@ekanos/cli 0.13.0 → 0.14.0

package/dist/commands/status.js.map

@@ -1 +1 @@
-{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,QAAQ,EACR,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAiB,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAGL,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAA2B,SAAS,EAAE,MAAM,OAAO,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,qEAAqE;AACrE,MAAM,sBAAsB,GAAG,KAAM,CAAC;AAEtC;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;AA0CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAe,EACf,IAAgB;;IAEhB,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,SAAS;KAC7B,CAAC,CAAC;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE5B,MAAM,OAAO,GAAG,MAAM;QACpB,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC;QACjC,CAAC,CAAC;YACE,aAAa,EAAE,KAAK;YACpB,IAAI,EAAE,4BAA4B,GAAG,CAAC,IAAI,eAAe;SAC1D,CAAC;IAEN,wEAAwE;IACxE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,oBAAoB;IACpB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,OAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAElE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,iBAAiB,CACrB,mDAAmD,GAAG,CAAC,IAAI,GAAG,EAC9D,4BAA4B,GAAG,CAAC,IAAI,cAAc,CACnD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,iBAAiB,CACrB,2BAA2B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EACpD,qEAAqE,CACtE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,iBAAiB,CACrB,kDAAkD,EAClD,8DAA8D;gBAC5D,8CAA8C,CACjD,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,WAAW,GAA+B,IAAI,CAAC;IAEnD,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,OAAO,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;QACrD,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,yEAAyE;QACzE,wEAAwE;QACxE,WAAW,GAAG,MAAM,kBAAkB,CACpC,GAAG,EACH,IAAI,EACJ,OAAO,CAAC,MAAM,EACd,UAAU,CACX,CAAC;IACJ,CAAC;SAAM,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACrD,sEAAsE;QACtE,8CAA8C;QAC9C,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,GAAG,CAAC,GAAG,CACL,4BAA4B,GAAG,CAAC,IAAI,mCAAmC;gBACrE,OAAC,OAAO,CAAC,IAAI,mCAAI,EAAE,CAAC,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,QAAQ;YACd,GAAG,CAAC,GAAG,CACL,sEAAsE;gBACpE,mEAAmE;gBACnE,2BAA2B,CAC9B,CAAC;IACN,CAAC;IAED,MAAM,kBAAkB,GACtB,OAAO,IAAI,WAAW;QACpB,CAAC,CAAC,OAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,mCAAI,IAAI,CAAC;QAC5D,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,iBAAiB,GAAG,WAAW;QACnC,CAAC,CAAC,WAAW;aACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,MAAK,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,CAAA,CAAC;aACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,IAAI,CAAC;IAET,uEAAuE;IACvE,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,QAAQ,GACZ,CAAC,GAAG,CAAC,QAAQ,KAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAA,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI;QAC/D,CAAC,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;QACvD,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO,GAAG,CAAC,OAAO,2DAEd,IAAI,EAAE,GAAG,CAAC,IAAI,IACX,OAAO,KACV,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,EACnC,OAAO,EAAE,OAAO;YACd,CAAC,iCACM,OAAO,KACV,iBAAiB,EAAE,WAAW;oBAC5B,CAAC,CAAC,OAAC,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,QAAQ,mCAAI,EAAE,CAAC;oBACtC,CAAC,CAAC,IAAI,IAEZ,CAAC,CAAC,IAAI,EACR,WAAW,KACR,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACzD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAE1C,YAAY,CACV,GAAG,CAAC,EAAE,QACN,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,mCAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EACtC,GAAG,CAAC,IAAI,EACR,OAAO,EACP,OAAO,EACP,WAAW,EACX,EAAE,QAAQ,QAAE,IAAI,CAAC,QAAQ,mCAAI,KAAK,EAAE,GAAG,QAAE,IAAI,CAAC,GAAG,mCAAI,KAAK,EAAE,EAC5D,QAAQ,QACR,IAAI,CAAC,GAAG,mCAAI,IAAI,IAAI,EAAE,CACvB,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CACrB,GAAe,EACf,GAA8C,EAC9C,OAAsB,EACtB,IAAgB;;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,uEAAuE;QACvE,gDAAgD;QAChD,MAAM,iBAAiB,CACrB,kDAAkD,EAClD,qEAAqE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,KAAK,SAAG,IAAI,CAAC,KAAK,mCAAI,YAAY,CAAC;IAEzC,qEAAqE;IACrE,+BAA+B;IAC/B,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IAC3E,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9C,GAAG,CAAC,GAAG,CACL,GAAG,SAAS,GAAG,MAAM,YAAY,OAAO,CAAC,IAAI,IAAI,aAAa,OAAO,GAAG,CAAC,IAAI,GAAG;QAC9E,kBAAkB,sBAAsB,GAAG,IAAI,KAAK,CACvD,CAAC;IAEF,SAAS,CAAC;QACR,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,qCAAqC;gBAC9D,6BAA6B,EAC/B,4BAA4B,GAAG,CAAC,IAAI,cAAc,CACnD,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAC3C,GAAG,EACH,OAAO,EACP,MAAM,EACN,UAAU,CACX,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,OAAO,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAED,GAAG,CAAC,GAAG,CACL,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,MAAM;YACzD,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,aAAa,CAC9D,CAAC;QAEF,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,YAAiC,EACjC,IAAY,EACZ,OAAe;;IAEf,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9D,aAAO,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,mCAAI,IAAI,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAe,EACf,IAAY,EACZ,OAA0B;;IAE1B,MAAM,IAAI,GAAG;QACX,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,QAAE,OAAO,CAAC,QAAQ,mCAAI,EAAE;QAChC,MAAM,QAAE,OAAO,CAAC,MAAM,mCAAI,EAAE;KAC7B,CAAC;IAEF,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,IAAI,CACb,eAAe,CACb,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,4BAA4B;YACpD,IAAI,MAAA,IAAI,CAAC,UAAU,mCAAI,CAAC,SAAS,IAAI,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,EACvE,iEAAiE;YAC/D,uCAAuC,CAC1C,EACD,IAAI,CACL,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC,OAAO,CAChB,IAAI,EACJ,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,OAAO,OAAO,CAAC,KAAK,EAAE;QACvD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACpC,IAAI,EAAE;YACJ,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,SAAS;gBAChB,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAU,CAAC;gBACjD,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CACzB,GAA8C,EAC9C,MAAqB;IAErB,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEjE,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;YACrE,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,aAAa,EAAE,CAAC;YAC1E,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAW;;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAErC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAEvC,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,UAAU;QACtB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;QACzB,MAAM,QAAE,MAAM,CAAC,OAAO,CAAC,MAAM,mCAAI,IAAI;KACtC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,kBAAkB,CAC/B,GAA8C,EAC9C,OAAsB,EACtB,MAAc,EACd,MAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE;QACzE,MAAM;KACP,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC;IAErD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,GAAG,CAAC,IAAI,EACR,SAAS,CAAC,WAAW,EACrB,MAAM,EACN;QACE,MAAM;KACP,CACF,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,YAAY,CAAC;IAEvD,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,2CAA2C,EACtE,4BAA4B,GAAG,CAAC,IAAI,cAAc,CACnD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CACjC,GAA8C,EAC9C,OAAsB,EACtB,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAExC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAA8B;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IACvC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAsC;IAEtC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,sBACP,WAAW,OAAC,CAAC,CAAC,OAAO,mCAAI,CAAC,CAAC,WAAW,CAAC;QACvC,WAAW,OAAC,CAAC,CAAC,OAAO,mCAAI,CAAC,CAAC,WAAW,CAAC,GAAA,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAA0B,EAAE,GAAS;;IACvD,MAAM,SAAS,SAAG,OAAO,CAAC,OAAO,mCAAI,OAAO,CAAC,WAAW,CAAC;IACzD,OAAO,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,EAAM,EACN,OAA0B;;IAE1B,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,UAAU,SAAG,OAAO,CAAC,UAAU,mCAAI,CAAC,CAAC;IAC3C,MAAM,SAAS,SAAG,OAAO,CAAC,SAAS,mCAAI,CAAC,CAAC;IAEzC,IAAI,UAAU,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,UAAU,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;IACjD,IAAI,SAAS,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAE/C,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAM,EAAE,KAAa;IACjD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACtD,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC,MAAM,CAAC;IACxC,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC;IACzC,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC;IAC/D,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;AACxB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAM,EACN,QAAsC,EACtC,GAAS;IAET,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAU,CAAC;IAEjE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACpC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC;YAC7B,YAAY,EAAE,QAAQ,CAAC,IAAI;YAC3B,aAAa,EAAE,QAAQ,CAAC,KAAK;YAC7B,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC;SAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAqC;QAC/C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;KACvE,CAAC;IAEF,MAAM,UAAU,GAAG,OAAO;SACvB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;SACrD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACjC;QACE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7B,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzB,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;KACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IAEF,OAAO,CAAC,UAAU,EAAE,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAChC,EAAM,EACN,GAAW,EACX,MAAoC,EACpC,QAAiB;;IAEjB,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACT;YACE,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE;YAC9B,WAAW,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,QAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;SACzD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QAEJ,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC;IAClC,MAAM,YAAY,GAAG,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,QAAQ,mCAAI,EAAE,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAC9B,CAAC;IAEF,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzD,OAAO,WAAW,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,aAAa,GACjB,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,UAAU,mCAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,sBAAC,OAAC,CAAC,CAAC,UAAU,mCAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAC,CAAC,CAAC,SAAS,mCAAI,CAAC,CAAC,GAAG,CAAC,GAAA,CACzD,CAAC;IAEF,OAAO,aAAa,IAAI,YAAY;QAClC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,qCAAqC,CAAC,EAAE;QACtD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAUD,MAAM,UAAU,oBAAoB,CAClC,WAA8B;;IAE9B,MAAM,MAAM,SAAG,uBAAuB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,mCAAI,IAAI,CAAC;IACxE,OAAO;QACL,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,aAAa,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM;QAC1C,aAAa,QAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,mCAAI,IAAI;QACtC,WAAW,QAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,mCAAI,IAAI;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,MAAc;IAChD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,KAAK;SACT,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;SACjC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,OAAsB,EACtB,OAA6B,EAC7B,QAAuB;;;IAEvB,MAAM,IAAI,GAAgB,EAAE,CAAC;IAE7B,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;wBACT,MAAA,OAAO,CAAC,IAAI,0CAAE,KAAK,mCAAI,MAAA,OAAO,CAAC,IAAI,0CAAE,EAAE,mCAAI,SAAS;SACrD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAErC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;YACT,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI;SACtD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC;YACR,QAAQ;YACR,OAAO,CAAC,MAAM;gBACZ,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxD,CAAC,CAAC,UAAU;SACf,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAM,EACN,MAAgC;IAEhC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC,UAAU,CAAC,0BAA0B,EAAE,iBAAiB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,KAAK,EAAE,CAAC,GAAG,CAAC,oCAAoC,CAAC,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,KAAK,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CACnB,EAAM,EACN,GAAW,EACX,IAAY,EACZ,OAAsB,EACtB,OAA6B,EAC7B,WAAuC,EACvC,IAAyC,EACzC,QAAuB,EACvB,GAAS;;IAET,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa;QACjC,CAAC,CAAC,OAAO,CAAC,IAAI;QACd,CAAC,CAAC,CAAC,OAAO;YACR,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;gBACf,CAAC,CAAC,mFAAmF;gBACrF,CAAC,CAAC,SAAS,CAAC;IAElB,MAAM,KAAK,GAAa;QACtB,EAAE,CAAC,MAAM,CAAC;YACR,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe;YAC5D,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAC3C,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC;YACvD,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;SAC1B,CAAC;KACH,CAAC;IAEF,IAAI,IAAI,IAAI,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAA,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,kBAAkB,SACtB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,mCAAI,IAAI,CAAC;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAElE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,kBAAkB;QAC/B,CAAC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QACtD,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,aAAa,GAAG,yBAAyB,CAC7C,EAAE,EACF,GAAG,EACH,MAAM,EACN,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,IAAI,aAAa;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,gCAAgC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,WAAW,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,WAAW,GAAG,uBAAuB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAClE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,WAAW,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;YAClD,KAAK,CAAC,IAAI,CACR,KAAK,EAAE,CAAC,GAAG,CACT,GAAG,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,aAAa,WACxC,OAAO,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACrC,YAAY,MAAA,OAAO,CAAC,aAAa,mCAAI,GAAG,IACtC,MAAA,OAAO,CAAC,WAAW,mCAAI,GACzB,EAAE,CACH,EAAE,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,QAAE,MAAM,CAAC,CAAC,CAAC,mCAAI,IAAI,CAAC,CAAC;IACtD,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC","sourcesContent":["import * as fs from 'node:fs';\nimport * as path from 'node:path';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport {\n  refreshStoredSession,\n  resolveAuthEnvironment,\n  resolveIdentity,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport {\n  CliError,\n  authRequiredError,\n  gateFailedError,\n  preconditionError,\n} from '../errors';\nimport { ERROR_CODES, type ExitCode } from '../exit-codes';\nimport { formatFindings, relativeTime } from '../findings-renderer';\nimport { EKANOS_CONFIG_FILENAME, loadProject } from '../project';\nimport {\n  type SubmissionListing,\n  type SubmissionVersion,\n  listSubmissions,\n} from '../publish-api';\nimport { fetchSeatsWithOneRefresh } from '../seats';\nimport { type ResultRow, type Ui, shortHost } from '../ui';\nimport { announceUpdate, checkForUpdate } from '../update-notice';\nimport { readProjectVersion } from './publish';\n\n/** `--watch`'s poll interval — matches the mission brief exactly. */\nconst WATCH_POLL_INTERVAL_MS = 30_000;\n\n/**\n * The states `--watch` stops on. `submitted` is the only non-terminal state\n * a version can be in when watching starts (an already-`gated`/`dev`/\n * `rejected` version resolves on the very first check, no polling needed).\n */\nconst WATCH_TERMINAL_STATES = new Set(['gated', 'dev', 'rejected']);\n\nexport interface StatusArgs {\n  host?: string;\n  /** Project directory (may contain ekanos.json). Defaults to cwd. */\n  dir: string;\n  env: Record<string, string | undefined>;\n  /** Render each version's full finding list, not just error/warn counts. */\n  findings?: boolean;\n  /**\n   * Expand \"OTHER INTEGRATIONS IN SOURCE …\" from one summary line per\n   * integration into the same VERSION/STATE/AGE/FINDINGS table shape THIS\n   * PROJECT's section uses. Human mode only — the JSON envelope's\n   * `submissions` already carries every integration's full version history\n   * regardless of this flag.\n   */\n  all?: boolean;\n  /**\n   * Block until this project's current (slug, version) submission reaches a\n   * terminal-for-waiting state (gated, dev, rejected), polling every 30s.\n   * Changes the command's exit-code contract — see `runStatus`'s docstring.\n   */\n  watch?: boolean;\n  /** Injectable for tests — see `auth/device-flow.ts`'s identical pattern. */\n  sleep?: (ms: number) => Promise<void>;\n  /** Injectable \"now\" for deterministic AGE rendering in tests. Defaults to `new Date()`. */\n  now?: Date;\n}\n\ninterface SessionReport {\n  authenticated: boolean;\n  user?: { id: string; email: string | null; name: string | null };\n  expiresAt?: string;\n  hint?: string;\n}\n\ninterface ProjectReport {\n  dir: string;\n  slug: string;\n  source: string | null;\n}\n\n/**\n * `status` — the read verb: where am I pointed, who am I, and what has this\n * project submitted?\n *\n * Three sections, each degrading gracefully rather than failing:\n *\n *  - **session** — whoami's server-side identity check, but an absent or dead\n *    session reports `authenticated: false` with a hint instead of exit 4. A\n *    partner asking \"what is my state?\" must get an answer, not an error whose\n *    answer it is.\n *  - **project** — the ekanos.json in `--dir` (default cwd), when there is\n *    one. No project is an ordinary state for `status`, never an error.\n *  - **submissions** — `GET /api/partner/submissions?source=…` for the\n *    project's resolved source, only when both a session and a source exist.\n *    Server errors here DO map through the taxonomy: an unreachable host or a\n *    missing source is a fault to surface, not a state to absorb.\n *\n * Exit 0 whenever the report itself could be assembled — EXCEPT under\n * `--watch` (see below), whose exit code carries the gate's verdict instead.\n *\n * The submission listing always requests the full `?detail=findings` shape\n * server-side (needed so THIS PROJECT's latest-error auto-inline rendering\n * — see `humanSummary` — has findings to inspect without a second\n * round-trip). `--findings` no longer changes what's FETCHED; it changes\n * what's RENDERED inline in human mode: every shown version's findings,\n * not just the latest's error-severity ones.\n *\n * `--watch` turns `status` into a blocking wait: it requires a project with\n * a resolved source and a live session (both are PRECONDITIONs here, not\n * degraded-to-false states — there is nothing to watch without them), then\n * polls `GET /api/partner/submissions?detail=findings` every 30s for THIS\n * project's current (slug, package.json version) submission until it reaches\n * a terminal-for-waiting state: `gated`/`dev` exit 0, `rejected` exits 10\n * (GATE_FAILED) with the findings carried in `data` — the same shape\n * `publish`'s own gate refusal uses, so an agent's fix-then-retry loop\n * branches on it identically whether the gate ran inline (future) or via\n * this poll (today). `--json --watch` still emits exactly ONE envelope, at\n * completion — the polling itself only ever writes to stderr via `ctx.log`.\n *\n * Human-mode rendering is PROJECT-SCOPED: the server lists every\n * submission for the resolved source (an org-level bucket shared by every\n * project publishing there — `listSubmissions` has no server-side slug\n * filter, see `publish-api.ts`'s wire contract), so \"THIS PROJECT\" groups\n * the rows matching this project's own slug and \"OTHER INTEGRATIONS IN\n * SOURCE …\" collapses everything else to one summary line per integration\n * (or, with `--all`, the same table shape).\n * The `--json` envelope stays additive-compatible: `submissions` is still\n * the full, unfiltered list, with `data.project.scopedSubmissions` and\n * `data.otherIntegrations` layered on top for a consumer that wants the\n * pre-grouped view without re-deriving it.\n */\nexport async function runStatus(\n  ctx: CliContext,\n  args: StatusArgs,\n): Promise<ExitCode> {\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n\n  const stored = env.store.read(env.host);\n\n  const notice = await checkForUpdate({\n    env: args.env,\n    host: env.host,\n    session: stored ?? undefined,\n  });\n  announceUpdate(ctx, notice);\n\n  const session = stored\n    ? await probeSession(env, stored)\n    : {\n        authenticated: false,\n        hint: `Run \"ekanos login --host ${env.host}\" to sign in.`,\n      };\n\n  // probeSession may have refreshed the session — persisting a NEW access\n  // token and ROTATING the refresh token on disk. Re-read before using it:\n  // the pre-probe object now holds a dead access token and an already-spent\n  // refresh token, and presenting those would turn \"logged in, token was\n  // merely stale\" into a hard exit-4 — the one failure this command promises\n  // never to produce.\n  const live = stored ? (env.store.read(env.host) ?? stored) : null;\n\n  const project = readProjectReport(args.dir);\n\n  if (args.watch) {\n    if (!session.authenticated || !live) {\n      throw authRequiredError(\n        `\"ekanos status --watch\" needs a live session on ${env.host}.`,\n        `Run \"ekanos login --host ${env.host}\" and retry.`,\n      );\n    }\n\n    if (!project) {\n      throw preconditionError(\n        `No ekanos.json found in ${path.resolve(args.dir)}.`,\n        'Run \"ekanos publish\" at least once before watching its gate result.',\n      );\n    }\n\n    if (!project.source) {\n      throw preconditionError(\n        'This project has no \"source\" in ekanos.json yet.',\n        'Run \"ekanos publish\" at least once (it saves the source you ' +\n          'publish to) before watching its gate result.',\n      );\n    }\n\n    return runWatch(ctx, env, project, args);\n  }\n\n  let submissions: SubmissionListing[] | null = null;\n\n  if (project?.source && session.authenticated && live) {\n    // Always the full `?detail=findings` shape, `--findings` or not: THIS\n    // PROJECT's auto-inline latest-error rendering (see `humanSummary`)\n    // needs the findings array to decide whether to render, not just the\n    // counts — and `data.project.scopedSubmissions` carries the same\n    // richer shape in the JSON envelope regardless of the flag. `--findings`\n    // now controls how much of it gets rendered inline, not what's fetched.\n    submissions = await listWithOneRefresh(\n      env,\n      live,\n      project.source,\n      'findings',\n    );\n  } else if (project?.source && !session.authenticated) {\n    // Human mode says this in the result block's note; the stderr line is\n    // for JSON callers, who never see that block.\n    if (ctx.jsonMode) {\n      ctx.log(\n        `ekanos: not logged in to ${env.host} — skipping the submission list. ` +\n          (session.hint ?? ''),\n      );\n    }\n  } else if (project && !project.source) {\n    if (ctx.jsonMode)\n      ctx.log(\n        'ekanos: this project has no \"source\" in ekanos.json yet — the first ' +\n          '\"ekanos publish --source <slug>\" saves one, and status will list ' +\n          'submissions from then on.',\n      );\n  }\n\n  const projectIntegration =\n    project && submissions\n      ? (submissions.find((s) => s.slug === project.slug) ?? null)\n      : null;\n\n  const otherIntegrations = submissions\n    ? submissions\n        .filter((s) => s.slug !== project?.slug)\n        .map((s) => summarizeIntegration(s))\n    : null;\n\n  // Best-effort, human-mode-only add-on for the header's \"publish target\n  // (+ seat role)\" line — same degrade-to-null contract as `whoami`'s own\n  // seat lookup. Skipped entirely in JSON mode: nothing in the envelope\n  // needs it, and it would otherwise be an extra network round-trip every\n  // existing `--json` caller pays for no reason.\n  const seatRole =\n    !ctx.jsonMode && project?.source && session.authenticated && live\n      ? await fetchSeatRoleQuietly(env, live, project.source)\n      : null;\n\n  return ctx.succeed(\n    {\n      host: env.host,\n      ...session,\n      credentialsPath: env.store.filePath,\n      project: project\n        ? {\n            ...project,\n            scopedSubmissions: submissions\n              ? (projectIntegration?.versions ?? [])\n              : null,\n          }\n        : null,\n      submissions,\n      ...(otherIntegrations !== null ? { otherIntegrations } : {}),\n      ...(notice ? { toolchain: notice } : {}),\n    },\n    humanSummary(\n      ctx.ui,\n      project?.dir ?? path.resolve(args.dir),\n      env.host,\n      session,\n      project,\n      submissions,\n      { findings: args.findings ?? false, all: args.all ?? false },\n      seatRole,\n      args.now ?? new Date(),\n    ),\n  );\n}\n\n/**\n * The `--watch` poll loop. Targets THIS project's current submission —\n * `project.slug` + the version presently in `package.json` (the same value\n * `publish` would submit right now) — not \"whatever's most recent,\" so\n * watching after a publish can never resolve against a stale prior version.\n */\nasync function runWatch(\n  ctx: CliContext,\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  project: ProjectReport,\n  args: StatusArgs,\n): Promise<ExitCode> {\n  const source = project.source;\n  if (!source) {\n    // Unreachable — the caller already checked — but keeps this function's\n    // own type honest without a non-null assertion.\n    throw preconditionError(\n      'This project has no \"source\" in ekanos.json yet.',\n      'Run \"ekanos publish\" at least once before watching its gate result.',\n    );\n  }\n\n  const targetVersion = readProjectVersion(project.dir);\n  const sleep = args.sleep ?? defaultSleep;\n\n  // Glyph-only restyle — the poll contract itself (exit codes, timing,\n  // JSON envelope) is unchanged.\n  const waitGlyph = ctx.jsonMode ? '' : `${ctx.ui.dim(ctx.ui.glyphs.info)} `;\n  const prefix = ctx.jsonMode ? 'ekanos: ' : '';\n\n  ctx.log(\n    `${waitGlyph}${prefix}watching ${project.slug}@${targetVersion} on ${env.host} ` +\n      `(polling every ${WATCH_POLL_INTERVAL_MS / 1000}s)…`,\n  );\n\n  for (;;) {\n    // Re-read the session from the credential store on EVERY iteration —\n    // never carry one over in a closure. Auth0 rotates the refresh token on\n    // every use (see `refreshStoredSession`'s docstring), so a token this\n    // loop already consumed is dead by the next iteration; the store is the\n    // persisted source of truth for whichever refresh most recently landed\n    // — this loop's own (via `listWithOneRefresh` below, which persists\n    // through `refreshStoredSession`), or a concurrent one from another\n    // process (another terminal running login/publish/status --watch\n    // against the same host). Threading the refreshed session back out of\n    // `listWithOneRefresh` instead would only cover the first case.\n    const current = env.store.read(env.host);\n\n    if (!current) {\n      throw authRequiredError(\n        `The session for ${env.host} is gone — \"ekanos status --watch\" ` +\n          'cannot continue without it.',\n        `Run \"ekanos login --host ${env.host}\" and retry.`,\n      );\n    }\n\n    const integrations = await listWithOneRefresh(\n      env,\n      current,\n      source,\n      'findings',\n    );\n    const version = findVersion(integrations, project.slug, targetVersion);\n\n    if (version && WATCH_TERMINAL_STATES.has(version.state)) {\n      return reportWatchOutcome(ctx, project.slug, version);\n    }\n\n    ctx.log(\n      `${waitGlyph}${prefix}${project.slug}@${targetVersion} is ` +\n        `${version ? version.state : 'not visible yet'} — waiting…`,\n    );\n\n    await sleep(WATCH_POLL_INTERVAL_MS);\n  }\n}\n\nfunction findVersion(\n  integrations: SubmissionListing[],\n  slug: string,\n  version: string,\n): SubmissionVersion | null {\n  const integration = integrations.find((i) => i.slug === slug);\n  return integration?.versions.find((v) => v.version === version) ?? null;\n}\n\nfunction reportWatchOutcome(\n  ctx: CliContext,\n  slug: string,\n  version: SubmissionVersion,\n): ExitCode {\n  const data = {\n    slug,\n    version: version.version,\n    state: version.state,\n    gatedAt: version.gatedAt,\n    errorCount: version.errorCount,\n    warnCount: version.warnCount,\n    findings: version.findings ?? [],\n    stages: version.stages ?? [],\n  };\n\n  if (version.state === 'rejected') {\n    return ctx.fail(\n      gateFailedError(\n        `${slug}@${version.version} was rejected by the gate ` +\n          `(${data.errorCount ?? 0} error${data.errorCount === 1 ? '' : 's'}).`,\n        'Resolve the error-severity findings in data.findings, bump the ' +\n          'version, and re-run \"ekanos publish\".',\n      ),\n      data,\n    );\n  }\n\n  return ctx.succeed(\n    data,\n    ctx.ui.result({\n      title: `${slug}@${version.version} is ${version.state}`,\n      tone: data.warnCount ? 'warn' : 'ok',\n      rows: [\n        ['State', version.state],\n        ...(data.warnCount\n          ? [['Warnings', String(data.warnCount)] as const]\n          : []),\n      ],\n    }),\n  );\n}\n\nfunction defaultSleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n\n/**\n * whoami's identity resolution, with AUTH_REQUIRED absorbed into\n * `authenticated: false`. Anything else — network, precondition, MFA mapped\n * to auth by `fetchIdentity` — still propagates: \"the host was unreachable\"\n * must never be reported as \"you are logged out\".\n */\nasync function probeSession(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  stored: StoredSession,\n): Promise<SessionReport> {\n  try {\n    const { identity, session } = await resolveIdentity(env, stored);\n\n    return {\n      authenticated: true,\n      user: { id: identity.id, email: identity.email, name: identity.name },\n      expiresAt: session.expiresAt,\n    };\n  } catch (error) {\n    if (error instanceof CliError && error.code === ERROR_CODES.AUTH_REQUIRED) {\n      return { authenticated: false, hint: error.hint };\n    }\n\n    throw error;\n  }\n}\n\n/**\n * Lenient project read: no ekanos.json means \"not in a project\", which is an\n * answer, not an error. An ekanos.json that EXISTS but does not load keeps\n * `loadProject`'s strict behaviour — a broken project file is a fault the\n * partner needs named, whatever verb they ran.\n */\nfunction readProjectReport(dir: string): ProjectReport | null {\n  const projectDir = path.resolve(dir);\n\n  if (!fs.existsSync(path.join(projectDir, EKANOS_CONFIG_FILENAME))) {\n    return null;\n  }\n\n  const loaded = loadProject(projectDir);\n\n  return {\n    dir: loaded.projectDir,\n    slug: loaded.primary.slug,\n    source: loaded.project.source ?? null,\n  };\n}\n\n/** Mirrors publish's one-refresh-one-retry on a stale access token. */\nasync function listWithOneRefresh(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  session: StoredSession,\n  source: string,\n  detail?: 'findings',\n): Promise<SubmissionListing[]> {\n  const first = await listSubmissions(env.host, session.accessToken, source, {\n    detail,\n  });\n\n  if (first.status === 'ok') return first.integrations;\n\n  const refreshed = await refreshStoredSession(env, session);\n  const second = await listSubmissions(\n    env.host,\n    refreshed.accessToken,\n    source,\n    {\n      detail,\n    },\n  );\n\n  if (second.status === 'ok') return second.integrations;\n\n  // Authenticated a moment ago, unauthorized twice here: report the list as\n  // unavailable rather than the session as dead — probeSession already proved\n  // it. This is unreachable in practice; belt and braces for a racing revoke.\n  throw authRequiredError(\n    `The session for ${env.host} could not authorize the submission list.`,\n    `Run \"ekanos login --host ${env.host}\" and retry.`,\n  );\n}\n\n/**\n * `whoami`'s seat-lookup degradation, narrowed to one source's role: a\n * network hiccup, MFA, or a deployment predating the seats route must never\n * turn a working `status` into a failing one — the header simply omits the\n * \"(role)\" suffix.\n */\nasync function fetchSeatRoleQuietly(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  session: StoredSession,\n  source: string,\n): Promise<string | null> {\n  try {\n    const result = await fetchSeatsWithOneRefresh(env, session);\n    if (result.status !== 'ok') return null;\n\n    const seat = result.sources.find((s) => s.slug === source);\n    return seat ? seat.roles.join(', ') : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction tryReadProjectVersion(dir: string): string | null {\n  try {\n    return readProjectVersion(dir);\n  } catch {\n    return null;\n  }\n}\n\nfunction timestampMs(iso: string | null | undefined): number {\n  if (!iso) return 0;\n  const parsed = new Date(iso).getTime();\n  return Number.isNaN(parsed) ? 0 : parsed;\n}\n\n/**\n * Newest-first by `gatedAt ?? submittedAt`. Ties (including two versions\n * with no timestamp at all) keep their original, server-given order —\n * `Array#sort` is stable, and a stable no-op is the right answer when there\n * is nothing to compare.\n */\nexport function sortVersionsNewestFirst(\n  versions: readonly SubmissionVersion[],\n): SubmissionVersion[] {\n  return [...versions].sort(\n    (a, b) =>\n      timestampMs(b.gatedAt ?? b.submittedAt) -\n      timestampMs(a.gatedAt ?? a.submittedAt),\n  );\n}\n\nfunction versionAge(version: SubmissionVersion, now: Date): string {\n  const timestamp = version.gatedAt ?? version.submittedAt;\n  return timestamp ? relativeTime(timestamp, now) : '—';\n}\n\nexport function findingsCellParts(\n  ui: Ui,\n  version: SubmissionVersion,\n): { text: string; paint: (text: string) => string } {\n  if (version.errorCount === null && version.warnCount === null) {\n    return { text: '—', paint: ui.dim };\n  }\n\n  const errorCount = version.errorCount ?? 0;\n  const warnCount = version.warnCount ?? 0;\n\n  if (errorCount === 0 && warnCount === 0) {\n    return { text: '0', paint: (text) => text };\n  }\n\n  const parts: string[] = [];\n  if (errorCount > 0) parts.push(`${errorCount}E`);\n  if (warnCount > 0) parts.push(`${warnCount}W`);\n\n  return { text: parts.join(' '), paint: errorCount > 0 ? ui.err : ui.warn };\n}\n\nexport function stateColorFor(ui: Ui, state: string): (text: string) => string {\n  if (state === 'dev' || state === 'prod') return ui.ok;\n  if (state === 'gated') return ui.accent;\n  if (state === 'submitted') return ui.dim;\n  if (state === 'rejected' || state === 'revoked') return ui.err;\n  return (text) => text;\n}\n\n/**\n * A VERSION/STATE/AGE/FINDINGS table, built by hand rather than via\n * `ui.table`: STATE and FINDINGS need per-cell color, and `ui.table` sizes\n * columns from the raw cell strings it's handed — a colored cell's ANSI\n * escapes would inflate that width and misalign the column. `ui.ts`'s own\n * doc comment on `padCell` names this exact tradeoff (\"ignoring color codes\n * in length math is the CALLER's job — pad before coloring, never after\"),\n * so this pads against the PLAIN text first and colors the already-padded\n * string — the same rule `ui.table` documents, just applied here instead of\n * inside it.\n */\nexport function renderVersionsTable(\n  ui: Ui,\n  versions: readonly SubmissionVersion[],\n  now: Date,\n): string {\n  const headers = ['VERSION', 'STATE', 'AGE', 'FINDINGS'] as const;\n\n  const rows = versions.map((version) => {\n    const findings = findingsCellParts(ui, version);\n    return {\n      version: version.version,\n      state: version.state,\n      age: versionAge(version, now),\n      findingsText: findings.text,\n      findingsPaint: findings.paint,\n      statePaint: stateColorFor(ui, version.state),\n    };\n  });\n\n  const widths: [number, number, number, number] = [\n    Math.max(headers[0].length, ...rows.map((r) => r.version.length)),\n    Math.max(headers[1].length, ...rows.map((r) => r.state.length)),\n    Math.max(headers[2].length, ...rows.map((r) => r.age.length)),\n    Math.max(headers[3].length, ...rows.map((r) => r.findingsText.length)),\n  ];\n\n  const headerLine = headers\n    .map((header, i) => ui.dim(header.padEnd(widths[i]!)))\n    .join('  ');\n\n  const bodyLines = rows.map((row) =>\n    [\n      row.version.padEnd(widths[0]),\n      row.statePaint(row.state.padEnd(widths[1])),\n      row.age.padEnd(widths[2]),\n      row.findingsPaint(row.findingsText.padEnd(widths[3])),\n    ].join('  '),\n  );\n\n  return [headerLine, ...bodyLines].join('\\n');\n}\n\n/**\n * The findings shown directly under THIS PROJECT's table. `--findings`\n * forces every version's own findings inline; otherwise only the LATEST\n * version's ERROR-severity findings auto-render (the moment a partner most\n * needs them, no flag required), and a dim pointer at `ekanos status\n * --findings` covers everything else with a nonzero count.\n */\nfunction renderThisProjectFindings(\n  ui: Ui,\n  cwd: string,\n  sorted: readonly SubmissionVersion[],\n  forceAll: boolean,\n): string | null {\n  if (forceAll) {\n    const blocks = sorted\n      .filter((v) => v.findings && v.findings.length > 0)\n      .map((v) =>\n        [\n          `  ${ui.dim(`${v.version}:`)}`,\n          indentLines(formatFindings(ui, v.findings!, { cwd }), 4),\n        ].join('\\n'),\n      );\n\n    return blocks.length > 0 ? blocks.join('\\n\\n') : null;\n  }\n\n  const [latest, ...older] = sorted;\n  const latestErrors = (latest?.findings ?? []).filter(\n    (f) => f.severity === 'error',\n  );\n\n  if (latest && latestErrors.length > 0 && latest.findings) {\n    return indentLines(formatFindings(ui, latest.findings, { cwd }), 2);\n  }\n\n  const latestNonzero =\n    (latest?.errorCount ?? 0) > 0 || (latest?.warnCount ?? 0) > 0;\n  const olderNonzero = older.some(\n    (v) => (v.errorCount ?? 0) > 0 || (v.warnCount ?? 0) > 0,\n  );\n\n  return latestNonzero || olderNonzero\n    ? `  ${ui.dim('→ details: ekanos status --findings')}`\n    : null;\n}\n\nexport interface OtherIntegrationSummary {\n  slug: string;\n  name: string | null;\n  versionsCount: number;\n  latestVersion: string | null;\n  latestState: string | null;\n}\n\nexport function summarizeIntegration(\n  integration: SubmissionListing,\n): OtherIntegrationSummary {\n  const latest = sortVersionsNewestFirst(integration.versions)[0] ?? null;\n  return {\n    slug: integration.slug,\n    name: integration.name,\n    versionsCount: integration.versions.length,\n    latestVersion: latest?.version ?? null,\n    latestState: latest?.state ?? null,\n  };\n}\n\nfunction indentLines(block: string, spaces: number): string {\n  const prefix = ' '.repeat(spaces);\n  return block\n    .split('\\n')\n    .map((line) => `${prefix}${line}`)\n    .join('\\n');\n}\n\nfunction buildHeaderRows(\n  host: string,\n  session: SessionReport,\n  project: ProjectReport | null,\n  seatRole: string | null,\n): readonly ResultRow[] {\n  const rows: ResultRow[] = [];\n\n  if (session.authenticated) {\n    rows.push([\n      'Account',\n      session.user?.email ?? session.user?.id ?? 'unknown',\n    ]);\n  }\n  rows.push(['Host', shortHost(host)]);\n\n  if (project) {\n    const version = tryReadProjectVersion(project.dir);\n    rows.push([\n      'Project',\n      version ? `${project.slug}@${version}` : project.slug,\n    ]);\n    rows.push([\n      'Target',\n      project.source\n        ? `${project.source}${seatRole ? ` · ${seatRole}` : ''}`\n        : 'none yet',\n    ]);\n  }\n\n  return rows;\n}\n\n/**\n * The closing `ui.nextAction` line, chosen from the LATEST version of THIS\n * project — `null` (no closing line at all) whenever nothing is pending:\n * no submission yet, or the latest is already `dev`/`prod`/`revoked`.\n */\nexport function buildNextAction(\n  ui: Ui,\n  latest: SubmissionVersion | null,\n): string | null {\n  if (!latest) return null;\n\n  if (latest.state === 'rejected') {\n    return ui.nextAction('ekanos status --findings', 'see what failed');\n  }\n  if (latest.state === 'gated') {\n    return `\\n${ui.dim('→ awaiting admission (runs hourly)')}`;\n  }\n  if (latest.state === 'submitted') {\n    return `\\n${ui.dim('→ awaiting gate result')}`;\n  }\n\n  return null;\n}\n\nfunction humanSummary(\n  ui: Ui,\n  cwd: string,\n  host: string,\n  session: SessionReport,\n  project: ProjectReport | null,\n  submissions: SubmissionListing[] | null,\n  args: { findings: boolean; all: boolean },\n  seatRole: string | null,\n  now: Date,\n): string {\n  const note = !session.authenticated\n    ? session.hint\n    : !project\n      ? 'No ekanos.json here, so there is no project to report on.'\n      : !project.source\n        ? 'No \"source\" configured yet. The first \"ekanos publish --source <slug>\" saves one.'\n        : undefined;\n\n  const lines: string[] = [\n    ui.result({\n      title: session.authenticated ? 'Signed in' : 'Not signed in',\n      tone: session.authenticated ? 'ok' : 'warn',\n      rows: buildHeaderRows(host, session, project, seatRole),\n      notes: note ? [note] : [],\n    }),\n  ];\n\n  if (note || !project?.source || !submissions) {\n    return lines.join('\\n');\n  }\n\n  const projectIntegration =\n    submissions.find((s) => s.slug === project.slug) ?? null;\n  const others = submissions.filter((s) => s.slug !== project.slug);\n\n  lines.push('', ui.section('this project'));\n\n  const sorted = projectIntegration\n    ? sortVersionsNewestFirst(projectIntegration.versions)\n    : [];\n\n  if (sorted.length === 0) {\n    lines.push(`  ${ui.dim('no submissions yet for this project.')}`);\n  } else {\n    lines.push(indentLines(renderVersionsTable(ui, sorted, now), 2));\n\n    const findingsBlock = renderThisProjectFindings(\n      ui,\n      cwd,\n      sorted,\n      args.findings,\n    );\n    if (findingsBlock) lines.push('', findingsBlock);\n  }\n\n  lines.push('', ui.section(`other integrations in source ${project.source}`));\n\n  if (others.length === 0) {\n    lines.push(`  ${ui.dim('none.')}`);\n  } else if (args.all) {\n    for (const integration of others) {\n      const otherSorted = sortVersionsNewestFirst(integration.versions);\n      lines.push(`  ${ui.dim(integration.slug)}`);\n      lines.push(indentLines(renderVersionsTable(ui, otherSorted, now), 4));\n    }\n  } else {\n    for (const integration of others) {\n      const summary = summarizeIntegration(integration);\n      lines.push(\n        `  ${ui.dim(\n          `${summary.slug} — ${summary.versionsCount} version${\n            summary.versionsCount === 1 ? '' : 's'\n          }, latest ${summary.latestVersion ?? '?'} ${\n            summary.latestState ?? '?'\n          }`,\n        )}`,\n      );\n    }\n  }\n\n  const action = buildNextAction(ui, sorted[0] ?? null);\n  if (action) lines.push(action);\n\n  return lines.join('\\n');\n}\n"]}
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,QAAQ,EACR,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAiB,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAGL,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAA2B,SAAS,EAAE,MAAM,OAAO,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,qEAAqE;AACrE,MAAM,sBAAsB,GAAG,KAAM,CAAC;AAEtC;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;AA0CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAe,EACf,IAAgB;;IAEhB,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,SAAS;KAC7B,CAAC,CAAC;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE5B,MAAM,OAAO,GAAG,MAAM;QACpB,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC;QACjC,CAAC,CAAC;YACE,aAAa,EAAE,KAAK;YACpB,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC;SACpC,CAAC;IAEN,wEAAwE;IACxE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,oBAAoB;IACpB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,OAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAElE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,iBAAiB,CACrB,mDAAmD,GAAG,CAAC,IAAI,GAAG,EAC9D,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,iBAAiB,CACrB,2BAA2B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EACpD,qEAAqE,CACtE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,iBAAiB,CACrB,kDAAkD,EAClD,8DAA8D;gBAC5D,8CAA8C,CACjD,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,WAAW,GAA+B,IAAI,CAAC;IAEnD,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,OAAO,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;QACrD,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,yEAAyE;QACzE,wEAAwE;QACxE,WAAW,GAAG,MAAM,kBAAkB,CACpC,GAAG,EACH,IAAI,EACJ,OAAO,CAAC,MAAM,EACd,UAAU,CACX,CAAC;IACJ,CAAC;SAAM,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACrD,sEAAsE;QACtE,8CAA8C;QAC9C,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,GAAG,CAAC,GAAG,CACL,4BAA4B,GAAG,CAAC,IAAI,mCAAmC;gBACrE,OAAC,OAAO,CAAC,IAAI,mCAAI,EAAE,CAAC,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,QAAQ;YACd,GAAG,CAAC,GAAG,CACL,sEAAsE;gBACpE,mEAAmE;gBACnE,2BAA2B,CAC9B,CAAC;IACN,CAAC;IAED,MAAM,kBAAkB,GACtB,OAAO,IAAI,WAAW;QACpB,CAAC,CAAC,OAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,mCAAI,IAAI,CAAC;QAC5D,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,iBAAiB,GAAG,WAAW;QACnC,CAAC,CAAC,WAAW;aACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,MAAK,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,CAAA,CAAC;aACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,IAAI,CAAC;IAET,uEAAuE;IACvE,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,QAAQ,GACZ,CAAC,GAAG,CAAC,QAAQ,KAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAA,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI;QAC/D,CAAC,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;QACvD,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO,GAAG,CAAC,OAAO,2DAEd,IAAI,EAAE,GAAG,CAAC,IAAI,IACX,OAAO,KACV,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,EACnC,OAAO,EAAE,OAAO;YACd,CAAC,iCACM,OAAO,KACV,iBAAiB,EAAE,WAAW;oBAC5B,CAAC,CAAC,OAAC,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,QAAQ,mCAAI,EAAE,CAAC;oBACtC,CAAC,CAAC,IAAI,IAEZ,CAAC,CAAC,IAAI,EACR,WAAW,KACR,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACzD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAE1C,YAAY,CACV,GAAG,CAAC,EAAE,QACN,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,mCAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EACtC,GAAG,CAAC,IAAI,EACR,OAAO,EACP,OAAO,EACP,WAAW,EACX,EAAE,QAAQ,QAAE,IAAI,CAAC,QAAQ,mCAAI,KAAK,EAAE,GAAG,QAAE,IAAI,CAAC,GAAG,mCAAI,KAAK,EAAE,EAC5D,QAAQ,QACR,IAAI,CAAC,GAAG,mCAAI,IAAI,IAAI,EAAE,CACvB,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CACrB,GAAe,EACf,GAA8C,EAC9C,OAAsB,EACtB,IAAgB;;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,uEAAuE;QACvE,gDAAgD;QAChD,MAAM,iBAAiB,CACrB,kDAAkD,EAClD,qEAAqE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,KAAK,SAAG,IAAI,CAAC,KAAK,mCAAI,YAAY,CAAC;IAEzC,qEAAqE;IACrE,+BAA+B;IAC/B,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IAC3E,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9C,GAAG,CAAC,GAAG,CACL,GAAG,SAAS,GAAG,MAAM,YAAY,OAAO,CAAC,IAAI,IAAI,aAAa,OAAO,GAAG,CAAC,IAAI,GAAG;QAC9E,kBAAkB,sBAAsB,GAAG,IAAI,KAAK,CACvD,CAAC;IAEF,SAAS,CAAC;QACR,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,qCAAqC;gBAC9D,6BAA6B,EAC/B,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAC3C,GAAG,EACH,OAAO,EACP,MAAM,EACN,UAAU,CACX,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,OAAO,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAED,GAAG,CAAC,GAAG,CACL,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,MAAM;YACzD,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,aAAa,CAC9D,CAAC;QAEF,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,YAAiC,EACjC,IAAY,EACZ,OAAe;;IAEf,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9D,aAAO,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,mCAAI,IAAI,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAe,EACf,IAAY,EACZ,OAA0B;;IAE1B,MAAM,IAAI,GAAG;QACX,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,QAAE,OAAO,CAAC,QAAQ,mCAAI,EAAE;QAChC,MAAM,QAAE,OAAO,CAAC,MAAM,mCAAI,EAAE;KAC7B,CAAC;IAEF,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,IAAI,CACb,eAAe,CACb,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,4BAA4B;YACpD,IAAI,MAAA,IAAI,CAAC,UAAU,mCAAI,CAAC,SAAS,IAAI,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,EACvE,iEAAiE;YAC/D,uCAAuC,CAC1C,EACD,IAAI,CACL,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC,OAAO,CAChB,IAAI,EACJ,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,OAAO,OAAO,CAAC,KAAK,EAAE;QACvD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACpC,IAAI,EAAE;YACJ,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,SAAS;gBAChB,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAU,CAAC;gBACjD,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CACzB,GAA8C,EAC9C,MAAqB;IAErB,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEjE,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;YACrE,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,aAAa,EAAE,CAAC;YAC1E,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAW;;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAErC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAEvC,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,UAAU;QACtB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;QACzB,MAAM,QAAE,MAAM,CAAC,OAAO,CAAC,MAAM,mCAAI,IAAI;KACtC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,kBAAkB,CAC/B,GAA8C,EAC9C,OAAsB,EACtB,MAAc,EACd,MAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE;QACzE,MAAM;KACP,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC;IAErD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,GAAG,CAAC,IAAI,EACR,SAAS,CAAC,WAAW,EACrB,MAAM,EACN;QACE,MAAM;KACP,CACF,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,YAAY,CAAC;IAEvD,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,2CAA2C,EACtE,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CACjC,GAA8C,EAC9C,OAAsB,EACtB,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAExC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAA8B;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IACvC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAsC;IAEtC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,sBACP,WAAW,OAAC,CAAC,CAAC,OAAO,mCAAI,CAAC,CAAC,WAAW,CAAC;QACvC,WAAW,OAAC,CAAC,CAAC,OAAO,mCAAI,CAAC,CAAC,WAAW,CAAC,GAAA,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAA0B,EAAE,GAAS;;IACvD,MAAM,SAAS,SAAG,OAAO,CAAC,OAAO,mCAAI,OAAO,CAAC,WAAW,CAAC;IACzD,OAAO,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,EAAM,EACN,OAA0B;;IAE1B,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,UAAU,SAAG,OAAO,CAAC,UAAU,mCAAI,CAAC,CAAC;IAC3C,MAAM,SAAS,SAAG,OAAO,CAAC,SAAS,mCAAI,CAAC,CAAC;IAEzC,IAAI,UAAU,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,UAAU,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;IACjD,IAAI,SAAS,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAE/C,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAM,EAAE,KAAa;IACjD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACtD,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC,MAAM,CAAC;IACxC,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC;IACzC,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC;IAC/D,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;AACxB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAM,EACN,QAAsC,EACtC,GAAS;IAET,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAU,CAAC;IAEjE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACpC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC;YAC7B,YAAY,EAAE,QAAQ,CAAC,IAAI;YAC3B,aAAa,EAAE,QAAQ,CAAC,KAAK;YAC7B,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC;SAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAqC;QAC/C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;KACvE,CAAC;IAEF,MAAM,UAAU,GAAG,OAAO;SACvB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;SACrD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACjC;QACE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7B,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzB,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;KACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IAEF,OAAO,CAAC,UAAU,EAAE,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAChC,EAAM,EACN,GAAW,EACX,MAAoC,EACpC,QAAiB;;IAEjB,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACT;YACE,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE;YAC9B,WAAW,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,QAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;SACzD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QAEJ,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC;IAClC,MAAM,YAAY,GAAG,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,QAAQ,mCAAI,EAAE,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAC9B,CAAC;IAEF,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzD,OAAO,WAAW,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,aAAa,GACjB,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,UAAU,mCAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,sBAAC,OAAC,CAAC,CAAC,UAAU,mCAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAC,CAAC,CAAC,SAAS,mCAAI,CAAC,CAAC,GAAG,CAAC,GAAA,CACzD,CAAC;IAEF,OAAO,aAAa,IAAI,YAAY;QAClC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,qCAAqC,CAAC,EAAE;QACtD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAUD,MAAM,UAAU,oBAAoB,CAClC,WAA8B;;IAE9B,MAAM,MAAM,SAAG,uBAAuB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,mCAAI,IAAI,CAAC;IACxE,OAAO;QACL,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,aAAa,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM;QAC1C,aAAa,QAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,mCAAI,IAAI;QACtC,WAAW,QAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,mCAAI,IAAI;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,MAAc;IAChD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,KAAK;SACT,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;SACjC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,OAAsB,EACtB,OAA6B,EAC7B,QAAuB;;;IAEvB,MAAM,IAAI,GAAgB,EAAE,CAAC;IAE7B,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;wBACT,MAAA,OAAO,CAAC,IAAI,0CAAE,KAAK,mCAAI,MAAA,OAAO,CAAC,IAAI,0CAAE,EAAE,mCAAI,SAAS;SACrD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAErC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;YACT,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI;SACtD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC;YACR,QAAQ;YACR,OAAO,CAAC,MAAM;gBACZ,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxD,CAAC,CAAC,UAAU;SACf,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAM,EACN,MAAgC;IAEhC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC,UAAU,CAAC,0BAA0B,EAAE,iBAAiB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,KAAK,EAAE,CAAC,GAAG,CAAC,oCAAoC,CAAC,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,KAAK,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CACnB,EAAM,EACN,GAAW,EACX,IAAY,EACZ,OAAsB,EACtB,OAA6B,EAC7B,WAAuC,EACvC,IAAyC,EACzC,QAAuB,EACvB,GAAS;;IAET,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa;QACjC,CAAC,CAAC,OAAO,CAAC,IAAI;QACd,CAAC,CAAC,CAAC,OAAO;YACR,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;gBACf,CAAC,CAAC,mFAAmF;gBACrF,CAAC,CAAC,SAAS,CAAC;IAElB,MAAM,KAAK,GAAa;QACtB,EAAE,CAAC,MAAM,CAAC;YACR,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe;YAC5D,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAC3C,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC;YACvD,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;SAC1B,CAAC;KACH,CAAC;IAEF,IAAI,IAAI,IAAI,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAA,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,kBAAkB,SACtB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,mCAAI,IAAI,CAAC;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAElE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,kBAAkB;QAC/B,CAAC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QACtD,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,aAAa,GAAG,yBAAyB,CAC7C,EAAE,EACF,GAAG,EACH,MAAM,EACN,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,IAAI,aAAa;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,gCAAgC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,WAAW,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,WAAW,GAAG,uBAAuB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAClE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,WAAW,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;YAClD,KAAK,CAAC,IAAI,CACR,KAAK,EAAE,CAAC,GAAG,CACT,GAAG,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,aAAa,WACxC,OAAO,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACrC,YAAY,MAAA,OAAO,CAAC,aAAa,mCAAI,GAAG,IACtC,MAAA,OAAO,CAAC,WAAW,mCAAI,GACzB,EAAE,CACH,EAAE,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,QAAE,MAAM,CAAC,CAAC,CAAC,mCAAI,IAAI,CAAC,CAAC;IACtD,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC","sourcesContent":["import * as fs from 'node:fs';\nimport * as path from 'node:path';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport { loginHint } from '../auth/host-trust';\nimport {\n  refreshStoredSession,\n  resolveAuthEnvironment,\n  resolveIdentity,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport {\n  CliError,\n  authRequiredError,\n  gateFailedError,\n  preconditionError,\n} from '../errors';\nimport { ERROR_CODES, type ExitCode } from '../exit-codes';\nimport { formatFindings, relativeTime } from '../findings-renderer';\nimport { EKANOS_CONFIG_FILENAME, loadProject } from '../project';\nimport {\n  type SubmissionListing,\n  type SubmissionVersion,\n  listSubmissions,\n} from '../publish-api';\nimport { fetchSeatsWithOneRefresh } from '../seats';\nimport { type ResultRow, type Ui, shortHost } from '../ui';\nimport { announceUpdate, checkForUpdate } from '../update-notice';\nimport { readProjectVersion } from './publish';\n\n/** `--watch`'s poll interval — matches the mission brief exactly. */\nconst WATCH_POLL_INTERVAL_MS = 30_000;\n\n/**\n * The states `--watch` stops on. `submitted` is the only non-terminal state\n * a version can be in when watching starts (an already-`gated`/`dev`/\n * `rejected` version resolves on the very first check, no polling needed).\n */\nconst WATCH_TERMINAL_STATES = new Set(['gated', 'dev', 'rejected']);\n\nexport interface StatusArgs {\n  host?: string;\n  /** Project directory (may contain ekanos.json). Defaults to cwd. */\n  dir: string;\n  env: Record<string, string | undefined>;\n  /** Render each version's full finding list, not just error/warn counts. */\n  findings?: boolean;\n  /**\n   * Expand \"OTHER INTEGRATIONS IN SOURCE …\" from one summary line per\n   * integration into the same VERSION/STATE/AGE/FINDINGS table shape THIS\n   * PROJECT's section uses. Human mode only — the JSON envelope's\n   * `submissions` already carries every integration's full version history\n   * regardless of this flag.\n   */\n  all?: boolean;\n  /**\n   * Block until this project's current (slug, version) submission reaches a\n   * terminal-for-waiting state (gated, dev, rejected), polling every 30s.\n   * Changes the command's exit-code contract — see `runStatus`'s docstring.\n   */\n  watch?: boolean;\n  /** Injectable for tests — see `auth/device-flow.ts`'s identical pattern. */\n  sleep?: (ms: number) => Promise<void>;\n  /** Injectable \"now\" for deterministic AGE rendering in tests. Defaults to `new Date()`. */\n  now?: Date;\n}\n\ninterface SessionReport {\n  authenticated: boolean;\n  user?: { id: string; email: string | null; name: string | null };\n  expiresAt?: string;\n  hint?: string;\n}\n\ninterface ProjectReport {\n  dir: string;\n  slug: string;\n  source: string | null;\n}\n\n/**\n * `status` — the read verb: where am I pointed, who am I, and what has this\n * project submitted?\n *\n * Three sections, each degrading gracefully rather than failing:\n *\n *  - **session** — whoami's server-side identity check, but an absent or dead\n *    session reports `authenticated: false` with a hint instead of exit 4. A\n *    partner asking \"what is my state?\" must get an answer, not an error whose\n *    answer it is.\n *  - **project** — the ekanos.json in `--dir` (default cwd), when there is\n *    one. No project is an ordinary state for `status`, never an error.\n *  - **submissions** — `GET /api/partner/submissions?source=…` for the\n *    project's resolved source, only when both a session and a source exist.\n *    Server errors here DO map through the taxonomy: an unreachable host or a\n *    missing source is a fault to surface, not a state to absorb.\n *\n * Exit 0 whenever the report itself could be assembled — EXCEPT under\n * `--watch` (see below), whose exit code carries the gate's verdict instead.\n *\n * The submission listing always requests the full `?detail=findings` shape\n * server-side (needed so THIS PROJECT's latest-error auto-inline rendering\n * — see `humanSummary` — has findings to inspect without a second\n * round-trip). `--findings` no longer changes what's FETCHED; it changes\n * what's RENDERED inline in human mode: every shown version's findings,\n * not just the latest's error-severity ones.\n *\n * `--watch` turns `status` into a blocking wait: it requires a project with\n * a resolved source and a live session (both are PRECONDITIONs here, not\n * degraded-to-false states — there is nothing to watch without them), then\n * polls `GET /api/partner/submissions?detail=findings` every 30s for THIS\n * project's current (slug, package.json version) submission until it reaches\n * a terminal-for-waiting state: `gated`/`dev` exit 0, `rejected` exits 10\n * (GATE_FAILED) with the findings carried in `data` — the same shape\n * `publish`'s own gate refusal uses, so an agent's fix-then-retry loop\n * branches on it identically whether the gate ran inline (future) or via\n * this poll (today). `--json --watch` still emits exactly ONE envelope, at\n * completion — the polling itself only ever writes to stderr via `ctx.log`.\n *\n * Human-mode rendering is PROJECT-SCOPED: the server lists every\n * submission for the resolved source (an org-level bucket shared by every\n * project publishing there — `listSubmissions` has no server-side slug\n * filter, see `publish-api.ts`'s wire contract), so \"THIS PROJECT\" groups\n * the rows matching this project's own slug and \"OTHER INTEGRATIONS IN\n * SOURCE …\" collapses everything else to one summary line per integration\n * (or, with `--all`, the same table shape).\n * The `--json` envelope stays additive-compatible: `submissions` is still\n * the full, unfiltered list, with `data.project.scopedSubmissions` and\n * `data.otherIntegrations` layered on top for a consumer that wants the\n * pre-grouped view without re-deriving it.\n */\nexport async function runStatus(\n  ctx: CliContext,\n  args: StatusArgs,\n): Promise<ExitCode> {\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n\n  const stored = env.store.read(env.host);\n\n  const notice = await checkForUpdate({\n    env: args.env,\n    host: env.host,\n    session: stored ?? undefined,\n  });\n  announceUpdate(ctx, notice);\n\n  const session = stored\n    ? await probeSession(env, stored)\n    : {\n        authenticated: false,\n        hint: loginHint(env, 'to sign in.'),\n      };\n\n  // probeSession may have refreshed the session — persisting a NEW access\n  // token and ROTATING the refresh token on disk. Re-read before using it:\n  // the pre-probe object now holds a dead access token and an already-spent\n  // refresh token, and presenting those would turn \"logged in, token was\n  // merely stale\" into a hard exit-4 — the one failure this command promises\n  // never to produce.\n  const live = stored ? (env.store.read(env.host) ?? stored) : null;\n\n  const project = readProjectReport(args.dir);\n\n  if (args.watch) {\n    if (!session.authenticated || !live) {\n      throw authRequiredError(\n        `\"ekanos status --watch\" needs a live session on ${env.host}.`,\n        loginHint(env),\n      );\n    }\n\n    if (!project) {\n      throw preconditionError(\n        `No ekanos.json found in ${path.resolve(args.dir)}.`,\n        'Run \"ekanos publish\" at least once before watching its gate result.',\n      );\n    }\n\n    if (!project.source) {\n      throw preconditionError(\n        'This project has no \"source\" in ekanos.json yet.',\n        'Run \"ekanos publish\" at least once (it saves the source you ' +\n          'publish to) before watching its gate result.',\n      );\n    }\n\n    return runWatch(ctx, env, project, args);\n  }\n\n  let submissions: SubmissionListing[] | null = null;\n\n  if (project?.source && session.authenticated && live) {\n    // Always the full `?detail=findings` shape, `--findings` or not: THIS\n    // PROJECT's auto-inline latest-error rendering (see `humanSummary`)\n    // needs the findings array to decide whether to render, not just the\n    // counts — and `data.project.scopedSubmissions` carries the same\n    // richer shape in the JSON envelope regardless of the flag. `--findings`\n    // now controls how much of it gets rendered inline, not what's fetched.\n    submissions = await listWithOneRefresh(\n      env,\n      live,\n      project.source,\n      'findings',\n    );\n  } else if (project?.source && !session.authenticated) {\n    // Human mode says this in the result block's note; the stderr line is\n    // for JSON callers, who never see that block.\n    if (ctx.jsonMode) {\n      ctx.log(\n        `ekanos: not logged in to ${env.host} — skipping the submission list. ` +\n          (session.hint ?? ''),\n      );\n    }\n  } else if (project && !project.source) {\n    if (ctx.jsonMode)\n      ctx.log(\n        'ekanos: this project has no \"source\" in ekanos.json yet — the first ' +\n          '\"ekanos publish --source <slug>\" saves one, and status will list ' +\n          'submissions from then on.',\n      );\n  }\n\n  const projectIntegration =\n    project && submissions\n      ? (submissions.find((s) => s.slug === project.slug) ?? null)\n      : null;\n\n  const otherIntegrations = submissions\n    ? submissions\n        .filter((s) => s.slug !== project?.slug)\n        .map((s) => summarizeIntegration(s))\n    : null;\n\n  // Best-effort, human-mode-only add-on for the header's \"publish target\n  // (+ seat role)\" line — same degrade-to-null contract as `whoami`'s own\n  // seat lookup. Skipped entirely in JSON mode: nothing in the envelope\n  // needs it, and it would otherwise be an extra network round-trip every\n  // existing `--json` caller pays for no reason.\n  const seatRole =\n    !ctx.jsonMode && project?.source && session.authenticated && live\n      ? await fetchSeatRoleQuietly(env, live, project.source)\n      : null;\n\n  return ctx.succeed(\n    {\n      host: env.host,\n      ...session,\n      credentialsPath: env.store.filePath,\n      project: project\n        ? {\n            ...project,\n            scopedSubmissions: submissions\n              ? (projectIntegration?.versions ?? [])\n              : null,\n          }\n        : null,\n      submissions,\n      ...(otherIntegrations !== null ? { otherIntegrations } : {}),\n      ...(notice ? { toolchain: notice } : {}),\n    },\n    humanSummary(\n      ctx.ui,\n      project?.dir ?? path.resolve(args.dir),\n      env.host,\n      session,\n      project,\n      submissions,\n      { findings: args.findings ?? false, all: args.all ?? false },\n      seatRole,\n      args.now ?? new Date(),\n    ),\n  );\n}\n\n/**\n * The `--watch` poll loop. Targets THIS project's current submission —\n * `project.slug` + the version presently in `package.json` (the same value\n * `publish` would submit right now) — not \"whatever's most recent,\" so\n * watching after a publish can never resolve against a stale prior version.\n */\nasync function runWatch(\n  ctx: CliContext,\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  project: ProjectReport,\n  args: StatusArgs,\n): Promise<ExitCode> {\n  const source = project.source;\n  if (!source) {\n    // Unreachable — the caller already checked — but keeps this function's\n    // own type honest without a non-null assertion.\n    throw preconditionError(\n      'This project has no \"source\" in ekanos.json yet.',\n      'Run \"ekanos publish\" at least once before watching its gate result.',\n    );\n  }\n\n  const targetVersion = readProjectVersion(project.dir);\n  const sleep = args.sleep ?? defaultSleep;\n\n  // Glyph-only restyle — the poll contract itself (exit codes, timing,\n  // JSON envelope) is unchanged.\n  const waitGlyph = ctx.jsonMode ? '' : `${ctx.ui.dim(ctx.ui.glyphs.info)} `;\n  const prefix = ctx.jsonMode ? 'ekanos: ' : '';\n\n  ctx.log(\n    `${waitGlyph}${prefix}watching ${project.slug}@${targetVersion} on ${env.host} ` +\n      `(polling every ${WATCH_POLL_INTERVAL_MS / 1000}s)…`,\n  );\n\n  for (;;) {\n    // Re-read the session from the credential store on EVERY iteration —\n    // never carry one over in a closure. Auth0 rotates the refresh token on\n    // every use (see `refreshStoredSession`'s docstring), so a token this\n    // loop already consumed is dead by the next iteration; the store is the\n    // persisted source of truth for whichever refresh most recently landed\n    // — this loop's own (via `listWithOneRefresh` below, which persists\n    // through `refreshStoredSession`), or a concurrent one from another\n    // process (another terminal running login/publish/status --watch\n    // against the same host). Threading the refreshed session back out of\n    // `listWithOneRefresh` instead would only cover the first case.\n    const current = env.store.read(env.host);\n\n    if (!current) {\n      throw authRequiredError(\n        `The session for ${env.host} is gone — \"ekanos status --watch\" ` +\n          'cannot continue without it.',\n        loginHint(env),\n      );\n    }\n\n    const integrations = await listWithOneRefresh(\n      env,\n      current,\n      source,\n      'findings',\n    );\n    const version = findVersion(integrations, project.slug, targetVersion);\n\n    if (version && WATCH_TERMINAL_STATES.has(version.state)) {\n      return reportWatchOutcome(ctx, project.slug, version);\n    }\n\n    ctx.log(\n      `${waitGlyph}${prefix}${project.slug}@${targetVersion} is ` +\n        `${version ? version.state : 'not visible yet'} — waiting…`,\n    );\n\n    await sleep(WATCH_POLL_INTERVAL_MS);\n  }\n}\n\nfunction findVersion(\n  integrations: SubmissionListing[],\n  slug: string,\n  version: string,\n): SubmissionVersion | null {\n  const integration = integrations.find((i) => i.slug === slug);\n  return integration?.versions.find((v) => v.version === version) ?? null;\n}\n\nfunction reportWatchOutcome(\n  ctx: CliContext,\n  slug: string,\n  version: SubmissionVersion,\n): ExitCode {\n  const data = {\n    slug,\n    version: version.version,\n    state: version.state,\n    gatedAt: version.gatedAt,\n    errorCount: version.errorCount,\n    warnCount: version.warnCount,\n    findings: version.findings ?? [],\n    stages: version.stages ?? [],\n  };\n\n  if (version.state === 'rejected') {\n    return ctx.fail(\n      gateFailedError(\n        `${slug}@${version.version} was rejected by the gate ` +\n          `(${data.errorCount ?? 0} error${data.errorCount === 1 ? '' : 's'}).`,\n        'Resolve the error-severity findings in data.findings, bump the ' +\n          'version, and re-run \"ekanos publish\".',\n      ),\n      data,\n    );\n  }\n\n  return ctx.succeed(\n    data,\n    ctx.ui.result({\n      title: `${slug}@${version.version} is ${version.state}`,\n      tone: data.warnCount ? 'warn' : 'ok',\n      rows: [\n        ['State', version.state],\n        ...(data.warnCount\n          ? [['Warnings', String(data.warnCount)] as const]\n          : []),\n      ],\n    }),\n  );\n}\n\nfunction defaultSleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n\n/**\n * whoami's identity resolution, with AUTH_REQUIRED absorbed into\n * `authenticated: false`. Anything else — network, precondition, MFA mapped\n * to auth by `fetchIdentity` — still propagates: \"the host was unreachable\"\n * must never be reported as \"you are logged out\".\n */\nasync function probeSession(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  stored: StoredSession,\n): Promise<SessionReport> {\n  try {\n    const { identity, session } = await resolveIdentity(env, stored);\n\n    return {\n      authenticated: true,\n      user: { id: identity.id, email: identity.email, name: identity.name },\n      expiresAt: session.expiresAt,\n    };\n  } catch (error) {\n    if (error instanceof CliError && error.code === ERROR_CODES.AUTH_REQUIRED) {\n      return { authenticated: false, hint: error.hint };\n    }\n\n    throw error;\n  }\n}\n\n/**\n * Lenient project read: no ekanos.json means \"not in a project\", which is an\n * answer, not an error. An ekanos.json that EXISTS but does not load keeps\n * `loadProject`'s strict behaviour — a broken project file is a fault the\n * partner needs named, whatever verb they ran.\n */\nfunction readProjectReport(dir: string): ProjectReport | null {\n  const projectDir = path.resolve(dir);\n\n  if (!fs.existsSync(path.join(projectDir, EKANOS_CONFIG_FILENAME))) {\n    return null;\n  }\n\n  const loaded = loadProject(projectDir);\n\n  return {\n    dir: loaded.projectDir,\n    slug: loaded.primary.slug,\n    source: loaded.project.source ?? null,\n  };\n}\n\n/** Mirrors publish's one-refresh-one-retry on a stale access token. */\nasync function listWithOneRefresh(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  session: StoredSession,\n  source: string,\n  detail?: 'findings',\n): Promise<SubmissionListing[]> {\n  const first = await listSubmissions(env.host, session.accessToken, source, {\n    detail,\n  });\n\n  if (first.status === 'ok') return first.integrations;\n\n  const refreshed = await refreshStoredSession(env, session);\n  const second = await listSubmissions(\n    env.host,\n    refreshed.accessToken,\n    source,\n    {\n      detail,\n    },\n  );\n\n  if (second.status === 'ok') return second.integrations;\n\n  // Authenticated a moment ago, unauthorized twice here: report the list as\n  // unavailable rather than the session as dead — probeSession already proved\n  // it. This is unreachable in practice; belt and braces for a racing revoke.\n  throw authRequiredError(\n    `The session for ${env.host} could not authorize the submission list.`,\n    loginHint(env),\n  );\n}\n\n/**\n * `whoami`'s seat-lookup degradation, narrowed to one source's role: a\n * network hiccup, MFA, or a deployment predating the seats route must never\n * turn a working `status` into a failing one — the header simply omits the\n * \"(role)\" suffix.\n */\nasync function fetchSeatRoleQuietly(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  session: StoredSession,\n  source: string,\n): Promise<string | null> {\n  try {\n    const result = await fetchSeatsWithOneRefresh(env, session);\n    if (result.status !== 'ok') return null;\n\n    const seat = result.sources.find((s) => s.slug === source);\n    return seat ? seat.roles.join(', ') : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction tryReadProjectVersion(dir: string): string | null {\n  try {\n    return readProjectVersion(dir);\n  } catch {\n    return null;\n  }\n}\n\nfunction timestampMs(iso: string | null | undefined): number {\n  if (!iso) return 0;\n  const parsed = new Date(iso).getTime();\n  return Number.isNaN(parsed) ? 0 : parsed;\n}\n\n/**\n * Newest-first by `gatedAt ?? submittedAt`. Ties (including two versions\n * with no timestamp at all) keep their original, server-given order —\n * `Array#sort` is stable, and a stable no-op is the right answer when there\n * is nothing to compare.\n */\nexport function sortVersionsNewestFirst(\n  versions: readonly SubmissionVersion[],\n): SubmissionVersion[] {\n  return [...versions].sort(\n    (a, b) =>\n      timestampMs(b.gatedAt ?? b.submittedAt) -\n      timestampMs(a.gatedAt ?? a.submittedAt),\n  );\n}\n\nfunction versionAge(version: SubmissionVersion, now: Date): string {\n  const timestamp = version.gatedAt ?? version.submittedAt;\n  return timestamp ? relativeTime(timestamp, now) : '—';\n}\n\nexport function findingsCellParts(\n  ui: Ui,\n  version: SubmissionVersion,\n): { text: string; paint: (text: string) => string } {\n  if (version.errorCount === null && version.warnCount === null) {\n    return { text: '—', paint: ui.dim };\n  }\n\n  const errorCount = version.errorCount ?? 0;\n  const warnCount = version.warnCount ?? 0;\n\n  if (errorCount === 0 && warnCount === 0) {\n    return { text: '0', paint: (text) => text };\n  }\n\n  const parts: string[] = [];\n  if (errorCount > 0) parts.push(`${errorCount}E`);\n  if (warnCount > 0) parts.push(`${warnCount}W`);\n\n  return { text: parts.join(' '), paint: errorCount > 0 ? ui.err : ui.warn };\n}\n\nexport function stateColorFor(ui: Ui, state: string): (text: string) => string {\n  if (state === 'dev' || state === 'prod') return ui.ok;\n  if (state === 'gated') return ui.accent;\n  if (state === 'submitted') return ui.dim;\n  if (state === 'rejected' || state === 'revoked') return ui.err;\n  return (text) => text;\n}\n\n/**\n * A VERSION/STATE/AGE/FINDINGS table, built by hand rather than via\n * `ui.table`: STATE and FINDINGS need per-cell color, and `ui.table` sizes\n * columns from the raw cell strings it's handed — a colored cell's ANSI\n * escapes would inflate that width and misalign the column. `ui.ts`'s own\n * doc comment on `padCell` names this exact tradeoff (\"ignoring color codes\n * in length math is the CALLER's job — pad before coloring, never after\"),\n * so this pads against the PLAIN text first and colors the already-padded\n * string — the same rule `ui.table` documents, just applied here instead of\n * inside it.\n */\nexport function renderVersionsTable(\n  ui: Ui,\n  versions: readonly SubmissionVersion[],\n  now: Date,\n): string {\n  const headers = ['VERSION', 'STATE', 'AGE', 'FINDINGS'] as const;\n\n  const rows = versions.map((version) => {\n    const findings = findingsCellParts(ui, version);\n    return {\n      version: version.version,\n      state: version.state,\n      age: versionAge(version, now),\n      findingsText: findings.text,\n      findingsPaint: findings.paint,\n      statePaint: stateColorFor(ui, version.state),\n    };\n  });\n\n  const widths: [number, number, number, number] = [\n    Math.max(headers[0].length, ...rows.map((r) => r.version.length)),\n    Math.max(headers[1].length, ...rows.map((r) => r.state.length)),\n    Math.max(headers[2].length, ...rows.map((r) => r.age.length)),\n    Math.max(headers[3].length, ...rows.map((r) => r.findingsText.length)),\n  ];\n\n  const headerLine = headers\n    .map((header, i) => ui.dim(header.padEnd(widths[i]!)))\n    .join('  ');\n\n  const bodyLines = rows.map((row) =>\n    [\n      row.version.padEnd(widths[0]),\n      row.statePaint(row.state.padEnd(widths[1])),\n      row.age.padEnd(widths[2]),\n      row.findingsPaint(row.findingsText.padEnd(widths[3])),\n    ].join('  '),\n  );\n\n  return [headerLine, ...bodyLines].join('\\n');\n}\n\n/**\n * The findings shown directly under THIS PROJECT's table. `--findings`\n * forces every version's own findings inline; otherwise only the LATEST\n * version's ERROR-severity findings auto-render (the moment a partner most\n * needs them, no flag required), and a dim pointer at `ekanos status\n * --findings` covers everything else with a nonzero count.\n */\nfunction renderThisProjectFindings(\n  ui: Ui,\n  cwd: string,\n  sorted: readonly SubmissionVersion[],\n  forceAll: boolean,\n): string | null {\n  if (forceAll) {\n    const blocks = sorted\n      .filter((v) => v.findings && v.findings.length > 0)\n      .map((v) =>\n        [\n          `  ${ui.dim(`${v.version}:`)}`,\n          indentLines(formatFindings(ui, v.findings!, { cwd }), 4),\n        ].join('\\n'),\n      );\n\n    return blocks.length > 0 ? blocks.join('\\n\\n') : null;\n  }\n\n  const [latest, ...older] = sorted;\n  const latestErrors = (latest?.findings ?? []).filter(\n    (f) => f.severity === 'error',\n  );\n\n  if (latest && latestErrors.length > 0 && latest.findings) {\n    return indentLines(formatFindings(ui, latest.findings, { cwd }), 2);\n  }\n\n  const latestNonzero =\n    (latest?.errorCount ?? 0) > 0 || (latest?.warnCount ?? 0) > 0;\n  const olderNonzero = older.some(\n    (v) => (v.errorCount ?? 0) > 0 || (v.warnCount ?? 0) > 0,\n  );\n\n  return latestNonzero || olderNonzero\n    ? `  ${ui.dim('→ details: ekanos status --findings')}`\n    : null;\n}\n\nexport interface OtherIntegrationSummary {\n  slug: string;\n  name: string | null;\n  versionsCount: number;\n  latestVersion: string | null;\n  latestState: string | null;\n}\n\nexport function summarizeIntegration(\n  integration: SubmissionListing,\n): OtherIntegrationSummary {\n  const latest = sortVersionsNewestFirst(integration.versions)[0] ?? null;\n  return {\n    slug: integration.slug,\n    name: integration.name,\n    versionsCount: integration.versions.length,\n    latestVersion: latest?.version ?? null,\n    latestState: latest?.state ?? null,\n  };\n}\n\nfunction indentLines(block: string, spaces: number): string {\n  const prefix = ' '.repeat(spaces);\n  return block\n    .split('\\n')\n    .map((line) => `${prefix}${line}`)\n    .join('\\n');\n}\n\nfunction buildHeaderRows(\n  host: string,\n  session: SessionReport,\n  project: ProjectReport | null,\n  seatRole: string | null,\n): readonly ResultRow[] {\n  const rows: ResultRow[] = [];\n\n  if (session.authenticated) {\n    rows.push([\n      'Account',\n      session.user?.email ?? session.user?.id ?? 'unknown',\n    ]);\n  }\n  rows.push(['Host', shortHost(host)]);\n\n  if (project) {\n    const version = tryReadProjectVersion(project.dir);\n    rows.push([\n      'Project',\n      version ? `${project.slug}@${version}` : project.slug,\n    ]);\n    rows.push([\n      'Target',\n      project.source\n        ? `${project.source}${seatRole ? ` · ${seatRole}` : ''}`\n        : 'none yet',\n    ]);\n  }\n\n  return rows;\n}\n\n/**\n * The closing `ui.nextAction` line, chosen from the LATEST version of THIS\n * project — `null` (no closing line at all) whenever nothing is pending:\n * no submission yet, or the latest is already `dev`/`prod`/`revoked`.\n */\nexport function buildNextAction(\n  ui: Ui,\n  latest: SubmissionVersion | null,\n): string | null {\n  if (!latest) return null;\n\n  if (latest.state === 'rejected') {\n    return ui.nextAction('ekanos status --findings', 'see what failed');\n  }\n  if (latest.state === 'gated') {\n    return `\\n${ui.dim('→ awaiting admission (runs hourly)')}`;\n  }\n  if (latest.state === 'submitted') {\n    return `\\n${ui.dim('→ awaiting gate result')}`;\n  }\n\n  return null;\n}\n\nfunction humanSummary(\n  ui: Ui,\n  cwd: string,\n  host: string,\n  session: SessionReport,\n  project: ProjectReport | null,\n  submissions: SubmissionListing[] | null,\n  args: { findings: boolean; all: boolean },\n  seatRole: string | null,\n  now: Date,\n): string {\n  const note = !session.authenticated\n    ? session.hint\n    : !project\n      ? 'No ekanos.json here, so there is no project to report on.'\n      : !project.source\n        ? 'No \"source\" configured yet. The first \"ekanos publish --source <slug>\" saves one.'\n        : undefined;\n\n  const lines: string[] = [\n    ui.result({\n      title: session.authenticated ? 'Signed in' : 'Not signed in',\n      tone: session.authenticated ? 'ok' : 'warn',\n      rows: buildHeaderRows(host, session, project, seatRole),\n      notes: note ? [note] : [],\n    }),\n  ];\n\n  if (note || !project?.source || !submissions) {\n    return lines.join('\\n');\n  }\n\n  const projectIntegration =\n    submissions.find((s) => s.slug === project.slug) ?? null;\n  const others = submissions.filter((s) => s.slug !== project.slug);\n\n  lines.push('', ui.section('this project'));\n\n  const sorted = projectIntegration\n    ? sortVersionsNewestFirst(projectIntegration.versions)\n    : [];\n\n  if (sorted.length === 0) {\n    lines.push(`  ${ui.dim('no submissions yet for this project.')}`);\n  } else {\n    lines.push(indentLines(renderVersionsTable(ui, sorted, now), 2));\n\n    const findingsBlock = renderThisProjectFindings(\n      ui,\n      cwd,\n      sorted,\n      args.findings,\n    );\n    if (findingsBlock) lines.push('', findingsBlock);\n  }\n\n  lines.push('', ui.section(`other integrations in source ${project.source}`));\n\n  if (others.length === 0) {\n    lines.push(`  ${ui.dim('none.')}`);\n  } else if (args.all) {\n    for (const integration of others) {\n      const otherSorted = sortVersionsNewestFirst(integration.versions);\n      lines.push(`  ${ui.dim(integration.slug)}`);\n      lines.push(indentLines(renderVersionsTable(ui, otherSorted, now), 4));\n    }\n  } else {\n    for (const integration of others) {\n      const summary = summarizeIntegration(integration);\n      lines.push(\n        `  ${ui.dim(\n          `${summary.slug} — ${summary.versionsCount} version${\n            summary.versionsCount === 1 ? '' : 's'\n          }, latest ${summary.latestVersion ?? '?'} ${\n            summary.latestState ?? '?'\n          }`,\n        )}`,\n      );\n    }\n  }\n\n  const action = buildNextAction(ui, sorted[0] ?? null);\n  if (action) lines.push(action);\n\n  return lines.join('\\n');\n}\n"]}

package/dist/commands/team-agent-readiness.d.ts

@@ -0,0 +1,59 @@
+import type { AgentRunSummary, ChannelRequirement, Requirement, TeamAgentEntry, TeamAgentHold, TeamIntegrationEvent } from '@ekanos/integration-schema';
+import { type ScopeFacts } from './scope-notice.js';
+export interface ReadinessStep {
+    /** What is missing, in words. */
+    problem: string;
+    /** The one command (or app step) that fixes it. */
+    fix: string;
+}
+export interface AgentReadiness {
+    live: boolean;
+    steps: ReadinessStep[];
+    /**
+     * An update waiting for the runs-as person's confirmation; the agent runs
+     * its current version meanwhile. Null when none.
+     */
+    pending: ReadinessStep | null;
+    /** The first step's fix, else the pending update's; null when neither. */
+    next: string | null;
+}
+export interface ReadinessTarget {
+    team: string;
+    source: string;
+}
+export declare function agentReadiness(entry: TeamAgentEntry, target: ReadinessTarget): AgentReadiness;
+/**
+ * What a waiting version adds over the one running, in words:
+ * "adds zendesk_update_ticket; lets zendesk_add_tag run without approval".
+ */
+export declare function describeHold(hold: TeamAgentHold): string;
+export declare const REASON_WORDS: Record<NonNullable<Requirement['reason']>, string>;
+/** The one command that makes a requirement, or null when none can. */
+export declare function requirementFix(item: Requirement, team: string, source: string): string | null;
+/** The one command that makes a channel ready, or the app step. */
+export declare function channelFix(channel: ChannelRequirement, team: string, source: string): string;
+/** How the events of a ready channel reach the agent. */
+export declare function reachedVia(channel: ChannelRequirement): string;
+/** A fix as a line: a command is run in the terminal, an app step is not. */
+export declare function fixLine(fix: string): string;
+/**
+ * "Live: yes" or "Live: no — N steps left", and an update waiting for
+ * confirmation: "Live: yes (on v4; v5 waiting for confirmation)".
+ */
+export declare function liveLine(readiness: AgentReadiness, agent?: {
+    version: number | null;
+    held?: TeamAgentHold | null;
+} | null): string;
+/** What happened lately, read alongside the agent; each part optional. */
+export interface AgentActivity {
+    /** The agent's recent runs, newest first. */
+    runs: AgentRunSummary[] | null;
+    /** The team's recent integration events, newest first. */
+    events: TeamIntegrationEvent[] | null;
+}
+/**
+ * One line per product, per trigger, then Live and Next. A product the
+ * team's product scopes hide from it in the app says so — connected or not,
+ * the team cannot see it there (`scope`, the team's scopes).
+ */
+export declare function describeAgentReadiness(entry: TeamAgentEntry, target: ReadinessTarget, readiness: AgentReadiness, activity: AgentActivity, scope?: ScopeFacts): string;

package/dist/commands/team-agent-readiness.js

@@ -0,0 +1,341 @@
+import { scopeFix, scopeHiddenWords } from './scope-notice.js';
+/**
+ * "Is this agent live on this team, and if not, why?" — one answer for
+ * `teams agents show` and the summary line of `teams agents list`, built only
+ * from what the host already reports (CLI audit 2026-10-19, §3).
+ *
+ * Live is: on, on a published version, every connection it needs made,
+ * access confirmed by the person it runs as, at least one trigger on, and
+ * every trigger's events able to reach it. Each gap is a step with one fix,
+ * in the order they have to be done; the first step's fix is "Next".
+ *
+ * An agent HELD on an earlier version (a newer one reaches further than the
+ * person it runs as confirmed) is still live — it runs the version it is on
+ * — so the hold is not a step: it is `pending`, said beside "Live", and its
+ * confirm command is "Next" once nothing else is.
+ */
+const CLI = 'npx @ekanos/cli';
+export function agentReadiness(entry, target) {
+    var _a;
+    var _b, _c;
+    const steps = readinessSteps(entry, target);
+    const pending = pendingUpdate(entry, target);
+    return {
+        live: steps.length === 0,
+        steps,
+        pending,
+        next: (_c = (_b = (_a = steps[0]) === null || _a === void 0 ? void 0 : _a.fix) !== null && _b !== void 0 ? _b : pending === null || pending === void 0 ? void 0 : pending.fix) !== null && _c !== void 0 ? _c : null,
+    };
+}
+/** The update a held agent waits for, and who confirms it. */
+function pendingUpdate(entry, { team, source }) {
+    var _a, _b;
+    const agent = entry.agent;
+    if (!(agent === null || agent === void 0 ? void 0 : agent.held))
+        return null;
+    const who = (_a = agent.runsAs) !== null && _a !== void 0 ? _a : 'the person it runs as';
+    return {
+        problem: `held on v${(_b = agent.version) !== null && _b !== void 0 ? _b : '?'}: v${agent.held.waiting} ${describeHold(agent.held)}, and waits for ${who} to confirm`,
+        // Only that person can confirm, signed in as themselves.
+        fix: `${who} runs: ${CLI} teams agents confirm ${team} ${entry.key} --source ${source}  (or confirms in the app: Agents › ${entry.name} › Setup)`,
+    };
+}
+/**
+ * What a waiting version adds over the one running, in words:
+ * "adds zendesk_update_ticket; lets zendesk_add_tag run without approval".
+ */
+export function describeHold(hold) {
+    const adds = [
+        ...(hold.adds.scope === 'all'
+            ? ['every tool of the products it can reach']
+            : hold.adds.scope === 'read_only'
+                ? ['every read of the products it can reach']
+                : []),
+        ...hold.adds.products.map((product) => `${product.name} (every tool)`),
+        ...hold.adds.tools,
+    ];
+    const loosens = [
+        ...(hold.loosens.writes ? ['writes'] : []),
+        ...(hold.loosens.reads ? ['reads'] : []),
+        ...hold.loosens.tools,
+    ];
+    const parts = [
+        ...(adds.length > 0 ? [`adds ${adds.join(', ')}`] : []),
+        ...(loosens.length > 0
+            ? [`lets ${loosens.join(', ')} run without approval`]
+            : []),
+    ];
+    return parts.length > 0 ? parts.join('; ') : 'reaches further';
+}
+function readinessSteps(entry, { team, source }) {
+    var _a, _b, _c, _d, _e, _f;
+    const enable = `${CLI} teams agents enable ${team} ${entry.key} --source ${source}`;
+    const agent = entry.agent;
+    if (!agent)
+        return [{ problem: `off for ${team}`, fix: enable }];
+    if (agent.status !== 'active') {
+        return [{ problem: `${agent.status} for ${team}`, fix: enable }];
+    }
+    const steps = [];
+    if (agent.draft) {
+        // A team testing a draft runs it only when started by hand.
+        steps.push({
+            problem: `testing unpublished draft v${(_a = agent.version) !== null && _a !== void 0 ? _a : '?'}: its triggers do not start it`,
+            fix: `${CLI} agents publish ${entry.key} --source ${source}`,
+        });
+    }
+    else if (agent.version === null) {
+        steps.push({
+            problem: 'no published version',
+            fix: `${CLI} agents publish ${entry.key} --source ${source}`,
+        });
+    }
+    for (const item of agent.missing) {
+        steps.push({
+            problem: `${item.name}: ${REASON_WORDS[(_b = item.reason) !== null && _b !== void 0 ? _b : 'not_connected']}`,
+            fix: (_c = requirementFix(item, team, source)) !== null && _c !== void 0 ? _c : `${CLI} teams mcp status ${team} ${item.key} --source ${source}`,
+        });
+    }
+    if (!agent.accessConfirmed) {
+        const who = (_d = agent.runsAs) !== null && _d !== void 0 ? _d : 'the person it runs as';
+        steps.push({
+            problem: `${who} has not confirmed it may use their connections`,
+            // Only that person can confirm, signed in as themselves.
+            fix: `${who} runs: ${CLI} teams agents confirm ${team} ${entry.key} --source ${source}  (or confirms in the app: Agents › ${entry.name} › Setup)`,
+        });
+    }
+    if (!agent.triggers.some((trigger) => trigger.enabled)) {
+        steps.push({
+            problem: 'no trigger is on, so it only runs when started by hand',
+            fix: `${CLI} teams triggers add ${team} ${entry.key} event <event-id> --source ${source}  (event ids: ${CLI} catalog --source ${source})`,
+        });
+    }
+    for (const channel of (_e = agent.channels) !== null && _e !== void 0 ? _e : []) {
+        if (channel.ready)
+            continue;
+        steps.push({
+            problem: (_f = channel.problem) !== null && _f !== void 0 ? _f : `${channel.name} not ready`,
+            fix: channelFix(channel, team, source),
+        });
+    }
+    return steps;
+}
+export const REASON_WORDS = {
+    not_connected: 'not connected',
+    no_route: 'no route maps the Source connection’s events to this team',
+    source_unsupported: 'the integration no longer supports a Source connection',
+    source_not_entitled: 'the product is not enabled for the Source',
+    source_not_connected: 'the Source connection is not made',
+};
+/** The one command that makes a requirement, or null when none can. */
+export function requirementFix(item, team, source) {
+    if (item.kind === 'mcp')
+        return null;
+    switch (item.reason) {
+        case 'no_route':
+            return `${CLI} routes set ${item.key} <value> ${team} --source ${source}  (values: ${CLI} routes options ${item.key} --source ${source})`;
+        case 'source_not_connected':
+            return `${CLI} apps connect ${item.key} --source ${source}`;
+        case 'source_not_entitled':
+            return `a super-admin enables it for the Source (${CLI} sources products --source ${source})`;
+        case 'source_unsupported':
+            return `set connections.${item.key}.owner to "team" in agent.json, then ${CLI} agents apply`;
+        default:
+            if (item.connected)
+                return null;
+            // A per-person product is the runs-as person's connection, not the
+            // caller's: connecting your own leaves the agent missing it.
+            return item.via === 'person' && item.viaDetail
+                ? `${CLI} teams connect ${team} ${item.key} --as ${item.viaDetail} --source ${source}`
+                : `${CLI} teams connect ${team} ${item.key} --source ${source}`;
+    }
+}
+/** The one command that makes a channel ready, or the app step. */
+export function channelFix(channel, team, source) {
+    switch (channel.arrival) {
+        case 'team-webhook':
+            return `${CLI} teams webhook ${team} ${channel.product} --source ${source}`;
+        case 'source-route':
+            return channel.webhook
+                ? `${CLI} routes set ${channel.product} <value> ${team} --source ${source}  (values: ${CLI} routes options ${channel.product} --source ${source})`
+                : `${CLI} routes webhook ${channel.product} --source ${source}`;
+        default:
+            return channel.connectionId
+                ? `${CLI} teams connect ${team} ${channel.product} --connection ${channel.connectionId} --source ${source}`
+                : channel.key === 'slack' || channel.key === 'linear-app'
+                    ? `${CLI} teams connect ${team} ${channel.key} --source ${source}`
+                    : `install it on the agent's Triggers tab in the app`;
+    }
+}
+/** How the events of a ready channel reach the agent. */
+export function reachedVia(channel) {
+    switch (channel.arrival) {
+        case 'team-webhook':
+            return 'team webhook';
+        case 'source-route':
+            return 'Source webhook, routed';
+        default:
+            return `${channel.name} installed`;
+    }
+}
+/** A fix as a line: a command is run in the terminal, an app step is not. */
+export function fixLine(fix) {
+    return fix.startsWith(CLI) ? `in your terminal: ${fix}` : fix;
+}
+/**
+ * "Live: yes" or "Live: no — N steps left", and an update waiting for
+ * confirmation: "Live: yes (on v4; v5 waiting for confirmation)".
+ */
+export function liveLine(readiness, agent) {
+    var _a;
+    const left = readiness.steps.length;
+    const held = (agent === null || agent === void 0 ? void 0 : agent.held)
+        ? ` (on v${(_a = agent.version) !== null && _a !== void 0 ? _a : '?'}; v${agent.held.waiting} waiting for confirmation)`
+        : '';
+    return readiness.live
+        ? `Live: yes${held}`
+        : `Live: no — ${left} step${left === 1 ? '' : 's'} left${held}`;
+}
+/**
+ * One line per product, per trigger, then Live and Next. A product the
+ * team's product scopes hide from it in the app says so — connected or not,
+ * the team cannot see it there (`scope`, the team's scopes).
+ */
+export function describeAgentReadiness(entry, target, readiness, activity, scope) {
+    var _a, _b, _c, _d, _e;
+    const agent = entry.agent;
+    if (!agent) {
+        return [
+            `${entry.key} on ${target.team} · off · v${(_a = entry.publishedVersion) !== null && _a !== void 0 ? _a : '?'} published`,
+            `  ${liveLine(readiness)}`,
+            `  Next: ${readiness.next}`,
+        ].join('\n');
+    }
+    const head = [
+        `${entry.key} on ${target.team}`,
+        agent.draft
+            ? `draft v${(_b = agent.version) !== null && _b !== void 0 ? _b : '?'} (testing, unpublished)`
+            : agent.held
+                ? `held on v${(_c = agent.version) !== null && _c !== void 0 ? _c : '?'}, v${agent.held.waiting} waiting for confirmation`
+                : `v${(_d = agent.version) !== null && _d !== void 0 ? _d : '?'} (${agent.pinned ? 'pinned' : 'following'})`,
+        ...(agent.status === 'active' ? [] : [agent.status]),
+        `runs as ${(_e = agent.runsAs) !== null && _e !== void 0 ? _e : 'nobody'}`,
+        agent.accessConfirmed ? '✓ access confirmed' : '✗ access not confirmed',
+    ].join(' · ');
+    const width = Math.max(8, ...agent.requirements.map((item) => item.key.length));
+    const pad = (label) => label.padEnd(width);
+    const indent = ' '.repeat(width + 4);
+    const products = agent.requirements.flatMap((item) => {
+        var _a;
+        const fix = item.connected
+            ? null
+            : ((_a = requirementFix(item, target.team, target.source)) !== null && _a !== void 0 ? _a : `${CLI} teams mcp status ${target.team} ${item.key} --source ${target.source}`);
+        const hidden = item.hiddenByScope && scope
+            ? [
+                `${indent}! ${scopeHiddenWords(scope)}`,
+                `${indent}→ ${fixLine(scopeFix(scope, Object.assign(Object.assign({}, target), { product: item.key })))}`,
+            ]
+            : [];
+        return [
+            `  ${pad(item.key)}  ${productState(item)}`,
+            ...(fix ? [`${indent}→ ${fixLine(fix)}`] : []),
+            ...hidden,
+        ];
+    });
+    const nameWidth = Math.max(0, ...agent.triggers.map((trigger) => { var _a; return ((_a = trigger.eventId) !== null && _a !== void 0 ? _a : trigger.type).length; }));
+    const triggers = agent.triggers.flatMap((trigger, index) => {
+        var _a, _b;
+        var _c, _d, _e, _f, _g;
+        const label = index === 0 ? pad('triggers') : pad('');
+        const name = ((_c = trigger.eventId) !== null && _c !== void 0 ? _c : trigger.type).padEnd(nameWidth);
+        if (!trigger.enabled)
+            return [`  ${label}  ${name} (off)`];
+        const channel = ((_d = agent.channels) !== null && _d !== void 0 ? _d : []).find((candidate) => { var _a; return candidate.triggers.includes((_a = trigger.eventId) !== null && _a !== void 0 ? _a : trigger.type); });
+        const reach = channel
+            ? channel.ready
+                ? `✓ reachable (${reachedVia(channel)}${channel.lastDeliveryAt ? `, last delivery ${channel.lastDeliveryAt}` : ''})`
+                : `✗ ${(_e = channel.problem) !== null && _e !== void 0 ? _e : `${channel.name} not ready`}`
+            : `✓ ${(_f = TRIGGER_REACH[trigger.type]) !== null && _f !== void 0 ? _f : 'reachable'}`;
+        // An event trigger's runs are the ones its own events started; any
+        // other trigger's, the agent's latest run of that trigger type.
+        const ownEvents = trigger.eventId
+            ? ((_g = activity.events) !== null && _g !== void 0 ? _g : []).filter((event) => event.eventId === trigger.eventId)
+            : [];
+        const lastEvent = ownEvents[0];
+        const lastRun = trigger.eventId
+            ? (_a = ownEvents.find((event) => event.runs.length > 0)) === null || _a === void 0 ? void 0 : _a.runs[0]
+            : (_b = activity.runs) === null || _b === void 0 ? void 0 : _b.find((run) => run.trigger === trigger.type);
+        const known = trigger.eventId ? activity.events : activity.runs;
+        const facts = [
+            reach,
+            ...(trigger.eventId && activity.events
+                ? [
+                    lastEvent
+                        ? `last event ${lastEvent.receivedAt} ${lastEvent.status}`
+                        : 'no event yet',
+                ]
+                : []),
+            ...(known
+                ? [
+                    lastRun
+                        ? `last run ${lastRun.startedAt} ${lastRun.status}`
+                        : 'no run yet',
+                ]
+                : []),
+        ];
+        return [
+            `  ${label}  ${name}  ${facts.join(' · ')}`,
+            ...(channel && !channel.ready
+                ? [
+                    `${indent}→ ${fixLine(channelFix(channel, target.team, target.source))}`,
+                ]
+                : []),
+        ];
+    });
+    const update = readiness.pending
+        ? [
+            `  ${pad('update')}  ${readiness.pending.problem}`,
+            `${indent}→ ${readiness.pending.fix}`,
+        ]
+        : [];
+    return [
+        head,
+        ...products,
+        ...(agent.triggers.length > 0 ? triggers : [`  ${pad('triggers')}  none`]),
+        ...update,
+        `  ${liveLine(readiness, agent)}`,
+        ...(readiness.next ? [`  Next: ${readiness.next}`] : []),
+    ].join('\n');
+}
+const TRIGGER_REACH = {
+    manual: 'started by hand',
+    schedule: 'runs on its schedule',
+    webhook: 'reachable at its trigger URL',
+};
+function productState(item) {
+    var _a, _b;
+    if (item.kind === 'mcp') {
+        return item.connected
+            ? '✓ MCP server connected'
+            : '✗ MCP server not signed in';
+    }
+    const via = item.via === 'source'
+        ? 'via Source connection'
+        : item.via === 'person'
+            ? `via ${(_a = item.viaDetail) !== null && _a !== void 0 ? _a : 'the runs-as person'}'s personal connection`
+            : item.via === 'team'
+                ? 'via team connection'
+                : null;
+    if (item.connected) {
+        const routes = item.via === 'source' && item.viaDetail
+            ? ` · routes: ${item.viaDetail}`
+            : '';
+        const fallback = item.reason && item.reason !== 'not_connected'
+            ? ` (${REASON_WORDS[item.reason]})`
+            : '';
+        return `✓ ${via !== null && via !== void 0 ? via : 'connected'}${routes}${fallback}`;
+    }
+    const reason = REASON_WORDS[(_b = item.reason) !== null && _b !== void 0 ? _b : 'not_connected'];
+    return `✗ ${via ? `${via} — ` : ''}${reason}${item.required ? '' : ' (optional)'}`;
+}
+//# sourceMappingURL=team-agent-readiness.js.map