env, resolved.session);\n  const source = resolved.source;\n\n  if (subcommand === 'list') {\n    const list = await client.call((token) =>\n      listTeams(env.host, token, source),\n    );\n    return ctx.succeed(\n      { host: env.host, ...list },\n      list.teams.length === 0\n        ? ctx.ui.result({\n            title: `No teams on ${list.source.slug}`,\n            tone: 'warn',\n          })\n        : ctx.ui.result({\n            title: `Teams on ${list.source.slug}`,\n            rows: list.teams.map((entry) => [\n              entry.slug,\n              `${entry.name} · ${entry.memberCount} member${entry.memberCount === 1 ? '' : 's'}`,\n            ]),\n            notes: [\n              '\"ekanos teams show <team> <product>\" shows a team\\'s setup.',\n            ],\n          }),\n    );\n  }\n\n  const target: Target = { source, team, product };\n  const status = await client.call((token) =>\n    showTeamIntegration(env.host, token, target),\n  );\n\n  if (subcommand === 'show') {\n    return ctx.succeed(\n      { host: env.host, ...status },\n      checklist(status).join('\\n'),\n    );\n  }\n\n  if (!status.enabled) {\n    throw invalidStateError(\n      `\"${product}\" is not enabled on ${status.source.slug}.`,\n      '\"ekanos catalog\" lists what this Source has; Ekanos enables a product for a Source.',\n    );\n  }\n\n  if (subcommand === 'app') {\n    return setApp(ctx, args, client, env.host, target, status);\n  }\n  return mintWebhook(ctx, args, client, env.host, target, status, operands[2]);\n}\n\nasync function setApp(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: Target,\n  status: TeamIntegrationStatus,\n): Promise<ExitCode> {\n  const app = chooseApp(status, args.connection);\n  ctx.log(appWalkthrough(status, app).join('\\n'));\n\n  const fields: Record<string, string> = {};\n  for (const field of app.fields) {\n    const keep = field.set ? ' (set — Enter keeps it)' : '';\n    const question = field.sensitive\n      ? `${field.label}${keep} (hidden): `\n      : `${field.label}${keep}: `;\n    const value = (\n      await (\n        field.sensitive\n          ? (args.askSecret ?? promptHidden)\n          : (args.ask ?? promptLine)\n      )(question)\n    ).trim();\n    if (value) fields[field.secretName] = value;\n  }\n\n  const missing = app.fields.filter(\n    (field) => !field.set && !fields[field.secretName],\n  );\n  if (missing.length > 0) {\n    throw validationError(\n      `Every field is needed: ${missing.map((field) => field.label).join(', ')}.`,\n      `Run \"ekanos teams app set ${target.team} ${target.product}\" again.`,\n    );\n  }\n  if (Object.keys(fields).length === 0) {\n    throw validationError(\n      'Nothing was changed.',\n      `Run \"ekanos teams show ${target.team} ${target.product}\" to see the current state.`,\n    );\n  }\n\n  const result = await client.call((token) =>\n    setTeamApp(host, token, target, {\n      connectionId: app.connectionId,\n      fields,\n    }),\n  );\n  const next = nextSteps(status, app, target);\n  return ctx.succeed(\n    { host, ...result },\n    ctx.ui.result({\n      title: `Saved ${target.team}'s ${result.product.name} app`,\n      rows: [\n        ['Source', status.source.slug],\n        [\n          'Fields',\n          result.fields.map((field) => `${mark(field.set)} ${field.label}`),\n        ],\n      ],\n      notes: next,\n    }),\n  );\n}\n\nasync function mintWebhook(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: Target,\n  status: TeamIntegrationStatus,\n  requested: string | undefined,\n): Promise<ExitCode> {\n  const webhooks = status.teamApps.flatMap((app) => app.webhooks);\n  if (webhooks.length === 0) {\n    throw invalidStateError(\n      `${status.product.name} has no webhook a team's app sends.`,\n      `Run \"ekanos teams show ${target.team} ${target.product}\" to see its setup.`,\n    );\n  }\n  const webhook = requested\n    ? webhooks.find((entry) => entry.webhookId === requested)\n    : webhooks.length === 1\n      ? webhooks[0]\n      : undefined;\n  if (!webhook) {\n    throw usageError(\n      requested\n        ? `${status.product.name} has no team-app webhook \"${requested}\".`\n        : `${status.product.name} has several webhooks; name one.`,\n      `Run one of: ${webhooks.map((entry) => `ekanos teams webhook ${target.team} ${target.product} ${entry.webhookId}`).join(', ')}.`,\n    );\n  }\n\n  if (webhook.endpoint && !args.yes) {\n    throw invalidStateError(\n      `${target.team} already has a live URL for ${webhook.webhookId} (${webhook.endpoint.tokenPrefix}…). A new one revokes it, and the provider's webhook stops working until you paste the new URL there.`,\n      `Re-run with --yes when you are ready to update the provider: ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId} --yes`,\n    );\n  }\n\n  const minted = await client.call((token) =>\n    mintTeamWebhook(host, token, target, webhook.webhookId),\n  );\n  return ctx.succeed(\n    { host, ...minted },\n    ctx.ui.result({\n      title: `Webhook URL for ${target.team} · ${webhook.webhookId}`,\n      tone: 'warn',\n      rows: [\n        ['URL', minted.url],\n        [\n          'Paste it into',\n          `${status.product.name}'s webhook settings for this team`,\n        ],\n      ],\n      notes: [\n        'This URL is shown once and cannot be read again. Paste it now.',\n        ...(minted.replaced\n          ? ['The previous URL is revoked: the provider must use this one.']\n          : []),\n      ],\n    }),\n  );\n}\n\n/** `teams show`, read top to bottom like a setup checklist. */\nexport function checklist(status: TeamIntegrationStatus): string[] {\n  const name = status.product.name;\n  const lines = [\n    `${name} for team ${status.team.slug} (${status.team.name}) on ${status.source.slug}`,\n    `  ${mark(status.enabled)} Enabled on the Source`,\n  ];\n  if (!status.enabled) {\n    lines.push(\n      '    \"ekanos catalog\" lists what this Source has; Ekanos enables a product for a Source.',\n    );\n    return lines;\n  }\n\n  const target = { team: status.team.slug, product: status.product.slug };\n  for (const app of status.teamApps) {\n    lines.push(`  Team app: ${app.label} (${app.connectionId})`);\n    if (app.setup?.consoleUrl) lines.push(`    Open: ${app.setup.consoleUrl}`);\n    app.setup?.steps.forEach((step, index) =>\n      lines.push(`    ${index + 1}. ${step}`),\n    );\n    lines.push('    Callback URLs to register:');\n    lines.push(...callbackUrls(app).map((url) => `      ${url}`));\n    if (app.guideUrl) lines.push(`    Guide: ${app.guideUrl}`);\n    for (const field of app.fields) {\n      lines.push(`    ${mark(field.set)} ${field.label}`);\n    }\n    if (app.fields.some((field) => !field.set)) {\n      lines.push(\n        `      → in your terminal: npx @ekanos/cli teams app set ${target.team} ${target.product} --connection ${app.connectionId} --source ${status.source.slug}`,\n      );\n    }\n    for (const webhook of app.webhooks) {\n      lines.push(\n        webhook.endpoint\n          ? `    ${mark(true)} Webhook ${webhook.webhookId}: live URL ${webhook.endpoint.tokenPrefix}… since ${day(webhook.endpoint.createdAt)}${webhook.endpoint.lastUsedAt ? `, last delivery ${day(webhook.endpoint.lastUsedAt)}` : ', no delivery yet'}`\n          : `    ${mark(false)} Webhook ${webhook.webhookId}: no URL yet`,\n      );\n      if (!webhook.endpoint) {\n        lines.push(\n          `      → ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId} --source ${status.source.slug}`,\n        );\n      }\n    }\n    lines.push(\n      app.connection\n        ? `    ${mark(true)} Connected ${day(app.connection.connectedAt)}${app.connection.connectedBy ? ` by ${who(app.connection.connectedBy)}` : ''}`\n        : `    ${mark(false)} Connected: a team member clicks Connect at ${status.connectUrl}`,\n    );\n  }\n\n  lines.push(\n    status.activation\n      ? `  ${mark(true)} Activated for the team${status.activation.activatedAt ? ` ${day(status.activation.activatedAt)}` : ''}${status.activation.activatedBy ? ` by ${who(status.activation.activatedBy)}` : ''}`\n      : `  ${mark(false)} Activated: a team member connects at ${status.connectUrl}`,\n  );\n  lines.push(`  Team page: ${status.connectUrl}`);\n  if (status.agentEvents.length > 0) {\n    lines.push('  Agent events it offers:');\n    lines.push(\n      ...status.agentEvents.map((event) => `    ${event.id} — ${event.label}`),\n    );\n  }\n  return lines;\n}\n\nfunction appWalkthrough(\n  status: TeamIntegrationStatus,\n  app: TeamAppState,\n): string[] {\n  const lines = [\n    `${status.product.name} app for team ${status.team.slug} on ${status.source.slug}`,\n  ];\n  if (app.setup?.consoleUrl) lines.push(`  Open: ${app.setup.consoleUrl}`);\n  const steps = app.setup?.steps.length\n    ? [...app.setup.steps]\n    : [\n        `In ${status.product.name}, create an OAuth app for the team (or open the one it uses).`,\n      ];\n  steps.push(\n    `Check the app lists exactly: ${callbackUrls(app).join(', ')}`,\n    \"Enter its values below. Secrets are stored in Ekanos's vault and never shown again.\",\n  );\n  lines.push(...steps.map((step, index) => `  ${index + 1}. ${step}`));\n  if (app.guideUrl) lines.push(`  Guide: ${app.guideUrl}`);\n  return lines;\n}\n\nfunction nextSteps(\n  status: TeamIntegrationStatus,\n  app: TeamAppState,\n  target: Target,\n): string[] {\n  return [\n    ...app.webhooks\n      .filter((webhook) => !webhook.endpoint)\n      .map(\n        (webhook) =>\n          `Next: \"ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId}\" for the provider's webhook URL.`,\n      ),\n    ...(app.connection\n      ? []\n      : [`Then a team member clicks Connect at ${status.connectUrl}`]),\n  ];\n}\n\nfunction chooseApp(\n  status: TeamIntegrationStatus,\n  connection: string | undefined,\n): TeamAppState {\n  const apps = status.teamApps;\n  if (apps.length === 0) {\n    throw invalidStateError(\n      `${status.product.name} takes no team app: teams connect through the Source's app, or need none.`,\n      `Run \"ekanos apps show ${status.product.slug}\" for the Source's app.`,\n    );\n  }\n  const app = connection\n    ? apps.find((entry) => entry.connectionId === connection)\n    : apps.length === 1\n      ? apps[0]\n      : apps.find((entry) => entry.connectionId === 'default');\n  if (app) return app;\n  throw usageError(\n    connection\n      ? `${status.product.name} has no team app \"${connection}\".`\n      : `${status.product.name} has several team apps; name one.`,\n    `Pass --connection with one of: ${apps.map((entry) => entry.connectionId).join(', ')}.`,\n  );\n}\n\nclass TeamsClient {\n  constructor(\n    private readonly env: AuthEnvironment,\n    private session: StoredSession,\n  ) {}\n\n  async call<T>(\n    send: (accessToken: string) => Promise<TeamsApiResult<T>>,\n  ): Promise<T> {\n    let result = await send(this.session.accessToken);\n    if (result.status === 'unauthorized') {\n      this.session = await refreshStoredSession(this.env, this.session);\n      result = await send(this.session.accessToken);\n    }\n    if (result.status === 'ok') return result.data;\n    throw authRequiredError(\n      `The session for ${this.env.host} could not authorize the teams call.`,\n      `Run \"ekanos login --host ${this.env.host}\" and retry.`,\n    );\n  }\n}\n\nfunction canPrompt(ctx: CliContext, args: TeamsArgs): boolean {\n  return !ctx.jsonMode && (args.stdinIsTTY ?? process.stdin.isTTY === true);\n}\n\nfunction parseSubcommand(value: string | undefined): TeamsSubcommand {\n  const match = TEAMS_SUBCOMMANDS.find((name) => name === value);\n  if (match) return match;\n  throw usageError(\n    value\n      ? `Unknown teams subcommand \"${value}\".`\n      : 'teams needs a subcommand.',\n    'Run one of: ekanos teams list, ekanos teams show <team> <product>, ekanos teams app set <team> <product>, ekanos teams webhook <team> <product> [<webhook-id>].',\n  );\n}\n\nfunction requireSlug(value: string | undefined, what: 'team' | 'product') {\n  const slug = value?.trim().toLowerCase();\n  if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug)) return slug;\n  throw usageError(\n    value ? `\"${value}\" is not a ${what} slug.` : `Name the ${what}.`,\n    what === 'team'\n      ? '\"ekanos teams list\" lists the teams, e.g. \"ekanos teams show acme-support zendesk\".'\n      : '\"ekanos catalog\" lists the products, e.g. \"ekanos teams show acme-support zendesk\".',\n  );\n}\n\nfunction mark(done: boolean): string {\n  return done ? '✓' : '✗';\n}\n\nfunction day(iso: string): string {\n  return iso.slice(0, 10);\n}\n\nfunction who(member: {\n  name: string | null;\n  email: string | null;\n  userId: string;\n}) {\n  return member.email ?? member.name ?? member.userId;\n}\n\n/** Every redirect URI to register. */\nfunction callbackUrls(app: TeamAppState): string[] {\n  return app.callbackUrls.length ? app.callbackUrls : [app.callbackUrl];\n}\n"]}
+{"version":3,"file":"teams.js","sourceRoot":"","sources":["../../src/commands/teams.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,oBAAoB,EACpB,cAAc,EACd,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,eAAe,GAChB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAEL,SAAS,EACT,eAAe,EACf,UAAU,EACV,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM;IACN,MAAM;IACN,KAAK;IACL,SAAS;IACT,GAAG,sBAAsB;CACjB,CAAC;AA8BX;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAe,EACf,IAAe;IAEf,MAAM,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IAClD,IAAI,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC;QACnC,OAAO,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,UAAU,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAElD,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,eAAe,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;YAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;SACrB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,GAAG,EACH,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EACnC,IAAI,CACL,CAAC;QACF,OAAO,aAAa,CAClB,GAAG,EACH,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,EACtC,GAAG,CAAC,IAAI,EACR,QAAQ,CAAC,MAAM,EACf,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,MAAM,UAAU,CACd,IAAI,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,iCAAiC,IAAI,CAAC,CAAC,CAAC,IAAI;YAC9C,CAAC,CAAC,+BAA+B,EACnC,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7D,IAAI,UAAU,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,CACd,gCAAgC,EAChC,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,MAAM,OAAO,GACX,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,UAAU,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,UAAU,CACd,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EACpC,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,UAAU,CACd,0FAA0F,EAC1F,mEAAmE,IAAI,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjM,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,GAAG,EACH,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EACnC,IAAI,CACL,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE/B,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACnC,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACxC,IAAI,EAAE,MAAM;aACb,CAAC;YACJ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACrC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC9B,KAAK,CAAC,IAAI;oBACV,GAAG,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,WAAW,UAAU,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;iBACnF,CAAC;gBACF,KAAK,EAAE;oBACL,6DAA6D;iBAC9D;aACF,CAAC,CACP,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAW,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAC7C,CAAC;IAEF,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,MAAM,GAC3B,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,iBAAiB,CACrB,IAAI,OAAO,uBAAuB,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,EACvD,qFAAqF,CACtF,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,MAA6B;;IAE7B,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/C,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS;YAC9B,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,IAAI,aAAa;YACpC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC;QAC9B,MAAM,KAAK,GAAG,CACZ,MAAM,CACJ,KAAK,CAAC,SAAS;YACb,CAAC,CAAC,OAAC,IAAI,CAAC,SAAS,mCAAI,YAAY,CAAC;YAClC,CAAC,CAAC,OAAC,IAAI,CAAC,GAAG,mCAAI,UAAU,CAAC,CAC7B,CAAC,QAAQ,CAAC,CACZ,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,KAAK;YAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAC/B,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CACnD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,eAAe,CACnB,0BAA0B,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC3E,6BAA6B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,UAAU,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,eAAe,CACnB,sBAAsB,EACtB,0BAA0B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,6BAA6B,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE;QAC9B,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,MAAM;KACP,CAAC,CACH,CAAC;IACF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,MAAM,GACjB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,SAAS,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM;QAC1D,IAAI,EAAE;YACJ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAC9B;gBACE,QAAQ;gBACR,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;aAClE;SACF;QACD,KAAK,EAAE,IAAI;KACZ,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,MAA6B,EAC7B,SAA6B;IAE7B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,qCAAqC,EAC3D,0BAA0B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,qBAAqB,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,SAAS;QACvB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;QACzD,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACb,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,UAAU,CACd,SAAS;YACP,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,6BAA6B,SAAS,IAAI;YAClE,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,kCAAkC,EAC5D,eAAe,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjI,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,IAAI,+BAA+B,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,WAAW,uGAAuG,EACtM,qFAAqF,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,QAAQ,CAChJ,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CACxD,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,MAAM,GACjB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,mBAAmB,MAAM,CAAC,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE;QAC9D,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE;YACJ,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;YACnB;gBACE,eAAe;gBACf,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,mCAAmC;aAC1D;SACF;QACD,KAAK,EAAE;YACL,gEAAgE;YAChE,GAAG,CAAC,MAAM,CAAC,QAAQ;gBACjB,CAAC,CAAC,CAAC,8DAA8D,CAAC;gBAClE,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,SAAS,CAAC,MAA6B;;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACrF,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB;KAClD,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,yFAAyF,CAC1F,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACxE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC;QAC7D,IAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3E,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACvC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CACxC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,GAAG,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CACR,2DAA2D,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,iBAAiB,GAAG,CAAC,YAAY,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAC3J,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,QAAQ;gBACd,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,SAAS,cAAc,OAAO,CAAC,QAAQ,CAAC,WAAW,WAAW,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,EAAE;gBAClP,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,SAAS,cAAc,CAClE,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CACR,gCAAgC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CACpH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,UAAU;YACZ,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/I,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,+CAA+C,MAAM,CAAC,UAAU,EAAE,CACzF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,UAAU;QACf,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7M,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,yCAAyC,MAAM,CAAC,UAAU,EAAE,CACjF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,EAAE,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,MAA6B,EAC7B,GAAiB;;IAEjB,MAAM,KAAK,GAAG;QACZ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;KACnF,CAAC;IACF,IAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,CAAA,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,CAAC,MAAM;QACnC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC;YACE,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,+DAA+D;SACzF,CAAC;IACN,KAAK,CAAC,IAAI,CACR,gCAAgC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC9D,qFAAqF,CACtF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IACrE,IAAI,GAAG,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAChB,MAA6B,EAC7B,GAAiB,EACjB,MAAc;IAEd,OAAO;QACL,GAAG,GAAG,CAAC,QAAQ;aACZ,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;aACtC,GAAG,CACF,CAAC,OAAO,EAAE,EAAE,CACV,+BAA+B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,mCAAmC,CACvH;QACH,GAAG,CAAC,GAAG,CAAC,UAAU;YAChB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,wCAAwC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,MAA6B,EAC7B,UAA8B;IAE9B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,2EAA2E,EACjG,yBAAyB,MAAM,CAAC,OAAO,CAAC,IAAI,yBAAyB,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,UAAU;QACpB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,UAAU,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YACjB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACT,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;IAC7D,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,UAAU,CACd,UAAU;QACR,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,qBAAqB,UAAU,IAAI;QAC3D,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,mCAAmC,EAC7D,kCAAkC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACxF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,WAAW;IACtB,YACmB,GAAoB,EAC7B,OAAsB;mBADb,GAAG;uBACZ,OAAO;IACd,CAAC;IAEJ,KAAK,CAAC,IAAI,CACR,IAAyD;QAEzD,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAC/C,MAAM,iBAAiB,CACrB,mBAAmB,IAAI,CAAC,GAAG,CAAC,IAAI,sCAAsC,EACtE,4BAA4B,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,CACxD,CAAC;IACJ,CAAC;CACF;AAED,SAAS,SAAS,CAAC,GAAe,EAAE,IAAe;;IACjD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAC,IAAI,CAAC,UAAU,mCAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IAC/D,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,6BAA6B,KAAK,IAAI;QACxC,CAAC,CAAC,2BAA2B,EAC/B,gVAAgV,CACjV,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,IAAwB;IACtE,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,CACd,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,QAAQ,CAAC,CAAC,CAAC,YAAY,IAAI,GAAG,EACjE,IAAI,KAAK,MAAM;QACb,CAAC,CAAC,qFAAqF;QACvF,CAAC,CAAC,qFAAqF,CAC1F,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,IAAa;IACzB,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAC1B,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,GAAG,CAAC,MAIZ;;IACC,mBAAO,MAAM,CAAC,KAAK,mCAAI,MAAM,CAAC,IAAI,mCAAI,MAAM,CAAC,MAAM,CAAC;AACtD,CAAC;AAED,sCAAsC;AACtC,SAAS,YAAY,CAAC,GAAiB;IACrC,OAAO,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import type {\n  TeamAppState,\n  TeamIntegrationStatus,\n} from '@ekanos/integration-schema';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport {\n  type AuthEnvironment,\n  refreshStoredSession,\n  requireSession,\n  resolveAuthEnvironment,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport {\n  authRequiredError,\n  invalidStateError,\n  usageError,\n  validationError,\n} from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { resolveSourceTarget } from '../source-target';\nimport {\n  type TeamsApiResult,\n  listTeams,\n  mintTeamWebhook,\n  setTeamApp,\n  showTeamIntegration,\n} from '../teams-api';\nimport { promptHidden, promptLine } from './apps';\nimport { isTeamAgentArea, runTeamAgentCommands } from './team-agents';\nimport {\n  ONBOARDING_SUBCOMMANDS,\n  isOnboardingSubcommand,\n  parseOnboarding,\n  runOnboarding,\n} from './teams-onboard';\n\nexport const TEAMS_SUBCOMMANDS = [\n  'list',\n  'show',\n  'app',\n  'webhook',\n  ...ONBOARDING_SUBCOMMANDS,\n] as const;\ntype TeamsSubcommand = (typeof TEAMS_SUBCOMMANDS)[number];\n\nexport interface TeamsArgs {\n  host?: string;\n  source?: string;\n  /** `list`, `show <team> <product>`, `app set <team> <product>`, `webhook <team> <product> [<id>]`. */\n  positionals: readonly string[];\n  connection?: string;\n  /** `create --slug`, `create --owner <email>`, `members invite --role`. */\n  slug?: string;\n  owner?: string;\n  role?: string;\n  yes: boolean;\n  /** Every parsed flag, for `teams agents|triggers|links|mcp` (team-agents.ts). */\n  flags?: Record<string, string | boolean | string[]>;\n  dir: string;\n  env: Record<string, string | undefined>;\n  stdinIsTTY?: boolean;\n  /** Test seams for the questions `app set` asks. */\n  ask?: (question: string) => Promise<string>;\n  askSecret?: (question: string) => Promise<string>;\n}\n\ninterface Target {\n  source: string;\n  team: string;\n  product: string;\n}\n\n/**\n * `teams` — a Source admin's view of its teams' integration setup, the\n * team-level counterpart of `apps`. `list` names the teams; `show` reads one\n * team's setup of one product as a checklist; `app set` enters a team's own\n * app (Zendesk's subdomain, client and signing secret) at the admin's\n * terminal — never from a flag, a file or a non-interactive run, so an\n * agent driving the CLI never handles a secret; `webhook` mints the URL the\n * team's provider sends to, shown once.\n */\nexport async function runTeams(\n  ctx: CliContext,\n  args: TeamsArgs,\n): Promise<ExitCode> {\n  const [rawSubcommand, ...rest] = args.positionals;\n  if (isTeamAgentArea(rawSubcommand)) {\n    return runTeamAgentCommands(ctx, args);\n  }\n  const subcommand = parseSubcommand(rawSubcommand);\n\n  if (isOnboardingSubcommand(subcommand)) {\n    const plan = parseOnboarding(subcommand, rest, args);\n    const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n      projectDir: args.dir,\n    });\n    const resolved = await resolveSourceTarget(\n      env,\n      requireSession(env.store, env.host),\n      args,\n    );\n    return runOnboarding(\n      ctx,\n      new TeamsClient(env, resolved.session),\n      env.host,\n      resolved.source,\n      plan,\n    );\n  }\n\n  if (subcommand === 'app' && rest[0] !== 'set') {\n    throw usageError(\n      rest[0]\n        ? `Unknown teams app subcommand \"${rest[0]}\".`\n        : 'teams app needs a subcommand.',\n      'Run \"ekanos teams app set <team> <product>\".',\n    );\n  }\n  const operands = subcommand === 'app' ? rest.slice(1) : rest;\n\n  if (subcommand === 'list' && operands.length > 0) {\n    throw usageError(\n      'teams list takes no arguments.',\n      'Run \"ekanos teams list --source <slug>\".',\n    );\n  }\n\n  const team = subcommand === 'list' ? '' : requireSlug(operands[0], 'team');\n  const product =\n    subcommand === 'list' ? '' : requireSlug(operands[1], 'product');\n  const extra = operands.slice(subcommand === 'webhook' ? 3 : 2);\n  if (subcommand !== 'list' && extra.length > 0) {\n    throw usageError(\n      `Unexpected argument \"${extra[0]}\".`,\n      'See \"ekanos teams --help\".',\n    );\n  }\n\n  if (subcommand === 'app' && !canPrompt(ctx, args)) {\n    throw usageError(\n      \"teams app set takes the team's secrets at a terminal, never in a script or an agent run.\",\n      `Run it yourself in your terminal: npx @ekanos/cli teams app set ${team} ${product}${args.connection ? ` --connection ${args.connection}` : ''}${args.source ? ` --source ${args.source}` : ''}`,\n    );\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(\n    env,\n    requireSession(env.store, env.host),\n    args,\n  );\n  const client = new TeamsClient(env, resolved.session);\n  const source = resolved.source;\n\n  if (subcommand === 'list') {\n    const list = await client.call((token) =>\n      listTeams(env.host, token, source),\n    );\n    return ctx.succeed(\n      { host: env.host, ...list },\n      list.teams.length === 0\n        ? ctx.ui.result({\n            title: `No teams on ${list.source.slug}`,\n            tone: 'warn',\n          })\n        : ctx.ui.result({\n            title: `Teams on ${list.source.slug}`,\n            rows: list.teams.map((entry) => [\n              entry.slug,\n              `${entry.name} · ${entry.memberCount} member${entry.memberCount === 1 ? '' : 's'}`,\n            ]),\n            notes: [\n              '\"ekanos teams show <team> <product>\" shows a team\\'s setup.',\n            ],\n          }),\n    );\n  }\n\n  const target: Target = { source, team, product };\n  const status = await client.call((token) =>\n    showTeamIntegration(env.host, token, target),\n  );\n\n  if (subcommand === 'show') {\n    return ctx.succeed(\n      { host: env.host, ...status },\n      checklist(status).join('\\n'),\n    );\n  }\n\n  if (!status.enabled) {\n    throw invalidStateError(\n      `\"${product}\" is not enabled on ${status.source.slug}.`,\n      '\"ekanos catalog\" lists what this Source has; Ekanos enables a product for a Source.',\n    );\n  }\n\n  if (subcommand === 'app') {\n    return setApp(ctx, args, client, env.host, target, status);\n  }\n  return mintWebhook(ctx, args, client, env.host, target, status, operands[2]);\n}\n\nasync function setApp(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: Target,\n  status: TeamIntegrationStatus,\n): Promise<ExitCode> {\n  const app = chooseApp(status, args.connection);\n  ctx.log(appWalkthrough(status, app).join('\\n'));\n\n  const fields: Record<string, string> = {};\n  for (const field of app.fields) {\n    const keep = field.set ? ' (set — Enter keeps it)' : '';\n    const question = field.sensitive\n      ? `${field.label}${keep} (hidden): `\n      : `${field.label}${keep}: `;\n    const value = (\n      await (\n        field.sensitive\n          ? (args.askSecret ?? promptHidden)\n          : (args.ask ?? promptLine)\n      )(question)\n    ).trim();\n    if (value) fields[field.secretName] = value;\n  }\n\n  const missing = app.fields.filter(\n    (field) => !field.set && !fields[field.secretName],\n  );\n  if (missing.length > 0) {\n    throw validationError(\n      `Every field is needed: ${missing.map((field) => field.label).join(', ')}.`,\n      `Run \"ekanos teams app set ${target.team} ${target.product}\" again.`,\n    );\n  }\n  if (Object.keys(fields).length === 0) {\n    throw validationError(\n      'Nothing was changed.',\n      `Run \"ekanos teams show ${target.team} ${target.product}\" to see the current state.`,\n    );\n  }\n\n  const result = await client.call((token) =>\n    setTeamApp(host, token, target, {\n      connectionId: app.connectionId,\n      fields,\n    }),\n  );\n  const next = nextSteps(status, app, target);\n  return ctx.succeed(\n    { host, ...result },\n    ctx.ui.result({\n      title: `Saved ${target.team}'s ${result.product.name} app`,\n      rows: [\n        ['Source', status.source.slug],\n        [\n          'Fields',\n          result.fields.map((field) => `${mark(field.set)} ${field.label}`),\n        ],\n      ],\n      notes: next,\n    }),\n  );\n}\n\nasync function mintWebhook(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: Target,\n  status: TeamIntegrationStatus,\n  requested: string | undefined,\n): Promise<ExitCode> {\n  const webhooks = status.teamApps.flatMap((app) => app.webhooks);\n  if (webhooks.length === 0) {\n    throw invalidStateError(\n      `${status.product.name} has no webhook a team's app sends.`,\n      `Run \"ekanos teams show ${target.team} ${target.product}\" to see its setup.`,\n    );\n  }\n  const webhook = requested\n    ? webhooks.find((entry) => entry.webhookId === requested)\n    : webhooks.length === 1\n      ? webhooks[0]\n      : undefined;\n  if (!webhook) {\n    throw usageError(\n      requested\n        ? `${status.product.name} has no team-app webhook \"${requested}\".`\n        : `${status.product.name} has several webhooks; name one.`,\n      `Run one of: ${webhooks.map((entry) => `ekanos teams webhook ${target.team} ${target.product} ${entry.webhookId}`).join(', ')}.`,\n    );\n  }\n\n  if (webhook.endpoint && !args.yes) {\n    throw invalidStateError(\n      `${target.team} already has a live URL for ${webhook.webhookId} (${webhook.endpoint.tokenPrefix}…). A new one revokes it, and the provider's webhook stops working until you paste the new URL there.`,\n      `Re-run with --yes when you are ready to update the provider: ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId} --yes`,\n    );\n  }\n\n  const minted = await client.call((token) =>\n    mintTeamWebhook(host, token, target, webhook.webhookId),\n  );\n  return ctx.succeed(\n    { host, ...minted },\n    ctx.ui.result({\n      title: `Webhook URL for ${target.team} · ${webhook.webhookId}`,\n      tone: 'warn',\n      rows: [\n        ['URL', minted.url],\n        [\n          'Paste it into',\n          `${status.product.name}'s webhook settings for this team`,\n        ],\n      ],\n      notes: [\n        'This URL is shown once and cannot be read again. Paste it now.',\n        ...(minted.replaced\n          ? ['The previous URL is revoked: the provider must use this one.']\n          : []),\n      ],\n    }),\n  );\n}\n\n/** `teams show`, read top to bottom like a setup checklist. */\nexport function checklist(status: TeamIntegrationStatus): string[] {\n  const name = status.product.name;\n  const lines = [\n    `${name} for team ${status.team.slug} (${status.team.name}) on ${status.source.slug}`,\n    `  ${mark(status.enabled)} Enabled on the Source`,\n  ];\n  if (!status.enabled) {\n    lines.push(\n      '    \"ekanos catalog\" lists what this Source has; Ekanos enables a product for a Source.',\n    );\n    return lines;\n  }\n\n  const target = { team: status.team.slug, product: status.product.slug };\n  for (const app of status.teamApps) {\n    lines.push(`  Team app: ${app.label} (${app.connectionId})`);\n    if (app.setup?.consoleUrl) lines.push(`    Open: ${app.setup.consoleUrl}`);\n    app.setup?.steps.forEach((step, index) =>\n      lines.push(`    ${index + 1}. ${step}`),\n    );\n    lines.push('    Callback URLs to register:');\n    lines.push(...callbackUrls(app).map((url) => `      ${url}`));\n    if (app.guideUrl) lines.push(`    Guide: ${app.guideUrl}`);\n    for (const field of app.fields) {\n      lines.push(`    ${mark(field.set)} ${field.label}`);\n    }\n    if (app.fields.some((field) => !field.set)) {\n      lines.push(\n        `      → in your terminal: npx @ekanos/cli teams app set ${target.team} ${target.product} --connection ${app.connectionId} --source ${status.source.slug}`,\n      );\n    }\n    for (const webhook of app.webhooks) {\n      lines.push(\n        webhook.endpoint\n          ? `    ${mark(true)} Webhook ${webhook.webhookId}: live URL ${webhook.endpoint.tokenPrefix}… since ${day(webhook.endpoint.createdAt)}${webhook.endpoint.lastUsedAt ? `, last delivery ${day(webhook.endpoint.lastUsedAt)}` : ', no delivery yet'}`\n          : `    ${mark(false)} Webhook ${webhook.webhookId}: no URL yet`,\n      );\n      if (!webhook.endpoint) {\n        lines.push(\n          `      → ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId} --source ${status.source.slug}`,\n        );\n      }\n    }\n    lines.push(\n      app.connection\n        ? `    ${mark(true)} Connected ${day(app.connection.connectedAt)}${app.connection.connectedBy ? ` by ${who(app.connection.connectedBy)}` : ''}`\n        : `    ${mark(false)} Connected: a team member clicks Connect at ${status.connectUrl}`,\n    );\n  }\n\n  lines.push(\n    status.activation\n      ? `  ${mark(true)} Activated for the team${status.activation.activatedAt ? ` ${day(status.activation.activatedAt)}` : ''}${status.activation.activatedBy ? ` by ${who(status.activation.activatedBy)}` : ''}`\n      : `  ${mark(false)} Activated: a team member connects at ${status.connectUrl}`,\n  );\n  lines.push(`  Team page: ${status.connectUrl}`);\n  if (status.agentEvents.length > 0) {\n    lines.push('  Agent events it offers:');\n    lines.push(\n      ...status.agentEvents.map((event) => `    ${event.id} — ${event.label}`),\n    );\n  }\n  return lines;\n}\n\nfunction appWalkthrough(\n  status: TeamIntegrationStatus,\n  app: TeamAppState,\n): string[] {\n  const lines = [\n    `${status.product.name} app for team ${status.team.slug} on ${status.source.slug}`,\n  ];\n  if (app.setup?.consoleUrl) lines.push(`  Open: ${app.setup.consoleUrl}`);\n  const steps = app.setup?.steps.length\n    ? [...app.setup.steps]\n    : [\n        `In ${status.product.name}, create an OAuth app for the team (or open the one it uses).`,\n      ];\n  steps.push(\n    `Check the app lists exactly: ${callbackUrls(app).join(', ')}`,\n    \"Enter its values below. Secrets are stored in Ekanos's vault and never shown again.\",\n  );\n  lines.push(...steps.map((step, index) => `  ${index + 1}. ${step}`));\n  if (app.guideUrl) lines.push(`  Guide: ${app.guideUrl}`);\n  return lines;\n}\n\nfunction nextSteps(\n  status: TeamIntegrationStatus,\n  app: TeamAppState,\n  target: Target,\n): string[] {\n  return [\n    ...app.webhooks\n      .filter((webhook) => !webhook.endpoint)\n      .map(\n        (webhook) =>\n          `Next: \"ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId}\" for the provider's webhook URL.`,\n      ),\n    ...(app.connection\n      ? []\n      : [`Then a team member clicks Connect at ${status.connectUrl}`]),\n  ];\n}\n\nfunction chooseApp(\n  status: TeamIntegrationStatus,\n  connection: string | undefined,\n): TeamAppState {\n  const apps = status.teamApps;\n  if (apps.length === 0) {\n    throw invalidStateError(\n      `${status.product.name} takes no team app: teams connect through the Source's app, or need none.`,\n      `Run \"ekanos apps show ${status.product.slug}\" for the Source's app.`,\n    );\n  }\n  const app = connection\n    ? apps.find((entry) => entry.connectionId === connection)\n    : apps.length === 1\n      ? apps[0]\n      : apps.find((entry) => entry.connectionId === 'default');\n  if (app) return app;\n  throw usageError(\n    connection\n      ? `${status.product.name} has no team app \"${connection}\".`\n      : `${status.product.name} has several team apps; name one.`,\n    `Pass --connection with one of: ${apps.map((entry) => entry.connectionId).join(', ')}.`,\n  );\n}\n\nexport class TeamsClient {\n  constructor(\n    private readonly env: AuthEnvironment,\n    private session: StoredSession,\n  ) {}\n\n  async call<T>(\n    send: (accessToken: string) => Promise<TeamsApiResult<T>>,\n  ): Promise<T> {\n    let result = await send(this.session.accessToken);\n    if (result.status === 'unauthorized') {\n      this.session = await refreshStoredSession(this.env, this.session);\n      result = await send(this.session.accessToken);\n    }\n    if (result.status === 'ok') return result.data;\n    throw authRequiredError(\n      `The session for ${this.env.host} could not authorize the teams call.`,\n      `Run \"ekanos login --host ${this.env.host}\" and retry.`,\n    );\n  }\n}\n\nfunction canPrompt(ctx: CliContext, args: TeamsArgs): boolean {\n  return !ctx.jsonMode && (args.stdinIsTTY ?? process.stdin.isTTY === true);\n}\n\nfunction parseSubcommand(value: string | undefined): TeamsSubcommand {\n  const match = TEAMS_SUBCOMMANDS.find((name) => name === value);\n  if (match) return match;\n  throw usageError(\n    value\n      ? `Unknown teams subcommand \"${value}\".`\n      : 'teams needs a subcommand.',\n    'Run one of: ekanos teams list, ekanos teams create <name>, ekanos teams members list <team>, ekanos teams roles list <team>, ekanos teams connect <team> <product>, ekanos teams show <team> <product>, ekanos teams app set <team> <product>, ekanos teams webhook <team> <product> [<webhook-id>], ekanos teams agents|triggers|links|mcp ….',\n  );\n}\n\nfunction requireSlug(value: string | undefined, what: 'team' | 'product') {\n  const slug = value?.trim().toLowerCase();\n  if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug)) return slug;\n  throw usageError(\n    value ? `\"${value}\" is not a ${what} slug.` : `Name the ${what}.`,\n    what === 'team'\n      ? '\"ekanos teams list\" lists the teams, e.g. \"ekanos teams show acme-support zendesk\".'\n      : '\"ekanos catalog\" lists the products, e.g. \"ekanos teams show acme-support zendesk\".',\n  );\n}\n\nfunction mark(done: boolean): string {\n  return done ? '✓' : '✗';\n}\n\nfunction day(iso: string): string {\n  return iso.slice(0, 10);\n}\n\nfunction who(member: {\n  name: string | null;\n  email: string | null;\n  userId: string;\n}) {\n  return member.email ?? member.name ?? member.userId;\n}\n\n/** Every redirect URI to register. */\nfunction callbackUrls(app: TeamAppState): string[] {\n  return app.callbackUrls.length ? app.callbackUrls : [app.callbackUrl];\n}\n"]}