@ekanos/cli 0.15.0 → 0.16.0

package/dist/commands/sources-roles.js

@@ -0,0 +1,235 @@
+import { requireSession, resolveAuthEnvironment } from '../auth/session.js';
+import { invalidStateError, usageError } from '../errors.js';
+import { cli } from '../invocation.js';
+import { resolveSourceTarget } from '../source-target.js';
+import { createSourceRole, deleteSourceRole, listSourcePeople, listSourceRoles, updateSourceRole, } from '../team-lifecycle-api.js';
+import { pluralize } from '../ui.js';
+import { promptYesNo } from './publish.js';
+import { TeamsClient } from './teams.js';
+/**
+ * `sources roles` and `sources people`, for the Source admin.
+ *
+ * `roles` are the Source's roles — the ones every team of the Source hands
+ * out — managed through the same database functions as the team Settings →
+ * Roles page, which only a Source admin (or a super-admin) may call. Owner,
+ * admin and member are system roles: listed, never changed or deleted. A
+ * custom role sits below the owner (a higher level number), and a role a
+ * member still holds cannot be deleted.
+ *
+ * `people` is the Source admin's People page: everyone with access, one row
+ * per person with the teams they are on and their role on each.
+ */
+const ROLES_USAGE = 'Run one of: ekanos sources roles list, ekanos sources roles create <name> [--display-name <text>] [--description <text>] [--level <n>] [--permission <p>]…, ekanos sources roles update <role> [--display-name <text>] [--description <text>] [--level <n>] [--permission <p>]… [--grant <p>]… [--revoke <p>]…, ekanos sources roles delete <role> --yes.';
+const DEFAULT_LEVEL = 100;
+/**
+ * Deleting a role is asked at a terminal; a script, an agent run or `--json`
+ * passes `--yes` instead. Asked before any request.
+ */
+async function confirmDelete(ctx, args, role) {
+    var _a;
+    const what = `Deleting the role ${role} removes it from every team of the Source; it can't be deleted while a member holds it.`;
+    if (ctx.jsonMode || !((_a = args.stdinIsTTY) !== null && _a !== void 0 ? _a : process.stdin.isTTY === true)) {
+        throw invalidStateError(what, `Re-run with --yes: ${cli()} sources roles delete ${role} --yes`);
+    }
+    const question = `Delete the role ${role}? [y/N]`;
+    const { ask } = args;
+    const confirmed = ask
+        ? /^y(es)?$/i.test((await ask(question)).trim())
+        : await promptYesNo(question);
+    if (!confirmed) {
+        throw invalidStateError(`Not confirmed: ${what}`, 'Nothing was changed.');
+    }
+}
+export async function runSourceRoles(ctx, args, rest) {
+    var _a;
+    const [verb, rawRole, ...extra] = rest;
+    if (extra.length > 0) {
+        throw usageError(`Unexpected argument "${extra[0]}".`, ROLES_USAGE);
+    }
+    if (verb !== undefined &&
+        verb !== 'list' &&
+        verb !== 'create' &&
+        verb !== 'update' &&
+        verb !== 'delete') {
+        throw usageError(`Unknown sources roles subcommand "${verb}".`, ROLES_USAGE);
+    }
+    const flags = (_a = args.flags) !== null && _a !== void 0 ? _a : {};
+    const role = verb === undefined || verb === 'list' ? undefined : roleOf(rawRole, verb);
+    if (verb === 'list' && rawRole !== undefined) {
+        throw usageError(`Unexpected argument "${rawRole}".`, ROLES_USAGE);
+    }
+    const level = levelOf(flags.level);
+    const displayName = textFlag(flags['display-name']);
+    const description = textFlag(flags.description);
+    const permissions = listFlag(flags.permission);
+    const grant = listFlag(flags.grant);
+    const revoke = listFlag(flags.revoke);
+    if (verb === 'update' && role) {
+        const nothing = level === undefined &&
+            displayName === undefined &&
+            description === undefined &&
+            permissions === undefined &&
+            grant === undefined &&
+            revoke === undefined;
+        if (nothing) {
+            throw usageError('Nothing to change.', `Pass --display-name, --description, --level, --permission (replaces), --grant or --revoke, e.g. "${cli()} sources roles update ${role} --grant agents.review".`);
+        }
+    }
+    if (verb === 'delete' && role && !args.yes) {
+        await confirmDelete(ctx, args, role);
+    }
+    const env = resolveAuthEnvironment(ctx, args.host, args.env, {
+        projectDir: args.dir,
+    });
+    const resolved = await resolveSourceTarget(env, requireSession(env), {
+        source: args.source,
+        dir: args.dir,
+    });
+    const client = new TeamsClient(env, resolved.session);
+    const host = env.host;
+    const source = resolved.source;
+    if (verb === 'create' && role) {
+        const done = await client.call((token) => createSourceRole(host, token, source, Object.assign(Object.assign({ name: role, displayName: displayName !== null && displayName !== void 0 ? displayName : humanize(role) }, (description === undefined ? {} : { description })), { hierarchyLevel: level !== null && level !== void 0 ? level : DEFAULT_LEVEL, permissions: permissions !== null && permissions !== void 0 ? permissions : [] })));
+        return ctx.succeed(Object.assign({ host }, done), ctx.ui.result({
+            title: `Created role ${done.role.name} on ${done.source.slug}`,
+            rows: [roleRow(done.role)],
+            notes: [
+                `Give it to someone with "${cli()} teams members role <team> <email> ${done.role.name}".`,
+            ],
+        }));
+    }
+    if (verb === 'update' && role) {
+        const done = await client.call((token) => updateSourceRole(host, token, { source, role }, Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, (displayName === undefined ? {} : { displayName })), (description === undefined ? {} : { description })), (level === undefined ? {} : { hierarchyLevel: level })), (permissions === undefined ? {} : { permissions })), (grant === undefined ? {} : { grant })), (revoke === undefined ? {} : { revoke }))));
+        const added = done.role.permissions.filter((permission) => !done.previous.permissions.includes(permission));
+        const removed = done.previous.permissions.filter((permission) => !done.role.permissions.includes(permission));
+        return ctx.succeed(Object.assign({ host }, done), ctx.ui.result({
+            title: `Updated role ${done.role.name} on ${done.source.slug}`,
+            rows: [
+                roleRow(done.role),
+                ...(added.length > 0 ? [['Granted', added]] : []),
+                ...(removed.length > 0 ? [['Revoked', removed]] : []),
+            ],
+            notes: [
+                `Every member holding ${done.role.name}, on every team of the Source, has these permissions now.`,
+            ],
+        }));
+    }
+    if (verb === 'delete' && role) {
+        const done = await client.call((token) => deleteSourceRole(host, token, { source, role }));
+        return ctx.succeed(Object.assign({ host }, done), ctx.ui.result({
+            title: `Deleted role ${done.role.name} from ${done.source.slug}`,
+            tone: 'warn',
+        }));
+    }
+    const list = await client.call((token) => listSourceRoles(host, token, source));
+    return ctx.succeed(Object.assign({ host }, list), ctx.ui.result({
+        title: list.roles.length === 0
+            ? `${list.source.slug} uses the default roles`
+            : `Roles on ${list.source.slug}`,
+        rows: list.roles.map(roleRow),
+        notes: [
+            list.roles.length === 0
+                ? 'No customized roles: teams use owner, admin and member. "ekanos teams roles list <team>" shows their permissions.'
+                : 'Lower levels rank higher. Owner, admin and member are system roles and stay as they are.',
+            `Permissions: ${list.permissions.map((entry) => entry.permission).join(', ')}`,
+        ],
+    }));
+}
+export async function runSourcePeople(ctx, args, rest) {
+    var _a;
+    if (rest.length > 0) {
+        throw usageError(`Unexpected argument "${rest[0]}".`, 'Run "ekanos sources people [--search <text>] [--page <n>]".');
+    }
+    const flags = (_a = args.flags) !== null && _a !== void 0 ? _a : {};
+    const search = textFlag(flags.search);
+    const page = pageOf(flags.page);
+    const env = resolveAuthEnvironment(ctx, args.host, args.env, {
+        projectDir: args.dir,
+    });
+    const resolved = await resolveSourceTarget(env, requireSession(env), {
+        source: args.source,
+        dir: args.dir,
+    });
+    const client = new TeamsClient(env, resolved.session);
+    const list = await client.call((token) => listSourcePeople(env.host, token, resolved.source, Object.assign(Object.assign({}, (search ? { search } : {})), (page === undefined ? {} : { page }))));
+    const pages = Math.max(1, Math.ceil(list.total / list.pageSize));
+    return ctx.succeed(Object.assign({ host: env.host }, list), ctx.ui.result({
+        title: list.total === 0
+            ? search
+                ? `Nobody on ${list.source.slug} matches "${search}"`
+                : `Nobody has access to ${list.source.slug} yet`
+            : `${list.total} ${list.total === 1 ? 'person' : 'people'} on ${list.source.slug}${search ? ` matching "${search}"` : ''}`,
+        tone: list.total === 0 ? 'warn' : 'ok',
+        rows: list.people.map((person) => { var _a, _b; return [
+            (_b = (_a = person.email) !== null && _a !== void 0 ? _a : person.name) !== null && _b !== void 0 ? _b : person.userId,
+            [
+                [
+                    ...(person.name && person.email ? [person.name] : []),
+                    ...(person.status === 'active' ? [] : [person.status]),
+                ].join(' · ') || 'active',
+                ...person.teams.map((team) => `${team.accountName} · ${team.roleLabel}${team.status === 'active' ? '' : ` · ${team.status}`}`),
+            ],
+        ]; }),
+        notes: pages > 1
+            ? [
+                `Page ${list.page} of ${pages}. "--page ${Math.min(list.page + 1, pages)}" shows the next.`,
+            ]
+            : [],
+    }));
+}
+function roleRow(role) {
+    return [
+        `${role.name} (${role.displayName})`,
+        [
+            `level ${role.hierarchyLevel}${role.isSystem ? ' · system' : ''} · ${pluralize(role.memberCount, 'member')}`,
+            role.permissions.length > 0
+                ? role.permissions.join(', ')
+                : 'no permissions',
+        ],
+    ];
+}
+function roleOf(value, verb) {
+    const role = value === null || value === void 0 ? void 0 : value.trim().toLowerCase();
+    if (role && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(role))
+        return role;
+    throw usageError(value
+        ? `"${value}" is not a role name (lowercase letters, digits and dashes, e.g. team-lead).`
+        : `sources roles ${verb} needs a role name.`, '"ekanos sources roles list" lists them.');
+}
+function levelOf(value) {
+    if (value === undefined)
+        return undefined;
+    const level = typeof value === 'string' ? Number(value) : Number.NaN;
+    if (Number.isInteger(level) && level >= 1 && level <= 1000)
+        return level;
+    throw usageError(`--level "${String(value)}" is not a whole number from 1 to 1000.`, 'Lower numbers rank higher; a custom role sits below the owner, e.g. --level 50.');
+}
+function pageOf(value) {
+    if (value === undefined)
+        return undefined;
+    const page = typeof value === 'string' ? Number(value) : Number.NaN;
+    if (Number.isInteger(page) && page >= 1)
+        return page;
+    throw usageError(`--page "${String(value)}" is not a page number.`, 'Pages start at 1, e.g. --page 2.');
+}
+function textFlag(value) {
+    return typeof value === 'string' ? value.trim() : undefined;
+}
+function listFlag(value) {
+    if (value === undefined || value === false)
+        return undefined;
+    const values = Array.isArray(value)
+        ? value
+        : typeof value === 'string'
+            ? [value]
+            : [];
+    return values
+        .flatMap((entry) => String(entry).split(','))
+        .map((entry) => entry.trim())
+        .filter(Boolean);
+}
+function humanize(name) {
+    const spaced = name.replace(/-+/g, ' ');
+    return spaced.charAt(0).toUpperCase() + spaced.slice(1);
+}
+//# sourceMappingURL=sources-roles.js.map

package/dist/commands/sources-roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources-roles.js","sourceRoot":"","sources":["../../src/commands/sources-roles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAEL,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAkB,SAAS,EAAE,MAAM,OAAO,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,GACf,2VAA2V,CAAC;AAC9V,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B;;;GAGG;AACH,KAAK,UAAU,aAAa,CAC1B,GAAe,EACf,IAAiB,EACjB,IAAY;;IAEZ,MAAM,IAAI,GAAG,qBAAqB,IAAI,yFAAyF,CAAC;IAChI,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,OAAC,IAAI,CAAC,UAAU,mCAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;QACvE,MAAM,iBAAiB,CACrB,IAAI,EACJ,sBAAsB,GAAG,EAAE,yBAAyB,IAAI,QAAQ,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,IAAI,SAAS,CAAC;IAClD,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrB,MAAM,SAAS,GAAG,GAAG;QACnB,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC,CAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,iBAAiB,CAAC,kBAAkB,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAe,EACf,IAAiB,EACjB,IAAuB;;IAEvB,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,UAAU,CAAC,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACtE,CAAC;IACD,IACE,IAAI,KAAK,SAAS;QAClB,IAAI,KAAK,MAAM;QACf,IAAI,KAAK,QAAQ;QACjB,IAAI,KAAK,QAAQ;QACjB,IAAI,KAAK,QAAQ,EACjB,CAAC;QACD,MAAM,UAAU,CACd,qCAAqC,IAAI,IAAI,EAC7C,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,SAAG,IAAI,CAAC,KAAK,mCAAI,EAAE,CAAC;IAC/B,MAAM,IAAI,GACR,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5E,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,UAAU,CAAC,wBAAwB,OAAO,IAAI,EAAE,WAAW,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEtC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GACX,KAAK,KAAK,SAAS;YACnB,WAAW,KAAK,SAAS;YACzB,WAAW,KAAK,SAAS;YACzB,WAAW,KAAK,SAAS;YACzB,KAAK,KAAK,SAAS;YACnB,MAAM,KAAK,SAAS,CAAC;QACvB,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,UAAU,CACd,oBAAoB,EACpB,oGAAoG,GAAG,EAAE,yBAAyB,IAAI,0BAA0B,CACjK,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;QACnE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE/B,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,gCAClC,IAAI,EAAE,IAAI,EACV,WAAW,EAAE,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,QAAQ,CAAC,IAAI,CAAC,IACvC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,KACrD,cAAc,EAAE,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,aAAa,EACtC,WAAW,EAAE,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,EAAE,IAC9B,CACH,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,IAAI,GACf,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;YACZ,KAAK,EAAE,gBAAgB,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAC9D,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,KAAK,EAAE;gBACL,4BAA4B,GAAG,EAAE,sCAAsC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI;aAC1F;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,gBAAgB,CACd,IAAI,EACJ,KAAK,EACL,EAAE,MAAM,EAAE,IAAI,EAAE,0FAEX,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,GAClD,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,GAClD,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,GACtD,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,GAClD,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GACtC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAE9C,CACF,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CACxC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAChE,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAC9C,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC5D,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,IAAI,GACf,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;YACZ,KAAK,EAAE,gBAAgB,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAC9D,IAAI,EAAE;gBACJ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAClB,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D;YACD,KAAK,EAAE;gBACL,wBAAwB,IAAI,CAAC,IAAI,CAAC,IAAI,2DAA2D;aAClG;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAChD,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,IAAI,GACf,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;YACZ,KAAK,EAAE,gBAAgB,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAChE,IAAI,EAAE,MAAM;SACb,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACrC,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,IAAI,GACf,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EACH,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,yBAAyB;YAC9C,CAAC,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QACpC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;QAC7B,KAAK,EAAE;YACL,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;gBACrB,CAAC,CAAC,mHAAmH;gBACrH,CAAC,CAAC,0FAA0F;YAC9F,gBAAgB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC/E;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAe,EACf,IAAiB,EACjB,IAAuB;;IAEvB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,UAAU,CACd,wBAAwB,IAAI,CAAC,CAAC,CAAC,IAAI,EACnC,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,SAAG,IAAI,CAAC,KAAK,mCAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEhC,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;QACnE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,kCAC5C,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAC1B,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EACvC,CACH,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EACH,IAAI,CAAC,KAAK,KAAK,CAAC;YACd,CAAC,CAAC,MAAM;gBACN,CAAC,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI,aAAa,MAAM,GAAG;gBACrD,CAAC,CAAC,wBAAwB,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM;YAClD,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,cAAc,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9H,IAAI,EAAE,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACtC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAa,EAAE,sBAAC;wBAC3C,MAAM,CAAC,KAAK,mCAAI,MAAM,CAAC,IAAI,mCAAI,MAAM,CAAC,MAAM;YAC5C;gBACE;oBACE,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrD,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;iBACvD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ;gBACzB,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CACjB,CAAC,IAAI,EAAE,EAAE,CACP,GAAG,IAAI,CAAC,WAAW,MAAM,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,CAClG;aACF;SACF,GAAA,CAAC;QACF,KAAK,EACH,KAAK,GAAG,CAAC;YACP,CAAC,CAAC;gBACE,QAAQ,IAAI,CAAC,IAAI,OAAO,KAAK,aAAa,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,mBAAmB;aAC5F;YACH,CAAC,CAAC,EAAE;KACT,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,IAAgB;IAC/B,OAAO;QACL,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,GAAG;QACpC;YACE,SAAS,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE;YAC5G,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;gBACzB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC7B,CAAC,CAAC,gBAAgB;SACrB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAyB,EAAE,IAAY;IACrD,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,IAAI,KAAK,8EAA8E;QACzF,CAAC,CAAC,iBAAiB,IAAI,qBAAqB,EAC9C,yCAAyC,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACrE,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IACzE,MAAM,UAAU,CACd,YAAY,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAClE,iFAAiF,CAClF,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACpE,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,UAAU,CACd,WAAW,MAAM,CAAC,KAAK,CAAC,yBAAyB,EACjD,kCAAkC,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACjC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,CAAC,KAAK,CAAC;YACT,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,MAAM;SACV,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC","sourcesContent":["import { requireSession, resolveAuthEnvironment } from '../auth/session';\nimport type { CliContext } from '../context';\nimport { invalidStateError, usageError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { cli } from '../invocation';\nimport { resolveSourceTarget } from '../source-target';\nimport {\n  type SourceRole,\n  createSourceRole,\n  deleteSourceRole,\n  listSourcePeople,\n  listSourceRoles,\n  updateSourceRole,\n} from '../team-lifecycle-api';\nimport { type ResultRow, pluralize } from '../ui';\nimport { promptYesNo } from './publish';\nimport type { SourcesArgs } from './sources';\nimport { TeamsClient } from './teams';\n\n/**\n * `sources roles` and `sources people`, for the Source admin.\n *\n * `roles` are the Source's roles — the ones every team of the Source hands\n * out — managed through the same database functions as the team Settings →\n * Roles page, which only a Source admin (or a super-admin) may call. Owner,\n * admin and member are system roles: listed, never changed or deleted. A\n * custom role sits below the owner (a higher level number), and a role a\n * member still holds cannot be deleted.\n *\n * `people` is the Source admin's People page: everyone with access, one row\n * per person with the teams they are on and their role on each.\n */\n\nconst ROLES_USAGE =\n  'Run one of: ekanos sources roles list, ekanos sources roles create <name> [--display-name <text>] [--description <text>] [--level <n>] [--permission <p>]…, ekanos sources roles update <role> [--display-name <text>] [--description <text>] [--level <n>] [--permission <p>]… [--grant <p>]… [--revoke <p>]…, ekanos sources roles delete <role> --yes.';\nconst DEFAULT_LEVEL = 100;\n\n/**\n * Deleting a role is asked at a terminal; a script, an agent run or `--json`\n * passes `--yes` instead. Asked before any request.\n */\nasync function confirmDelete(\n  ctx: CliContext,\n  args: SourcesArgs,\n  role: string,\n): Promise<void> {\n  const what = `Deleting the role ${role} removes it from every team of the Source; it can't be deleted while a member holds it.`;\n  if (ctx.jsonMode || !(args.stdinIsTTY ?? process.stdin.isTTY === true)) {\n    throw invalidStateError(\n      what,\n      `Re-run with --yes: ${cli()} sources roles delete ${role} --yes`,\n    );\n  }\n  const question = `Delete the role ${role}? [y/N]`;\n  const { ask } = args;\n  const confirmed = ask\n    ? /^y(es)?$/i.test((await ask(question)).trim())\n    : await promptYesNo(question);\n  if (!confirmed) {\n    throw invalidStateError(`Not confirmed: ${what}`, 'Nothing was changed.');\n  }\n}\n\nexport async function runSourceRoles(\n  ctx: CliContext,\n  args: SourcesArgs,\n  rest: readonly string[],\n): Promise<ExitCode> {\n  const [verb, rawRole, ...extra] = rest;\n  if (extra.length > 0) {\n    throw usageError(`Unexpected argument \"${extra[0]}\".`, ROLES_USAGE);\n  }\n  if (\n    verb !== undefined &&\n    verb !== 'list' &&\n    verb !== 'create' &&\n    verb !== 'update' &&\n    verb !== 'delete'\n  ) {\n    throw usageError(\n      `Unknown sources roles subcommand \"${verb}\".`,\n      ROLES_USAGE,\n    );\n  }\n  const flags = args.flags ?? {};\n  const role =\n    verb === undefined || verb === 'list' ? undefined : roleOf(rawRole, verb);\n  if (verb === 'list' && rawRole !== undefined) {\n    throw usageError(`Unexpected argument \"${rawRole}\".`, ROLES_USAGE);\n  }\n  const level = levelOf(flags.level);\n  const displayName = textFlag(flags['display-name']);\n  const description = textFlag(flags.description);\n  const permissions = listFlag(flags.permission);\n  const grant = listFlag(flags.grant);\n  const revoke = listFlag(flags.revoke);\n\n  if (verb === 'update' && role) {\n    const nothing =\n      level === undefined &&\n      displayName === undefined &&\n      description === undefined &&\n      permissions === undefined &&\n      grant === undefined &&\n      revoke === undefined;\n    if (nothing) {\n      throw usageError(\n        'Nothing to change.',\n        `Pass --display-name, --description, --level, --permission (replaces), --grant or --revoke, e.g. \"${cli()} sources roles update ${role} --grant agents.review\".`,\n      );\n    }\n  }\n  if (verb === 'delete' && role && !args.yes) {\n    await confirmDelete(ctx, args, role);\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(env, requireSession(env), {\n    source: args.source,\n    dir: args.dir,\n  });\n  const client = new TeamsClient(env, resolved.session);\n  const host = env.host;\n  const source = resolved.source;\n\n  if (verb === 'create' && role) {\n    const done = await client.call((token) =>\n      createSourceRole(host, token, source, {\n        name: role,\n        displayName: displayName ?? humanize(role),\n        ...(description === undefined ? {} : { description }),\n        hierarchyLevel: level ?? DEFAULT_LEVEL,\n        permissions: permissions ?? [],\n      }),\n    );\n    return ctx.succeed(\n      { host, ...done },\n      ctx.ui.result({\n        title: `Created role ${done.role.name} on ${done.source.slug}`,\n        rows: [roleRow(done.role)],\n        notes: [\n          `Give it to someone with \"${cli()} teams members role <team> <email> ${done.role.name}\".`,\n        ],\n      }),\n    );\n  }\n\n  if (verb === 'update' && role) {\n    const done = await client.call((token) =>\n      updateSourceRole(\n        host,\n        token,\n        { source, role },\n        {\n          ...(displayName === undefined ? {} : { displayName }),\n          ...(description === undefined ? {} : { description }),\n          ...(level === undefined ? {} : { hierarchyLevel: level }),\n          ...(permissions === undefined ? {} : { permissions }),\n          ...(grant === undefined ? {} : { grant }),\n          ...(revoke === undefined ? {} : { revoke }),\n        },\n      ),\n    );\n    const added = done.role.permissions.filter(\n      (permission) => !done.previous.permissions.includes(permission),\n    );\n    const removed = done.previous.permissions.filter(\n      (permission) => !done.role.permissions.includes(permission),\n    );\n    return ctx.succeed(\n      { host, ...done },\n      ctx.ui.result({\n        title: `Updated role ${done.role.name} on ${done.source.slug}`,\n        rows: [\n          roleRow(done.role),\n          ...(added.length > 0 ? [['Granted', added] as const] : []),\n          ...(removed.length > 0 ? [['Revoked', removed] as const] : []),\n        ],\n        notes: [\n          `Every member holding ${done.role.name}, on every team of the Source, has these permissions now.`,\n        ],\n      }),\n    );\n  }\n\n  if (verb === 'delete' && role) {\n    const done = await client.call((token) =>\n      deleteSourceRole(host, token, { source, role }),\n    );\n    return ctx.succeed(\n      { host, ...done },\n      ctx.ui.result({\n        title: `Deleted role ${done.role.name} from ${done.source.slug}`,\n        tone: 'warn',\n      }),\n    );\n  }\n\n  const list = await client.call((token) =>\n    listSourceRoles(host, token, source),\n  );\n  return ctx.succeed(\n    { host, ...list },\n    ctx.ui.result({\n      title:\n        list.roles.length === 0\n          ? `${list.source.slug} uses the default roles`\n          : `Roles on ${list.source.slug}`,\n      rows: list.roles.map(roleRow),\n      notes: [\n        list.roles.length === 0\n          ? 'No customized roles: teams use owner, admin and member. \"ekanos teams roles list <team>\" shows their permissions.'\n          : 'Lower levels rank higher. Owner, admin and member are system roles and stay as they are.',\n        `Permissions: ${list.permissions.map((entry) => entry.permission).join(', ')}`,\n      ],\n    }),\n  );\n}\n\nexport async function runSourcePeople(\n  ctx: CliContext,\n  args: SourcesArgs,\n  rest: readonly string[],\n): Promise<ExitCode> {\n  if (rest.length > 0) {\n    throw usageError(\n      `Unexpected argument \"${rest[0]}\".`,\n      'Run \"ekanos sources people [--search <text>] [--page <n>]\".',\n    );\n  }\n  const flags = args.flags ?? {};\n  const search = textFlag(flags.search);\n  const page = pageOf(flags.page);\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(env, requireSession(env), {\n    source: args.source,\n    dir: args.dir,\n  });\n  const client = new TeamsClient(env, resolved.session);\n  const list = await client.call((token) =>\n    listSourcePeople(env.host, token, resolved.source, {\n      ...(search ? { search } : {}),\n      ...(page === undefined ? {} : { page }),\n    }),\n  );\n\n  const pages = Math.max(1, Math.ceil(list.total / list.pageSize));\n  return ctx.succeed(\n    { host: env.host, ...list },\n    ctx.ui.result({\n      title:\n        list.total === 0\n          ? search\n            ? `Nobody on ${list.source.slug} matches \"${search}\"`\n            : `Nobody has access to ${list.source.slug} yet`\n          : `${list.total} ${list.total === 1 ? 'person' : 'people'} on ${list.source.slug}${search ? ` matching \"${search}\"` : ''}`,\n      tone: list.total === 0 ? 'warn' : 'ok',\n      rows: list.people.map((person): ResultRow => [\n        person.email ?? person.name ?? person.userId,\n        [\n          [\n            ...(person.name && person.email ? [person.name] : []),\n            ...(person.status === 'active' ? [] : [person.status]),\n          ].join(' · ') || 'active',\n          ...person.teams.map(\n            (team) =>\n              `${team.accountName} · ${team.roleLabel}${team.status === 'active' ? '' : ` · ${team.status}`}`,\n          ),\n        ],\n      ]),\n      notes:\n        pages > 1\n          ? [\n              `Page ${list.page} of ${pages}. \"--page ${Math.min(list.page + 1, pages)}\" shows the next.`,\n            ]\n          : [],\n    }),\n  );\n}\n\nfunction roleRow(role: SourceRole): ResultRow {\n  return [\n    `${role.name} (${role.displayName})`,\n    [\n      `level ${role.hierarchyLevel}${role.isSystem ? ' · system' : ''} · ${pluralize(role.memberCount, 'member')}`,\n      role.permissions.length > 0\n        ? role.permissions.join(', ')\n        : 'no permissions',\n    ],\n  ];\n}\n\nfunction roleOf(value: string | undefined, verb: string): string {\n  const role = value?.trim().toLowerCase();\n  if (role && /^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(role)) return role;\n  throw usageError(\n    value\n      ? `\"${value}\" is not a role name (lowercase letters, digits and dashes, e.g. team-lead).`\n      : `sources roles ${verb} needs a role name.`,\n    '\"ekanos sources roles list\" lists them.',\n  );\n}\n\nfunction levelOf(value: unknown): number | undefined {\n  if (value === undefined) return undefined;\n  const level = typeof value === 'string' ? Number(value) : Number.NaN;\n  if (Number.isInteger(level) && level >= 1 && level <= 1000) return level;\n  throw usageError(\n    `--level \"${String(value)}\" is not a whole number from 1 to 1000.`,\n    'Lower numbers rank higher; a custom role sits below the owner, e.g. --level 50.',\n  );\n}\n\nfunction pageOf(value: unknown): number | undefined {\n  if (value === undefined) return undefined;\n  const page = typeof value === 'string' ? Number(value) : Number.NaN;\n  if (Number.isInteger(page) && page >= 1) return page;\n  throw usageError(\n    `--page \"${String(value)}\" is not a page number.`,\n    'Pages start at 1, e.g. --page 2.',\n  );\n}\n\nfunction textFlag(value: unknown): string | undefined {\n  return typeof value === 'string' ? value.trim() : undefined;\n}\n\nfunction listFlag(value: unknown): string[] | undefined {\n  if (value === undefined || value === false) return undefined;\n  const values = Array.isArray(value)\n    ? value\n    : typeof value === 'string'\n      ? [value]\n      : [];\n  return values\n    .flatMap((entry) => String(entry).split(','))\n    .map((entry) => entry.trim())\n    .filter(Boolean);\n}\n\nfunction humanize(name: string) {\n  const spaced = name.replace(/-+/g, ' ');\n  return spaced.charAt(0).toUpperCase() + spaced.slice(1);\n}\n"]}

package/dist/commands/sources.d.ts

@@ -6,6 +6,11 @@ export interface SourcesArgs {
     positionals?: readonly string[];
     source?: string;
     yes?: boolean;
+    /** `roles` and `people`: their flags (`--level`, `--permission`, `--search` …). */
+    flags?: Record<string, string | boolean | string[]>;
+    /** `roles delete` asks at a terminal; the test seams for it. */
+    stdinIsTTY?: boolean;
+    ask?: (question: string) => Promise<string>;
     /** Where a project's ekanos.json may sit — its `source` field, if any, is the marker. */
     dir: string;
     env: Record<string, string | undefined>;

package/dist/commands/sources.js

@@ -10,6 +10,7 @@ import { resolveSourceTarget } from '../source-target.js';
 import { stillUnauthorizedSourceSeats } from '../sources-api.js';
 import { listProductScopes, setScopeProduct } from '../teams-api.js';
 import { pluralize, shortHost } from '../ui.js';
+import { runSourcePeople, runSourceRoles } from './sources-roles.js';
 /**
  * `sources` — list every source the caller holds a developer or admin seat
  * on, the read half of the publish-target-verification story.
@@ -24,8 +25,12 @@ export async function runSources(ctx, args) {
     if (subcommand !== undefined) {
         if (subcommand === 'scopes')
             return runScopes(ctx, args, rest);
+        if (subcommand === 'roles')
+            return runSourceRoles(ctx, args, rest);
+        if (subcommand === 'people')
+            return runSourcePeople(ctx, args, rest);
         if (subcommand !== 'products') {
-            throw usageError(`Unknown sources subcommand "${subcommand}".`, 'Run "ekanos sources" to list your sources, "ekanos sources products [enable|disable <product>]" or "ekanos sources scopes [add|remove <scope> <product>]".');
+            throw usageError(`Unknown sources subcommand "${subcommand}".`, 'Run "ekanos sources" to list your sources, "ekanos sources products [enable|disable <product>]", "ekanos sources scopes [add|remove <scope> <product>]", "ekanos sources roles [list|create|update|delete <role>]" or "ekanos sources people".');
         }
         return runProducts(ctx, args, rest);
     }

package/dist/commands/sources.js.map

@@ -1 +1 @@
-{"version":3,"file":"sources.js","sourceRoot":"","sources":["../../src/commands/sources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAEL,oBAAoB,EACpB,cAAc,EACd,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAGL,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAmB,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAW,SAAS,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAatD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAe,EACf,IAAiB;;IAEjB,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAG,IAAI,CAAC,WAAW,mCAAI,EAAE,CAAC;IACrD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,UAAU,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,UAAU,CACd,+BAA+B,UAAU,IAAI,EAC7C,4JAA4J,CAC7J,CAAC;QACJ,CAAC;QACD,OAAO,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAEpC,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAE5D,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACrC,4BAA4B,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEhD,OAAO,GAAG,CAAC,OAAO,CAChB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,EACzD,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAE1D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GACV,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAC3C,CAAC,CAAE,MAA+B,CAAC,MAAM;QACzC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC3D,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QACf,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,kGAAkG;AAClG,MAAM,mBAAmB,GAA2C;IAClE,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,aAAa;CAC3B,CAAC;AAEF,SAAS,YAAY,CACnB,EAAM,EACN,IAAY,EACZ,OAAqB,EACrB,YAA2B;IAE3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,MAAM,CAAC;YACf,mEAAmE;YACnE,oDAAoD;YACpD,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACjC,KAAK,EAAE,CAAC,iDAAiD,CAAC;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GACZ,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IAEhE,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,SAAS,CAAC,IAAI,CAAC,EAAE;QACrE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAoB,EAAE,kBAAC;YAC9C,MAAM,CAAC,IAAI;YACX;sBACE,MAAM,CAAC,IAAI,mCAAI,WAAW;gBAC1B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE,CAAC,IAAI,CAAC,KAAK,CAAC;SACd,GAAA,CAAC;QACF,KAAK,EAAE,QAAQ;YACb,CAAC,CAAC;gBACE,yCAAyC,YAAY,oCAAoC;aAC1F;YACH,CAAC,CAAC,EAAE;KACP,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,WAAW,CACxB,GAAe,EACf,IAAiB,EACjB,IAAuB;IAEvB,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,UAAU,CACd,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EACpC,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,UAAU,CACd,wCAAwC,IAAI,IAAI,EAChD,iIAAiI,CAClI,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,iBAAiB,CACrB,aAAa,OAAO,wGAAwG,EAC5H,sDAAsD,OAAO,QAAQ,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;QACnE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEzD,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CACrD,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,IAA2B,EAAE,EAAE,CAC7C,IAAI,CAAC,QAAQ;aACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;aACtC,GAAG,CAAC,CAAC,KAAK,EAAoB,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI;YACV,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,4BAA4B,EAAE;SAC/M,CAAC,CAAC;QACP,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB;YACE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,kBAAkB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC3C,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC;aAC3B,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,mBAAmB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC5C,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC;gBAC3B,KAAK,EAAE;oBACL,IAAI,CAAC,SAAS;wBACZ,CAAC,CAAC,kEAAkE;wBACpE,CAAC,CAAC,IAAI,CAAC,cAAc;4BACnB,CAAC,CAAC,wLAAwL;4BAC1L,CAAC,CAAC,qGAAqG;oBAC3G,qFAAqF;iBACtF;aACF,CAAC;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,KAAK,QAAQ,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAChC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO;QACP,OAAO;KACR,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,MAAM,GAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC,OAAO;YACnB,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YACxF,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,gBAAgB,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACjG,IAAI,EAAE;YACJ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7B;gBACE,aAAa;gBACb,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM;oBAC7B,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM;wBAC/B,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,iBAAiB;aACxB;SACF;QACD,KAAK,EACH,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,aAAa;YAC9C,CAAC,CAAC;gBACE,sCAAsC,MAAM,CAAC,OAAO,CAAC,IAAI,2BAA2B;aACrF;YACH,CAAC,CAAC,EAAE;KACT,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,SAAS,CACtB,GAAe,EACf,IAAiB,EACjB,IAAuB;IAEvB,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;IACpD,MAAM,KAAK,GACT,uIAAuI,CAAC;IAC1I,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9D,MAAM,UAAU,CAAC,sCAAsC,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,UAAU,CAAC,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,UAAU,CACd,kBAAkB,IAAI,+BAA+B,EACrD,KAAK,CACN,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,MAAM,iBAAiB,CACrB,UAAU,OAAO,WAAW,KAAK,6CAA6C,KAAK,2CAA2C,EAC9H,mDAAmD,QAAQ,CAAC,KAAM,CAAC,IAAI,OAAO,QAAQ,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;QACnE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEzD,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CACpD,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,wBAAwB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACjD,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;gBACrD,KAAK,EAAE;oBACL,qEAAqE;iBACtE;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;YACZ,KAAK,EAAE,qBAAqB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAsB,EAAE,CAAC;gBACnD,KAAK,CAAC,IAAI;gBACV;oBACE,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC7F,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;wBACvB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;wBACpD,CAAC,CAAC,aAAa;iBAClB;aACF,CAAC;YACF,KAAK,EAAE;gBACL,kEAAkE;gBAClE,0KAA0K;aAC3K;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,KAAK,KAAK,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,eAAe,CACb,GAAG,CAAC,IAAI,EACR,KAAK,EACL,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAC3C,QAAQ,CACT,CACF,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,MAAM,GAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC,OAAO;YACnB,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YAC5G,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,gBAAgB,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;QAC3F,IAAI,EAAE,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACjD,IAAI,EAAE;YACJ,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/C;gBACE,UAAU;gBACV,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;oBAC9B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC3D,CAAC,CAAC,MAAM;aACX;SACF;QACD,KAAK,EAAE;YACL,QAAQ;gBACN,CAAC,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,IAAI,SAAS,MAAM,CAAC,OAAO,CAAC,IAAI,kBAAkB;gBAClF,CAAC,CAAC,YAAY,MAAM,CAAC,KAAK,CAAC,IAAI,QAAQ,MAAM,CAAC,OAAO,CAAC,IAAI,0CAA0C;SACvG;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB,EAAE,IAAY;IAC/D,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,IAAI,KAAK,0BAA0B;QACrC,CAAC,CAAC,kBAAkB,IAAI,mBAAmB,EAC7C,uFAAuF,CACxF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,IAAY;IAC1D,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,IAAI,KAAK,0BAA0B;QACrC,CAAC,CAAC,oBAAoB,IAAI,mBAAmB,EAC/C,qFAAqF,CACtF,CAAC;AACJ,CAAC;AAED,MAAM,cAAc;IAClB,YACmB,GAAoB,EAC7B,OAAsB;mBADb,GAAG;uBACZ,OAAO;IACd,CAAC;IAEJ,KAAK,CAAC,IAAI,CACR,IAAkE;QAElE,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAC/C,MAAM,iBAAiB,CACrB,mBAAmB,IAAI,CAAC,GAAG,CAAC,IAAI,wCAAwC,EACxE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CACpB,CAAC;IACJ,CAAC;CACF","sourcesContent":["import * as fs from 'node:fs';\nimport * as path from 'node:path';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport { loginHint } from '../auth/host-trust';\nimport {\n  type AuthEnvironment,\n  refreshStoredSession,\n  requireSession,\n  resolveAuthEnvironment,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport { authRequiredError, invalidStateError, usageError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { EKANOS_CONFIG_FILENAME } from '../project';\nimport { fetchSeatsWithOneRefresh } from '../seats';\nimport {\n  type SourceProduct,\n  type SourceProductsApiResult,\n  listSourceProducts,\n  setSourceProduct,\n} from '../source-products-api';\nimport { resolveSourceTarget } from '../source-target';\nimport { type SourceSeat, stillUnauthorizedSourceSeats } from '../sources-api';\nimport { listProductScopes, setScopeProduct } from '../teams-api';\nimport { type Ui, pluralize, shortHost } from '../ui';\n\nexport interface SourcesArgs {\n  host?: string;\n  /** `products [enable|disable <product>]`, `scopes [add|remove <scope> <product>]`; none lists the sources. */\n  positionals?: readonly string[];\n  source?: string;\n  yes?: boolean;\n  /** Where a project's ekanos.json may sit — its `source` field, if any, is the marker. */\n  dir: string;\n  env: Record<string, string | undefined>;\n}\n\n/**\n * `sources` — list every source the caller holds a developer or admin seat\n * on, the read half of the publish-target-verification story.\n *\n * The list itself is the mechanism that makes `publish` safe: a partner (or\n * an agent acting for one) can always answer \"which sources can I possibly\n * publish to?\" before running `ekanos use` or passing `--source`.\n */\nexport async function runSources(\n  ctx: CliContext,\n  args: SourcesArgs,\n): Promise<ExitCode> {\n  const [subcommand, ...rest] = args.positionals ?? [];\n  if (subcommand !== undefined) {\n    if (subcommand === 'scopes') return runScopes(ctx, args, rest);\n    if (subcommand !== 'products') {\n      throw usageError(\n        `Unknown sources subcommand \"${subcommand}\".`,\n        'Run \"ekanos sources\" to list your sources, \"ekanos sources products [enable|disable <product>]\" or \"ekanos sources scopes [add|remove <scope> <product>]\".',\n      );\n    }\n    return runProducts(ctx, args, rest);\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const session = requireSession(env);\n\n  const result = await fetchSeatsWithOneRefresh(env, session);\n\n  if (result.status === 'unauthorized') {\n    stillUnauthorizedSourceSeats(env);\n  }\n\n  const activeSource = readActiveSource(args.dir);\n\n  return ctx.succeed(\n    { host: env.host, sources: result.sources, activeSource },\n    humanSummary(ctx.ui, env.host, result.sources, activeSource),\n  );\n}\n\n/**\n * Best-effort, lenient read of ekanos.json's `source` field — mirrors\n * `readProjectHost` in `auth/session.ts`. A missing, unparseable, or\n * sourceless ekanos.json (or no project at all) simply means \"no active\n * source to mark\", never an error: `sources` must answer outside a project\n * too.\n */\nexport function readActiveSource(dir: string): string | null {\n  const configPath = path.join(dir, EKANOS_CONFIG_FILENAME);\n\n  let raw: string;\n  try {\n    raw = fs.readFileSync(configPath, 'utf8');\n  } catch {\n    return null;\n  }\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    return null;\n  }\n\n  const source =\n    typeof parsed === 'object' && parsed !== null\n      ? (parsed as { source?: unknown }).source\n      : undefined;\n\n  return typeof source === 'string' && source.trim().length > 0\n    ? source.trim()\n    : null;\n}\n\n/** Why a product is not enabled, by the lever that would enable it — the words `catalog` uses. */\nconst NOT_ENABLED_BECAUSE: Record<SourceProduct['lever'], string> = {\n  flag: 'its Flag is off',\n  plan: 'no active plan',\n  entitlement: 'not granted',\n};\n\nfunction humanSummary(\n  ui: Ui,\n  host: string,\n  sources: SourceSeat[],\n  activeSource: string | null,\n): string {\n  if (sources.length === 0) {\n    return ui.result({\n      // Read by any signed-in account, a team member's too: no word here\n      // may imply the host serves more than one customer.\n      title: 'No partner seats',\n      tone: 'warn',\n      rows: [['Host', shortHost(host)]],\n      notes: ['This account has no partner seats on this host.'],\n    });\n  }\n\n  const orphaned =\n    activeSource && !sources.some((s) => s.slug === activeSource);\n\n  return ui.result({\n    title: `${pluralize(sources.length, 'source')} on ${shortHost(host)}`,\n    rows: sources.map((source): [string, string] => [\n      source.slug,\n      [\n        source.name ?? '(unnamed)',\n        source.roles.join(', '),\n        ...(source.slug === activeSource ? [ui.accent('this project')] : []),\n      ].join(' · '),\n    ]),\n    notes: orphaned\n      ? [\n          `This project's ekanos.json points at \"${activeSource}\", which is not in the list above.`,\n        ]\n      : [],\n  });\n}\n\n/**\n * `sources products` — the catalog as one Source has it: every product, its\n * kind (Experience or Integration), and whether it is enabled for the Source.\n * `enable|disable <product>` switch one through the levers `/admin` uses\n * (`attachProductToSource` / `detachProductFromSource` for an Integration,\n * the Experience lever for an Experience). A Source admin switches the\n * integrations their Source built (`owned`); anything else is a super-admin\n * grant, which an `ekanos login` session never carries, so from the terminal\n * that write answers with where to do it.\n */\nasync function runProducts(\n  ctx: CliContext,\n  args: SourcesArgs,\n  rest: readonly string[],\n): Promise<ExitCode> {\n  const [verb, rawProduct, ...extra] = rest;\n  if (extra.length > 0) {\n    throw usageError(\n      `Unexpected argument \"${extra[0]}\".`,\n      'Run \"ekanos sources products [enable|disable <product>] [--source <slug>]\".',\n    );\n  }\n  if (verb !== undefined && verb !== 'enable' && verb !== 'disable') {\n    throw usageError(\n      `Unknown sources products subcommand \"${verb}\".`,\n      'Run \"ekanos sources products\", \"ekanos sources products enable <product>\" or \"ekanos sources products disable <product> --yes\".',\n    );\n  }\n  const product = verb ? productSlug(rawProduct, verb) : null;\n  if (verb === 'disable' && !args.yes) {\n    throw invalidStateError(\n      `Disabling ${product} removes it from the Source: its plans, widget settings, Source credentials and workspaces go with it.`,\n      `Re-run with --yes: ekanos sources products disable ${product} --yes`,\n    );\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(env, requireSession(env), {\n    source: args.source,\n    dir: args.dir,\n  });\n  const client = new ProductsClient(env, resolved.session);\n\n  if (!verb || !product) {\n    const list = await client.call((token) =>\n      listSourceProducts(env.host, token, resolved.source),\n    );\n    const byKind = (kind: SourceProduct['kind']) =>\n      list.products\n        .filter((entry) => entry.kind === kind)\n        .map((entry): [string, string] => [\n          entry.slug,\n          `${entry.enabled ? '✓ enabled' : `✗ not enabled (${NOT_ENABLED_BECAUSE[entry.lever]})`} · ${entry.name}${entry.owned ? ' · built by this Source' : ''}${entry.registered ? '' : ' · no package on this host'}`,\n        ]);\n    return ctx.succeed(\n      { host: env.host, ...list },\n      [\n        ctx.ui.result({\n          title: `Experiences on ${list.source.slug}`,\n          rows: byKind('experience'),\n        }),\n        ctx.ui.result({\n          title: `Integrations on ${list.source.slug}`,\n          rows: byKind('integration'),\n          notes: [\n            list.canEnable\n              ? '\"ekanos sources products enable|disable <product>\" switches one.'\n              : list.canEnableOwned\n                ? '\"ekanos sources products enable|disable <product>\" switches one built by this Source; any other is a super-admin grant, made in the browser at /admin/sources → the Source → Products.'\n                : 'Enabling one is a super-admin grant, made in the browser at /admin/sources → the Source → Products.',\n            '\"ekanos teams connect <team> <product>\" connects an enabled integration for a team.',\n          ],\n        }),\n      ].join('\\n'),\n    );\n  }\n\n  const enabled = verb === 'enable';\n  const result = await client.call((token) =>\n    setSourceProduct(env.host, token, {\n      source: resolved.source,\n      product,\n      enabled,\n    }),\n  );\n  return ctx.succeed(\n    { host: env.host, ...result },\n    ctx.ui.result({\n      title: result.changed\n        ? `${enabled ? 'Enabled' : 'Disabled'} ${result.product.name} for ${result.source.slug}`\n        : `${result.product.name} was already ${enabled ? 'enabled' : 'off'} for ${result.source.slug}`,\n      rows: [\n        ['Kind', result.product.kind],\n        [\n          'Switched by',\n          result.product.lever === 'flag'\n            ? 'its Flag'\n            : result.product.lever === 'plan'\n              ? 'its plan'\n              : 'the entitlement',\n        ],\n      ],\n      notes:\n        enabled && result.product.kind === 'integration'\n          ? [\n              `Next: \"ekanos teams connect <team> ${result.product.slug}\" connects it for a team.`,\n            ]\n          : [],\n    }),\n  );\n}\n\n/**\n * `sources scopes` — the Source's product scopes, for its Source admin: each\n * scope's products and how many teams hold it. Once a Source has a scope,\n * each team sees in the app only its scopes' products. `add|remove <scope>\n * <product>` changes one scope (by name or id) through what\n * `/admin/sources/[id]/product-scopes` uses; a product can only be added if\n * the Source has it. Taking one out hides it from every team on the scope\n * that no other of its scopes shows it to, so that needs `--yes`.\n */\nasync function runScopes(\n  ctx: CliContext,\n  args: SourcesArgs,\n  rest: readonly string[],\n): Promise<ExitCode> {\n  const [verb, rawScope, rawProduct, ...extra] = rest;\n  const usage =\n    'Run \"ekanos sources scopes\", \"ekanos sources scopes add <scope> <product>\" or \"ekanos sources scopes remove <scope> <product> --yes\".';\n  if (verb !== undefined && verb !== 'add' && verb !== 'remove') {\n    throw usageError(`Unknown sources scopes subcommand \"${verb}\".`, usage);\n  }\n  if (extra.length > 0) {\n    throw usageError(`Unexpected argument \"${extra[0]}\".`, usage);\n  }\n  const scope = rawScope?.trim();\n  if (verb && !scope) {\n    throw usageError(\n      `sources scopes ${verb} needs a scope and a product.`,\n      usage,\n    );\n  }\n  const product = verb ? scopeProductSlug(rawProduct, verb) : null;\n  if (verb === 'remove' && !args.yes) {\n    throw invalidStateError(\n      `Taking ${product} out of ${scope} hides it, in the app, from every team on ${scope} that no other of its scopes shows it to.`,\n      `Re-run with --yes: ekanos sources scopes remove ${quoteArg(scope!)} ${product} --yes`,\n    );\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(env, requireSession(env), {\n    source: args.source,\n    dir: args.dir,\n  });\n  const client = new ProductsClient(env, resolved.session);\n\n  if (!verb || !product || !scope) {\n    const list = await client.call((token) =>\n      listProductScopes(env.host, token, resolved.source),\n    );\n    if (list.scopes.length === 0) {\n      return ctx.succeed(\n        { host: env.host, ...list },\n        ctx.ui.result({\n          title: `No product scopes on ${list.source.slug}`,\n          rows: [['Teams see', 'every product the Source has']],\n          notes: [\n            'Scopes are created at /admin/sources → the Source → Product scopes.',\n          ],\n        }),\n      );\n    }\n    return ctx.succeed(\n      { host: env.host, ...list },\n      ctx.ui.result({\n        title: `Product scopes on ${list.source.slug}`,\n        rows: list.scopes.map((entry): [string, string[]] => [\n          entry.name,\n          [\n            `${pluralize(entry.teamCount, 'team')}${entry.isDefault ? ' · given to every new team' : ''}`,\n            entry.products.length > 0\n              ? entry.products.map((item) => item.slug).join(', ')\n              : 'no products',\n          ],\n        ]),\n        notes: [\n          'A team sees in the app only the products of the scopes it holds.',\n          '\"ekanos sources scopes add <scope> <product>\" shows a product to every team on a scope; \"ekanos teams scope show|set <team>\" reads or changes which scopes a team holds.',\n        ],\n      }),\n    );\n  }\n\n  const included = verb === 'add';\n  const result = await client.call((token) =>\n    setScopeProduct(\n      env.host,\n      token,\n      { source: resolved.source, scope, product },\n      included,\n    ),\n  );\n  return ctx.succeed(\n    { host: env.host, ...result },\n    ctx.ui.result({\n      title: result.changed\n        ? `${included ? 'Added' : 'Took'} ${result.product.name} ${included ? 'to' : 'out of'} ${result.scope.name}`\n        : `${result.product.name} was already ${included ? 'in' : 'not in'} ${result.scope.name}`,\n      tone: !included && result.changed ? 'warn' : 'ok',\n      rows: [\n        ['Teams on it', String(result.scope.teamCount)],\n        [\n          'Products',\n          result.scope.products.length > 0\n            ? result.scope.products.map((item) => item.slug).join(', ')\n            : 'none',\n        ],\n      ],\n      notes: [\n        included\n          ? `Every team on ${result.scope.name} sees ${result.product.slug} in the app now.`\n          : `Teams on ${result.scope.name} see ${result.product.slug} only if another of their scopes has it.`,\n      ],\n    }),\n  );\n}\n\nfunction scopeProductSlug(value: string | undefined, verb: string): string {\n  const slug = value?.trim().toLowerCase();\n  if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug)) return slug;\n  throw usageError(\n    value\n      ? `\"${value}\" is not a product slug.`\n      : `sources scopes ${verb} needs a product.`,\n    '\"ekanos sources products\" lists them, e.g. \"ekanos sources scopes add Bronze linear\".',\n  );\n}\n\nfunction quoteArg(value: string): string {\n  return /^[A-Za-z0-9._-]+$/.test(value) ? value : `\"${value}\"`;\n}\n\nfunction productSlug(value: string | undefined, verb: string): string {\n  const slug = value?.trim().toLowerCase();\n  if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug)) return slug;\n  throw usageError(\n    value\n      ? `\"${value}\" is not a product slug.`\n      : `sources products ${verb} needs a product.`,\n    '\"ekanos sources products\" lists them, e.g. \"ekanos sources products enable agents\".',\n  );\n}\n\nclass ProductsClient {\n  constructor(\n    private readonly env: AuthEnvironment,\n    private session: StoredSession,\n  ) {}\n\n  async call<T>(\n    send: (accessToken: string) => Promise<SourceProductsApiResult<T>>,\n  ): Promise<T> {\n    let result = await send(this.session.accessToken);\n    if (result.status === 'unauthorized') {\n      this.session = await refreshStoredSession(this.env, this.session);\n      result = await send(this.session.accessToken);\n    }\n    if (result.status === 'ok') return result.data;\n    throw authRequiredError(\n      `The session for ${this.env.host} could not authorize the sources call.`,\n      loginHint(this.env),\n    );\n  }\n}\n"]}
+{"version":3,"file":"sources.js","sourceRoot":"","sources":["../../src/commands/sources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAEL,oBAAoB,EACpB,cAAc,EACd,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAGL,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAmB,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAW,SAAS,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAkBlE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAe,EACf,IAAiB;;IAEjB,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAG,IAAI,CAAC,WAAW,mCAAI,EAAE,CAAC;IACrD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,UAAU,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,UAAU,KAAK,OAAO;YAAE,OAAO,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,UAAU,KAAK,QAAQ;YAAE,OAAO,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACrE,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,UAAU,CACd,+BAA+B,UAAU,IAAI,EAC7C,gPAAgP,CACjP,CAAC;QACJ,CAAC;QACD,OAAO,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAEpC,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAE5D,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACrC,4BAA4B,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEhD,OAAO,GAAG,CAAC,OAAO,CAChB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,EACzD,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAE1D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GACV,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAC3C,CAAC,CAAE,MAA+B,CAAC,MAAM;QACzC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC3D,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QACf,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,kGAAkG;AAClG,MAAM,mBAAmB,GAA2C;IAClE,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,aAAa;CAC3B,CAAC;AAEF,SAAS,YAAY,CACnB,EAAM,EACN,IAAY,EACZ,OAAqB,EACrB,YAA2B;IAE3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,MAAM,CAAC;YACf,mEAAmE;YACnE,oDAAoD;YACpD,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACjC,KAAK,EAAE,CAAC,iDAAiD,CAAC;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GACZ,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IAEhE,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,SAAS,CAAC,IAAI,CAAC,EAAE;QACrE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAoB,EAAE,kBAAC;YAC9C,MAAM,CAAC,IAAI;YACX;sBACE,MAAM,CAAC,IAAI,mCAAI,WAAW;gBAC1B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE,CAAC,IAAI,CAAC,KAAK,CAAC;SACd,GAAA,CAAC;QACF,KAAK,EAAE,QAAQ;YACb,CAAC,CAAC;gBACE,yCAAyC,YAAY,oCAAoC;aAC1F;YACH,CAAC,CAAC,EAAE;KACP,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,WAAW,CACxB,GAAe,EACf,IAAiB,EACjB,IAAuB;IAEvB,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,UAAU,CACd,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EACpC,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,UAAU,CACd,wCAAwC,IAAI,IAAI,EAChD,iIAAiI,CAClI,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,iBAAiB,CACrB,aAAa,OAAO,wGAAwG,EAC5H,sDAAsD,OAAO,QAAQ,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;QACnE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEzD,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CACrD,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,IAA2B,EAAE,EAAE,CAC7C,IAAI,CAAC,QAAQ;aACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;aACtC,GAAG,CAAC,CAAC,KAAK,EAAoB,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI;YACV,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,4BAA4B,EAAE;SAC/M,CAAC,CAAC;QACP,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB;YACE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,kBAAkB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC3C,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC;aAC3B,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,mBAAmB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC5C,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC;gBAC3B,KAAK,EAAE;oBACL,IAAI,CAAC,SAAS;wBACZ,CAAC,CAAC,kEAAkE;wBACpE,CAAC,CAAC,IAAI,CAAC,cAAc;4BACnB,CAAC,CAAC,wLAAwL;4BAC1L,CAAC,CAAC,qGAAqG;oBAC3G,qFAAqF;iBACtF;aACF,CAAC;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,KAAK,QAAQ,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAChC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO;QACP,OAAO;KACR,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,MAAM,GAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC,OAAO;YACnB,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YACxF,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,gBAAgB,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACjG,IAAI,EAAE;YACJ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7B;gBACE,aAAa;gBACb,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM;oBAC7B,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM;wBAC/B,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,iBAAiB;aACxB;SACF;QACD,KAAK,EACH,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,aAAa;YAC9C,CAAC,CAAC;gBACE,sCAAsC,MAAM,CAAC,OAAO,CAAC,IAAI,2BAA2B;aACrF;YACH,CAAC,CAAC,EAAE;KACT,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,SAAS,CACtB,GAAe,EACf,IAAiB,EACjB,IAAuB;IAEvB,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;IACpD,MAAM,KAAK,GACT,uIAAuI,CAAC;IAC1I,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9D,MAAM,UAAU,CAAC,sCAAsC,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,UAAU,CAAC,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,UAAU,CACd,kBAAkB,IAAI,+BAA+B,EACrD,KAAK,CACN,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,MAAM,iBAAiB,CACrB,UAAU,OAAO,WAAW,KAAK,6CAA6C,KAAK,2CAA2C,EAC9H,mDAAmD,QAAQ,CAAC,KAAM,CAAC,IAAI,OAAO,QAAQ,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;QACnE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEzD,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CACpD,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,wBAAwB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACjD,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;gBACrD,KAAK,EAAE;oBACL,qEAAqE;iBACtE;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;YACZ,KAAK,EAAE,qBAAqB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAsB,EAAE,CAAC;gBACnD,KAAK,CAAC,IAAI;gBACV;oBACE,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC7F,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;wBACvB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;wBACpD,CAAC,CAAC,aAAa;iBAClB;aACF,CAAC;YACF,KAAK,EAAE;gBACL,kEAAkE;gBAClE,0KAA0K;aAC3K;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,KAAK,KAAK,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,eAAe,CACb,GAAG,CAAC,IAAI,EACR,KAAK,EACL,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAC3C,QAAQ,CACT,CACF,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,MAAM,GAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC,OAAO;YACnB,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YAC5G,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,gBAAgB,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;QAC3F,IAAI,EAAE,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACjD,IAAI,EAAE;YACJ,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/C;gBACE,UAAU;gBACV,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;oBAC9B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC3D,CAAC,CAAC,MAAM;aACX;SACF;QACD,KAAK,EAAE;YACL,QAAQ;gBACN,CAAC,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,IAAI,SAAS,MAAM,CAAC,OAAO,CAAC,IAAI,kBAAkB;gBAClF,CAAC,CAAC,YAAY,MAAM,CAAC,KAAK,CAAC,IAAI,QAAQ,MAAM,CAAC,OAAO,CAAC,IAAI,0CAA0C;SACvG;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB,EAAE,IAAY;IAC/D,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,IAAI,KAAK,0BAA0B;QACrC,CAAC,CAAC,kBAAkB,IAAI,mBAAmB,EAC7C,uFAAuF,CACxF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,IAAY;IAC1D,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,IAAI,KAAK,0BAA0B;QACrC,CAAC,CAAC,oBAAoB,IAAI,mBAAmB,EAC/C,qFAAqF,CACtF,CAAC;AACJ,CAAC;AAED,MAAM,cAAc;IAClB,YACmB,GAAoB,EAC7B,OAAsB;mBADb,GAAG;uBACZ,OAAO;IACd,CAAC;IAEJ,KAAK,CAAC,IAAI,CACR,IAAkE;QAElE,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAC/C,MAAM,iBAAiB,CACrB,mBAAmB,IAAI,CAAC,GAAG,CAAC,IAAI,wCAAwC,EACxE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CACpB,CAAC;IACJ,CAAC;CACF","sourcesContent":["import * as fs from 'node:fs';\nimport * as path from 'node:path';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport { loginHint } from '../auth/host-trust';\nimport {\n  type AuthEnvironment,\n  refreshStoredSession,\n  requireSession,\n  resolveAuthEnvironment,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport { authRequiredError, invalidStateError, usageError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { EKANOS_CONFIG_FILENAME } from '../project';\nimport { fetchSeatsWithOneRefresh } from '../seats';\nimport {\n  type SourceProduct,\n  type SourceProductsApiResult,\n  listSourceProducts,\n  setSourceProduct,\n} from '../source-products-api';\nimport { resolveSourceTarget } from '../source-target';\nimport { type SourceSeat, stillUnauthorizedSourceSeats } from '../sources-api';\nimport { listProductScopes, setScopeProduct } from '../teams-api';\nimport { type Ui, pluralize, shortHost } from '../ui';\nimport { runSourcePeople, runSourceRoles } from './sources-roles';\n\nexport interface SourcesArgs {\n  host?: string;\n  /** `products [enable|disable <product>]`, `scopes [add|remove <scope> <product>]`; none lists the sources. */\n  positionals?: readonly string[];\n  source?: string;\n  yes?: boolean;\n  /** `roles` and `people`: their flags (`--level`, `--permission`, `--search` …). */\n  flags?: Record<string, string | boolean | string[]>;\n  /** `roles delete` asks at a terminal; the test seams for it. */\n  stdinIsTTY?: boolean;\n  ask?: (question: string) => Promise<string>;\n  /** Where a project's ekanos.json may sit — its `source` field, if any, is the marker. */\n  dir: string;\n  env: Record<string, string | undefined>;\n}\n\n/**\n * `sources` — list every source the caller holds a developer or admin seat\n * on, the read half of the publish-target-verification story.\n *\n * The list itself is the mechanism that makes `publish` safe: a partner (or\n * an agent acting for one) can always answer \"which sources can I possibly\n * publish to?\" before running `ekanos use` or passing `--source`.\n */\nexport async function runSources(\n  ctx: CliContext,\n  args: SourcesArgs,\n): Promise<ExitCode> {\n  const [subcommand, ...rest] = args.positionals ?? [];\n  if (subcommand !== undefined) {\n    if (subcommand === 'scopes') return runScopes(ctx, args, rest);\n    if (subcommand === 'roles') return runSourceRoles(ctx, args, rest);\n    if (subcommand === 'people') return runSourcePeople(ctx, args, rest);\n    if (subcommand !== 'products') {\n      throw usageError(\n        `Unknown sources subcommand \"${subcommand}\".`,\n        'Run \"ekanos sources\" to list your sources, \"ekanos sources products [enable|disable <product>]\", \"ekanos sources scopes [add|remove <scope> <product>]\", \"ekanos sources roles [list|create|update|delete <role>]\" or \"ekanos sources people\".',\n      );\n    }\n    return runProducts(ctx, args, rest);\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const session = requireSession(env);\n\n  const result = await fetchSeatsWithOneRefresh(env, session);\n\n  if (result.status === 'unauthorized') {\n    stillUnauthorizedSourceSeats(env);\n  }\n\n  const activeSource = readActiveSource(args.dir);\n\n  return ctx.succeed(\n    { host: env.host, sources: result.sources, activeSource },\n    humanSummary(ctx.ui, env.host, result.sources, activeSource),\n  );\n}\n\n/**\n * Best-effort, lenient read of ekanos.json's `source` field — mirrors\n * `readProjectHost` in `auth/session.ts`. A missing, unparseable, or\n * sourceless ekanos.json (or no project at all) simply means \"no active\n * source to mark\", never an error: `sources` must answer outside a project\n * too.\n */\nexport function readActiveSource(dir: string): string | null {\n  const configPath = path.join(dir, EKANOS_CONFIG_FILENAME);\n\n  let raw: string;\n  try {\n    raw = fs.readFileSync(configPath, 'utf8');\n  } catch {\n    return null;\n  }\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    return null;\n  }\n\n  const source =\n    typeof parsed === 'object' && parsed !== null\n      ? (parsed as { source?: unknown }).source\n      : undefined;\n\n  return typeof source === 'string' && source.trim().length > 0\n    ? source.trim()\n    : null;\n}\n\n/** Why a product is not enabled, by the lever that would enable it — the words `catalog` uses. */\nconst NOT_ENABLED_BECAUSE: Record<SourceProduct['lever'], string> = {\n  flag: 'its Flag is off',\n  plan: 'no active plan',\n  entitlement: 'not granted',\n};\n\nfunction humanSummary(\n  ui: Ui,\n  host: string,\n  sources: SourceSeat[],\n  activeSource: string | null,\n): string {\n  if (sources.length === 0) {\n    return ui.result({\n      // Read by any signed-in account, a team member's too: no word here\n      // may imply the host serves more than one customer.\n      title: 'No partner seats',\n      tone: 'warn',\n      rows: [['Host', shortHost(host)]],\n      notes: ['This account has no partner seats on this host.'],\n    });\n  }\n\n  const orphaned =\n    activeSource && !sources.some((s) => s.slug === activeSource);\n\n  return ui.result({\n    title: `${pluralize(sources.length, 'source')} on ${shortHost(host)}`,\n    rows: sources.map((source): [string, string] => [\n      source.slug,\n      [\n        source.name ?? '(unnamed)',\n        source.roles.join(', '),\n        ...(source.slug === activeSource ? [ui.accent('this project')] : []),\n      ].join(' · '),\n    ]),\n    notes: orphaned\n      ? [\n          `This project's ekanos.json points at \"${activeSource}\", which is not in the list above.`,\n        ]\n      : [],\n  });\n}\n\n/**\n * `sources products` — the catalog as one Source has it: every product, its\n * kind (Experience or Integration), and whether it is enabled for the Source.\n * `enable|disable <product>` switch one through the levers `/admin` uses\n * (`attachProductToSource` / `detachProductFromSource` for an Integration,\n * the Experience lever for an Experience). A Source admin switches the\n * integrations their Source built (`owned`); anything else is a super-admin\n * grant, which an `ekanos login` session never carries, so from the terminal\n * that write answers with where to do it.\n */\nasync function runProducts(\n  ctx: CliContext,\n  args: SourcesArgs,\n  rest: readonly string[],\n): Promise<ExitCode> {\n  const [verb, rawProduct, ...extra] = rest;\n  if (extra.length > 0) {\n    throw usageError(\n      `Unexpected argument \"${extra[0]}\".`,\n      'Run \"ekanos sources products [enable|disable <product>] [--source <slug>]\".',\n    );\n  }\n  if (verb !== undefined && verb !== 'enable' && verb !== 'disable') {\n    throw usageError(\n      `Unknown sources products subcommand \"${verb}\".`,\n      'Run \"ekanos sources products\", \"ekanos sources products enable <product>\" or \"ekanos sources products disable <product> --yes\".',\n    );\n  }\n  const product = verb ? productSlug(rawProduct, verb) : null;\n  if (verb === 'disable' && !args.yes) {\n    throw invalidStateError(\n      `Disabling ${product} removes it from the Source: its plans, widget settings, Source credentials and workspaces go with it.`,\n      `Re-run with --yes: ekanos sources products disable ${product} --yes`,\n    );\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(env, requireSession(env), {\n    source: args.source,\n    dir: args.dir,\n  });\n  const client = new ProductsClient(env, resolved.session);\n\n  if (!verb || !product) {\n    const list = await client.call((token) =>\n      listSourceProducts(env.host, token, resolved.source),\n    );\n    const byKind = (kind: SourceProduct['kind']) =>\n      list.products\n        .filter((entry) => entry.kind === kind)\n        .map((entry): [string, string] => [\n          entry.slug,\n          `${entry.enabled ? '✓ enabled' : `✗ not enabled (${NOT_ENABLED_BECAUSE[entry.lever]})`} · ${entry.name}${entry.owned ? ' · built by this Source' : ''}${entry.registered ? '' : ' · no package on this host'}`,\n        ]);\n    return ctx.succeed(\n      { host: env.host, ...list },\n      [\n        ctx.ui.result({\n          title: `Experiences on ${list.source.slug}`,\n          rows: byKind('experience'),\n        }),\n        ctx.ui.result({\n          title: `Integrations on ${list.source.slug}`,\n          rows: byKind('integration'),\n          notes: [\n            list.canEnable\n              ? '\"ekanos sources products enable|disable <product>\" switches one.'\n              : list.canEnableOwned\n                ? '\"ekanos sources products enable|disable <product>\" switches one built by this Source; any other is a super-admin grant, made in the browser at /admin/sources → the Source → Products.'\n                : 'Enabling one is a super-admin grant, made in the browser at /admin/sources → the Source → Products.',\n            '\"ekanos teams connect <team> <product>\" connects an enabled integration for a team.',\n          ],\n        }),\n      ].join('\\n'),\n    );\n  }\n\n  const enabled = verb === 'enable';\n  const result = await client.call((token) =>\n    setSourceProduct(env.host, token, {\n      source: resolved.source,\n      product,\n      enabled,\n    }),\n  );\n  return ctx.succeed(\n    { host: env.host, ...result },\n    ctx.ui.result({\n      title: result.changed\n        ? `${enabled ? 'Enabled' : 'Disabled'} ${result.product.name} for ${result.source.slug}`\n        : `${result.product.name} was already ${enabled ? 'enabled' : 'off'} for ${result.source.slug}`,\n      rows: [\n        ['Kind', result.product.kind],\n        [\n          'Switched by',\n          result.product.lever === 'flag'\n            ? 'its Flag'\n            : result.product.lever === 'plan'\n              ? 'its plan'\n              : 'the entitlement',\n        ],\n      ],\n      notes:\n        enabled && result.product.kind === 'integration'\n          ? [\n              `Next: \"ekanos teams connect <team> ${result.product.slug}\" connects it for a team.`,\n            ]\n          : [],\n    }),\n  );\n}\n\n/**\n * `sources scopes` — the Source's product scopes, for its Source admin: each\n * scope's products and how many teams hold it. Once a Source has a scope,\n * each team sees in the app only its scopes' products. `add|remove <scope>\n * <product>` changes one scope (by name or id) through what\n * `/admin/sources/[id]/product-scopes` uses; a product can only be added if\n * the Source has it. Taking one out hides it from every team on the scope\n * that no other of its scopes shows it to, so that needs `--yes`.\n */\nasync function runScopes(\n  ctx: CliContext,\n  args: SourcesArgs,\n  rest: readonly string[],\n): Promise<ExitCode> {\n  const [verb, rawScope, rawProduct, ...extra] = rest;\n  const usage =\n    'Run \"ekanos sources scopes\", \"ekanos sources scopes add <scope> <product>\" or \"ekanos sources scopes remove <scope> <product> --yes\".';\n  if (verb !== undefined && verb !== 'add' && verb !== 'remove') {\n    throw usageError(`Unknown sources scopes subcommand \"${verb}\".`, usage);\n  }\n  if (extra.length > 0) {\n    throw usageError(`Unexpected argument \"${extra[0]}\".`, usage);\n  }\n  const scope = rawScope?.trim();\n  if (verb && !scope) {\n    throw usageError(\n      `sources scopes ${verb} needs a scope and a product.`,\n      usage,\n    );\n  }\n  const product = verb ? scopeProductSlug(rawProduct, verb) : null;\n  if (verb === 'remove' && !args.yes) {\n    throw invalidStateError(\n      `Taking ${product} out of ${scope} hides it, in the app, from every team on ${scope} that no other of its scopes shows it to.`,\n      `Re-run with --yes: ekanos sources scopes remove ${quoteArg(scope!)} ${product} --yes`,\n    );\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(env, requireSession(env), {\n    source: args.source,\n    dir: args.dir,\n  });\n  const client = new ProductsClient(env, resolved.session);\n\n  if (!verb || !product || !scope) {\n    const list = await client.call((token) =>\n      listProductScopes(env.host, token, resolved.source),\n    );\n    if (list.scopes.length === 0) {\n      return ctx.succeed(\n        { host: env.host, ...list },\n        ctx.ui.result({\n          title: `No product scopes on ${list.source.slug}`,\n          rows: [['Teams see', 'every product the Source has']],\n          notes: [\n            'Scopes are created at /admin/sources → the Source → Product scopes.',\n          ],\n        }),\n      );\n    }\n    return ctx.succeed(\n      { host: env.host, ...list },\n      ctx.ui.result({\n        title: `Product scopes on ${list.source.slug}`,\n        rows: list.scopes.map((entry): [string, string[]] => [\n          entry.name,\n          [\n            `${pluralize(entry.teamCount, 'team')}${entry.isDefault ? ' · given to every new team' : ''}`,\n            entry.products.length > 0\n              ? entry.products.map((item) => item.slug).join(', ')\n              : 'no products',\n          ],\n        ]),\n        notes: [\n          'A team sees in the app only the products of the scopes it holds.',\n          '\"ekanos sources scopes add <scope> <product>\" shows a product to every team on a scope; \"ekanos teams scope show|set <team>\" reads or changes which scopes a team holds.',\n        ],\n      }),\n    );\n  }\n\n  const included = verb === 'add';\n  const result = await client.call((token) =>\n    setScopeProduct(\n      env.host,\n      token,\n      { source: resolved.source, scope, product },\n      included,\n    ),\n  );\n  return ctx.succeed(\n    { host: env.host, ...result },\n    ctx.ui.result({\n      title: result.changed\n        ? `${included ? 'Added' : 'Took'} ${result.product.name} ${included ? 'to' : 'out of'} ${result.scope.name}`\n        : `${result.product.name} was already ${included ? 'in' : 'not in'} ${result.scope.name}`,\n      tone: !included && result.changed ? 'warn' : 'ok',\n      rows: [\n        ['Teams on it', String(result.scope.teamCount)],\n        [\n          'Products',\n          result.scope.products.length > 0\n            ? result.scope.products.map((item) => item.slug).join(', ')\n            : 'none',\n        ],\n      ],\n      notes: [\n        included\n          ? `Every team on ${result.scope.name} sees ${result.product.slug} in the app now.`\n          : `Teams on ${result.scope.name} see ${result.product.slug} only if another of their scopes has it.`,\n      ],\n    }),\n  );\n}\n\nfunction scopeProductSlug(value: string | undefined, verb: string): string {\n  const slug = value?.trim().toLowerCase();\n  if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug)) return slug;\n  throw usageError(\n    value\n      ? `\"${value}\" is not a product slug.`\n      : `sources scopes ${verb} needs a product.`,\n    '\"ekanos sources products\" lists them, e.g. \"ekanos sources scopes add Bronze linear\".',\n  );\n}\n\nfunction quoteArg(value: string): string {\n  return /^[A-Za-z0-9._-]+$/.test(value) ? value : `\"${value}\"`;\n}\n\nfunction productSlug(value: string | undefined, verb: string): string {\n  const slug = value?.trim().toLowerCase();\n  if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug)) return slug;\n  throw usageError(\n    value\n      ? `\"${value}\" is not a product slug.`\n      : `sources products ${verb} needs a product.`,\n    '\"ekanos sources products\" lists them, e.g. \"ekanos sources products enable agents\".',\n  );\n}\n\nclass ProductsClient {\n  constructor(\n    private readonly env: AuthEnvironment,\n    private session: StoredSession,\n  ) {}\n\n  async call<T>(\n    send: (accessToken: string) => Promise<SourceProductsApiResult<T>>,\n  ): Promise<T> {\n    let result = await send(this.session.accessToken);\n    if (result.status === 'unauthorized') {\n      this.session = await refreshStoredSession(this.env, this.session);\n      result = await send(this.session.accessToken);\n    }\n    if (result.status === 'ok') return result.data;\n    throw authRequiredError(\n      `The session for ${this.env.host} could not authorize the sources call.`,\n      loginHint(this.env),\n    );\n  }\n}\n"]}

package/dist/commands/team-agent-readiness.d.ts

@@ -1,5 +1,17 @@
 import type { AgentRunSummary, ChannelRequirement, Requirement, TeamAgentEntry, TeamAgentHold, TeamIntegrationEvent } from '@ekanos/integration-schema';
 import { type ScopeFacts } from './scope-notice.js';
+/**
+ * "Is this agent live on this team, and if not, why?" — one answer for
+ * `teams agents show` and the summary line of `teams agents list`, built only
+ * from what the host already reports (CLI audit 2026-10-19, §3).
+ *
+ * Live is: on, on a published version, every connection it needs made,
+ * access confirmed by someone who sets it up (a team manager or the Source
+ * admin, plan 247.2), at least one trigger on, and every trigger's events
+ * able to reach it. Each gap is a step with one fix, in the order they have
+ * to be done; the first step's fix is "Next". A publish holds no team, so
+ * there is no update waiting.
+ */
 export interface ReadinessStep {
     /** What is missing, in words. */
     problem: string;
@@ -26,11 +38,15 @@ export declare function describeHold(hold: TeamAgentHold): string;
 export declare const REASON_WORDS: Record<NonNullable<Requirement['reason']>, string>;
 /** The one command that makes a requirement, or null when none can. */
 export declare function requirementFix(item: Requirement, team: string, source: string): string | null;
-/** The one command that makes a channel ready, or the app step. */
+/**
+ * The one command that makes a channel ready. An older host sends no
+ * `arrival`: the channel's key (`<product>:webhook`, `<product>:route`,
+ * `<product>:<connection>`) still says which command it is.
+ */
 export declare function channelFix(channel: ChannelRequirement, team: string, source: string): string;
 /** How the events of a ready channel reach the agent. */
 export declare function reachedVia(channel: ChannelRequirement): string;
-/** A fix as a line: a command is run in the terminal, an app step is not. */
+/** A fix as a line: a command is run in the terminal; anything else is a person's step. */
 export declare function fixLine(fix: string): string;
 /** "Live: yes" or "Live: no — N steps left". */
 export declare function liveLine(readiness: AgentReadiness): string;